Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-02-2015 01
Ran by Łukasz (administrator) on ŁUKASZ-KOMPUTER on 20-02-2015 09:59:31
Running from C:\Users\Łukasz\Downloads\Programs
Loaded Profiles: Łukasz (Available profiles: Łukasz)
Platform: Microsoft Windows 7 Home Basic  (X86) OS Language: Polski (Polska)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
() C:\Program Files\Gigabyte\EasySaver\essvr.exe
() C:\Windows\System32\PnkBstrA.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\Windows\System32\slui.exe
() C:\Users\Łukasz\Downloads\Programs\hwwtsn9u.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(BitTorrent Inc.) C:\Users\Łukasz\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11734240 2012-12-13] (Realtek Semiconductor)
HKLM\...\Run: [NeroFilterCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [3117344 2012-03-07] (ESET)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM\...\Run: [ApnUpdater] => "C:\Program Files\Ask.com\Updater\Updater.exe"
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [Hoolapp Android] => C:\Users\Łukasz\AppData\Roaming\HoolappForAndroid\hoolapp.exe [0 2015-02-16] ()
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [ChomikBox] => C:\Program Files\ChomikBox\chomikbox.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [UpdateChecker] => C:\Program Files\SqueakyChocolate\UpdateChecker\UpdateCheckerApp.exe [7168 2013-08-25] (SqueakyChocolate, LLC)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3665488 2013-08-06] (Tonec Inc.)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [EpicScale] => [X]
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [GG] => C:\Users\Łukasz\AppData\Local\GG\Application\gghub.exe [4023872 2015-02-03] (GG Network S.A.)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [Steam] => C:\Program Files\Steam\Steam.exe [1610664 2015-02-19] (Valve Corporation)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {2cb8db91-5989-11e2-99d7-001fd0dfe546} - K:\setup.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {33eecd3c-fb8c-11e3-956c-001fd0dfe546} - K:\Setup.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {7159ad84-5571-11e2-845f-001fd0dfe546} - K:\autorun.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {e1ed8d71-9650-11e2-8c86-001fd0dfe546} - K:\setup.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {f4273140-72c1-11e2-a110-806e6f6e6963} - K:\SH4Autorun.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {f4273287-72c1-11e2-a110-001fd0dfe546} - L:\Autorun.exe
Startup: C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk
ShortcutTarget: IMVU.lnk -> C:\Users\Łukasz\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe ()
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll (Tonec Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dspp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dspp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&q={searchTerms}
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1424273314&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&q={searchTerms}
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1424273314&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&q={searchTerms}
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.pl/
URLSearchHook: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll No File
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dspp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dspp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dspp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dspp&ts=1424273368&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {48860B13-5AD1-4154-B4EC-E2336D125D45} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {B224AA02-F7C8-3A2B-859F-560B80767E4A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {BB66CC2C-C777-412B-BA89-AB22B19CF40E} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> {F2C54EB2-4410-4410-BA00-0B63335D73CE} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742&ts=1424273410&type=default&q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: IVONA Reader -> {8664889D-ED18-4713-918F-E2BB69D8452B} ->  No File
BHO: Ask Toolbar -> {D4027C7F-154A-4066-A1AD-4243D8127440} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} -  No File
Toolbar: HKLM - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Toolbar: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1424273314&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742

FireFox:
========
FF ProfilePath: C:\Users\Łukasz\AppData\Roaming\Mozilla\Firefox\Profiles\8uzdam4c.default-1420805030088
FF NewTab: hxxp://www.mystartsearch.com/newtab/?type=nt&ts=1424273314&from=amt&uid=SAMSUNGXHD502HI_S1VZJ90S232742
FF SelectedSearchEngine: mystartsearch
FF Homepage: www.google.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3215043942-3594844569-900473125-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Łukasz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3215043942-3594844569-900473125-1000: ubisoft.com/uplaypc -> D:\Gry\Nowy folder (3)\npuplaypc.dll No File
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mystartsearch.xml
FF Extension: Adblock Plus - C:\Users\Łukasz\AppData\Roaming\Mozilla\Firefox\Profiles\8uzdam4c.default-1420805030088\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-10]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2015-01-31]
FF HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Łukasz\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Łukasz\AppData\Roaming\IDM\idmmzcc5 [2014-08-06]
FF HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Łukasz\AppData\Roaming\IDM\idmmzcc5

Chrome: 
=======
CHR Profile: C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\Users\Łukasz\AppData\Local\APN\GoogleCRXs\apnorjtoolbar.crx [2012-12-10]
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2013-09-13]
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx [Not Found]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [913144 2012-03-07] (ESET)
R2 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [80392 2008-07-17] ()
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [786256 2014-07-14] (Nero AG)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2013-11-28] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
S2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [X]
S2 Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [X]
S2 Update Deal Keeper; "C:\Program Files\Deal Keeper\updateDealKeeper.exe" [X]
S2 Update Greener Web; "C:\Program Files\Greener Web\updateGreenerWeb.exe" [X]
S2 Util Deal Keeper; "C:\Program Files\Deal Keeper\bin\utilDealKeeper.exe" [X]
S2 Util Greener Web; "C:\Program Files\Greener Web\bin\utilGreenerWeb.exe" [X]
S2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-06-24] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [169080 2012-03-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [120152 2012-03-14] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [103112 2012-03-14] (ESET)
R3 gdrv; C:\Windows\gdrv.sys [16608 2015-02-20] (Windows (R) 2000 DDK provider)
S3 AndNetDiag; system32\DRIVERS\lgandnetdiag.sys [X]
S3 ANDNetModem; system32\DRIVERS\lgandnetmodem.sys [X]
S3 mcdbus; system32\DRIVERS\mcdbus.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad32v.sys [X]
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X]
U3 ugrdipoc; \??\C:\Users\UKASZ~1\AppData\Local\Temp\ugrdipoc.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-20 09:56 - 2015-02-20 09:59 - 00000000 ____D () C:\FRST
2015-02-20 09:55 - 2015-02-20 09:55 - 00129327 _____ () C:\Users\Łukasz\Desktop\GMER.TXT
2015-02-20 09:51 - 2015-02-20 09:51 - 00000000 _____ () C:\Users\Łukasz\Desktop\Nowy dokument tekstowy (4).txt
2015-02-20 09:51 - 2015-02-20 09:51 - 00000000 _____ () C:\Users\Łukasz\Desktop\Nowy dokument tekstowy (3).txt
2015-02-20 09:05 - 2015-02-20 09:05 - 00000789 _____ () C:\Users\Public\Desktop\Tom Clancy`s H.A.W.X..lnk
2015-02-19 14:43 - 2015-02-19 14:43 - 00159192 _____ () C:\Windows\Minidump\021915-15943-01.dmp
2015-02-19 14:09 - 2015-02-19 14:09 - 00000000 ____D () C:\Program Files\dumps
2015-02-18 17:06 - 2015-02-18 17:06 - 00000000 ____D () C:\Program Files\predm
2015-02-18 16:32 - 2015-02-18 16:32 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\00000000-1424277125-0000-0000-001FD0DFE546
2015-02-18 16:30 - 2015-02-19 14:13 - 00000000 ____D () C:\Program Files\XTab
2015-02-18 16:30 - 2015-02-18 16:30 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-02-18 16:29 - 2015-02-19 14:13 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-02-17 20:47 - 2015-02-17 20:47 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Warner Bros. Interactive Entertainment
2015-02-17 20:43 - 2015-02-17 20:43 - 00000893 _____ () C:\Users\Public\Desktop\LEGO MARVEL Super Heroes.lnk
2015-02-17 20:43 - 2015-02-17 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO MARVEL Super Heroes
2015-02-17 15:25 - 2015-02-17 15:25 - 00001034 _____ () C:\Users\Łukasz\Desktop\DAEMON Tools Lite.lnk
2015-02-17 14:00 - 2015-02-20 08:31 - 00000000 ____D () C:\Program Files\Steam
2015-02-17 14:00 - 2015-02-17 14:00 - 00002527 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-02-17 14:00 - 2015-02-17 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-02-17 13:28 - 2015-02-17 13:28 - 00000000 ____D () C:\Users\Łukasz\Documents\1C SoftClub
2015-02-17 13:20 - 2015-02-17 14:38 - 00000000 ____D () C:\ProgramData\Solidshield
2015-02-16 12:39 - 2015-02-16 12:39 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\APN
2015-02-16 09:54 - 2014-01-27 09:42 - 00034304 _____ (Microsoft) C:\Windows\system32\NTSVC.ocx
2015-02-16 09:54 - 2013-10-12 05:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\temp.000
2015-02-16 09:54 - 2009-07-14 04:15 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\temp.002
2015-02-16 09:54 - 2009-07-14 02:43 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\temp.001
2015-02-16 09:54 - 2004-03-09 00:00 - 00124688 _____ (Microsoft Corporation) C:\Windows\system32\Mswinsck.ocx
2015-02-16 09:54 - 1998-06-24 00:00 - 00295514 _____ () C:\Windows\system32\Vb6.olb
2015-02-14 15:54 - 2015-02-14 15:54 - 00000000 ____D () C:\Users\Łukasz\Documents\Electronic Arts
2015-02-14 15:53 - 2014-09-16 18:45 - 00447752 _____ (On2.com) C:\Windows\system32\vp6vfw.dll
2015-02-14 15:18 - 2015-02-14 15:18 - 00000000 _____ () C:\Windows\system32\config\SOFTWARE.sav
2015-02-14 15:07 - 2015-02-14 15:07 - 00000955 _____ () C:\Users\Public\Desktop\The Sims 4.lnk
2015-02-14 15:07 - 2015-02-14 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4
2015-02-14 14:56 - 2015-02-14 15:18 - 00001660 _____ () C:\Windows\system32\ASOROSet.bin
2015-02-14 14:56 - 2015-02-14 14:56 - 00000000 ____D () C:\Windows\system32\config\RCCBakup
2015-02-14 14:49 - 2015-02-18 15:15 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Solvusoft
2015-02-09 18:24 - 2015-02-09 18:24 - 00000000 ____D () C:\Users\Łukasz\Documents\PortableAppsBackup
2015-02-09 18:15 - 2015-02-09 18:28 - 00000000 ____D () C:\ProgramData\Skype
2015-02-09 18:15 - 2015-02-09 18:27 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Skype
2015-02-09 18:15 - 2015-02-09 18:15 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\Skype
2015-02-09 18:05 - 2015-02-09 18:05 - 00000794 _____ () C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-02-09 18:04 - 2015-02-20 09:59 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\uTorrent
2015-02-09 18:04 - 2015-02-09 18:04 - 00000000 ____D () C:\ProgramData\APN
2015-02-08 15:10 - 2015-02-08 15:11 - 00000000 ___SD () C:\Users\Łukasz\GG dysk
2015-02-08 15:10 - 2015-02-08 15:10 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\OpenFM
2015-02-08 15:09 - 2015-02-09 18:30 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\OpenFM
2015-02-08 15:09 - 2015-02-08 15:09 - 00001110 _____ () C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2015-02-08 15:09 - 2015-02-08 15:09 - 00001102 _____ () C:\Users\Łukasz\Desktop\GG.lnk
2015-02-06 18:06 - 2015-02-06 18:06 - 00001632 _____ () C:\Users\Public\Desktop\Angry Birds Space.lnk
2015-02-06 18:05 - 2015-02-06 18:06 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Rovio Entertainment Ltd
2015-02-06 18:05 - 2015-02-06 18:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio Entertainment Ltd
2015-02-06 16:29 - 2015-02-15 21:05 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\Arma 3
2015-02-06 16:29 - 2015-02-06 16:29 - 00000000 ____D () C:\ProgramData\Bohemia Interactive
2015-02-06 11:23 - 2015-02-14 21:24 - 00000000 ____D () C:\ProgramData\EpicScale
2015-02-05 20:01 - 2015-02-05 20:01 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-02-05 20:01 - 2015-02-05 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-02-05 20:01 - 2015-02-05 20:01 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-02-04 13:52 - 2015-02-04 13:52 - 00026921 _____ () C:\Users\Łukasz\Desktop\hs_err_pid13848.log
2015-02-02 20:52 - 2015-02-02 20:52 - 00159176 _____ () C:\Windows\Minidump\020215-17799-01.dmp
2015-01-31 18:31 - 2015-01-31 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-01-31 18:31 - 2015-01-31 18:31 - 00000000 ____D () C:\ProgramData\ESET
2015-01-31 18:31 - 2015-01-31 18:31 - 00000000 ____D () C:\Program Files\ESET
2015-01-31 18:20 - 2015-01-31 19:02 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\NVIDIA Corporation
2015-01-31 18:20 - 2015-01-31 18:20 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2015-01-31 18:18 - 2014-07-02 06:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2015-01-31 18:15 - 2014-07-02 21:54 - 24198088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2015-01-31 18:15 - 2014-07-02 21:54 - 15296456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-31 18:15 - 2014-07-02 21:54 - 11283344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-31 18:15 - 2014-07-02 21:54 - 11222048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-31 18:15 - 2014-07-02 21:54 - 10681176 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-31 18:15 - 2014-07-02 21:54 - 03988952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-31 18:15 - 2014-07-02 21:54 - 01054552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234052.dll
2015-01-31 18:15 - 2014-07-02 21:54 - 00907552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234052.dll
2015-01-31 18:15 - 2014-07-02 21:54 - 00907096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2015-01-31 18:15 - 2014-07-02 21:54 - 00869152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2015-01-27 14:49 - 2015-01-28 13:13 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-20 09:43 - 2012-12-25 21:44 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\DMCache
2015-02-20 09:13 - 2013-03-13 13:02 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-20 09:05 - 2009-07-14 05:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-20 08:33 - 2012-12-24 20:45 - 01105130 _____ () C:\Windows\WindowsUpdate.log
2015-02-20 08:32 - 2014-12-18 10:36 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\IMVU
2015-02-20 08:32 - 2012-12-31 09:46 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\GG
2015-02-20 08:31 - 2014-09-21 18:39 - 00018091 _____ () C:\Windows\setupact.log
2015-02-20 08:31 - 2014-06-19 22:33 - 00000125 _____ () C:\service.log
2015-02-20 08:31 - 2013-03-23 08:47 - 00016608 _____ (Windows (R) 2000 DDK provider) C:\Windows\gdrv.sys
2015-02-20 08:31 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-19 22:04 - 2009-07-14 05:34 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-19 22:04 - 2009-07-14 05:34 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-19 21:09 - 2012-12-24 20:56 - 00006248 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-19 21:09 - 2009-07-14 09:07 - 05498562 _____ () C:\Windows\system32\perfh015.dat
2015-02-19 21:09 - 2009-07-14 09:07 - 01767986 _____ () C:\Windows\system32\perfc015.dat
2015-02-19 14:43 - 2015-01-20 19:47 - 00000000 ____D () C:\Windows\Minidump
2015-02-18 17:58 - 2015-01-06 16:58 - 00000000 ____D () C:\Program Files\Ubisoft
2015-02-18 17:33 - 2014-03-05 13:26 - 00016504 _____ () C:\Windows\PFRO.log
2015-02-18 17:31 - 2012-12-25 21:44 - 00000000 ____D () C:\Users\Łukasz\Downloads\Compressed
2015-02-18 17:18 - 2013-02-09 15:12 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-02-18 17:13 - 2012-12-24 21:23 - 00000000 ____D () C:\Windows\system32\directx
2015-02-18 17:09 - 2014-04-22 17:22 - 00001105 _____ () C:\Users\Łukasz\Desktop\Mozilla Firefox.lnk
2015-02-18 17:09 - 2013-11-20 17:32 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-18 17:09 - 2012-12-24 20:56 - 00001421 _____ () C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-17 17:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-02-17 14:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2015-02-17 14:00 - 2015-01-05 17:05 - 00000000 ____D () C:\Program Files\Common Files\Steam
2015-02-16 11:26 - 2013-02-12 14:55 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\HoolappForAndroid
2015-02-15 16:33 - 2013-05-30 12:14 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\.minecraft
2015-02-14 21:07 - 2014-10-24 17:06 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Security Systems
2015-02-14 15:54 - 2014-10-12 18:59 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-14 15:49 - 2012-12-24 21:00 - 00058928 _____ () C:\Users\Łukasz\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-14 15:20 - 2009-07-14 05:33 - 00271360 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-14 15:18 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2015-02-14 15:18 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2015-02-13 09:40 - 2015-01-18 14:28 - 02166415 _____ () C:\Users\Łukasz\Desktop\DIAG.LOG
2015-02-13 09:30 - 2015-01-06 17:01 - 00222614 _____ () C:\Windows\DirectX.log
2015-02-11 17:10 - 2014-07-07 13:19 - 00000046 _____ () C:\Users\Łukasz\Desktop\teams.dat
2015-02-11 13:20 - 2013-11-19 08:16 - 00001095 _____ () C:\Users\Łukasz\Desktop\Nowy dokument tekstowy.txt
2015-02-09 18:40 - 2014-10-24 17:58 - 00000000 ____D () C:\Program Files\Ashampoo
2015-02-09 18:05 - 2013-01-03 11:16 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\OpenCandy
2015-02-08 15:10 - 2012-12-31 09:46 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\GG
2015-02-08 15:10 - 2012-12-24 20:56 - 00000000 ____D () C:\Users\Łukasz
2015-02-07 20:43 - 2012-12-25 21:44 - 00000000 ____D () C:\Users\Łukasz\Downloads\Video
2015-02-06 18:06 - 2013-03-17 12:32 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Rovio
2015-02-06 11:46 - 2013-12-26 14:50 - 00000000 ____D () C:\Program Files\Internet Download Manager
2015-02-06 11:20 - 2013-12-26 14:51 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\IDM
2015-02-05 20:01 - 2014-06-20 08:42 - 00000000 ____D () C:\ProgramData\Oracle
2015-02-05 20:01 - 2014-06-20 08:41 - 00000000 ____D () C:\Program Files\Java
2015-02-05 17:58 - 2013-03-23 08:49 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2015-02-05 14:14 - 2013-03-13 13:02 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-05 14:14 - 2013-03-13 13:02 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-31 19:04 - 2013-01-07 14:14 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-01-31 19:02 - 2013-04-01 20:04 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-01-31 18:41 - 2013-04-01 20:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-31 10:56 - 2014-12-18 10:36 - 00001842 _____ () C:\Users\Łukasz\Desktop\IMVU.lnk
2015-01-31 10:53 - 2014-12-18 10:36 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\IMVUClient

==================== Files in the root of some directories =======

2013-08-14 08:40 - 2013-09-01 13:32 - 0000000 _____ () C:\Users\Łukasz\AppData\Roaming\.NANotifyHere
2014-10-24 18:27 - 2014-10-24 18:27 - 0000287 _____ () C:\Users\Łukasz\AppData\Roaming\removeAllComponents.bat
2015-01-05 17:02 - 2015-01-05 18:32 - 0000098 _____ () C:\Users\Łukasz\AppData\Roaming\theHunterPrimal_LauncherSettings_live.cfg
2014-10-24 17:06 - 2014-10-24 17:06 - 0000130 _____ () C:\Users\Łukasz\AppData\Roaming\tmp_register.bat
2014-10-24 18:26 - 2014-10-24 18:26 - 0000135 _____ () C:\Users\Łukasz\AppData\Roaming\tmp_unregister.bat
2013-09-15 12:00 - 2013-09-15 12:01 - 0010752 _____ () C:\Users\Łukasz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-03-27 21:37 - 2013-03-27 21:37 - 0007604 _____ () C:\Users\Łukasz\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Łukasz\AppData\Local\Temp\AskSLib.dll
C:\Users\Łukasz\AppData\Local\Temp\bes94D7.exe
C:\Users\Łukasz\AppData\Local\Temp\binkw32.dll
C:\Users\Łukasz\AppData\Local\Temp\cbacabfcebef.exe
C:\Users\Łukasz\AppData\Local\Temp\cbicabfccbgj.exe
C:\Users\Łukasz\AppData\Local\Temp\Core.dll
C:\Users\Łukasz\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Łukasz\AppData\Local\Temp\drm_dyndata_7380006.dll
C:\Users\Łukasz\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Łukasz\AppData\Local\Temp\Engine.dll
C:\Users\Łukasz\AppData\Local\Temp\f9WfK6sVhJ.exe
C:\Users\Łukasz\AppData\Local\Temp\h.a.w.x. 2 crack jak uruchomic__10924_i1469604447_il656411.exe
C:\Users\Łukasz\AppData\Local\Temp\IFC23.dll
C:\Users\Łukasz\AppData\Local\Temp\InstallIMVU_507.0.exe
C:\Users\Łukasz\AppData\Local\Temp\InstallIMVU_513.0.exe
C:\Users\Łukasz\AppData\Local\Temp\InstallManager_GEN_GEN.exe
C:\Users\Łukasz\AppData\Local\Temp\iupdate.exe
C:\Users\Łukasz\AppData\Local\Temp\msvci70.dll
C:\Users\Łukasz\AppData\Local\Temp\msvci70d.dll
C:\Users\Łukasz\AppData\Local\Temp\msvcirt.dll
C:\Users\Łukasz\AppData\Local\Temp\msvcp70.dll
C:\Users\Łukasz\AppData\Local\Temp\msvcp70d.dll
C:\Users\Łukasz\AppData\Local\Temp\msvcp71.dll
C:\Users\Łukasz\AppData\Local\Temp\msvcp71d.dll
C:\Users\Łukasz\AppData\Local\Temp\MSVCR70.dll
C:\Users\Łukasz\AppData\Local\Temp\MSVCR70d.dll
C:\Users\Łukasz\AppData\Local\Temp\MSVCR71.dll
C:\Users\Łukasz\AppData\Local\Temp\MSVCR71d.dll
C:\Users\Łukasz\AppData\Local\Temp\MSVCRt.dll
C:\Users\Łukasz\AppData\Local\Temp\NeroInst.EXE
C:\Users\Łukasz\AppData\Local\Temp\nvStInst.exe
C:\Users\Łukasz\AppData\Local\Temp\ogg.dll
C:\Users\Łukasz\AppData\Local\Temp\ogg_d.dll
C:\Users\Łukasz\AppData\Local\Temp\protect.dll
C:\Users\Łukasz\AppData\Local\Temp\protect.exe
C:\Users\Łukasz\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Łukasz\AppData\Local\Temp\Setup.exe
C:\Users\Łukasz\AppData\Local\Temp\utt8170.tmp.exe
C:\Users\Łukasz\AppData\Local\Temp\utt9714.tmp.exe
C:\Users\Łukasz\AppData\Local\Temp\vorbis.dll
C:\Users\Łukasz\AppData\Local\Temp\vorbisfile.dll
C:\Users\Łukasz\AppData\Local\Temp\vorbisfile_d.dll
C:\Users\Łukasz\AppData\Local\Temp\vorbis_d.dll
C:\Users\Łukasz\AppData\Local\Temp\Window.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-16 15:24

==================== End Of Log ============================