Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by adrian (ATTENTION: The logged in user is not administrator) on DAWIDOSEK on 20-03-2015 11:08:56
Running from C:\Users\adrian\Desktop
Loaded Profiles: adrian (Available profiles: Dawid & adrian & Damian)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

Failed to access process -> smss.exe
Failed to access process -> csrss.exe
Failed to access process -> wininit.exe
Failed to access process -> csrss.exe
Failed to access process -> services.exe
Failed to access process -> lsass.exe
Failed to access process -> lsm.exe
Failed to access process -> winlogon.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> spoolsv.exe
Failed to access process -> svchost.exe
Failed to access process -> AppleMobileDeviceService.exe
Failed to access process -> mDNSResponder.exe
Failed to access process -> SkypeC2CAutoUpdateSvc.exe
Failed to access process -> SkypeC2CPNRSvc.exe
Failed to access process -> svchost.exe
Failed to access process -> LMIGuardianSvc.exe
Failed to access process -> mbamscheduler.exe
Failed to access process -> mbamservice.exe
Failed to access process -> svchost.exe
Failed to access process -> hamachi-2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
Failed to access process -> sppsvc.exe
() C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe
() C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoggingDaemon.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\Cyfrowy Polsat MF821.exe
Failed to access process -> SearchIndexer.exe
Failed to access process -> wmpnetwk.exe
Failed to access process -> svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\Users\adrian\AppData\Roaming\Gameo\gameo.exe
() C:\Users\adrian\AppData\Roaming\Gameo\gameo.exe
() C:\Users\adrian\AppData\Roaming\Gameo\gameo.exe
() C:\Users\adrian\AppData\Roaming\Gameo\gameo.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [zLoader.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoader.exe [26480 2012-05-22] ()
HKLM\...\Run: [CancelAutoPlay.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe [74096 2012-05-22] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
HKU\S-1-5-21-1699041526-1260768229-1946834793-1003\...\Run: [DAEMON Tools Pro Agent] => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
HKU\S-1-5-21-1699041526-1260768229-1946834793-1003\...\Run: [Yahoo! Search] => C:\Users\adrian\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe
HKU\S-1-5-21-1699041526-1260768229-1946834793-1003\...\Run: [PennyBee] => C:\Users\adrian\AppData\Local\PennyBee\PennyBeeW.exe
HKU\S-1-5-21-1699041526-1260768229-1946834793-1003\...\Run: [Gameo] => C:\Users\adrian\AppData\Roaming\Gameo\gameo.exe [42482176 2014-12-24] ()
HKU\S-1-5-21-1699041526-1260768229-1946834793-1003\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3631448 2015-02-27] (Electronic Arts)
HKU\S-1-5-21-1699041526-1260768229-1946834793-1003\...\MountPoints2: {12ddc825-940c-11e4-bc60-0019666031da} - D:\AutoRun.exe /s

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1699041526-1260768229-1946834793-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://rts.dsrlte.com?affID=na
SearchScopes: HKU\S-1-5-21-1699041526-1260768229-1946834793-1003 -> DefaultScope {szukaj.gazeta.pl} URL = http://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms}
SearchScopes: HKU\S-1-5-21-1699041526-1260768229-1946834793-1003 -> {4453A10C-0202-44FD-8208-B2597F3498EF} URL = http://www.search.ask.com/web?tpid=ORJ-ST-SPE&o=APN11467&pf=V7&p2=^BED^OSJ000^YY^PL&gct=&itbv=12.18.0.81&apn_uid=EBC246C1-4F1E-43C9-9FF0-A37F0A56880A&apn_ptnrs=BED&apn_dtid=^OSJ000^YY^PL&apn_dbr=cr_38.0.2125.111&doi=2014-10-31&trgb=CR&q={searchTerms}&psv=&pt=tb
SearchScopes: HKU\S-1-5-21-1699041526-1260768229-1946834793-1003 -> {A5F0173E-B981-4C6F-BCD7-F12729D53CB1} URL = http://rts.dsrlte.com/?affID=na&q={searchTerms}&r=9
SearchScopes: HKU\S-1-5-21-1699041526-1260768229-1946834793-1003 -> {szukaj.gazeta.pl} URL = http://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\adrian\AppData\Roaming\Mozilla\Firefox\Profiles\seo683ar.default
FF NewTab: hxxp://rts.dsrlte.com/?m=tab&affID=na
FF DefaultSearchEngine: Yahoo! Search
FF SelectedSearchEngine: Yahoo! Search
FF Homepage: hxxp://rts.dsrlte.com?affID=na
FF Keyword.URL: hxxp://rts.dsrlte.com/?q=
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [2014-10-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [2014-10-21] (Google Inc.)
FF SearchPlugin: C:\Users\adrian\AppData\Roaming\Mozilla\Firefox\Profiles\seo683ar.default\searchplugins\dsrlte.xml [2015-01-18]
FF SearchPlugin: C:\Users\adrian\AppData\Roaming\Mozilla\Firefox\Profiles\seo683ar.default\searchplugins\szukaj-gazeta-pl.xml [2014-12-03]

Chrome: 
=======
CHR RestoreOnStartup: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=616_pr__alt__ddc_dsssyc_bd_com"
CHR StartupUrls: Default -> "https://www.google.pl/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\adrian\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.6.703\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\internal-nacl-plugin No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
CHR Profile: C:\Users\adrian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Wallet) - C:\Users\adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-02-16] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-02-27] (Electronic Arts)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
S3 massfilter_lte; C:\Windows\system32\drivers\massfilter_lte.sys [18456 2011-12-14] (HandSet Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-20] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-11-12] (Duplex Secure Ltd.)
S3 zgdcat; C:\Windows\System32\DRIVERS\zgdcat.sys [130200 2011-12-14] (ZTE Incorporated)
S3 zgdcdiag; C:\Windows\System32\DRIVERS\zgdcdiag.sys [130200 2011-12-14] (ZTE Incorporated)
S3 zgdcmdm; C:\Windows\System32\DRIVERS\zgdcmdm.sys [130200 2011-12-14] (ZTE Incorporated)
S3 zgdcnet; C:\Windows\System32\DRIVERS\zgdcnet.sys [169496 2011-12-14] (ZTE Incorporated)
S3 zgdcnmea; C:\Windows\System32\DRIVERS\zgdcnmea.sys [130200 2011-12-14] (ZTE Incorporated)
U3 a0eklfjd; C:\Windows\System32\Drivers\a0eklfjd.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero size file/folder)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-20 11:08 - 2015-03-20 11:09 - 00012016 _____ () C:\Users\adrian\Desktop\FRST.txt
2015-03-20 11:07 - 2015-03-20 11:07 - 02095616 _____ (Farbar) C:\Users\adrian\Desktop\FRST64.exe
2015-03-20 10:58 - 2015-03-20 10:59 - 00000000 ____D () C:\Users\adrian\AppData\Local\Gameo
2015-03-20 10:32 - 2015-03-20 10:32 - 02095616 _____ (Farbar) C:\Users\Dawid\Downloads\FRST64.exe
2015-03-20 10:03 - 2015-03-20 10:03 - 00285917 _____ () C:\Users\Dawid\Desktop\9b911fd59fd8bd319a5f8598983c2ced_large.jpeg
2015-03-20 08:51 - 2015-03-20 08:52 - 75331707 _____ () C:\Users\Dawid\Desktop\Quebonafide - Eklektyka (mixtape).rar
2015-03-18 14:49 - 2015-03-18 14:54 - 00000000 ____D () C:\Program Files (x86)\Counter Strike 1.6 v43
2015-03-18 14:49 - 2015-03-18 14:49 - 00000000 ____D () C:\Users\adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 v43
2015-03-15 17:57 - 2015-03-15 17:57 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-03-15 15:09 - 2015-03-15 15:09 - 00001908 _____ () C:\Users\Damian\Desktop\Counter Strike 1.6 Non Steam.lnk
2015-03-15 15:09 - 2015-03-15 15:09 - 00001888 _____ () C:\Users\Damian\Desktop\Dedicated Server.lnk
2015-03-15 15:09 - 2015-03-15 15:09 - 00000000 ____D () C:\Program Files (x86)\Valve
2015-03-15 14:55 - 2015-03-15 14:55 - 00000000 ____D () C:\Users\adrian\Tracing
2015-03-15 14:54 - 2015-03-15 17:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-03-09 14:20 - 2015-03-20 10:55 - 00004036 _____ () C:\Windows\setupact.log
2015-03-09 14:20 - 2015-03-20 10:42 - 00003062 _____ () C:\Windows\PFRO.log
2015-03-09 14:20 - 2015-03-09 14:20 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-09 14:13 - 2015-03-09 14:14 - 00022964 _____ () C:\Users\Dawid\Desktop\gmer.txt
2015-03-09 13:16 - 2015-03-09 13:16 - 00000000 ____D () C:\Users\Dawid\AppData\Roaming\WinRAR
2015-03-09 13:11 - 2015-03-20 11:08 - 00000000 ____D () C:\FRST
2015-03-09 13:10 - 2015-03-09 13:10 - 00371057 _____ () C:\Users\Dawid\Downloads\gm.zip
2015-03-09 11:19 - 2015-03-20 10:43 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-09 11:19 - 2015-03-09 11:19 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-03-09 11:19 - 2015-03-09 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-03-09 11:19 - 2015-03-09 11:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-09 11:19 - 2015-03-09 11:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-09 11:19 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-09 11:19 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-09 11:19 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-09 11:11 - 2015-03-09 11:11 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-09 11:11 - 2015-03-09 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-20 12:15 - 2015-03-20 10:44 - 00000000 ____D () C:\Users\Dawid\AppData\Roaming\Skype
2015-02-20 12:15 - 2015-02-20 12:15 - 00000000 ____D () C:\Users\Dawid\AppData\Local\Skype
2015-02-19 08:50 - 2015-02-19 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-02-19 08:50 - 2015-02-19 08:50 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-20 11:00 - 2008-01-22 20:42 - 02063811 _____ () C:\Windows\WindowsUpdate.log
2015-03-20 10:59 - 2014-12-01 17:15 - 00000000 ____D () C:\Users\adrian\AppData\Roaming\Gameo
2015-03-20 10:59 - 2014-05-20 17:34 - 00000000 ____D () C:\ProgramData\Origin
2015-03-20 10:56 - 2014-12-30 14:44 - 00000000 ____D () C:\Users\adrian\AppData\Local\LogMeIn Hamachi
2015-03-20 10:55 - 2015-01-07 17:44 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2015-03-20 10:55 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-20 10:54 - 2009-07-14 05:45 - 00016656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-20 10:54 - 2009-07-14 05:45 - 00016656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-20 10:43 - 2014-12-30 17:04 - 00000000 ____D () C:\Users\Dawid\AppData\Local\LogMeIn Hamachi
2015-03-20 10:42 - 2014-09-09 14:06 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-03-20 10:36 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-03-20 10:36 - 2008-01-22 17:17 - 00001639 _____ () C:\Users\Dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-20 10:36 - 2008-01-22 17:17 - 00001617 _____ () C:\Users\Dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-03-20 10:20 - 2014-12-28 16:06 - 00000000 ____D () C:\Users\Dawid\AppData\Local\DM
2015-03-20 09:26 - 2011-04-12 14:21 - 00737242 _____ () C:\Windows\system32\perfh015.dat
2015-03-20 09:26 - 2011-04-12 14:21 - 00153930 _____ () C:\Windows\system32\perfc015.dat
2015-03-20 09:26 - 2009-07-14 06:13 - 01661232 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-20 08:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-03-19 19:52 - 2015-01-31 14:11 - 00000000 ____D () C:\Users\adrian\AppData\Roaming\.minecraft
2015-03-19 17:36 - 2015-02-13 20:45 - 00000000 ____D () C:\Users\Dawid\Documents\FIFA 14
2015-03-18 15:59 - 2014-12-29 16:06 - 00000000 ____D () C:\Users\adrian\Desktop\Nowy folder
2015-03-18 14:55 - 2015-01-19 23:02 - 00000000 ____D () C:\Users\adrian\AppData\Local\Mozilla Firefox
2015-03-17 20:22 - 2014-11-08 18:31 - 00000000 ____D () C:\Users\adrian\AppData\Roaming\Skype
2015-03-17 12:24 - 2008-01-22 17:15 - 00000000 ____D () C:\Users\Dawid
2015-03-16 19:35 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-03-15 17:57 - 2014-11-08 18:31 - 00000000 ____D () C:\ProgramData\Skype
2015-03-15 14:55 - 2014-11-08 18:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-03-15 14:55 - 2014-07-01 20:37 - 00000000 ____D () C:\Users\adrian
2015-03-10 11:19 - 2014-09-09 14:06 - 00000000 ____D () C:\ProgramData\GGOsiavenowe
2015-03-10 11:19 - 2014-08-26 06:37 - 00000000 ____D () C:\ProgramData\GetDiscountApp
2015-03-09 11:12 - 2014-11-12 16:47 - 00000000 ____D () C:\Users\Dawid\AppData\Roaming\DAEMON Tools Lite
2015-03-09 11:12 - 2008-01-22 20:38 - 00000000 ____D () C:\Windows\Panther
2015-03-03 08:59 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-28 15:23 - 2014-12-01 19:15 - 00000087 _____ () C:\Users\adrian\AppData\Roaming\WB.CFG
2015-02-27 17:18 - 2014-12-02 14:42 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-20 11:36 - 2014-12-12 21:10 - 00000000 ____D () C:\Users\Dawid\AppData\Roaming\.minecraft
2015-02-19 19:35 - 2014-10-21 12:36 - 00000000 ____D () C:\Users\Dawid\AppData\Roaming\Origin
2015-02-19 08:50 - 2015-01-30 09:09 - 00000886 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

==================== Files in the root of some directories =======

2014-12-01 19:15 - 2015-02-28 15:23 - 0000087 _____ () C:\Users\adrian\AppData\Roaming\WB.CFG

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================