Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-07-2015
Ran by Mateusz (administrator) on MATEUSZ on 09-07-2015 17:07:40
Running from C:\Users\Mateusz\Downloads
Loaded Profiles: Mateusz (Available Profiles: Mateusz & użytkownik)
Platform: Windows 8.1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Condusiv Technologies) C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Robert McNeel & Associates) C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe
() C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Users\Mateusz\AppData\Roaming\Microsoft\SystemCertificates\VSSVC.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Windows\SysWOW64\C2MP\TrayMenu.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
(Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191312 2012-08-07] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] => C:\windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\windows\system32\igfxpers.exe
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917176 2012-08-21] (Synaptics Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-09-18] (Intel Corporation)
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-09-18] (Intel Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [YouCam Service] => "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-06-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [730416 2015-06-16] (Avira Operations GmbH & Co. KG)
HKLM\...\Policies\Explorer\Run: [564675125] => C:\ProgramData\msnckgfm.exe [102346752 2014-11-21] ()
HKLM\...\Policies\Explorer\Run: [1885449592] => C:\ProgramData\msogmzjr.exe [93585408 2014-11-21] ()
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\Run: [Facebook Update] => C:\Users\Mateusz\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-10-12] (Facebook Inc.)
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\Run: [Spotify Web Helper] => C:\Users\Mateusz\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030648 2015-07-03] (Spotify Ltd)
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3510704 2014-04-17] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\Run: [Skype] => C:\Users\Mateusz\AppData\Roaming\Skype\Phone\Skype.exe [569344 2015-05-19] ()
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\Run: [AceUpdater] => C:\Users\Mateusz\AppData\Roaming\ACEStream\updater\ace_update.exe [22824 2014-10-01] ()
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\Run: [AceWebExtensionUpdater] => C:\Users\Mateusz\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe [22824 2015-02-28] ()
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\...\Run: [AceStream] => C:\Users\Mateusz\AppData\Roaming\ACEStream\engine\ace_engine.exe [23984 2015-03-28] ()
AppInit_DLLs: c:\windows\system32\nvinitx.dll => c:\windows\system32\nvinitx.dll [176904 2015-06-17] (NVIDIA Corporation)
AppInit_DLLs: ,C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [176904 2015-06-17] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [176904 2015-06-17] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155280 2015-06-17] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2014-11-12]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Network Server.lnk [2015-03-22]
ShortcutTarget: Network Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Scanner Finder.lnk [2013-01-29]
ShortcutTarget: Scanner Finder.lnk -> C:\Program Files (x86)\ScanWizard 5\ScannerFinder.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TrayMenu.lnk [2014-03-28]
ShortcutTarget: TrayMenu.lnk -> C:\Windows\SysWOW64\C2MP\TrayMenu.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKU\S-1-5-21-4109652526-3747850710-83083684-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.qone8.com/?type=hp&ts=1383208129&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9EC924237
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-4109652526-3747850710-83083684-1002 -> DefaultScope {A18BA569-169B-4C1D-828A-8DC7E616026C} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
SearchScopes: HKU\S-1-5-21-4109652526-3747850710-83083684-1002 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=7e9fe951000000000000c68508e575ff
SearchScopes: HKU\S-1-5-21-4109652526-3747850710-83083684-1002 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-4109652526-3747850710-83083684-1002 -> {A18BA569-169B-4C1D-828A-8DC7E616026C} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
SearchScopes: HKU\S-1-5-21-4109652526-3747850710-83083684-1002 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb128/?search={searchTerms}&loc=IB_DS&a=6R8P0bU1QC&i=26
SearchScopes: HKU\S-1-5-21-4109652526-3747850710-83083684-1002 -> {F663D89E-C743-42FC-B8D2-C301C321BB54} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2012-08-16] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2012-08-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-24] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-24] (Oracle Corporation)
BHO-x32: SweetPacks Browser Helper -> {EEE6C35C-6118-11DC-9C72-001320C79847} -> C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04] (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-07-04] (SweetIM Technologies Ltd.)
Toolbar: HKU\S-1-5-21-4109652526-3747850710-83083684-1002 -> No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{0FF43B88-2FC4-46FF-ACCD-697BEEDC752D}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{0FF43B88-2FC4-46FF-ACCD-697BEEDC752D}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{46D8647E-9AD0-4EDB-B537-8B06C8899934}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{62D13D07-0C4F-43A8-B57A-1EE2A3D6C65F}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{62D13D07-0C4F-43A8-B57A-1EE2A3D6C65F}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{E28805CC-EA30-427A-BC13-5B9C1858DC64}: [DhcpNameServer] 195.110.50.52 178.219.128.71

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll [2013-09-16] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll [2013-09-16] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll [2014-04-15] (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @graphisoft.com/GDL Web Plug-in -> C:\Program Files (x86)\GRAPHISOFT\GDLWebControl\npGDLMozilla.dll [2012-07-06] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-04-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-04-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4109652526-3747850710-83083684-1002: @acestream.net/acestreamplugin,version=3.0.12 -> C:\Users\Mateusz\AppData\Roaming\ACEStream\player\npace_plugin.dll [2014-12-03] (Innovative Digital Technologies)
FF Plugin HKU\S-1-5-21-4109652526-3747850710-83083684-1002: @citrixonline.com/appdetectorplugin -> C:\Users\Mateusz\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-02-11] (Citrix Online)
FF Plugin HKU\S-1-5-21-4109652526-3747850710-83083684-1002: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Mateusz\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-4109652526-3747850710-83083684-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mateusz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-04-30] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-4109652526-3747850710-83083684-1002: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2012-09-18] (Intel)
FF Plugin HKU\S-1-5-21-4109652526-3747850710-83083684-1002: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2012-09-18] (Intel)
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox

Chrome: 
=======
CHR Profile: C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Media Hint) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja [2013-11-23]
CHR Extension: (Google Docs) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-30]
CHR Extension: (Google Drive) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-30]
CHR Extension: (ColorZilla) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2013-05-30]
CHR Extension: (YouTube) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-30]
CHR Extension: (Extended Protection) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml [2013-10-31]
CHR Extension: (Google Search) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-30]
CHR Extension: (Search by Image (by Google)) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2013-05-30]
CHR Extension: (AdBlock) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-29]
CHR Extension: (WhatFont) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2013-05-30]
CHR Extension: (SweetIM for Facebook) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2013-05-30]
CHR Extension: (Skype Click to Call) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-10-03]
CHR Extension: (No Name) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2015-06-21]
CHR Extension: (Google Wallet) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Gmail) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-30]
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [cekcjpgehmohobmdiikfnopibipmgnml] - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Mateusz\AppData\Roaming\BabSolution\CR\Delta.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-12-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx [2012-07-31]
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [217280 2015-06-02] (Avira Operations GmbH & Co. KG)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-09-05] (Samsung Electronics CO., LTD.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-03] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 IntelliMemory; C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe [55120 2012-11-01] (Condusiv Technologies)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 McNeelUpdate; c:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67944 2015-02-26] (Robert McNeel & Associates)
R2 mi-raysat_3dsmax2012_64; C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe [86016 2011-02-22] () [File not signed]
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [237424 2014-03-31] () [File not signed]
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-03] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-03] (NVIDIA Corporation)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
R2 VSSS; C:\Users\Mateusz\AppData\Roaming\Microsoft\SystemCertificates\VSSVC.exe [104751744 2015-06-23] (Microsoft Corporation) [File not signed] <==== ATTENTION
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-03-23] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-03-23] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)
S2 AntiVirMailService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe" [X]
S2 AntiVirSchedulerService; "C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe" [X]
S2 AntiVirService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe" [X]
S2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe" [X]
S2 avast! Antivirus; "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132656 2015-06-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-06-16] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-06-16] (Avira Operations GmbH & Co. KG)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 HWiNFO32; C:\windows\system32\drivers\HWiNFO64A.SYS [31136 2013-11-24] (REALiX(tm))
R1 intmfs; C:\Windows\System32\DRIVERS\intmfs.sys [28496 2012-11-01] (Condusiv Technologies)
R0 intmsd; C:\Windows\System32\DRIVERS\intmsd.sys [104272 2012-11-01] (Condusiv Technologies)
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)
S3 NETwNs64; C:\Windows\system32\DRIVERS\NETwsw00.sys [11524096 2013-04-18] (Intel Corporation) [File not signed]
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46768 2015-05-19] (NVIDIA Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-10-26] (Windows (R) 2003 DDK 3790 provider)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-03-23] (Microsoft Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [97792 2011-09-22] (WIBU-SYSTEMS AG)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
R4 KProcessHacker2; \??\C:\Program Files\kprocesshacker.sys [X]
U3 pwddypow; \??\C:\Users\Mateusz\AppData\Local\Temp\pwddypow.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-09 17:07 - 2015-07-09 17:08 - 00031381 _____ C:\Users\Mateusz\Downloads\FRST.txt
2015-07-09 17:06 - 2015-07-09 17:07 - 00000000 ____D C:\FRST
2015-07-09 17:04 - 2015-07-09 17:04 - 00077802 _____ C:\Users\Mateusz\Desktop\gmer.txt
2015-07-09 17:01 - 2015-07-09 17:01 - 02112512 _____ (Farbar) C:\Users\Mateusz\Downloads\FRST64.exe
2015-07-09 17:00 - 2015-07-09 17:00 - 00000000 ___SH C:\DkHyperbootSync
2015-07-09 16:29 - 2015-07-09 16:29 - 00000000 ____H C:\ProgramData\cm-lock
2015-07-09 16:11 - 2015-07-09 16:12 - 00619688 _____ (Duplex Secure Ltd) C:\Users\Mateusz\Downloads\SPTDinst-v187-x64 (2).exe
2015-07-09 16:08 - 2015-07-09 16:08 - 00619688 _____ (Duplex Secure Ltd) C:\Users\Mateusz\Downloads\SPTDinst-v187-x64 (1).exe
2015-07-09 16:01 - 2015-07-09 16:01 - 00380416 _____ C:\Users\Mateusz\Downloads\xs78lhv1.exe
2015-07-09 15:48 - 2015-07-09 15:48 - 05632279 _____ (Swearware) C:\Users\Mateusz\Downloads\ComboFix (2).exe
2015-07-09 15:47 - 2015-07-09 15:47 - 05632279 _____ (Swearware) C:\Users\Mateusz\Downloads\ComboFix (1).exe
2015-07-09 15:44 - 2015-07-09 15:46 - 05632279 _____ (Swearware) C:\Users\Mateusz\Downloads\ComboFix.exe
2015-07-09 15:33 - 2015-07-09 15:33 - 00002281 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-09 15:33 - 2015-07-09 15:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-09 15:32 - 2015-07-09 15:32 - 00931408 _____ (Google Inc.) C:\Users\Mateusz\Downloads\ChromeSetup.exe
2015-07-09 11:31 - 2015-07-09 11:31 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\Avira
2015-07-09 11:28 - 2015-06-16 09:36 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2015-07-09 11:28 - 2015-06-16 09:36 - 00132656 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2015-07-09 11:28 - 2015-06-16 09:36 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2015-07-09 11:28 - 2015-06-16 09:36 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2015-07-09 11:15 - 2015-07-09 11:15 - 01415680 _____ (wj32) C:\Program Files\9EJ6JLND.exe
2015-07-09 11:09 - 2015-07-09 11:09 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Mateusz\Downloads\tdsskiller.exe
2015-07-08 19:56 - 2015-07-08 20:29 - 00000000 ____D C:\Users\Mateusz\Downloads\Birdman (2014) [1080p]
2015-07-08 19:35 - 2015-07-08 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-07-08 19:35 - 2015-07-08 19:35 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-07-08 19:29 - 2015-07-09 16:28 - 00000000 ____D C:\ProgramData\AVAST Software
2015-07-08 19:27 - 2015-07-08 19:29 - 152923328 _____ (Avast Software s.r.o.) C:\Users\Mateusz\Downloads\avast_free_antivirus_setup.exe
2015-07-08 19:22 - 2015-07-08 19:22 - 01415680 _____ (wj32) C:\Program Files\MCEJCBD6.exe
2015-07-07 01:46 - 2015-07-07 01:46 - 00060523 _____ C:\Users\Mateusz\Downloads\2534.zip
2015-07-07 01:46 - 2015-07-07 01:46 - 00000000 ____D C:\Users\Mateusz\Downloads\2534
2015-07-06 11:33 - 2015-07-06 11:33 - 01415680 _____ (wj32) C:\Program Files\Z3KJ9J95.exe
2015-07-05 16:28 - 2015-07-05 16:28 - 00000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-07-05 16:27 - 2015-07-05 16:27 - 01415680 _____ (wj32) C:\Program Files\V2P3A0TD.exe
2015-07-05 16:27 - 2015-07-05 16:27 - 01415680 _____ (wj32) C:\Program Files\70D6K7KV.exe
2015-07-05 16:27 - 2015-07-05 16:27 - 01415680 _____ (wj32) C:\Program Files\3BM819EP.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 01415680 _____ (wj32) C:\Program Files\WM9ESOZP.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 01415680 _____ (wj32) C:\Program Files\NJ0T6TP9.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 01415680 _____ (wj32) C:\Program Files\KY6CKSKY.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 01415680 _____ (wj32) C:\Program Files\KVXMUE35.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 01415680 _____ (wj32) C:\Program Files\BJXT16H3.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 01415680 _____ (wj32) C:\Program Files\9WY02FE4.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 01415680 _____ (wj32) C:\Program Files\PRZPC10T.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 01415680 _____ (wj32) C:\Program Files\LKSIKMOK.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 01415680 _____ (wj32) C:\Program Files\LAILN9ED.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 01415680 _____ (wj32) C:\Program Files\KMRTV27X.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 01415680 _____ (wj32) C:\Program Files\69BG6GKS.exe
2015-07-05 16:24 - 2015-07-05 16:24 - 01415680 _____ (wj32) C:\Program Files\8GLHPX5R.exe
2015-07-05 16:24 - 2015-07-05 16:24 - 01415680 _____ (wj32) C:\Program Files\3WM6JU89.exe
2015-07-05 11:47 - 2015-07-05 11:47 - 01415680 _____ (wj32) C:\Program Files\7W7W4KYT.exe
2015-07-05 11:10 - 2015-07-05 11:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chaos Group
2015-07-05 11:02 - 2015-07-05 11:02 - 00000000 ____D C:\Program Files\Common Files\ChaosGroup
2015-07-03 18:18 - 2015-07-03 18:18 - 01415680 _____ (wj32) C:\Program Files\TV0TSUWL.exe
2015-07-02 14:06 - 2015-07-02 14:06 - 01415680 _____ (wj32) C:\Program Files\KDIKMTYX.exe
2015-07-02 12:18 - 2015-07-02 12:18 - 01415680 _____ (wj32) C:\Program Files\TSUHJKSF.exe
2015-07-02 10:44 - 2015-07-02 10:44 - 01415680 _____ (wj32) C:\Program Files\9Y08YON0.exe
2015-06-30 19:51 - 2015-06-30 20:36 - 00000000 ____D C:\Users\Mateusz\Downloads\Top_Gear.22x08.720p_HDTV_x264-FoV[EtHD]
2015-06-27 19:08 - 2015-06-28 10:12 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\NVIDIA
2015-06-26 20:30 - 2015-06-26 20:30 - 00000000 ____D C:\Users\Mateusz\Documents\wmd_symbol_cache
2015-06-26 20:04 - 2015-07-04 17:56 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2015-06-26 20:04 - 2015-07-04 17:56 - 00000000 ____D C:\WINDOWS\system32\NV
2015-06-26 20:04 - 2015-06-17 08:48 - 06873232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-06-26 20:04 - 2015-06-17 08:48 - 03492168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-06-26 20:04 - 2015-06-17 08:48 - 02558792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-06-26 20:04 - 2015-06-17 08:48 - 01059472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-06-26 20:04 - 2015-06-17 08:48 - 00937616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-06-26 20:04 - 2015-06-17 08:48 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-06-26 20:04 - 2015-06-17 08:48 - 00074896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-06-26 20:04 - 2015-06-17 08:48 - 00062792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-06-26 20:04 - 2015-06-02 16:11 - 04421614 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-06-26 19:57 - 2015-06-26 19:57 - 01415680 _____ (wj32) C:\Program Files\TY36GIKA.exe
2015-06-26 19:57 - 2015-06-26 19:57 - 01415680 _____ (wj32) C:\Program Files\E76E4RTF.exe
2015-06-26 19:57 - 2015-06-26 19:57 - 01415680 _____ (wj32) C:\Program Files\49Z43T68.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 01415680 _____ (wj32) C:\Program Files\LTJLNFP9.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 01415680 _____ (wj32) C:\Program Files\KSUW1R13.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 01415680 _____ (wj32) C:\Program Files\JXT16HM8.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 01415680 _____ (wj32) C:\Program Files\FHJLKCB4.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 01415680 _____ (wj32) C:\Program Files\CBJ9EG5U.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 01415680 _____ (wj32) C:\Program Files\HNMUKUWM.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 01415680 _____ (wj32) C:\Program Files\EPOW49H3.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 01415680 _____ (wj32) C:\Program Files\E7U2A3BX.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 01415680 _____ (wj32) C:\Program Files\CHJ8VHJ5.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 01415680 _____ (wj32) C:\Program Files\98YX2RWV.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 01415680 _____ (wj32) C:\Program Files\35AG5768.exe
2015-06-26 19:49 - 2015-06-17 11:10 - 42729104 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 37748880 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 30481552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 22947144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 17724600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 16145200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 15866992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 15224784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 14497520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 13263056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 12855416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 11831856 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 11011216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-06-26 19:49 - 2015-06-17 11:10 - 03395648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 02997544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 02932368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 02599752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 01898128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435330.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 01557832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435330.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 01099992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 01060168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 01050768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 00982672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 00975176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 00938752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 00155280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 00150832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 00128696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-06-26 19:49 - 2015-06-17 11:10 - 00031376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2015-06-26 19:49 - 2015-06-17 11:10 - 00030966 _____ C:\WINDOWS\system32\nvinfo.pb
2015-06-26 19:42 - 2015-05-19 05:29 - 00046768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-06-26 19:42 - 2015-05-19 05:14 - 00061616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-06-26 19:42 - 2015-05-19 05:14 - 00057520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-06-25 16:21 - 2015-06-25 16:21 - 01415680 _____ (wj32) C:\Program Files\D65AZMO1.exe
2015-06-24 15:44 - 2015-06-24 15:44 - 00003172 _____ C:\Users\Mateusz\Desktop\PORTFOLIO-polsl — skrót.lnk
2015-06-24 10:04 - 2015-06-24 10:04 - 01415680 _____ (wj32) C:\Program Files\6NUEYZM6.exe
2015-06-24 10:04 - 2015-06-24 10:04 - 01415680 _____ (wj32) C:\Program Files\1OKSHMLB.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 01415680 _____ (wj32) C:\Program Files\OE13SUM5.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 01415680 _____ (wj32) C:\Program Files\JRHJOEDN.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 01415680 _____ (wj32) C:\Program Files\FKDFH46G.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 01415680 _____ (wj32) C:\Program Files\92468IKJ.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 01415680 _____ (wj32) C:\Program Files\80Z7XNPF.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 01415680 _____ (wj32) C:\Program Files\4L2JEVC7.exe
2015-06-24 10:02 - 2015-06-24 10:02 - 01415680 _____ (wj32) C:\Program Files\LKTVKMOV.exe
2015-06-24 10:02 - 2015-06-24 10:02 - 01415680 _____ (wj32) C:\Program Files\KGLKD35F.exe
2015-06-24 10:02 - 2015-06-24 10:02 - 01415680 _____ (wj32) C:\Program Files\GUKY9FK3.exe
2015-06-23 14:49 - 2015-06-23 14:49 - 01415680 _____ (wj32) C:\Program Files\S346SGKE.exe
2015-06-21 13:55 - 2015-06-21 13:55 - 00002022 _____ C:\Users\Mateusz\Desktop\Ace Player.lnk
2015-06-21 13:55 - 2015-06-21 13:55 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ace Stream Media
2015-06-21 13:52 - 2015-06-21 13:55 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\AceWebExtension
2015-06-14 19:42 - 2015-07-07 12:07 - 00000000 ____D C:\Users\Mateusz\Desktop\ins

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-09 17:04 - 2015-05-17 10:59 - 00001072 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-09 17:02 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-07-09 16:35 - 2012-12-19 21:36 - 00003594 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4109652526-3747850710-83083684-1002
2015-07-09 16:33 - 2015-03-23 16:20 - 01181790 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-09 16:30 - 2015-03-23 18:39 - 00000000 ___RD C:\Users\Mateusz\OneDrive
2015-07-09 16:28 - 2014-11-20 21:36 - 00947252 _____ C:\WINDOWS\PFRO.log
2015-07-09 16:28 - 2013-08-22 16:46 - 00389443 _____ C:\WINDOWS\setupact.log
2015-07-09 16:28 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-09 15:37 - 2015-05-19 15:34 - 00000500 _____ C:\WINDOWS\SysWOW64\Drivers\ifxjxy_491.set
2015-07-09 15:37 - 2015-05-19 15:34 - 00000500 _____ C:\WINDOWS\SysWOW64\Drivers\dhtrugl220.dat
2015-07-09 15:37 - 2015-05-19 15:34 - 00000500 _____ C:\WINDOWS\d_nhqnsp192.ini
2015-07-09 15:36 - 2012-12-20 01:06 - 00000000 ____D C:\Users\Mateusz\AppData\Local\Google
2015-07-09 15:33 - 2012-12-20 01:06 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-09 11:29 - 2015-03-23 17:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-09 11:28 - 2013-01-12 11:35 - 00000000 ____D C:\ProgramData\Avira
2015-07-09 11:28 - 2013-01-12 11:35 - 00000000 ____D C:\Program Files (x86)\Avira
2015-07-09 11:24 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-07-09 11:23 - 2014-11-21 06:46 - 01825074 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-09 11:23 - 2014-11-21 06:07 - 00807160 _____ C:\WINDOWS\system32\perfh015.dat
2015-07-09 11:23 - 2014-11-21 06:07 - 00163478 _____ C:\WINDOWS\system32\perfc015.dat
2015-07-09 11:11 - 2012-12-19 23:30 - 00003988 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8C6D4BE6-6BFE-4976-8869-EE0035AC3B1F}
2015-07-09 11:00 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-07-09 00:23 - 2012-12-19 23:59 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\BitTorrent
2015-07-08 19:20 - 2013-08-22 15:25 - 01048576 ___SH C:\WINDOWS\system32\config\BBI
2015-07-08 14:48 - 2013-10-22 18:06 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-07 22:20 - 2014-07-21 21:21 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\vlc
2015-07-07 17:58 - 2014-02-15 14:15 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\Abvent_Artlantis5
2015-07-07 16:39 - 2014-10-23 20:14 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\SketchUp
2015-07-07 16:09 - 2013-12-11 19:34 - 00000000 ____D C:\Users\Mateusz\AppData\Local\Spotify
2015-07-07 15:49 - 2013-12-11 19:34 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\Spotify
2015-07-07 15:48 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-07-05 11:15 - 2013-07-30 21:03 - 00000000 ____D C:\ProgramData\ASGVIS
2015-07-04 16:30 - 2015-05-22 14:48 - 00000000 ____D C:\Users\Mateusz\Downloads\RHINO+VRAY
2015-07-03 22:32 - 2012-12-29 18:01 - 00000000 ____D C:\Users\Mateusz\Graphisoft
2015-07-03 22:29 - 2012-12-29 18:02 - 00000000 ___HD C:\Users\Mateusz\Documents\BIMx
2015-07-03 19:04 - 2015-04-07 16:43 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\Abvent_Artlantis6
2015-07-01 15:04 - 2014-02-13 18:31 - 00000000 ____D C:\Program Files\Artlantis Studio 5
2015-07-01 14:52 - 2013-01-14 23:19 - 00000132 _____ C:\Users\Mateusz\AppData\Roaming\Adobe PNG Format CS6 Prefs
2015-06-29 10:33 - 2015-04-13 23:13 - 00000000 ____D C:\Users\Mateusz\Documents\Koło Wzornictwa Przemysłowego
2015-06-29 10:33 - 2014-05-17 17:27 - 00000000 ____D C:\Users\Mateusz\Documents\design
2015-06-26 20:06 - 2015-03-23 16:20 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-26 20:04 - 2015-03-23 16:20 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-26 20:04 - 2015-03-23 16:20 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-06-26 20:04 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Help
2015-06-26 20:03 - 2015-03-23 16:20 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-06-26 19:59 - 2012-09-15 02:32 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-24 15:44 - 2012-12-20 17:49 - 00000000 ____D C:\Users\Mateusz\Documents\projekty
2015-06-24 13:44 - 2015-06-01 15:14 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-06-24 10:02 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-06-21 18:25 - 2015-05-24 13:49 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\.ACEStream
2015-06-21 18:24 - 2015-05-24 13:50 - 00000000 ___HD C:\_acestream_cache_
2015-06-21 13:57 - 2015-05-24 13:47 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\ACEStream
2015-06-11 23:45 - 2015-03-23 16:32 - 00000000 ____D C:\Users\Mateusz

==================== Files in the root of some directories =======

2015-06-24 10:04 - 2015-06-24 10:04 - 1415680 _____ (wj32) C:\Program Files\1OKSHMLB.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 1415680 _____ (wj32) C:\Program Files\35AG5768.exe
2015-07-05 16:27 - 2015-07-05 16:27 - 1415680 _____ (wj32) C:\Program Files\3BM819EP.exe
2015-07-05 16:24 - 2015-07-05 16:24 - 1415680 _____ (wj32) C:\Program Files\3WM6JU89.exe
2015-06-26 19:57 - 2015-06-26 19:57 - 1415680 _____ (wj32) C:\Program Files\49Z43T68.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 1415680 _____ (wj32) C:\Program Files\4L2JEVC7.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 1415680 _____ (wj32) C:\Program Files\69BG6GKS.exe
2015-06-24 10:04 - 2015-06-24 10:04 - 1415680 _____ (wj32) C:\Program Files\6NUEYZM6.exe
2015-07-05 16:27 - 2015-07-05 16:27 - 1415680 _____ (wj32) C:\Program Files\70D6K7KV.exe
2015-07-05 11:47 - 2015-07-05 11:47 - 1415680 _____ (wj32) C:\Program Files\7W7W4KYT.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 1415680 _____ (wj32) C:\Program Files\80Z7XNPF.exe
2015-07-05 16:24 - 2015-07-05 16:24 - 1415680 _____ (wj32) C:\Program Files\8GLHPX5R.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 1415680 _____ (wj32) C:\Program Files\92468IKJ.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 1415680 _____ (wj32) C:\Program Files\98YX2RWV.exe
2015-07-09 11:15 - 2015-07-09 11:15 - 1415680 _____ (wj32) C:\Program Files\9EJ6JLND.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 1415680 _____ (wj32) C:\Program Files\9WY02FE4.exe
2015-07-02 10:44 - 2015-07-02 10:44 - 1415680 _____ (wj32) C:\Program Files\9Y08YON0.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 1415680 _____ (wj32) C:\Program Files\BJXT16H3.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 1415680 _____ (wj32) C:\Program Files\CBJ9EG5U.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 1415680 _____ (wj32) C:\Program Files\CHJ8VHJ5.exe
2015-06-25 16:21 - 2015-06-25 16:21 - 1415680 _____ (wj32) C:\Program Files\D65AZMO1.exe
2015-06-26 19:57 - 2015-06-26 19:57 - 1415680 _____ (wj32) C:\Program Files\E76E4RTF.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 1415680 _____ (wj32) C:\Program Files\E7U2A3BX.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 1415680 _____ (wj32) C:\Program Files\EPOW49H3.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 1415680 _____ (wj32) C:\Program Files\FHJLKCB4.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 1415680 _____ (wj32) C:\Program Files\FKDFH46G.exe
2015-06-24 10:02 - 2015-06-24 10:02 - 1415680 _____ (wj32) C:\Program Files\GUKY9FK3.exe
2015-06-26 19:55 - 2015-06-26 19:55 - 1415680 _____ (wj32) C:\Program Files\HNMUKUWM.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 1415680 _____ (wj32) C:\Program Files\JRHJOEDN.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 1415680 _____ (wj32) C:\Program Files\JXT16HM8.exe
2015-07-02 14:06 - 2015-07-02 14:06 - 1415680 _____ (wj32) C:\Program Files\KDIKMTYX.exe
2015-06-24 10:02 - 2015-06-24 10:02 - 1415680 _____ (wj32) C:\Program Files\KGLKD35F.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 1415680 _____ (wj32) C:\Program Files\KMRTV27X.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 1415680 _____ (wj32) C:\Program Files\KSUW1R13.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 1415680 _____ (wj32) C:\Program Files\KVXMUE35.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 1415680 _____ (wj32) C:\Program Files\KY6CKSKY.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 1415680 _____ (wj32) C:\Program Files\LAILN9ED.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 1415680 _____ (wj32) C:\Program Files\LKSIKMOK.exe
2015-06-24 10:02 - 2015-06-24 10:02 - 1415680 _____ (wj32) C:\Program Files\LKTVKMOV.exe
2015-06-26 19:56 - 2015-06-26 19:56 - 1415680 _____ (wj32) C:\Program Files\LTJLNFP9.exe
2015-07-08 19:22 - 2015-07-08 19:22 - 1415680 _____ (wj32) C:\Program Files\MCEJCBD6.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 1415680 _____ (wj32) C:\Program Files\NJ0T6TP9.exe
2015-06-24 10:03 - 2015-06-24 10:03 - 1415680 _____ (wj32) C:\Program Files\OE13SUM5.exe
2015-07-05 16:25 - 2015-07-05 16:25 - 1415680 _____ (wj32) C:\Program Files\PRZPC10T.exe
2015-06-23 14:49 - 2015-06-23 14:49 - 1415680 _____ (wj32) C:\Program Files\S346SGKE.exe
2015-07-02 12:18 - 2015-07-02 12:18 - 1415680 _____ (wj32) C:\Program Files\TSUHJKSF.exe
2015-07-03 18:18 - 2015-07-03 18:18 - 1415680 _____ (wj32) C:\Program Files\TV0TSUWL.exe
2015-06-26 19:57 - 2015-06-26 19:57 - 1415680 _____ (wj32) C:\Program Files\TY36GIKA.exe
2015-07-05 16:27 - 2015-07-05 16:27 - 1415680 _____ (wj32) C:\Program Files\V2P3A0TD.exe
2015-07-05 16:26 - 2015-07-05 16:26 - 1415680 _____ (wj32) C:\Program Files\WM9ESOZP.exe
2015-07-06 11:33 - 2015-07-06 11:33 - 1415680 _____ (wj32) C:\Program Files\Z3KJ9J95.exe
2012-12-19 21:28 - 2012-12-21 15:21 - 0002954 _____ () C:\Users\Mateusz\AppData\Roaming\AbsoluteReminder.xml
2014-06-04 00:42 - 2014-06-04 00:42 - 0000132 _____ () C:\Users\Mateusz\AppData\Roaming\Adobe AIFF Format CS6 Prefs
2014-06-02 16:28 - 2014-06-02 16:28 - 0000132 _____ () C:\Users\Mateusz\AppData\Roaming\Adobe BMP Format CS6 Prefs
2013-10-07 11:57 - 2013-10-07 12:01 - 0000132 _____ () C:\Users\Mateusz\AppData\Roaming\Adobe IllExport Filter CS6 Prefs
2013-01-14 23:19 - 2015-07-01 14:52 - 0000132 _____ () C:\Users\Mateusz\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-03-19 01:09 - 2014-03-19 01:09 - 0003584 _____ () C:\Users\Mateusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-12-23 14:43 - 2012-12-23 14:43 - 0000017 _____ () C:\Users\Mateusz\AppData\Local\resmon.resmoncfg
2013-10-22 18:18 - 2013-10-22 18:18 - 0010482 _____ () C:\Users\Mateusz\AppData\Local\WiDiSetupLog.20131022.181811.txt
2015-07-09 16:29 - 2015-07-09 16:29 - 0000000 ____H () C:\ProgramData\cm-lock
2013-08-25 20:46 - 2013-02-21 16:59 - 2063240 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe
2013-08-25 20:46 - 2013-01-12 23:51 - 0003004 _____ () C:\ProgramData\MakeMarkerFile.xml
2014-11-21 07:00 - 2014-11-21 07:00 - 102346752 ___SH () C:\ProgramData\msnckgfm.exe
2014-11-21 07:00 - 2014-11-21 07:00 - 93585408 ___SH () C:\ProgramData\msogmzjr.exe

Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\ProgramData\msnckgfm.exe
C:\ProgramData\msogmzjr.exe
C:\Users\EasySurvey\EasySurvey.exe


Some files in TEMP:
====================
C:\Users\Mateusz\AppData\Local\Temp\cdo1993510375.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-09 13:39

==================== End of log ============================