Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-08-2013 01
Ran by Ana (administrator) on 24-08-2013 11:29:27
Running from C:\Users\Ana\Downloads
Windows 7 Home Premium (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\system32\lxczcoms.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324608 2010-02-27] (Alcor Micro Corp.)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [17412200 2010-04-26] (NVIDIA Corporation)
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-03-04] (Conexant Systems, Inc.)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [347768 2010-04-16] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [861216 2010-04-23] (Acer Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKCU\...\Run: [Google Update] - C:\Users\Ana\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-09-12] (Google Inc.)
MountPoints2: {025922ba-e128-11e0-a388-00262daf6800} - G:\cda_menu.exe
MountPoints2: {4bf62ed0-de36-11e0-8d01-00262daf6800} - E:\autorun.exe
MountPoints2: {a1a83aea-9a66-11e1-bfbf-00262daf6800} - D:\LaunchU3.exe -a
MountPoints2: {a4685ead-9516-11e1-9b08-00262daf6800} - G:\NokiaPCIA_Autorun.exe
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [263936 2010-05-25] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [908368 2010-04-08] (Dritek System Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-01-15] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-01-15] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [95848 2010-04-26] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [90216 2010-04-26] (NVIDIA Corporation)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0415&m=en_butterfly_s&r=27360911p0b6l0460z1k5f46j1b39r
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0415&m=en_butterfly_s&r=27360911p0b6l0460z1k5f46j1b39r
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0415&m=en_butterfly_s&r=27360911p0b6l0460z1k5f46j1b39r
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.212.1

FireFox:
========
FF ProfilePath: C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\7rln8gss.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.2.72 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Ana\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Ana\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [fe_8.0@nokia.com] C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_8.0
FF Extension: Firefox Synchronisation Extension - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_8.0
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [te_5.0@nokia.com] C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_5.0
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_5.0

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Sort by Name) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp\2.0.0_0
CHR Extension: (Vocabla: translate English words) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\bchnamjcpocgphheheekmchilaabjdnb\1.8.3_0
CHR Extension: (YouTube) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Verbatim Translatio) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\bobgnmijljonenlachekpkgikohcghon\1.1.0_0
CHR Extension: (Adblock Plus) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.4_0
CHR Extension: (Vividas Player Plugin) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\choofoanehnlponopnapopbnkeldllka\4.1_1
CHR Extension: (Lingapp - English yourself!) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\cielpcihcgbcgkihihbflangfgienepp\1.1_0
CHR Extension: (Webpage Screenshot Capture) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki\9.10.24_0
CHR Extension: (Google Search) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Springpad Clipper) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\eclcnlepmfepnccogfjdafhhlgcfdmnj\1.1212.12.6_0
CHR Extension: (Notepad) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\efgpgbcidmnhkoeceikdacelidndbfgl\1.3_0
CHR Extension: (Tabs Outliner) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkanocgddhmamlbiijnphhppkpkmkl\0.4.73_0
CHR Extension: (Add Tasks to Do It (Tomorrow)) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimhlfnbjllicocigjdalpodkokffbmm\1.2.2_0
CHR Extension: (Vintage) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\epfobokolnglahklkopijoidgjefmokc\1_0
CHR Extension: (Notepad) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\ephkoffkhkiignlofebbfhhahddofkmg\1.1_0
CHR Extension: (PanicButton) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm\0.14.2.2_0
CHR Extension: (BBC radio live) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\foecajcmilnifmmpidpofipnjkfnmjpl\0.1.2_0
CHR Extension: (Print) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\idfnpgjblkahngbondojabhffkkdekbd\2.0.2.5_0
CHR Extension: (Any.DO) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdadialhpiikehpdeejjeiikopddkjem\1.0.3.3_0
CHR Extension: (FVD Downloader) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.3.7_0
CHR Extension: (Yellow highlighter pen for web) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnmengjdnfjbochkdkcjbbpildacancp\1.6_0
CHR Extension: (Explain and Send Screenshots) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdddabjhelpilpnpgondfmehhcplpiin\6.7.5_0
CHR Extension: (Google Mail Checker) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Pras\u00F3wka - przegl\u0105d polskiej prasy codziennej) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogdhblklnmlpmnofgbckkldnfjbjfgnk\0.5.8_0
CHR Extension: (Evernote Web Clipper) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\5.9.20_0
CHR Extension: (Gmail) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Economist Radio) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pokaljfafjmhnoofahjignaelkgahpml\3.0_0
CHR StartMenuInternet: Google Chrome - C:\Users\Ana\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [867360 2010-04-23] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [255744 2010-05-25] (NewTech Infosystems, Inc.)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-18] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-18] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-18] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-09-16] ()
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-09-16] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-24 11:29 - 2013-08-24 11:29 - 00000000 ____D C:\FRST
2013-08-24 10:48 - 2013-08-24 10:55 - 00000000 ____D C:\AdwCleaner
2013-08-24 10:46 - 2013-08-24 11:26 - 00000000 ____D C:\Users\Ana\Desktop\picassa
2013-08-24 10:45 - 2013-08-24 10:45 - 00000000 ____D C:\Users\Ana\Desktop\Stare dane programu Firefox
2013-08-24 10:36 - 2013-08-24 10:36 - 00000000 ____D C:\_OTL
2013-08-21 13:42 - 2013-08-21 13:43 - 12235264 _____ C:\Users\Ana\Downloads\Nauka w dziejach kultury europejskiej.ppt
2013-08-07 21:51 - 2013-08-07 21:52 - 21989305 _____ C:\Users\Ana\Desktop\IMG_5084.CR2
2013-08-03 22:16 - 2013-08-03 22:16 - 00294704 _____ C:\Windows\Minidump\080313-20857-01.dmp
2013-08-01 12:19 - 2013-08-01 12:19 - 00000000 ____D C:\Users\Ana\AppData\Roaming\Soldat
2013-07-31 21:34 - 2013-07-31 22:29 - 00000000 ____D C:\Users\Ana\Downloads\zosiek
2013-07-31 18:54 - 2013-07-31 18:54 - 16389340 _____ C:\Users\Ana\Downloads\zosiek.zip
2013-07-27 18:52 - 2013-07-27 18:52 - 00051858 _____ C:\Users\Ana\Desktop\Gmer.txt
2013-07-27 17:37 - 2013-07-27 17:37 - 00368705 _____ C:\Users\Ana\Desktop\gm.zip
2013-07-27 17:37 - 2013-05-10 10:29 - 00377856 _____ C:\Users\Ana\Desktop\m57g1hli.exe
2013-07-27 17:23 - 2013-08-24 11:26 - 00100856 _____ C:\Users\Ana\Desktop\Extras.Txt
2013-07-27 17:20 - 2013-08-24 11:23 - 00096058 _____ C:\Users\Ana\Desktop\OTL.Txt
2013-07-27 16:53 - 2013-07-27 16:53 - 00000468 _____ C:\Users\Ana\Desktop\defogger_disable.log
2013-07-27 16:53 - 2013-07-27 16:53 - 00000000 _____ C:\Users\Ana\defogger_reenable
2013-07-26 20:55 - 2013-07-26 20:55 - 00048128 _____ C:\Users\Ana\Downloads\Szczecin_audyty.xls
2013-07-26 00:48 - 2013-07-26 00:48 - 00000017 _____ C:\Windows\SysWOW64\shortcut_ex.dat
2013-07-25 23:25 - 2013-07-25 23:25 - 00205824 _____ C:\Users\Ana\Downloads\Raport Audytu PL6.xls

==================== One Month Modified Files and Folders =======

2013-08-24 11:29 - 2013-08-24 11:29 - 00000000 ____D C:\FRST
2013-08-24 11:28 - 2011-09-12 22:58 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2128407490-1581983887-104016994-1001UA.job
2013-08-24 11:26 - 2013-08-24 10:46 - 00000000 ____D C:\Users\Ana\Desktop\picassa
2013-08-24 11:26 - 2013-07-27 17:23 - 00100856 _____ C:\Users\Ana\Desktop\Extras.Txt
2013-08-24 11:23 - 2013-07-27 17:20 - 00096058 _____ C:\Users\Ana\Desktop\OTL.Txt
2013-08-24 11:00 - 2009-07-14 06:45 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-24 11:00 - 2009-07-14 06:45 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-24 10:57 - 2011-09-08 15:14 - 01446502 _____ C:\Windows\WindowsUpdate.log
2013-08-24 10:55 - 2013-08-24 10:48 - 00000000 ____D C:\AdwCleaner
2013-08-24 10:53 - 2012-07-21 00:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-24 10:52 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-24 10:52 - 2009-07-14 06:51 - 00197241 _____ C:\Windows\setupact.log
2013-08-24 10:45 - 2013-08-24 10:45 - 00000000 ____D C:\Users\Ana\Desktop\Stare dane programu Firefox
2013-08-24 10:36 - 2013-08-24 10:36 - 00000000 ____D C:\_OTL
2013-08-24 10:30 - 2012-12-14 01:17 - 00000000 ____D C:\Users\Ana\Desktop\arka pobrane
2013-08-24 10:30 - 2012-05-03 10:46 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-24 10:23 - 2009-08-18 19:22 - 00000000 ___RD C:\Users\Ana\Desktop\STUDIA DR
2013-08-24 10:16 - 2011-09-09 01:05 - 00698590 _____ C:\Windows\system32\perfh015.dat
2013-08-24 10:16 - 2011-09-09 01:05 - 00135410 _____ C:\Windows\system32\perfc015.dat
2013-08-24 10:16 - 2009-07-14 07:13 - 01551444 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-24 08:37 - 2011-09-12 22:58 - 00000998 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2128407490-1581983887-104016994-1001Core.job
2013-08-23 21:52 - 2011-09-14 00:47 - 00003974 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1B098358-56B3-4139-99CE-911F44EEEECB}
2013-08-23 19:24 - 2011-09-12 22:13 - 00000439 _____ C:\Windows\Lexstat.ini
2013-08-23 12:52 - 2011-04-21 00:55 - 00000000 ___RD C:\Users\Ana\Desktop\MOJA PRACA
2013-08-23 12:52 - 2011-02-17 19:18 - 00000000 ___RD C:\Users\Ana\Desktop\SUDAN DR
2013-08-23 12:51 - 2011-09-26 00:58 - 00000000 ____D C:\Users\Ana\AppData\Local\CrashDumps
2013-08-21 20:40 - 2012-05-03 10:46 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 20:40 - 2012-05-03 10:46 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-21 20:40 - 2011-09-12 20:18 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-21 13:43 - 2013-08-21 13:42 - 12235264 _____ C:\Users\Ana\Downloads\Nauka w dziejach kultury europejskiej.ppt
2013-08-20 12:43 - 2012-10-27 12:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-18 11:54 - 2012-10-30 11:01 - 00000000 ____D C:\Users\Ana\AppData\Local\Windows Live
2013-08-17 17:58 - 2012-12-13 22:00 - 01961472 ___SH C:\Users\Ana\Desktop\Thumbs.db
2013-08-16 11:45 - 2011-09-13 22:08 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-16 11:43 - 2013-07-15 09:13 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 11:33 - 2011-09-13 09:58 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 21:57 - 2013-07-12 15:18 - 00000375 ____H C:\Users\Ana\Downloads\.picasa.ini
2013-08-14 21:57 - 2013-07-12 15:18 - 00000000 ___HD C:\Users\Ana\Downloads\.picasaoriginals
2013-08-14 21:46 - 2011-10-15 00:43 - 00000000 ____D C:\Users\Ana\AppData\Roaming\Skype
2013-08-14 17:05 - 2012-04-05 21:47 - 00014848 _____ C:\Users\Ana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-09 12:34 - 2009-12-08 13:09 - 00000000 ____D C:\Users\Ana\Documents\praca
2013-08-07 21:52 - 2013-08-07 21:51 - 21989305 _____ C:\Users\Ana\Desktop\IMG_5084.CR2
2013-08-06 09:15 - 2011-09-13 00:45 - 00000000 ____D C:\Users\Ana\AppData\Local\Adobe
2013-08-03 22:16 - 2013-08-03 22:16 - 00294704 _____ C:\Windows\Minidump\080313-20857-01.dmp
2013-08-03 22:16 - 2013-07-21 23:45 - 00000000 ____D C:\Windows\Minidump
2013-08-02 11:19 - 2013-01-17 20:47 - 00000081 _____ C:\Users\Ana\skalk.log
2013-08-02 11:19 - 2013-01-17 20:47 - 00000000 _____ C:\Users\Ana\skalk.log.lck
2013-08-02 10:05 - 2011-09-12 15:23 - 00126304 _____ C:\Users\Ana\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-02 10:04 - 2009-07-14 06:45 - 00470536 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-01 14:02 - 2013-01-17 20:50 - 00000142 _____ C:\Users\Ana\.skalk.agent
2013-08-01 12:19 - 2013-08-01 12:19 - 00000000 ____D C:\Users\Ana\AppData\Roaming\Soldat
2013-07-31 22:29 - 2013-07-31 21:34 - 00000000 ____D C:\Users\Ana\Downloads\zosiek
2013-07-31 18:54 - 2013-07-31 18:54 - 16389340 _____ C:\Users\Ana\Downloads\zosiek.zip
2013-07-30 14:08 - 2011-04-05 14:51 - 00000000 ____D C:\Users\Ana\Desktop\GHANA
2013-07-27 18:52 - 2013-07-27 18:52 - 00051858 _____ C:\Users\Ana\Desktop\Gmer.txt
2013-07-27 17:37 - 2013-07-27 17:37 - 00368705 _____ C:\Users\Ana\Desktop\gm.zip
2013-07-27 16:53 - 2013-07-27 16:53 - 00000468 _____ C:\Users\Ana\Desktop\defogger_disable.log
2013-07-27 16:53 - 2013-07-27 16:53 - 00000000 _____ C:\Users\Ana\defogger_reenable
2013-07-27 16:53 - 2011-09-12 15:23 - 00000000 ___RD C:\Users\Ana
2013-07-26 20:55 - 2013-07-26 20:55 - 00048128 _____ C:\Users\Ana\Downloads\Szczecin_audyty.xls
2013-07-26 00:48 - 2013-07-26 00:48 - 00000017 _____ C:\Windows\SysWOW64\shortcut_ex.dat
2013-07-25 23:25 - 2013-07-25 23:25 - 00205824 _____ C:\Users\Ana\Downloads\Raport Audytu PL6.xls

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 09:41

==================== End Of Log ============================