Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Ana (administrator) on 30-08-2013 10:12:16
Running from C:\Users\Ana\Desktop\picassa\frst
Windows 7 Home Premium (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\system32\lxczcoms.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Farbar) C:\Users\Ana\Desktop\picassa\frst\FRST64(1).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324608 2010-02-27] (Alcor Micro Corp.)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [17412200 2010-04-26] (NVIDIA Corporation)
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-03-04] (Conexant Systems, Inc.)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [347768 2010-04-16] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [861216 2010-04-23] (Acer Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKCU\...\Run: [Google Update] - C:\Users\Ana\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-09-12] (Google Inc.)
MountPoints2: {025922ba-e128-11e0-a388-00262daf6800} - G:\cda_menu.exe
MountPoints2: {4bf62ed0-de36-11e0-8d01-00262daf6800} - E:\autorun.exe
MountPoints2: {a1a83aea-9a66-11e1-bfbf-00262daf6800} - D:\LaunchU3.exe -a
MountPoints2: {a4685ead-9516-11e1-9b08-00262daf6800} - G:\NokiaPCIA_Autorun.exe
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [263936 2010-05-25] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [908368 2010-04-08] (Dritek System Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-01-15] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-01-15] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [95848 2010-04-26] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [90216 2010-04-26] (NVIDIA Corporation)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0415&m=en_butterfly_s&r=27360911p0b6l0460z1k5f46j1b39r
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0415&m=en_butterfly_s&r=27360911p0b6l0460z1k5f46j1b39r
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0415&m=en_butterfly_s&r=27360911p0b6l0460z1k5f46j1b39r
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.212.1

FireFox:
========
FF ProfilePath: C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\7rln8gss.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.2.72 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Ana\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Ana\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\allegro-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\fbc-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\merlin-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pwn-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wp-pl.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [fe_8.0@nokia.com] C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_8.0
FF Extension: Firefox Synchronisation Extension - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_8.0
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [te_5.0@nokia.com] C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_5.0
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_5.0

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Ana\AppData\Local\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Ana\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Ana\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll ()
CHR Plugin: (Vividas Player Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npVividasPlayer.dll ( )
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Google Update) - C:\Users\Ana\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Ancient Map) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjcjaemihddenoopkkhaamlcoliiiain\1.4_0
CHR Extension: (YouTube) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1
CHR Extension: (Google Search) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_1
CHR Extension: (Gmail) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR StartMenuInternet: Google Chrome - C:\Users\Ana\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [867360 2010-04-23] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [255744 2010-05-25] (NewTech Infosystems, Inc.)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-18] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-18] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-18] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-09-16] ()
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-09-16] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-26 10:03 - 2013-08-27 16:25 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-25 19:40 - 2013-08-25 20:11 - 00000000 ____D C:\Users\Ana\Downloads\Dragon The Bruce Lee Story
2013-08-24 21:40 - 2013-08-24 21:40 - 00000000 ____D C:\Users\Ana\Downloads\Enter The Dragon HD 720p SeCtIoN8 {SharegoRG}
2013-08-24 16:58 - 2013-08-24 16:58 - 00000000 ____D C:\Users\Ana\Desktop\bio
2013-08-24 11:32 - 2013-08-24 11:35 - 00049628 _____ C:\Users\Ana\Downloads\SystemLook.txt
2013-08-24 11:32 - 2013-08-24 11:32 - 00165376 _____ C:\Users\Ana\Downloads\SystemLook_x64.exe
2013-08-24 11:30 - 2013-08-24 11:30 - 00027457 _____ C:\Users\Ana\Downloads\FRST.txt
2013-08-24 11:30 - 2013-08-24 11:30 - 00022312 _____ C:\Users\Ana\Downloads\Addition.txt
2013-08-24 11:29 - 2013-08-24 11:29 - 01576584 _____ (Farbar) C:\Users\Ana\Downloads\FRST64.exe
2013-08-24 11:29 - 2013-08-24 11:29 - 00000000 ____D C:\FRST
2013-08-24 10:48 - 2013-08-24 10:55 - 00000000 ____D C:\AdwCleaner
2013-08-24 10:46 - 2013-08-30 10:06 - 00000000 ____D C:\Users\Ana\Desktop\picassa
2013-08-24 10:45 - 2013-08-24 10:45 - 00000000 ____D C:\Users\Ana\Desktop\Stare dane programu Firefox
2013-08-24 10:36 - 2013-08-24 10:36 - 00000000 ____D C:\_OTL
2013-08-21 13:42 - 2013-08-21 13:43 - 12235264 _____ C:\Users\Ana\Downloads\Nauka w dziejach kultury europejskiej.ppt
2013-08-03 22:16 - 2013-08-03 22:16 - 00294704 _____ C:\Windows\Minidump\080313-20857-01.dmp
2013-08-01 12:19 - 2013-08-01 12:19 - 00000000 ____D C:\Users\Ana\AppData\Roaming\Soldat
2013-07-31 21:34 - 2013-07-31 22:29 - 00000000 ____D C:\Users\Ana\Downloads\zosiek
2013-07-31 18:54 - 2013-07-31 18:54 - 16389340 _____ C:\Users\Ana\Downloads\zosiek.zip

==================== One Month Modified Files and Folders =======

2013-08-30 10:09 - 2013-08-30 10:08 - 01579080 _____ (Farbar) C:\Users\Ana\Downloads\FRST64(1).exe
2013-08-30 10:06 - 2013-08-24 10:46 - 00000000 ____D C:\Users\Ana\Desktop\picassa
2013-08-30 09:43 - 2012-12-14 01:17 - 00000000 ____D C:\Users\Ana\Desktop\arka pobrane
2013-08-30 09:37 - 2013-03-02 14:22 - 00000000 ____D C:\Users\Ana\AppData\Roaming\GG
2013-08-30 09:30 - 2012-05-03 10:46 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-30 09:28 - 2011-09-12 22:58 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2128407490-1581983887-104016994-1001UA.job
2013-08-30 08:32 - 2011-09-08 15:14 - 01570985 _____ C:\Windows\WindowsUpdate.log
2013-08-30 08:31 - 2011-09-12 22:58 - 00000998 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2128407490-1581983887-104016994-1001Core.job
2013-08-30 00:28 - 2009-07-14 06:51 - 00198473 _____ C:\Windows\setupact.log
2013-08-29 23:47 - 2011-09-12 15:23 - 00000000 ___RD C:\Users\Ana
2013-08-29 21:30 - 2011-09-09 01:05 - 00698590 _____ C:\Windows\system32\perfh015.dat
2013-08-29 21:30 - 2011-09-09 01:05 - 00135410 _____ C:\Windows\system32\perfc015.dat
2013-08-29 21:30 - 2009-07-14 07:13 - 01551444 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-29 21:15 - 2011-09-12 22:13 - 00000439 _____ C:\Windows\Lexstat.ini
2013-08-29 18:55 - 2009-07-14 06:45 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-29 18:55 - 2009-07-14 06:45 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-29 18:48 - 2012-07-21 00:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-29 18:47 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-29 18:31 - 2011-09-14 00:47 - 00003974 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1B098358-56B3-4139-99CE-911F44EEEECB}
2013-08-27 16:25 - 2013-08-26 10:03 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-25 20:47 - 2011-09-12 20:27 - 00000000 ____D C:\Users\Ana\AppData\Roaming\uTorrent
2013-08-25 20:38 - 2011-02-17 19:18 - 00000000 ___RD C:\Users\Ana\Desktop\SUDAN DR
2013-08-25 20:11 - 2013-08-25 19:40 - 00000000 ____D C:\Users\Ana\Downloads\Dragon The Bruce Lee Story
2013-08-25 19:27 - 2011-09-20 23:27 - 00000000 ____D C:\Users\Ana\AppData\Roaming\vlc
2013-08-24 21:40 - 2013-08-24 21:40 - 00000000 ____D C:\Users\Ana\Downloads\Enter The Dragon HD 720p SeCtIoN8 {SharegoRG}
2013-08-24 17:30 - 2011-04-21 00:55 - 00000000 ___RD C:\Users\Ana\Desktop\MOJA PRACA
2013-08-24 17:25 - 2009-08-18 19:22 - 00000000 ___RD C:\Users\Ana\Desktop\STUDIA DR
2013-08-24 17:13 - 2009-12-08 13:09 - 00000000 ____D C:\Users\Ana\Documents\praca
2013-08-24 17:13 - 2008-05-13 00:27 - 00000000 ___RD C:\Users\Ana\Desktop\AFRICA
2013-08-24 16:58 - 2013-08-24 16:58 - 00000000 ____D C:\Users\Ana\Desktop\bio
2013-08-24 11:35 - 2013-08-24 11:32 - 00049628 _____ C:\Users\Ana\Downloads\SystemLook.txt
2013-08-24 11:35 - 2012-12-13 22:00 - 01980416 ___SH C:\Users\Ana\Desktop\Thumbs.db
2013-08-24 11:32 - 2013-08-24 11:32 - 00165376 _____ C:\Users\Ana\Downloads\SystemLook_x64.exe
2013-08-24 11:30 - 2013-08-24 11:30 - 00027457 _____ C:\Users\Ana\Downloads\FRST.txt
2013-08-24 11:30 - 2013-08-24 11:30 - 00022312 _____ C:\Users\Ana\Downloads\Addition.txt
2013-08-24 11:29 - 2013-08-24 11:29 - 01576584 _____ (Farbar) C:\Users\Ana\Downloads\FRST64.exe
2013-08-24 11:29 - 2013-08-24 11:29 - 00000000 ____D C:\FRST
2013-08-24 10:55 - 2013-08-24 10:48 - 00000000 ____D C:\AdwCleaner
2013-08-24 10:45 - 2013-08-24 10:45 - 00000000 ____D C:\Users\Ana\Desktop\Stare dane programu Firefox
2013-08-24 10:36 - 2013-08-24 10:36 - 00000000 ____D C:\_OTL
2013-08-23 12:51 - 2011-09-26 00:58 - 00000000 ____D C:\Users\Ana\AppData\Local\CrashDumps
2013-08-21 20:40 - 2012-05-03 10:46 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 20:40 - 2012-05-03 10:46 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-21 20:40 - 2011-09-12 20:18 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-21 13:43 - 2013-08-21 13:42 - 12235264 _____ C:\Users\Ana\Downloads\Nauka w dziejach kultury europejskiej.ppt
2013-08-20 12:43 - 2012-10-27 12:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-18 11:54 - 2012-10-30 11:01 - 00000000 ____D C:\Users\Ana\AppData\Local\Windows Live
2013-08-16 11:45 - 2011-09-13 22:08 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-16 11:43 - 2013-07-15 09:13 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 11:33 - 2011-09-13 09:58 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 21:57 - 2013-07-12 15:18 - 00000375 ____H C:\Users\Ana\Downloads\.picasa.ini
2013-08-14 21:57 - 2013-07-12 15:18 - 00000000 ___HD C:\Users\Ana\Downloads\.picasaoriginals
2013-08-14 21:46 - 2011-10-15 00:43 - 00000000 ____D C:\Users\Ana\AppData\Roaming\Skype
2013-08-14 17:05 - 2012-04-05 21:47 - 00014848 _____ C:\Users\Ana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-06 09:15 - 2011-09-13 00:45 - 00000000 ____D C:\Users\Ana\AppData\Local\Adobe
2013-08-03 22:16 - 2013-08-03 22:16 - 00294704 _____ C:\Windows\Minidump\080313-20857-01.dmp
2013-08-03 22:16 - 2013-07-21 23:45 - 00000000 ____D C:\Windows\Minidump
2013-08-02 11:19 - 2013-01-17 20:47 - 00000081 _____ C:\Users\Ana\skalk.log
2013-08-02 11:19 - 2013-01-17 20:47 - 00000000 _____ C:\Users\Ana\skalk.log.lck
2013-08-02 10:05 - 2011-09-12 15:23 - 00126304 _____ C:\Users\Ana\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-02 10:04 - 2009-07-14 06:45 - 00470536 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-01 14:02 - 2013-01-17 20:50 - 00000142 _____ C:\Users\Ana\.skalk.agent
2013-08-01 12:19 - 2013-08-01 12:19 - 00000000 ____D C:\Users\Ana\AppData\Roaming\Soldat
2013-07-31 22:29 - 2013-07-31 21:34 - 00000000 ____D C:\Users\Ana\Downloads\zosiek
2013-07-31 18:54 - 2013-07-31 18:54 - 16389340 _____ C:\Users\Ana\Downloads\zosiek.zip

Files to move or delete:
====================
C:\Users\Ana\AppData\Local\Temp\Quarantine.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 09:41

==================== End Of Log ============================