Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-09-2013 04
Ran by Krzysztof (administrator) on HP on 14-09-2013 16:03:47
Running from C:\Users\Krzysztof\Desktop
Windows 7 Home Premium (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\STacSV64.exe
(Hewlett-Packard) C:\Windows\system32\Hpservice.exe
(Wacom Technology, Corp.) C:\Program Files\WTouch\WTouchService.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Validity Sensors, Inc.) C:\Windows\system32\vcsFPService.exe
(AVAST Software) C:\Program Files\Avast\AvastSvc.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Wacom Technology, Corp.) C:\Program Files\WTouch\WTouchUser.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(Hewlett-Packard ) C:\Program Files\Hewlett-Packard\HPToneControl\HPToneCtl.exe
() C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(Valve Corporation) C:\Program Files (x86)\SQUARE ENIX\primal carnage\Steam.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP ENVY Document Card Utilities\hpdocstart.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink PowerDVD10\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(AVAST Software) C:\Program Files\Avast\AvastUI.exe
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DPAgent.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\AESTSr64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
() C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Wacom Technology, Corp.) C:\Windows\system32\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Windows\system32\WTablet\Pen_TabletUser.exe
(Wacom Technology, Corp.) C:\Windows\system32\Pen_Tablet.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2104104 2010-04-10] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-01-14] (IDT, Inc.)
HKLM\...\Run: [HP Quick Launch] - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [451072 2010-01-18] (Hewlett-Packard Company)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-01-20] ()
HKLM\...\Run: [HPToneControl] - C:\Program Files\Hewlett-Packard\HPToneControl\HPTonectl.exe [107832 2009-08-19] (Hewlett-Packard )
HKLM\...\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2009-12-16] (Hewlett-Packard)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Java\jre7\bin\jusched.exe"
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [EA Core] - C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [2772992 2008-07-22] (Electronic Arts)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-03-03] ()
HKCU\...\Run: [Steam] - C:\Program Files (x86)\SQUARE ENIX\primal carnage\Steam.exe [1811368 2013-09-06] (Valve Corporation)
MountPoints2: F - F:\AutoRun.exe "0, Age of Empires III Complete Collection PL, GameBurner.net"
MountPoints2: G - G:\AutoRun.exe "0, Age of Empires III Complete Collection PL, GameBurner.net"
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Envy Guides AutoPlay] - C:\Program Files (x86)\Hewlett-Packard\HP ENVY Document Card Utilities\hpdocstart.exe [76584 2010-03-24] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2010-01-25] (EasyBits Software AS)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink PowerDVD10\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-03-13] (cyberlink)
HKLM-x32\...\Run: [avast] - C:\Program Files\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-08-24] (Power Software Ltd)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKLM-x32\...\Run: [tuto4pc_pl_16] -  [x]
HKU\Default\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [1712184 2010-01-27] ()
HKU\Default User\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [1712184 2010-01-27] ()
Lsa: [Notification Packages] DPPassFilter scecli

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: HP SimplePass Identity Protection Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\dpotspluginie8.dll (DigitalPersona, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: HP SimplePass Identity Protection Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\DigitalPersona\Bin\dpotspluginie8.dll (DigitalPersona, Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2010-05-31] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome: 
=======
CHR HomePage: file:///C:/Users/Krzysztof/Downloads
CHR RestoreOnStartup: "hxxp://www.google.pl/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (4game) - C:\Program Files (x86)\4game\npplugin4game.dll (Innova Co S.a r.l.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Lightning Newtab) - C:\Users\KRZYSZ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.4.8_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\KRZYSZ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Krzysztof\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx

==================== Services (Whitelisted) =================

S2 4game-service; C:\Program Files (x86)\4game\4game-service.exe [1133056 2013-05-23] (Innova Co S.a r.l.)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
S3 hpdoccardsvc; C:\Program Files (x86)\Hewlett-Packard\HP ENVY Document Card Utilities\doccardsvc.exe [83240 2010-03-24] (Hewlett-Packard Developement Company, L.P.)
R2 HPWMISVC; C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [20480 2010-01-18] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-12-31] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\STacSV64.exe [244736 2010-01-14] (IDT, Inc.)
R2 WTouchService; C:\Program Files\WTouch\WTouchService.exe [127272 2009-07-15] (Wacom Technology, Corp.)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R1 DVMIO; C:\Windows\System32\DRIVERS\dvmio.sys [20056 2010-01-29] (DeviceVM, Inc.)
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}; C:\Program Files (x86)\CyberLink PowerDVD10\PowerDVD10\NavFilter\000.fcl [146928 2012-08-15] (CyberLink Corp.)
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}; C:\Program Files (x86)\CyberLink PowerDVD10\PowerDVD10\NavFilter\000.fcl [146928 2012-08-15] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-14 14:56 - 2013-09-14 14:56 - 00000000 ____D C:\AdwCleaner
2013-09-14 14:55 - 2013-09-14 14:55 - 00448512 _____ (OldTimer Tools) C:\Users\Krzysztof\Desktop\TFC.exe
2013-09-14 14:53 - 2013-09-14 14:54 - 01037278 _____ C:\Users\Krzysztof\Desktop\AdwCleaner.exe
2013-09-14 14:27 - 2013-09-14 14:27 - 00000000 ____D C:\Windows\system32\SPReview
2013-09-14 14:09 - 2013-09-14 14:09 - 00140768 _____ C:\Users\Krzysztof\Desktop\Extras.Txt
2013-09-14 14:08 - 2013-09-14 14:08 - 00118894 _____ C:\Users\Krzysztof\Desktop\OTL.Txt
2013-09-14 13:59 - 2013-09-14 13:59 - 00061664 _____ C:\Users\Krzysztof\Desktop\Addition.txt
2013-09-14 13:47 - 2013-09-14 13:47 - 00002261 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-14 13:46 - 2013-09-14 13:46 - 00784872 _____ (Google Inc.) C:\Users\Krzysztof\Downloads\ChromeSetup.exe
2013-09-14 13:43 - 2013-09-14 14:48 - 00000000 ____D C:\FRST
2013-09-14 13:27 - 2013-09-14 13:27 - 01950312 _____ (Farbar) C:\Users\Krzysztof\Desktop\FRST64.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00602112 _____ (OldTimer Tools) C:\Users\Krzysztof\Desktop\OTL.exe
2013-09-10 17:39 - 2013-09-14 16:01 - 00000560 _____ C:\Windows\setupact.log
2013-09-10 17:39 - 2013-09-10 17:39 - 00000000 _____ C:\Windows\setuperr.log
2013-08-31 16:35 - 2013-08-31 16:36 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-31 16:35 - 2013-08-31 16:35 - 00614816 _____ C:\Users\Krzysztof\Downloads\directx_9.28.1886.exe
2013-08-31 11:53 - 2013-08-31 11:55 - 108279664 _____ (Microsoft Corporation) C:\Users\Krzysztof\Downloads\directx_aug2009_redist.exe
2013-08-31 11:50 - 2013-08-31 11:50 - 00292184 _____ (Microsoft Corporation) C:\Users\Krzysztof\Downloads\DirectX 9.29.1974.exe
2013-08-31 11:49 - 2013-08-31 11:49 - 00601440 _____ C:\Users\Krzysztof\Downloads\DirectX 9.29.1974_isdmgr.exe
2013-08-31 11:43 - 2013-08-31 11:43 - 00000000 ____D C:\Users\Krzysztof\Documents\Battlefield 2 Demo
2013-08-31 11:38 - 2013-08-31 11:38 - 00000000 ____D C:\Users\Krzysztof\Documents\Battlefield 2
2013-08-31 11:35 - 2013-08-31 11:35 - 00000000 ____D C:\Program Files (x86)\EA GAMES
2013-08-30 09:56 - 2013-08-30 09:56 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-08-20 13:53 - 2013-08-22 08:10 - 01638822 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-08-20 13:50 - 2013-08-20 13:50 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2013-08-20 11:58 - 2013-08-20 11:59 - 10202871 _____ C:\Users\Krzysztof\Downloads\LJTD x86.rar
2013-08-19 11:14 - 2013-08-19 11:16 - 00000000 ____D C:\b00bdd4e1d475236d3
2013-08-15 16:06 - 2013-08-15 16:06 - 02902274 _____ C:\Users\Krzysztof\Downloads\Sonata_na_klarnet_3.rar

==================== One Month Modified Files and Folders =======

2013-09-14 16:04 - 2013-03-03 10:13 - 00000000 ____D C:\Users\Krzysztof\AppData\Local\PMB Files
2013-09-14 16:02 - 2013-01-04 22:59 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\WTablet
2013-09-14 16:02 - 2012-12-15 11:54 - 00000000 ____D C:\Users\Krzysztof\AppData\Local\LogMeIn Hamachi
2013-09-14 16:02 - 2012-12-15 11:39 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\Skype
2013-09-14 16:02 - 2012-12-01 21:49 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-14 16:02 - 2012-11-30 16:50 - 00066777 _____ C:\Windows\AutoKMS.log
2013-09-14 16:02 - 2012-11-30 01:15 - 00000208 _____ C:\Windows\Tasks\AutoKMS.job
2013-09-14 16:02 - 2012-11-30 00:58 - 00004152 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-14 16:01 - 2013-09-10 17:39 - 00000560 _____ C:\Windows\setupact.log
2013-09-14 16:01 - 2012-11-29 22:49 - 01652001 _____ C:\Windows\WindowsUpdate.log
2013-09-14 16:01 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-14 16:01 - 2009-07-14 06:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-14 16:01 - 2009-07-14 06:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-14 14:56 - 2013-09-14 14:56 - 00000000 ____D C:\AdwCleaner
2013-09-14 14:56 - 2012-11-30 21:26 - 00000000 ____D C:\Users\Krzysztof\Desktop\programy
2013-09-14 14:56 - 2012-11-30 00:15 - 00001194 _____ C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-14 14:56 - 2012-11-30 00:15 - 00001011 _____ C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-14 14:55 - 2013-09-14 14:55 - 00448512 _____ (OldTimer Tools) C:\Users\Krzysztof\Desktop\TFC.exe
2013-09-14 14:54 - 2013-09-14 14:53 - 01037278 _____ C:\Users\Krzysztof\Desktop\AdwCleaner.exe
2013-09-14 14:49 - 2012-11-30 00:07 - 00000000 ____D C:\Users\Krzysztof
2013-09-14 14:48 - 2013-09-14 13:43 - 00000000 ____D C:\FRST
2013-09-14 14:27 - 2013-09-14 14:27 - 00000000 ____D C:\Windows\system32\SPReview
2013-09-14 14:23 - 2012-12-01 21:49 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-14 14:09 - 2013-09-14 14:09 - 00140768 _____ C:\Users\Krzysztof\Desktop\Extras.Txt
2013-09-14 14:08 - 2013-09-14 14:08 - 00118894 _____ C:\Users\Krzysztof\Desktop\OTL.Txt
2013-09-14 13:59 - 2013-09-14 13:59 - 00061664 _____ C:\Users\Krzysztof\Desktop\Addition.txt
2013-09-14 13:49 - 2010-06-01 00:27 - 00738192 _____ C:\Windows\system32\perfh015.dat
2013-09-14 13:49 - 2010-06-01 00:27 - 00154848 _____ C:\Windows\system32\perfc015.dat
2013-09-14 13:49 - 2009-07-14 07:13 - 01663412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-14 13:47 - 2013-09-14 13:47 - 00002261 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-14 13:46 - 2013-09-14 13:46 - 00784872 _____ (Google Inc.) C:\Users\Krzysztof\Downloads\ChromeSetup.exe
2013-09-14 13:41 - 2012-12-01 21:49 - 00000000 ____D C:\Program Files\Google
2013-09-14 13:41 - 2012-12-01 21:49 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-14 13:41 - 2012-11-29 22:54 - 00402010 _____ C:\Windows\PFRO.log
2013-09-14 13:29 - 2012-12-01 21:49 - 00000000 ____D C:\Users\Krzysztof\AppData\Local\Google
2013-09-14 13:27 - 2013-09-14 13:27 - 01950312 _____ (Farbar) C:\Users\Krzysztof\Desktop\FRST64.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00602112 _____ (OldTimer Tools) C:\Users\Krzysztof\Desktop\OTL.exe
2013-09-14 12:16 - 2013-07-16 08:26 - 00000000 ____D C:\Windows\system32\MRT
2013-09-14 12:14 - 2012-11-30 01:31 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-14 12:14 - 2010-05-31 15:42 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-11 20:17 - 2013-03-03 10:13 - 00000000 ____D C:\ProgramData\PMB Files
2013-09-11 19:17 - 2012-11-30 21:25 - 00000000 ____D C:\Users\Krzysztof\Desktop\gry
2013-09-11 18:59 - 2012-11-30 00:57 - 00000000 ____D C:\Program Files\Avast
2013-09-10 17:59 - 2012-11-30 00:15 - 00000000 ___RD C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 17:50 - 2012-11-30 00:58 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-10 17:45 - 2012-11-30 00:42 - 00000000 ____D C:\Program Files (x86)\Adobe Reader 11.0
2013-09-10 17:39 - 2013-09-10 17:39 - 00000000 _____ C:\Windows\setuperr.log
2013-09-01 15:19 - 2012-12-26 10:37 - 00000000 ____D C:\Windows\Minidump
2013-09-01 13:00 - 2013-07-11 10:46 - 00000000 ____D C:\Program Files\MailShare
2013-08-31 16:36 - 2013-08-31 16:35 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-31 16:35 - 2013-08-31 16:35 - 00614816 _____ C:\Users\Krzysztof\Downloads\directx_9.28.1886.exe
2013-08-31 11:55 - 2013-08-31 11:53 - 108279664 _____ (Microsoft Corporation) C:\Users\Krzysztof\Downloads\directx_aug2009_redist.exe
2013-08-31 11:50 - 2013-08-31 11:50 - 00292184 _____ (Microsoft Corporation) C:\Users\Krzysztof\Downloads\DirectX 9.29.1974.exe
2013-08-31 11:49 - 2013-08-31 11:49 - 00601440 _____ C:\Users\Krzysztof\Downloads\DirectX 9.29.1974_isdmgr.exe
2013-08-31 11:43 - 2013-08-31 11:43 - 00000000 ____D C:\Users\Krzysztof\Documents\Battlefield 2 Demo
2013-08-31 11:43 - 2013-06-28 22:42 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-08-31 11:39 - 2010-05-31 16:40 - 00387801 _____ C:\Windows\DirectX.log
2013-08-31 11:38 - 2013-08-31 11:38 - 00000000 ____D C:\Users\Krzysztof\Documents\Battlefield 2
2013-08-31 11:35 - 2013-08-31 11:35 - 00000000 ____D C:\Program Files (x86)\EA GAMES
2013-08-31 11:35 - 2010-05-31 14:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-30 10:06 - 2013-06-25 15:17 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\.minecraft
2013-08-30 09:56 - 2013-08-30 09:56 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-08-30 09:48 - 2013-03-01 09:35 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-03-01 09:35 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2012-11-30 00:58 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2012-11-30 00:58 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2012-11-30 00:58 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2012-11-30 00:58 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2012-11-30 00:58 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2012-11-30 00:58 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2012-11-30 00:58 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 09:47 - 2012-11-30 00:57 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-23 10:54 - 2011-06-11 02:58 - 00773800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll
2013-08-23 10:54 - 2011-06-11 02:58 - 00421032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll
2013-08-22 08:10 - 2013-08-20 13:53 - 01638822 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-08-21 18:17 - 2012-12-01 15:56 - 00000000 ____D C:\Program Files (x86)\MoorHunt
2013-08-20 15:46 - 2013-04-07 14:28 - 04296704 _____ C:\Users\Krzysztof\Downloads\hamachi.msi
2013-08-20 13:56 - 2013-01-26 22:24 - 00000000 ____D C:\Users\Krzysztof\Documents\My Games
2013-08-20 13:50 - 2013-08-20 13:50 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2013-08-20 11:59 - 2013-08-20 11:58 - 10202871 _____ C:\Users\Krzysztof\Downloads\LJTD x86.rar
2013-08-20 08:25 - 2013-02-01 15:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-20 08:25 - 2012-12-15 11:39 - 00000000 ____D C:\ProgramData\Skype
2013-08-19 11:16 - 2013-08-19 11:14 - 00000000 ____D C:\b00bdd4e1d475236d3
2013-08-16 18:52 - 2013-07-30 16:01 - 00000000 ____D C:\Program Files (x86)\4game
2013-08-15 16:06 - 2013-08-15 16:06 - 02902274 _____ C:\Users\Krzysztof\Downloads\Sonata_na_klarnet_3.rar

Some content of TEMP:
====================
C:\Users\Krzysztof\AppData\Local\Temp\EAD8A15.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-14 14:45

==================== End Of Log ============================