Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-10-2013
Ran by Antek (administrator) on HFHFH on 25-10-2013 08:26:41
Running from C:\Users\Antek\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Could not list processes ===============

==================== Registry (Whitelisted) ==================

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {7000cf83-0731-11e3-a6a9-74e543455c54} - E:\AutoRun.exe
MountPoints2: {7000cf8a-0731-11e3-a6a9-74e543455c54} - E:\AutoRun.exe
MountPoints2: {fae61397-a11a-11e2-bd12-74e543455c54} - E:\Startme.exe
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-10-21] (AVAST Software)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\SWTOOLS\SimpleTap DeskBand\ShowBand.exe /show
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [260928 2012-02-23] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [215360 2012-02-23] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\BingExt.dll (Microsoft Corporation.)
Tcpip\Parameters: [DhcpNameServer] 192.168.42.129

FireFox:
========
FF ProfilePath: C:\Users\Antek\AppData\Roaming\Mozilla\Firefox\Profiles\eqrv99oz.default-1382680493799
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=11.0.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.0.0 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @nsroblox.roblox.com/launcher - C:\Users\Antek\AppData\Local\Roblox\Versions\version-6cfc785e896545ae\\NPRobloxProxy.dll ( ROBLOX Corporation)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Antek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://google.com/
CHR RestoreOnStartup: "hxxp://www.google.pl/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\Antek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Roblox Launcher Plugin) - C:\Users\Antek\AppData\Local\Roblox\Versions\version-6cfc785e896545ae\\NPRobloxProxy.dll ( ROBLOX Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Chrome In-App Payments service) - C:\Users\Antek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR HKLM\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\Antek\AppData\Local\newhb2.crx
CHR HKLM-x32\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\Antek\AppData\Local\newhb2.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-21] (AVAST Software)
S3 COMSysApp; C:\Windows\SysWow64\dllhost.exe [7168 2009-07-14] (Microsoft Corporation)
R2 DamageGuardSvc; C:\Program Files\Lenovo\Instant Reset\DamageGuardSvc.exe [572976 2012-03-26] (Lenovo (Beijing) Limited)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [232288 2012-03-12] ()
S3 msiserver; C:\Windows\SysWow64\msiexec.exe [73216 2010-11-21] (Microsoft Corporation)
R2 WSearch; C:\Windows\SysWow64\SearchIndexer.exe [427520 2011-10-10] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-02-09] (Atheros)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-10-21] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-10-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-21] ()
R1 DamageGuard; C:\Windows\System32\DRIVERS\DamageGuardX64.sys [217392 2012-02-10] (Lenovo)
R1 dgFltr; C:\Windows\System32\drivers\dgFltrX64.sys [23648 2011-12-13] (Lenovo)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2011-12-06] (Vimicro Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-25 08:15 - 2013-10-25 08:15 - 00448512 _____ (OldTimer Tools) C:\Users\Antek\Downloads\TFC.exe
2013-10-25 08:13 - 2013-10-25 08:13 - 00004080 _____ C:\Users\Antek\Desktop\AdwCleaner[S0].txt
2013-10-25 08:09 - 2013-10-25 08:11 - 00000000 ____D C:\AdwCleaner
2013-10-25 08:09 - 2013-10-25 08:09 - 01060070 _____ C:\Users\Antek\Downloads\AdwCleaner(1).exe
2013-10-25 07:54 - 2013-10-25 07:54 - 00000000 ____D C:\Users\Antek\Desktop\Stare dane programu Firefox
2013-10-25 07:42 - 2013-10-25 07:42 - 01955412 _____ (Farbar) C:\Users\Antek\Downloads\FRST64.exe
2013-10-23 14:37 - 2013-10-23 14:37 - 00000000 ____D C:\ProgramData\MobileBrServ
2013-10-23 14:37 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023x.sys
2013-10-23 14:37 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rndismpx.sys
2013-10-23 14:05 - 2013-10-23 14:04 - 00377856 _____ C:\Users\Antek\Downloads\x64rc70r.exe
2013-10-23 14:05 - 2013-10-23 14:04 - 00377856 _____ C:\Users\Antek\Downloads\q53hxnuf.exe
2013-10-23 14:01 - 2013-10-23 14:01 - 00028372 _____ C:\Users\Antek\Downloads\Addition.txt
2013-10-23 13:58 - 2013-10-25 07:44 - 00000000 ____D C:\FRST
2013-10-23 13:47 - 2013-10-23 13:47 - 00086836 _____ C:\Users\Antek\Downloads\Extras.Txt
2013-10-23 13:46 - 2013-10-23 13:46 - 00121232 _____ C:\Users\Antek\Downloads\OTL.Txt
2013-10-23 12:55 - 2013-10-23 12:56 - 00891167 _____ C:\Users\Antek\Downloads\SecurityCheck.exe
2013-10-23 12:54 - 2013-10-23 12:54 - 00602112 _____ (OldTimer Tools) C:\Users\Antek\Downloads\OTL.exe
2013-10-23 12:54 - 2013-10-23 12:54 - 00602112 _____ (OldTimer Tools) C:\Users\Antek\Downloads\OTL(1).exe
2013-10-23 08:47 - 2013-10-23 08:48 - 02347384 _____ (ESET) C:\Users\Antek\Downloads\esetsmartinstaller_plk(1).exe
2013-10-21 16:44 - 2013-10-21 16:44 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-10-21 16:44 - 2013-10-21 16:44 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-10-21 16:44 - 2013-10-21 16:44 - 00001983 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-21 16:42 - 2013-10-21 16:42 - 00000000 ____D C:\Users\Antek\AppData\Roaming\AVAST Software
2013-10-21 15:24 - 2013-10-21 15:24 - 00447888 _____ (AVAST Software) C:\Windows\system32\Drivers\ASWNDISFLT.sys
2013-10-21 15:08 - 2013-10-21 15:08 - 00131232 _____ (AVAST Software) C:\Windows\system32\Drivers\ASWFW.sys
2013-10-19 07:02 - 2013-10-19 07:02 - 02347384 _____ (ESET) C:\Users\Antek\Downloads\esetsmartinstaller_plk.exe
2013-10-17 09:31 - 2013-10-17 09:32 - 00000000 ____D C:\Users\Antek\AppData\Roaming\ActiveDossierUploader
2013-10-17 09:31 - 2013-10-17 09:31 - 02052096 _____ (Marius Czyz aka Phalynx) C:\Users\Antek\Downloads\ActiveDossierUploader.exe
2013-10-11 16:49 - 2013-09-22 17:43 - 17833984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-11 16:49 - 2013-09-22 17:01 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-11 16:49 - 2013-09-22 16:42 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-11 16:49 - 2013-09-22 16:36 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-11 16:49 - 2013-09-22 16:33 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-11 16:49 - 2013-09-22 16:33 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-11 16:49 - 2013-09-22 16:30 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-11 16:49 - 2013-09-22 16:27 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-11 16:49 - 2013-09-22 16:23 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-11 16:49 - 2013-09-22 16:22 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-11 16:49 - 2013-09-22 16:21 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-11 16:49 - 2013-09-22 16:19 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-11 16:49 - 2013-09-22 16:19 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-11 16:49 - 2013-09-22 16:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-11 16:49 - 2013-09-22 16:15 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-11 16:49 - 2013-09-22 16:07 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-11 16:49 - 2013-09-22 12:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-11 16:49 - 2013-09-22 12:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-11 16:49 - 2013-09-22 12:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-11 16:49 - 2013-09-22 12:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-10-11 16:49 - 2013-09-22 12:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-11 16:49 - 2013-09-22 12:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-11 16:49 - 2013-09-22 12:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-10-11 16:49 - 2013-09-22 12:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-11 16:49 - 2013-09-22 12:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-10-11 16:49 - 2013-09-22 12:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-11 16:49 - 2013-09-22 12:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-10-11 16:49 - 2013-09-22 12:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-11 16:49 - 2013-09-22 12:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-11 16:49 - 2013-09-22 12:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-11 16:49 - 2013-09-22 12:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-10-11 16:49 - 2013-09-22 11:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-10 22:25 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 22:25 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 22:24 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-10 22:24 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-10 22:24 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-10 22:24 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-10 22:24 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-10 22:24 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-10 22:24 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-10 22:24 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-10 22:24 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-10 22:24 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 22:24 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 22:24 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 22:24 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-10 22:24 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 22:24 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-10 22:24 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 22:24 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 22:24 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 22:24 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 22:24 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 22:24 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-10 22:24 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 22:24 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 22:24 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 22:24 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 22:24 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 22:24 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 22:24 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 22:24 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 22:24 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 22:24 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-10 22:24 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 22:24 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 22:24 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 22:24 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-10 22:24 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 22:24 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-10 22:24 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 22:24 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-10 22:24 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 22:24 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-10 22:24 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 22:24 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 22:24 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-03 17:35 - 2013-10-03 17:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-02 20:03 - 2013-10-02 20:03 - 00695128 _____ C:\Users\Antek\Downloads\Rappelz_PL.exe
2013-10-02 20:03 - 2013-10-02 20:03 - 00695128 _____ C:\Users\Antek\Downloads\Rappelz_PL (2).exe
2013-10-02 20:03 - 2013-10-02 20:03 - 00695128 _____ C:\Users\Antek\Downloads\Rappelz_PL (1).exe
2013-10-01 10:03 - 2013-10-22 10:32 - 00361117 _____ C:\Users\Antek\AppData\Local\newhb2.crx
2013-09-29 10:11 - 2013-02-07 23:07 - 314594655 _____ C:\backup - Kopia.091
2013-09-26 11:32 - 2013-09-26 11:32 - 00000000 ____D C:\Users\Antek\Desktop\minecraft

==================== One Month Modified Files and Folders =======

2013-10-25 08:18 - 2013-03-15 00:18 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-25 08:18 - 1601-01-02 06:16 - 02644633 _____ C:\FaceProv.log
2013-10-25 08:18 - 1601-01-02 06:16 - 00223499 _____ C:\Windows\system32\fastboot.set
2013-10-25 08:17 - 1601-01-02 06:16 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-25 08:15 - 2013-10-25 08:15 - 00448512 _____ (OldTimer Tools) C:\Users\Antek\Downloads\TFC.exe
2013-10-25 08:13 - 2013-10-25 08:13 - 00004080 _____ C:\Users\Antek\Desktop\AdwCleaner[S0].txt
2013-10-25 08:11 - 2013-10-25 08:09 - 00000000 ____D C:\AdwCleaner
2013-10-25 08:09 - 2013-10-25 08:09 - 01060070 _____ C:\Users\Antek\Downloads\AdwCleaner(1).exe
2013-10-25 08:02 - 2013-04-22 22:09 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-25 07:54 - 2013-10-25 07:54 - 00000000 ____D C:\Users\Antek\Desktop\Stare dane programu Firefox
2013-10-25 07:52 - 2013-01-20 10:00 - 00000000 ____D C:\Users\Antek\AppData\Local\CrashDumps
2013-10-25 07:51 - 1601-01-02 06:16 - 01551484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-25 07:51 - 1601-01-02 06:16 - 00698598 _____ C:\Windows\system32\perfh015.dat
2013-10-25 07:51 - 1601-01-02 06:16 - 00135418 _____ C:\Windows\system32\perfc015.dat
2013-10-25 07:45 - 2013-03-15 00:18 - 00001046 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-25 07:44 - 2013-10-23 13:58 - 00000000 ____D C:\FRST
2013-10-25 07:42 - 2013-10-25 07:42 - 01955412 _____ (Farbar) C:\Users\Antek\Downloads\FRST64.exe
2013-10-25 07:10 - 2013-03-22 21:11 - 01774219 _____ C:\Windows\IE10_main.log
2013-10-25 07:10 - 2012-06-26 22:46 - 01126141 _____ C:\Windows\WindowsUpdate.log
2013-10-24 15:35 - 2013-07-27 00:32 - 00000116 _____ C:\Users\Antek\AppData\Roaming\WB.CFG
2013-10-24 15:35 - 2013-06-13 13:34 - 00000006 _____ C:\Users\Antek\AppData\Roaming\WBPU-TTL.DAT
2013-10-23 14:37 - 2013-10-23 14:37 - 00000000 ____D C:\ProgramData\MobileBrServ
2013-10-23 14:04 - 2013-10-23 14:05 - 00377856 _____ C:\Users\Antek\Downloads\x64rc70r.exe
2013-10-23 14:04 - 2013-10-23 14:05 - 00377856 _____ C:\Users\Antek\Downloads\q53hxnuf.exe
2013-10-23 14:01 - 2013-10-23 14:01 - 00028372 _____ C:\Users\Antek\Downloads\Addition.txt
2013-10-23 13:47 - 2013-10-23 13:47 - 00086836 _____ C:\Users\Antek\Downloads\Extras.Txt
2013-10-23 13:46 - 2013-10-23 13:46 - 00121232 _____ C:\Users\Antek\Downloads\OTL.Txt
2013-10-23 12:56 - 2013-10-23 12:55 - 00891167 _____ C:\Users\Antek\Downloads\SecurityCheck.exe
2013-10-23 12:54 - 2013-10-23 12:54 - 00602112 _____ (OldTimer Tools) C:\Users\Antek\Downloads\OTL.exe
2013-10-23 12:54 - 2013-10-23 12:54 - 00602112 _____ (OldTimer Tools) C:\Users\Antek\Downloads\OTL(1).exe
2013-10-23 08:48 - 2013-10-23 08:47 - 02347384 _____ (ESET) C:\Users\Antek\Downloads\esetsmartinstaller_plk(1).exe
2013-10-22 10:32 - 2013-10-01 10:03 - 00361117 _____ C:\Users\Antek\AppData\Local\newhb2.crx
2013-10-21 16:44 - 2013-10-21 16:44 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-10-21 16:44 - 2013-10-21 16:44 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-10-21 16:44 - 2013-10-21 16:44 - 00001983 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-21 16:44 - 2013-04-22 21:46 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-21 16:42 - 2013-10-21 16:42 - 00000000 ____D C:\Users\Antek\AppData\Roaming\AVAST Software
2013-10-21 15:24 - 2013-10-21 15:24 - 00447888 _____ (AVAST Software) C:\Windows\system32\Drivers\ASWNDISFLT.sys
2013-10-21 15:24 - 2013-04-22 21:46 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-10-21 15:24 - 2013-04-22 21:46 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-10-21 15:24 - 2013-04-22 21:45 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-21 15:24 - 2013-02-16 21:31 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-10-21 15:24 - 1601-01-02 06:16 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-10-21 15:24 - 1601-01-02 06:16 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-10-21 15:24 - 1601-01-02 06:16 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-10-21 15:24 - 1601-01-02 06:16 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-10-21 15:08 - 2013-10-21 15:08 - 00131232 _____ (AVAST Software) C:\Windows\system32\Drivers\ASWFW.sys
2013-10-21 15:08 - 2013-02-16 21:31 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-21 15:08 - 2013-02-16 21:31 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-10-19 11:24 - 2013-01-17 16:27 - 00000000 ____D C:\Users\Antek\Documents\Youcam
2013-10-19 07:02 - 2013-10-19 07:02 - 02347384 _____ (ESET) C:\Users\Antek\Downloads\esetsmartinstaller_plk.exe
2013-10-17 18:36 - 2013-01-19 21:29 - 00000000 ____D C:\Users\Antek\AppData\Roaming\SoftGrid Client
2013-10-17 14:37 - 2013-05-26 18:11 - 00000000 ____D C:\Users\Antek\Desktop\Maciej
2013-10-17 09:32 - 2013-10-17 09:31 - 00000000 ____D C:\Users\Antek\AppData\Roaming\ActiveDossierUploader
2013-10-17 09:31 - 2013-10-17 09:31 - 02052096 _____ (Marius Czyz aka Phalynx) C:\Users\Antek\Downloads\ActiveDossierUploader.exe
2013-10-16 18:40 - 1601-01-02 06:16 - 00004042 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-16 18:40 - 1601-01-02 06:16 - 00003790 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-11 18:38 - 2013-03-13 22:16 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-11 18:38 - 2013-03-13 22:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-11 16:47 - 2013-07-16 21:15 - 00000000 ____D C:\Windows\system32\MRT
2013-10-11 16:43 - 1601-01-02 06:16 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 17:02 - 2013-04-22 22:09 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-10 17:02 - 2013-03-07 23:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 17:02 - 2013-03-07 23:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-08 18:46 - 2013-03-07 23:39 - 00000000 ____D C:\Users\Antek\AppData\Local\Mozilla
2013-10-03 17:35 - 2013-10-03 17:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-02 20:03 - 2013-10-02 20:03 - 00695128 _____ C:\Users\Antek\Downloads\Rappelz_PL.exe
2013-10-02 20:03 - 2013-10-02 20:03 - 00695128 _____ C:\Users\Antek\Downloads\Rappelz_PL (2).exe
2013-10-02 20:03 - 2013-10-02 20:03 - 00695128 _____ C:\Users\Antek\Downloads\Rappelz_PL (1).exe
2013-09-29 10:12 - 1601-01-02 06:16 - 314607101 _____ C:\backup.006
2013-09-28 20:58 - 2013-07-28 19:00 - 00000418 _____ C:\Windows\SysWOW64\AppLog.log
2013-09-26 11:32 - 2013-09-26 11:32 - 00000000 ____D C:\Users\Antek\Desktop\minecraft

Files to move or delete:
====================
C:\Users\Antek\Foxy_Jumper2.exe
C:\Users\Antek\Snd_Conv.exe
C:\Users\Antek\uninstal.exe
C:\Users\Public\AlexaNSISPlugin.4624.dll


Some content of TEMP:
====================
C:\Users\Antek\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Antek\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\Antek\AppData\Local\Temp\DSSExp.exe
C:\Users\Antek\AppData\Local\Temp\EAD8287.exe
C:\Users\Antek\AppData\Local\Temp\EADE33C.exe
C:\Users\Antek\AppData\Local\Temp\FunnyFacesSetup26294.exe
C:\Users\Antek\AppData\Local\Temp\GenericUninstall.exe
C:\Users\Antek\AppData\Local\Temp\InstHelper.exe
C:\Users\Antek\AppData\Local\Temp\LEGOLOTR.exe
C:\Users\Antek\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Antek\AppData\Local\Temp\QtraxNotification.exe
C:\Users\Antek\AppData\Local\Temp\Quarantine.exe
C:\Users\Antek\AppData\Local\Temp\ResetDevice.exe
C:\Users\Antek\AppData\Local\Temp\SimboApp.exe
C:\Users\Antek\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Antek\AppData\Local\Temp\SimilarWebBundleDl.exe
C:\Users\Antek\AppData\Local\Temp\uninst1.exe
C:\Users\Antek\AppData\Local\Temp\uninstaller.exe
C:\Users\Antek\AppData\Local\Temp\_is1785.exe
C:\Users\Antek\AppData\Local\Temp\_is1DAD.exe
C:\Users\Antek\AppData\Local\Temp\_is4C4D.exe
C:\Users\Antek\AppData\Local\Temp\_is53F8.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-23 12:32

==================== End Of Log ============================