Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 05
Ran by Krystian (administrator) on ZIOMIUSZ on 19-12-2013 13:44:44
Running from C:\Users\Krystian\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems Incorporated) F:\Programy\PSE7\PhotoshopElementsFileAgent.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Hi-Rez Studios) D:\GRY\Steam\steamapps\common\Hi-rez Studios\HiPatchService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Spotify Ltd) C:\Users\Krystian\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\Krystian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Users\Krystian\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Krystian\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\Krystian\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Krystian\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKCU\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [4359680 2012-12-29] ()
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKCU\...\Run: [Spotify] - C:\Users\Krystian\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-18] (Spotify Ltd)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Krystian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-18] (Spotify Ltd)
HKCU\...\Run: [TBHostSupport] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Krystian\AppData\Local\TBHostSupport\TBHostSupport.dll",DLLRunTBHostSupportPlugin <===== ATTENTION
MountPoints2: {066fdbf8-3345-11e3-9756-50e549d61314} - E:\Startme.exe
MountPoints2: {ca3ae040-25e9-11e2-a191-806e6f6e6963} - I:\wubi.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
AppInit_DLLs-x32: C:\PROGRA~2\Google\GOOGLE~1\GO36F4~1.DLL [123392 2013-01-07] (Google)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {09EBE041-F030-49CE-8D26-AD7601BE6473} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKCU - {489D7943-C7A9-470A-A0DC-64A14EE41A61} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3225826&CUI=UN38416867572660322&UM=1
SearchScopes: HKCU - {960FA8AD-08C8-4810-9C63-D97F66FC3D37} URL = http://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ALLYouTubeDownloader - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files (x86)\ALLYouTubeDownloader\ALLYouTubeDownloader.dll (ALLCinema Ltd.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programy\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Tcpip\..\Interfaces\{0F4A4D99-E3D2-4C17-B653-BB08CA022A01}: [NameServer]194.204.159.1,194.204.152.33
Tcpip\..\Interfaces\{13965807-8E32-4408-984D-645174C090E9}: [NameServer]194.204.159.1,194.204.152.21

FireFox:
========
FF ProfilePath: C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\hn9aeqzx.default-1387456155757
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Programy\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programy\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\googledesktop.xml
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru

Chrome: 
=======
CHR DefaultSearchKeyword: google.pl
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (ThumbExtractor Plugin) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.2_0\plugins/npThumbExtractor.dll No File
CHR Plugin: (Conduit Chrome Plugin) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf\10.23.0.822_0\plugins/ConduitChromeApiPlugin.dll No File
CHR Plugin: (BonanzaDealsLive Update) - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
CHR Plugin: (Microsoft Office 2010) - D:\Programy\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\Programy\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [dknkjnkhedbanphkkpbpcgoblmkbfhlf] - C:\Users\Krystian\AppData\Local\CRE\dknkjnkhedbanphkkpbpcgoblmkbfhlf.crx

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor7.0; F:\Programy\PSE7\PhotoshopElementsFileAgent.exe [169312 2008-09-16] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-09-28] (Advanced Micro Devices, Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1501144 2013-08-19] (Echobit LLC)
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2013-01-07] (Google)
R2 HiPatchService; D:\GRY\Steam\steamapps\common\Hi-rez Studios\HiPatchService.exe [9216 2013-04-23] (Hi-Rez Studios)
S3 Microsoft SharePoint Workspace Audit Service; D:\Programy\Office\Office14\GROOVE.EXE [31124344 2010-12-27] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-04] ()
R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4241920 2013-09-18] (A-Volute)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11832 2010-06-29] (Advanced Micro Devices Inc.)
S3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
S3 athrusb; C:\Windows\System32\DRIVERS\athrxusb.sys [1075712 2008-07-29] (Atheros Communications, Inc.)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2012-12-18] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [23904 2013-05-20] (IVT Corporation.)
S3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [31480 2012-12-24] (IVT Corporation.)
R3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2013-07-18] (Echobit, LLC)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-01-20] ()
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
S3 IvtAudioBusSrv; C:\Windows\System32\Drivers\IvtBtBus.sys [27256 2012-12-24] (IVT Corporation.)
S3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [27256 2012-12-24] (IVT Corporation.)
S3 IvtPanBusSrv; C:\Windows\System32\Drivers\btnetBus.sys [31480 2012-12-24] (IVT Corporation.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2012-12-18] ()
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-09-18] (Windows (R) Win 7 DDK provider)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-11-03] (Duplex Secure Ltd.)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 V0220Dev; C:\Windows\System32\DRIVERS\V0220Dev.sys [194592 2006-06-29] (Creative Technology Ltd.)
S3 V0220Vfx; C:\Windows\System32\DRIVERS\V0220Vfx.sys [10752 2006-06-08] (EyePower Games Pte. Ltd.)
U3 a9o1ktdm; C:\Windows\System32\Drivers\a9o1ktdm.sys [0 ] (Advanced Micro Devices)
S3 BT; system32\DRIVERS\btnetdrv.sys [x]
S3 BTCOM; system32\DRIVERS\btcomport.sys [x]
S3 BTCOMBUS; System32\Drivers\btcombus.sys [x]
S3 Btcsrusb; System32\Drivers\btcusb.sys [x]
S3 IvtComBusSrv; System32\Drivers\btcombus.sys [x]
S3 VHidMinidrv; system32\drivers\VHIDMini.sys [x]
S0 vmci; system32\DRIVERS\vmci.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-19 13:44 - 2013-12-19 13:45 - 00019067 _____ C:\Users\Krystian\Desktop\FRST.txt
2013-12-19 13:43 - 2013-12-19 13:37 - 00017278 _____ C:\Users\Krystian\Desktop\AdwCleaner[R0].txt
2013-12-19 13:43 - 2013-12-19 13:37 - 00015842 _____ C:\Users\Krystian\Desktop\AdwCleaner[S0].txt
2013-12-19 13:36 - 2013-12-19 13:37 - 00000000 ____D C:\AdwCleaner
2013-12-19 13:36 - 2013-12-19 13:36 - 01226750 _____ C:\Users\Krystian\Desktop\AdwCleaner.exe
2013-12-19 13:29 - 2013-12-19 13:29 - 00000000 ____D C:\Users\Krystian\Desktop\Stare dane programu Firefox
2013-12-19 01:06 - 2013-12-19 01:06 - 00000000 ____D C:\FRST
2013-12-19 01:06 - 2013-12-19 01:05 - 02192805 _____ (Farbar) C:\Users\Krystian\Desktop\FRST64.exe
2013-12-19 01:05 - 2013-12-19 01:05 - 00602112 _____ (OldTimer Tools) C:\Users\Krystian\Desktop\OTL.scr
2013-12-19 01:05 - 2013-12-19 01:05 - 00377856 _____ C:\Users\Krystian\Desktop\ln48xtp2.exe
2013-12-18 21:57 - 2013-12-18 21:57 - 00000218 _____ C:\Users\Krystian\AppData\Local\recently-used.xbel
2013-12-18 20:13 - 2013-12-18 20:13 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Python-Eggs
2013-12-18 20:12 - 2013-12-18 20:12 - 00002023 _____ C:\Users\Krystian\Desktop\BitLord.lnk
2013-12-18 20:03 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\AppData\Local\cache
2013-12-18 20:03 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\.android
2013-12-18 20:02 - 2013-12-19 12:57 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\newnext.me
2013-12-18 20:02 - 2013-12-18 20:13 - 00000000 ____D C:\Users\Krystian\AppData\Local\Mobogenie
2013-12-18 20:02 - 2013-12-18 20:04 - 00000000 ____D C:\Users\Krystian\AppData\Local\genienext
2013-12-18 20:02 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\Documents\Mobogenie
2013-12-18 20:02 - 2013-12-18 20:02 - 00000000 _____ C:\Users\Krystian\daemonprocess.txt
2013-12-18 20:01 - 2013-12-19 13:23 - 00000000 ____D C:\ProgramData\WPM
2013-12-18 18:02 - 2013-12-19 13:39 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Spotify
2013-12-18 18:02 - 2013-12-19 01:30 - 00000000 ____D C:\Users\Krystian\AppData\Local\Spotify
2013-12-18 18:02 - 2013-12-18 18:02 - 00001820 _____ C:\Users\Krystian\Desktop\Spotify.lnk
2013-12-18 18:02 - 2013-12-18 18:02 - 00001806 _____ C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-15 23:18 - 2013-12-15 23:18 - 00000000 ____D C:\Users\Krystian\Desktop\My Game
2013-12-15 13:22 - 2013-12-15 13:22 - 00001016 _____ C:\Users\Krystian\Desktop\5.lnk
2013-12-15 07:13 - 2013-12-19 13:39 - 00007162 _____ C:\Windows\PFRO.log
2013-12-13 15:34 - 2013-12-13 15:34 - 00160689 _____ C:\wubildr
2013-12-13 15:34 - 2013-12-13 15:34 - 00008192 _____ C:\wubildr.mbr
2013-12-13 15:33 - 2013-12-13 15:33 - 00000000 ____D C:\ubuntu
2013-12-11 16:45 - 2013-12-19 13:39 - 00000672 _____ C:\Windows\setupact.log
2013-12-11 16:45 - 2013-12-11 16:45 - 00000000 _____ C:\Windows\setuperr.log
2013-12-10 23:39 - 2013-12-10 23:39 - 00000872 _____ C:\Users\Public\Desktop\Grand Theft Auto IV.lnk
2013-12-06 16:41 - 2013-12-06 16:41 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Fatshark
2013-12-06 15:45 - 2013-12-06 15:45 - 00000672 _____ C:\Users\Public\Desktop\7 Days to Die - Alpha.lnk
2013-12-06 01:24 - 2013-12-06 01:24 - 00000000 ____D C:\Users\Krystian\AppData\Local\Arktos Entertainment
2013-12-05 18:47 - 2013-12-05 18:47 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\StunlockStudios
2013-11-26 11:54 - 2013-11-26 11:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-11-26 11:54 - 2013-11-26 11:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-11-22 20:30 - 2013-11-22 20:30 - 00012342 _____ C:\Users\Krystian\Desktop\lost.bmp
2013-11-20 15:04 - 2013-11-20 15:04 - 00000000 ____D C:\Users\Krystian\AppData\Local\{51F48D98-B482-4289-9535-7298D665B43C}

==================== One Month Modified Files and Folders =======

2013-12-19 13:45 - 2013-12-19 13:44 - 00019067 _____ C:\Users\Krystian\Desktop\FRST.txt
2013-12-19 13:43 - 2011-02-04 18:20 - 00737942 _____ C:\Windows\system32\perfh015.dat
2013-12-19 13:43 - 2011-02-04 18:20 - 00154630 _____ C:\Windows\system32\perfc015.dat
2013-12-19 13:43 - 2009-07-14 06:13 - 01663412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-19 13:42 - 2012-11-01 14:52 - 01671854 _____ C:\Windows\WindowsUpdate.log
2013-12-19 13:39 - 2013-12-18 18:02 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Spotify
2013-12-19 13:39 - 2013-12-15 07:13 - 00007162 _____ C:\Windows\PFRO.log
2013-12-19 13:39 - 2013-12-11 16:45 - 00000672 _____ C:\Windows\setupact.log
2013-12-19 13:39 - 2013-01-22 15:48 - 00000354 _____ C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job
2013-12-19 13:39 - 2013-01-08 15:13 - 00000000 ____D C:\Users\Krystian\.rainlendar2
2013-12-19 13:39 - 2012-12-28 19:42 - 00000000 ____D C:\Users\Krystian\AppData\Local\LogMeIn Hamachi
2013-12-19 13:39 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-19 13:37 - 2013-12-19 13:43 - 00017278 _____ C:\Users\Krystian\Desktop\AdwCleaner[R0].txt
2013-12-19 13:37 - 2013-12-19 13:43 - 00015842 _____ C:\Users\Krystian\Desktop\AdwCleaner[S0].txt
2013-12-19 13:37 - 2013-12-19 13:36 - 00000000 ____D C:\AdwCleaner
2013-12-19 13:36 - 2013-12-19 13:36 - 01226750 _____ C:\Users\Krystian\Desktop\AdwCleaner.exe
2013-12-19 13:29 - 2013-12-19 13:29 - 00000000 ____D C:\Users\Krystian\Desktop\Stare dane programu Firefox
2013-12-19 13:23 - 2013-12-18 20:01 - 00000000 ____D C:\ProgramData\WPM
2013-12-19 13:18 - 2012-11-01 14:58 - 00001451 _____ C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-19 13:18 - 2012-11-01 14:58 - 00001417 _____ C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-12-19 13:14 - 2012-11-01 18:57 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 13:02 - 2013-11-08 13:41 - 00000000 ____D C:\ProgramData\MFAData
2013-12-19 12:57 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\newnext.me
2013-12-19 03:12 - 2009-07-14 05:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-19 03:12 - 2009-07-14 05:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-19 03:06 - 2012-12-16 22:34 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\vlc
2013-12-19 01:30 - 2013-12-18 18:02 - 00000000 ____D C:\Users\Krystian\AppData\Local\Spotify
2013-12-19 01:06 - 2013-12-19 01:06 - 00000000 ____D C:\FRST
2013-12-19 01:05 - 2013-12-19 01:06 - 02192805 _____ (Farbar) C:\Users\Krystian\Desktop\FRST64.exe
2013-12-19 01:05 - 2013-12-19 01:05 - 00602112 _____ (OldTimer Tools) C:\Users\Krystian\Desktop\OTL.scr
2013-12-19 01:05 - 2013-12-19 01:05 - 00377856 _____ C:\Users\Krystian\Desktop\ln48xtp2.exe
2013-12-19 00:51 - 2013-06-08 12:00 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\TS3Client
2013-12-18 22:03 - 2013-02-20 11:52 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-12-18 22:03 - 2013-02-20 11:48 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-18 21:57 - 2013-12-18 21:57 - 00000218 _____ C:\Users\Krystian\AppData\Local\recently-used.xbel
2013-12-18 21:48 - 2013-05-02 11:47 - 00000000 ____D C:\Users\Krystian\AppData\Local\Warframe
2013-12-18 20:13 - 2013-12-18 20:13 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Python-Eggs
2013-12-18 20:13 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\AppData\Local\Mobogenie
2013-12-18 20:12 - 2013-12-18 20:12 - 00002023 _____ C:\Users\Krystian\Desktop\BitLord.lnk
2013-12-18 20:10 - 2013-06-26 02:29 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Azureus
2013-12-18 20:04 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\AppData\Local\genienext
2013-12-18 20:03 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\AppData\Local\cache
2013-12-18 20:03 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\.android
2013-12-18 20:03 - 2012-11-01 14:58 - 00000000 ____D C:\Users\Krystian
2013-12-18 20:02 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\Documents\Mobogenie
2013-12-18 20:02 - 2013-12-18 20:02 - 00000000 _____ C:\Users\Krystian\daemonprocess.txt
2013-12-18 18:02 - 2013-12-18 18:02 - 00001820 _____ C:\Users\Krystian\Desktop\Spotify.lnk
2013-12-18 18:02 - 2013-12-18 18:02 - 00001806 _____ C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-18 15:36 - 2013-03-15 15:42 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\.minecraft
2013-12-17 22:29 - 2013-02-20 11:48 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-16 22:48 - 2013-11-16 18:18 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-15 23:18 - 2013-12-15 23:18 - 00000000 ____D C:\Users\Krystian\Desktop\My Game
2013-12-15 13:22 - 2013-12-15 13:22 - 00001016 _____ C:\Users\Krystian\Desktop\5.lnk
2013-12-14 02:01 - 2013-11-08 17:19 - 00000000 ____D C:\ProgramData\Tunngle
2013-12-14 02:01 - 2013-06-07 14:17 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Tunngle
2013-12-13 15:34 - 2013-12-13 15:34 - 00160689 _____ C:\wubildr
2013-12-13 15:34 - 2013-12-13 15:34 - 00008192 _____ C:\wubildr.mbr
2013-12-13 15:33 - 2013-12-13 15:33 - 00000000 ____D C:\ubuntu
2013-12-13 02:22 - 2013-02-11 22:09 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-13 00:52 - 2012-11-03 20:06 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\DAEMON Tools Lite
2013-12-11 18:14 - 2012-11-01 18:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 18:14 - 2012-11-01 18:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 18:14 - 2012-11-01 18:57 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 16:45 - 2013-12-11 16:45 - 00000000 _____ C:\Windows\setuperr.log
2013-12-11 12:44 - 2012-11-06 15:19 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Media Player Classic
2013-12-10 23:39 - 2013-12-10 23:39 - 00000872 _____ C:\Users\Public\Desktop\Grand Theft Auto IV.lnk
2013-12-10 23:32 - 2012-11-01 15:29 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-08 01:35 - 2012-11-02 21:30 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\foobar2000
2013-12-06 16:41 - 2013-12-06 16:41 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Fatshark
2013-12-06 15:45 - 2013-12-06 15:45 - 00000672 _____ C:\Users\Public\Desktop\7 Days to Die - Alpha.lnk
2013-12-06 01:24 - 2013-12-06 01:24 - 00000000 ____D C:\Users\Krystian\AppData\Local\Arktos Entertainment
2013-12-05 18:47 - 2013-12-05 18:47 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\StunlockStudios
2013-12-03 11:52 - 2013-02-19 12:41 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-03 11:52 - 2013-02-19 12:41 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-02 12:26 - 2013-02-19 12:41 - 00004050 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-02 12:26 - 2013-02-19 12:41 - 00003798 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-26 19:38 - 2013-10-13 00:51 - 00002026 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-11-26 12:42 - 2013-11-14 21:04 - 00000000 ____D C:\Users\Krystian\Desktop\oposland
2013-11-26 11:54 - 2013-11-26 11:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-11-26 11:54 - 2013-11-26 11:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-11-22 20:30 - 2013-11-22 20:30 - 00012342 _____ C:\Users\Krystian\Desktop\lost.bmp
2013-11-20 15:04 - 2013-11-20 15:04 - 00000000 ____D C:\Users\Krystian\AppData\Local\{51F48D98-B482-4289-9535-7298D665B43C}

Some content of TEMP:
====================
C:\Users\Krystian\AppData\Local\Temp\pyl367C.tmp.exe
C:\Users\Krystian\AppData\Local\Temp\pyl3889.tmp.exe
C:\Users\Krystian\AppData\Local\Temp\pylD07A.tmp.exe
C:\Users\Krystian\AppData\Local\Temp\Quarantine.exe
C:\Users\Krystian\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Krystian\AppData\Local\Temp\SRLDetectionLibrary3680215110142458106.dll
C:\Users\Krystian\AppData\Local\Temp\tbBit2.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 12:56

==================== End Of Log ============================