Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014
Ran by Grzegorz (administrator) on GRZEGORZPC on 04-01-2014 09:03:41
Running from C:\Users\Grzegorz\Desktop\FRST
Windows 7 Home Premium (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(OldTimer Tools) C:\Users\Grzegorz\Desktop\OTL\OTL.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2010-04-28] ()
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-04-13] (ELAN Microelectronic Corp.)
HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2010-06-25] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] - C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini [371 2014-01-04] ()
HKLM-x32\...\Run: [Microsoft Default Manager] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-12] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-03] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1597440 2010-07-02] ()
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [761024 2013-12-13] ()
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-03] (AVAST Software)
HKCU\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Grzegorz\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.sweet-page.com/?type=sc&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454&q={searchTerms}
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner64.dll (Google Inc.)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO-x32: Jump Flip - {6db9fdfe-b718-4962-be0c-0a5fce7f7f7b} - C:\Program Files (x86)\Jump Flip\JumpFlipBHO.dll (Jump Flip)
BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO-x32: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll (Google Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
BHO-x32: BonanzaDeals - {fe063412-bea4-4d76-8ed3-183be6220d17} - C:\Program Files (x86)\BonanzaDeals\BonanzaDealsIE.dll (BonanzaDeals)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\tb0psfzd.default
FF NewTab: hxxp://www.sweet-page.com/newtab/?type=nt&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
FF DefaultSearchEngine: sweet-page
FF SelectedSearchEngine: sweet-page
FF Homepage: hxxp://www.sweet-page.com/?type=hp&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpWinExt,version=5.0 - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\sweet-page.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wolnelektury-pl.xml
FF Extension: BonanzaDeals - C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\tb0psfzd.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}
FF Extension: Jump Flip - C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\tb0psfzd.default\Extensions\firefox@jumpflip.net.xpi
FF HKLM-x32\...\Firefox\Extensions: [msntoolbar@msn.com] - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\Firefox
FF Extension: Bing Bar - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.sweet-page.com/?type=sc&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT
CHR RestoreOnStartup: "hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT"
CHR Extension: (Google Docs) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Extended Protection) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.4_0
CHR Extension: (Google Search) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (DealPly French) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi\4.1.0.9_0
CHR Extension: (AdBlock) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (avast! Online Security) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2011.70_0
CHR Extension: (Lightning Newtab) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.7.9_0
CHR Extension: (Google Wallet) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hphehadppenpmajgnkjdcopcfijjegaf] - C:\Program Files (x86)\Jump Flip\hphehadppenpmajgnkjdcopcfijjegaf.crx
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.sweet-page.com/?type=sc&ts=1388782205&from=cor&uid=WDCXWD3200BPVT-80ZEST0_WD-WX41AC01245412454

==================== Services (Whitelisted) =================

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-03] (AVAST Software)
S2 bonanzadealslive; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2014-01-03] (BonanzaDeals)
S3 bonanzadealslivem; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2014-01-03] (BonanzaDeals)
S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] ()
S2 Update Jump Flip; C:\Program Files (x86)\Jump Flip\updateJumpFlip.exe [65312 2013-12-27] (Jump Flip)
S2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2014-01-03] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-03] (AVAST Software)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-03] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-03] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-03] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-03] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-03] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-03] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
U3 tmlwf; 
U3 tmwfp; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 09:03 - 2014-01-04 09:03 - 00000000 ____D C:\FRST
2014-01-04 08:50 - 2014-01-04 09:03 - 00000000 ____D C:\Users\Grzegorz\Desktop\FRST
2014-01-04 08:50 - 2014-01-04 09:02 - 00000000 ____D C:\Users\Grzegorz\Desktop\OTL
2014-01-04 05:34 - 2006-05-13 17:22 - 00000005 _____ C:\Pass.txt
2014-01-04 00:08 - 2014-01-04 00:08 - 00113002 _____ C:\Users\Grzegorz\Desktop\OTL.Txt
2014-01-04 00:08 - 2014-01-04 00:08 - 00090200 _____ C:\Users\Grzegorz\Desktop\Extras.Txt
2014-01-03 23:59 - 2014-01-03 23:59 - 00111188 _____ C:\Users\Grzegorz\Downloads\OTL.Txt
2014-01-03 23:25 - 2014-01-03 23:25 - 00987410 _____ C:\Users\Grzegorz\Desktop\SecurityCheck.exe
2014-01-03 23:15 - 2014-01-03 23:41 - 00000430 _____ C:\Users\Grzegorz\Desktop\Raport.txt
2014-01-03 21:52 - 2014-01-03 21:52 - 00000840 _____ C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-01-03 21:50 - 2014-01-04 08:43 - 00000926 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2014-01-03 21:50 - 2014-01-03 23:55 - 00000930 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2014-01-03 21:50 - 2014-01-03 21:57 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\uTorrent
2014-01-03 21:50 - 2014-01-03 21:50 - 00003926 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA
2014-01-03 21:50 - 2014-01-03 21:50 - 00003674 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore
2014-01-03 21:50 - 2014-01-03 21:50 - 00003392 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\BonanzaDealsLive
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\ProgramData\WPM
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2014-01-03 21:47 - 2014-01-03 21:49 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\AIMP3
2014-01-03 21:47 - 2014-01-03 21:47 - 00000000 ____D C:\Program Files (x86)\AIMP3
2014-01-03 21:44 - 2014-01-03 21:44 - 00000000 ____D C:\Program Files (x86)\Jump Flip
2014-01-03 21:41 - 2013-12-01 14:10 - 00257624 _____ C:\Windows\system32\unrar64.dll
2014-01-03 21:41 - 2013-12-01 14:10 - 00218200 _____ C:\Windows\SysWOW64\unrar.dll
2014-01-03 21:40 - 2014-01-03 21:41 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2014-01-03 21:34 - 2014-01-03 21:34 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\AVAST Software
2014-01-03 21:33 - 2014-01-03 22:08 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-03 21:33 - 2014-01-03 21:33 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-03 21:33 - 2014-01-03 21:33 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-03 21:32 - 2014-01-03 21:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-03 21:30 - 2014-01-04 08:50 - 00000544 _____ C:\Users\Grzegorz\daemonprocess.txt
2014-01-03 21:30 - 2014-01-04 08:44 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\newnext.me
2014-01-03 21:30 - 2014-01-03 21:55 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\cache
2014-01-03 21:30 - 2014-01-03 21:46 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Mobogenie
2014-01-03 21:30 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\Documents\Mobogenie
2014-01-03 21:30 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\genienext
2014-01-03 21:30 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\.android
2014-01-03 21:29 - 2014-01-03 21:55 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-03 21:29 - 2014-01-03 21:50 - 00001361 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Mozilla
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Mozilla
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-03 21:20 - 2014-01-03 21:20 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-03 21:18 - 2014-01-03 21:18 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-03 21:03 - 2014-01-03 21:03 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\BESTplayer
2014-01-03 21:00 - 2014-01-03 21:02 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Battle.net
2014-01-03 21:00 - 2014-01-03 21:02 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Battle.net
2014-01-03 21:00 - 2014-01-03 21:00 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Blizzard Entertainment
2014-01-03 20:59 - 2014-01-03 21:00 - 00000000 ____D C:\Program Files (x86)\Battle.net
2014-01-03 20:59 - 2014-01-03 20:59 - 00001148 _____ C:\Users\Public\Desktop\Battle.net.lnk
2014-01-03 20:59 - 2014-01-03 20:59 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2014-01-03 20:59 - 2012-02-15 07:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-01-03 20:59 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-01-03 20:59 - 2012-02-15 05:47 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-01-03 20:59 - 2012-02-15 05:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-01-03 20:56 - 2014-01-03 20:56 - 00000000 ____D C:\ProgramData\Battle.net
2014-01-03 20:55 - 2014-01-03 20:55 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Blizzard
2014-01-03 20:52 - 2014-01-03 21:50 - 00002475 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-03 20:50 - 2014-01-03 20:52 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Google
2014-01-03 20:50 - 2014-01-03 20:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Macromedia
2014-01-03 20:50 - 2014-01-03 20:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Adobe
2014-01-03 20:48 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-01-03 20:48 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-01-03 20:48 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-01-03 20:48 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-01-03 20:47 - 2014-01-03 20:52 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Asus WebStorage
2014-01-03 20:47 - 2014-01-03 20:47 - 00000000 ____D C:\Users\Grzegorz\Documents\ASUS WebStorage
2014-01-03 20:47 - 2014-01-03 20:47 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\ATI
2014-01-03 20:47 - 2014-01-03 20:47 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\ATI
2014-01-03 20:47 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-01-03 20:47 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-01-03 20:47 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-01-03 20:47 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-01-03 20:47 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-01-03 20:46 - 2014-01-03 21:50 - 00001643 _____ C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-01-03 20:45 - 2014-01-03 21:50 - 00001665 _____ C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 20:45 - 2014-01-03 20:46 - 00000000 ___RD C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-03 20:44 - 2014-01-03 20:46 - 00000000 ___RD C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 20:44 - 2014-01-03 20:44 - 00000192 _____ C:\Windows\FixPatch.log
2014-01-03 20:44 - 2014-01-03 20:44 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Power2Go
2014-01-03 20:43 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz
2014-01-03 20:43 - 2014-01-03 20:44 - 00063152 _____ C:\Users\Grzegorz\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 20:43 - 2014-01-03 20:43 - 00000020 ___SH C:\Users\Grzegorz\ntuser.ini
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Ustawienia lokalne
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Szablony
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Moje dokumenty
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Menu Start
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Documents\Moje wideo
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Documents\Moje obrazy
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Documents\Moja muzyka
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Dane aplikacji
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\AppData\Local\Historia
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\AppData\Local\Dane aplikacji
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\VirtualStore
2014-01-03 20:43 - 2011-02-23 06:09 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\SRS Labs
2014-01-03 20:43 - 2011-02-23 05:11 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
2014-01-03 20:43 - 2011-02-23 05:08 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2014-01-03 20:43 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-03 20:43 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

2014-01-04 09:03 - 2014-01-04 09:03 - 00000000 ____D C:\FRST
2014-01-04 09:03 - 2014-01-04 08:50 - 00000000 ____D C:\Users\Grzegorz\Desktop\FRST
2014-01-04 09:02 - 2014-01-04 08:50 - 00000000 ____D C:\Users\Grzegorz\Desktop\OTL
2014-01-04 08:52 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-04 08:52 - 2009-07-14 05:51 - 00029638 _____ C:\Windows\setupact.log
2014-01-04 08:50 - 2014-01-03 21:30 - 00000544 _____ C:\Users\Grzegorz\daemonprocess.txt
2014-01-04 08:50 - 2011-02-23 04:14 - 00719748 _____ C:\Windows\WindowsUpdate.log
2014-01-04 08:50 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 08:50 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 08:49 - 2011-02-23 05:12 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-04 08:44 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\newnext.me
2014-01-04 08:43 - 2014-01-03 21:50 - 00000926 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2014-01-04 08:43 - 2011-02-23 06:14 - 00000000 ____D C:\Program Files\P4G
2014-01-04 08:43 - 2011-02-23 05:12 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-04 05:34 - 2011-02-23 05:06 - 00004964 _____ C:\Windows\AsRecoveryHD.log
2014-01-04 05:34 - 2011-02-23 05:05 - 00239614 _____ C:\Windows\AsFac.log
2014-01-04 05:34 - 2009-07-29 06:20 - 00000000 ____D C:\Windows\Log
2014-01-04 00:08 - 2014-01-04 00:08 - 00113002 _____ C:\Users\Grzegorz\Desktop\OTL.Txt
2014-01-04 00:08 - 2014-01-04 00:08 - 00090200 _____ C:\Users\Grzegorz\Desktop\Extras.Txt
2014-01-03 23:59 - 2014-01-03 23:59 - 00111188 _____ C:\Users\Grzegorz\Downloads\OTL.Txt
2014-01-03 23:55 - 2014-01-03 21:50 - 00000930 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2014-01-03 23:41 - 2014-01-03 23:15 - 00000430 _____ C:\Users\Grzegorz\Desktop\Raport.txt
2014-01-03 23:25 - 2014-01-03 23:25 - 00987410 _____ C:\Users\Grzegorz\Desktop\SecurityCheck.exe
2014-01-03 22:08 - 2014-01-03 21:33 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-03 22:00 - 2011-02-23 06:16 - 00001904 _____ C:\Windows\system32\AutoRunFilter.ini
2014-01-03 22:00 - 2011-02-23 06:16 - 00001236 _____ C:\Windows\system32\ServiceFilter.ini
2014-01-03 21:59 - 2011-02-23 05:55 - 00033814 _____ C:\Windows\PFRO.log
2014-01-03 21:57 - 2014-01-03 21:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\uTorrent
2014-01-03 21:55 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\cache
2014-01-03 21:55 - 2014-01-03 21:29 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-03 21:52 - 2014-01-03 21:52 - 00000840 _____ C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-01-03 21:50 - 2014-01-03 21:50 - 00003926 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA
2014-01-03 21:50 - 2014-01-03 21:50 - 00003674 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore
2014-01-03 21:50 - 2014-01-03 21:50 - 00003392 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\BonanzaDealsLive
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\ProgramData\WPM
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2014-01-03 21:50 - 2014-01-03 21:29 - 00001361 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-03 21:50 - 2014-01-03 20:52 - 00002475 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-03 21:50 - 2014-01-03 20:46 - 00001643 _____ C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-01-03 21:50 - 2014-01-03 20:45 - 00001665 _____ C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 21:49 - 2014-01-03 21:47 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\AIMP3
2014-01-03 21:47 - 2014-01-03 21:47 - 00000000 ____D C:\Program Files (x86)\AIMP3
2014-01-03 21:46 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Mobogenie
2014-01-03 21:44 - 2014-01-03 21:44 - 00000000 ____D C:\Program Files (x86)\Jump Flip
2014-01-03 21:41 - 2014-01-03 21:40 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2014-01-03 21:34 - 2014-01-03 21:34 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\AVAST Software
2014-01-03 21:33 - 2014-01-03 21:33 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-03 21:33 - 2014-01-03 21:33 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-03 21:33 - 2014-01-03 21:33 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-03 21:32 - 2014-01-03 21:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-03 21:30 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\Documents\Mobogenie
2014-01-03 21:30 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\genienext
2014-01-03 21:30 - 2014-01-03 21:30 - 00000000 ____D C:\Users\Grzegorz\.android
2014-01-03 21:30 - 2014-01-03 20:43 - 00000000 ____D C:\Users\Grzegorz
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Mozilla
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Mozilla
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-03 21:29 - 2014-01-03 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-03 21:22 - 2009-08-03 21:06 - 00623220 _____ C:\Windows\system32\perfh00E.dat
2014-01-03 21:22 - 2009-08-03 21:06 - 00144282 _____ C:\Windows\system32\perfc00E.dat
2014-01-03 21:22 - 2009-08-03 21:00 - 00614512 _____ C:\Windows\system32\perfh005.dat
2014-01-03 21:22 - 2009-08-03 21:00 - 00118684 _____ C:\Windows\system32\perfc005.dat
2014-01-03 21:22 - 2009-08-03 20:55 - 00687828 _____ C:\Windows\system32\perfh015.dat
2014-01-03 21:22 - 2009-08-03 20:55 - 00131382 _____ C:\Windows\system32\perfc015.dat
2014-01-03 21:22 - 2009-07-14 06:13 - 03021410 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-03 21:20 - 2014-01-03 21:20 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-03 21:18 - 2014-01-03 21:18 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sl-SI
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sk-SK
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ro-RO
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\lv-LV
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\lt-LT
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\hr-HR
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\et-EE
2014-01-03 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\bg-BG
2014-01-03 21:03 - 2014-01-03 21:03 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\BESTplayer
2014-01-03 21:02 - 2014-01-03 21:00 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Battle.net
2014-01-03 21:02 - 2014-01-03 21:00 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Battle.net
2014-01-03 21:00 - 2014-01-03 21:00 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Blizzard Entertainment
2014-01-03 21:00 - 2014-01-03 20:59 - 00000000 ____D C:\Program Files (x86)\Battle.net
2014-01-03 20:59 - 2014-01-03 20:59 - 00001148 _____ C:\Users\Public\Desktop\Battle.net.lnk
2014-01-03 20:59 - 2014-01-03 20:59 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2014-01-03 20:56 - 2014-01-03 20:56 - 00000000 ____D C:\ProgramData\Battle.net
2014-01-03 20:55 - 2014-01-03 20:55 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Blizzard
2014-01-03 20:52 - 2014-01-03 20:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Google
2014-01-03 20:52 - 2014-01-03 20:47 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Asus WebStorage
2014-01-03 20:50 - 2014-01-03 20:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Macromedia
2014-01-03 20:50 - 2014-01-03 20:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Adobe
2014-01-03 20:47 - 2014-01-03 20:47 - 00000000 ____D C:\Users\Grzegorz\Documents\ASUS WebStorage
2014-01-03 20:47 - 2014-01-03 20:47 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\ATI
2014-01-03 20:47 - 2014-01-03 20:47 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\ATI
2014-01-03 20:46 - 2014-01-03 20:45 - 00000000 ___RD C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-03 20:46 - 2014-01-03 20:44 - 00000000 ___RD C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 20:45 - 2011-02-23 05:50 - 00000824 _____ C:\Windows\system32\Drivers\etc\tmvsthfud.bin
2014-01-03 20:44 - 2014-01-03 20:44 - 00000192 _____ C:\Windows\FixPatch.log
2014-01-03 20:44 - 2014-01-03 20:44 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Power2Go
2014-01-03 20:44 - 2014-01-03 20:43 - 00063152 _____ C:\Users\Grzegorz\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 20:44 - 2011-02-23 05:50 - 00000824 _____ C:\Windows\system32\Drivers\etc\tmvsthfss.bin
2014-01-03 20:44 - 2011-02-23 05:12 - 00004058 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-03 20:44 - 2011-02-23 05:12 - 00003806 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-03 20:44 - 2011-02-23 04:48 - 03543898 _____ C:\Windows\AsDebug.log
2014-01-03 20:44 - 2011-02-23 04:48 - 00380448 _____ C:\Windows\AsCDProc.log
2014-01-03 20:44 - 2011-02-23 04:47 - 00001435 _____ C:\Windows\PQArecord.log
2014-01-03 20:43 - 2014-01-03 20:43 - 00000020 ___SH C:\Users\Grzegorz\ntuser.ini
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Ustawienia lokalne
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Szablony
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Moje dokumenty
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Menu Start
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Documents\Moje wideo
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Documents\Moje obrazy
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Documents\Moja muzyka
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\Dane aplikacji
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\AppData\Local\Historia
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 _SHDL C:\Users\Grzegorz\AppData\Local\Dane aplikacji
2014-01-03 20:43 - 2014-01-03 20:43 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\VirtualStore
2014-01-03 20:42 - 2011-02-23 06:16 - 00000080 _____ C:\Windows\system32\Defrag.ini
2014-01-03 20:42 - 2009-07-14 05:45 - 00285632 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-03 20:40 - 2009-07-29 06:10 - 00000000 __SHD C:\Recovery
2014-01-03 20:40 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries

Some content of TEMP:
====================
C:\Users\Grzegorz\AppData\Local\Temp\atl80.dll
C:\Users\Grzegorz\AppData\Local\Temp\mfc80.dll
C:\Users\Grzegorz\AppData\Local\Temp\mfc80u.dll
C:\Users\Grzegorz\AppData\Local\Temp\mfcm80.dll
C:\Users\Grzegorz\AppData\Local\Temp\mfcm80u.dll
C:\Users\Grzegorz\AppData\Local\Temp\msvcm80.dll
C:\Users\Grzegorz\AppData\Local\Temp\msvcp80.dll
C:\Users\Grzegorz\AppData\Local\Temp\msvcr80.dll
C:\Users\Grzegorz\AppData\Local\Temp\TmDbg32.dll
C:\Users\Grzegorz\AppData\Local\Temp\TmDbg64.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2009-07-29 06:04

==================== End Of Log ============================