Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-01-2014
Ran by krzysiek (administrator) on KRZYSIEK on 10-01-2014 23:02:38
Running from C:\Users\krzysiek\Desktop
Windows 7 Ultimate (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Facebook Inc.) C:\Users\krzysiek\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AIMP DevTeam) C:\Program Files (x86)\AIMP3\AIMP3.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [6325936 2012-11-26] (ESET)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7016520 2013-02-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [NeroFilterCheck] - C:\Windows\system32\NeroCheck.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKCU\...\Run: [RocketDock] - C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [Facebook Update] - C:\Users\krzysiek\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-28] (Facebook Inc.)
HKCU\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\krzysiek\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKCU\...\Run: [lollipop] - "c:\users\krzysiek\appdata\local\lollipop\lollipop.exe" lollipop
MountPoints2: {391c0aa6-8989-11e2-a85d-50465d8bfcc0} - I:\start.exe
MountPoints2: {f4e4339b-dbf3-11e2-8072-50465d8bfcc0} - H:\Startme.exe
AppInit_DLLs:   C:\PROGRA~2\SEARCH~1\Datamngr\x64\mgrldr.dll  [ ] ()
AppInit_DLLs-x32:   C:\PROGRA~2\SEARCH~1\Datamngr\mgrldr.dll  [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=41460&st=chrome&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Before = http://search.b1.org/?bsrc=hmior&chid=c162341
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page Before = http://search.b1.org/?bsrc=hmior&chid=c162341
HKCU\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&st=home&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=41460&st=chrome&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=41460&st=chrome&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = http://www.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=41460&st=chrome&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si=41460&st=home&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = http://www.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=41460&st=chrome&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&st=home&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=41460&st=chrome&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q=
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=484&systemid=406&apn_uid=2323450940914932&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=484&systemid=406&apn_uid=2323450940914932&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q={searchTerms}
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ver=3.5&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q={searchTerms}
SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ver=3.6&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ver=3.5&ts=1371990472025&tguid=41460-2938-1371990472025-F094298456EFED8407DBCA9439113C0C&q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CDLPObj Object - {BE2ED590-CA49-46B5-8CCE-244FB2E0D1AA} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\krzysiek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Extension: GoPhotoIt - C:\Users\krzysiek\AppData\Roaming\Mozilla\Firefox\profiles\extensions\gophoto@gophoto.it.xpi
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\krzysiek\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\krzysiek\AppData\Roaming\IDM\idmmzcc5

Chrome: 
=======
CHR HomePage: 
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\krzysiek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Google Drive) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Turn Off the Lights) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.2.0.33_0
CHR Extension: (YouTube) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Color Wave) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfnpfgjdhpopghfmomjmedpgecgjifcc\1_0
CHR Extension: (Google Wallet) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Adblock Pro) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.8_0
CHR Extension: (PutLockerDownloader V6.0) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\phdibklhohedacdhcfaojcfbcmlaaihf\1.25.30_0
CHR Extension: (Gmail) - C:\Users\krzysiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [acaoakiamfeidcmgooclgeleejkbaecf] - C:\Program Files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.crx
CHR HKLM-x32\...\Chrome\Extension: [hahpjplbmicfkmoccokbjejahjjpnena] - C:\Users\krzysiek\AppData\Local\B1E\B1Tool.crx
CHR HKLM-x32\...\Chrome\Extension: [jmolcgpienlcieaajfkkdamlngancncm] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx
CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit16.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-11-16] (Advanced Micro Devices, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1329304 2012-11-26] (ESET)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-12-18] ()
S2 Update Kozaka; "C:\Program Files (x86)\Kozaka\updateKozaka.exe" [x]

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2010-01-25] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2010-01-25] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2010-01-25] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [33792 2010-01-25] (LG Electronics Inc.)
S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2013-04-18] (Google Inc)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [31744 2010-01-11] (Google Inc)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-25] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-10] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [211344 2012-10-08] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [149592 2012-10-08] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [189208 2012-10-08] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [59440 2012-10-08] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [57904 2012-11-28] (ESET)
S3 GRemoteBus; C:\Windows\System32\DRIVERS\GRemoteBus64.sys [27336 2009-08-05] (GBM Software)
S3 GRemoteJoy; C:\Windows\System32\DRIVERS\GRemoteJoy64.sys [46792 2009-08-05] (GBM Software)
R3 L1C; C:\Windows\System32\DRIVERS\L1C60x64.sys [99440 2012-04-25] (Qualcomm Atheros Co., Ltd.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-18] ()
S3 andnetndis; system32\DRIVERS\lgandnetndis64.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-10 23:02 - 2014-01-10 23:02 - 00017500 _____ C:\Users\krzysiek\Desktop\FRST.txt
2014-01-10 23:01 - 2014-01-10 23:01 - 00093848 _____ C:\Users\krzysiek\Desktop\Extras.Txt
2014-01-10 23:00 - 2014-01-10 23:00 - 00135566 _____ C:\Users\krzysiek\Desktop\OTL.Txt
2014-01-10 22:32 - 2014-01-10 22:32 - 00602112 _____ (OldTimer Tools) C:\Users\krzysiek\Desktop\OTL.exe
2014-01-10 22:32 - 2014-01-10 22:32 - 00000000 ____D C:\FRST
2014-01-10 22:31 - 2014-01-10 22:32 - 01932166 _____ (Farbar) C:\Users\krzysiek\Desktop\FRST64.exe
2014-01-10 22:19 - 2014-01-10 22:19 - 00001066 _____ C:\Windows\PFRO.log
2014-01-10 21:51 - 2014-01-10 22:19 - 00000112 _____ C:\Windows\setupact.log
2014-01-10 21:51 - 2014-01-10 21:51 - 00000000 _____ C:\Windows\setuperr.log
2014-01-10 20:55 - 2014-01-10 20:56 - 00000000 ___SD C:\Users\krzysiek\GG dysk
2014-01-10 20:39 - 2014-01-10 20:39 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-10 20:39 - 2014-01-10 20:39 - 00000000 _____ C:\autoexec.bat
2014-01-10 20:38 - 2014-01-10 22:17 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-10 20:26 - 2014-01-10 20:27 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\krzysiek\Downloads\SpyHunter-Installer.exe
2014-01-10 20:11 - 2014-01-10 20:11 - 00000000 ____D C:\Users\krzysiek\.android
2014-01-09 14:29 - 2014-01-09 14:29 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2014-01-09 14:29 - 2014-01-09 14:29 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-05 18:38 - 2014-01-10 20:22 - 00000000 ____D C:\Users\krzysiek\AppData\Local\CrashDumps
2014-01-04 22:10 - 2014-01-10 18:51 - 00000000 ____D C:\Users\krzysiek\AppData\Local\Deployment
2014-01-04 22:10 - 2014-01-04 22:10 - 00000000 ____D C:\Users\krzysiek\AppData\Local\Apps\2.0
2014-01-04 20:26 - 2014-01-10 22:17 - 00000000 ____D C:\Program Files (x86)\Woodcutter Simulator 2013
2014-01-04 19:50 - 2014-01-04 19:50 - 00003080 _____ C:\Windows\System32\Tasks\GoforFilesUpdate
2014-01-04 19:50 - 2014-01-04 19:50 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-04 19:50 - 2014-01-04 19:50 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\GoforFiles
2014-01-04 19:41 - 2014-01-08 22:59 - 00000000 ____D C:\Users\krzysiek\Documents\my games
2014-01-04 19:22 - 2014-01-04 19:23 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-04 19:22 - 2014-01-04 19:22 - 00000000 ____D C:\Windows\SysWOW64\AGEIA
2014-01-01 20:52 - 2014-01-01 20:52 - 00000000 ____D C:\Users\krzysiek\Downloads\ChomikBox
2014-01-01 14:38 - 2014-01-01 14:38 - 00001536 _____ C:\Users\krzysiek\Desktop\SpinTires.lnk
2014-01-01 14:36 - 2014-01-08 23:00 - 00047104 ___SH C:\Users\krzysiek\Downloads\Thumbs.db
2013-12-28 18:38 - 2014-01-04 18:51 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\SpinTires
2013-12-28 18:35 - 2014-01-01 14:38 - 00000000 ____D C:\Program Files (x86)\Oovee
2013-12-23 17:24 - 2014-01-02 22:49 - 00054784 ___SH C:\Users\krzysiek\Desktop\Thumbs.db
2013-12-23 16:54 - 2014-01-02 22:49 - 00000000 ____D C:\Users\krzysiek\Downloads\Video
2013-12-17 23:12 - 2013-12-17 23:17 - 00000000 ___HD C:\Users\krzysiek\Documents\.4sh
2013-12-17 23:09 - 2013-12-17 23:09 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\Nico Mak Computing
2013-12-17 23:09 - 2012-02-08 10:29 - 00018760 _____ (WinZip Computing, S.L.(WinZip Computing)) C:\Windows\system32\roboot64.exe
2013-12-17 21:01 - 2014-01-04 19:07 - 00000000 ____D C:\Users\krzysiek\Downloads\Compressed
2013-12-17 20:36 - 2010-01-25 06:09 - 00033792 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandmodem64.sys
2013-12-17 20:36 - 2010-01-25 06:09 - 00027648 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lganddiag64.sys
2013-12-17 20:36 - 2010-01-25 06:09 - 00027136 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandgps64.sys
2013-12-17 20:36 - 2010-01-25 06:09 - 00019456 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandbus64.sys
2013-12-17 20:36 - 2010-01-11 10:28 - 00031744 _____ (Google Inc) C:\Windows\system32\Drivers\lgandadb.sys
2013-12-17 19:14 - 2013-12-17 19:14 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_lgandadb_01005.Wdf
2013-12-14 15:29 - 2014-01-10 22:34 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cef8d8d65ceae1.job
2013-12-14 15:29 - 2013-12-14 15:29 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cef8d8d65ceae1

==================== One Month Modified Files and Folders =======

2014-01-10 23:02 - 2014-01-10 23:02 - 00017500 _____ C:\Users\krzysiek\Desktop\FRST.txt
2014-01-10 23:01 - 2014-01-10 23:01 - 00093848 _____ C:\Users\krzysiek\Desktop\Extras.Txt
2014-01-10 23:00 - 2014-01-10 23:00 - 00135566 _____ C:\Users\krzysiek\Desktop\OTL.Txt
2014-01-10 22:54 - 2013-01-03 19:43 - 01325909 _____ C:\Windows\WindowsUpdate.log
2014-01-10 22:34 - 2013-12-14 15:29 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cef8d8d65ceae1.job
2014-01-10 22:32 - 2014-01-10 22:32 - 00602112 _____ (OldTimer Tools) C:\Users\krzysiek\Desktop\OTL.exe
2014-01-10 22:32 - 2014-01-10 22:32 - 00000000 ____D C:\FRST
2014-01-10 22:32 - 2014-01-10 22:31 - 01932166 _____ (Farbar) C:\Users\krzysiek\Desktop\FRST64.exe
2014-01-10 22:29 - 2013-01-03 21:55 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-10 22:27 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-10 22:27 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-10 22:20 - 2013-12-09 21:09 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\newnext.me
2014-01-10 22:19 - 2014-01-10 22:19 - 00001066 _____ C:\Windows\PFRO.log
2014-01-10 22:19 - 2014-01-10 21:51 - 00000112 _____ C:\Windows\setupact.log
2014-01-10 22:19 - 2013-10-18 14:22 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cecc051d5dab12.job
2014-01-10 22:19 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-10 22:18 - 2013-01-03 20:24 - 00000000 ____D C:\Users\krzysiek\AppData\Local\GG
2014-01-10 22:17 - 2014-01-10 20:38 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-10 22:17 - 2014-01-04 20:26 - 00000000 ____D C:\Program Files (x86)\Woodcutter Simulator 2013
2014-01-10 22:17 - 2013-07-15 11:22 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2014-01-10 22:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-10 22:10 - 2013-01-03 20:19 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\IDM
2014-01-10 21:51 - 2014-01-10 21:51 - 00000000 _____ C:\Windows\setuperr.log
2014-01-10 21:17 - 2013-01-03 21:36 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\AIMP3
2014-01-10 20:56 - 2014-01-10 20:55 - 00000000 ___SD C:\Users\krzysiek\GG dysk
2014-01-10 20:55 - 2013-01-03 20:24 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\GG
2014-01-10 20:55 - 2013-01-03 19:48 - 00000000 ____D C:\Users\krzysiek
2014-01-10 20:39 - 2014-01-10 20:39 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-10 20:39 - 2014-01-10 20:39 - 00000000 _____ C:\autoexec.bat
2014-01-10 20:27 - 2014-01-10 20:26 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\krzysiek\Downloads\SpyHunter-Installer.exe
2014-01-10 20:22 - 2014-01-05 18:38 - 00000000 ____D C:\Users\krzysiek\AppData\Local\CrashDumps
2014-01-10 20:22 - 2013-08-07 13:34 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\uTorrent
2014-01-10 20:13 - 2013-07-12 11:32 - 00001366 _____ C:\Users\krzysiek\Desktop\fraps.lnk
2014-01-10 20:11 - 2014-01-10 20:11 - 00000000 ____D C:\Users\krzysiek\.android
2014-01-10 18:52 - 2013-07-10 17:33 - 00291512 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-10 18:52 - 2013-01-04 19:19 - 00291512 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2014-01-10 18:51 - 2014-01-04 22:10 - 00000000 ____D C:\Users\krzysiek\AppData\Local\Deployment
2014-01-10 18:51 - 2013-01-04 18:31 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-01-09 21:45 - 2013-01-04 18:31 - 00291512 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-09 14:29 - 2014-01-09 14:29 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2014-01-09 14:29 - 2014-01-09 14:29 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-08 23:00 - 2014-01-01 14:36 - 00047104 ___SH C:\Users\krzysiek\Downloads\Thumbs.db
2014-01-08 22:59 - 2014-01-04 19:41 - 00000000 ____D C:\Users\krzysiek\Documents\my games
2014-01-08 22:58 - 2013-06-09 17:24 - 00000000 ___RD C:\Users\krzysiek\Documents\Notes
2014-01-08 22:51 - 2013-06-24 14:21 - 00000000 ____D C:\Users\krzysiek\Documents\telefon
2014-01-08 22:47 - 2013-09-22 15:30 - 00000000 ____D C:\Users\krzysiek\Desktop\car
2014-01-05 13:12 - 2009-07-14 18:55 - 00737942 _____ C:\Windows\system32\perfh015.dat
2014-01-05 13:12 - 2009-07-14 18:55 - 00154630 _____ C:\Windows\system32\perfc015.dat
2014-01-05 13:12 - 2009-07-14 06:13 - 01663412 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-04 22:10 - 2014-01-04 22:10 - 00000000 ____D C:\Users\krzysiek\AppData\Local\Apps\2.0
2014-01-04 21:44 - 2013-01-04 19:19 - 00000000 ____D C:\Users\krzysiek\AppData\Local\PunkBuster
2014-01-04 21:40 - 2013-03-10 14:53 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\DAEMON Tools Lite
2014-01-04 21:37 - 2013-01-10 17:56 - 00000582 _____ C:\Users\krzysiek\AppData\Roaming\burnaware.ini
2014-01-04 21:32 - 2013-12-01 14:30 - 00000850 _____ C:\Windows\ARPR.INI
2014-01-04 21:30 - 2013-01-03 20:19 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\DMCache
2014-01-04 19:50 - 2014-01-04 19:50 - 00003080 _____ C:\Windows\System32\Tasks\GoforFilesUpdate
2014-01-04 19:50 - 2014-01-04 19:50 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-04 19:50 - 2014-01-04 19:50 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\GoforFiles
2014-01-04 19:23 - 2014-01-04 19:22 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-04 19:22 - 2014-01-04 19:22 - 00000000 ____D C:\Windows\SysWOW64\AGEIA
2014-01-04 19:07 - 2013-12-17 21:01 - 00000000 ____D C:\Users\krzysiek\Downloads\Compressed
2014-01-04 18:51 - 2013-12-28 18:38 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\SpinTires
2014-01-02 22:49 - 2013-12-23 17:24 - 00054784 ___SH C:\Users\krzysiek\Desktop\Thumbs.db
2014-01-02 22:49 - 2013-12-23 16:54 - 00000000 ____D C:\Users\krzysiek\Downloads\Video
2014-01-01 20:54 - 2013-01-04 16:33 - 00000000 ____D C:\Users\krzysiek\AppData\Local\ChomikBox
2014-01-01 20:52 - 2014-01-01 20:52 - 00000000 ____D C:\Users\krzysiek\Downloads\ChomikBox
2014-01-01 14:38 - 2014-01-01 14:38 - 00001536 _____ C:\Users\krzysiek\Desktop\SpinTires.lnk
2014-01-01 14:38 - 2013-12-28 18:35 - 00000000 ____D C:\Program Files (x86)\Oovee
2013-12-23 23:36 - 2013-09-08 16:12 - 00000000 ____D C:\ProgramData\LGMOBILEAX
2013-12-21 21:09 - 2013-01-03 21:36 - 00000000 ____D C:\Program Files (x86)\AIMP3
2013-12-21 19:42 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-18 21:36 - 2013-07-10 17:33 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-18 15:27 - 2013-07-15 11:22 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\TS3Client
2013-12-17 23:17 - 2013-12-17 23:12 - 00000000 ___HD C:\Users\krzysiek\Documents\.4sh
2013-12-17 23:09 - 2013-12-17 23:09 - 00000000 ____D C:\Users\krzysiek\AppData\Roaming\Nico Mak Computing
2013-12-17 20:36 - 2013-11-19 20:37 - 00000000 ____D C:\Program Files (x86)\LG Electronics
2013-12-17 20:36 - 2013-01-03 19:54 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-17 19:58 - 2013-09-08 16:12 - 00002411 _____ C:\Windows\SysWOW64\lgAxconfig.ini
2013-12-17 19:58 - 2013-09-08 16:12 - 00000831 _____ C:\Users\krzysiek\Desktop\LGMobile Support Tool.lnk
2013-12-17 19:14 - 2013-12-17 19:14 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_lgandadb_01005.Wdf
2013-12-14 15:29 - 2013-12-14 15:29 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cef8d8d65ceae1
2013-12-14 15:29 - 2013-10-18 14:22 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cecc051d5dab12
2013-12-11 20:29 - 2013-01-03 21:55 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 20:29 - 2013-01-03 21:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 20:29 - 2013-01-03 21:55 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

Some content of TEMP:
====================
C:\Users\krzysiek\AppData\Local\Temp\SHSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-03-16 15:47

==================== End Of Log ============================