Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Cris (administrator) on CRIS-KOMPUTER on 31-01-2014 19:33:27
Running from C:\Users\Cris\Downloads
Windows 7 Home Premium (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
() D:\Gry\Riot\League of Legends\RADS\system\rads_user_kernel.exe
() D:\Gry\Riot\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.198\deploy\LoLLauncher.exe
() D:\Gry\Riot\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.69\deploy\LolClient.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-25] (AVAST Software)
AppInit_DLLs:  => File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\Cris\AppData\Roaming\Mozilla\Firefox\Profiles\2kepaoqo.default
FF Homepage: onet.pl
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Forecastfox - C:\Users\Cris\AppData\Roaming\Mozilla\Firefox\Profiles\2kepaoqo.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2013-07-30]
FF Extension: Adblock Plus - C:\Users\Cris\AppData\Roaming\Mozilla\Firefox\Profiles\2kepaoqo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-07-30]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-12-16]

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
CHR Extension: (Dokumenty Google) - C:\Users\Cris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-15]
CHR Extension: (Dysk Google) - C:\Users\Cris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-15]
CHR Extension: (YouTube) - C:\Users\Cris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-15]
CHR Extension: (Szukaj w Google) - C:\Users\Cris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-15]
CHR Extension: (Google Wallet) - C:\Users\Cris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-04]
CHR Extension: (Gmail) - C:\Users\Cris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-15]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-25] (AVAST Software)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-25] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-25] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-25] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-25] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-25] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-25] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2012-12-16] ()
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
U3 ado1bssk; C:\Windows\System32\Drivers\ado1bssk.sys [0 ] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-30 23:01 - 2014-01-30 23:01 - 00000000 ____D C:\Users\Cris\AppData\Local\NVIDIA Corporation
2014-01-30 22:59 - 2014-01-30 22:59 - 00000000 ____D C:\Users\Cris\AppData\Local\NVIDIA
2014-01-30 22:59 - 2014-01-30 22:59 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-30 22:57 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-30 22:57 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-30 22:56 - 2014-01-30 22:57 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-30 22:56 - 2014-01-30 22:56 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-30 22:56 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-01-30 22:56 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-01-30 22:56 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-30 22:56 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-01-30 22:56 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-01-30 22:56 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-01-30 22:55 - 2014-01-30 23:07 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-30 22:55 - 2013-12-19 21:33 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-01-30 22:55 - 2013-12-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-30 22:51 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-30 22:51 - 2013-12-19 21:33 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2014-01-30 22:51 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-30 22:51 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-30 22:51 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-30 22:51 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-30 22:51 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-30 22:51 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-30 22:51 - 2012-12-16 18:09 - 00539168 _____ (NVIDIA Corporation) C:\Windows\system32\nvuninst.exe
2014-01-30 22:48 - 2014-01-30 22:49 - 00000000 ____D C:\Users\Cris\Desktop\nvidia
2014-01-30 22:43 - 2014-01-31 16:45 - 00001467 _____ C:\Windows\setupact.log
2014-01-30 22:43 - 2014-01-30 22:43 - 00001248 _____ C:\Windows\PFRO.log
2014-01-30 22:43 - 2014-01-30 22:43 - 00000000 _____ C:\Windows\setuperr.log
2014-01-30 22:41 - 2014-01-30 22:41 - 00000000 ____D C:\Program Files (x86)\Phyxion.net
2014-01-30 22:40 - 2014-01-31 12:00 - 00307531 _____ C:\Windows\WindowsUpdate.log
2014-01-30 22:19 - 2014-01-30 22:34 - 266633424 _____ (NVIDIA Corporation) C:\Users\Cris\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-30 19:08 - 2014-01-30 19:08 - 00000868 _____ C:\Users\Public\Desktop\Graj w League of Legends.lnk
2014-01-30 19:08 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-01-30 19:08 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-01-30 19:08 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-01-30 18:11 - 2014-01-30 18:09 - 00022334 _____ C:\Users\Cris\Desktop\FRST.txt
2014-01-30 18:08 - 2014-01-31 19:33 - 00010760 _____ C:\Users\Cris\Downloads\FRST.txt
2014-01-30 18:05 - 2014-01-30 18:06 - 00000085 _____ C:\Windows\wininit.ini
2014-01-30 18:05 - 2014-01-30 18:05 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2014-01-30 18:04 - 2014-01-30 18:04 - 00000000 ____D C:\Users\Cris\Downloads\FRST-OlderVersion
2014-01-28 18:17 - 2014-01-28 18:17 - 01472106 _____ C:\Users\Cris\Downloads\LOLReplay-0.8.5.2.exe
2014-01-26 10:54 - 2014-01-26 10:59 - 59782173 _____ C:\Users\Cris\Downloads\Pokemon HeartGold.zip
2014-01-25 20:45 - 2014-01-31 19:33 - 00000000 ____D C:\FRST
2014-01-25 20:31 - 2014-01-30 18:04 - 02079744 _____ (Farbar) C:\Users\Cris\Downloads\FRST64.exe
2014-01-25 20:31 - 2014-01-25 20:31 - 00602112 _____ (OldTimer Tools) C:\Users\Cris\Downloads\OTL.exe
2014-01-25 19:28 - 2014-01-30 18:55 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-25 19:28 - 2014-01-30 18:06 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-25 18:55 - 2014-01-25 18:55 - 00007606 _____ C:\Users\Cris\AppData\Local\Resmon.ResmonCfg
2014-01-25 18:01 - 2014-01-25 18:01 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-25 18:01 - 2014-01-25 18:01 - 00000000 ___HD C:\ProgramData\Malwarebytes
2014-01-25 18:01 - 2014-01-25 18:01 - 00000000 ____D C:\Users\Cris\AppData\Roaming\Malwarebytes
2014-01-25 18:01 - 2014-01-25 18:01 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-25 18:01 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-25 17:59 - 2014-01-25 17:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Cris\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-25 17:33 - 2014-01-25 17:33 - 00012780 _____ C:\ComboFix.txt
2014-01-25 17:25 - 2014-01-25 17:33 - 00000000 ____D C:\Qoobox
2014-01-25 17:25 - 2014-01-25 17:32 - 00000000 ____D C:\Windows\erdnt
2014-01-25 17:25 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-25 17:25 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-25 17:25 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-25 17:25 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-25 17:25 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-25 17:25 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-25 17:25 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-25 17:25 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-25 16:14 - 2014-01-25 16:14 - 00000000 ____D C:\Users\Cris\AppData\Roaming\AVAST Software
2014-01-25 16:11 - 2014-01-25 16:11 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-01-25 15:52 - 2014-01-25 15:52 - 00000000 ____D C:\Users\Cris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Volleyball Manager 2013
2014-01-25 15:50 - 2014-01-25 15:50 - 04408409 _____ () C:\Users\Cris\Downloads\VM2013.exe
2014-01-24 16:20 - 2014-01-24 16:20 - 00000000 ___SH C:\Users\Cris\AppData\Local\LumaEmu
2014-01-13 11:49 - 2014-01-13 11:49 - 00000000 ____D C:\Users\Cris\Documents\CV
2014-01-12 16:15 - 2014-01-12 16:15 - 00000000 ____D C:\Users\Cris\Documents\CPY_SAVES

==================== One Month Modified Files and Folders =======

2014-01-31 19:33 - 2014-01-30 18:08 - 00010760 _____ C:\Users\Cris\Downloads\FRST.txt
2014-01-31 19:33 - 2014-01-25 20:45 - 00000000 ____D C:\FRST
2014-01-31 19:16 - 2013-06-29 10:04 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-31 18:48 - 2013-04-15 07:09 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-31 17:51 - 2012-12-16 23:17 - 00000000 ____D C:\Users\Cris\AppData\Roaming\Skype
2014-01-31 16:45 - 2014-01-30 22:43 - 00001467 _____ C:\Windows\setupact.log
2014-01-31 13:09 - 2014-01-30 22:40 - 00307531 _____ C:\Windows\WindowsUpdate.log
2014-01-31 12:02 - 2009-07-14 05:45 - 00014592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-31 12:02 - 2009-07-14 05:45 - 00014592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-31 11:58 - 2013-04-15 07:09 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-31 11:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-30 23:07 - 2014-01-30 22:55 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-30 23:07 - 2012-12-16 18:15 - 00001065 _____ C:\Windows\winamp.ini
2014-01-30 23:01 - 2014-01-30 23:01 - 00000000 ____D C:\Users\Cris\AppData\Local\NVIDIA Corporation
2014-01-30 23:00 - 2012-12-16 22:10 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-30 22:59 - 2014-01-30 22:59 - 00000000 ____D C:\Users\Cris\AppData\Local\NVIDIA
2014-01-30 22:59 - 2014-01-30 22:59 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-30 22:57 - 2014-01-30 22:56 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-30 22:57 - 2012-12-16 20:11 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-30 22:56 - 2014-01-30 22:56 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-30 22:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2014-01-30 22:49 - 2014-01-30 22:48 - 00000000 ____D C:\Users\Cris\Desktop\nvidia
2014-01-30 22:43 - 2014-01-30 22:43 - 00001248 _____ C:\Windows\PFRO.log
2014-01-30 22:43 - 2014-01-30 22:43 - 00000000 _____ C:\Windows\setuperr.log
2014-01-30 22:41 - 2014-01-30 22:41 - 00000000 ____D C:\Program Files (x86)\Phyxion.net
2014-01-30 22:34 - 2014-01-30 22:19 - 266633424 _____ (NVIDIA Corporation) C:\Users\Cris\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-30 19:08 - 2014-01-30 19:08 - 00000868 _____ C:\Users\Public\Desktop\Graj w League of Legends.lnk
2014-01-30 19:01 - 2012-12-16 17:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-30 18:57 - 2013-12-15 00:40 - 00000000 ____D C:\Windows\Minidump
2014-01-30 18:57 - 2013-04-28 11:15 - 00000000 ____D C:\Users\Cris\AppData\Roaming\uTorrent
2014-01-30 18:57 - 2013-02-09 23:06 - 00000000 ____D C:\Users\Cris\AppData\Roaming\TS3Client
2014-01-30 18:55 - 2014-01-25 19:28 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-30 18:09 - 2014-01-30 18:11 - 00022334 _____ C:\Users\Cris\Desktop\FRST.txt
2014-01-30 18:06 - 2014-01-30 18:05 - 00000085 _____ C:\Windows\wininit.ini
2014-01-30 18:06 - 2014-01-25 19:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-30 18:05 - 2014-01-30 18:05 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2014-01-30 18:05 - 2012-12-16 18:20 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Toolbar
2014-01-30 18:04 - 2014-01-30 18:04 - 00000000 ____D C:\Users\Cris\Downloads\FRST-OlderVersion
2014-01-30 18:04 - 2014-01-25 20:31 - 02079744 _____ (Farbar) C:\Users\Cris\Downloads\FRST64.exe
2014-01-29 16:52 - 2013-04-15 07:11 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-28 18:27 - 2013-12-15 11:26 - 00000000 ____D C:\Users\Cris\Documents\LOLReplay
2014-01-28 18:17 - 2014-01-28 18:17 - 01472106 _____ C:\Users\Cris\Downloads\LOLReplay-0.8.5.2.exe
2014-01-28 16:59 - 2013-12-24 13:10 - 00000341 _____ C:\Users\Cris\Desktop\champy.txt
2014-01-26 12:05 - 2013-09-15 09:29 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2014-01-26 10:59 - 2014-01-26 10:54 - 59782173 _____ C:\Users\Cris\Downloads\Pokemon HeartGold.zip
2014-01-25 20:31 - 2014-01-25 20:31 - 00602112 _____ (OldTimer Tools) C:\Users\Cris\Downloads\OTL.exe
2014-01-25 19:12 - 2009-07-14 18:55 - 00737980 _____ C:\Windows\system32\perfh015.dat
2014-01-25 19:12 - 2009-07-14 18:55 - 00154636 _____ C:\Windows\system32\perfc015.dat
2014-01-25 19:12 - 2009-07-14 06:13 - 01662556 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-25 18:55 - 2014-01-25 18:55 - 00007606 _____ C:\Users\Cris\AppData\Local\Resmon.ResmonCfg
2014-01-25 18:01 - 2014-01-25 18:01 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-25 18:01 - 2014-01-25 18:01 - 00000000 ___HD C:\ProgramData\Malwarebytes
2014-01-25 18:01 - 2014-01-25 18:01 - 00000000 ____D C:\Users\Cris\AppData\Roaming\Malwarebytes
2014-01-25 18:01 - 2014-01-25 18:01 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-25 17:59 - 2014-01-25 17:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Cris\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-25 17:33 - 2014-01-25 17:33 - 00012780 _____ C:\ComboFix.txt
2014-01-25 17:33 - 2014-01-25 17:25 - 00000000 ____D C:\Qoobox
2014-01-25 17:33 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-25 17:32 - 2014-01-25 17:25 - 00000000 ____D C:\Windows\erdnt
2014-01-25 17:32 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-25 16:33 - 2012-12-16 18:20 - 00000000 ____D C:\Users\Cris\AppData\Roaming\DAEMON Tools Lite
2014-01-25 16:14 - 2014-01-25 16:14 - 00000000 ____D C:\Users\Cris\AppData\Roaming\AVAST Software
2014-01-25 16:12 - 2012-12-16 22:10 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-25 16:11 - 2014-01-25 16:11 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-01-25 16:11 - 2013-03-19 15:00 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-25 16:11 - 2013-03-19 15:00 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-25 16:11 - 2012-12-16 22:10 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-25 16:11 - 2012-12-16 22:10 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-25 16:11 - 2012-12-16 22:10 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-25 16:11 - 2012-12-16 22:10 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-25 16:11 - 2012-12-16 22:10 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-25 16:11 - 2012-12-16 22:09 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-25 16:08 - 2012-12-16 22:10 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2014-01-25 15:52 - 2014-01-25 15:52 - 00000000 ____D C:\Users\Cris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Volleyball Manager 2013
2014-01-25 15:51 - 2013-05-11 10:48 - 00000000 ____D C:\Users\Cris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-01-25 15:50 - 2014-01-25 15:50 - 04408409 _____ () C:\Users\Cris\Downloads\VM2013.exe
2014-01-24 16:20 - 2014-01-24 16:20 - 00000000 ___SH C:\Users\Cris\AppData\Local\LumaEmu
2014-01-18 16:27 - 2013-10-01 18:44 - 00000000 ____D C:\Users\Cris\Documents\Euro Truck Simulator 2
2014-01-18 13:43 - 2013-06-29 10:04 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-18 13:43 - 2012-12-17 18:51 - 00000000 ____D C:\Users\Cris\AppData\Local\Adobe
2014-01-18 13:43 - 2012-12-16 23:01 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-18 13:43 - 2012-12-16 23:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-13 11:49 - 2014-01-13 11:49 - 00000000 ____D C:\Users\Cris\Documents\CV
2014-01-13 11:49 - 2012-12-16 15:07 - 00001053 _____ C:\Users\Cris\Desktop\Różne informacje.txt
2014-01-12 16:15 - 2014-01-12 16:15 - 00000000 ____D C:\Users\Cris\Documents\CPY_SAVES
2014-01-12 15:49 - 2013-02-01 14:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-12 15:49 - 2012-12-16 23:16 - 00000000 ____D C:\ProgramData\Skype
2014-01-08 11:27 - 2012-12-16 23:23 - 00000000 ____D C:\Users\Cris\AppData\Roaming\Google
2014-01-07 19:11 - 2012-12-16 22:09 - 00000000 ___HD C:\ProgramData\AVAST Software
2014-01-07 17:13 - 2013-02-09 23:04 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2014-01-07 16:38 - 2012-12-16 15:07 - 00000000 ____D C:\Users\Cris\Documents\policja

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2009-08-27 15:07] - [2009-08-27 15:07] - 1008640 ____A (Microsoft Corporation) A670311C04691C90C99D851C353B37F4

C:\Windows\SysWOW64\User32.dll
[2009-08-27 15:07] - [2009-08-27 15:07] - 0833024 ____A (Microsoft Corporation) 8CB183306641099717A2DC9C6CC82D17

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-20 12:52

==================== End Of Log ============================