Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by oem (administrator) on OEM-KOMPUTER on 06-04-2014 17:46:22
Running from C:\Users\oem\Downloads\Nowy folder
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
() C:\Windows\system32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(GG Network S.A.) C:\Users\oem\AppData\Local\GG\Application\gghub.exe
(Google Inc.) C:\Users\oem\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\oem\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\oem\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\oem\AppData\Local\Google\Chrome\Application\chrome.exe
(GG Network S.A.) C:\Users\oem\AppData\Local\GG\Application\ggapp.exe
(GG Network S.A.) C:\Users\oem\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(GG Network S.A.) C:\Users\oem\AppData\Local\GG\Application\xulrunner\gghub.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10996368 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [FixCamera] - C:\Windows\FixCamera.exe [20480 2007-02-12] ()
HKLM\...\Run: [snp325] - C:\Windows\vsnp325.exe [827392 2006-10-10] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [CloneCDTray] - C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-30] (SlySoft, Inc.)
HKLM\...\Run: [RoccatKone+] - C:\Program Files\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [552960 2011-07-12] (ROCCAT GmbH)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-08-15] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [951576 2014-03-11] (Microsoft Corporation)
HKU\S-1-5-21-348518381-1321380691-2008726651-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1840424 2008-06-24] (Nero AG)
HKU\S-1-5-21-348518381-1321380691-2008726651-1000\...\Run: [Google Update] - C:\Users\oem\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-10-03] (Google Inc.)
HKU\S-1-5-21-348518381-1321380691-2008726651-1000\...\Run: [screenshooter] - C:\Program Files\ScreenShooter\screenshooter.exe [606208 2010-09-03] ()
HKU\S-1-5-21-348518381-1321380691-2008726651-1000\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [21822128 2014-01-30] (Google)
HKU\S-1-5-21-348518381-1321380691-2008726651-1000\...\MountPoints2: {a551ef2a-6aae-11e2-891c-902b34066f1f} - H:\LaunchU3.exe -a

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.bing.com
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\Program Files\No1 Video Converter\msdxm.ocx (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\Program Files\No1 Video Converter\msdxm.ocx (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: 
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\oem\AppData\Local\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\oem\AppData\Local\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\oem\AppData\Local\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Media Go Detector) - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
CHR Plugin: (Power Challenge Loader) - C:\Users\oem\AppData\LocalLow\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB)
CHR Plugin: (Unity Player) - C:\Users\oem\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Google Update) - C:\Users\oem\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
CHR Extension: (Photo Zoom for Facebook) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\elioihkkcdgakfbahdoddophfngopipi [2013-07-17]
CHR Extension: (AdBlock) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-07-17]
CHR Extension: (Cut the Rope) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkddaofiamhgfjmaccfcfpfolpgbeomj [2013-07-17]
CHR Extension: (Thor 2 Theme [FVD]) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\joojeogmgmedneedbmilkmpbjnomodcp [2013-11-03]
CHR Extension: (Google Wallet) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2013-07-17]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\oem\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-03-25]

========================== Services (Whitelisted) =================

S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [277616 2012-12-14] (Intel Corporation)
S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe [1074480 2014-03-15] (Flexera Software LLC)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [279776 2014-03-11] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-01-24] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)

==================== Drivers (Whitelisted) ====================

S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1500160 2010-01-05] (Atheros Communications, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [83872 2012-10-04] ()
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2012-10-04] ()
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231960 2014-01-25] (Microsoft Corporation)
R1 MpKslf1e5c4b0; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{62FC97CC-A917-4594-A1C6-49ED65B4EF03}\MpKslf1e5c4b0.sys [39464 2014-04-06] (Microsoft Corporation)
R2 RtNdPt60; C:\Windows\System32\DRIVERS\RtNdPt60.sys [27648 2011-06-15] (Realtek                                            )
S3 RTTEAMPT; C:\Windows\System32\DRIVERS\RtTeam60.sys [50280 2011-06-15] (Realtek Corporation)
S3 RTVLANPT; C:\Windows\System32\DRIVERS\RtVlan620.sys [27752 2011-09-16] (Realtek Corporation)
S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [86824 2008-10-21] (MCCI Corporation)
S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [15016 2008-10-21] (MCCI Corporation)
S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [114600 2008-10-21] (MCCI Corporation)
S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [108328 2008-10-21] (MCCI Corporation)
S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [26024 2008-10-21] (MCCI Corporation)
S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [104616 2008-10-21] (MCCI Corporation)
S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [109736 2008-10-21] (MCCI Corporation)
R3 SNP325; C:\Windows\System32\DRIVERS\snp325.sys [10260864 2007-03-07] (Sonix Co. Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [320120 2014-04-06] (Duplex Secure Ltd.)
R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 TEAM; C:\Windows\System32\DRIVERS\RtTeam60.sys [50280 2011-06-15] (Realtek Corporation)
U3 uxriqpow; \??\C:\Users\oem\AppData\Local\Temp\uxriqpow.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-06 17:44 - 2014-04-06 17:44 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Mozilla
2014-04-06 17:42 - 2014-04-06 17:42 - 00448512 _____ (OldTimer Tools) C:\Users\oem\Downloads\TFC.exe
2014-04-06 17:35 - 2014-04-06 17:46 - 00000000 ____D () C:\Users\oem\Downloads\Nowy folder
2014-04-06 17:33 - 2014-04-06 17:33 - 01950720 _____ () C:\Users\oem\Downloads\AdwCleaner.pl 3.022.exe
2014-04-06 15:09 - 2014-04-06 15:09 - 00000000 ____D () C:\Users\oem\Downloads\logi
2014-04-06 14:57 - 2014-04-06 17:46 - 00000000 ____D () C:\FRST
2014-04-06 14:55 - 2014-04-06 14:55 - 00180416 _____ () C:\Users\oem\Downloads\OTL.Txt
2014-04-06 14:51 - 2014-04-06 14:51 - 00987448 _____ () C:\Users\oem\Downloads\SecurityCheck.exe
2014-04-06 14:12 - 2014-04-06 14:12 - 00602112 _____ (OldTimer Tools) C:\Users\oem\Downloads\OTL.exe
2014-04-06 13:56 - 2014-04-06 13:56 - 00320120 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2014-04-06 13:55 - 2014-04-06 13:55 - 00522360 _____ (Duplex Secure Ltd.) C:\Users\oem\Downloads\SPTDinst-v186-x86.exe
2014-04-06 13:51 - 2014-04-06 13:51 - 00380416 _____ () C:\Users\oem\Downloads\ub382my7.exe
2014-04-06 13:15 - 2014-04-06 13:15 - 03386520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\oem\Downloads\avg_remover_stf_x86_2014_4116.exe
2014-04-06 12:33 - 2014-04-06 12:33 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-06 12:28 - 2014-04-06 13:03 - 00000000 ____D () C:\AdwCleaner
2014-04-06 12:27 - 2014-04-06 12:27 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\oem\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-06 12:27 - 2014-04-06 12:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-06 12:27 - 2014-04-06 12:27 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-04-06 12:27 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-06 12:27 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-06 12:27 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-04 13:02 - 2014-04-04 13:02 - 00002097 _____ () C:\Users\oem\Desktop\Skype.lnk
2014-03-31 17:14 - 2014-04-03 12:57 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-03-31 17:14 - 2014-04-03 12:56 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-31 16:52 - 2014-03-31 16:52 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2014-03-31 16:35 - 2014-03-31 16:53 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Riot Games
2014-03-31 12:24 - 2014-03-31 12:24 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-28 10:27 - 2014-03-28 10:27 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-03-28 10:27 - 2014-03-28 10:27 - 00000000 ____D () C:\Users\oem\AppData\Roaming\DropboxMaster
2014-03-28 09:37 - 2014-03-28 10:27 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Dropbox
2014-03-27 19:14 - 2014-03-27 19:16 - 00000000 ____D () C:\Users\oem\Downloads\kartkwkazestatystyki
2014-03-27 18:01 - 2014-03-27 18:01 - 00010158 _____ () C:\Users\oem\.recently-used.xbel
2014-03-25 12:26 - 2014-03-25 16:20 - 00000000 ___RD () C:\Users\oem\Desktop\tato
2014-03-25 12:25 - 2014-04-06 14:02 - 00000000 ___RD () C:\Users\oem\Dysk Google
2014-03-25 12:22 - 2014-04-06 17:32 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-25 12:22 - 2014-04-06 14:01 - 00001026 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-25 12:22 - 2014-03-25 12:23 - 00000000 ____D () C:\Program Files\Google
2014-03-24 18:12 - 2014-03-24 18:12 - 00000000 ___RD () C:\Program Files\Skype
2014-03-24 18:12 - 2014-03-24 18:12 - 00000000 ____D () C:\Users\oem\AppData\Local\Skype
2014-03-24 18:12 - 2014-03-24 18:12 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-24 09:37 - 2014-03-24 09:37 - 00000000 ____D () C:\Windows\jumpshot.com
2014-03-20 18:40 - 2014-03-20 19:33 - 00000000 ____D () C:\Users\oem\Downloads\Lowcy smokow 2008 [TnT24.Info]
2014-03-19 18:56 - 2014-03-20 17:51 - 00000000 ____D () C:\Users\oem\Downloads\fwdgeodezjaikartografia2
2014-03-15 15:35 - 2014-03-15 15:57 - 00000000 ____D () C:\Users\oem\AppData\Local\ESRI
2014-03-15 15:35 - 2014-03-15 15:35 - 00000000 ____D () C:\Users\oem\Documents\ArcGIS
2014-03-15 15:35 - 2014-03-15 15:35 - 00000000 ____D () C:\Users\oem\AppData\Roaming\ESRI
2014-03-15 15:27 - 2014-03-15 15:31 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-03-15 15:26 - 2014-03-15 15:26 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared
2014-03-15 15:19 - 2014-03-15 15:19 - 00000000 ____D () C:\Program Files\Common Files\AnswerWorks 4.0
2014-03-15 15:18 - 2014-03-15 15:21 - 00000000 ____D () C:\Program Files\Common Files\ArcGIS
2014-03-15 15:18 - 2014-03-15 15:18 - 00000000 ____D () C:\Python27
2014-03-15 15:18 - 2014-03-15 15:18 - 00000000 ____D () C:\Program Files\Common Files\Tom Sawyer Software
2014-03-15 15:18 - 2014-03-15 15:18 - 00000000 ____D () C:\Program Files\Common Files\Data Dynamics
2014-03-12 14:29 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 14:29 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 14:29 - 2014-03-01 06:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 14:29 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 14:29 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 14:29 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 14:29 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 14:29 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 14:29 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 14:29 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 14:29 - 2014-03-01 05:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 14:29 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 14:29 - 2014-03-01 05:31 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 14:29 - 2014-03-01 05:25 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 14:29 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 14:29 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 14:29 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 14:29 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 14:29 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 14:29 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 14:29 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 14:29 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 14:28 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 14:27 - 2014-02-07 03:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 14:26 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 14:26 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 14:26 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

==================== One Month Modified Files and Folders =======

2014-04-06 17:46 - 2014-04-06 17:35 - 00000000 ____D () C:\Users\oem\Downloads\Nowy folder
2014-04-06 17:46 - 2014-04-06 14:57 - 00000000 ____D () C:\FRST
2014-04-06 17:44 - 2014-04-06 17:44 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Mozilla
2014-04-06 17:44 - 2013-06-07 19:15 - 00000000 ____D () C:\Users\oem\AppData\Roaming\GG
2014-04-06 17:42 - 2014-04-06 17:42 - 00448512 _____ (OldTimer Tools) C:\Users\oem\Downloads\TFC.exe
2014-04-06 17:37 - 2012-10-03 17:05 - 00000000 ____D () C:\Users\oem\AppData\Local\PMB Files
2014-04-06 17:37 - 2012-10-03 17:05 - 00000000 ____D () C:\ProgramData\PMB Files
2014-04-06 17:33 - 2014-04-06 17:33 - 01950720 _____ () C:\Users\oem\Downloads\AdwCleaner.pl 3.022.exe
2014-04-06 17:32 - 2014-03-25 12:22 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-06 17:27 - 2013-09-09 11:27 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-06 16:47 - 2012-10-03 15:15 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-348518381-1321380691-2008726651-1000UA.job
2014-04-06 16:36 - 2012-10-04 16:59 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Skype
2014-04-06 15:09 - 2014-04-06 15:09 - 00000000 ____D () C:\Users\oem\Downloads\logi
2014-04-06 14:55 - 2014-04-06 14:55 - 00180416 _____ () C:\Users\oem\Downloads\OTL.Txt
2014-04-06 14:51 - 2014-04-06 14:51 - 00987448 _____ () C:\Users\oem\Downloads\SecurityCheck.exe
2014-04-06 14:12 - 2014-04-06 14:12 - 00602112 _____ (OldTimer Tools) C:\Users\oem\Downloads\OTL.exe
2014-04-06 14:08 - 2009-07-14 06:34 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-06 14:08 - 2009-07-14 06:34 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-06 14:06 - 2012-10-03 09:46 - 01679230 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-06 14:06 - 2012-10-03 09:39 - 01985331 _____ () C:\Windows\WindowsUpdate.log
2014-04-06 14:06 - 2009-07-14 10:07 - 00743676 _____ () C:\Windows\system32\perfh015.dat
2014-04-06 14:06 - 2009-07-14 10:07 - 00157290 _____ () C:\Windows\system32\perfc015.dat
2014-04-06 14:02 - 2014-03-25 12:25 - 00000000 ___RD () C:\Users\oem\Dysk Google
2014-04-06 14:01 - 2014-03-25 12:22 - 00001026 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-06 14:01 - 2012-10-04 15:48 - 01044826 _____ () C:\Windows\PFRO.log
2014-04-06 14:01 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-06 14:01 - 2009-07-14 06:39 - 00105210 _____ () C:\Windows\setupact.log
2014-04-06 13:56 - 2014-04-06 13:56 - 00320120 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2014-04-06 13:55 - 2014-04-06 13:55 - 00522360 _____ (Duplex Secure Ltd.) C:\Users\oem\Downloads\SPTDinst-v186-x86.exe
2014-04-06 13:51 - 2014-04-06 13:51 - 00380416 _____ () C:\Users\oem\Downloads\ub382my7.exe
2014-04-06 13:48 - 2013-06-07 19:15 - 00000000 ____D () C:\Users\oem\AppData\Local\GG
2014-04-06 13:46 - 2012-10-03 15:15 - 00000998 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-348518381-1321380691-2008726651-1000Core.job
2014-04-06 13:15 - 2014-04-06 13:15 - 03386520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\oem\Downloads\avg_remover_stf_x86_2014_4116.exe
2014-04-06 13:03 - 2014-04-06 12:28 - 00000000 ____D () C:\AdwCleaner
2014-04-06 12:33 - 2014-04-06 12:33 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-06 12:33 - 2013-03-20 19:09 - 00000000 ____D () C:\Program Files\Gabest
2014-04-06 12:27 - 2014-04-06 12:27 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\oem\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-06 12:27 - 2014-04-06 12:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-06 12:27 - 2014-04-06 12:27 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-04-06 12:15 - 2013-07-27 09:40 - 00000068 _____ () C:\Users\oem\AppData\Roaming\WB.CFG
2014-04-06 10:54 - 2012-10-21 14:55 - 00000000 ____D () C:\Users\oem\AppData\Roaming\.minecraft
2014-04-04 21:47 - 2012-10-04 15:57 - 00000000 ____D () C:\Program Files\Steam
2014-04-04 14:27 - 2012-10-03 19:32 - 00000000 ____D () C:\Users\oem\AppData\Roaming\AIMP3
2014-04-04 13:02 - 2014-04-04 13:02 - 00002097 _____ () C:\Users\oem\Desktop\Skype.lnk
2014-04-03 16:19 - 2012-10-03 15:56 - 00000000 ____D () C:\Program Files\Opera
2014-04-03 12:57 - 2014-03-31 17:14 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-03 12:56 - 2014-03-31 17:14 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-03 12:43 - 2013-12-20 10:37 - 00000000 ____D () C:\Users\oem\AppData\Local\Last.fm
2014-04-03 09:51 - 2014-04-06 12:27 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-06 12:27 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-06 12:27 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-02 11:49 - 2012-10-05 23:07 - 00000000 ____D () C:\Users\oem\AppData\Roaming\TS3Client
2014-03-31 20:02 - 2012-10-07 14:53 - 00000000 ____D () C:\Users\oem\AppData\Roaming\uTorrent
2014-03-31 18:25 - 2012-10-18 16:33 - 00007597 _____ () C:\Users\oem\AppData\Local\resmon.resmoncfg
2014-03-31 18:17 - 2013-11-10 10:20 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-31 17:16 - 2013-05-01 13:06 - 00000000 ___RD () C:\Users\oem\Desktop\dokumenty
2014-03-31 16:53 - 2014-03-31 16:35 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Riot Games
2014-03-31 16:52 - 2014-03-31 16:52 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2014-03-31 16:31 - 2012-10-03 10:12 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-03-31 12:35 - 2013-03-15 19:18 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Media Player Classic
2014-03-31 12:35 - 2012-10-31 18:44 - 00000000 ____D () C:\Users\oem\AppData\Roaming\DAEMON Tools Lite
2014-03-31 12:24 - 2014-03-31 12:24 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-31 12:22 - 2013-03-10 13:01 - 00000000 ____D () C:\Program Files\Torchlight II
2014-03-31 12:20 - 2012-10-03 17:48 - 00000000 ____D () C:\Program Files\Origin Games
2014-03-31 12:09 - 2014-02-23 20:23 - 00000000 ____D () C:\Users\oem\Documents\SpellForce2
2014-03-31 12:08 - 2012-10-07 15:03 - 00000000 ____D () C:\Program Files\WinRAR
2014-03-31 12:05 - 2013-01-22 15:48 - 00000000 ____D () C:\Program Files\LucasArts
2014-03-31 11:59 - 2013-03-20 19:08 - 00000000 ____D () C:\Program Files\AviSynth 2.5
2014-03-28 10:27 - 2014-03-28 10:27 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-03-28 10:27 - 2014-03-28 10:27 - 00000000 ____D () C:\Users\oem\AppData\Roaming\DropboxMaster
2014-03-28 10:27 - 2014-03-28 09:37 - 00000000 ____D () C:\Users\oem\AppData\Roaming\Dropbox
2014-03-27 19:16 - 2014-03-27 19:14 - 00000000 ____D () C:\Users\oem\Downloads\kartkwkazestatystyki
2014-03-27 18:01 - 2014-03-27 18:01 - 00010158 _____ () C:\Users\oem\.recently-used.xbel
2014-03-27 18:01 - 2012-10-06 17:07 - 07468544 ___SH () C:\Users\oem\Desktop\Thumbs.db
2014-03-27 18:01 - 2012-10-03 17:25 - 00000000 ____D () C:\Users\oem\AppData\Roaming\gtk-2.0
2014-03-27 18:01 - 2012-10-03 17:21 - 00000000 ____D () C:\Users\oem\.gimp-2.6
2014-03-27 18:01 - 2012-10-03 09:48 - 00000000 ____D () C:\Users\oem
2014-03-25 16:20 - 2014-03-25 12:26 - 00000000 ___RD () C:\Users\oem\Desktop\tato
2014-03-25 15:28 - 2012-11-05 17:27 - 00436490 _____ () C:\Windows\DPINST.LOG
2014-03-25 15:28 - 2012-11-05 17:26 - 00001972 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-03-25 12:23 - 2014-03-25 12:22 - 00000000 ____D () C:\Program Files\Google
2014-03-25 12:23 - 2012-10-03 15:15 - 00000000 ____D () C:\Users\oem\AppData\Local\Google
2014-03-24 18:12 - 2014-03-24 18:12 - 00000000 ___RD () C:\Program Files\Skype
2014-03-24 18:12 - 2014-03-24 18:12 - 00000000 ____D () C:\Users\oem\AppData\Local\Skype
2014-03-24 18:12 - 2014-03-24 18:12 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-24 18:12 - 2012-10-04 16:58 - 00000000 ____D () C:\ProgramData\Skype
2014-03-24 09:37 - 2014-03-24 09:37 - 00000000 ____D () C:\Windows\jumpshot.com
2014-03-21 09:34 - 2013-10-09 16:11 - 00000000 ___RD () C:\Users\oem\Desktop\Studia
2014-03-20 19:33 - 2014-03-20 18:40 - 00000000 ____D () C:\Users\oem\Downloads\Lowcy smokow 2008 [TnT24.Info]
2014-03-20 17:51 - 2014-03-19 18:56 - 00000000 ____D () C:\Users\oem\Downloads\fwdgeodezjaikartografia2
2014-03-20 13:10 - 2012-10-03 20:39 - 00000000 ____D () C:\Program Files\Common Files\Steam
2014-03-20 12:51 - 2014-03-05 13:02 - 00000000 ____D () C:\Users\oem\AppData\Local\Turbine
2014-03-18 23:03 - 2013-08-07 08:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 23:02 - 2012-10-03 11:11 - 87350280 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-16 09:20 - 2009-07-14 06:33 - 00415616 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 15:57 - 2014-03-15 15:35 - 00000000 ____D () C:\Users\oem\AppData\Local\ESRI
2014-03-15 15:35 - 2014-03-15 15:35 - 00000000 ____D () C:\Users\oem\Documents\ArcGIS
2014-03-15 15:35 - 2014-03-15 15:35 - 00000000 ____D () C:\Users\oem\AppData\Roaming\ESRI
2014-03-15 15:35 - 2012-10-03 15:14 - 00116416 _____ () C:\Users\oem\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-15 15:31 - 2014-03-15 15:27 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-03-15 15:26 - 2014-03-15 15:26 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared
2014-03-15 15:21 - 2014-03-15 15:18 - 00000000 ____D () C:\Program Files\Common Files\ArcGIS
2014-03-15 15:19 - 2014-03-15 15:19 - 00000000 ____D () C:\Program Files\Common Files\AnswerWorks 4.0
2014-03-15 15:18 - 2014-03-15 15:18 - 00000000 ____D () C:\Python27
2014-03-15 15:18 - 2014-03-15 15:18 - 00000000 ____D () C:\Program Files\Common Files\Tom Sawyer Software
2014-03-15 15:18 - 2014-03-15 15:18 - 00000000 ____D () C:\Program Files\Common Files\Data Dynamics
2014-03-15 13:36 - 2013-12-12 18:19 - 00000000 ____D () C:\Users\oem\Downloads\Nightwish
2014-03-13 10:07 - 2013-04-08 09:15 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-12 09:27 - 2013-02-25 15:08 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-12 09:27 - 2013-02-25 15:08 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-11 09:52 - 2013-09-27 09:53 - 00104264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NisDrvWFP.sys

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-30 11:43

==================== End Of Log ============================