Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2014 01
Ran by Bartek (administrator) on BARTEK-KOMPUTER on 20-04-2014 19:05:13
Running from C:\Users\Bartek\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Akamai Technologies, Inc.) C:\Users\Bartek\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Bartek\AppData\Local\Akamai\netsession_win.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296096 2012-12-01] (RealNetworks, Inc.)
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Bartek\AppData\Local\Akamai\netsession_win.exe [4672920 2014-03-06] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [Google Update] => C:\Users\Bartek\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2010-12-24] (Google Inc.)
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [KiesPDLR] => F:\Kies\External\FirmwareUpdate\KiesPDLR.exe [20880 2011-09-29] ()
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [Facebook Update] => C:\Users\Bartek\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-10-30] (Facebook Inc.)
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [SE] => C:\Users\Bartek\AppData\Roaming\SkypEmoticons\SE.exe [5679008 2014-04-04] (SkypEmoticons)
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Bartek\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\MountPoints2: {1c28fd68-698d-11e3-b9d0-c19d8d30ff1f} - H:\Startme.exe
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\MountPoints2: {55bd4d43-ab56-11e1-aa7b-81613403471d} - H:\MicroLauncher.exe
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\MountPoints2: {5ea3fd9c-5330-11e0-89b3-97279892001d} - H:\LGAutoRun.exe
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\MountPoints2: {9d6216ef-95fb-11e0-b50a-e3b01c24bd67} - G:\Autorun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x22E5720DADD5CE01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKCU - (No Name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://websearch.search-guide.info/?l=1&q={searchTerms}&pid=233&r=2013/11/12&hid=1136661776475716838&lg=EN&cc=PL&unqvl=40
BHO: SUrof andd, keep - {633FD71E-59EA-E7FA-060A-D391CC7F59F8} - C:\Program Files (x86)\SUrof andd, keep\5ZPtI.x64.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Blog This in Windows Live v2 - {3adefb8e-b923-35e6-86e2-2b7841f5d2a7} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: SUrof andd, keep - {633FD71E-59EA-E7FA-060A-D391CC7F59F8} - C:\Program Files (x86)\SUrof andd, keep\5ZPtI.dll ()
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - F:\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKCU - No Name - {687578B9-7132-4A7A-80E4-30EE31099E03} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878
FF user.js: detected! => C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\user.js
FF DefaultSearchEngine: Mysearchdial
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - F:\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @Webzen.com/NPGameWebStarter - C:\Program Files (x86)\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll (WEBZEN)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Bartek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Bartek\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Bartek\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Extension: SearchNewTab - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\8jumzva@jacdzdv.org [2014-01-16]
FF Extension: YoutubeAdblocker - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\gxvvoa@adyy.edu [2014-01-16]
FF Extension: SUrof andd, keep - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\lgw-xh@e-uu.org [2014-01-16]
FF Extension: surfe anD kiEeep - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\oeo7c@xssto.edu [2014-01-16]
FF Extension: MySearchDial NewTab - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-16]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - F:\Kaspersky antywirus\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - F:\Kaspersky antywirus\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - F:\Kaspersky antywirus\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-12-01]
FF HKLM-x32\...\Firefox\Extensions: [hotfix@mozilla.org] - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix
FF Extension: Mozilla hotfix - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix [2013-03-04]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - F:\NOD\Mozilla Thunderbird
FF HKCU\...\Firefox\Extensions: [hotfix@mozilla.org] - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix
FF Extension: Mozilla hotfix - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix [2013-03-04]
FF StartMenuInternet: FIREFOX.EXE - f:\mozilla\firefox.exe

Chrome: 
=======
CHR StartupUrls: ""
CHR Extension: (Google Wallet) - C:\Users\Bartek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-26]
CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Bartek\AppData\Local\mysearchdial-speeddial.crx [2013-12-18]
CHR HKCU\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Bartek\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-07-15]
CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Bartek\AppData\Local\mysearchdial-speeddial.crx [2013-12-18]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-12-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Bartek\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-07-15]
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Bartek\AppData\Local\mysearchdial-speeddial.crx [2013-12-18]
CHR StartMenuInternet: Google Chrome - C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S4 .EsetTrialReset; C:\Windows\system32\regedt32.exe [10240 2009-07-14] (Microsoft Corporation)
S4 .EsetTrialReset; C:\Windows\SysWOW64\regedt32.exe [9216 2009-07-14] (Microsoft Corporation)
S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2010-12-26] ()
S4 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)
S2 McxSvc; C:\Windows\SysWOW64\wbem\msds.exe [3846241 2013-11-23] ()
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4045688 2011-05-01] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2012-12-23] ()
S4 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [173616 2007-02-07] ()
S4 SPDFToolsReadSpool; F:\solid\SPDFT\SolidPdfToolsServicex64.exe [320512 2009-09-10] (Solid Documents, LLC)
R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [5088256 2010-02-03] (Dell Inc.)
S2 MBAMService; "F:\Malwarebytes' Anti-Malware\mbamservice.exe" [X]
S2 StarWindServiceAE; f:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [X]

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2011-06-13] ()
S3 GT680x; C:\Windows\System32\Drivers\Gt680x.sys [22528 2007-02-06] (         )
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2011-06-13] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24904 2012-04-04] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-04] (INCA Internet Co., Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-27] (Duplex Secure Ltd.)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] ()
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B}; F:\PowerDVD\000.fcl [13560 2006-11-02] (Cyberlink Corp.)
U3 az89x6jg; C:\Windows\System32\Drivers\az89x6jg.sys [0 ] (Intel Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 dump_wmimmc; \??\E:\GRY\MU online global\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
U4 WMCoreService; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-20 19:05 - 2014-04-20 19:05 - 00018144 _____ () C:\Users\Bartek\Downloads\FRST.txt
2014-04-20 19:03 - 2014-04-20 19:05 - 00000000 ____D () C:\FRST
2014-04-20 19:00 - 2014-04-20 19:02 - 02056192 _____ (Farbar) C:\Users\Bartek\Downloads\FRST64.exe
2014-04-20 19:00 - 2014-04-20 19:01 - 00380416 _____ () C:\Users\Bartek\Downloads\kh1gjygp.exe
2014-04-20 18:58 - 2014-04-20 18:58 - 00000000 ____D () C:\Users\Bartek\Desktop\logi
2014-04-20 18:26 - 2014-04-20 18:27 - 00602112 _____ (OldTimer Tools) C:\Users\Bartek\Downloads\OTL.exe
2014-04-20 00:19 - 2014-04-20 00:19 - 00015111 _____ () C:\Users\Bartek\Downloads\Wykapany_ojciec_-_Delivery_Man_ 2013 _[BRRip]_[XviD-MX]_[Napisy_PL][Torrenty.org].torrent
2014-04-20 00:17 - 2014-04-20 00:17 - 00015034 _____ () C:\Users\Bartek\Downloads\Pod_Mocnym_Aniolem_ 2014 _[CAM XviD-BiDA]_[PL][Torrenty.org].torrent
2014-04-20 00:15 - 2014-04-20 00:15 - 00014906 _____ () C:\Users\Bartek\Downloads\Studentki_-_Mes_cheres_  tudes_ 2010 _[HDRip XViD-MORS]_[Napisy_PL][Torrenty.org].torrent
2014-04-19 14:09 - 2014-04-19 14:09 - 00003106 _____ () C:\Windows\System32\Tasks\{A14E1A74-5CD1-4F1C-90BA-17E8897D0FF8}
2014-04-13 21:10 - 2014-04-13 21:11 - 05456765 _____ () C:\Users\Bartek\Desktop\niem.rar
2014-04-13 20:36 - 2014-04-13 21:11 - 00000000 ____D () C:\Users\Bartek\Desktop\niem
2014-04-13 19:53 - 2014-04-13 19:54 - 05306985 _____ () C:\Users\Bartek\Downloads\7-04.zip
2014-04-12 20:41 - 2014-04-12 20:41 - 00001068 _____ () C:\Users\Bartek\Desktop\Amnesia.lnk
2014-04-12 20:41 - 2014-04-12 20:41 - 00000000 ____D () C:\Users\Bartek\Documents\Amnesia
2014-04-12 20:41 - 2014-04-12 20:41 - 00000000 ____D () C:\ProgramData\fltk.org
2014-04-11 10:44 - 2014-04-11 10:44 - 00019901 _____ () C:\Users\Bartek\Downloads\Amnesia  A Machine for Pigs  2013  [Multi10 PL] [RePack] [z10yded][Torrenty.org].torrent
2014-04-11 10:43 - 2014-04-11 10:43 - 00011306 _____ () C:\Users\Bartek\Downloads\Amnesia  Mroczny Obled [PL] [DVD] [ exe][Torrenty.org].torrent
2014-04-08 23:12 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-08 23:12 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-08 23:12 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-08 23:12 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-08 22:15 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-08 22:15 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-08 22:15 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-08 22:15 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-08 22:15 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-08 22:15 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-08 22:15 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-08 22:15 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-08 22:15 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-08 22:15 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-08 22:15 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-08 22:15 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-08 22:15 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-08 22:15 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-08 22:15 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-08 22:15 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-08 22:13 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-07 09:40 - 2014-04-07 10:12 - 00000087 ____H () C:\Users\Bartek\Downloads\.picasa.ini
2014-04-03 21:03 - 2014-04-03 21:03 - 00000000 ____D () C:\Program Files (x86)\GUM1C18.tmp
2014-04-02 23:54 - 2014-04-02 23:54 - 00004854 _____ () C:\Users\Bartek\Desktop\Tabelka do wydruku 2014.xlsx
2014-03-30 13:56 - 2014-04-01 22:59 - 00029925 _____ () C:\Users\Bartek\Desktop\tabelka Bartek Pietrzyk marzec 2014.xlsx
2014-03-25 17:18 - 2014-03-25 17:18 - 00002028 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-03-23 18:07 - 2014-03-23 18:07 - 00028990 _____ () C:\Users\Bartek\Downloads\Miasto zlodziei - The Town  2010  [DVDRip XviD AC3] [Lektor PL][Torrenty.org].torrent

==================== One Month Modified Files and Folders =======

2014-04-20 19:05 - 2014-04-20 19:05 - 00018144 _____ () C:\Users\Bartek\Downloads\FRST.txt
2014-04-20 19:05 - 2014-04-20 19:03 - 00000000 ____D () C:\FRST
2014-04-20 19:02 - 2014-04-20 19:00 - 02056192 _____ (Farbar) C:\Users\Bartek\Downloads\FRST64.exe
2014-04-20 19:01 - 2014-04-20 19:00 - 00380416 _____ () C:\Users\Bartek\Downloads\kh1gjygp.exe
2014-04-20 19:01 - 2012-04-29 16:43 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-20 18:58 - 2014-04-20 18:58 - 00000000 ____D () C:\Users\Bartek\Desktop\logi
2014-04-20 18:50 - 2010-12-24 17:26 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000UA.job
2014-04-20 18:27 - 2014-04-20 18:26 - 00602112 _____ (OldTimer Tools) C:\Users\Bartek\Downloads\OTL.exe
2014-04-20 18:27 - 2011-02-04 23:56 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\TS3Client
2014-04-20 18:22 - 2009-07-14 06:45 - 00013872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-20 18:22 - 2009-07-14 06:45 - 00013872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-20 18:18 - 2010-09-14 03:03 - 01741191 _____ () C:\Windows\WindowsUpdate.log
2014-04-20 18:14 - 2014-03-01 21:27 - 00003224 _____ () C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1813054588-749713010-1817662991-1000
2014-04-20 18:14 - 2014-02-27 20:36 - 00003356 _____ () C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1813054588-749713010-1817662991-1000
2014-04-20 18:14 - 2013-12-18 23:25 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\newnext.me
2014-04-20 18:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-20 18:13 - 2009-07-14 06:51 - 00151243 _____ () C:\Windows\setupact.log
2014-04-20 18:01 - 2013-10-30 21:56 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000UA.job
2014-04-20 16:50 - 2010-12-24 17:26 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000Core.job
2014-04-20 12:09 - 2009-07-14 07:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-20 01:55 - 2010-12-24 21:49 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\uTorrent
2014-04-20 00:19 - 2014-04-20 00:19 - 00015111 _____ () C:\Users\Bartek\Downloads\Wykapany_ojciec_-_Delivery_Man_ 2013 _[BRRip]_[XviD-MX]_[Napisy_PL][Torrenty.org].torrent
2014-04-20 00:17 - 2014-04-20 00:17 - 00015034 _____ () C:\Users\Bartek\Downloads\Pod_Mocnym_Aniolem_ 2014 _[CAM XviD-BiDA]_[PL][Torrenty.org].torrent
2014-04-20 00:15 - 2014-04-20 00:15 - 00014906 _____ () C:\Users\Bartek\Downloads\Studentki_-_Mes_cheres_  tudes_ 2010 _[HDRip XViD-MORS]_[Napisy_PL][Torrenty.org].torrent
2014-04-19 23:22 - 2010-12-24 16:30 - 00003998 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{FC9BF907-DD13-4969-8723-85E6F8A9C577}
2014-04-19 21:07 - 2013-10-30 21:56 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000Core.job
2014-04-19 17:10 - 2010-12-25 10:40 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\Skype
2014-04-19 14:09 - 2014-04-19 14:09 - 00003106 _____ () C:\Windows\System32\Tasks\{A14E1A74-5CD1-4F1C-90BA-17E8897D0FF8}
2014-04-15 20:50 - 2010-09-14 05:54 - 00744510 _____ () C:\Windows\system32\perfh015.dat
2014-04-15 20:50 - 2010-09-14 05:54 - 00157702 _____ () C:\Windows\system32\perfc015.dat
2014-04-15 20:50 - 2009-07-14 07:13 - 01680914 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-13 21:11 - 2014-04-13 21:10 - 05456765 _____ () C:\Users\Bartek\Desktop\niem.rar
2014-04-13 21:11 - 2014-04-13 20:36 - 00000000 ____D () C:\Users\Bartek\Desktop\niem
2014-04-13 19:54 - 2014-04-13 19:53 - 05306985 _____ () C:\Users\Bartek\Downloads\7-04.zip
2014-04-12 20:41 - 2014-04-12 20:41 - 00001068 _____ () C:\Users\Bartek\Desktop\Amnesia.lnk
2014-04-12 20:41 - 2014-04-12 20:41 - 00000000 ____D () C:\Users\Bartek\Documents\Amnesia
2014-04-12 20:41 - 2014-04-12 20:41 - 00000000 ____D () C:\ProgramData\fltk.org
2014-04-12 20:41 - 2011-01-10 21:22 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\fltk.org
2014-04-12 12:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-11 11:44 - 2012-10-10 13:32 - 00000000 ____D () C:\Users\Bartek\Desktop\study KUL
2014-04-11 11:40 - 2010-09-14 03:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-11 11:39 - 2013-11-29 20:42 - 00000000 ____D () C:\Users\Bartek\Desktop\z pendrka
2014-04-11 11:34 - 2010-12-24 21:29 - 00000000 ____D () C:\Users\Bartek\Desktop\Pliki tekstowe
2014-04-11 10:44 - 2014-04-11 10:44 - 00019901 _____ () C:\Users\Bartek\Downloads\Amnesia  A Machine for Pigs  2013  [Multi10 PL] [RePack] [z10yded][Torrenty.org].torrent
2014-04-11 10:43 - 2014-04-11 10:43 - 00011306 _____ () C:\Users\Bartek\Downloads\Amnesia  Mroczny Obled [PL] [DVD] [ exe][Torrenty.org].torrent
2014-04-10 20:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-09 22:15 - 2010-09-14 03:52 - 00328544 _____ () C:\Windows\PFRO.log
2014-04-09 20:58 - 2011-03-20 23:48 - 00267232 _____ () C:\Windows\DPINST.LOG
2014-04-09 01:56 - 2013-09-26 03:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 01:53 - 2010-12-27 21:50 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-07 10:12 - 2014-04-07 09:40 - 00000087 ____H () C:\Users\Bartek\Downloads\.picasa.ini
2014-04-07 09:37 - 2013-12-29 12:55 - 00000103 _____ () C:\Users\Bartek\Desktop\allods.txt
2014-04-07 09:30 - 2012-06-02 14:02 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\Tibia
2014-04-06 22:34 - 2013-10-09 22:36 - 00000000 ____D () C:\Users\Bartek\Desktop\study UMCS
2014-04-04 21:18 - 2013-11-12 12:25 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\SkypEmoticons
2014-04-03 21:03 - 2014-04-03 21:03 - 00000000 ____D () C:\Program Files (x86)\GUM1C18.tmp
2014-04-03 20:41 - 2013-04-24 11:24 - 00000000 ____D () C:\Users\Bartek\AppData\Local\Akamai
2014-04-02 23:54 - 2014-04-02 23:54 - 00004854 _____ () C:\Users\Bartek\Desktop\Tabelka do wydruku 2014.xlsx
2014-04-01 22:59 - 2014-03-30 13:56 - 00029925 _____ () C:\Users\Bartek\Desktop\tabelka Bartek Pietrzyk marzec 2014.xlsx
2014-03-31 09:35 - 2011-06-15 13:47 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-03-31 03:16 - 2014-04-08 23:12 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-08 23:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-08 23:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-08 23:12 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 16:46 - 2010-12-24 17:26 - 00004038 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000UA
2014-03-30 16:45 - 2010-12-24 17:26 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000Core
2014-03-25 17:18 - 2014-03-25 17:18 - 00002028 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-03-23 18:07 - 2014-03-23 18:07 - 00028990 _____ () C:\Users\Bartek\Downloads\Miasto zlodziei - The Town  2010  [DVDRip XviD AC3] [Lektor PL][Torrenty.org].torrent
2014-03-21 00:07 - 2010-12-24 21:34 - 00019751 _____ () C:\Users\Bartek\Desktop\druid.txt

Files to move or delete:
====================
C:\Users\AIM\ATG.exe
C:\Users\AIM\Intro.exe
C:\Users\AIM\Lfbmp70n.dll
C:\Users\AIM\Lfcmp70n.dll
C:\Users\AIM\Ltfil70n.dll
C:\Users\AIM\Ltkrn70n.dll
C:\Users\AIM\ShapeSaver.exe
C:\Users\AIM\Step1-Deskew.exe
C:\Users\AIM\Step2-Crop.exe
C:\Users\AIM\Step3-Redeye.exe
C:\Users\AIM\Step4-Deco.exe
C:\Users\Driver\Ap.exe
C:\Users\Driver\BkRemoveDll.dll
C:\Users\Driver\BPEnhan.dll
C:\Users\Driver\ColorMatch.dll
C:\Users\Driver\exec.exe
C:\Users\Driver\filter.dll
C:\Users\Driver\Free_EXE.dll
C:\Users\Driver\Lead52.dll
C:\Users\Driver\Ltimg70n.dll
C:\Users\Driver\NegImgTrans.dll
C:\Users\Driver\Scanobj.dll
C:\Users\Driver\TxfJP2.exe
C:\Users\Driver\UI.EXE
C:\Users\Driver\WATCH.exe
C:\Users\Panel\BkRemoveDll.dll
C:\Users\Panel\BPEnhan.dll
C:\Users\Panel\ColorMatch.dll
C:\Users\Panel\Con2Tif.dll
C:\Users\Panel\DoFax.dll
C:\Users\Panel\DoScan.dll
C:\Users\Panel\FaxFixer.exe
C:\Users\Panel\FFixer_de.dll
C:\Users\Panel\FFixer_dk.dll
C:\Users\Panel\FFixer_es.dll
C:\Users\Panel\FFixer_f.dll
C:\Users\Panel\FFixer_fi.dll
C:\Users\Panel\FFixer_it.dll
C:\Users\Panel\FFixer_nl.dll
C:\Users\Panel\FFixer_no.dll
C:\Users\Panel\FFixer_pt.dll
C:\Users\Panel\FFixer_sw.dll
C:\Users\Panel\IrrShape.dll
C:\Users\Panel\JP2View.exe
C:\Users\Panel\MergerDoc.dll
C:\Users\Panel\msvbvm60.dll
C:\Users\Panel\MultiPage.dll
C:\Users\Panel\MustISDNfax.dll
C:\Users\Panel\notes46.exe
C:\Users\Panel\Panel.exe
C:\Users\Panel\Panel_de.dll
C:\Users\Panel\Panel_dk.dll
C:\Users\Panel\Panel_es.dll
C:\Users\Panel\Panel_f.dll
C:\Users\Panel\Panel_it.dll
C:\Users\Panel\Panel_nl.dll
C:\Users\Panel\Panel_pt.dll
C:\Users\Panel\Panel_sw.dll
C:\Users\Panel\ParaFax.dll
C:\Users\Panel\PhoneBook.exe
C:\Users\Panel\Settings.exe
C:\Users\Panel\TrigDrv.exe
C:\Users\Panel\TxfJP2.exe
C:\Users\Public\AdobeAIRInstaller.exe
C:\Users\Public\AutoGordianKnot_2.40.exe
C:\Users\Public\AutoGordianKnot_PL.exe
C:\Users\Public\DVDShrink_3.2.exe
C:\Users\Public\RipIt4Me.exe
C:\Users\Public\RivChat2-setup.exe
C:\Users\Public\River Raid.exe


Some content of TEMP:
====================
C:\Users\Bartek\AppData\Local\Temp\87564uninstall.exe
C:\Users\Bartek\AppData\Local\Temp\AutoRun.exe
C:\Users\Bartek\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Bartek\AppData\Local\Temp\eauninstall.exe
C:\Users\Bartek\AppData\Local\Temp\k_athmpk.dll
C:\Users\Bartek\AppData\Local\Temp\Need for Speed Most Wanted_uninst.exe
C:\Users\Bartek\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Bartek\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Bartek\AppData\Local\Temp\Sqlite3.dll
C:\Users\Bartek\AppData\Local\Temp\sSetup-se.exe
C:\Users\Bartek\AppData\Local\Temp\t.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-19 10:37

==================== End Of Log ============================