Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-04-2014
Ran by Mateusz (administrator) on MATEUSZ on 23-04-2014 22:29:25
Running from C:\Users\Mateusz\Desktop
Windows 8.1 (X64) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\System32\WScript.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 4\Integrator.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(OldTimer Tools) C:\Users\Mateusz\Desktop\OTL.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2930825084-1088104542-1362109533-1002\...\MountPoints2: {e781c158-8ff7-11e3-8259-201a06afbce1} - "E:\Autorun.exe" 

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=476&aid=132&itype=n&ver=12302&tm=323&src=hmp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM - DefaultScope {1F88C210-B73D-4A7E-9E52-B1B877750DB9} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {1F88C210-B73D-4A7E-9E52-B1B877750DB9} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=n&ver=12302&tm=323&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 - {1F88C210-B73D-4A7E-9E52-B1B877750DB9} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=n&ver=12302&tm=323&src=ds&p={searchTerms}
SearchScopes: HKCU - {1F88C210-B73D-4A7E-9E52-B1B877750DB9} URL = 
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=n&ver=12302&tm=323&src=ds&p={searchTerms}
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: No Name - {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} -  No File
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF Plugin-x32: @cuminas.jp/DjVuPlugin - C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-04-23]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-04-23]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-04-23]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-04-23]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-04-23]

Chrome: 
=======
CHR HomePage: hxxp://www.default-search.net?sid=476&aid=132&itype=n&ver=12302&tm=323&src=hmp
CHR StartupUrls: "hxxp://www.google.com/"
CHR Extension: (Dokumenty Google) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-07]
CHR Extension: (Dysk Google) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-07]
CHR Extension: (YouTube) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-07]
CHR Extension: (Szukaj w Google) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-07]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-04-23]
CHR Extension: (AdBlock) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-20]
CHR Extension: (Google Wallet) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-07]
CHR Extension: (Gmail) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-07]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-11-26]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-11-26]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-11-26]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-11-26]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-11-26]

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-11-26] (Kaspersky Lab ZAO)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2650696 2013-07-27] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-06] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-02] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2014-04-18] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2014-04-18] ()
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-03] (Acer Incorporate)
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-03] (Acer Incorporate)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-16] (Qualcomm Atheros Communications, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-02-18] ()
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-03-31] (Glarysoft Ltd)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-02-07] (Disc Soft Ltd)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-26] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2013-11-26] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-04-23] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-04-23] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-11-26] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-04-23] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-11-26] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-04-23] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-04-23] (Kaspersky Lab ZAO)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-02-18] ()
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-23 22:30 - 2014-04-23 22:31 - 00035940 _____ () C:\Users\Mateusz\Desktop\Addition.txt
2014-04-23 22:29 - 2014-04-23 22:31 - 00047775 _____ () C:\Users\Mateusz\Desktop\FRST.txt
2014-04-23 22:29 - 2014-04-23 22:30 - 00000000 ____D () C:\FRST
2014-04-23 22:19 - 2014-04-23 22:19 - 02061312 _____ (Farbar) C:\Users\Mateusz\Desktop\FRST64.exe
2014-04-23 22:19 - 2014-04-23 22:19 - 00602112 _____ (OldTimer Tools) C:\Users\Mateusz\Desktop\OTL.exe
2014-04-23 21:47 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-04-23 21:46 - 2014-04-23 21:48 - 00000000 ____D () C:\AdwCleaner
2014-04-23 00:45 - 2014-04-23 00:45 - 00001309 _____ () C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk
2014-04-23 00:44 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-04-23 00:43 - 2014-04-23 01:02 - 00625760 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-04-23 00:43 - 2014-04-23 01:02 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-04-23 00:43 - 2014-04-23 00:43 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-23 00:35 - 2014-04-23 00:35 - 00019478 _____ () C:\Users\Mateusz\Downloads\[torrent.pl] Kaspersky Internet Security 2014 14 0 0 5448d Final+Trail Reset.torrent
2014-04-23 00:31 - 2014-04-23 00:31 - 490478981 _____ () C:\Windows\MEMORY.DMP
2014-04-23 00:31 - 2014-04-23 00:31 - 00291368 _____ () C:\Windows\Minidump\042314-33625-01.dmp
2014-04-23 00:31 - 2014-04-23 00:31 - 00000000 ____D () C:\Windows\Minidump
2014-04-23 00:30 - 2014-04-23 22:09 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-23 00:18 - 2014-04-23 00:44 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-04-23 00:17 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-04-22 23:56 - 2014-04-22 23:56 - 00022102 _____ () C:\Users\Mateusz\Downloads\[torrent.pl] Kaspersky All Version Keys [July 27, 2013] - SceneDL   (PimpRG).torrent
2014-04-21 00:26 - 2014-04-21 00:26 - 00000000 ____D () C:\Users\Mateusz\Documents\Electronic Arts
2014-04-20 23:40 - 2014-04-20 23:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2014-04-20 23:40 - 2008-09-04 20:17 - 00447752 ____R (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2014-04-18 16:20 - 2014-04-18 16:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C Company
2014-04-18 16:10 - 2014-04-18 16:10 - 00000000 ____D () C:\Users\Mateusz\Documents\Moje Gry
2014-04-18 01:14 - 2014-04-18 01:14 - 00000000 __SHD () C:\ProgramData\DSS
2014-04-18 01:14 - 2014-04-18 01:14 - 00000000 ____D () C:\Users\Mateusz\Documents\EA Games
2014-04-18 01:13 - 2014-04-18 01:13 - 00189248 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-04-18 01:13 - 2014-04-18 01:13 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-04-18 01:13 - 2010-09-16 12:13 - 02601752 _____ () C:\Windows\SysWOW64\pbsvc_moh.exe
2014-04-14 20:09 - 2014-04-14 20:09 - 00000000 ____D () C:\Users\Mateusz\Documents\Niestandardowe szablony pakietu Office
2014-04-13 17:13 - 2014-04-13 17:13 - 00000875 _____ () C:\Users\Mateusz\Desktop\Play Left4Dead.lnk
2014-04-12 16:43 - 2014-04-12 16:43 - 00000000 ____D () C:\ProgramData\RELOADED
2014-04-12 16:37 - 2014-04-21 01:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O22y Inc
2014-04-12 16:37 - 2014-04-12 16:37 - 00000567 _____ () C:\Users\Mateusz\Desktop\Call of Juarez Gunslinger.lnk
2014-04-11 23:50 - 2014-04-18 16:21 - 00000000 ____D () C:\Users\Mateusz\Documents\My Games
2014-04-11 23:16 - 2014-04-18 15:58 - 00184442 _____ () C:\Windows\DirectX.log
2014-04-11 16:26 - 2014-04-23 22:08 - 00006354 _____ () C:\Windows\PFRO.log
2014-04-11 15:25 - 2014-04-13 15:02 - 00003144 _____ () C:\Windows\setupact.log
2014-04-11 15:25 - 2014-04-11 15:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-11 14:23 - 2014-04-11 14:23 - 00000000 ____D () C:\ProgramData\GlarySoft
2014-04-11 14:21 - 2014-04-23 12:11 - 01853815 _____ () C:\Windows\WindowsUpdate.log
2014-04-11 14:18 - 2014-04-11 14:18 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-04-11 14:18 - 2014-04-11 14:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-04-11 14:11 - 2014-04-23 22:23 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 4
2014-04-11 14:11 - 2014-04-23 22:09 - 00000350 _____ () C:\Windows\Tasks\GlaryInitialize 4.job
2014-04-11 14:11 - 2014-04-19 12:05 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\DiskDefrag
2014-04-11 14:11 - 2014-04-11 14:11 - 00002974 _____ () C:\Windows\System32\Tasks\GU4SkipUAC
2014-04-11 14:11 - 2014-04-11 14:11 - 00002628 _____ () C:\Windows\System32\Tasks\GlaryInitialize 4
2014-04-11 14:11 - 2014-04-11 14:11 - 00001072 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 4.lnk
2014-04-11 14:11 - 2014-04-11 14:11 - 00001060 _____ () C:\Users\Public\Desktop\Glary Utilities 4.lnk
2014-04-11 14:11 - 2014-04-11 14:11 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\GlarySoft
2014-04-11 14:11 - 2014-04-11 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 4
2014-04-11 14:11 - 2014-04-01 10:03 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2014-04-11 14:11 - 2014-03-31 09:33 - 00017600 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-04-11 13:48 - 2014-04-11 13:48 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\Two Worlds II
2014-04-11 13:47 - 2014-04-11 13:47 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\TW2CD
2014-04-11 13:38 - 2014-04-11 13:38 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-04-11 13:38 - 2014-04-11 13:38 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-04-11 13:38 - 2014-04-11 13:38 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-04-11 13:38 - 2014-04-11 13:38 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-04-11 13:38 - 2014-04-11 13:38 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-04-10 13:46 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-10 13:46 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-10 13:46 - 2014-03-10 12:35 - 02008408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-10 13:46 - 2014-03-10 12:35 - 00377176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2014-04-10 13:46 - 2014-03-06 11:19 - 01287576 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-10 13:46 - 2014-03-06 11:02 - 01109424 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-04-10 13:46 - 2014-03-06 08:17 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-04-10 13:46 - 2014-03-06 08:10 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 13:44 - 2014-04-10 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-10 13:44 - 2014-04-10 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-05 18:29 - 2014-04-05 18:29 - 00000000 ____D () C:\Users\Mateusz\Documents\Eden Games
2014-04-05 11:47 - 2014-04-05 11:47 - 00000621 _____ () C:\Users\Public\Desktop\Test Drive Unlimited 2.lnk
2014-04-05 11:47 - 2014-04-05 11:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-04-05 11:06 - 2014-04-05 11:06 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\CrashRpt
2014-04-01 21:26 - 2014-04-01 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-01 21:24 - 2014-04-01 21:24 - 00000000 ____D () C:\Windows\PCHEALTH
2014-04-01 21:24 - 2014-04-01 21:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 21:24 - 2014-04-01 21:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-04-01 21:23 - 2014-04-01 21:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-04-01 21:23 - 2014-04-01 21:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-04-01 21:22 - 2014-04-01 21:22 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-04-01 21:20 - 2014-04-01 21:20 - 00000000 __RHD () C:\MSOCache
2014-04-01 21:11 - 2014-04-01 21:11 - 00000024 _____ () C:\ScrubRetValFile.txt
2014-04-01 21:04 - 2014-04-01 21:17 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\Microsoft Toolkit
2014-04-01 20:27 - 2014-04-01 21:27 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-01 13:53 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-04-01 13:53 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-03-31 15:02 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-03-31 15:02 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-03-31 15:02 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-03-31 15:02 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-03-31 15:02 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-03-31 15:02 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-03-31 14:18 - 2014-03-31 14:18 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\THQ
2014-03-29 21:38 - 2014-03-29 21:38 - 00000000 ____D () C:\Users\Mateusz\Documents\SimCity
2014-03-27 19:49 - 2014-03-27 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cuminas
2014-03-27 19:49 - 2014-03-27 19:49 - 00000000 ____D () C:\Program Files (x86)\Cuminas
2014-03-27 16:45 - 2014-03-27 16:45 - 00000000 ____D () C:\Users\Mateusz\Documents\CyberLink
2014-03-27 16:45 - 2014-03-27 16:45 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\CyberLink
2014-03-27 16:44 - 2014-03-27 16:44 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\CyberLink
2014-03-24 19:05 - 2014-03-24 19:05 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\Microsoft Help
2014-03-24 05:02 - 2014-03-24 05:02 - 00000000 ____D () C:\ProgramData\Origin
2014-03-24 04:43 - 2014-04-23 02:11 - 00000000 ___HD () C:\Users\Mateusz\AppData\Roaming\Origin

==================== One Month Modified Files and Folders =======

2021-10-21 15:36 - 2013-11-24 04:10 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2013-11-24 04:10 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-04-23 22:31 - 2014-04-23 22:30 - 00035940 _____ () C:\Users\Mateusz\Desktop\Addition.txt
2014-04-23 22:31 - 2014-04-23 22:29 - 00047775 _____ () C:\Users\Mateusz\Desktop\FRST.txt
2014-04-23 22:30 - 2014-04-23 22:29 - 00000000 ____D () C:\FRST
2014-04-23 22:29 - 2014-02-07 15:13 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-23 22:23 - 2014-04-11 14:11 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 4
2014-04-23 22:19 - 2014-04-23 22:19 - 02061312 _____ (Farbar) C:\Users\Mateusz\Desktop\FRST64.exe
2014-04-23 22:19 - 2014-04-23 22:19 - 00602112 _____ (OldTimer Tools) C:\Users\Mateusz\Desktop\OTL.exe
2014-04-23 22:14 - 2014-02-07 15:09 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2930825084-1088104542-1362109533-1002
2014-04-23 22:11 - 2014-02-07 15:19 - 00002173 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-23 22:09 - 2014-04-23 00:30 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-23 22:09 - 2014-04-11 14:11 - 00000350 _____ () C:\Windows\Tasks\GlaryInitialize 4.job
2014-04-23 22:09 - 2014-02-07 15:13 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-23 22:09 - 2014-02-07 15:09 - 00000000 __RDO () C:\Users\Mateusz\SkyDrive
2014-04-23 22:08 - 2014-04-11 16:26 - 00006354 _____ () C:\Windows\PFRO.log
2014-04-23 22:08 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-23 22:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-04-23 21:48 - 2014-04-23 21:46 - 00000000 ____D () C:\AdwCleaner
2014-04-23 21:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-04-23 20:05 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-04-23 12:11 - 2014-04-11 14:21 - 01853815 _____ () C:\Windows\WindowsUpdate.log
2014-04-23 10:53 - 2014-02-07 15:03 - 00000000 ___RD () C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 02:16 - 2014-02-07 15:00 - 00000000 ____D () C:\Users\Mateusz
2014-04-23 02:11 - 2014-03-24 04:43 - 00000000 ___HD () C:\Users\Mateusz\AppData\Roaming\Origin
2014-04-23 01:56 - 2014-02-07 15:12 - 00003988 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{AE2B68F6-3A91-43A1-B05B-7B77E380AF4D}
2014-04-23 01:02 - 2014-04-23 00:43 - 00625760 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-04-23 01:02 - 2014-04-23 00:43 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-04-23 01:02 - 2013-11-26 04:53 - 00065120 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys
2014-04-23 01:02 - 2013-11-26 04:53 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-04-23 01:02 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-04-23 00:45 - 2014-04-23 00:45 - 00001309 _____ () C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk
2014-04-23 00:44 - 2014-04-23 00:18 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-04-23 00:43 - 2014-04-23 00:43 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-23 00:43 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-04-23 00:41 - 2014-02-07 15:54 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\BitComet
2014-04-23 00:35 - 2014-04-23 00:35 - 00019478 _____ () C:\Users\Mateusz\Downloads\[torrent.pl] Kaspersky Internet Security 2014 14 0 0 5448d Final+Trail Reset.torrent
2014-04-23 00:31 - 2014-04-23 00:31 - 490478981 _____ () C:\Windows\MEMORY.DMP
2014-04-23 00:31 - 2014-04-23 00:31 - 00291368 _____ () C:\Windows\Minidump\042314-33625-01.dmp
2014-04-23 00:31 - 2014-04-23 00:31 - 00000000 ____D () C:\Windows\Minidump
2014-04-23 00:20 - 2013-10-15 16:43 - 00000000 ____D () C:\ProgramData\McAfee
2014-04-23 00:20 - 2013-10-15 16:43 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-04-22 23:56 - 2014-04-22 23:56 - 00022102 _____ () C:\Users\Mateusz\Downloads\[torrent.pl] Kaspersky All Version Keys [July 27, 2013] - SceneDL   (PimpRG).torrent
2014-04-21 17:08 - 2013-11-24 04:40 - 00807160 _____ () C:\Windows\system32\perfh015.dat
2014-04-21 17:08 - 2013-11-24 04:40 - 00163478 _____ () C:\Windows\system32\perfc015.dat
2014-04-21 17:08 - 2013-10-15 16:30 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-21 01:17 - 2014-04-12 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O22y Inc
2014-04-21 00:26 - 2014-04-21 00:26 - 00000000 ____D () C:\Users\Mateusz\Documents\Electronic Arts
2014-04-21 00:22 - 2013-11-24 04:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-20 23:40 - 2014-04-20 23:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2014-04-19 12:05 - 2014-04-11 14:11 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\DiskDefrag
2014-04-18 16:21 - 2014-04-11 23:50 - 00000000 ____D () C:\Users\Mateusz\Documents\My Games
2014-04-18 16:20 - 2014-04-18 16:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C Company
2014-04-18 16:10 - 2014-04-18 16:10 - 00000000 ____D () C:\Users\Mateusz\Documents\Moje Gry
2014-04-18 15:58 - 2014-04-11 23:16 - 00184442 _____ () C:\Windows\DirectX.log
2014-04-18 12:19 - 2014-02-07 15:13 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\Deployment
2014-04-18 01:14 - 2014-04-18 01:14 - 00000000 __SHD () C:\ProgramData\DSS
2014-04-18 01:14 - 2014-04-18 01:14 - 00000000 ____D () C:\Users\Mateusz\Documents\EA Games
2014-04-18 01:13 - 2014-04-18 01:13 - 00189248 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-04-18 01:13 - 2014-04-18 01:13 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-04-18 00:53 - 2014-02-07 15:33 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\DAEMON Tools Lite
2014-04-14 20:43 - 2014-02-07 15:02 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\Packages
2014-04-14 20:10 - 2014-03-02 13:35 - 00561152 ___SH () C:\Users\Mateusz\Desktop\Thumbs.db
2014-04-14 20:09 - 2014-04-14 20:09 - 00000000 ____D () C:\Users\Mateusz\Documents\Niestandardowe szablony pakietu Office
2014-04-13 17:13 - 2014-04-13 17:13 - 00000875 _____ () C:\Users\Mateusz\Desktop\Play Left4Dead.lnk
2014-04-13 15:02 - 2014-04-11 15:25 - 00003144 _____ () C:\Windows\setupact.log
2014-04-13 10:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-04-12 16:43 - 2014-04-12 16:43 - 00000000 ____D () C:\ProgramData\RELOADED
2014-04-12 16:37 - 2014-04-12 16:37 - 00000567 _____ () C:\Users\Mateusz\Desktop\Call of Juarez Gunslinger.lnk
2014-04-12 01:27 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-12 00:19 - 2014-02-07 16:06 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-11 22:15 - 2014-02-11 18:22 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\Winamp
2014-04-11 17:30 - 2014-03-13 20:30 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\BSplayer
2014-04-11 16:26 - 2014-02-08 11:12 - 00000000 ____D () C:\Program Files\WinRAR
2014-04-11 15:25 - 2014-04-11 15:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-11 14:23 - 2014-04-11 14:23 - 00000000 ____D () C:\ProgramData\GlarySoft
2014-04-11 14:18 - 2014-04-11 14:18 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-04-11 14:18 - 2014-04-11 14:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-04-11 14:12 - 2014-02-19 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Matroska Pack
2014-04-11 14:12 - 2014-02-07 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic III
2014-04-11 14:11 - 2014-04-11 14:11 - 00002974 _____ () C:\Windows\System32\Tasks\GU4SkipUAC
2014-04-11 14:11 - 2014-04-11 14:11 - 00002628 _____ () C:\Windows\System32\Tasks\GlaryInitialize 4
2014-04-11 14:11 - 2014-04-11 14:11 - 00001072 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 4.lnk
2014-04-11 14:11 - 2014-04-11 14:11 - 00001060 _____ () C:\Users\Public\Desktop\Glary Utilities 4.lnk
2014-04-11 14:11 - 2014-04-11 14:11 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\GlarySoft
2014-04-11 14:11 - 2014-04-11 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 4
2014-04-11 13:48 - 2014-04-11 13:48 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\Two Worlds II
2014-04-11 13:47 - 2014-04-11 13:47 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\TW2CD
2014-04-11 13:38 - 2014-04-11 13:38 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-04-11 13:38 - 2014-04-11 13:38 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-04-11 13:38 - 2014-04-11 13:38 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-04-11 13:38 - 2014-04-11 13:38 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-04-11 13:38 - 2014-04-11 13:38 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-04-10 14:52 - 2014-02-10 07:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 14:50 - 2014-02-10 07:09 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-10 13:44 - 2014-04-10 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-10 13:44 - 2014-04-10 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-05 18:29 - 2014-04-05 18:29 - 00000000 ____D () C:\Users\Mateusz\Documents\Eden Games
2014-04-05 11:47 - 2014-04-05 11:47 - 00000621 _____ () C:\Users\Public\Desktop\Test Drive Unlimited 2.lnk
2014-04-05 11:47 - 2014-04-05 11:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-04-05 11:06 - 2014-04-05 11:06 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\CrashRpt
2014-04-02 07:41 - 2013-08-22 16:44 - 00477984 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-01 21:27 - 2014-04-01 20:27 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-01 21:26 - 2014-04-01 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-01 21:24 - 2014-04-01 21:24 - 00000000 ____D () C:\Windows\PCHEALTH
2014-04-01 21:24 - 2014-04-01 21:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 21:24 - 2014-04-01 21:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-04-01 21:24 - 2014-04-01 21:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-04-01 21:23 - 2014-04-01 21:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-04-01 21:23 - 2013-08-22 21:11 - 00000000 ____D () C:\Windows\ShellNew
2014-04-01 21:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-01 21:23 - 2013-08-22 15:25 - 00000199 _____ () C:\Windows\win.ini
2014-04-01 21:22 - 2014-04-01 21:22 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-04-01 21:20 - 2014-04-01 21:20 - 00000000 __RHD () C:\MSOCache
2014-04-01 21:17 - 2014-04-01 21:04 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\Microsoft Toolkit
2014-04-01 21:11 - 2014-04-01 21:11 - 00000024 _____ () C:\ScrubRetValFile.txt
2014-04-01 10:03 - 2014-04-11 14:11 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2014-03-31 23:23 - 2014-02-11 14:16 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-31 23:23 - 2014-02-11 14:16 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-31 14:18 - 2014-03-31 14:18 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\THQ
2014-03-31 09:33 - 2014-04-11 14:11 - 00017600 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-03-31 03:16 - 2014-04-10 13:46 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 01:57 - 2014-04-10 13:46 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 01:24 - 2014-02-07 15:13 - 00004038 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-30 01:24 - 2014-02-07 15:13 - 00003802 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-29 21:39 - 2014-02-10 06:45 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\NVIDIA
2014-03-29 21:38 - 2014-03-29 21:38 - 00000000 ____D () C:\Users\Mateusz\Documents\SimCity
2014-03-28 21:07 - 2014-02-07 16:08 - 00000000 ____D () C:\Users\Mateusz\Documents\gothic3
2014-03-27 19:49 - 2014-03-27 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cuminas
2014-03-27 19:49 - 2014-03-27 19:49 - 00000000 ____D () C:\Program Files (x86)\Cuminas
2014-03-27 18:23 - 2013-11-24 04:31 - 00000000 ____D () C:\Users\Public\CyberLink
2014-03-27 16:45 - 2014-03-27 16:45 - 00000000 ____D () C:\Users\Mateusz\Documents\CyberLink
2014-03-27 16:45 - 2014-03-27 16:45 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\CyberLink
2014-03-27 16:45 - 2013-11-24 04:31 - 00000000 ____D () C:\ProgramData\CyberLink
2014-03-27 16:44 - 2014-03-27 16:44 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\CyberLink
2014-03-24 19:05 - 2014-03-24 19:05 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\Microsoft Help
2014-03-24 05:02 - 2014-03-24 05:02 - 00000000 ____D () C:\ProgramData\Origin

Some content of TEMP:
====================
C:\Users\Mateusz\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-23 20:04

==================== End Of Log ============================