Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 01
Ran by Kacper (administrator) on KACPER-KOMPUTER on 31-07-2014 19:02:53
Running from C:\Users\Kacper\Downloads
Platform: Windows 7 Ultimate (X64) OS Language: Polski (Polska)
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) D:\Kacek\Avast\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Electronic Arts) D:\Kacek\Origin\Origin.exe
() D:\Kacek\Dodatki do Pulpitu\Rocket Dock\RocketDock\RocketDock.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILRE.EXE
(Valve Corporation) D:\Kacek\Steam\Steam.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Hi-Rez Studios) D:\Kacek\Smite\HiPatchService.exe
() D:\Kacek\screenSHU\screenSHU.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(AVAST Software) D:\Kacek\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
() C:\Program Files (x86)\D-Link\DWA-140\WPSHWPBC.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6843024 2012-10-29] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [egui] => "D:\Nod\egui.exe" /hide /waitservice
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-22] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => D:\Kacek\Avast\AvastUI.exe [4086432 2014-07-26] (AVAST Software)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => "D:\Kacek\hamachi\hamachi-2-ui.exe" --auto-start
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [EADM] => D:\Kacek\Origin\Origin.exe [3595608 2014-07-26] (Electronic Arts)
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [RocketDock] => D:\Kacek\Dodatki do Pulpitu\Rocket Dock\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [EPSON SX110 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE [223232 2008-09-26] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILRE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [Gadwin PrintScreen (64-bit)] => "C:\Program Files\Gadwin\Gadwin PrintScreen\PrintScreen64.exe" /nosplash
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [Steam] => D:\Kacek\Steam\steam.exe [1753280 2014-07-16] (Valve Corporation)
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [screenSHU] => D:\Kacek\screenSHU\screenSHU.exe [2112000 2013-09-04] ()
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [GoogleChromeAutoLaunch_71CAF950143695B9CBC7992A0202B018] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [Spotify Web Helper] => "C:\Users\Kacper\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [Spotify] => "C:\Users\Kacper\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [IVONA Reader] => "C:\Program Files (x86)\IVONA\IVONA Reader\IVONA Reader.exe" -t -nosplash
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [IVONA ControlCenter] => "C:\Program Files (x86)\IVONA\IVONA ControlCenter\IVONA ControlCenter.exe" --action=run-silent
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [IROElauncher] => C:\Program Files (x86)\IVONA\IVONA Reader\integr\OutlookExpress\IROElauncher.exe
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\Run: [Browser Tab Search by Askx64] => "C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\BrowserTabSearch\msbloader64.exe"
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\MountPoints2: {21ea05ca-69bc-11e3-a3c7-806e6f6e6963} - D:\SETUP.EXE
HKU\S-1-5-21-2488489995-2560081317-1656668189-1000\...\MountPoints2: {5dcf9bc7-69b9-11e3-bbb3-806e6f6e6963} - D:\Bin\ASSETUP.exe
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Kacek\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: EnjoYCOupoon -> {35855BD1-901F-F837-391D-539980D50FF3} -> C:\ProgramData\EnjoYCOupoon\q4.x64.dll No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: IVONA Reader -> {8664889D-ED18-4713-918F-E2BB69D8452B} -> C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Kacek\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: IVONA Reader -> {8664889D-ED18-4713-918F-E2BB69D8452B} -> C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Kacek\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 84.208.20.110 84.208.20.111
Tcpip\..\Interfaces\{B22D0D40-B715-449B-9DAA-16F102118409}: [NameServer]69.147.228.58,8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Kacper\AppData\Roaming\Mozilla\Firefox\Profiles\tz0fgjdm.default
FF SearchEngineOrder.3: Bing 
FF Homepage: www.google.pl
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Kacper\Desktop\Mamy\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.448 - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Kacper\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: Adblock Plus - C:\Users\Kacper\AppData\Roaming\Mozilla\Firefox\Profiles\tz0fgjdm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Kacek\Avast\WebRep\FF
FF Extension: avast! Online Security - D:\Kacek\Avast\WebRep\FF [2014-02-15]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=5&UP=SPA94A2380-908F-4064-8803-E4021CD4D670&SSPV=
CHR StartupUrls: "hxxp://search.conduit.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M1514F82F-3FD3-4CF5-9F9C-6568A346E33F&SearchSource=55&CUI=&UM=5&UP=SPA94A2380-908F-4064-8803-E4021CD4D670&SSPV=", "hxxp://search.conduit.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M1514F82F-3FD3-4CF5-9F9C-6568A346E33F&SearchSource=55&CUI=&UM=5&UP=SPA94A2380-908F-4064-8803-E4021CD4D670&SSPV=", "hxxp://start.mysearchdial.com/?f=1&a=ir_14_15_ch&cd=2XzuyEtN2Y1L1QzuyByE0DtDtB0BzytA0AzztDtByDyC0AyCtN0D0Tzu0SzztAyEtN1L2XzutBtFtCzztFtBtFzztN1L1CzutCyEtDtAtDyD1V1QtN1L1G1B1V1N2Y1L1Qzu2SyCyDyD0D0AtDyCzytGtAtC0B0DtGtD0EyB0CtG0EyB0FtDtGyEtAyEtA0DzzyE0FtByE0CtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAtCtAtAyByD0D0FtGyDtAzzzztG0EyByEyDtGyEyEtByEtGtAyDtAyCtD0A0FyD0DyC0CtD2Q&cr=1556606026&ir=", "hxxp://www.search.ask.com/?tpid=VDJ-V7&o=APN10966&pf=V7&trgb=CR&p2=%5EB2J%5EYYYYYY%5EYY%5ENO&gct=hp&apn_ptnrs=%5EB2J&apn_dtid=%5EYYYYYY%5EYY%5ENO&apn_dbr=cr_33.0.1750.154&apn_uid=D887897F-29E4-46A1-BE53-68B2387FCB07&itbv=12.10.6.4903&doi=2014-04-29&psv=", "hxxp://start.mysearchdial.com/?f=1&a=ir_14_20_ch&cd=2XzuyEtN2Y1L1Qzuzy0C0DyCyEtAyC0Dzzzz0FyDyDyC0AyCtN0D0Tzu0SzzyCyEtN1L2XzutBtFtBtDtFzytFtBtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StDyBzy0AtD0FyDyBtG0AtCyDyCtGzzyEyD0AtGyE0DtC0EtGtCyE0D0DtBtBtByDyD0EtA0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAtCtAtAyByD0D0FtGyDtAzzzztG0EyByEyDtGyEyEtByEtGtAyDtAyCtD0A0FyD0DyC0CtD2Q&cr=672615074&ir=", "hxxp://www.search.ask.com/?o=APN11459&gct=hp&d=488-210&v=n12521-375&t=4", "hxxp://speedial.com/?f=1&a=spd_ir_14_25_ch&cd=2XzuyEtN2Y1L1Qzuzy0C0DyCyEtAyC0Dzzzz0FyDyDyC0AyCtN0D0Tzu0SzytDtDtN1L2XzutBtFtBtCtFyEtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtC0F0CtD0AyE0CtGyE0BtA0EtGyCtB0DyBtGtAtAtByEtGyDyD0E0D0FzytCtCyB0DyE0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAtCtAtAyByD0D0FtGyDtAzzzztG0EyByEyDtGyEyEtByEtGtAyDtAyCtD0A0FyD0DyC0CtD2Q&cr=885616633&ir="
CHR Extension: (Dokumenty Google) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-26]
CHR Extension: (Dysk Google) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-15]
CHR Extension: (Is Skyrim Out?) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\bclinlmkdhmmfifcdnlnpnpapieddamn [2014-06-18]
CHR Extension: (MEGA) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2014-03-26]
CHR Extension: (YouTube) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-15]
CHR Extension: (GeoGebra) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee [2014-04-07]
CHR Extension: (Szukaj w Google) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-15]
CHR Extension: (Give Up) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\diippoclinjdbklinhchgedilfncehbi [2014-03-26]
CHR Extension: (AdBlock Premium) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [2014-03-26]
CHR Extension: (avast! Online Security) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-17]
CHR Extension: (Into The Mist) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgihmkgobaljfehcadcckdggpeojaadh [2014-07-26]
CHR Extension: (My IP address) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\monhkdcehmbdgkhgpccaccbbcgcfpjkd [2014-03-26]
CHR Extension: (Your Quality for YouTube™) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfcilgimggemnogfigihdkmapdhhlbph [2014-06-18]
CHR Extension: (Google Wallet) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-15]
CHR Extension: (Gmail) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-15]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Kacek\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; D:\Kacek\Avast\AvastSvc.exe [50344 2014-07-26] (AVAST Software)
S3 DAUpdaterSvc; D:\Kacek\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2014-06-23] (BioWare)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 HiPatchService; D:\Kacek\Smite\HiPatchService.exe [9216 2014-07-18] (Hi-Rez Studios) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-05-04] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-14] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [215128 2014-07-17] ()
S3 RaMediaServer; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [621632 2011-03-04] ()
R2 WPSHWPBC; C:\Program Files (x86)\D-Link\DWA-140\WPSHWPBC.exe [318976 2013-01-17] ()
S3 EhttpSrv; D:\Nod\EHttpSrv.exe [X]
S2 ekrn; D:\Nod\x86\ekrn.exe [X]
S4 Hamachi2Svc; D:\Kacek\hamachi\hamachi-2.exe -s [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [426848 2014-07-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-26] ()
R2 eamon; C:\Windows\System32\DRIVERS\eamon.sys [145336 2009-11-16] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [136584 2009-11-16] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [123200 2009-11-16] (ESET)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2014-07-30] (REALiX(tm))
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-26] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2013-12-21] () [File not signed]
R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
U3 aho1jxiu; C:\Windows\System32\Drivers\aho1jxiu.sys [0 ] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-31 19:03 - 2014-07-31 19:03 - 00380416 _____ () C:\Users\Kacper\Downloads\oq6g6v77.exe
2014-07-31 19:02 - 2014-07-31 19:03 - 00024726 _____ () C:\Users\Kacper\Downloads\FRST.txt
2014-07-31 19:02 - 2014-07-31 19:02 - 02094080 _____ (Farbar) C:\Users\Kacper\Downloads\FRST64.exe
2014-07-31 19:02 - 2014-07-31 19:02 - 00602112 _____ (OldTimer Tools) C:\Users\Kacper\Downloads\OTL.scr
2014-07-31 19:02 - 2014-07-31 19:02 - 00000000 ____D () C:\FRST
2014-07-30 17:16 - 2014-07-30 17:16 - 00458468 _____ () C:\Users\Kacper\Downloads\[torrenty.pl] Breaking Bad - Sezon 1-5 [1080p.DTS [Napisy PL].torrent
2014-07-30 13:41 - 2014-07-30 13:41 - 00000205 _____ () C:\Users\Kacper\Desktop\Counter-Strike Global Offensive.url
2014-07-30 13:19 - 2014-07-30 13:19 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2014-07-28 23:22 - 2014-07-28 23:22 - 00000000 ____D () C:\Users\Kacper\Documents\Square Enix
2014-07-28 23:12 - 2014-07-28 23:12 - 02670520 _____ (Martin Malík - REALiX ) C:\Users\Kacper\Downloads\hw64_440 (1).exe
2014-07-28 21:12 - 2014-07-28 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2014-07-28 21:10 - 2014-07-28 21:10 - 02774120 _____ (Crystal Dew World ) C:\Users\Kacper\Downloads\CrystalDiskInfo6_1_14-en.exe
2014-07-28 17:33 - 2014-07-28 23:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2014-07-28 17:32 - 2014-07-28 17:32 - 02670520 _____ (Martin Malík - REALiX ) C:\Users\Kacper\Downloads\hw64_440.exe
2014-07-28 17:30 - 2014-07-28 17:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2014-07-28 13:43 - 2014-07-28 13:43 - 00000844 _____ () C:\Users\Kacper\Desktop\Assassin's Creed IV Black Flag.lnk
2014-07-27 18:44 - 2014-07-27 18:44 - 00293936 _____ () C:\Windows\Minidump\072714-6614-01.dmp
2014-07-27 12:28 - 2014-07-27 12:28 - 00293936 _____ () C:\Windows\Minidump\072714-6177-01.dmp
2014-07-27 12:13 - 2014-07-27 12:13 - 00000000 ____D () C:\Users\Kacper\Documents\Assassin's Creed IV Black Flag
2014-07-26 19:03 - 2014-07-26 19:03 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-26 19:03 - 2014-07-26 19:03 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-26 19:01 - 2014-07-27 18:44 - 606049772 _____ () C:\Windows\MEMORY.DMP
2014-07-26 19:01 - 2014-07-26 19:01 - 00293488 _____ () C:\Windows\Minidump\072614-6255-01.dmp
2014-07-26 19:00 - 2014-07-26 19:00 - 00000000 ____D () C:\Windows\pss
2014-07-26 17:37 - 2014-07-28 12:09 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\TP-LINK
2014-07-26 17:36 - 2014-07-26 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2014-07-26 17:36 - 2014-07-26 17:36 - 00002276 _____ () C:\Users\Public\Desktop\TP-LINK Wireless Configuration Utility.lnk
2014-07-26 17:36 - 2014-07-26 17:36 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-07-26 17:36 - 2012-10-18 15:04 - 01930240 ____N (Atheros Communications, Inc.) C:\Windows\system32\athurx.sys
2014-07-26 17:36 - 2012-10-18 15:04 - 01930240 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athurx.sys
2014-07-26 17:36 - 2012-10-18 15:04 - 00007518 ____N () C:\Windows\system32\athurextx.cat
2014-07-26 17:33 - 2014-07-26 17:36 - 00000000 ____D () C:\ProgramData\TP-LINK
2014-07-26 16:56 - 2014-07-26 16:56 - 00000000 ____D () C:\Users\Kacper\Nowy folder
2014-07-26 16:52 - 2014-07-26 16:52 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Unity
2014-07-26 16:48 - 2014-07-26 16:48 - 00293976 _____ () C:\Windows\Minidump\072614-9594-01.dmp
2014-07-23 16:30 - 2014-07-31 18:57 - 00017360 _____ () C:\Windows\setupact.log
2014-07-23 16:30 - 2014-07-23 16:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-23 00:00 - 2014-07-26 19:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-22 23:59 - 2014-07-22 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-22 23:59 - 2014-07-22 23:59 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-22 23:59 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-22 23:59 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-22 23:58 - 2014-07-22 23:59 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Malwarebytes
2014-07-22 23:57 - 2014-07-22 23:59 - 00001111 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-22 23:57 - 2014-07-22 23:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-22 23:57 - 2014-07-22 23:59 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-07-22 23:57 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-20 20:36 - 2014-07-20 20:36 - 01143808 _____ () C:\Users\Kacper\Desktop\TerrariViewer.exe
2014-07-19 10:25 - 2014-07-19 10:25 - 00000003 _____ () C:\Windows\system32\HRUPPROG.EXIT
2014-07-11 19:28 - 2014-07-12 23:58 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Curse Client
2014-07-11 19:28 - 2014-07-11 19:28 - 00001002 _____ () C:\Users\Kacper\Desktop\Curse.lnk
2014-07-11 19:28 - 2014-07-11 19:28 - 00000988 _____ () C:\Users\Kacper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-07-11 19:28 - 2014-07-11 19:28 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Curse
2014-07-11 14:30 - 2014-07-11 14:30 - 00000039 _____ () C:\Users\Kacper\AppData\Roaming\TheHunterSettings_steam_live.cfg
2014-07-11 14:30 - 2014-07-11 14:30 - 00000000 ____D () C:\Users\Kacper\Documents\theHunter
2014-07-11 14:30 - 2014-07-11 14:30 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\theHunter
2014-07-11 14:30 - 2014-07-11 14:30 - 00000000 ____D () C:\Users\Kacper\AppData\Local\theHunter
2014-07-11 08:54 - 2014-07-11 14:53 - 00000098 _____ () C:\Users\Kacper\AppData\Roaming\LauncherSettings_live.cfg
2014-07-11 08:54 - 2014-07-11 08:54 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\theHunterSteam
2014-07-11 08:54 - 2014-07-11 08:54 - 00000000 ____D () C:\ProgramData\Hunter
2014-07-08 19:56 - 2014-07-30 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-08 19:56 - 2014-07-08 19:56 - 00002305 _____ () C:\Users\Kacper\Desktop\Google Chrome.lnk
2014-07-08 19:55 - 2014-07-31 19:00 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-08 19:55 - 2014-07-31 18:57 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-08 19:55 - 2014-07-08 19:55 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-08 19:55 - 2014-07-08 19:55 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-08 19:51 - 2014-07-08 19:51 - 00001156 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-07-01 17:21 - 2014-07-10 16:21 - 00000000 ____D () C:\Users\Kacper\AppData\Local\wf-launcher
2014-07-01 17:21 - 2014-07-10 16:20 - 00000000 ____D () C:\ProgramData\GFACE
2014-07-01 13:35 - 2014-07-01 13:55 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Kacper\AppData\Local\UWebKit
2014-07-01 10:20 - 2014-07-01 10:20 - 00000783 _____ () C:\Users\Kacper\Desktop\Obrazki — skrót.lnk
2014-07-01 10:18 - 2014-07-15 21:25 - 00000000 ____D () C:\Users\Kacper\Desktop\Letni Konkurs
2014-07-01 10:14 - 2014-07-31 18:57 - 00000000 ____D () C:\Users\Kacper\AppData\Local\screenSHU
2014-07-01 10:14 - 2014-07-01 10:14 - 00000653 _____ () C:\Users\Kacper\Desktop\screenSHU.lnk
2014-07-01 10:14 - 2014-07-01 10:14 - 00000653 _____ () C:\Users\Kacper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\screenSHU.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-31 19:03 - 2014-07-31 19:03 - 00380416 _____ () C:\Users\Kacper\Downloads\oq6g6v77.exe
2014-07-31 19:03 - 2014-07-31 19:02 - 00024726 _____ () C:\Users\Kacper\Downloads\FRST.txt
2014-07-31 19:02 - 2014-07-31 19:02 - 02094080 _____ (Farbar) C:\Users\Kacper\Downloads\FRST64.exe
2014-07-31 19:02 - 2014-07-31 19:02 - 00602112 _____ (OldTimer Tools) C:\Users\Kacper\Downloads\OTL.scr
2014-07-31 19:02 - 2014-07-31 19:02 - 00000000 ____D () C:\FRST
2014-07-31 19:00 - 2014-07-08 19:55 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 19:00 - 2013-12-20 23:07 - 01871326 _____ () C:\Windows\WindowsUpdate.log
2014-07-31 18:59 - 2014-02-15 09:53 - 00004136 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-31 18:58 - 2013-12-21 01:02 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Skype
2014-07-31 18:57 - 2014-07-23 16:30 - 00017360 _____ () C:\Windows\setupact.log
2014-07-31 18:57 - 2014-07-08 19:55 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 18:57 - 2014-07-01 10:14 - 00000000 ____D () C:\Users\Kacper\AppData\Local\screenSHU
2014-07-31 18:57 - 2013-12-21 00:45 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-31 18:57 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-31 18:45 - 2014-04-01 18:45 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-510 Series Update {5AD93605-06CE-4037-A412-6D63FD6F8096}.job
2014-07-31 18:45 - 2014-04-01 18:45 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-510 Series Invitation {5AD93605-06CE-4037-A412-6D63FD6F8096}.job
2014-07-31 18:30 - 2009-07-14 06:45 - 00010208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-31 18:30 - 2009-07-14 06:45 - 00010208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-31 18:29 - 2009-07-14 19:55 - 00740422 _____ () C:\Windows\system32\perfh015.dat
2014-07-31 18:29 - 2009-07-14 19:55 - 00155996 _____ () C:\Windows\system32\perfc015.dat
2014-07-31 18:29 - 2009-07-14 07:13 - 01670518 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-31 18:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-07-31 17:22 - 2013-12-21 02:23 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-31 16:47 - 2009-07-14 07:08 - 00032602 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-31 09:01 - 2014-02-27 19:25 - 00004366 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{29AEA08B-3EC6-4D36-A4DF-9F07E65EF2D4}
2014-07-30 23:40 - 2013-12-27 15:59 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\TS3Client
2014-07-30 18:24 - 2013-12-23 18:42 - 00000000 ____D () C:\ProgramData\Origin
2014-07-30 17:42 - 2014-03-24 16:07 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\uTorrent
2014-07-30 17:16 - 2014-07-30 17:16 - 00458468 _____ () C:\Users\Kacper\Downloads\[torrenty.pl] Breaking Bad - Sezon 1-5 [1080p.DTS [Napisy PL].torrent
2014-07-30 17:13 - 2014-07-08 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-30 15:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-30 13:41 - 2014-07-30 13:41 - 00000205 _____ () C:\Users\Kacper\Desktop\Counter-Strike Global Offensive.url
2014-07-30 13:19 - 2014-07-30 13:19 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2014-07-28 23:22 - 2014-07-28 23:22 - 00000000 ____D () C:\Users\Kacper\Documents\Square Enix
2014-07-28 23:12 - 2014-07-28 23:12 - 02670520 _____ (Martin Malík - REALiX ) C:\Users\Kacper\Downloads\hw64_440 (1).exe
2014-07-28 23:12 - 2014-07-28 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2014-07-28 21:12 - 2014-07-28 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2014-07-28 21:10 - 2014-07-28 21:10 - 02774120 _____ (Crystal Dew World ) C:\Users\Kacper\Downloads\CrystalDiskInfo6_1_14-en.exe
2014-07-28 17:32 - 2014-07-28 17:32 - 02670520 _____ (Martin Malík - REALiX ) C:\Users\Kacper\Downloads\hw64_440.exe
2014-07-28 17:30 - 2014-07-28 17:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2014-07-28 13:43 - 2014-07-28 13:43 - 00000844 _____ () C:\Users\Kacper\Desktop\Assassin's Creed IV Black Flag.lnk
2014-07-28 12:09 - 2014-07-26 17:37 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\TP-LINK
2014-07-27 18:44 - 2014-07-27 18:44 - 00293936 _____ () C:\Windows\Minidump\072714-6614-01.dmp
2014-07-27 18:44 - 2014-07-26 19:01 - 606049772 _____ () C:\Windows\MEMORY.DMP
2014-07-27 18:44 - 2014-01-18 20:36 - 00000000 ____D () C:\Windows\Minidump
2014-07-27 12:28 - 2014-07-27 12:28 - 00293936 _____ () C:\Windows\Minidump\072714-6177-01.dmp
2014-07-27 12:13 - 2014-07-27 12:13 - 00000000 ____D () C:\Users\Kacper\Documents\Assassin's Creed IV Black Flag
2014-07-27 12:13 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-07-27 12:12 - 2013-12-21 00:02 - 00303696 _____ () C:\Windows\DirectX.log
2014-07-26 19:04 - 2013-12-20 23:40 - 00278858 _____ () C:\Windows\PFRO.log
2014-07-26 19:03 - 2014-07-26 19:03 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-26 19:03 - 2014-07-26 19:03 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-26 19:03 - 2014-02-15 09:53 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-07-26 19:03 - 2014-02-15 09:53 - 00426848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-07-26 19:03 - 2014-02-15 09:53 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-26 19:03 - 2014-02-15 09:53 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-26 19:03 - 2014-02-15 09:53 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-26 19:03 - 2014-02-15 09:53 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-26 19:03 - 2014-02-15 09:53 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-26 19:03 - 2014-02-15 09:53 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-26 19:01 - 2014-07-26 19:01 - 00293488 _____ () C:\Windows\Minidump\072614-6255-01.dmp
2014-07-26 19:01 - 2014-07-23 00:00 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-26 19:00 - 2014-07-26 19:00 - 00000000 ____D () C:\Windows\pss
2014-07-26 17:37 - 2014-07-26 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2014-07-26 17:36 - 2014-07-26 17:36 - 00002276 _____ () C:\Users\Public\Desktop\TP-LINK Wireless Configuration Utility.lnk
2014-07-26 17:36 - 2014-07-26 17:36 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-07-26 17:36 - 2014-07-26 17:33 - 00000000 ____D () C:\ProgramData\TP-LINK
2014-07-26 17:36 - 2013-12-20 23:12 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-26 16:56 - 2014-07-26 16:56 - 00000000 ____D () C:\Users\Kacper\Nowy folder
2014-07-26 16:56 - 2013-12-20 23:05 - 00000000 ____D () C:\Users\Kacper
2014-07-26 16:52 - 2014-07-26 16:52 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Unity
2014-07-26 16:48 - 2014-07-26 16:48 - 00293976 _____ () C:\Windows\Minidump\072614-9594-01.dmp
2014-07-25 09:54 - 2014-04-04 10:20 - 00000000 ____D () C:\ProgramData\tmp
2014-07-23 16:30 - 2014-07-23 16:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-23 01:58 - 2009-07-14 20:09 - 00000000 ____D () C:\Windows\CSC
2014-07-22 23:59 - 2014-07-22 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-22 23:59 - 2014-07-22 23:59 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-22 23:59 - 2014-07-22 23:58 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Malwarebytes
2014-07-22 23:59 - 2014-07-22 23:57 - 00001111 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-22 23:59 - 2014-07-22 23:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-22 23:59 - 2014-07-22 23:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-07-22 18:41 - 2013-12-21 14:12 - 00000000 ____D () C:\Users\Kacper\Documents\My Games
2014-07-20 23:01 - 2014-06-30 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-07-20 20:36 - 2014-07-20 20:36 - 01143808 _____ () C:\Users\Kacper\Desktop\TerrariViewer.exe
2014-07-19 10:25 - 2014-07-19 10:25 - 00000003 _____ () C:\Windows\system32\HRUPPROG.EXIT
2014-07-19 10:25 - 2014-01-06 08:55 - 00000003 _____ () C:\Windows\system32\HRUPPROG.TXT
2014-07-17 22:02 - 2014-01-18 20:38 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-07-17 22:02 - 2013-12-24 05:20 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-07-17 13:15 - 2014-05-18 12:54 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\.minecraft
2014-07-16 19:51 - 2014-01-13 18:36 - 00000000 ____D () C:\Users\Kacper\AppData\Local\LogMeIn Hamachi
2014-07-15 21:25 - 2014-07-01 10:18 - 00000000 ____D () C:\Users\Kacper\Desktop\Letni Konkurs
2014-07-12 23:58 - 2014-07-11 19:28 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Curse Client
2014-07-11 19:28 - 2014-07-11 19:28 - 00001002 _____ () C:\Users\Kacper\Desktop\Curse.lnk
2014-07-11 19:28 - 2014-07-11 19:28 - 00000988 _____ () C:\Users\Kacper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-07-11 19:28 - 2014-07-11 19:28 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\Curse
2014-07-11 14:53 - 2014-07-11 08:54 - 00000098 _____ () C:\Users\Kacper\AppData\Roaming\LauncherSettings_live.cfg
2014-07-11 14:30 - 2014-07-11 14:30 - 00000039 _____ () C:\Users\Kacper\AppData\Roaming\TheHunterSettings_steam_live.cfg
2014-07-11 14:30 - 2014-07-11 14:30 - 00000000 ____D () C:\Users\Kacper\Documents\theHunter
2014-07-11 14:30 - 2014-07-11 14:30 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\theHunter
2014-07-11 14:30 - 2014-07-11 14:30 - 00000000 ____D () C:\Users\Kacper\AppData\Local\theHunter
2014-07-11 08:54 - 2014-07-11 08:54 - 00000000 ____D () C:\Users\Kacper\AppData\Roaming\theHunterSteam
2014-07-11 08:54 - 2014-07-11 08:54 - 00000000 ____D () C:\ProgramData\Hunter
2014-07-10 16:21 - 2014-07-01 17:21 - 00000000 ____D () C:\Users\Kacper\AppData\Local\wf-launcher
2014-07-10 16:20 - 2014-07-01 17:21 - 00000000 ____D () C:\ProgramData\GFACE
2014-07-10 09:22 - 2013-12-21 02:23 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-10 09:22 - 2013-12-21 02:23 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-10 09:22 - 2013-12-21 02:23 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 11:24 - 2014-05-29 08:55 - 00007603 _____ () C:\Users\Kacper\AppData\Local\Resmon.ResmonCfg
2014-07-08 19:56 - 2014-07-08 19:56 - 00002305 _____ () C:\Users\Kacper\Desktop\Google Chrome.lnk
2014-07-08 19:56 - 2013-12-23 12:24 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-08 19:55 - 2014-07-08 19:55 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-08 19:55 - 2014-07-08 19:55 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-08 19:51 - 2014-07-08 19:51 - 00001156 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-07-07 17:19 - 2013-12-21 00:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-01 13:55 - 2014-07-01 13:35 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Kacper\AppData\Local\UWebKit
2014-07-01 10:21 - 2014-01-08 17:53 - 00000000 ____D () C:\Users\Kacper\Desktop\Mem
2014-07-01 10:20 - 2014-07-01 10:20 - 00000783 _____ () C:\Users\Kacper\Desktop\Obrazki — skrót.lnk
2014-07-01 10:14 - 2014-07-01 10:14 - 00000653 _____ () C:\Users\Kacper\Desktop\screenSHU.lnk
2014-07-01 10:14 - 2014-07-01 10:14 - 00000653 _____ () C:\Users\Kacper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\screenSHU.lnk

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-28 06:55

==================== End Of Log ============================