Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014
Ran by user (administrator) on USER-TOSH on 03-08-2014 21:11:19
Running from C:\Users\user\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Spotify Ltd) C:\Users\user\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\user\Desktop\mpvxkeuu.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-4194371047-1975849023-3887178733-1001\...\Run: [Spotify Web Helper] => C:\Users\user\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1178168 2014-07-17] (Spotify Ltd)
ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {47722107-52BF-42C8-AC49-A9769F978CB7} URL = 
SearchScopes: HKCU - {7403BA5B-8505-46AD-AEB4-0B9E388E8603} URL = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
SearchScopes: HKCU - {AEAA485C-0DD2-4B94-8D2E-0ABFE0EF55DF} URL = http://www.amazon.co.uk/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibauk-win7-ie-search-21&index=blended&linkCode=ur2
SearchScopes: HKCU - {E94AC719-6D88-40AF-B681-70F383729BA2} URL = 
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} ->  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 5.175.225.136 8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default
FF NewTab: hxxp://www.golsearch.com/?babsrc=NT_ss_Btisdt6&mntrId=F0C5E839DF3A6C43&affID=119357&tsp=4924
FF DefaultSearchEngine: Google 
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.0.198 -> c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.0.198 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=15.0.0.198 -> c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\user\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\searchplugins\avatar-wiki-en.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\searchplugins\megasownik-ang-pol-ang.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\searchplugins\megasownik-synonimy.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\searchplugins\nonsensopedia-pl.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\searchplugins\twitter-search.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\searchplugins\wikicytaty-pl.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\searchplugins\wikisownik-pl.xml
FF Extension: Pocket - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\Extensions\isreaditlater@ideashower.com [2014-08-03]
FF Extension: Rikaichan Japanese-English Dictionary File - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\Extensions\rikaichan-jpen@polarcloud.com [2011-11-11]
FF Extension: Rikaichan - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\Extensions\{0AA9101C-D3C1-4129-A9B7-D778C6A17F82} [2012-10-31]
FF Extension: BitComet Video Downloader - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2012-07-16]
FF Extension: Firefox Old Version Update Hotfix - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-07-25]
FF Extension: Iplex to ALLPlayer - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2012-07-20]
FF Extension: vshare Add-On - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\Extensions\{dd05fd3d-18df-4ce4-ae53-e795339c5f01}.xpi [2011-09-10]
FF Extension: DownThemAll! - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\hu8214zx.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-07-10]
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-01-28]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR StartupUrls: "hxxp://google.pl/", ""
CHR Extension: (Dokumenty Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-07]
CHR Extension: (Dysk Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-07]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-07]
CHR Extension: (Szukaj w Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-07]
CHR Extension: (UK TV Online) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\egbckljaejiomnicmghbdbogcebgniie [2014-01-04]
CHR Extension: (AdBlock) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-04]
CHR Extension: (Old Maps Online) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ildefchbaikbajjccfmamfppgciacekl [2014-01-04]
CHR Extension: (Prismatic) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaagjejenaeofpaoppifghfdflkebemg [2014-01-04]
CHR Extension: (duuble.me) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lejmffhcobpchifjhnaapafgccomckld [2014-01-04]
CHR Extension: (Sketchpad) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkllajgbhondgjjnhmmgbjndmogapinp [2014-01-04]
CHR Extension: (Lazarus: Form Recovery) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\loljledaigphbcpfhfmgopdkppkifgno [2014-01-04]
CHR Extension: (USA Independence Day Theme) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhgggmlhfbnbhbkeogednenglhggdfif [2014-01-04]
CHR Extension: (ruul. Screen ruler) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbnpnlmfngmlcmkhjpbfokdphfehhjj [2014-02-19]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-07]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2012-11-29]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4066168 2011-04-25] (INCA Internet Co., Ltd.) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-04-05] ()
S3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [720952 2010-03-05] (Conexant Systems Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-04-05] ()
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-03] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) [File not signed]
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [572416 2006-12-05] (PixArt Imaging Inc.)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [95552 2004-01-26] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-06-25] (Duplex Secure Ltd.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 dump_wmimmc; \??\C:\AeriaGames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S3 vdrive; system32\DRIVERS\vdrive.sys [X]
U3 kgldipob; \??\C:\Users\user\AppData\Local\Temp\kgldipob.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-03 21:11 - 2014-08-03 21:11 - 00019865 _____ () C:\Users\user\Desktop\FRST.txt
2014-08-03 21:03 - 2014-08-03 21:11 - 00000000 ____D () C:\FRST
2014-08-03 21:03 - 2014-08-03 21:03 - 00010311 _____ () C:\Users\user\Desktop\GMER.log
2014-08-03 19:58 - 2014-08-03 19:59 - 02094080 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2014-08-03 19:45 - 2014-08-03 19:45 - 00131636 _____ () C:\Users\user\Desktop\Extras.Txt
2014-08-03 19:43 - 2014-08-03 19:43 - 00106462 _____ () C:\Users\user\Desktop\OTL.Txt
2014-08-03 19:16 - 2014-08-03 19:16 - 00001016 _____ () C:\Users\user\Desktop\log-gmer.log
2014-08-03 19:14 - 2014-08-03 19:14 - 00380416 _____ () C:\Users\user\Desktop\mpvxkeuu.exe
2014-08-03 19:06 - 2014-08-03 19:06 - 00001292 _____ () C:\Windows\PFRO.log
2014-08-03 18:49 - 2014-08-03 18:49 - 00602112 _____ (OldTimer Tools) C:\Users\user\Desktop\OTL.exe
2014-07-26 08:06 - 2014-08-03 19:06 - 00000336 _____ () C:\Windows\setupact.log
2014-07-26 08:06 - 2014-07-26 08:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-25 20:11 - 2014-07-25 20:12 - 00001014 _____ () C:\DelFix.txt
2014-07-25 19:28 - 2014-07-25 19:28 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-07-25 19:26 - 2014-07-25 19:27 - 10279264 _____ (SurfRight B.V.) C:\Users\user\Desktop\HitmanPro.exe
2014-07-25 18:50 - 2014-08-03 21:03 - 00119325 _____ () C:\Windows\WindowsUpdate.log
2014-07-25 18:39 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-25 18:37 - 2014-08-03 19:05 - 00000000 ____D () C:\AdwCleaner
2014-07-19 11:30 - 2014-07-19 11:30 - 00000000 ____D () C:\Users\user\Documents\Need for Speed World
2014-07-18 18:44 - 2014-07-25 18:33 - 00000000 ____D () C:\Users\user\AppData\Local\Unity
2014-07-16 11:08 - 2014-07-16 11:20 - 00000000 ____D () C:\Windows\erdnt
2014-07-16 10:27 - 2014-07-16 10:27 - 00517000 _____ () C:\Users\user\Documents\cc_20140716_102707.reg
2014-07-16 10:12 - 2014-07-16 10:12 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-07-16 10:12 - 2014-07-16 10:12 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-07-16 10:12 - 2014-07-16 10:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-16 10:12 - 2014-07-16 10:12 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-16 09:39 - 2014-07-16 09:40 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\user\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-09 14:40 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 14:40 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 14:39 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 14:39 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 14:39 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 14:39 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 14:39 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 14:39 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 14:39 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 14:39 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 14:39 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 14:39 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 14:39 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 14:39 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 14:39 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 14:39 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 14:39 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-09 14:39 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-09 14:39 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 14:39 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 14:39 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 14:39 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-09 14:39 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 14:39 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 14:39 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 14:39 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-09 14:39 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 14:39 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 14:39 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 14:39 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 14:39 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 14:39 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 14:39 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-09 14:39 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 14:39 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 14:39 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 14:39 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 14:39 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 14:39 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 14:39 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 14:39 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 14:39 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 14:39 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 14:39 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 14:39 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 14:39 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 14:39 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 14:39 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 14:39 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 14:39 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-09 14:39 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-09 14:39 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-09 14:39 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-09 14:39 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-09 14:39 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-09 14:39 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-09 14:39 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 14:38 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 14:38 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 14:38 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 14:38 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 14:38 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 14:38 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 14:38 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 14:38 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 14:38 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 14:38 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 14:38 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 14:38 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 14:38 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 14:38 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-09 14:38 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 14:38 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-09 14:38 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 14:38 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 14:38 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 14:38 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 14:38 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 14:36 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 14:36 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-09 14:36 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-08 08:46 - 2014-07-08 08:46 - 00564224 _____ () C:\Users\user\Desktop\Konkursy_prezentacja-laureaci_uprawnienia.ppt
2014-07-07 22:05 - 2014-07-07 22:05 - 00000000 ____D () C:\Users\user\AppData\Roaming\Need for Speed World
2014-07-07 21:27 - 2014-07-07 21:27 - 00000000 ____D () C:\Users\user\AppData\Local\Electronic_Arts_Inc

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-03 21:11 - 2014-08-03 21:11 - 00019865 _____ () C:\Users\user\Desktop\FRST.txt
2014-08-03 21:11 - 2014-08-03 21:03 - 00000000 ____D () C:\FRST
2014-08-03 21:03 - 2014-08-03 21:03 - 00010311 _____ () C:\Users\user\Desktop\GMER.log
2014-08-03 21:03 - 2014-07-25 18:50 - 00119325 _____ () C:\Windows\WindowsUpdate.log
2014-08-03 20:46 - 2012-03-31 08:45 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-03 20:42 - 2011-07-21 18:19 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-03 20:34 - 2012-08-27 11:29 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4194371047-1975849023-3887178733-1001UA.job
2014-08-03 20:00 - 2013-08-09 15:01 - 00000000 ____D () C:\Users\user\AppData\Roaming\Spotify
2014-08-03 19:59 - 2014-08-03 19:58 - 02094080 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2014-08-03 19:45 - 2014-08-03 19:45 - 00131636 _____ () C:\Users\user\Desktop\Extras.Txt
2014-08-03 19:43 - 2014-08-03 19:43 - 00106462 _____ () C:\Users\user\Desktop\OTL.Txt
2014-08-03 19:16 - 2014-08-03 19:16 - 00001016 _____ () C:\Users\user\Desktop\log-gmer.log
2014-08-03 19:14 - 2014-08-03 19:14 - 00380416 _____ () C:\Users\user\Desktop\mpvxkeuu.exe
2014-08-03 19:14 - 2009-07-14 06:45 - 00016304 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-03 19:14 - 2009-07-14 06:45 - 00016304 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-03 19:06 - 2014-08-03 19:06 - 00001292 _____ () C:\Windows\PFRO.log
2014-08-03 19:06 - 2014-07-26 08:06 - 00000336 _____ () C:\Windows\setupact.log
2014-08-03 19:06 - 2012-09-16 13:04 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-08-03 19:06 - 2011-07-21 18:19 - 00001040 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-03 19:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-03 19:05 - 2014-07-25 18:37 - 00000000 ____D () C:\AdwCleaner
2014-08-03 18:49 - 2014-08-03 18:49 - 00602112 _____ (OldTimer Tools) C:\Users\user\Desktop\OTL.exe
2014-08-03 18:41 - 2013-08-09 15:02 - 00000000 ____D () C:\Users\user\AppData\Local\Spotify
2014-08-03 18:12 - 2014-04-20 08:49 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-03 17:47 - 2011-07-02 08:09 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-08-03 17:36 - 2012-03-31 08:45 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-03 17:36 - 2012-03-31 08:45 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-03 17:36 - 2011-07-02 11:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-03 17:28 - 2011-07-05 06:43 - 00003966 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2926E060-E5DF-45F7-8C64-DA4F7D3E75B1}
2014-07-26 21:02 - 2014-05-09 16:49 - 00000000 ____D () C:\ProgramData\Origin
2014-07-26 19:38 - 2014-05-09 16:49 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-07-26 13:38 - 2012-02-25 12:45 - 00000000 ____D () C:\Users\user\AppData\Roaming\GG
2014-07-26 11:34 - 2012-08-27 11:29 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4194371047-1975849023-3887178733-1001Core.job
2014-07-26 11:22 - 2012-05-11 22:05 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-26 11:22 - 2012-05-11 22:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-26 10:42 - 2011-07-02 08:58 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2014-07-26 08:15 - 2012-05-11 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-26 08:06 - 2014-07-26 08:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-25 20:12 - 2014-07-25 20:11 - 00001014 _____ () C:\DelFix.txt
2014-07-25 19:28 - 2014-07-25 19:28 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-07-25 19:27 - 2014-07-25 19:26 - 10279264 _____ (SurfRight B.V.) C:\Users\user\Desktop\HitmanPro.exe
2014-07-25 18:33 - 2014-07-18 18:44 - 00000000 ____D () C:\Users\user\AppData\Local\Unity
2014-07-19 17:51 - 2012-06-21 18:01 - 00000000 ____D () C:\Users\user\Desktop\Śmieszne
2014-07-19 11:30 - 2014-07-19 11:30 - 00000000 ____D () C:\Users\user\Documents\Need for Speed World
2014-07-19 00:29 - 2012-02-25 12:44 - 00000000 ____D () C:\Users\user\AppData\Local\GG
2014-07-18 21:06 - 2012-07-29 13:26 - 00000000 ____D () C:\Users\user\AppData\Roaming\FileZilla
2014-07-18 17:07 - 2012-07-17 09:45 - 00000000 ____D () C:\Users\user\AppData\Local\Last.fm
2014-07-18 17:00 - 2013-07-04 21:58 - 00000000 ___RD () C:\Users\user\Podcasts
2014-07-17 19:53 - 2013-10-10 09:05 - 00000000 ____D () C:\Windows\rescache
2014-07-16 14:51 - 2009-07-14 19:55 - 01426400 _____ () C:\Windows\system32\perfh015.dat
2014-07-16 14:51 - 2009-07-14 19:55 - 00402896 _____ () C:\Windows\system32\perfc015.dat
2014-07-16 14:51 - 2009-07-14 07:13 - 00006496 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-16 14:38 - 2014-06-26 16:03 - 00000000 ____D () C:\Program Files (x86)\Need for Speed Rivals
2014-07-16 11:30 - 2011-09-29 12:53 - 00092672 ___SH () C:\Users\user\Thumbs.db
2014-07-16 11:20 - 2014-07-16 11:08 - 00000000 ____D () C:\Windows\erdnt
2014-07-16 11:19 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-16 10:32 - 2011-07-02 08:13 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-16 10:27 - 2014-07-16 10:27 - 00517000 _____ () C:\Users\user\Documents\cc_20140716_102707.reg
2014-07-16 10:22 - 2012-01-22 14:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\DAEMON Tools Lite
2014-07-16 10:21 - 2014-06-11 12:11 - 00000000 ____D () C:\Users\user\AppData\Roaming\inkscape
2014-07-16 10:21 - 2013-10-30 07:45 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-07-16 10:19 - 2013-08-20 23:52 - 00000000 ____D () C:\Windows\Minidump
2014-07-16 10:19 - 2012-08-27 11:31 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
2014-07-16 10:19 - 2010-04-22 12:29 - 00000000 ____D () C:\Windows\Panther
2014-07-16 10:12 - 2014-07-16 10:12 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-07-16 10:12 - 2014-07-16 10:12 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-07-16 10:12 - 2014-07-16 10:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-16 10:12 - 2014-07-16 10:12 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-16 10:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-07-16 09:41 - 2014-04-20 08:49 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-16 09:41 - 2014-04-20 08:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-16 09:41 - 2014-04-20 08:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-16 09:40 - 2014-07-16 09:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\user\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-16 09:21 - 2011-07-10 14:58 - 00027648 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-10 09:07 - 2009-07-14 06:45 - 00505128 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 09:05 - 2014-05-06 15:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-10 09:05 - 2009-07-14 20:09 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 09:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-10 09:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-10 09:02 - 2013-07-15 12:10 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 01:05 - 2011-07-01 22:18 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 01:04 - 2010-04-22 13:55 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-08 21:04 - 2014-05-18 16:59 - 00000000 ____D () C:\Users\user\Documents\Wiersze
2014-07-08 08:46 - 2014-07-08 08:46 - 00564224 _____ () C:\Users\user\Desktop\Konkursy_prezentacja-laureaci_uprawnienia.ppt
2014-07-07 22:05 - 2014-07-07 22:05 - 00000000 ____D () C:\Users\user\AppData\Roaming\Need for Speed World
2014-07-07 21:27 - 2014-07-07 21:27 - 00000000 ____D () C:\Users\user\AppData\Local\Electronic_Arts_Inc
2014-07-07 20:20 - 2012-06-09 15:10 - 00000000 ____D () C:\Users\user\Desktop\Pliki tekstowe
2014-07-07 18:58 - 2014-02-19 11:27 - 00000000 ____D () C:\Users\user\Documents\NFS SHIFT
2014-07-07 18:53 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-07 16:21 - 2012-10-10 20:25 - 00000000 ____D () C:\Users\user\Desktop\Pomoc do lekcji
2014-07-05 21:37 - 2013-08-11 19:08 - 00000000 ____D () C:\Users\user\Documents\Problemy z normalnością
2014-07-04 23:42 - 2012-09-22 15:28 - 00000000 ____D () C:\Users\user\Documents\Północ-Południe

Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-26 12:27

==================== End Of Log ============================