Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-10-2014
Ran by Gosiaczek (administrator) on gosiaczekAOD270 on 18-10-2014 11:29:41
Running from C:\Users\Gosiaczek\Downloads
Loaded Profile: Gosiaczek (Available profiles: Gosiaczek)
Platform: Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\AdminService.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Registration\GREGsvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
(Symantec Corporation) C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Atheros Communications) C:\Program Files\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\AthBtTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
() C:\Users\Gosiaczek\Downloads\mxoe50en.exe
(OldTimer Tools) C:\Users\Gosiaczek\Downloads\OTL.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SuiteTray] => C:\Program Files\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.)
HKLM\...\Run: [Norton Online Backup] => C:\Program Files\Symantec\Norton Online Backup\NOBuClient.exe [966488 2010-06-02] (Symantec Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [GfxServiceInstall] => C:\Windows\system32\GfxCUIServiceInstall.vbs [131 2012-06-27] ()
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Bluetooth Suite\BtvStack.exe [841376 2011-09-17] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files\Bluetooth Suite\AthBtTray.exe [694432 2011-09-17] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1934632 2010-10-08] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10959464 2012-01-10] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [714120 2012-02-08] (Acer Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-01] (AVAST Software)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\Run: [ChomikBox] => C:\Program Files\ChomikBox\ChomikBox.exe
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\Run: [EPSON Stylus DX4400 Series] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [180736 2007-03-01] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\MountPoints2: {1d3acd70-997f-11e3-b9e9-9cb70d2978d9} - D:\LGAutoRun.exe
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\MountPoints2: {33cfb44c-6e61-11e3-ba59-806e6f6e6963} - D:\AutoRun.exe
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\MountPoints2: {33cfb486-6e61-11e3-ba59-089e01405c26} - D:\AutoRun.exe
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\MountPoints2: {813238aa-ab69-11e2-bf90-089e01405c26} - D:\AutoRun.exe
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\MountPoints2: {c04ecfe7-f876-11e2-b9df-089e01405c26} - D:\LaunchU3.exe -a
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\MountPoints2: {e2e7d1c1-a437-11e2-91ee-9cb70d293cb1} - D:\AutoRun.exe
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\MountPoints2: {e2e7d1d0-a437-11e2-91ee-9cb70d293cb1} - D:\AutoRun.exe
HKU\S-1-5-21-4234890097-2591519782-3488358239-1000\...\MountPoints2: {e4c30f1a-f2ae-11e2-b7c0-9cb70d2978d9} - D:\LGAutoRun.exe
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
ShortcutTarget: Acer VCM.lnk -> C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {93DBF2BB-A2B3-4683-A92E-57E60751F346} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Gosiaczek\AppData\Roaming\Mozilla\Firefox\Profiles\nkrmh002.default
FF DefaultSearchUrl: https://www.google.com/search
FF SearchEngineOrder.1: Google
FF SearchEngineOrder.3: Bing 
FF SelectedSearchEngine: Google
FF Homepage: interia.pl
FF Keyword.URL: https://www.google.com/search
FF NetworkProxy: "backup.ftp", ""
FF NetworkProxy: "backup.ftp_port", 0
FF NetworkProxy: "backup.socks", ""
FF NetworkProxy: "backup.socks_port", 0
FF NetworkProxy: "backup.ssl", ""
FF NetworkProxy: "backup.ssl_port", 0
FF NetworkProxy: "ftp", "w3cache.polsl.pl"
FF NetworkProxy: "ftp_port", 80
FF NetworkProxy: "http", "w3cache.polsl.pl"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "w3cache.polsl.pl"
FF NetworkProxy: "socks_port", 80
FF NetworkProxy: "ssl", "w3cache.polsl.pl"
FF NetworkProxy: "ssl_port", 80
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( )
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npganymedenet.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Gosiaczek\AppData\Roaming\Mozilla\Firefox\Profiles\nkrmh002.default\searchplugins\bingp.xml
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-06-11]

Chrome: 
=======
CHR Profile: C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-11]
CHR Extension: (YouTube) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-11]
CHR Extension: (Google Search) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-11]
CHR Extension: (avast! SafePrice) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-08-18]
CHR Extension: (FlashBlock) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gofhjkjmkpinhpoiabjplobcaignabnl [2014-06-26]
CHR Extension: (avast! Online Security) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-03-09]
CHR Extension: (Universe) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\igcicgpahfpikagbhofhehldknadneld [2014-10-14]
CHR Extension: (Google Wallet) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-09]
CHR Extension: (Gmail) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-11]
CHR Profile: C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Prezentacje Google) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-16]
CHR Extension: (Dokumenty Google) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-16]
CHR Extension: (Dysk Google) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-16]
CHR Extension: (YouTube) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-16]
CHR Extension: (Szukaj w Google) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-16]
CHR Extension: (avast! SafePrice) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-10-16]
CHR Extension: (Arkusze Google) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-16]
CHR Extension: (avast! Online Security) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-16]
CHR Extension: (Love Smoke) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jgibfhhccaknggplelmbaepoikkcnllb [2014-10-16]
CHR Extension: (Google Wallet) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-16]
CHR Extension: (Gmail) - C:\Users\Gosiaczek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-16]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-07]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-07]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [84640 2011-09-17] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-07] (AVAST Software)
S3 EgisTec Ticket Service; C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe [173424 2011-06-21] (Egis Technology Inc. )
R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [738688 2012-02-08] (Acer Incorporated)
R2 GREGService; C:\Program Files\Acer\Registration\GREGsvc.exe [28264 2012-02-29] (Acer Incorporated)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1755136 2011-03-07] (Realsil Microelectronics Inc.) [File not signed]
R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [255376 2012-02-07] (Acer Incorporated)
R2 NOBU; C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe [2057560 2010-06-02] (Symantec Corporation)
S2 PLAY ONLINE. RunOuc; C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe [246112 2013-12-26] ()
R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [25856 2011-09-06] (Google Inc)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [23040 2011-09-06] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [27776 2011-09-06] (LG Electronics Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-07] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-07] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-07] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-07-07] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-07] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-07] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-07] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-07-07] ()
S3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [35488 2011-09-17] (Atheros)
S3 BTATH_A2DP; C:\Windows\System32\drivers\btath_a2dp.sys [290976 2011-09-17] (Atheros)
S3 btath_avdt; C:\Windows\System32\drivers\btath_avdt.sys [97440 2011-09-17] (Atheros)
R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [25248 2011-09-17] (Atheros)
S3 BTATH_HCRP; C:\Windows\System32\DRIVERS\btath_hcrp.sys [147616 2011-09-17] (Atheros)
S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [60064 2011-09-17] (Atheros)
S3 BTATH_RCP; C:\Windows\System32\DRIVERS\btath_rcp.sys [263968 2011-09-17] (Atheros)
S3 BtFilter; C:\Windows\System32\DRIVERS\btfilter.sys [440992 2011-09-17] (Atheros)
R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [21600 2012-07-18] (Egis Technology Inc.)
R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16936 2012-07-18] (Egis Technology Inc.)
R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [62240 2012-07-18] (Egis Technology Inc.)
S3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [254056 2011-05-30] (Realtek Semiconductor Corp.)
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [102784 2013-12-26] (Huawei Technologies Co., Ltd.)
U3 pwqyqkoc; \??\C:\Users\GOSIAC~1\AppData\Local\Temp\pwqyqkoc.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-18 11:30 - 2014-10-18 11:30 - 00028930 _____ () C:\Users\Gosiaczek\Desktop\FRST.txt
2014-10-18 11:30 - 2014-10-18 11:30 - 00027402 _____ () C:\Users\Gosiaczek\Desktop\Addition.txt
2014-10-18 11:29 - 2014-10-18 11:29 - 00027337 _____ () C:\Users\Gosiaczek\Downloads\Shortcut.txt
2014-10-18 11:29 - 2014-10-18 11:29 - 00027337 _____ () C:\Users\Gosiaczek\Desktop\Shortcut.txt
2014-10-18 11:26 - 2014-10-18 11:29 - 00027402 _____ () C:\Users\Gosiaczek\Downloads\Addition.txt
2014-10-18 11:23 - 2014-10-18 11:31 - 00019933 _____ () C:\Users\Gosiaczek\Downloads\FRST.txt
2014-10-18 11:23 - 2014-10-18 11:29 - 00000000 ____D () C:\FRST
2014-10-18 11:18 - 2014-10-18 11:22 - 01102848 _____ (Farbar) C:\Users\Gosiaczek\Downloads\FRST.exe
2014-10-18 11:15 - 2014-10-18 11:17 - 00602112 _____ (OldTimer Tools) C:\Users\Gosiaczek\Downloads\OTL.exe
2014-10-18 11:15 - 2014-10-18 11:17 - 00380416 _____ () C:\Users\Gosiaczek\Downloads\mxoe50en.exe
2014-10-18 11:05 - 2014-10-18 11:05 - 00000000 ____D () C:\skanery
2014-10-17 12:13 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-17 12:13 - 2014-07-17 03:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-17 12:13 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-17 12:13 - 2014-07-17 03:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-17 12:13 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-17 12:13 - 2014-07-17 03:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-17 12:13 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-17 12:13 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-17 12:13 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-17 12:13 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-17 12:13 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-17 12:13 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-10-17 12:13 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-10-17 12:13 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-10-17 12:13 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-10-17 11:55 - 2014-10-17 11:55 - 00131072 ____N () C:\Windows\Minidump\101714-81650-01.dmp
2014-10-16 20:22 - 2014-09-29 02:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 20:08 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 20:08 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 20:08 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 20:08 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 20:04 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-14 00:26 - 2012-06-01 06:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2014-10-14 00:26 - 2012-06-01 06:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2014-10-14 00:26 - 2012-06-01 06:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2014-10-14 00:26 - 2012-06-01 06:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2014-10-14 00:26 - 2012-06-01 06:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2014-10-14 00:25 - 2012-06-01 06:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2014-10-13 22:15 - 2014-10-14 10:05 - 00024820 _____ () C:\Windows\iis7.log
2014-10-13 22:15 - 2014-10-13 22:15 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-10-13 22:15 - 2014-10-13 22:15 - 00000000 ____D () C:\inetpub
2014-10-07 20:15 - 2014-10-07 20:15 - 00000000 ____D () C:\Users\Gosiaczek\AppData\Roaming\Windows Live Writer
2014-10-07 20:15 - 2014-10-07 20:15 - 00000000 ____D () C:\Users\Gosiaczek\AppData\Local\Windows Live Writer
2014-09-25 10:48 - 2014-09-25 10:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-19 20:56 - 2014-09-26 18:00 - 00000000 ____D () C:\Program Files\Mozilla Firefox.bak

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-18 11:29 - 2012-09-21 10:45 - 01155377 _____ () C:\Windows\WindowsUpdate.log
2014-10-18 11:26 - 2013-08-15 22:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-18 11:21 - 2013-06-02 12:36 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-18 11:11 - 2009-07-14 06:34 - 00016160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-18 11:11 - 2009-07-14 06:34 - 00016160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-18 11:09 - 2013-06-16 21:43 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-18 11:03 - 2013-06-02 12:36 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-18 11:02 - 2014-06-20 10:42 - 00017082 _____ () C:\Windows\setupact.log
2014-10-18 11:02 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-18 00:51 - 2013-09-02 13:35 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-18 00:36 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-17 14:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-10-17 12:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-17 11:56 - 2013-12-08 14:33 - 00000000 ____D () C:\Windows\Minidump
2014-10-17 11:56 - 2009-07-14 06:33 - 00266064 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-17 11:54 - 2012-09-21 11:37 - 00740762 _____ () C:\Windows\system32\perfh015.dat
2014-10-17 11:54 - 2012-09-21 11:37 - 00154092 _____ () C:\Windows\system32\perfc015.dat
2014-10-17 11:54 - 2010-11-20 23:01 - 01696802 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-14 09:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-10-14 00:27 - 2012-07-18 10:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-10-08 15:53 - 2014-03-09 09:57 - 00002099 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-08 14:51 - 2009-07-14 06:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-06 23:51 - 2013-04-13 14:53 - 00000000 ____D () C:\Users\Gosiaczek\AppData\Roaming\Skype
2014-09-27 13:46 - 2013-04-13 09:35 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-27 13:46 - 2010-11-20 23:48 - 00183810 _____ () C:\Windows\PFRO.log
2014-09-25 10:28 - 2013-04-19 21:40 - 00000000 ____D () C:\Users\Gosiaczek\AppData\Local\CrashDumps
2014-09-24 22:52 - 2012-07-18 10:49 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-24 22:52 - 2012-07-18 10:49 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Gosiaczek\AppData\Local\Temp\DataCard_Setup.exe
C:\Users\Gosiaczek\AppData\Local\Temp\ResetDevice.exe
C:\Users\Gosiaczek\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-05-16 04:20

==================== End Of Log ============================