Scan result of Farbar Recovery Scan Tool Version: 16-07-2012 02 Ran by SYSTEM at 19-07-2012 09:57:38 Running from F:\ Windows 7 Home Premium (X64) OS Language: English(US) The current controlset is ControlSet001 ========================== Registry (Whitelisted) ============= HKLM\...\Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe [3217056 2010-04-01] (Dell Inc.) HKLM\...\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe [166424 2010-04-07] (Intel Corporation) HKLM\...\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe [391192 2010-04-07] (Intel Corporation) HKLM\...\Run: [Persistence] C:\Windows\system32\igfxpers.exe [413720 2010-04-07] (Intel Corporation) HKLM-x32\...\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" [74752 2011-03-22] (Nullsoft, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254696 2012-01-18] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [] [x] HKLM-x32\...\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" [1391272 2012-01-03] (Ask) HKLM-x32\...\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [31016 2006-10-26] (Microsoft Corporation) HKU\dell\...\Run: [Gadu-Gadu 10] "C:\Program Files (x86)\Gadu-Gadu 10\gg.exe" [13374048 2011-07-04] (GG Network S.A.) HKU\dell\...\Run: [ALLUpdate] "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep" [1362944 2011-02-07] () HKU\dell\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3671872 2012-04-17] (DT Soft Ltd) HKU\dell\...\Run: [taskschd] C:\Users\dell\AppData\Local\Microsoft\Windows\2961\taskschd.exe [49152 2012-07-06] () Winlogon\Notify\igfxcui: igfxdev.dll (Intel Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 ==================== Services (Whitelisted) ====== 3 BITCOMET_HELPER_SERVICE; C:\Program Files (x86)\BitComet\tools\BitCometService.exe -service [1296728 2010-12-28] (www.BitComet.com) 2 UNS; "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" [2320920 2009-09-30] (Intel Corporation) ========================== Drivers (Whitelisted) ============= 1 dtsoftbus01; C:\Windows\System32\Drivers\dtsoftbus01.sys [283200 2012-06-12] (DT Soft Ltd) ========================== NetSvcs (Whitelisted) =========== ============ One Month Created Files and Folders ============== 2012-07-06 04:55 - 2012-07-06 04:55 - 00000000 ____D C:\Users\dell\AppData\Roaming\hellomoto 2012-07-06 02:21 - 2012-07-06 02:21 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf 2012-07-05 08:45 - 2012-07-05 08:45 - 00000000 ____D C:\Users\dell\Desktop\Nowy folder 2012-07-05 08:44 - 2012-07-05 10:17 - 00040448 __ASH C:\Users\dell\Desktop\Thumbs.db 2012-07-05 08:44 - 2012-07-05 08:44 - 00020202 ____A C:\Users\dell\Downloads\aac6e83853.jpeg 2012-07-03 05:35 - 2012-07-03 05:35 - 00000000 ___HD C:\Windows\AxInstSV 2012-07-02 10:02 - 2012-07-02 10:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Works 2012-07-02 10:01 - 2012-07-02 10:01 - 00000000 ____D C:\Windows\PCHEALTH 2012-07-02 10:01 - 2012-07-02 10:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 2012-07-02 09:59 - 2012-07-02 09:59 - 00000000 ____D C:\Program Files\Microsoft Office 2012-07-02 09:59 - 2012-07-02 09:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8 2012-07-02 09:58 - 2012-07-02 10:03 - 00000000 ____D C:\Users\All Users\Microsoft Help 2012-07-02 09:58 - 2012-07-02 10:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2012-07-02 09:58 - 2012-07-02 09:58 - 00000000 ____D C:\Users\dell\AppData\Local\Microsoft Help 2012-07-02 09:57 - 2012-07-02 09:57 - 00000000 __RHD C:\MSOCache 2012-06-27 03:46 - 2012-07-03 05:37 - 00000000 ____D C:\Users\dell\AppData\Roaming\BitComet 2012-06-27 03:46 - 2012-06-27 03:46 - 00000967 ____A C:\Users\Public\Desktop\BitComet.lnk 2012-06-27 03:46 - 2012-06-27 03:46 - 00000000 ____D C:\Program Files (x86)\BitComet 2012-06-27 03:45 - 2012-06-27 03:45 - 09505616 ____A C:\Users\dell\Downloads\BitComet_1.32_x86_setup.exe 2012-06-25 09:36 - 2012-06-25 09:36 - 00000963 ____A C:\Users\Public\Desktop\Gadu-Gadu 10.lnk 2012-06-25 09:34 - 2012-06-25 09:35 - 26809048 ____A C:\Users\dell\Downloads\gg10.exe 2012-06-25 07:48 - 2012-06-25 07:48 - 00000000 ____D C:\Program Files (x86)\Valve 2012-06-25 07:15 - 2011-10-04 06:36 - 00001138 ____A C:\Users\dell\Desktop\Mozilla Firefox.lnk 2012-06-25 04:40 - 2012-06-02 14:19 - 02428952 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll 2012-06-25 04:40 - 2012-06-02 14:19 - 00701976 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll 2012-06-25 04:40 - 2012-06-02 14:19 - 00057880 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe 2012-06-25 04:40 - 2012-06-02 14:19 - 00044056 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll 2012-06-25 04:40 - 2012-06-02 14:19 - 00038424 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll 2012-06-25 04:40 - 2012-06-02 14:15 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll 2012-06-25 04:40 - 2012-06-02 14:15 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll 2012-06-25 04:40 - 2012-06-02 05:19 - 00186752 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll 2012-06-25 04:40 - 2012-06-02 05:15 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe 2012-06-25 03:26 - 2012-05-17 18:47 - 17807360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2012-06-25 03:26 - 2012-05-17 18:16 - 10924032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2012-06-25 03:26 - 2012-05-17 18:06 - 02311680 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2012-06-25 03:26 - 2012-05-17 17:59 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2012-06-25 03:26 - 2012-05-17 17:59 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2012-06-25 03:26 - 2012-05-17 17:58 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2012-06-25 03:26 - 2012-05-17 17:58 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2012-06-25 03:26 - 2012-05-17 17:56 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2012-06-25 03:26 - 2012-05-17 17:55 - 00818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2012-06-25 03:26 - 2012-05-17 17:55 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2012-06-25 03:26 - 2012-05-17 17:54 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2012-06-25 03:26 - 2012-05-17 17:51 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2012-06-25 03:26 - 2012-05-17 17:51 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2012-06-25 03:26 - 2012-05-17 17:47 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2012-06-25 03:26 - 2012-05-17 15:11 - 12314624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2012-06-25 03:26 - 2012-05-17 14:48 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2012-06-25 03:26 - 2012-05-17 14:45 - 01800192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2012-06-25 03:26 - 2012-05-17 14:36 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2012-06-25 03:26 - 2012-05-17 14:35 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2012-06-25 03:26 - 2012-05-17 14:35 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2012-06-25 03:26 - 2012-05-17 14:33 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2012-06-25 03:26 - 2012-05-17 14:31 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2012-06-25 03:26 - 2012-05-17 14:29 - 00716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2012-06-25 03:26 - 2012-05-17 14:29 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2012-06-25 03:26 - 2012-05-17 14:27 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2012-06-25 03:26 - 2012-05-17 14:25 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2012-06-25 03:26 - 2012-05-17 14:24 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2012-06-25 03:26 - 2012-05-17 14:20 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2012-06-24 08:51 - 2012-05-14 17:32 - 03144192 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2012-06-24 08:51 - 2012-05-04 02:52 - 05505392 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2012-06-24 08:51 - 2012-05-04 02:08 - 03958128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2012-06-24 08:51 - 2012-05-04 02:08 - 03902320 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2012-06-24 08:51 - 2012-05-01 21:32 - 00208896 ____A (Microsoft Corporation) C:\Windows\System32\profsvc.dll 2012-06-24 08:51 - 2012-04-27 19:50 - 00204800 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys 2012-06-24 08:51 - 2012-04-25 21:34 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll 2012-06-24 08:51 - 2012-04-25 21:34 - 00076288 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll 2012-06-24 08:51 - 2012-04-25 21:28 - 00009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe 2012-06-24 08:51 - 2012-04-23 21:59 - 01460224 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2012-06-24 08:51 - 2012-04-23 21:59 - 00182272 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2012-06-24 08:51 - 2012-04-23 21:59 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2012-06-24 08:51 - 2012-04-23 20:47 - 01156608 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2012-06-24 08:51 - 2012-04-23 20:47 - 00139264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2012-06-24 08:51 - 2012-04-23 20:47 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2012-06-24 08:51 - 2012-04-07 04:18 - 03213824 ____A (Microsoft Corporation) C:\Windows\System32\msi.dll 2012-06-24 08:51 - 2012-04-07 03:34 - 02342400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll ============ 3 Months Modified Files ======================== 2012-07-18 23:49 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2012-07-18 23:49 - 2009-07-13 20:51 - 00047253 ____A C:\Windows\setupact.log 2012-07-18 03:18 - 2011-06-16 07:52 - 01273069 ____A C:\Windows\WindowsUpdate.log 2012-07-12 03:29 - 2011-06-16 17:47 - 00710544 ____A C:\Windows\System32\perfh015.dat 2012-07-12 03:29 - 2011-06-16 17:47 - 00139426 ____A C:\Windows\System32\perfc015.dat 2012-07-12 03:29 - 2009-07-13 21:13 - 01576452 ____A C:\Windows\System32\PerfStringBackup.INI 2012-07-06 02:21 - 2012-07-06 02:21 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf 2012-07-05 22:36 - 2009-07-13 20:45 - 00014240 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2012-07-05 22:36 - 2009-07-13 20:45 - 00014240 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2012-07-05 10:17 - 2012-07-05 08:44 - 00040448 __ASH C:\Users\dell\Desktop\Thumbs.db 2012-07-05 08:44 - 2012-07-05 08:44 - 00020202 ____A C:\Users\dell\Downloads\aac6e83853.jpeg 2012-07-03 11:27 - 2009-07-13 21:08 - 00032608 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2012-07-02 23:51 - 2011-06-24 02:41 - 00001806 ____A C:\Windows\PFRO.log 2012-07-02 23:51 - 2009-07-13 20:45 - 00421184 ____A C:\Windows\System32\FNTCACHE.DAT 2012-07-02 10:03 - 2011-06-22 08:48 - 00109744 ____A C:\Users\dell\AppData\Local\GDIPFONTCACHEV1.DAT 2012-07-02 09:58 - 2009-07-13 18:34 - 00000478 ____A C:\Windows\win.ini 2012-06-27 03:46 - 2012-06-27 03:46 - 00000967 ____A C:\Users\Public\Desktop\BitComet.lnk 2012-06-27 03:45 - 2012-06-27 03:45 - 09505616 ____A C:\Users\dell\Downloads\BitComet_1.32_x86_setup.exe 2012-06-25 09:36 - 2012-06-25 09:36 - 00000963 ____A C:\Users\Public\Desktop\Gadu-Gadu 10.lnk 2012-06-25 09:36 - 2011-06-23 05:39 - 00000992 ____A C:\Users\Public\Desktop\OpenFM.lnk 2012-06-25 09:35 - 2012-06-25 09:34 - 26809048 ____A C:\Users\dell\Downloads\gg10.exe 2012-06-25 04:06 - 2011-11-05 07:48 - 00000030 ____A C:\Windows\TextSpy.ini 2012-06-24 08:48 - 2011-06-30 18:29 - 58957832 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2012-06-12 06:49 - 2012-06-12 06:49 - 00001447 ____A C:\Users\Public\Desktop\Heroes of Might & Magic V - Kuznia Przeznaczenia.lnk 2012-06-12 06:45 - 2012-06-12 06:44 - 00283200 ____A (DT Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys 2012-06-12 06:44 - 2012-06-12 06:44 - 00001910 ____A C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2012-06-06 05:41 - 2012-06-06 05:41 - 00476960 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\npdeployJava1.dll 2012-06-06 05:41 - 2012-06-06 05:41 - 00157472 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe 2012-06-06 05:41 - 2012-06-06 05:41 - 00149280 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe 2012-06-06 05:41 - 2012-06-06 05:41 - 00149280 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe 2012-06-06 05:41 - 2011-06-23 05:33 - 00472864 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\deployJava1.dll 2012-06-02 14:19 - 2012-06-25 04:40 - 02428952 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll 2012-06-02 14:19 - 2012-06-25 04:40 - 00701976 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll 2012-06-02 14:19 - 2012-06-25 04:40 - 00057880 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe 2012-06-02 14:19 - 2012-06-25 04:40 - 00044056 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll 2012-06-02 14:19 - 2012-06-25 04:40 - 00038424 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll 2012-06-02 14:15 - 2012-06-25 04:40 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll 2012-06-02 14:15 - 2012-06-25 04:40 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll 2012-06-02 05:19 - 2012-06-25 04:40 - 00186752 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll 2012-06-02 05:15 - 2012-06-25 04:40 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe 2012-05-17 18:47 - 2012-06-25 03:26 - 17807360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2012-05-17 18:16 - 2012-06-25 03:26 - 10924032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2012-05-17 18:06 - 2012-06-25 03:26 - 02311680 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2012-05-17 17:59 - 2012-06-25 03:26 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2012-05-17 17:59 - 2012-06-25 03:26 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2012-05-17 17:58 - 2012-06-25 03:26 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2012-05-17 17:58 - 2012-06-25 03:26 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2012-05-17 17:56 - 2012-06-25 03:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2012-05-17 17:55 - 2012-06-25 03:26 - 00818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2012-05-17 17:55 - 2012-06-25 03:26 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2012-05-17 17:54 - 2012-06-25 03:26 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2012-05-17 17:51 - 2012-06-25 03:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2012-05-17 17:51 - 2012-06-25 03:26 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2012-05-17 17:47 - 2012-06-25 03:26 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2012-05-17 15:11 - 2012-06-25 03:26 - 12314624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2012-05-17 14:48 - 2012-06-25 03:26 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2012-05-17 14:45 - 2012-06-25 03:26 - 01800192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2012-05-17 14:36 - 2012-06-25 03:26 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2012-05-17 14:35 - 2012-06-25 03:26 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2012-05-17 14:35 - 2012-06-25 03:26 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2012-05-17 14:33 - 2012-06-25 03:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2012-05-17 14:31 - 2012-06-25 03:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2012-05-17 14:29 - 2012-06-25 03:26 - 00716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2012-05-17 14:29 - 2012-06-25 03:26 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2012-05-17 14:27 - 2012-06-25 03:26 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2012-05-17 14:25 - 2012-06-25 03:26 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2012-05-17 14:24 - 2012-06-25 03:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2012-05-17 14:20 - 2012-06-25 03:26 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2012-05-14 17:32 - 2012-06-24 08:51 - 03144192 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2012-05-04 02:52 - 2012-06-24 08:51 - 05505392 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2012-05-04 02:08 - 2012-06-24 08:51 - 03958128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2012-05-04 02:08 - 2012-06-24 08:51 - 03902320 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2012-05-01 21:32 - 2012-06-24 08:51 - 00208896 ____A (Microsoft Corporation) C:\Windows\System32\profsvc.dll 2012-04-27 19:50 - 2012-06-24 08:51 - 00204800 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys 2012-04-25 21:34 - 2012-06-24 08:51 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll 2012-04-25 21:34 - 2012-06-24 08:51 - 00076288 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll 2012-04-25 21:28 - 2012-06-24 08:51 - 00009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe 2012-04-23 21:59 - 2012-06-24 08:51 - 01460224 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2012-04-23 21:59 - 2012-06-24 08:51 - 00182272 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2012-04-23 21:59 - 2012-06-24 08:51 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2012-04-23 20:47 - 2012-06-24 08:51 - 01156608 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2012-04-23 20:47 - 2012-06-24 08:51 - 00139264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2012-04-23 20:47 - 2012-06-24 08:51 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll ========================= Known DLLs (Whitelisted) ============ ========================= Bamital & volsnap Check ============ C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ========================= Memory info ====================== Percentage of memory in use: 25% Total physical RAM: 2932.52 MB Available physical RAM: 2170.13 MB Total Pagefile: 2930.67 MB Available Pagefile: 2153.83 MB Total Virtual: 8192 MB Available Virtual: 8191.9 MB ======================= Partitions ========================= 1 Drive c: () (Fixed) (Total:297.99 GB) (Free:253.07 GB) NTFS 3 Drive f: () (Removable) (Total:7.46 GB) (Free:7.46 GB) FAT32 5 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS 6 Drive y: (Zastrzezone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] Nr dysku Stan Rozmiar Wolne Dyn GPT -------- ------------- ------- ------- --- --- Dysk 0 Online 298 GB 0 B Dysk 1 Brak nosnika 0 B 0 B Dysk 2 Online 7656 MB 0 B Trwa opuszczanie programu DiskPart... ========================================================== Last Boot: 2012-06-28 06:48 ======================= End Of Log ==========================