Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-08-2013
Ran by Gigi (administrator) on 26-08-2013 16:09:02
Running from C:\Users\Gigi\Downloads
Windows 7 Enterprise (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(cFos Software GmbH) C:\Program Files\cFosSpeed\spd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.177\deploy\LoLLauncher.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [x]
HKCU\...\Policies\system: [NoDispCPL] 0
MountPoints2: {e78167de-d90d-11e2-8ed5-001d7d5b49cd} - F:\setup.exe AUTORUN=1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Winsock: Catalog9 01 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9 02 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9 03 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9 04 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9 15 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9-x64 01 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Winsock: Catalog9-x64 02 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Winsock: Catalog9-x64 03 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Winsock: Catalog9-x64 04 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Winsock: Catalog9-x64 15 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Tcpip\Parameters: [DhcpNameServer] 89.228.8.18 192.168.66.6

FireFox:
========
FF ProfilePath: C:\Users\Gigi\AppData\Roaming\Mozilla\Firefox\Profiles\4nzjohcu.default
FF Homepage: hxxp://signup.leagueoflegends.com/pl/signup/redownload
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=11.0.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Gigi\AppData\Roaming\Mozilla\Firefox\Profiles\4nzjohcu.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qvo6.xml
FF Extension: jid1-vW9nopuIAJiRHw - C:\Users\Gigi\AppData\Roaming\Mozilla\Firefox\Profiles\4nzjohcu.default\Extensions\jid1-vW9nopuIAJiRHw@jetpack.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Docs) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Delta Toolbar) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4_0
CHR Extension: (Free Smileys & Emoticons) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl\3.0.15.0_0
CHR Extension: (Web Cake) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh\1.0.3_0
CHR Extension: (Gmail) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [480096 2013-04-19] (cFos Software GmbH)
S2 Hamachi2Svc; "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s [x]
S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService [x]
S2 vToolbarUpdater15.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [x]

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-06-27] (AVG Technologies)
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2011-01-20] (Devguru Co., Ltd)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-06-20] (Duplex Secure Ltd.)
R1 StarPortLite; C:\Windows\System32\DRIVERS\StarPortLite.sys [120704 2013-02-04] (StarWind Software)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [x]
S1 StarOpen; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-26 16:08 - 2013-08-26 16:08 - 00000000 ____D C:\FRST
2013-08-26 14:15 - 2013-08-26 14:15 - 00059348 _____ C:\Users\Gigi\Desktop\Extras.Txt
2013-08-26 14:14 - 2013-08-26 14:26 - 00021677 _____ C:\Users\Gigi\Desktop\GMER.txt
2013-08-26 14:13 - 2013-08-26 14:13 - 02573446 _____ C:\Users\Gigi\Desktop\OTL.Txt
2013-08-26 14:08 - 2013-08-26 14:08 - 00377856 _____ C:\Users\Gigi\Desktop\16c9htfl.exe
2013-08-26 14:05 - 2013-08-26 14:05 - 00602112 _____ (OldTimer Tools) C:\Users\Gigi\Desktop\OTL.scr
2013-08-26 14:03 - 2013-08-26 14:07 - 01403212 _____ C:\Users\Gigi\Downloads\BDDnsChangerDetector.zip
2013-08-26 12:12 - 2013-08-26 12:12 - 00303336 _____ C:\Users\Gigi\Downloads\revo_uninstaller_pro_serial_key_527.exe
2013-08-26 12:01 - 2013-08-26 12:01 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Macromedia
2013-08-25 20:20 - 2013-08-25 20:20 - 00002816 _____ C:\Windows\windefendam.log
2013-08-25 20:07 - 2013-08-25 20:07 - 00000000 ____D C:\Users\Gigi\AppData\Local\Gas Powered Games
2013-08-25 19:51 - 2013-08-25 19:51 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-08-25 19:40 - 2013-08-25 19:41 - 00000000 ____D C:\Users\Gigi\AppData\Local\Avg2013
2013-08-25 19:39 - 2013-08-25 19:39 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\TuneUp Software
2013-08-25 19:37 - 2013-08-26 12:13 - 00000000 ____D C:\Users\Gigi\Desktop\Revo Uninstaller Pro 2.4.1 64bit
2013-08-25 19:33 - 2013-08-25 19:34 - 07180188 _____ C:\Users\Gigi\Downloads\Revo Uninstaller Pro 2.4.1 64bit.rar
2013-08-25 19:33 - 2013-08-25 19:33 - 03016667 _____ C:\Users\Gigi\Downloads\crack_64bit.rar
2013-08-25 19:30 - 2013-08-25 19:30 - 00024228 _____ C:\Users\Gigi\Downloads\keygen.rar
2013-08-25 19:30 - 2013-08-25 19:30 - 00000256 _____ C:\Users\Gigi\Desktop\license.dat
2013-08-25 19:28 - 2013-08-26 12:12 - 00000973 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-08-25 19:28 - 2013-08-25 19:28 - 00000000 ____D C:\Program Files\VS Revo Group
2013-08-25 19:28 - 2009-12-30 12:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2013-08-25 19:27 - 2013-08-25 19:27 - 10031224 _____ (VS Revo Group                                               ) C:\Users\Gigi\Downloads\RevoUninProSetup.exe
2013-08-25 15:19 - 2013-08-25 15:19 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Adobe
2013-08-25 15:09 - 2013-08-25 15:10 - 00204496 _____ (Malwarebytes) C:\Users\Gigi\Downloads\startuplite-setup-1.07.exe
2013-08-25 15:02 - 2013-08-25 15:02 - 00000000 ____D C:\Users\Gigi\Desktop\mbam-chameleon-1.62.1.1000
2013-08-25 15:02 - 2013-08-25 15:00 - 01440846 _____ C:\Users\Gigi\Desktop\mbam-chameleon-1.62.1.1000.zip
2013-08-25 15:01 - 2013-08-25 15:20 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-25 15:01 - 2012-08-15 08:48 - 00218184 _____ C:\Users\Gigi\Desktop\firefox.exe
2013-08-25 15:00 - 2013-08-25 15:00 - 01440846 _____ C:\Users\Gigi\Downloads\mbam-chameleon-1.62.1.1000.zip
2013-08-25 14:55 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\Nowy folder
2013-08-25 14:55 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\mba
2013-08-25 14:54 - 2013-08-25 15:20 - 00000000 ____D C:\Users\Gigi\Desktop\mbar
2013-08-25 14:54 - 2013-08-25 14:54 - 12907592 _____ (Malwarebytes Corp.) C:\Users\Gigi\Downloads\mbar-1.07.0.1005.exe
2013-08-25 14:25 - 2013-08-26 13:39 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-25 14:25 - 2013-08-25 14:39 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-25 14:20 - 2013-08-25 14:20 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-08-25 14:20 - 2013-08-25 14:20 - 00000000 ____D C:\Riot Games
2013-08-25 14:09 - 2013-08-25 14:21 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Riot Games
2013-08-25 14:01 - 2013-08-25 14:09 - 34249488 _____ (Riot Games) C:\Users\Gigi\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe
2013-08-24 19:08 - 2013-08-26 14:36 - 00028914 _____ C:\Windows\WindowsUpdate.log
2013-08-24 19:05 - 2013-08-26 11:59 - 00013958 _____ C:\Windows\PFRO.log
2013-08-24 18:58 - 2013-08-26 15:53 - 00000896 _____ C:\Windows\setupact.log
2013-08-24 17:45 - 2013-08-24 17:45 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-08-24 17:43 - 2013-07-18 14:32 - 00319456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DIFx7f7c.rra
2013-08-24 17:43 - 2013-07-18 14:32 - 00020032 _____ (Devguru Co., Ltd) C:\Windows\SysWOW64\Drivers\dgderdrv.sys
2013-08-24 17:43 - 2013-06-14 19:56 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\avrt7fe9.rra
2013-08-24 16:59 - 2013-08-26 15:59 - 00000286 _____ C:\Windows\Tasks\Dealply.job
2013-08-24 16:59 - 2013-08-24 16:59 - 00003234 _____ C:\Windows\System32\Tasks\Dealply
2013-08-24 16:59 - 2013-08-24 16:59 - 00000000 ____D C:\Users\Gigi\AppData\Local\DealPlyLive
2013-08-24 16:10 - 2013-08-24 17:54 - 00000000 ____D C:\Users\Gigi\AppData\Local\Samsung
2013-08-24 16:10 - 2013-08-24 16:10 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-08-24 16:02 - 2013-08-24 16:02 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-08-24 15:52 - 2013-07-18 14:33 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2013-08-24 15:51 - 2013-08-24 15:51 - 00000000 ____D C:\Program Files\cFosSpeed
2013-08-24 15:51 - 2013-04-19 16:46 - 01736544 _____ (cFos Software GmbH) C:\Windows\system32\Drivers\cfosspeed6.sys
2013-08-24 15:50 - 2013-08-24 15:50 - 00000000 ____D C:\Users\Gigi\AppData\Local\cFos
2013-08-24 15:50 - 2013-08-24 15:50 - 00000000 ____D C:\ProgramData\cFos
2013-08-24 11:11 - 2013-08-24 16:44 - 00000000 _____ C:\ProgramData\LauncherAccess.dt
2013-08-23 22:26 - 2013-08-23 22:26 - 00000984 _____ C:\Users\Public\Desktop\Samsung PC Studio 3.lnk
2013-08-23 22:26 - 2006-07-24 16:05 - 00005632 _____ C:\Windows\SysWOW64\Drivers\StarOpen.sys
2013-08-23 21:26 - 2013-08-23 21:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-23 21:11 - 2013-08-23 22:25 - 00000000 ____D C:\Users\Gigi\Documents\Optimizer Pro
2013-08-23 21:04 - 2013-08-23 21:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Windows OneCare Live
2013-08-23 20:59 - 2013-08-23 20:59 - 00021210 _____ C:\AdwCleaner[S7].txt
2013-08-23 20:58 - 2013-08-23 20:58 - 00022665 _____ C:\AdwCleaner[R7].txt
2013-08-23 20:55 - 2013-08-23 20:55 - 00017532 _____ C:\AdwCleaner[R6].txt
2013-08-21 14:15 - 2013-08-21 14:15 - 00001724 _____ C:\Users\Public\Desktop\Defraggler.lnk
2013-08-21 14:15 - 2013-08-21 14:15 - 00000000 ____D C:\Program Files\Defraggler
2013-08-18 19:42 - 2013-08-18 19:43 - 00000000 ____D C:\Users\Gigi\Desktop\222
2013-08-15 17:17 - 2013-08-15 17:17 - 00000000 ____D C:\Users\Gigi\Documents\Moje gry
2013-08-15 16:55 - 2013-08-15 16:55 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supreme Commander 2
2013-08-15 16:46 - 2013-08-23 22:26 - 00000000 ____D C:\Program Files (x86)\Supreme Commander 2
2013-08-14 10:40 - 2013-08-14 10:40 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-08-14 09:00 - 2013-08-14 09:00 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-08-14 09:00 - 2013-08-14 09:00 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-08-12 13:56 - 2013-08-12 13:56 - 00000000 ____D C:\Users\Gigi\AppData\Local\BlackHawk
2013-08-12 13:54 - 2013-08-12 13:54 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 00000000 ____D C:\Users\Gigi\AppData\Local\Comodo
2013-08-12 13:47 - 2013-08-12 13:47 - 00001133 _____ C:\Users\Public\Desktop\Opera.lnk
2013-08-12 13:47 - 2013-08-12 13:47 - 00000000 ____D C:\Users\Gigi\AppData\Local\Opera Software
2013-08-12 13:44 - 2013-08-12 13:47 - 00000000 ____D C:\Users\Gigi\AppData\Local\Google
2013-08-12 13:41 - 2013-08-23 21:26 - 00001355 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-12 13:40 - 2013-08-23 20:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-12 12:11 - 2013-08-12 12:11 - 00000000 ____D C:\Users\Gigi\Documents\LOLReplay
2013-08-10 20:56 - 2013-08-10 20:56 - 00000000 ____D C:\Users\Gigi\Documents\RPGVX
2013-08-08 10:26 - 2007-12-11 23:06 - 02073088 _____ (NVIDIA Corporation) C:\Windows\system32\nvcplui.exe
2013-08-08 10:26 - 2007-12-11 23:06 - 01064448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpluir.dll
2013-08-08 10:26 - 2007-12-11 23:06 - 00403968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.cpl
2013-08-08 10:26 - 2007-12-11 23:06 - 00381952 _____ (NVIDIA Corporation) C:\Windows\system32\nvexpbar.dll
2013-08-08 10:25 - 2007-12-11 19:44 - 00372736 _____ (NVIDIA Corporation) C:\Windows\system32\NVUNINST.EXE
2013-08-08 10:24 - 2013-08-08 10:24 - 00472576 _____ () C:\Windows\Nvidia Omega Drivers v1.169.25 Uninstall.exe
2013-08-08 10:24 - 2007-12-18 16:48 - 00159458 _____ C:\Windows\SysWOW64\nvapps.xml
2013-08-08 10:24 - 2007-12-18 16:48 - 00159458 _____ C:\Windows\system32\nvapps.xml
2013-08-08 10:24 - 2007-12-11 23:06 - 10818592 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 10185504 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-08-08 10:24 - 2007-12-11 23:06 - 09711104 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 07421440 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 07098368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 06868480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdisps.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 05602304 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispsr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 05042176 _____ (NVIDIA Corporation) C:\Windows\system32\nvgames.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 04228096 _____ (NVIDIA Corporation) C:\Windows\system32\nvvitvs.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 03706880 _____ (NVIDIA Corporation) C:\Windows\system32\nvvitvsr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 03322880 _____ (NVIDIA Corporation) C:\Windows\system32\nvgamesr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 03005952 _____ (NVIDIA Corporation) C:\Windows\system32\nvwss.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 02846208 _____ (NVIDIA Corporation) C:\Windows\system32\nvmoblsr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 02510848 _____ (NVIDIA Corporation) C:\Windows\system32\nvwssr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 01830912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 01594368 _____ (NVIDIA Corporation) C:\Windows\system32\nvmobls.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00930272 _____ (Microsoft Corporation) C:\Windows\system32\dpinst.exe
2013-08-08 10:24 - 2007-12-11 23:06 - 00448512 _____ (NVIDIA Corporation) C:\Windows\system32\nvmccssr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00372736 _____ (NVIDIA Corporation) C:\Windows\system32\nvudisp.exe
2013-08-08 10:24 - 2007-12-11 23:06 - 00283136 _____ (NVIDIA Corporation) C:\Windows\system32\nvmccss.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00258560 _____ (NVIDIA Corporation) C:\Windows\system32\nvmccs.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00174080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcolor.exe
2013-08-08 10:24 - 2007-12-11 23:06 - 00041472 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod100.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00041472 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00035328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmccsrs.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00019958 _____ C:\Windows\system32\nvwsapps.xml
2013-08-08 10:24 - 2007-12-11 23:06 - 00007181 _____ C:\Windows\system32\nvdisp.nvu
2013-08-06 22:36 - 2013-08-06 22:36 - 00001972 _____ C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
2013-08-06 22:29 - 2013-08-06 22:29 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2013-08-06 09:11 - 2013-08-06 09:11 - 00000855 _____ C:\Users\Gigi\Desktop\µTorrent.lnk
2013-08-06 09:11 - 2013-08-06 09:11 - 00000835 _____ C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-08-06 09:07 - 2013-08-06 09:07 - 00000000 ____D C:\Users\Gigi\Documents\Add-in Express
2013-08-04 12:59 - 2013-08-04 13:00 - 00000000 ____D C:\Users\Gigi\AppData\Local\Play withSIX
2013-08-04 12:59 - 2013-08-04 12:59 - 00000000 ____D C:\Users\Gigi\AppData\Local\IsolatedStorage
2013-08-04 12:58 - 2013-08-24 17:40 - 00000000 ____D C:\Users\Gigi\AppData\Local\Downloaded Installations
2013-07-31 17:06 - 2013-07-31 17:06 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-31 17:06 - 2013-07-31 17:06 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-29 16:12 - 2013-08-25 20:20 - 00000020 _____ C:\Windows\capsys184523.log
2013-07-29 14:46 - 2013-08-23 22:26 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-29 14:45 - 2013-07-29 14:45 - 00003394 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-29 14:45 - 2013-07-29 14:45 - 00000000 ____D C:\Users\Gigi\AppData\Local\Minibar
2013-07-29 14:44 - 2013-08-12 12:12 - 00000000 ____D C:\Users\Gigi\AppData\Local\Lollipop
2013-07-29 14:35 - 2013-07-29 14:39 - 00000354 _____ C:\Users\Gigi\.drjava

==================== One Month Modified Files and Folders =======

2013-08-26 16:08 - 2013-08-26 16:08 - 01577068 _____ (Farbar) C:\Users\Gigi\Downloads\FRST64.exe
2013-08-26 16:08 - 2013-08-26 16:08 - 00000000 ____D C:\FRST
2013-08-26 15:59 - 2013-08-24 16:59 - 00000286 _____ C:\Windows\Tasks\Dealply.job
2013-08-26 15:56 - 2013-08-24 19:08 - 00028914 _____ C:\Windows\WindowsUpdate.log
2013-08-26 15:53 - 2013-08-24 18:58 - 00000896 _____ C:\Windows\setupact.log
2013-08-26 15:53 - 2013-06-19 20:23 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-26 15:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-26 14:26 - 2013-08-26 14:14 - 00021677 _____ C:\Users\Gigi\Desktop\GMER.txt
2013-08-26 14:15 - 2013-08-26 14:15 - 00059348 _____ C:\Users\Gigi\Desktop\Extras.Txt
2013-08-26 14:13 - 2013-08-26 14:13 - 02573446 _____ C:\Users\Gigi\Desktop\OTL.Txt
2013-08-26 14:08 - 2013-08-26 14:08 - 00377856 _____ C:\Users\Gigi\Desktop\16c9htfl.exe
2013-08-26 14:07 - 2013-08-26 14:03 - 01403212 _____ C:\Users\Gigi\Downloads\BDDnsChangerDetector.zip
2013-08-26 14:05 - 2013-08-26 14:05 - 00602112 _____ (OldTimer Tools) C:\Users\Gigi\Desktop\OTL.scr
2013-08-26 13:39 - 2013-08-25 14:25 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-26 12:25 - 2009-07-14 07:08 - 00003034 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-26 12:21 - 2013-07-01 20:53 - 00000000 ____D C:\Program Files\Java
2013-08-26 12:13 - 2013-08-25 19:37 - 00000000 ____D C:\Users\Gigi\Desktop\Revo Uninstaller Pro 2.4.1 64bit
2013-08-26 12:12 - 2013-08-26 12:12 - 00303336 _____ C:\Users\Gigi\Downloads\revo_uninstaller_pro_serial_key_527.exe
2013-08-26 12:12 - 2013-08-25 19:28 - 00000973 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-08-26 12:09 - 2013-06-20 16:28 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Skype
2013-08-26 12:01 - 2013-08-26 12:01 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Macromedia
2013-08-26 12:00 - 2013-06-26 12:52 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\uTorrent
2013-08-26 11:59 - 2013-08-24 19:05 - 00013958 _____ C:\Windows\PFRO.log
2013-08-25 20:20 - 2013-08-25 20:20 - 00002816 _____ C:\Windows\windefendam.log
2013-08-25 20:20 - 2013-07-29 16:12 - 00000020 _____ C:\Windows\capsys184523.log
2013-08-25 20:07 - 2013-08-25 20:07 - 00000000 ____D C:\Users\Gigi\AppData\Local\Gas Powered Games
2013-08-25 20:07 - 2013-07-19 16:44 - 00000000 ____D C:\Users\Gigi\AppData\Local\Warframe
2013-08-25 19:51 - 2013-08-25 19:51 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-08-25 19:44 - 2013-06-23 19:22 - 00000000 ____D C:\ProgramData\AVG Secure Search
2013-08-25 19:41 - 2013-08-25 19:40 - 00000000 ____D C:\Users\Gigi\AppData\Local\Avg2013
2013-08-25 19:41 - 2013-07-12 21:34 - 00000000 ____D C:\ProgramData\MFAData
2013-08-25 19:39 - 2013-08-25 19:39 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\TuneUp Software
2013-08-25 19:34 - 2013-08-25 19:33 - 07180188 _____ C:\Users\Gigi\Downloads\Revo Uninstaller Pro 2.4.1 64bit.rar
2013-08-25 19:33 - 2013-08-25 19:33 - 03016667 _____ C:\Users\Gigi\Downloads\crack_64bit.rar
2013-08-25 19:30 - 2013-08-25 19:30 - 00024228 _____ C:\Users\Gigi\Downloads\keygen.rar
2013-08-25 19:30 - 2013-08-25 19:30 - 00000256 _____ C:\Users\Gigi\Desktop\license.dat
2013-08-25 19:28 - 2013-08-25 19:28 - 00000000 ____D C:\Program Files\VS Revo Group
2013-08-25 19:27 - 2013-08-25 19:27 - 10031224 _____ (VS Revo Group                                               ) C:\Users\Gigi\Downloads\RevoUninProSetup.exe
2013-08-25 19:23 - 2013-06-20 17:04 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-25 15:20 - 2013-08-25 15:01 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-25 15:20 - 2013-08-25 14:54 - 00000000 ____D C:\Users\Gigi\Desktop\mbar
2013-08-25 15:19 - 2013-08-25 15:19 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Adobe
2013-08-25 15:10 - 2013-08-25 15:09 - 00204496 _____ (Malwarebytes) C:\Users\Gigi\Downloads\startuplite-setup-1.07.exe
2013-08-25 15:02 - 2013-08-25 15:02 - 00000000 ____D C:\Users\Gigi\Desktop\mbam-chameleon-1.62.1.1000
2013-08-25 15:00 - 2013-08-25 15:02 - 01440846 _____ C:\Users\Gigi\Desktop\mbam-chameleon-1.62.1.1000.zip
2013-08-25 15:00 - 2013-08-25 15:00 - 01440846 _____ C:\Users\Gigi\Downloads\mbam-chameleon-1.62.1.1000.zip
2013-08-25 14:55 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\Nowy folder
2013-08-25 14:55 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\mba
2013-08-25 14:54 - 2013-08-25 14:54 - 12907592 _____ (Malwarebytes Corp.) C:\Users\Gigi\Downloads\mbar-1.07.0.1005.exe
2013-08-25 14:39 - 2013-08-25 14:25 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-25 14:30 - 2013-06-20 11:33 - 00000000 ____D C:\Users\Gigi\AppData\Local\Adobe
2013-08-25 14:30 - 2013-06-19 19:20 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-25 14:30 - 2013-06-19 19:20 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-25 14:21 - 2013-08-25 14:09 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Riot Games
2013-08-25 14:20 - 2013-08-25 14:20 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-08-25 14:20 - 2013-08-25 14:20 - 00000000 ____D C:\Riot Games
2013-08-25 14:20 - 2013-07-25 21:22 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-08-25 14:09 - 2013-08-25 14:01 - 34249488 _____ (Riot Games) C:\Users\Gigi\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe
2013-08-25 13:57 - 2013-06-19 19:17 - 00000000 ____D C:\Users\Gigi
2013-08-25 13:03 - 2013-07-13 10:30 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\TS3Client
2013-08-25 12:20 - 2013-06-28 17:40 - 00000000 ____D C:\Users\Gigi\AppData\Local\CrashDumps
2013-08-25 12:14 - 2013-07-12 16:21 - 00000000 ____D C:\Users\Gigi\AppData\Local\LogMeIn Hamachi
2013-08-24 19:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-24 18:06 - 2013-07-25 21:23 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\.minecraft
2013-08-24 17:54 - 2013-08-24 16:10 - 00000000 ____D C:\Users\Gigi\AppData\Local\Samsung
2013-08-24 17:53 - 2013-06-22 17:45 - 00000000 ____D C:\ProgramData\Samsung
2013-08-24 17:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2013-08-24 17:45 - 2013-08-24 17:45 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-08-24 17:40 - 2013-08-04 12:58 - 00000000 ____D C:\Users\Gigi\AppData\Local\Downloaded Installations
2013-08-24 16:59 - 2013-08-24 16:59 - 00003234 _____ C:\Windows\System32\Tasks\Dealply
2013-08-24 16:59 - 2013-08-24 16:59 - 00000000 ____D C:\Users\Gigi\AppData\Local\DealPlyLive
2013-08-24 16:44 - 2013-08-24 11:11 - 00000000 _____ C:\ProgramData\LauncherAccess.dt
2013-08-24 16:10 - 2013-08-24 16:10 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-08-24 16:02 - 2013-08-24 16:02 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-08-24 15:51 - 2013-08-24 15:51 - 00000000 ____D C:\Program Files\cFosSpeed
2013-08-24 15:50 - 2013-08-24 15:50 - 00000000 ____D C:\Users\Gigi\AppData\Local\cFos
2013-08-24 15:50 - 2013-08-24 15:50 - 00000000 ____D C:\ProgramData\cFos
2013-08-24 10:00 - 2013-07-11 10:09 - 00108360 _____ C:\Users\Gigi\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-23 22:26 - 2013-08-23 22:26 - 00000984 _____ C:\Users\Public\Desktop\Samsung PC Studio 3.lnk
2013-08-23 22:26 - 2013-08-15 16:46 - 00000000 ____D C:\Program Files (x86)\Supreme Commander 2
2013-08-23 22:26 - 2013-07-29 14:46 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-23 22:25 - 2013-08-23 21:11 - 00000000 ____D C:\Users\Gigi\Documents\Optimizer Pro
2013-08-23 21:26 - 2013-08-23 21:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-23 21:26 - 2013-08-12 13:41 - 00001355 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-23 21:26 - 2013-06-19 19:18 - 00001133 _____ C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-23 21:26 - 2013-06-19 19:18 - 00001065 _____ C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-08-23 21:22 - 2009-07-14 14:43 - 00752652 _____ C:\Windows\system32\perfh015.dat
2013-08-23 21:22 - 2009-07-14 14:43 - 00162038 _____ C:\Windows\system32\perfc015.dat
2013-08-23 21:22 - 2009-07-14 07:13 - 01705610 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-23 21:18 - 2013-07-10 20:02 - 00417672 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-23 21:12 - 2013-06-20 21:05 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\War Thunder
2013-08-23 21:04 - 2013-08-23 21:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Windows OneCare Live
2013-08-23 20:59 - 2013-08-23 20:59 - 00021210 _____ C:\AdwCleaner[S7].txt
2013-08-23 20:59 - 2013-06-22 16:47 - 00003453 _____ C:\Windows\DeleteOnReboot.bat
2013-08-23 20:58 - 2013-08-23 20:58 - 00022665 _____ C:\AdwCleaner[R7].txt
2013-08-23 20:55 - 2013-08-23 20:55 - 00017532 _____ C:\AdwCleaner[R6].txt
2013-08-23 20:25 - 2013-08-12 13:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-23 20:23 - 2013-07-12 11:28 - 00000000 ____D C:\Users\Gigi\AppData\Local\screenSHU
2013-08-21 14:15 - 2013-08-21 14:15 - 00001724 _____ C:\Users\Public\Desktop\Defraggler.lnk
2013-08-21 14:15 - 2013-08-21 14:15 - 00000000 ____D C:\Program Files\Defraggler
2013-08-21 14:13 - 2013-06-20 16:27 - 00000000 ____D C:\ProgramData\Skype
2013-08-18 19:43 - 2013-08-18 19:42 - 00000000 ____D C:\Users\Gigi\Desktop\222
2013-08-15 17:17 - 2013-08-15 17:17 - 00000000 ____D C:\Users\Gigi\Documents\Moje gry
2013-08-15 17:03 - 2013-06-20 21:05 - 00000000 ____D C:\Users\Gigi\Documents\My Games
2013-08-15 16:55 - 2013-08-15 16:55 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supreme Commander 2
2013-08-14 10:40 - 2013-08-14 10:40 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-08-14 10:40 - 2013-07-13 10:27 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-08-14 09:00 - 2013-08-14 09:00 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-08-14 09:00 - 2013-08-14 09:00 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-08-13 17:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2013-08-12 14:05 - 2013-06-20 21:01 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-12 13:56 - 2013-08-12 13:56 - 00000000 ____D C:\Users\Gigi\AppData\Local\BlackHawk
2013-08-12 13:54 - 2013-08-12 13:54 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 00000000 ____D C:\Users\Gigi\AppData\Local\Comodo
2013-08-12 13:47 - 2013-08-12 13:47 - 00001133 _____ C:\Users\Public\Desktop\Opera.lnk
2013-08-12 13:47 - 2013-08-12 13:47 - 00000000 ____D C:\Users\Gigi\AppData\Local\Opera Software
2013-08-12 13:47 - 2013-08-12 13:44 - 00000000 ____D C:\Users\Gigi\AppData\Local\Google
2013-08-12 12:30 - 2013-06-26 12:57 - 00000000 ____D C:\ProgramData\eSafe
2013-08-12 12:12 - 2013-07-29 14:44 - 00000000 ____D C:\Users\Gigi\AppData\Local\Lollipop
2013-08-12 12:12 - 2013-06-19 19:18 - 00000000 ___RD C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-12 12:11 - 2013-08-12 12:11 - 00000000 ____D C:\Users\Gigi\Documents\LOLReplay
2013-08-11 17:27 - 2013-07-14 11:33 - 00000000 ____D C:\Windows\system32\appmgmt
2013-08-10 20:56 - 2013-08-10 20:56 - 00000000 ____D C:\Users\Gigi\Documents\RPGVX
2013-08-09 11:02 - 2013-06-20 16:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-08 10:24 - 2013-08-08 10:24 - 00472576 _____ () C:\Windows\Nvidia Omega Drivers v1.169.25 Uninstall.exe
2013-08-06 22:36 - 2013-08-06 22:36 - 00001972 _____ C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
2013-08-06 22:36 - 2013-07-04 10:15 - 00000000 ____D C:\ProgramData\MTA San Andreas All
2013-08-06 22:29 - 2013-08-06 22:29 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2013-08-06 09:11 - 2013-08-06 09:11 - 00000855 _____ C:\Users\Gigi\Desktop\µTorrent.lnk
2013-08-06 09:11 - 2013-08-06 09:11 - 00000835 _____ C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-08-06 09:07 - 2013-08-06 09:07 - 00000000 ____D C:\Users\Gigi\Documents\Add-in Express
2013-08-05 14:58 - 2013-07-11 10:02 - 00000000 ____D C:\Users\Gigi\AppData\Local\Apple Computer
2013-08-05 13:04 - 2013-07-04 10:10 - 00000000 ____D C:\Users\Gigi\Documents\GTA San Andreas User Files
2013-08-04 13:00 - 2013-08-04 12:59 - 00000000 ____D C:\Users\Gigi\AppData\Local\Play withSIX
2013-08-04 12:59 - 2013-08-04 12:59 - 00000000 ____D C:\Users\Gigi\AppData\Local\IsolatedStorage
2013-07-31 17:06 - 2013-07-31 17:06 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-31 17:06 - 2013-07-31 17:06 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-29 14:45 - 2013-07-29 14:45 - 00003394 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-29 14:45 - 2013-07-29 14:45 - 00000000 ____D C:\Users\Gigi\AppData\Local\Minibar
2013-07-29 14:39 - 2013-07-29 14:35 - 00000354 _____ C:\Users\Gigi\.drjava

Files to move or delete:
====================
C:\Users\Gigi\AppData\Local\Temp\VSUSetup.exe
C:\Users\Gigi\AppData\Local\Temp\is-P2E71.tmp\_isetup\_shfoldr.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-23 22:23

==================== End Of Log ============================