Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-08-2013 01
Ran by Gigi (administrator) on 26-08-2013 22:58:07
Running from C:\Users\Gigi\Downloads
Windows 7 Enterprise (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(cFos Software GmbH) C:\Program Files\cFosSpeed\spd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(cFos Software GmbH) C:\Program Files\cFosSpeed\cfosspeed.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [cFosSpeed] - C:\Program Files\cFosSpeed\cFosSpeed.exe [1587040 2013-04-19] (cFos Software GmbH)
HKLM\...\Run: [NvSvc] - C:\Windows\system32\nvsvc64.dll [89088 2007-12-11] (NVIDIA Corporation)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [10818592 2007-12-11] (NVIDIA Corporation)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [x]
HKCU\...\Policies\system: [NoDispCPL] 0
MountPoints2: {e78167de-d90d-11e2-8ed5-001d7d5b49cd} - F:\setup.exe AUTORUN=1
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=395049983_266035_5493A1D1&ts=1377285995
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Winsock: Catalog9 01 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9 02 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9 03 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9 04 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9 15 C:\Windows\system32\EasyRedirect.dll File Not found ()
Winsock: Catalog9-x64 01 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Winsock: Catalog9-x64 02 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Winsock: Catalog9-x64 03 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Winsock: Catalog9-x64 04 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Winsock: Catalog9-x64 15 C:\Windows\system32\EasyRedirect64.dll [539984] (EasyTech)
Tcpip\Parameters: [DhcpNameServer] 89.228.8.18 192.168.66.6

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Chrome In-App Payments service) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0

==================== Services (Whitelisted) =================

R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [480096 2013-04-19] (cFos Software GmbH)
S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService [x]
S2 vToolbarUpdater15.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [x]

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-06-27] (AVG Technologies)
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2011-01-20] (Devguru Co., Ltd)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-08-26] (Duplex Secure Ltd.)
R1 StarPortLite; C:\Windows\System32\DRIVERS\StarPortLite.sys [120704 2013-02-04] (StarWind Software)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [x]
S1 StarOpen; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-26 22:43 - 2013-08-26 22:43 - 00797784 _____ (Duplex Secure Ltd.) C:\Users\Gigi\Desktop\SPTDinst-v183-x64.exe
2013-08-26 22:41 - 2013-08-26 22:45 - 00000000 ____D C:\AdwCleaner
2013-08-26 22:38 - 2013-08-26 22:38 - 00000000 ____D C:\FRST
2013-08-26 22:36 - 2013-08-26 22:36 - 00000000 _____ C:\Users\Gigi\Desktop\Nowy dokument tekstowy.txt
2013-08-26 20:04 - 2013-08-26 22:46 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-26 20:04 - 2013-08-26 22:46 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-26 20:04 - 2013-08-26 22:35 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-26 20:04 - 2013-08-26 20:04 - 00004040 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-26 20:04 - 2013-08-26 20:04 - 00003788 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-26 20:04 - 2013-08-26 20:04 - 00000000 ____D C:\Program Files (x86)\GUMF44E.tmp
2013-08-26 20:02 - 2013-08-26 22:34 - 00000000 ____D C:\Users\Gigi\AppData\Local\Deployment
2013-08-26 20:02 - 2013-08-26 20:02 - 00000000 ____D C:\Users\Gigi\AppData\Local\Apps\2.0
2013-08-26 17:01 - 2013-08-26 17:01 - 03727418 _____ (Zyczu) C:\Users\Gigi\Downloads\MinecraftZyczu.exe
2013-08-26 16:58 - 2013-08-26 16:58 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\LolClient
2013-08-26 16:57 - 2013-08-26 16:57 - 00372528 _____ C:\Users\Gigi\Downloads\gravybot.exe
2013-08-26 16:57 - 2013-08-26 16:57 - 00000000 ___HD C:\Users\Gigi\Downloads\ufr_reports
2013-08-26 16:53 - 2013-08-26 16:53 - 00000000 ____D C:\Python27
2013-08-26 16:49 - 2013-08-26 16:52 - 16228352 _____ C:\Users\Gigi\Downloads\python-2.7.5.msi
2013-08-26 16:48 - 2013-08-26 16:56 - 00000000 ____D C:\Users\Gigi\Desktop\Nowy folder (2)
2013-08-26 16:35 - 2013-08-26 16:35 - 00001387 _____ C:\Users\Gigi\Desktop\Funkcje cFosSpeed.lnk
2013-08-26 16:35 - 2013-08-26 16:35 - 00000000 ____D C:\Program Files\cFosSpeed
2013-08-26 16:35 - 2013-04-19 16:46 - 01736544 _____ (cFos Software GmbH) C:\Windows\system32\Drivers\cfosspeed6.sys
2013-08-26 16:33 - 2013-08-26 16:33 - 04820216 _____ C:\Users\Gigi\Downloads\cfosspeed-v904.exe
2013-08-26 16:32 - 2013-08-26 16:32 - 00696168 _____ C:\Users\Gigi\Downloads\cFosSpeed(12826).exe
2013-08-26 16:27 - 2013-08-26 16:27 - 00251361 _____ C:\Users\Gigi\Desktop\Mineshafter-launcher.jar
2013-08-26 16:26 - 2013-08-26 16:26 - 00081938 _____ C:\Users\Gigi\Downloads\minecraft.jar
2013-08-26 16:26 - 2013-08-26 16:26 - 00020324 _____ C:\Users\Gigi\Desktop\Mineshafter-proxy.jar
2013-08-26 16:25 - 2013-08-26 16:25 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-26 16:25 - 2013-08-26 16:25 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-26 16:25 - 2013-08-26 16:25 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-26 16:25 - 2013-08-26 16:25 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-26 16:25 - 2013-08-26 16:25 - 00000000 ____D C:\Users\Gigi\Desktop\Nowy folder
2013-08-26 16:25 - 2013-08-26 16:25 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-26 16:21 - 2013-08-26 16:21 - 00903080 _____ (Oracle Corporation) C:\Users\Gigi\Downloads\jxpiinstall.exe
2013-08-26 16:09 - 2013-08-26 16:09 - 00015404 _____ C:\Users\Gigi\Desktop\Addition.txt
2013-08-26 14:08 - 2013-08-26 14:08 - 00377856 _____ C:\Users\Gigi\Desktop\16c9htfl.exe
2013-08-26 14:03 - 2013-08-26 14:07 - 01403212 _____ C:\Users\Gigi\Downloads\BDDnsChangerDetector.zip
2013-08-26 12:12 - 2013-08-26 12:12 - 00303336 _____ C:\Users\Gigi\Downloads\revo_uninstaller_pro_serial_key_527.exe
2013-08-26 12:01 - 2013-08-26 12:01 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Macromedia
2013-08-25 20:20 - 2013-08-25 20:20 - 00002816 _____ C:\Windows\windefendam.log
2013-08-25 20:07 - 2013-08-25 20:07 - 00000000 ____D C:\Users\Gigi\AppData\Local\Gas Powered Games
2013-08-25 19:51 - 2013-08-25 19:51 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-08-25 19:40 - 2013-08-25 19:41 - 00000000 ____D C:\Users\Gigi\AppData\Local\Avg2013
2013-08-25 19:37 - 2013-08-26 12:13 - 00000000 ____D C:\Users\Gigi\Desktop\Revo Uninstaller Pro 2.4.1 64bit
2013-08-25 19:33 - 2013-08-25 19:34 - 07180188 _____ C:\Users\Gigi\Downloads\Revo Uninstaller Pro 2.4.1 64bit.rar
2013-08-25 19:33 - 2013-08-25 19:33 - 03016667 _____ C:\Users\Gigi\Downloads\crack_64bit.rar
2013-08-25 19:30 - 2013-08-25 19:30 - 00024228 _____ C:\Users\Gigi\Downloads\keygen.rar
2013-08-25 19:30 - 2013-08-25 19:30 - 00000256 _____ C:\Users\Gigi\Desktop\license.dat
2013-08-25 19:28 - 2013-08-26 18:59 - 00001130 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-08-25 19:28 - 2013-08-25 19:28 - 00000000 ____D C:\Program Files\VS Revo Group
2013-08-25 19:28 - 2009-12-30 12:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2013-08-25 19:27 - 2013-08-25 19:27 - 10031224 _____ (VS Revo Group                                               ) C:\Users\Gigi\Downloads\RevoUninProSetup.exe
2013-08-25 15:19 - 2013-08-25 15:19 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Adobe
2013-08-25 15:09 - 2013-08-25 15:10 - 00204496 _____ (Malwarebytes) C:\Users\Gigi\Downloads\startuplite-setup-1.07.exe
2013-08-25 15:02 - 2013-08-25 15:02 - 00000000 ____D C:\Users\Gigi\Desktop\mbam-chameleon-1.62.1.1000
2013-08-25 15:02 - 2013-08-25 15:00 - 01440846 _____ C:\Users\Gigi\Desktop\mbam-chameleon-1.62.1.1000.zip
2013-08-25 15:01 - 2013-08-25 15:20 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-25 15:01 - 2012-08-15 08:48 - 00218184 _____ C:\Users\Gigi\Desktop\firefox.exe
2013-08-25 15:00 - 2013-08-25 15:00 - 01440846 _____ C:\Users\Gigi\Downloads\mbam-chameleon-1.62.1.1000.zip
2013-08-25 14:55 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\Nowy folder
2013-08-25 14:55 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\mba
2013-08-25 14:54 - 2013-08-25 15:20 - 00000000 ____D C:\Users\Gigi\Desktop\mbar
2013-08-25 14:54 - 2013-08-25 14:54 - 12907592 _____ (Malwarebytes Corp.) C:\Users\Gigi\Downloads\mbar-1.07.0.1005.exe
2013-08-25 14:25 - 2013-08-26 19:39 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-25 14:25 - 2013-08-26 16:40 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-25 14:20 - 2013-08-25 14:20 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-08-25 14:20 - 2013-08-25 14:20 - 00000000 ____D C:\Riot Games
2013-08-25 14:09 - 2013-08-25 14:21 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Riot Games
2013-08-25 14:01 - 2013-08-25 14:09 - 34249488 _____ (Riot Games) C:\Users\Gigi\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe
2013-08-24 19:08 - 2013-08-26 22:49 - 00050005 _____ C:\Windows\WindowsUpdate.log
2013-08-24 19:05 - 2013-08-26 22:46 - 00014786 _____ C:\Windows\PFRO.log
2013-08-24 18:58 - 2013-08-26 22:46 - 00001120 _____ C:\Windows\setupact.log
2013-08-24 17:45 - 2013-08-24 17:45 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-08-24 17:43 - 2013-07-18 14:32 - 00319456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DIFx7f7c.rra
2013-08-24 17:43 - 2013-07-18 14:32 - 00020032 _____ (Devguru Co., Ltd) C:\Windows\SysWOW64\Drivers\dgderdrv.sys
2013-08-24 17:43 - 2013-06-14 19:56 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\avrt7fe9.rra
2013-08-24 16:10 - 2013-08-24 17:54 - 00000000 ____D C:\Users\Gigi\AppData\Local\Samsung
2013-08-24 16:10 - 2013-08-24 16:10 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-08-24 16:02 - 2013-08-24 16:02 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-08-24 15:52 - 2013-07-18 14:33 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2013-08-24 15:50 - 2013-08-24 15:50 - 00000000 ____D C:\Users\Gigi\AppData\Local\cFos
2013-08-24 15:50 - 2013-08-24 15:50 - 00000000 ____D C:\ProgramData\cFos
2013-08-24 11:11 - 2013-08-24 16:44 - 00000000 _____ C:\ProgramData\LauncherAccess.dt
2013-08-23 22:26 - 2013-08-23 22:26 - 00000984 _____ C:\Users\Public\Desktop\Samsung PC Studio 3.lnk
2013-08-23 22:26 - 2006-07-24 16:05 - 00005632 _____ C:\Windows\SysWOW64\Drivers\StarOpen.sys
2013-08-23 21:26 - 2013-08-23 21:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-23 21:04 - 2013-08-23 21:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Windows OneCare Live
2013-08-23 20:59 - 2013-08-23 20:59 - 00021210 _____ C:\AdwCleaner[S7].txt
2013-08-23 20:58 - 2013-08-23 20:58 - 00022665 _____ C:\AdwCleaner[R7].txt
2013-08-23 20:55 - 2013-08-23 20:55 - 00017532 _____ C:\AdwCleaner[R6].txt
2013-08-21 14:15 - 2013-08-21 14:15 - 00001724 _____ C:\Users\Public\Desktop\Defraggler.lnk
2013-08-21 14:15 - 2013-08-21 14:15 - 00000000 ____D C:\Program Files\Defraggler
2013-08-18 19:42 - 2013-08-18 19:43 - 00000000 ____D C:\Users\Gigi\Desktop\222
2013-08-15 17:17 - 2013-08-15 17:17 - 00000000 ____D C:\Users\Gigi\Documents\Moje gry
2013-08-15 16:55 - 2013-08-15 16:55 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supreme Commander 2
2013-08-15 16:46 - 2013-08-23 22:26 - 00000000 ____D C:\Program Files (x86)\Supreme Commander 2
2013-08-14 10:40 - 2013-08-14 10:40 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-08-14 09:00 - 2013-08-14 09:00 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-08-14 09:00 - 2013-08-14 09:00 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-08-12 13:56 - 2013-08-12 13:56 - 00000000 ____D C:\Users\Gigi\AppData\Local\BlackHawk
2013-08-12 13:54 - 2013-08-12 13:54 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 00000000 ____D C:\Users\Gigi\AppData\Local\Comodo
2013-08-12 13:47 - 2013-08-12 13:47 - 00001133 _____ C:\Users\Public\Desktop\Opera.lnk
2013-08-12 13:47 - 2013-08-12 13:47 - 00000000 ____D C:\Users\Gigi\AppData\Local\Opera Software
2013-08-12 13:44 - 2013-08-12 13:47 - 00000000 ____D C:\Users\Gigi\AppData\Local\Google
2013-08-12 12:11 - 2013-08-12 12:11 - 00000000 ____D C:\Users\Gigi\Documents\LOLReplay
2013-08-10 20:56 - 2013-08-10 20:56 - 00000000 ____D C:\Users\Gigi\Documents\RPGVX
2013-08-08 10:26 - 2007-12-11 23:06 - 02073088 _____ (NVIDIA Corporation) C:\Windows\system32\nvcplui.exe
2013-08-08 10:26 - 2007-12-11 23:06 - 01064448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpluir.dll
2013-08-08 10:26 - 2007-12-11 23:06 - 00403968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.cpl
2013-08-08 10:26 - 2007-12-11 23:06 - 00381952 _____ (NVIDIA Corporation) C:\Windows\system32\nvexpbar.dll
2013-08-08 10:25 - 2007-12-11 19:44 - 00372736 _____ (NVIDIA Corporation) C:\Windows\system32\NVUNINST.EXE
2013-08-08 10:24 - 2013-08-08 10:24 - 00472576 _____ () C:\Windows\Nvidia Omega Drivers v1.169.25 Uninstall.exe
2013-08-08 10:24 - 2007-12-18 16:48 - 00159458 _____ C:\Windows\SysWOW64\nvapps.xml
2013-08-08 10:24 - 2007-12-18 16:48 - 00159458 _____ C:\Windows\system32\nvapps.xml
2013-08-08 10:24 - 2007-12-11 23:06 - 10818592 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 10185504 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-08-08 10:24 - 2007-12-11 23:06 - 09711104 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 07421440 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 07098368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 06868480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdisps.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 05602304 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispsr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 05042176 _____ (NVIDIA Corporation) C:\Windows\system32\nvgames.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 04228096 _____ (NVIDIA Corporation) C:\Windows\system32\nvvitvs.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 03706880 _____ (NVIDIA Corporation) C:\Windows\system32\nvvitvsr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 03322880 _____ (NVIDIA Corporation) C:\Windows\system32\nvgamesr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 03005952 _____ (NVIDIA Corporation) C:\Windows\system32\nvwss.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 02846208 _____ (NVIDIA Corporation) C:\Windows\system32\nvmoblsr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 02510848 _____ (NVIDIA Corporation) C:\Windows\system32\nvwssr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 01830912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 01594368 _____ (NVIDIA Corporation) C:\Windows\system32\nvmobls.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00930272 _____ (Microsoft Corporation) C:\Windows\system32\dpinst.exe
2013-08-08 10:24 - 2007-12-11 23:06 - 00448512 _____ (NVIDIA Corporation) C:\Windows\system32\nvmccssr.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00372736 _____ (NVIDIA Corporation) C:\Windows\system32\nvudisp.exe
2013-08-08 10:24 - 2007-12-11 23:06 - 00283136 _____ (NVIDIA Corporation) C:\Windows\system32\nvmccss.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00258560 _____ (NVIDIA Corporation) C:\Windows\system32\nvmccs.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00174080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcolor.exe
2013-08-08 10:24 - 2007-12-11 23:06 - 00041472 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod100.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00041472 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00035328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmccsrs.dll
2013-08-08 10:24 - 2007-12-11 23:06 - 00019958 _____ C:\Windows\system32\nvwsapps.xml
2013-08-08 10:24 - 2007-12-11 23:06 - 00007181 _____ C:\Windows\system32\nvdisp.nvu
2013-08-06 22:36 - 2013-08-06 22:36 - 00001972 _____ C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
2013-08-06 22:29 - 2013-08-06 22:29 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2013-08-06 09:11 - 2013-08-06 09:11 - 00000855 _____ C:\Users\Gigi\Desktop\µTorrent.lnk
2013-08-06 09:11 - 2013-08-06 09:11 - 00000835 _____ C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-08-06 09:07 - 2013-08-06 09:07 - 00000000 ____D C:\Users\Gigi\Documents\Add-in Express
2013-08-04 12:59 - 2013-08-04 12:59 - 00000000 ____D C:\Users\Gigi\AppData\Local\IsolatedStorage
2013-08-04 12:58 - 2013-08-24 17:40 - 00000000 ____D C:\Users\Gigi\AppData\Local\Downloaded Installations
2013-07-31 17:06 - 2013-07-31 17:06 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-31 17:06 - 2013-07-31 17:06 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-29 16:12 - 2013-08-25 20:20 - 00000020 _____ C:\Windows\capsys184523.log
2013-07-29 14:35 - 2013-07-29 14:39 - 00000354 _____ C:\Users\Gigi\.drjava

==================== One Month Modified Files and Folders =======

2013-08-26 22:57 - 2013-08-26 22:57 - 01578400 _____ (Farbar) C:\Users\Gigi\Downloads\FRST64.exe
2013-08-26 22:49 - 2013-08-24 19:08 - 00050005 _____ C:\Windows\WindowsUpdate.log
2013-08-26 22:46 - 2013-08-26 20:04 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-26 22:46 - 2013-08-26 20:04 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-26 22:46 - 2013-08-24 19:05 - 00014786 _____ C:\Windows\PFRO.log
2013-08-26 22:46 - 2013-08-24 18:58 - 00001120 _____ C:\Windows\setupact.log
2013-08-26 22:46 - 2013-06-19 20:23 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-26 22:46 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-26 22:45 - 2013-08-26 22:41 - 00000000 ____D C:\AdwCleaner
2013-08-26 22:45 - 2013-06-19 19:18 - 00000929 _____ C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-26 22:45 - 2013-06-19 19:18 - 00000861 _____ C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-08-26 22:43 - 2013-08-26 22:43 - 00797784 _____ (Duplex Secure Ltd.) C:\Users\Gigi\Desktop\SPTDinst-v183-x64.exe
2013-08-26 22:43 - 2013-06-20 11:35 - 00564824 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2013-08-26 22:41 - 2013-07-12 10:39 - 00994642 _____ C:\Users\Gigi\Desktop\adwcleaner.exe
2013-08-26 22:38 - 2013-08-26 22:38 - 00000000 ____D C:\FRST
2013-08-26 22:38 - 2013-06-20 16:28 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Skype
2013-08-26 22:36 - 2013-08-26 22:36 - 00000000 _____ C:\Users\Gigi\Desktop\Nowy dokument tekstowy.txt
2013-08-26 22:35 - 2013-08-26 20:04 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-26 22:34 - 2013-08-26 20:02 - 00000000 ____D C:\Users\Gigi\AppData\Local\Deployment
2013-08-26 20:04 - 2013-08-26 20:04 - 00004040 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-26 20:04 - 2013-08-26 20:04 - 00003788 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-26 20:04 - 2013-08-26 20:04 - 00000000 ____D C:\Program Files (x86)\GUMF44E.tmp
2013-08-26 20:02 - 2013-08-26 20:02 - 00000000 ____D C:\Users\Gigi\AppData\Local\Apps\2.0
2013-08-26 19:39 - 2013-08-25 14:25 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-26 19:14 - 2013-07-12 16:21 - 00000000 ____D C:\Users\Gigi\AppData\Local\LogMeIn Hamachi
2013-08-26 19:03 - 2013-07-25 21:22 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-08-26 19:00 - 2013-07-02 13:27 - 00000000 ____D C:\Users\Gigi\AppData\Local\NVIDIA
2013-08-26 19:00 - 2013-06-19 20:23 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-08-26 19:00 - 2013-06-19 19:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-08-26 19:00 - 2013-06-19 19:25 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-08-26 18:59 - 2013-08-25 19:28 - 00001130 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-08-26 18:33 - 2009-07-14 07:08 - 00004090 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-26 18:21 - 2013-06-28 17:40 - 00000000 ____D C:\Users\Gigi\AppData\Local\CrashDumps
2013-08-26 18:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-26 17:01 - 2013-08-26 17:01 - 03727418 _____ (Zyczu) C:\Users\Gigi\Downloads\MinecraftZyczu.exe
2013-08-26 16:58 - 2013-08-26 16:58 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\LolClient
2013-08-26 16:57 - 2013-08-26 16:57 - 00372528 _____ C:\Users\Gigi\Downloads\gravybot.exe
2013-08-26 16:57 - 2013-08-26 16:57 - 00000000 ___HD C:\Users\Gigi\Downloads\ufr_reports
2013-08-26 16:56 - 2013-08-26 16:48 - 00000000 ____D C:\Users\Gigi\Desktop\Nowy folder (2)
2013-08-26 16:53 - 2013-08-26 16:53 - 00000000 ____D C:\Python27
2013-08-26 16:52 - 2013-08-26 16:49 - 16228352 _____ C:\Users\Gigi\Downloads\python-2.7.5.msi
2013-08-26 16:40 - 2013-08-25 14:25 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-26 16:40 - 2013-06-20 11:33 - 00000000 ____D C:\Users\Gigi\AppData\Local\Adobe
2013-08-26 16:40 - 2013-06-19 19:20 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-26 16:40 - 2013-06-19 19:20 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-26 16:35 - 2013-08-26 16:35 - 00001387 _____ C:\Users\Gigi\Desktop\Funkcje cFosSpeed.lnk
2013-08-26 16:35 - 2013-08-26 16:35 - 00000000 ____D C:\Program Files\cFosSpeed
2013-08-26 16:33 - 2013-08-26 16:33 - 04820216 _____ C:\Users\Gigi\Downloads\cfosspeed-v904.exe
2013-08-26 16:32 - 2013-08-26 16:32 - 00696168 _____ C:\Users\Gigi\Downloads\cFosSpeed(12826).exe
2013-08-26 16:27 - 2013-08-26 16:27 - 00251361 _____ C:\Users\Gigi\Desktop\Mineshafter-launcher.jar
2013-08-26 16:26 - 2013-08-26 16:26 - 00081938 _____ C:\Users\Gigi\Downloads\minecraft.jar
2013-08-26 16:26 - 2013-08-26 16:26 - 00020324 _____ C:\Users\Gigi\Desktop\Mineshafter-proxy.jar
2013-08-26 16:25 - 2013-08-26 16:25 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-26 16:25 - 2013-08-26 16:25 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-26 16:25 - 2013-08-26 16:25 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-26 16:25 - 2013-08-26 16:25 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-26 16:25 - 2013-08-26 16:25 - 00000000 ____D C:\Users\Gigi\Desktop\Nowy folder
2013-08-26 16:25 - 2013-08-26 16:25 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-26 16:25 - 2013-06-20 11:36 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-08-26 16:25 - 2013-06-20 11:36 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-08-26 16:21 - 2013-08-26 16:21 - 00903080 _____ (Oracle Corporation) C:\Users\Gigi\Downloads\jxpiinstall.exe
2013-08-26 16:10 - 2009-07-14 06:45 - 00009792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-26 16:10 - 2009-07-14 06:45 - 00009792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-26 16:09 - 2013-08-26 16:09 - 00015404 _____ C:\Users\Gigi\Desktop\Addition.txt
2013-08-26 14:08 - 2013-08-26 14:08 - 00377856 _____ C:\Users\Gigi\Desktop\16c9htfl.exe
2013-08-26 14:07 - 2013-08-26 14:03 - 01403212 _____ C:\Users\Gigi\Downloads\BDDnsChangerDetector.zip
2013-08-26 12:21 - 2013-07-01 20:53 - 00000000 ____D C:\Program Files\Java
2013-08-26 12:13 - 2013-08-25 19:37 - 00000000 ____D C:\Users\Gigi\Desktop\Revo Uninstaller Pro 2.4.1 64bit
2013-08-26 12:12 - 2013-08-26 12:12 - 00303336 _____ C:\Users\Gigi\Downloads\revo_uninstaller_pro_serial_key_527.exe
2013-08-26 12:01 - 2013-08-26 12:01 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Macromedia
2013-08-25 20:20 - 2013-08-25 20:20 - 00002816 _____ C:\Windows\windefendam.log
2013-08-25 20:20 - 2013-07-29 16:12 - 00000020 _____ C:\Windows\capsys184523.log
2013-08-25 20:07 - 2013-08-25 20:07 - 00000000 ____D C:\Users\Gigi\AppData\Local\Gas Powered Games
2013-08-25 20:07 - 2013-07-19 16:44 - 00000000 ____D C:\Users\Gigi\AppData\Local\Warframe
2013-08-25 19:51 - 2013-08-25 19:51 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-08-25 19:41 - 2013-08-25 19:40 - 00000000 ____D C:\Users\Gigi\AppData\Local\Avg2013
2013-08-25 19:41 - 2013-07-12 21:34 - 00000000 ____D C:\ProgramData\MFAData
2013-08-25 19:34 - 2013-08-25 19:33 - 07180188 _____ C:\Users\Gigi\Downloads\Revo Uninstaller Pro 2.4.1 64bit.rar
2013-08-25 19:33 - 2013-08-25 19:33 - 03016667 _____ C:\Users\Gigi\Downloads\crack_64bit.rar
2013-08-25 19:30 - 2013-08-25 19:30 - 00024228 _____ C:\Users\Gigi\Downloads\keygen.rar
2013-08-25 19:30 - 2013-08-25 19:30 - 00000256 _____ C:\Users\Gigi\Desktop\license.dat
2013-08-25 19:28 - 2013-08-25 19:28 - 00000000 ____D C:\Program Files\VS Revo Group
2013-08-25 19:27 - 2013-08-25 19:27 - 10031224 _____ (VS Revo Group                                               ) C:\Users\Gigi\Downloads\RevoUninProSetup.exe
2013-08-25 19:23 - 2013-06-20 17:04 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-25 15:20 - 2013-08-25 15:01 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-25 15:20 - 2013-08-25 14:54 - 00000000 ____D C:\Users\Gigi\Desktop\mbar
2013-08-25 15:19 - 2013-08-25 15:19 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Adobe
2013-08-25 15:10 - 2013-08-25 15:09 - 00204496 _____ (Malwarebytes) C:\Users\Gigi\Downloads\startuplite-setup-1.07.exe
2013-08-25 15:02 - 2013-08-25 15:02 - 00000000 ____D C:\Users\Gigi\Desktop\mbam-chameleon-1.62.1.1000
2013-08-25 15:00 - 2013-08-25 15:02 - 01440846 _____ C:\Users\Gigi\Desktop\mbam-chameleon-1.62.1.1000.zip
2013-08-25 15:00 - 2013-08-25 15:00 - 01440846 _____ C:\Users\Gigi\Downloads\mbam-chameleon-1.62.1.1000.zip
2013-08-25 14:55 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\Nowy folder
2013-08-25 14:55 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\mba
2013-08-25 14:54 - 2013-08-25 14:54 - 12907592 _____ (Malwarebytes Corp.) C:\Users\Gigi\Downloads\mbar-1.07.0.1005.exe
2013-08-25 14:21 - 2013-08-25 14:09 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Riot Games
2013-08-25 14:20 - 2013-08-25 14:20 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-08-25 14:20 - 2013-08-25 14:20 - 00000000 ____D C:\Riot Games
2013-08-25 14:09 - 2013-08-25 14:01 - 34249488 _____ (Riot Games) C:\Users\Gigi\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe
2013-08-25 13:57 - 2013-06-19 19:17 - 00000000 ____D C:\Users\Gigi
2013-08-25 13:03 - 2013-07-13 10:30 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\TS3Client
2013-08-24 17:54 - 2013-08-24 16:10 - 00000000 ____D C:\Users\Gigi\AppData\Local\Samsung
2013-08-24 17:53 - 2013-06-22 17:45 - 00000000 ____D C:\ProgramData\Samsung
2013-08-24 17:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2013-08-24 17:45 - 2013-08-24 17:45 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-08-24 17:40 - 2013-08-04 12:58 - 00000000 ____D C:\Users\Gigi\AppData\Local\Downloaded Installations
2013-08-24 16:44 - 2013-08-24 11:11 - 00000000 _____ C:\ProgramData\LauncherAccess.dt
2013-08-24 16:10 - 2013-08-24 16:10 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-08-24 16:02 - 2013-08-24 16:02 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-08-24 15:50 - 2013-08-24 15:50 - 00000000 ____D C:\Users\Gigi\AppData\Local\cFos
2013-08-24 15:50 - 2013-08-24 15:50 - 00000000 ____D C:\ProgramData\cFos
2013-08-24 10:00 - 2013-07-11 10:09 - 00108360 _____ C:\Users\Gigi\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-23 22:26 - 2013-08-23 22:26 - 00000984 _____ C:\Users\Public\Desktop\Samsung PC Studio 3.lnk
2013-08-23 22:26 - 2013-08-15 16:46 - 00000000 ____D C:\Program Files (x86)\Supreme Commander 2
2013-08-23 21:26 - 2013-08-23 21:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-23 21:22 - 2009-07-14 14:43 - 00752652 _____ C:\Windows\system32\perfh015.dat
2013-08-23 21:22 - 2009-07-14 14:43 - 00162038 _____ C:\Windows\system32\perfc015.dat
2013-08-23 21:22 - 2009-07-14 07:13 - 01705610 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-23 21:18 - 2013-07-10 20:02 - 00417672 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-23 21:12 - 2013-06-20 21:05 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\War Thunder
2013-08-23 21:04 - 2013-08-23 21:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Windows OneCare Live
2013-08-23 20:59 - 2013-08-23 20:59 - 00021210 _____ C:\AdwCleaner[S7].txt
2013-08-23 20:59 - 2013-06-22 16:47 - 00003453 _____ C:\Windows\DeleteOnReboot.bat
2013-08-23 20:58 - 2013-08-23 20:58 - 00022665 _____ C:\AdwCleaner[R7].txt
2013-08-23 20:55 - 2013-08-23 20:55 - 00017532 _____ C:\AdwCleaner[R6].txt
2013-08-23 20:23 - 2013-07-12 11:28 - 00000000 ____D C:\Users\Gigi\AppData\Local\screenSHU
2013-08-21 14:15 - 2013-08-21 14:15 - 00001724 _____ C:\Users\Public\Desktop\Defraggler.lnk
2013-08-21 14:15 - 2013-08-21 14:15 - 00000000 ____D C:\Program Files\Defraggler
2013-08-21 14:13 - 2013-06-20 16:27 - 00000000 ____D C:\ProgramData\Skype
2013-08-18 19:43 - 2013-08-18 19:42 - 00000000 ____D C:\Users\Gigi\Desktop\222
2013-08-15 17:17 - 2013-08-15 17:17 - 00000000 ____D C:\Users\Gigi\Documents\Moje gry
2013-08-15 17:03 - 2013-06-20 21:05 - 00000000 ____D C:\Users\Gigi\Documents\My Games
2013-08-15 16:55 - 2013-08-15 16:55 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supreme Commander 2
2013-08-14 10:40 - 2013-08-14 10:40 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-08-14 10:40 - 2013-07-13 10:27 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-08-14 09:00 - 2013-08-14 09:00 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-08-14 09:00 - 2013-08-14 09:00 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-08-13 17:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2013-08-12 14:05 - 2013-06-20 21:01 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-12 13:56 - 2013-08-12 13:56 - 00000000 ____D C:\Users\Gigi\AppData\Local\BlackHawk
2013-08-12 13:54 - 2013-08-12 13:54 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-08-12 13:54 - 2013-08-12 13:54 - 00000000 ____D C:\Users\Gigi\AppData\Local\Comodo
2013-08-12 13:47 - 2013-08-12 13:47 - 00001133 _____ C:\Users\Public\Desktop\Opera.lnk
2013-08-12 13:47 - 2013-08-12 13:47 - 00000000 ____D C:\Users\Gigi\AppData\Local\Opera Software
2013-08-12 13:47 - 2013-08-12 13:44 - 00000000 ____D C:\Users\Gigi\AppData\Local\Google
2013-08-12 12:12 - 2013-06-19 19:18 - 00000000 ___RD C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-12 12:11 - 2013-08-12 12:11 - 00000000 ____D C:\Users\Gigi\Documents\LOLReplay
2013-08-11 17:27 - 2013-07-14 11:33 - 00000000 ____D C:\Windows\system32\appmgmt
2013-08-10 20:56 - 2013-08-10 20:56 - 00000000 ____D C:\Users\Gigi\Documents\RPGVX
2013-08-09 11:02 - 2013-06-20 16:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-08 10:24 - 2013-08-08 10:24 - 00472576 _____ () C:\Windows\Nvidia Omega Drivers v1.169.25 Uninstall.exe
2013-08-06 22:36 - 2013-08-06 22:36 - 00001972 _____ C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
2013-08-06 22:36 - 2013-07-04 10:15 - 00000000 ____D C:\ProgramData\MTA San Andreas All
2013-08-06 22:29 - 2013-08-06 22:29 - 00000000 ____D C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2013-08-06 09:11 - 2013-08-06 09:11 - 00000855 _____ C:\Users\Gigi\Desktop\µTorrent.lnk
2013-08-06 09:11 - 2013-08-06 09:11 - 00000835 _____ C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-08-06 09:07 - 2013-08-06 09:07 - 00000000 ____D C:\Users\Gigi\Documents\Add-in Express
2013-08-05 14:58 - 2013-07-11 10:02 - 00000000 ____D C:\Users\Gigi\AppData\Local\Apple Computer
2013-08-05 13:04 - 2013-07-04 10:10 - 00000000 ____D C:\Users\Gigi\Documents\GTA San Andreas User Files
2013-08-04 12:59 - 2013-08-04 12:59 - 00000000 ____D C:\Users\Gigi\AppData\Local\IsolatedStorage
2013-07-31 17:06 - 2013-07-31 17:06 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-31 17:06 - 2013-07-31 17:06 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-29 14:39 - 2013-07-29 14:35 - 00000354 _____ C:\Users\Gigi\.drjava

Files to move or delete:
====================
C:\Users\Gigi\AppData\Local\Temp\Quarantine.exe
C:\Users\Gigi\AppData\Local\Temp\VSUSetup.exe
C:\Users\Gigi\AppData\Local\Temp\is1890775716\2401340_Setup.EXE
C:\Users\Gigi\AppData\Local\Temp\is-P2E71.tmp\_isetup\_shfoldr.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-23 22:23

==================== End Of Log ============================