Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-08-2013 01
Ran by Dziabong (administrator) on 27-08-2013 11:32:06
Running from C:\Users\Dziabong\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tposdsvc.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
( ) C:\Program Files\Autodesk\Inventor 2013\Moldflow\bin\mitsijm.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Expansion Programs International, Inc.) C:\SIMULIA\Documentation\monitor.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Expansion Programs International, Inc.) C:\SIMULIA\Documentation\monitor.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(The Document Foundation) C:\Program Files (x86)\LibreOffice 4\program\swriter.exe
(The Document Foundation) C:\Program Files (x86)\LibreOffice 4\program\soffice.exe
(The Document Foundation) C:\Program Files (x86)\LibreOffice 4\program\soffice.bin
(Microsoft Corporation) C:\Windows\system32\mspaint.exe
(Irfan Skiljan) C:\Program Files (x86)\IrfanView\i_view32.exe
(WTW.im, Kaworu) C:\Program Files\K2T\WTW\wtw.exe
() c:\users\dziabong\appdata\roaming\.wtw\profiles\dziabong\PluginData\skype-proxy.ovl
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [TpShocks] - C:\Windows\SYSTEM32\TpShocks.exe [228744 2012-09-20] (Lenovo.)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {09de9f21-c833-11e2-9e8c-001c2595fef7} - E:\SETUP.EXE
MountPoints2: {18eb2bb6-54bf-11e2-8558-001c26db3bce} - F:\setup.exe
MountPoints2: {8007d112-93f3-11e2-b978-001c2595fef7} - G:\LaunchU3.exe -a
HKLM-x32\...\Run: [PWMTRV] - C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL [5998144 2012-09-24] (Lenovo Group Limited)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{077FCBCC-704A-4A70-BE4D-DCA196848D62}: [NameServer]192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Dziabong\AppData\Roaming\Mozilla\Firefox\Profiles\rtsmphqw.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Dziabong\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Dziabong\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Dziabong\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Dziabong\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-09-24] (Lenovo.)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
R2 mitsijm2013; C:\Program Files\Autodesk\Inventor 2013\Moldflow\bin\mitsijm.exe [339776 2012-01-31] ( )
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [34528 2013-01-08] (The OpenVPN Project)
R2 Texis Monitor; C:\SIMULIA\Documentation\monitor.exe [4493312 2008-05-05] (Expansion Programs International, Inc.)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-11] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-11] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-11] ()
R3 CnxtHdAudService; C:\Windows\System32\drivers\CHDRTN64.sys [683008 2009-06-22] (Conexant Systems Inc.)
R1 dvdfabio; C:\Windows\system32\drivers\dvdfabio.sys [12776 2012-11-13] (Fengtao Software Inc.)
R3 vdrive; C:\Windows\System32\DRIVERS\vdrive.sys [45544 2012-11-13] (Fengtao Software Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-27 11:29 - 2013-08-27 11:29 - 01578852 _____ (Farbar) C:\Users\Dziabong\Downloads\FRST64.exe
2013-08-26 23:12 - 2013-08-27 00:56 - 778829513 _____ C:\Users\Dziabong\Downloads\B3rave6PC-elamigos.part1.rar
2013-08-26 21:39 - 2013-08-26 21:39 - 00002715 _____ C:\Users\Public\Desktop\LibreOffice 4.1.lnk
2013-08-26 21:38 - 2013-08-26 21:39 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-08-26 21:09 - 2013-08-26 21:12 - 07180288 _____ C:\Users\Dziabong\Downloads\LibreOffice_4.1.0_Win_x86_helppack_pl.msi
2013-08-26 19:34 - 2013-08-26 20:40 - 214945792 _____ C:\Users\Dziabong\Downloads\LibreOffice_4.1.0_Win_x86.msi
2013-08-26 12:43 - 2013-08-26 12:46 - 00000000 ____D C:\Users\Dziabong\Downloads\LibreOffice_4.0.5_Win_x86
2013-08-25 13:57 - 2013-08-25 13:57 - 00067626 _____ C:\Users\Dziabong\Desktop\lista_mailingowa.txt
2013-08-25 13:57 - 2013-08-25 13:57 - 00062122 _____ C:\Users\Dziabong\Desktop\lista_mailingowa2.txt
2013-08-25 13:37 - 2013-08-25 13:40 - 00067626 _____ C:\Users\Dziabong\Downloads\lista_mailingowa.txt
2013-08-25 13:02 - 2013-08-25 13:05 - 00000000 ____D C:\_OTL
2013-08-24 13:12 - 2013-08-24 13:12 - 00077410 _____ C:\Users\Dziabong\Downloads\Extras.Txt
2013-08-24 13:11 - 2013-08-25 13:28 - 00106912 _____ C:\Users\Dziabong\Downloads\OTL.Txt
2013-08-24 12:53 - 2013-08-24 12:54 - 00000000 ____D C:\AdwCleaner
2013-08-24 12:52 - 2013-08-24 12:53 - 00975858 _____ C:\Users\Dziabong\Downloads\AdwCleaner(1).exe
2013-08-24 12:21 - 2013-08-24 12:21 - 00797784 _____ (Duplex Secure Ltd.) C:\Users\Dziabong\Downloads\SPTDinst-v183-x64.exe
2013-08-24 12:10 - 2013-08-24 12:10 - 00602112 _____ (OldTimer Tools) C:\Users\Dziabong\Downloads\OTL.exe
2013-08-24 12:10 - 2013-08-24 12:10 - 00377856 _____ C:\Users\Dziabong\Downloads\xvcd5sk2.exe
2013-08-24 11:40 - 2013-08-24 11:40 - 00000000 ____D C:\Users\Dziabong\AppData\Roaming\FreeHideIP
2013-08-24 11:40 - 2013-08-24 11:40 - 00000000 ____D C:\ProgramData\FreeHideIP
2013-08-24 11:37 - 2013-08-24 11:38 - 02755569 _____ C:\Users\Dziabong\Downloads\FreeHideIP-3.9.1.2.Setup.exe
2013-08-24 09:44 - 2013-08-24 10:31 - 786432000 _____ C:\Users\Dziabong\Downloads\B3rave6PC-elamigos.part2.rar
2013-08-23 14:53 - 2013-08-23 14:53 - 00000000 ____D C:\User Data
2013-08-22 22:02 - 2013-08-22 22:02 - 02361632 _____ C:\Users\Dziabong\Temp.zip
2013-08-22 20:50 - 2013-08-22 20:50 - 00000877 _____ C:\Users\Dziabong\Desktop\bladWorda.txt
2013-08-21 09:48 - 2013-06-09 21:59 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll
2013-08-21 08:54 - 2013-08-21 08:56 - 29966088 _____ (Foxit Corporation                                           ) C:\Users\Dziabong\Downloads\FoxitReader606.0722_enu_Setup.exe
2013-08-20 18:44 - 2013-08-20 18:44 - 00000000 ____D C:\Users\Dziabong\Downloads\wordpress-3.6-pl_PL
2013-08-20 18:21 - 2013-08-20 18:22 - 06511193 _____ C:\Users\Dziabong\Downloads\wordpress-3.6-pl_PL.zip
2013-08-20 17:19 - 2013-08-20 17:51 - 00000000 ____D C:\Users\Dziabong\Downloads\backwpup.3.0.13
2013-08-20 14:02 - 2013-08-20 14:02 - 04332946 _____ C:\Users\Dziabong\Downloads\backwpup.3.0.13.zip
2013-08-17 09:36 - 2013-08-17 09:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-16 07:45 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-16 07:45 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-16 07:45 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-16 07:45 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-16 07:45 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-16 07:45 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-16 07:45 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-16 07:45 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-16 07:45 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-16 07:45 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-16 07:45 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-16 07:45 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-16 07:45 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-16 07:45 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 09:16 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 09:16 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 09:16 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 09:16 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 09:16 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 09:16 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 09:16 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 09:16 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 09:16 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 09:16 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 09:16 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 09:16 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 09:16 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 09:16 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 09:16 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 09:16 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 09:16 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 09:16 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 09:16 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 09:16 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 09:16 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 09:16 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 09:16 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 09:16 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 09:16 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 09:16 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 09:16 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-12 19:29 - 2013-08-12 19:29 - 00000000 ____D C:\Program Files (x86)\CreaSoftware
2013-08-12 19:28 - 2013-08-12 19:28 - 00000000 ____D C:\Windows\Downloaded Installations
2013-08-12 19:27 - 2013-08-12 19:28 - 05001108 _____ (CreaSoftware                                                ) C:\Users\Dziabong\Downloads\NetScanSetup.exe
2013-08-10 15:10 - 2013-08-10 15:10 - 09730461 _____ C:\Users\Dziabong\Desktop\spamotesty.xlsx
2013-08-10 12:21 - 2013-08-12 08:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-10 11:53 - 2013-08-10 12:01 - 152985600 _____ C:\Users\Dziabong\Downloads\inventor2013_sp2_x64.msp
2013-08-04 20:55 - 2013-08-04 21:01 - 35151310 _____ C:\Users\Dziabong\Downloads\Маша и Медведь - Маша + каша.mp4
2013-08-02 23:57 - 2013-08-02 23:58 - 00000000 ____D C:\Users\Dziabong\Desktop\brodziak
2013-07-31 13:14 - 2013-07-31 13:14 - 00040534 _____ C:\Users\Dziabong\Downloads\przedmioty.rar
2013-07-30 14:01 - 2013-07-30 14:01 - 00003052 _____ C:\Windows\System32\Tasks\{BC2189B2-29D2-47FB-8CC8-C9D3FB103531}
2013-07-30 14:00 - 2013-07-30 14:01 - 00000049 _____ C:\Windows\movexe.ini
2013-07-30 14:00 - 2013-07-30 14:00 - 00003096 _____ C:\Windows\System32\Tasks\{FB2C1AF3-37B0-4977-B7FE-8D271726E581}
2013-07-30 13:59 - 2013-07-30 13:59 - 00002910 _____ C:\Windows\System32\Tasks\{65FA5C9F-06B3-4E16-847C-CE09002312A6}
2013-07-30 13:59 - 2013-07-30 13:59 - 00002910 _____ C:\Windows\System32\Tasks\{1CD13B6E-C8BB-442B-AED8-225B3ABB4BF0}
2013-07-30 13:58 - 2013-07-30 17:58 - 00000000 ____D C:\Users\Dziabong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Analiza Mechanizmów
2013-07-30 13:58 - 2013-07-30 13:58 - 00006688 _____ C:\Windows\movexe.exe
2013-07-30 11:56 - 2013-07-30 13:39 - 09491067 _____ C:\Users\Dziabong\Documents\adresy.csv
2013-07-30 11:53 - 2013-07-30 11:53 - 00010120 _____ C:\Users\Dziabong\Documents\Export22.csv
2013-07-30 11:51 - 2013-07-30 11:51 - 00001241 _____ C:\Users\Dziabong\Documents\Export21.csv
2013-07-30 11:50 - 2013-07-30 11:50 - 00000588 _____ C:\Users\Dziabong\Documents\Export20.csv
2013-07-30 11:49 - 2013-07-30 11:49 - 00001102 _____ C:\Users\Dziabong\Documents\Export19.csv
2013-07-30 11:49 - 2013-07-30 11:49 - 00000780 _____ C:\Users\Dziabong\Documents\Export17.csv
2013-07-30 11:49 - 2013-07-30 11:49 - 00000521 _____ C:\Users\Dziabong\Documents\Export18.csv
2013-07-30 11:48 - 2013-07-30 11:48 - 00001061 _____ C:\Users\Dziabong\Documents\Export15.csv
2013-07-30 11:48 - 2013-07-30 11:48 - 00000920 _____ C:\Users\Dziabong\Documents\Export16.csv
2013-07-30 11:47 - 2013-07-30 11:47 - 00001352 _____ C:\Users\Dziabong\Documents\Export12.csv
2013-07-30 11:47 - 2013-07-30 11:47 - 00000672 _____ C:\Users\Dziabong\Documents\Export13.csv
2013-07-30 11:47 - 2013-07-30 11:47 - 00000433 _____ C:\Users\Dziabong\Documents\Export14.csv
2013-07-30 11:46 - 2013-07-30 11:46 - 00000522 _____ C:\Users\Dziabong\Documents\Export11.csv
2013-07-30 11:45 - 2013-07-30 11:45 - 00001608 _____ C:\Users\Dziabong\Documents\Export10.csv
2013-07-30 11:45 - 2013-07-30 11:45 - 00001275 _____ C:\Users\Dziabong\Documents\Export9.csv
2013-07-30 11:44 - 2013-07-30 11:44 - 00001124 _____ C:\Users\Dziabong\Documents\Export8.csv
2013-07-30 11:44 - 2013-07-30 11:44 - 00000681 _____ C:\Users\Dziabong\Documents\Export7.csv
2013-07-30 11:43 - 2013-07-30 11:43 - 00000522 _____ C:\Users\Dziabong\Documents\Export6.csv
2013-07-30 11:42 - 2013-07-30 11:42 - 00000802 _____ C:\Users\Dziabong\Documents\Export5.csv
2013-07-30 11:39 - 2013-07-30 11:39 - 00000992 _____ C:\Users\Dziabong\Documents\Export4.csv
2013-07-30 11:33 - 2013-07-30 11:41 - 00001252 _____ C:\Users\Dziabong\Documents\Export3.csv
2013-07-30 11:32 - 2013-07-30 11:41 - 00001290 _____ C:\Users\Dziabong\Documents\Export2.csv
2013-07-30 11:13 - 2013-07-30 11:13 - 00000000 ____D C:\Users\Dziabong\Downloads\InSpyder Power Search 3.2.7.3735
2013-07-30 11:10 - 2013-07-30 11:10 - 11939455 _____ C:\Users\Dziabong\Downloads\InSpyder Power Search 3.2.7.3735.rar
2013-07-29 13:31 - 2013-08-15 00:26 - 00017310 ____H C:\Users\Dziabong\Desktop\~WRL3404.tmp

==================== One Month Modified Files and Folders =======

2013-08-27 11:31 - 2013-08-27 11:31 - 00000000 ____D C:\FRST
2013-08-27 11:29 - 2013-08-27 11:29 - 01578852 _____ (Farbar) C:\Users\Dziabong\Downloads\FRST64.exe
2013-08-27 11:27 - 2012-12-30 23:38 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-27 11:23 - 2012-12-30 18:07 - 01616343 _____ C:\Windows\WindowsUpdate.log
2013-08-27 10:31 - 2013-06-14 18:34 - 00293888 ___SH C:\Users\Dziabong\Desktop\Thumbs.db
2013-08-27 10:12 - 2009-07-14 06:45 - 00015184 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-27 10:12 - 2009-07-14 06:45 - 00015184 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-27 10:04 - 2013-03-02 21:59 - 00082100 _____ C:\Windows\setupact.log
2013-08-27 10:04 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-27 10:04 - 2009-07-14 06:45 - 00461720 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-27 02:45 - 2012-12-31 01:43 - 00000000 ____D C:\Users\Dziabong\AppData\Roaming\foobar2000
2013-08-27 00:56 - 2013-08-26 23:12 - 778829513 _____ C:\Users\Dziabong\Downloads\B3rave6PC-elamigos.part1.rar
2013-08-26 21:39 - 2013-08-26 21:39 - 00002715 _____ C:\Users\Public\Desktop\LibreOffice 4.1.lnk
2013-08-26 21:39 - 2013-08-26 21:38 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-08-26 21:39 - 2013-06-15 12:54 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4.0
2013-08-26 21:39 - 2012-12-31 19:09 - 00127144 _____ C:\Users\Dziabong\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-26 21:12 - 2013-08-26 21:09 - 07180288 _____ C:\Users\Dziabong\Downloads\LibreOffice_4.1.0_Win_x86_helppack_pl.msi
2013-08-26 20:40 - 2013-08-26 19:34 - 214945792 _____ C:\Users\Dziabong\Downloads\LibreOffice_4.1.0_Win_x86.msi
2013-08-26 17:37 - 2012-12-30 19:54 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-26 12:46 - 2013-08-26 12:43 - 00000000 ____D C:\Users\Dziabong\Downloads\LibreOffice_4.0.5_Win_x86
2013-08-26 08:02 - 2013-03-15 09:19 - 00011596 _____ C:\Windows\PFRO.log
2013-08-25 13:57 - 2013-08-25 13:57 - 00067626 _____ C:\Users\Dziabong\Desktop\lista_mailingowa.txt
2013-08-25 13:57 - 2013-08-25 13:57 - 00062122 _____ C:\Users\Dziabong\Desktop\lista_mailingowa2.txt
2013-08-25 13:40 - 2013-08-25 13:37 - 00067626 _____ C:\Users\Dziabong\Downloads\lista_mailingowa.txt
2013-08-25 13:28 - 2013-08-24 13:11 - 00106912 _____ C:\Users\Dziabong\Downloads\OTL.Txt
2013-08-25 13:05 - 2013-08-25 13:02 - 00000000 ____D C:\_OTL
2013-08-25 12:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-24 13:12 - 2013-08-24 13:12 - 00077410 _____ C:\Users\Dziabong\Downloads\Extras.Txt
2013-08-24 12:54 - 2013-08-24 12:53 - 00000000 ____D C:\AdwCleaner
2013-08-24 12:54 - 2012-12-30 18:18 - 00001003 _____ C:\Users\Dziabong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-24 12:53 - 2013-08-24 12:52 - 00975858 _____ C:\Users\Dziabong\Downloads\AdwCleaner(1).exe
2013-08-24 12:21 - 2013-08-24 12:21 - 00797784 _____ (Duplex Secure Ltd.) C:\Users\Dziabong\Downloads\SPTDinst-v183-x64.exe
2013-08-24 12:10 - 2013-08-24 12:10 - 00602112 _____ (OldTimer Tools) C:\Users\Dziabong\Downloads\OTL.exe
2013-08-24 12:10 - 2013-08-24 12:10 - 00377856 _____ C:\Users\Dziabong\Downloads\xvcd5sk2.exe
2013-08-24 11:40 - 2013-08-24 11:40 - 00000000 ____D C:\Users\Dziabong\AppData\Roaming\FreeHideIP
2013-08-24 11:40 - 2013-08-24 11:40 - 00000000 ____D C:\ProgramData\FreeHideIP
2013-08-24 11:38 - 2013-08-24 11:37 - 02755569 _____ C:\Users\Dziabong\Downloads\FreeHideIP-3.9.1.2.Setup.exe
2013-08-24 11:20 - 2013-07-22 23:04 - 00000000 ____D C:\Users\Dziabong\AppData\Roaming\FileZilla
2013-08-24 10:31 - 2013-08-24 09:44 - 786432000 _____ C:\Users\Dziabong\Downloads\B3rave6PC-elamigos.part2.rar
2013-08-23 14:53 - 2013-08-23 14:53 - 00000000 ____D C:\User Data
2013-08-22 22:02 - 2013-08-22 22:02 - 02361632 _____ C:\Users\Dziabong\Temp.zip
2013-08-22 22:02 - 2012-12-30 18:17 - 00000000 ____D C:\Users\Dziabong
2013-08-22 21:33 - 2012-12-31 14:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-08-22 21:33 - 2012-12-31 14:00 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-22 21:30 - 2012-12-31 14:01 - 00000000 ____D C:\Windows\SHELLNEW
2013-08-22 21:23 - 2012-12-31 14:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-22 21:22 - 2012-12-31 14:01 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-22 21:21 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-22 20:50 - 2013-08-22 20:50 - 00000877 _____ C:\Users\Dziabong\Desktop\bladWorda.txt
2013-08-21 08:56 - 2013-08-21 08:54 - 29966088 _____ (Foxit Corporation                                           ) C:\Users\Dziabong\Downloads\FoxitReader606.0722_enu_Setup.exe
2013-08-20 18:44 - 2013-08-20 18:44 - 00000000 ____D C:\Users\Dziabong\Downloads\wordpress-3.6-pl_PL
2013-08-20 18:22 - 2013-08-20 18:21 - 06511193 _____ C:\Users\Dziabong\Downloads\wordpress-3.6-pl_PL.zip
2013-08-20 17:51 - 2013-08-20 17:19 - 00000000 ____D C:\Users\Dziabong\Downloads\backwpup.3.0.13
2013-08-20 14:02 - 2013-08-20 14:02 - 04332946 _____ C:\Users\Dziabong\Downloads\backwpup.3.0.13.zip
2013-08-20 10:30 - 2012-12-30 20:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-17 09:36 - 2013-08-17 09:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-16 07:42 - 2009-07-14 19:55 - 00750628 _____ C:\Windows\system32\perfh015.dat
2013-08-16 07:42 - 2009-07-14 19:55 - 00159056 _____ C:\Windows\system32\perfc015.dat
2013-08-16 07:42 - 2009-07-14 07:13 - 01709242 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-16 07:39 - 2013-07-12 20:13 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 07:36 - 2012-12-30 22:53 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-15 00:26 - 2013-07-29 13:31 - 00017310 ____H C:\Users\Dziabong\Desktop\~WRL3404.tmp
2013-08-13 08:59 - 2012-12-30 19:54 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-08-12 19:29 - 2013-08-12 19:29 - 00000000 ____D C:\Program Files (x86)\CreaSoftware
2013-08-12 19:28 - 2013-08-12 19:28 - 00000000 ____D C:\Windows\Downloaded Installations
2013-08-12 19:28 - 2013-08-12 19:27 - 05001108 _____ (CreaSoftware                                                ) C:\Users\Dziabong\Downloads\NetScanSetup.exe
2013-08-12 08:03 - 2013-08-10 12:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-10 15:10 - 2013-08-10 15:10 - 09730461 _____ C:\Users\Dziabong\Desktop\spamotesty.xlsx
2013-08-10 12:45 - 2013-04-17 13:18 - 00002243 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2013 - Polski (Polish).lnk
2013-08-10 12:01 - 2013-08-10 11:53 - 152985600 _____ C:\Users\Dziabong\Downloads\inventor2013_sp2_x64.msp
2013-08-05 13:51 - 2013-01-23 03:39 - 00000000 ____D C:\Users\Dziabong\AppData\Roaming\Audacity
2013-08-04 21:01 - 2013-08-04 20:55 - 35151310 _____ C:\Users\Dziabong\Downloads\Маша и Медведь - Маша + каша.mp4
2013-08-02 23:58 - 2013-08-02 23:57 - 00000000 ____D C:\Users\Dziabong\Desktop\brodziak
2013-07-31 13:14 - 2013-07-31 13:14 - 00040534 _____ C:\Users\Dziabong\Downloads\przedmioty.rar
2013-07-30 17:58 - 2013-07-30 13:58 - 00000000 ____D C:\Users\Dziabong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Analiza Mechanizmów
2013-07-30 14:01 - 2013-07-30 14:01 - 00003052 _____ C:\Windows\System32\Tasks\{BC2189B2-29D2-47FB-8CC8-C9D3FB103531}
2013-07-30 14:01 - 2013-07-30 14:00 - 00000049 _____ C:\Windows\movexe.ini
2013-07-30 14:01 - 2009-07-14 04:34 - 00000435 _____ C:\Windows\win.ini
2013-07-30 14:00 - 2013-07-30 14:00 - 00003096 _____ C:\Windows\System32\Tasks\{FB2C1AF3-37B0-4977-B7FE-8D271726E581}
2013-07-30 14:00 - 2012-12-30 18:17 - 00000000 ____D C:\Users\Dziabong\AppData\Local\VirtualStore
2013-07-30 13:59 - 2013-07-30 13:59 - 00002910 _____ C:\Windows\System32\Tasks\{65FA5C9F-06B3-4E16-847C-CE09002312A6}
2013-07-30 13:59 - 2013-07-30 13:59 - 00002910 _____ C:\Windows\System32\Tasks\{1CD13B6E-C8BB-442B-AED8-225B3ABB4BF0}
2013-07-30 13:58 - 2013-07-30 13:58 - 00006688 _____ C:\Windows\movexe.exe
2013-07-30 13:39 - 2013-07-30 11:56 - 09491067 _____ C:\Users\Dziabong\Documents\adresy.csv
2013-07-30 11:53 - 2013-07-30 11:53 - 00010120 _____ C:\Users\Dziabong\Documents\Export22.csv
2013-07-30 11:51 - 2013-07-30 11:51 - 00001241 _____ C:\Users\Dziabong\Documents\Export21.csv
2013-07-30 11:50 - 2013-07-30 11:50 - 00000588 _____ C:\Users\Dziabong\Documents\Export20.csv
2013-07-30 11:49 - 2013-07-30 11:49 - 00001102 _____ C:\Users\Dziabong\Documents\Export19.csv
2013-07-30 11:49 - 2013-07-30 11:49 - 00000780 _____ C:\Users\Dziabong\Documents\Export17.csv
2013-07-30 11:49 - 2013-07-30 11:49 - 00000521 _____ C:\Users\Dziabong\Documents\Export18.csv
2013-07-30 11:48 - 2013-07-30 11:48 - 00001061 _____ C:\Users\Dziabong\Documents\Export15.csv
2013-07-30 11:48 - 2013-07-30 11:48 - 00000920 _____ C:\Users\Dziabong\Documents\Export16.csv
2013-07-30 11:47 - 2013-07-30 11:47 - 00001352 _____ C:\Users\Dziabong\Documents\Export12.csv
2013-07-30 11:47 - 2013-07-30 11:47 - 00000672 _____ C:\Users\Dziabong\Documents\Export13.csv
2013-07-30 11:47 - 2013-07-30 11:47 - 00000433 _____ C:\Users\Dziabong\Documents\Export14.csv
2013-07-30 11:46 - 2013-07-30 11:46 - 00000522 _____ C:\Users\Dziabong\Documents\Export11.csv
2013-07-30 11:45 - 2013-07-30 11:45 - 00001608 _____ C:\Users\Dziabong\Documents\Export10.csv
2013-07-30 11:45 - 2013-07-30 11:45 - 00001275 _____ C:\Users\Dziabong\Documents\Export9.csv
2013-07-30 11:44 - 2013-07-30 11:44 - 00001124 _____ C:\Users\Dziabong\Documents\Export8.csv
2013-07-30 11:44 - 2013-07-30 11:44 - 00000681 _____ C:\Users\Dziabong\Documents\Export7.csv
2013-07-30 11:43 - 2013-07-30 11:43 - 00000522 _____ C:\Users\Dziabong\Documents\Export6.csv
2013-07-30 11:42 - 2013-07-30 11:42 - 00000802 _____ C:\Users\Dziabong\Documents\Export5.csv
2013-07-30 11:41 - 2013-07-30 11:33 - 00001252 _____ C:\Users\Dziabong\Documents\Export3.csv
2013-07-30 11:41 - 2013-07-30 11:32 - 00001290 _____ C:\Users\Dziabong\Documents\Export2.csv
2013-07-30 11:40 - 2013-07-13 12:52 - 00007549 _____ C:\Users\Dziabong\Documents\Export1.csv
2013-07-30 11:39 - 2013-07-30 11:39 - 00000992 _____ C:\Users\Dziabong\Documents\Export4.csv
2013-07-30 11:13 - 2013-07-30 11:13 - 00000000 ____D C:\Users\Dziabong\Downloads\InSpyder Power Search 3.2.7.3735
2013-07-30 11:10 - 2013-07-30 11:10 - 11939455 _____ C:\Users\Dziabong\Downloads\InSpyder Power Search 3.2.7.3735.rar

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-24 10:49

==================== End Of Log ============================