Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013 Ran by mookie (administrator) on 29-08-2013 00:03:18 Running from F:\ Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe (Microsoft Corporation) C:\windows\system32\WLANExt.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\sqlservr.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Nokia) C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\srspremiumpanel_64.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe () C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe (Intel Corporation) C:\windows\system32\igfxext.exe (Intel Corporation) C:\windows\system32\igfxsrvc.exe (SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe (SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe (Microsoft Corporation) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe (Intel Corporation) C:\windows\system32\hkcmd.exe (Intel Corporation) C:\windows\system32\igfxpers.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Opera Software) C:\Program Files (x86)\Opera\Opera.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-17] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2581384 2010-08-31] (ELAN Microelectronics Corp.) HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-01-10] (Samsung) HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1475952 2013-01-10] (Samsung) HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-01-10] (Samsung) HKCU\...\Run: [PC Suite Tray] - C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia) MountPoints2: {dc8acdd5-60b4-11e2-a53b-b4749ffb6fc6} - G:\LGAutoRun.exe HKLM-x32\...\Run: [AllShareAgent] - C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-01-19] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.) AppInit_DLLs: C:\windows\system32\nvinitx.dll [226920 2011-01-17] (NVIDIA Corporation) AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll [192616 2011-01-17] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HD Writer.lnk ShortcutTarget: HD Writer.lnk -> C:\Program Files (x86)\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe (Panasonic Corporation) Startup: C:\Users\mookie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll () BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) DPF: HKLM-x32 {92ECE6FA-AC2E-4042-BFAE-0C8608E52A41} https://www.pekaobiznes24.pl/sme/static/components/SignActivXPEKAO.cab DPF: HKLM-x32 {C3E3BB4F-269C-41A3-9F5F-A360E933CAD3} https://as.photoprintit.com/ips-opdata/activex/ImageUploader6.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{17BDEAB7-A54A-4561-83D1-305372404C52}: [NameServer]212.2.96.51 212.2.96.52 Chrome: ======= CHR HomePage: hxxp://www.searchnu.com/406 CHR RestoreOnStartup: "hxxp://www.searchnu.com/406"]},"tabs":{"use_vertical_tabs" ==================== Services (Whitelisted) ================= R2 MSSQL$INSERTGT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] () S4 SQLAgent$INSERTGT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-03-06] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-03-06] (LG Electronics Inc.) S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-07-28] (Windows (R) 2003 DDK 3790 provider) S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-07-28] (Windows (R) 2003 DDK 3790 provider) U4 avgtp; S3 EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-28 23:55 - 2013-08-28 23:12 - 00001391 _____ C:\Users\mookie\Desktop\fixlist.txt 2013-08-28 23:52 - 2013-08-28 23:53 - 00262144 _____ C:\windows\Minidump\082813-38001-01.dmp 2013-08-28 22:07 - 2013-08-28 22:07 - 00262144 _____ C:\windows\Minidump\082813-21340-01.dmp 2013-08-28 21:52 - 2013-08-28 21:52 - 00262144 _____ C:\windows\Minidump\082813-61261-01.dmp 2013-08-25 15:44 - 2013-08-25 15:44 - 00262144 _____ C:\windows\Minidump\082513-26722-01.dmp 2013-08-25 02:39 - 2013-08-25 02:39 - 00000000 __SHD C:\found.000 2013-08-25 02:34 - 2013-08-25 02:34 - 00000000 _____ C:\windows\SysWOW64\config.nt 2013-08-25 02:34 - 2013-05-09 10:58 - 00287840 _____ (AVAST Software) C:\windows\system32\aswBoot.exe 2013-08-25 02:33 - 2013-08-25 02:33 - 00000000 ____D C:\Program Files\AVAST Software 2013-08-25 02:31 - 2013-08-25 02:33 - 00000000 ____D C:\ProgramData\AVAST Software 2013-08-25 02:03 - 2013-08-25 02:03 - 00262144 _____ C:\windows\Minidump\082513-32651-01.dmp 2013-08-25 01:32 - 2013-08-25 01:32 - 00262144 _____ C:\windows\Minidump\082513-27019-01.dmp 2013-08-25 00:49 - 2013-08-25 00:49 - 00262144 _____ C:\windows\Minidump\082513-32027-01.dmp 2013-08-24 23:52 - 2013-08-24 23:52 - 00053854 _____ C:\Extras.Txt 2013-08-24 23:26 - 2013-08-24 23:26 - 00262144 _____ C:\windows\Minidump\082413-38703-01.dmp 2013-08-24 23:19 - 2013-08-24 23:19 - 00000000 ____D C:\windows\system32\MRT 2013-08-24 23:19 - 2013-08-05 16:14 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-08-24 23:09 - 2013-08-24 23:09 - 00003258 _____ C:\windows\System32\Tasks\{D7129EE7-AA57-4CC7-85EE-87D915531D13} 2013-08-24 23:03 - 2013-08-24 23:04 - 00262144 _____ C:\windows\Minidump\082413-39780-01.dmp 2013-08-24 18:38 - 2013-08-24 18:38 - 00262144 _____ C:\windows\Minidump\082413-32120-01.dmp 2013-08-24 15:08 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-08-24 15:08 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-08-24 15:08 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-08-24 15:08 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-08-24 15:08 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-08-24 15:08 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-08-24 15:08 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-08-24 15:08 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-08-24 15:08 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-08-24 15:08 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-08-24 15:08 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-08-24 15:08 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-08-24 15:08 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe 2013-08-24 15:08 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-24 14:50 - 2013-08-24 14:52 - 00262144 _____ C:\windows\Minidump\082413-95519-01.dmp 2013-08-24 09:28 - 2013-08-24 09:28 - 00000000 ____D C:\FRST 2013-08-24 01:02 - 2013-08-24 01:02 - 00262144 _____ C:\windows\Minidump\082413-35365-01.dmp 2013-08-24 00:48 - 2013-08-24 00:48 - 00262144 _____ C:\windows\Minidump\082413-36566-01.dmp 2013-08-24 00:35 - 2013-08-24 00:36 - 00262144 _____ C:\windows\Minidump\082413-41480-01.dmp 2013-08-23 05:48 - 2013-08-24 23:52 - 00088832 _____ C:\OTL.Txt 2013-08-22 18:46 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL 2013-08-22 18:46 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL 2013-08-22 18:46 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2013-08-22 18:46 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll 2013-08-22 18:46 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2013-08-22 18:46 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll 2013-08-22 18:46 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll 2013-08-22 18:46 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll 2013-08-22 18:46 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll 2013-08-22 18:46 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll 2013-08-22 18:46 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2013-08-22 18:46 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll 2013-08-22 18:46 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll 2013-08-22 18:46 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll 2013-08-22 18:46 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2013-08-22 18:46 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys 2013-08-13 21:03 - 2013-08-13 21:03 - 00010248 ____N C:\bootsqm.dat 2013-08-10 10:54 - 2010-11-21 05:25 - 00606208 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstime.dll 2013-08-10 10:54 - 2010-11-21 05:25 - 00176128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ie4uinit.exe 2013-08-10 10:54 - 2010-11-21 05:24 - 01026560 _____ (Microsoft Corporation) C:\windows\system32\mstime.dll 2013-08-10 10:54 - 2009-07-14 03:41 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\ieaksie.dll 2013-08-10 10:54 - 2009-07-14 03:41 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\ieakeng.dll 2013-08-10 10:54 - 2009-07-14 03:40 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\admparse.dll 2013-08-10 10:54 - 2009-07-14 03:40 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\corpol.dll 2013-08-10 10:54 - 2009-07-14 03:27 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\ieakui.dll 2013-08-10 10:54 - 2009-07-14 03:15 - 00229376 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieaksie.dll 2013-08-10 10:54 - 2009-07-14 03:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieakeng.dll 2013-08-10 10:54 - 2009-07-14 03:15 - 00018432 _____ (Microsoft Corporation) C:\windows\SysWOW64\corpol.dll 2013-08-10 10:54 - 2009-07-14 03:14 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\admparse.dll 2013-08-10 10:54 - 2009-07-14 03:05 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieakui.dll 2013-08-10 10:54 - 2009-06-10 22:45 - 00000003 _____ C:\windows\system32\Drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf 2013-08-10 09:23 - 2013-08-22 20:28 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0 ==================== One Month Modified Files and Folders ======= 2013-08-29 00:03 - 2011-04-20 07:48 - 01694488 _____ C:\windows\WindowsUpdate.log 2013-08-29 00:02 - 2013-08-29 00:02 - 01579080 _____ (Farbar) C:\Users\mookie\Downloads\FRST64.exe 2013-08-29 00:02 - 2009-07-14 06:45 - 00021200 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-29 00:02 - 2009-07-14 06:45 - 00021200 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-29 00:00 - 2011-04-20 07:41 - 00804824 _____ C:\windows\system32\perfh015.dat 2013-08-29 00:00 - 2011-04-20 07:41 - 00180152 _____ C:\windows\system32\perfc015.dat 2013-08-29 00:00 - 2009-07-14 07:13 - 01851394 _____ C:\windows\system32\PerfStringBackup.INI 2013-08-28 23:57 - 2012-08-12 21:32 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2013-08-28 23:53 - 2013-08-28 23:52 - 00262144 _____ C:\windows\Minidump\082813-38001-01.dmp 2013-08-28 23:53 - 2012-04-01 15:40 - 00001044 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-28 23:52 - 2013-07-10 22:15 - 648704360 _____ C:\windows\MEMORY.DMP 2013-08-28 23:52 - 2013-07-10 22:15 - 00000000 ____D C:\windows\Minidump 2013-08-28 23:52 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT 2013-08-28 23:52 - 2009-07-14 06:51 - 00104635 _____ C:\windows\setupact.log 2013-08-28 23:12 - 2013-08-28 23:55 - 00001391 _____ C:\Users\mookie\Desktop\fixlist.txt 2013-08-28 22:11 - 2012-05-26 19:46 - 00000000 ____D C:\Program Files (x86)\Opera 2013-08-28 22:07 - 2013-08-28 22:07 - 00262144 _____ C:\windows\Minidump\082813-21340-01.dmp 2013-08-28 21:52 - 2013-08-28 21:52 - 00262144 _____ C:\windows\Minidump\082813-61261-01.dmp 2013-08-28 21:52 - 2011-12-14 16:51 - 00000000 ____D C:\Users\mookie 2013-08-25 21:02 - 2011-12-14 17:00 - 00000000 ___RD C:\Users\mookie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-08-25 20:55 - 2012-04-01 15:40 - 00001048 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-25 15:44 - 2013-08-25 15:44 - 00262144 _____ C:\windows\Minidump\082513-26722-01.dmp 2013-08-25 02:39 - 2013-08-25 02:39 - 00000000 __SHD C:\found.000 2013-08-25 02:34 - 2013-08-25 02:34 - 00000000 _____ C:\windows\SysWOW64\config.nt 2013-08-25 02:33 - 2013-08-25 02:33 - 00000000 ____D C:\Program Files\AVAST Software 2013-08-25 02:03 - 2013-08-25 02:03 - 00262144 _____ C:\windows\Minidump\082513-32651-01.dmp 2013-08-25 01:32 - 2013-08-25 01:32 - 00262144 _____ C:\windows\Minidump\082513-27019-01.dmp 2013-08-25 00:49 - 2013-08-25 00:49 - 00262144 _____ C:\windows\Minidump\082513-32027-01.dmp 2013-08-24 23:52 - 2013-08-24 23:52 - 00053854 _____ C:\Extras.Txt 2013-08-24 23:52 - 2013-08-23 05:48 - 00088832 _____ C:\OTL.Txt 2013-08-24 23:31 - 2012-08-12 21:32 - 00003868 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater 2013-08-24 23:31 - 2012-03-31 21:37 - 00692104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2013-08-24 23:31 - 2011-12-15 12:28 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-24 23:26 - 2013-08-24 23:26 - 00262144 _____ C:\windows\Minidump\082413-38703-01.dmp 2013-08-24 23:25 - 2013-08-25 02:31 - 00000000 ____D C:\ProgramData\AVAST Software 2013-08-24 23:25 - 2010-11-21 05:47 - 02024264 _____ C:\windows\PFRO.log 2013-08-24 23:21 - 2013-08-24 23:19 - 00000000 ____D C:\windows\system32\MRT 2013-08-24 23:09 - 2013-08-24 23:09 - 00003258 _____ C:\windows\System32\Tasks\{D7129EE7-AA57-4CC7-85EE-87D915531D13} 2013-08-24 23:04 - 2013-08-24 23:03 - 00262144 _____ C:\windows\Minidump\082413-39780-01.dmp 2013-08-24 22:52 - 2011-04-19 16:18 - 00000000 ____D C:\ProgramData\Norton 2013-08-24 18:38 - 2013-08-24 18:38 - 00262144 _____ C:\windows\Minidump\082413-32120-01.dmp 2013-08-24 15:00 - 2011-12-19 22:13 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-08-24 14:52 - 2013-08-24 14:50 - 00262144 _____ C:\windows\Minidump\082413-95519-01.dmp 2013-08-24 09:28 - 2013-08-24 09:28 - 00000000 ____D C:\FRST 2013-08-24 01:02 - 2013-08-24 01:02 - 00262144 _____ C:\windows\Minidump\082413-35365-01.dmp 2013-08-24 00:48 - 2013-08-24 00:48 - 00262144 _____ C:\windows\Minidump\082413-36566-01.dmp 2013-08-24 00:36 - 2013-08-24 00:35 - 00262144 _____ C:\windows\Minidump\082413-41480-01.dmp 2013-08-22 20:28 - 2013-08-10 09:23 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0 2013-08-13 21:03 - 2013-08-13 21:03 - 00010248 ____N C:\bootsqm.dat 2013-08-13 20:44 - 2012-03-27 21:57 - 00000000 ____D C:\Users\mookie\AppData\Local\CrashDumps 2013-08-10 10:55 - 2009-07-14 05:20 - 00000000 ____D C:\windows\SysWOW64\com 2013-08-10 10:55 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\oobe 2013-08-10 10:55 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\com 2013-08-10 10:55 - 2009-07-14 05:20 - 00000000 ____D C:\windows\IME 2013-08-10 00:57 - 2009-07-14 07:08 - 00032604 _____ C:\windows\Tasks\SCHEDLGU.TXT 2013-08-09 22:39 - 2012-04-01 15:40 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-09 22:32 - 2011-04-19 16:38 - 00000000 ____D C:\windows\SysWOW64\NV 2013-08-09 22:32 - 2011-04-19 16:38 - 00000000 ____D C:\windows\system32\NV 2013-08-09 22:32 - 2011-04-19 15:55 - 00000000 ____D C:\ProgramData\NVIDIA 2013-08-09 22:31 - 2009-07-14 06:45 - 00322640 _____ C:\windows\system32\FNTCACHE.DAT 2013-08-09 22:30 - 2011-04-20 07:12 - 00000000 ____D C:\Program Files\Windows Journal 2013-08-09 22:30 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-08-09 22:30 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-08-08 21:39 - 2011-04-19 16:24 - 00000000 ____D C:\ProgramData\SAMSUNG 2013-08-08 21:29 - 2013-01-17 17:26 - 00000000 ____D C:\ProgramData\LGMOBILEAX 2013-08-08 21:27 - 2011-04-19 16:02 - 00000000 ____D C:\ProgramData\CyberLink 2013-08-08 21:20 - 2012-03-12 21:24 - 01827532 _____ C:\windows\SysWOW64\PerfStringBackup.INI 2013-08-08 21:18 - 2013-01-13 14:01 - 00000000 ____D C:\Archiwum GT 2013-08-08 21:17 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\sysprep 2013-08-08 17:46 - 2013-03-20 18:32 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-08-08 17:46 - 2013-03-20 18:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-08-05 16:14 - 2013-08-24 23:19 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe Files to move or delete: ==================== C:\Users\mookie\AppData\Local\Temp\A612.tmp.exe C:\Users\mookie\AppData\Local\Temp\AcDeltree.exe C:\Users\mookie\AppData\Local\Temp\AVG.exe C:\Users\mookie\AppData\Local\Temp\COMAP.EXE C:\Users\mookie\AppData\Local\Temp\Install_Nokia_Ovi_Suite.exe C:\Users\mookie\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\mookie\AppData\Local\Temp\NEventMessages.dll C:\Users\mookie\AppData\Local\Temp\ose00000.exe C:\Users\mookie\AppData\Local\Temp\SkypeSetup.exe C:\Users\mookie\AppData\Local\Temp\UNINSTALL.EXE C:\Users\mookie\AppData\Local\Temp\{F8444A0D-1A9F-45C9-A53A-61C649AA22E7}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{F437147A-36EF-4609-8C4F-6601B48FCBD6}\ISSetup.dll C:\Users\mookie\AppData\Local\Temp\{F04C8E0C-BA60-4213-9E40-A1BC62D7CD10}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\BrowseFolderDll.dll C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\Execute2App.exe C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\ISRT.dll C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\KiesProgressDialog.dll C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\MSSetupAddinDll.dll C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\MSSetupAddinDllForVista.dll C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\msvcr90.dll C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\NDP40-KB2461678-x64.exe C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\setup.exe C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\WriteDescExecuteFileName.exe C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\_isres_0x0415.dll C:\Users\mookie\AppData\Local\Temp\{EA4E0A55-38C0-4F44-9EDE-1536B1708D04}\_isuser_0x0415.dll C:\Users\mookie\AppData\Local\Temp\{CD2D23F5-1851-49C3-BACE-203B8A444318}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{987E74C2-B14A-42C9-BCDB-C1338E49F594}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{9071B2B4-2947-43CD-9332-EAF23C2A7481}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{8DE6302F-2A5D-4A9E-A96A-234CDDE6B63F}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{8D9A90BD-7913-4584-9194-846E5D9B9DB8}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{887D07DC-20E9-4E7E-A7C7-5F953F0B440E}\setup.exe C:\Users\mookie\AppData\Local\Temp\{7E233254-405A-4090-BA74-61FBA1031098}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{7C2F9C03-2735-4299-B432-6E435522CB82}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{74DFC836-D227-4CA1-9B5C-3B625DDA8B10}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{59F1AAD2-1094-475C-A009-84EE257F2AF6}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{592BD9C8-CE33-4944-B17E-E1A108CC8131}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{54D1812E-1ADE-45DA-BC2D-E798F3CBF3AF}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{4F2965AD-B664-40BE-AD6F-0ADD1389A544}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{39F62AB5-1654-47C4-942A-8F8740385D85}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{2511A4AB-69C8-4290-BA74-72CA37DD6A96}\{671EC9B2-A0F0-4035-AA48-729EDC3C59EF}\TurboBoostSetup_x64.exe C:\Users\mookie\AppData\Local\Temp\{1E442A8D-78D8-480B-8256-96F6E4C03421}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\{10BE459B-484B-4603-946C-DED61B4A48A0}\ISBEW64.exe C:\Users\mookie\AppData\Local\Temp\_AIC46A.tmp\en-US\AcSetupRes.dll C:\Users\mookie\AppData\Local\Temp\_AIC46A.tmp\en-US\ADRInstRes.dll C:\Users\mookie\AppData\Local\Temp\_AIC46A.tmp\en-US\PatchMgrRes.dll C:\Users\mookie\AppData\Local\Temp\_AIC46A.tmp\en-US\senddmpres.dll C:\Users\mookie\AppData\Local\Temp\_AIC46A.tmp\en-US\setupres.dll C:\Users\mookie\AppData\Local\Temp\_AI5C74.tmp\en-US\AcSetupRes.dll C:\Users\mookie\AppData\Local\Temp\_AI5C74.tmp\en-US\ADRInstRes.dll C:\Users\mookie\AppData\Local\Temp\_AI5C74.tmp\en-US\PatchMgrRes.dll C:\Users\mookie\AppData\Local\Temp\_AI5C74.tmp\en-US\senddmpres.dll C:\Users\mookie\AppData\Local\Temp\_AI5C74.tmp\en-US\setupres.dll C:\Users\mookie\AppData\Local\Temp\_AI2BB4.tmp\en-US\AcSetupRes.dll C:\Users\mookie\AppData\Local\Temp\_AI2BB4.tmp\en-US\ADRInstRes.dll C:\Users\mookie\AppData\Local\Temp\_AI2BB4.tmp\en-US\PatchMgrRes.dll C:\Users\mookie\AppData\Local\Temp\_AI2BB4.tmp\en-US\senddmpres.dll C:\Users\mookie\AppData\Local\Temp\_AI2BB4.tmp\en-US\setupres.dll C:\Users\mookie\AppData\Local\Temp\_AI2435.tmp\en-US\AcSetupRes.dll C:\Users\mookie\AppData\Local\Temp\_AI2435.tmp\en-US\ADRInstRes.dll C:\Users\mookie\AppData\Local\Temp\_AI2435.tmp\en-US\PatchMgrRes.dll C:\Users\mookie\AppData\Local\Temp\_AI2435.tmp\en-US\senddmpres.dll C:\Users\mookie\AppData\Local\Temp\_AI2435.tmp\en-US\setupres.dll C:\Users\mookie\AppData\Local\Temp\Temp3_top_netinfo.zip\top_netinfo.exe C:\Users\mookie\AppData\Local\Temp\TeamViewer\Version7\TeamViewer_.exe C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe C:\Users\mookie\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe C:\Users\mookie\AppData\Local\Temp\G\LGAutoRun.exe C:\Users\mookie\AppData\Local\Temp\G\P5_LGPsLvDlChk.dll C:\Users\mookie\AppData\Local\Temp\G\SendScsiCmd.dll C:\Users\mookie\AppData\Local\Temp\f6e92ebd-f31b-44dd-acb3-5ec1b6282170\CliSecureRT.dll C:\Users\mookie\AppData\Local\Temp\F\LGAutoRun.exe C:\Users\mookie\AppData\Local\Temp\F\P5_LGPsLvDlChk.dll C:\Users\mookie\AppData\Local\Temp\F\SendScsiCmd.dll C:\Users\mookie\AppData\Local\Temp\DCD7.dir\InstallFlashPlayer.exe C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\D3DCompiler_43.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\Opera-12.16-1860.i386.autoupdate.exe C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\opera.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\opera.exe C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\OperaUpgrader.exe C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\updatechecker\opera_autoupdate.exe C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\mapi\OperaMAPI.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\gstreamer.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstaudioconvert.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstaudioresample.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstautodetect.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstcoreplugins.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstdecodebin2.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstdirectsound.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstffmpegcolorspace.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstoggdec.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstwaveform.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstwavparse.dll C:\Users\mookie\AppData\Local\Temp\CProgram Files (x86)Opera\gstreamer\plugins\gstwebmdec.dll C:\Users\mookie\AppData\Local\Temp\ceff0f2f-3d8e-4607-889a-2cdb49463044\CliSecureRT.dll C:\Users\mookie\AppData\Local\Temp\avg_a05080\avg-secure-search-installer.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\ProgFiles\AVG Secure Search\GenericWndApi.dll C:\Users\mookie\AppData\Local\Temp\avg_a05080\ProgFiles\AVG Secure Search\lip.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\ProgFiles\AVG Secure Search\PostInstall.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\ProgFiles\AVG Secure Search\Uninstall.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\ProgFiles\AVG Secure Search\vprot.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\ProgFiles\AVG Secure Search\13.3.0.17\AVG Secure Search_toolbar.dll C:\Users\mookie\AppData\Local\Temp\avg_a05080\ConfigFiles\avguidx.dll C:\Users\mookie\AppData\Local\Temp\avg_a05080\ConfigFiles\MachineIdCreator.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\CommonFiles\AVG Secure Search\avgdttbx.dll C:\Users\mookie\AppData\Local\Temp\avg_a05080\CommonFiles\AVG Secure Search\DriverInstaller.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\CommonFiles\AVG Secure Search\DriverInstaller_64.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\CommonFiles\AVG Secure Search\npsitesafety.dll C:\Users\mookie\AppData\Local\Temp\avg_a05080\CommonFiles\AVG Secure Search\ScriptHelper.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\CommonFiles\AVG Secure Search\SiteSafety.dll C:\Users\mookie\AppData\Local\Temp\avg_a05080\CommonFiles\AVG Secure Search\ToolbarUpdater.exe C:\Users\mookie\AppData\Local\Temp\avg_a05080\CommonFiles\AVG Secure Search\ViProtocol.dll C:\Users\mookie\AppData\Local\Temp\afd491c9-c5d8-4807-8404-154e7cbc47a7\CliSecureRT.dll C:\Users\mookie\AppData\Local\Temp\AB6C.dir\InstallFlashPlayer.exe C:\Users\mookie\AppData\Local\Temp\26b4a1dd-e07b-48af-be4e-9642b273284b\CliSecureRT.dll C:\Users\mookie\AppData\Local\Temp\1d1b7971-f0d5-4f67-b07b-5e3c397cc57f\CliSecureRT.dll C:\Users\mookie\AppData\Local\Temp\19af4015-6d3a-4876-8b3e-4792478f1e4b\CliSecureRT.dll C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll C:\Users\mookie\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-09 22:50 ==================== End Of Log ============================