Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01
Ran by Maszek (administrator) on MASZEK-PC on 20-09-2013 18:46:17
Running from C:\Users\Maszek\Desktop
Windows 7 Ultimate (X64) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
() C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files (x86)\PLAY ONLINE\PLAY ONLINE.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation)
HKLM\...\Policies\Explorer\Run: [57128] - C:\ProgramData\Local Settings\Temp\msaiaiki.scr No File
HKLM-x32\...\Run: [STCAgent] - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe [776064 2011-03-04] (Splashtop Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ZyngaGamesAgent] - C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe [841544 2010-11-15] (Splashtop Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
AppInit_DLLs: C:\PROGRA~1\NVIDIA~1\NVSTRE~1\rxinput.dll [653600 2013-07-27] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wyborcza.pl/0,0.html?p=139
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://wyborcza.pl/0,0.html?p=139
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://websearch.pur-esult.info/?pid=724&r=2013/08/14&hid=999645584&lg=EN&cc=PL
URLSearchHook: (No Name) - {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=724&r=2013/08/14&hid=999645584&lg=EN&cc=PL
SearchScopes: HKCU - DefaultScope {DBD02371-C42C-4b74-BD8D-DD9125E1BE5C} URL = http://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=724&r=2013/08/14&hid=999645584&lg=EN&cc=PL
SearchScopes: HKCU - {DBD02371-C42C-4b74-BD8D-DD9125E1BE5C} URL = http://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {F26E41A3-C103-443f-9AC4-A1738C4C8907} URL = http://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Splashtop Connect VisualBookmark - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (Splashtop Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: savensharre - {4E8C55D3-CE03-AD4F-17D7-926BFBBE5A20} - C:\ProgramData\savensharre\yyQBgSn1.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Searchh-NewTTaab - {AE21E59C-1411-CD2C-EFE3-0BD70721BA1F} - C:\ProgramData\Searchh-NewTTaab\EV7.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\..\Interfaces\{007423F1-A1A9-4855-8E1D-21767F5B80F7}: [NameServer]89.108.195.21 89.108.202.21
Tcpip\..\Interfaces\{40850293-7CE0-45A3-BF48-B6E1822E4854}: [NameServer]89.108.202.20 89.108.195.20
Tcpip\..\Interfaces\{447A10E4-1AEF-4226-9891-A44908696DBE}: [NameServer]89.108.195.21 89.108.202.21
Tcpip\..\Interfaces\{4BE4D1A2-4962-4540-8A61-E8DF4977EE03}: [NameServer]89.108.195.21 89.108.202.21
Tcpip\..\Interfaces\{4FB25CA5-3CB1-4A79-93F9-F96C8FDBC6A3}: [NameServer]89.108.202.20 89.108.195.20
Tcpip\..\Interfaces\{69B045DD-F48A-4D51-992C-E5EB257483E0}: [NameServer]89.108.195.21 89.108.202.21
Tcpip\..\Interfaces\{744C42B8-78C9-4165-B699-6BBF26590CFD}: [NameServer]89.108.202.20 89.108.195.20
Tcpip\..\Interfaces\{87A9A03A-1654-41E7-BBB2-08C760FEB806}: [NameServer]89.108.202.20 89.108.195.20
Tcpip\..\Interfaces\{A21E84ED-C0FA-497F-A095-C12A0A265E45}: [NameServer]89.108.195.21 89.108.202.21
Tcpip\..\Interfaces\{AE953AFF-D0CD-4C21-A5B6-8FCA37D9571B}: [NameServer]89.108.202.20 89.108.195.20
Tcpip\..\Interfaces\{BB8DFDF5-D90F-4FFE-941E-0F61D5F7C36A}: [NameServer]89.108.202.20 89.108.195.20
Tcpip\..\Interfaces\{BC42C869-DE81-4D8B-A7FD-26B2D374C5BA}: [NameServer]89.108.195.21 89.108.202.21
Tcpip\..\Interfaces\{E9A8F368-D17A-44DF-AF25-A6AF491B0DF1}: [NameServer]89.108.202.20 89.108.195.20
Tcpip\..\Interfaces\{F2F45009-5BDC-4F57-B386-D4949C790AA0}: [NameServer]89.108.202.21 89.108.195.21

FireFox:
========
FF ProfilePath: C:\Users\Maszek\AppData\Roaming\Mozilla\Firefox\Profiles\7c9mezwg.default-1349114728197
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");
FF Homepage: about:home
FF Keyword.URL: hxxp://websearch.pur-esult.info/?pid=724&r=2013/08/14&hid=999645584&lg=EN&cc=PL&l=1&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Maszek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Maszek\AppData\Roaming\Mozilla\Firefox\Profiles\7c9mezwg.default-1349114728197\searchplugins\WebSearch.xml
FF Extension: BPH Sign Plugin - C:\Users\Maszek\AppData\Roaming\Mozilla\Firefox\Profiles\7c9mezwg.default-1349114728197\Extensions\SignPlugin@bph.pl
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF Extension: Splashtop Connect Companion - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF Extension: Splashtop Connect - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF HKLM-x32\...\Firefox\Extensions: [{d9284e50-81fc-11da-a72b-0800200c9a66}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}
FF Extension: No Name - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}

==================== Services (Whitelisted) =================

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation)
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2012-07-29] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-12-12] ()
R2 SCBackService; C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe [477000 2010-11-15] (Splashtop Inc.)
R2 WCUService_STC_FF; C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [493384 2011-03-24] (Splashtop Inc.)

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()
R3 gdrv; C:\Windows\gdrv.sys [25640 2013-09-20] (Windows (R) Server 2003 DDK provider)
R3 gdrv; C:\Windows\gdrv.sys [25640 2013-09-20] (Windows (R) Server 2003 DDK provider)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-07-18] (NVIDIA Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-20 18:45 - 2013-09-20 18:45 - 00000000 ____D C:\FRST
2013-09-20 18:37 - 2013-09-20 18:37 - 00377856 _____ C:\Users\Maszek\Desktop\11ntnd5u.exe
2013-09-20 18:35 - 2013-09-20 18:35 - 00602112 _____ (OldTimer Tools) C:\Users\Maszek\Desktop\OTL.exe
2013-09-20 18:33 - 2013-09-20 18:34 - 01950622 _____ (Farbar) C:\Users\Maszek\Desktop\FRST64.exe
2013-09-20 15:26 - 2013-09-20 15:26 - 00000000 ____D C:\NvidiaLogging
2013-09-18 19:41 - 2013-09-20 18:42 - 00003026 _____ C:\Windows\System32\Tasks\MSIAfterburner
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\Documents\Amnesia
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\NVIDIA
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\fltk.org
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\ProgramData\fltk.org
2013-09-18 05:44 - 2013-09-20 18:24 - 00000000 ____D C:\Program Files (x86)\Godus
2013-09-18 05:23 - 2013-09-18 05:23 - 00000852 _____ C:\Users\Public\Desktop\Amnesia - A Machine for Pigs.lnk
2013-09-18 05:16 - 2013-09-18 12:07 - 00000000 ____D C:\Users\Maszek\Downloads\Godus.(1.2.3524)-BETA
2013-09-17 09:20 - 2013-09-17 09:20 - 00000000 ____D C:\Users\Maszek\Downloads\pj2013
2013-09-13 11:29 - 2013-09-13 11:30 - 00000000 ____D C:\Users\Maszek\Desktop\bank
2013-09-11 23:38 - 2013-09-11 23:38 - 00250441 _____ C:\Users\Maszek\Downloads\dxwebsetup.rar
2013-09-11 23:38 - 2011-03-25 17:22 - 00000000 ____D C:\Users\Maszek\Downloads\dxwebsetup
2013-09-11 23:14 - 2013-09-11 23:14 - 00028779 _____ C:\Users\Maszek\Desktop\ComboFix.txt
2013-09-11 23:05 - 2013-09-11 23:14 - 00000000 ____D C:\Qoobox
2013-09-11 23:05 - 2013-09-11 23:12 - 00000000 ____D C:\Windows\erdnt
2013-09-11 23:05 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-11 23:05 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-11 23:05 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-11 23:05 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-11 23:05 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-11 23:05 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-11 23:05 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-11 23:05 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-11 23:04 - 2013-09-11 23:04 - 05124599 ____R (Swearware) C:\Users\Maszek\Downloads\ComboFix.exe
2013-09-11 22:50 - 2013-09-11 22:50 - 00001347 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2013-09-11 22:49 - 2013-09-11 22:49 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-11 22:48 - 2013-09-11 22:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-11 22:48 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-11 22:48 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-11 22:46 - 2013-09-20 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-11 22:46 - 2013-08-18 23:02 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-09-11 22:46 - 2013-08-18 23:02 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-09-11 22:46 - 2013-08-18 21:34 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-11 22:46 - 2013-08-18 21:34 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-11 22:46 - 2013-08-18 21:34 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-11 22:46 - 2013-08-18 21:34 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-11 22:46 - 2013-08-18 21:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-11 22:46 - 2013-08-17 07:30 - 03319709 _____ C:\Windows\system32\nvcoproc.bin
2013-09-11 22:39 - 2013-08-18 23:02 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-11 22:39 - 2013-08-18 23:02 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-11 22:39 - 2013-08-18 23:02 - 00022581 _____ C:\Windows\system32\nvinfo.pb
2013-09-11 22:39 - 2013-07-18 19:15 - 00039712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-09-11 22:39 - 2013-07-18 19:15 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-09-11 22:39 - 2013-07-18 19:15 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-09-11 22:39 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-09-11 22:39 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-09-11 00:02 - 2013-09-16 03:25 - 568299014 ____R C:\Users\Maszek\Downloads\pj2013.rar
2013-09-05 14:06 - 2013-09-05 14:06 - 00000836 _____ C:\Users\Public\Desktop\Total War ROME II.lnk
2013-09-05 13:42 - 2013-09-19 14:21 - 00000000 ____D C:\Program Files (x86)\Total War ROME II
2013-09-03 19:35 - 2013-09-10 23:55 - 00000000 ____D C:\Users\Maszek\Downloads\Total.War.ROME.II-RELOADED
2013-08-28 05:14 - 2013-08-28 05:14 - 00000000 ____D C:\Users\Maszek\Zomboid
2013-08-28 05:12 - 2013-09-18 05:16 - 00000000 ____D C:\Games
2013-08-24 05:06 - 2013-08-24 05:21 - 00000000 ____D C:\Users\Maszek\Downloads\Contagion.2011. BRRip.XviD.AC3.PL
2013-08-22 19:50 - 2013-08-22 19:50 - 00292816 _____ C:\Windows\Minidump\082213-19546-01.dmp

==================== One Month Modified Files and Folders =======

2013-09-20 18:45 - 2013-09-20 18:45 - 00000000 ____D C:\FRST
2013-09-20 18:44 - 2012-07-29 21:34 - 01918946 _____ C:\Windows\WindowsUpdate.log
2013-09-20 18:42 - 2013-09-18 19:41 - 00003026 _____ C:\Windows\System32\Tasks\MSIAfterburner
2013-09-20 18:42 - 2012-07-29 15:59 - 00000144 _____ C:\service.log
2013-09-20 18:41 - 2012-07-29 17:40 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-20 18:41 - 2012-07-29 16:25 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2013-09-20 18:41 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-20 18:41 - 2009-07-14 06:51 - 00117958 _____ C:\Windows\setupact.log
2013-09-20 18:40 - 2012-08-04 14:40 - 00009358 _____ C:\Windows\PFRO.log
2013-09-20 18:38 - 2012-07-29 16:24 - 01775704 _____ C:\Windows\system32\perfh015.dat
2013-09-20 18:38 - 2012-07-29 16:24 - 00509812 _____ C:\Windows\system32\perfc015.dat
2013-09-20 18:38 - 2009-07-14 07:13 - 00006216 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-20 18:37 - 2013-09-20 18:37 - 00377856 _____ C:\Users\Maszek\Desktop\11ntnd5u.exe
2013-09-20 18:35 - 2013-09-20 18:35 - 00602112 _____ (OldTimer Tools) C:\Users\Maszek\Desktop\OTL.exe
2013-09-20 18:34 - 2013-09-20 18:33 - 01950622 _____ (Farbar) C:\Users\Maszek\Desktop\FRST64.exe
2013-09-20 18:24 - 2013-09-18 05:44 - 00000000 ____D C:\Program Files (x86)\Godus
2013-09-20 18:10 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-20 17:55 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-20 17:55 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 15:26 - 2013-09-20 15:26 - 00000000 ____D C:\NvidiaLogging
2013-09-20 15:26 - 2013-09-11 22:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-20 15:05 - 2012-07-29 16:54 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 11:26 - 2012-07-29 16:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 11:26 - 2012-07-29 16:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 11:26 - 2012-07-29 16:54 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 14:21 - 2013-09-05 13:42 - 00000000 ____D C:\Program Files (x86)\Total War ROME II
2013-09-19 14:20 - 2013-06-01 23:18 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-09-19 13:57 - 2013-07-25 17:59 - 00000168 _____ C:\Users\Maszek\Desktop\hwmonitorw.ini
2013-09-19 12:07 - 2012-07-29 23:54 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\uTorrent
2013-09-18 12:07 - 2013-09-18 05:16 - 00000000 ____D C:\Users\Maszek\Downloads\Godus.(1.2.3524)-BETA
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\Documents\Amnesia
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\NVIDIA
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\fltk.org
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\ProgramData\fltk.org
2013-09-18 05:45 - 2013-07-24 22:18 - 00000000 ____D C:\Users\Maszek\AppData\Local\SKIDROW
2013-09-18 05:23 - 2013-09-18 05:23 - 00000852 _____ C:\Users\Public\Desktop\Amnesia - A Machine for Pigs.lnk
2013-09-18 05:16 - 2013-08-28 05:12 - 00000000 ____D C:\Games
2013-09-17 09:20 - 2013-09-17 09:20 - 00000000 ____D C:\Users\Maszek\Downloads\pj2013
2013-09-16 20:35 - 2012-07-30 21:58 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\vlc
2013-09-16 03:25 - 2013-09-11 00:02 - 568299014 ____R C:\Users\Maszek\Downloads\pj2013.rar
2013-09-13 15:01 - 2013-08-14 14:04 - 00000000 ____D C:\Users\Maszek\Desktop\CV
2013-09-13 15:00 - 2012-10-08 17:40 - 00000000 ____D C:\Users\Maszek\Desktop\Folder Patrycji
2013-09-13 11:30 - 2013-09-13 11:29 - 00000000 ____D C:\Users\Maszek\Desktop\bank
2013-09-12 08:13 - 2013-03-30 16:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-09-12 08:13 - 2013-03-30 16:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-09-11 23:41 - 2012-08-04 09:23 - 00209946 _____ C:\Windows\DirectX.log
2013-09-11 23:39 - 2012-08-04 09:13 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-09-11 23:39 - 2012-08-04 09:13 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-09-11 23:38 - 2013-09-11 23:38 - 00250441 _____ C:\Users\Maszek\Downloads\dxwebsetup.rar
2013-09-11 23:14 - 2013-09-11 23:14 - 00028779 _____ C:\Users\Maszek\Desktop\ComboFix.txt
2013-09-11 23:14 - 2013-09-11 23:05 - 00000000 ____D C:\Qoobox
2013-09-11 23:12 - 2013-09-11 23:05 - 00000000 ____D C:\Windows\erdnt
2013-09-11 23:12 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-11 23:04 - 2013-09-11 23:04 - 05124599 ____R (Swearware) C:\Users\Maszek\Downloads\ComboFix.exe
2013-09-11 22:50 - 2013-09-11 22:50 - 00001347 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2013-09-11 22:49 - 2013-09-11 22:49 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-11 22:49 - 2012-07-29 17:40 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-11 22:49 - 2012-07-29 17:39 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-11 22:48 - 2013-09-11 22:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-11 22:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-09-11 22:35 - 2013-06-01 11:05 - 00000000 ____D C:\Users\Maszek\AppData\Local\NVIDIA
2013-09-10 23:55 - 2013-09-03 19:35 - 00000000 ____D C:\Users\Maszek\Downloads\Total.War.ROME.II-RELOADED
2013-09-05 14:06 - 2013-09-05 14:06 - 00000836 _____ C:\Users\Public\Desktop\Total War ROME II.lnk
2013-09-03 05:27 - 2013-08-11 01:10 - 00000000 ____D C:\ProgramData\Origin
2013-09-01 14:09 - 2013-01-03 17:03 - 00070656 ____H C:\Users\Maszek\Desktop\photothumb.db
2013-08-28 05:14 - 2013-08-28 05:14 - 00000000 ____D C:\Users\Maszek\Zomboid
2013-08-28 05:14 - 2012-07-29 15:36 - 00000000 ____D C:\Users\Maszek
2013-08-24 05:21 - 2013-08-24 05:06 - 00000000 ____D C:\Users\Maszek\Downloads\Contagion.2011. BRRip.XviD.AC3.PL
2013-08-22 19:50 - 2013-08-22 19:50 - 00292816 _____ C:\Windows\Minidump\082213-19546-01.dmp
2013-08-22 19:50 - 2013-06-08 07:25 - 458403916 _____ C:\Windows\MEMORY.DMP
2013-08-22 19:50 - 2012-08-06 20:56 - 00000000 ____D C:\Windows\Minidump

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-13 13:05

==================== End Of Log ============================