Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01 Ran by Maszek (administrator) on MASZEK-PC on 21-09-2013 10:21:10 Running from C:\Users\Maszek\Desktop Windows 7 Ultimate (X64) OS Language: English(US) Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe () C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE () C:\ProgramData\DatacardService\HWDeviceService64.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe () C:\Program Files (x86)\PLAY ONLINE\PLAY ONLINE.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.) AppInit_DLLs: C:\PROGRA~1\NVIDIA~1\NVSTRE~1\rxinput.dll [653600 2013-07-27] (NVIDIA Corporation) AppInit_DLLs-x32: c:\progra~2\nvidia~1\nvstre~1\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wyborcza.pl/0,0.html?p=139 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://wyborcza.pl/0,0.html?p=139 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\..\Interfaces\{007423F1-A1A9-4855-8E1D-21767F5B80F7}: [NameServer]89.108.195.21 89.108.202.21 Tcpip\..\Interfaces\{40850293-7CE0-45A3-BF48-B6E1822E4854}: [NameServer]89.108.195.20 89.108.202.20 Tcpip\..\Interfaces\{447A10E4-1AEF-4226-9891-A44908696DBE}: [NameServer]89.108.195.21 89.108.202.21 Tcpip\..\Interfaces\{4BE4D1A2-4962-4540-8A61-E8DF4977EE03}: [NameServer]89.108.195.21 89.108.202.21 Tcpip\..\Interfaces\{4FB25CA5-3CB1-4A79-93F9-F96C8FDBC6A3}: [NameServer]89.108.202.20 89.108.195.20 Tcpip\..\Interfaces\{69B045DD-F48A-4D51-992C-E5EB257483E0}: [NameServer]89.108.195.21 89.108.202.21 Tcpip\..\Interfaces\{744C42B8-78C9-4165-B699-6BBF26590CFD}: [NameServer]89.108.202.20 89.108.195.20 Tcpip\..\Interfaces\{87A9A03A-1654-41E7-BBB2-08C760FEB806}: [NameServer]89.108.202.20 89.108.195.20 Tcpip\..\Interfaces\{A21E84ED-C0FA-497F-A095-C12A0A265E45}: [NameServer]89.108.195.21 89.108.202.21 Tcpip\..\Interfaces\{AE953AFF-D0CD-4C21-A5B6-8FCA37D9571B}: [NameServer]89.108.202.20 89.108.195.20 Tcpip\..\Interfaces\{BB8DFDF5-D90F-4FFE-941E-0F61D5F7C36A}: [NameServer]89.108.202.20 89.108.195.20 Tcpip\..\Interfaces\{BC42C869-DE81-4D8B-A7FD-26B2D374C5BA}: [NameServer]89.108.195.21 89.108.202.21 Tcpip\..\Interfaces\{E9A8F368-D17A-44DF-AF25-A6AF491B0DF1}: [NameServer]89.108.202.20 89.108.195.20 Tcpip\..\Interfaces\{F2F45009-5BDC-4F57-B386-D4949C790AA0}: [NameServer]89.108.202.21 89.108.195.21 FireFox: ======== FF ProfilePath: C:\Users\Maszek\AppData\Roaming\Mozilla\Firefox\Profiles\8lstub8s.default-1379750657093 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Maszek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) ==================== Services (Whitelisted) ================= S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] () R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation) S3 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2012-07-29] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-12-12] () ==================== Drivers (Whitelisted) ==================== R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] () R3 gdrv; C:\Windows\gdrv.sys [25640 2013-09-21] (Windows (R) Server 2003 DDK provider) R3 gdrv; C:\Windows\gdrv.sys [25640 2013-09-21] (Windows (R) Server 2003 DDK provider) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-07-18] (NVIDIA Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-21 10:16 - 2013-09-21 10:16 - 00000000 ____D C:\AdwCleaner 2013-09-21 10:15 - 2013-09-21 10:15 - 01039554 _____ C:\Users\Maszek\Downloads\AdwCleaner.exe 2013-09-21 10:04 - 2013-09-21 10:04 - 00000000 ____D C:\Users\Maszek\Desktop\Stare dane programu Firefox 2013-09-21 09:55 - 2013-09-21 09:55 - 00000000 ____D C:\Users\Maszek\Desktop\Nowy folder 2013-09-21 07:55 - 2013-09-21 10:19 - 00003026 _____ C:\Windows\System32\Tasks\MSIAfterburner 2013-09-20 18:45 - 2013-09-20 18:45 - 00000000 ____D C:\FRST 2013-09-20 18:37 - 2013-09-20 18:37 - 00377856 _____ C:\Users\Maszek\Desktop\11ntnd5u.exe 2013-09-20 18:35 - 2013-09-20 18:35 - 00602112 _____ (OldTimer Tools) C:\Users\Maszek\Desktop\OTL.exe 2013-09-20 18:33 - 2013-09-20 18:34 - 01950622 _____ (Farbar) C:\Users\Maszek\Desktop\FRST64.exe 2013-09-20 15:26 - 2013-09-20 15:26 - 00000000 ____D C:\NvidiaLogging 2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\Documents\Amnesia 2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\NVIDIA 2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\fltk.org 2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\ProgramData\fltk.org 2013-09-18 05:44 - 2013-09-20 18:24 - 00000000 ____D C:\Program Files (x86)\Godus 2013-09-18 05:23 - 2013-09-18 05:23 - 00000852 _____ C:\Users\Public\Desktop\Amnesia - A Machine for Pigs.lnk 2013-09-17 09:20 - 2013-09-17 09:20 - 00000000 ____D C:\Users\Maszek\Downloads\pj2013 2013-09-13 11:29 - 2013-09-13 11:30 - 00000000 ____D C:\Users\Maszek\Desktop\bank 2013-09-11 23:38 - 2013-09-11 23:38 - 00250441 _____ C:\Users\Maszek\Downloads\dxwebsetup.rar 2013-09-11 23:38 - 2011-03-25 17:22 - 00000000 ____D C:\Users\Maszek\Downloads\dxwebsetup 2013-09-11 23:05 - 2013-09-11 23:14 - 00000000 ____D C:\Qoobox 2013-09-11 23:05 - 2013-09-11 23:12 - 00000000 ____D C:\Windows\erdnt 2013-09-11 23:05 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-09-11 23:05 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-09-11 23:05 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-09-11 23:05 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-09-11 23:05 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-09-11 23:05 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-09-11 23:05 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-09-11 23:05 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-09-11 23:04 - 2013-09-11 23:04 - 05124599 ____R (Swearware) C:\Users\Maszek\Downloads\ComboFix.exe 2013-09-11 22:50 - 2013-09-11 22:50 - 00001347 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-09-11 22:49 - 2013-09-11 22:49 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-09-11 22:48 - 2013-09-11 22:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-09-11 22:48 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-09-11 22:48 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-09-11 22:46 - 2013-09-20 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-09-11 22:46 - 2013-08-18 23:02 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2013-09-11 22:46 - 2013-08-18 23:02 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2013-09-11 22:46 - 2013-08-18 21:34 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-09-11 22:46 - 2013-08-18 21:34 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-09-11 22:46 - 2013-08-18 21:34 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-09-11 22:46 - 2013-08-18 21:34 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-09-11 22:46 - 2013-08-18 21:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-09-11 22:46 - 2013-08-17 07:30 - 03319709 _____ C:\Windows\system32\nvcoproc.bin 2013-09-11 22:39 - 2013-08-18 23:02 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 22101792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 15900936 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 15703176 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 13627696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 12946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 11271968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-09-11 22:39 - 2013-08-18 23:02 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 02007328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432680.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432680.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 01412832 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 01222824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-09-11 22:39 - 2013-08-18 23:02 - 00022581 _____ C:\Windows\system32\nvinfo.pb 2013-09-11 22:39 - 2013-07-18 19:15 - 00039712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-09-11 22:39 - 2013-07-18 19:15 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-09-11 22:39 - 2013-07-18 19:15 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-09-11 22:39 - 2013-06-16 14:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2013-09-11 22:39 - 2013-06-16 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2013-09-11 00:02 - 2013-09-16 03:25 - 568299014 ____R C:\Users\Maszek\Downloads\pj2013.rar 2013-09-05 14:06 - 2013-09-05 14:06 - 00000836 _____ C:\Users\Public\Desktop\Total War ROME II.lnk 2013-09-05 13:42 - 2013-09-19 14:21 - 00000000 ____D C:\Program Files (x86)\Total War ROME II 2013-09-03 19:35 - 2013-09-10 23:55 - 00000000 ____D C:\Users\Maszek\Downloads\Total.War.ROME.II-RELOADED 2013-08-28 05:14 - 2013-08-28 05:14 - 00000000 ____D C:\Users\Maszek\Zomboid 2013-08-28 05:12 - 2013-09-18 05:16 - 00000000 ____D C:\Games 2013-08-24 05:06 - 2013-08-24 05:21 - 00000000 ____D C:\Users\Maszek\Downloads\Contagion.2011. BRRip.XviD.AC3.PL 2013-08-22 19:50 - 2013-08-22 19:50 - 00292816 _____ C:\Windows\Minidump\082213-19546-01.dmp ==================== One Month Modified Files and Folders ======= 2013-09-21 10:19 - 2013-09-21 07:55 - 00003026 _____ C:\Windows\System32\Tasks\MSIAfterburner 2013-09-21 10:18 - 2012-07-29 17:40 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-21 10:18 - 2012-07-29 16:25 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2013-09-21 10:18 - 2012-07-29 15:59 - 00000144 _____ C:\service.log 2013-09-21 10:18 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-21 10:18 - 2009-07-14 06:51 - 00119638 _____ C:\Windows\setupact.log 2013-09-21 10:17 - 2012-07-29 21:34 - 01959528 _____ C:\Windows\WindowsUpdate.log 2013-09-21 10:17 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-21 10:17 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-21 10:16 - 2013-09-21 10:16 - 00000000 ____D C:\AdwCleaner 2013-09-21 10:15 - 2013-09-21 10:15 - 01039554 _____ C:\Users\Maszek\Downloads\AdwCleaner.exe 2013-09-21 10:12 - 2012-08-04 14:40 - 00011334 _____ C:\Windows\PFRO.log 2013-09-21 10:04 - 2013-09-21 10:04 - 00000000 ____D C:\Users\Maszek\Desktop\Stare dane programu Firefox 2013-09-21 09:55 - 2013-09-21 09:55 - 00000000 ____D C:\Users\Maszek\Desktop\Nowy folder 2013-09-21 08:59 - 2013-06-01 23:18 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner 2013-09-21 08:31 - 2012-07-29 16:24 - 01874760 _____ C:\Windows\system32\perfh015.dat 2013-09-21 08:31 - 2012-07-29 16:24 - 00543300 _____ C:\Windows\system32\perfc015.dat 2013-09-21 08:31 - 2009-07-14 07:13 - 00006216 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-21 08:29 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-09-21 08:26 - 2012-07-29 16:54 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-21 07:43 - 2012-07-30 21:58 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\vlc 2013-09-20 20:48 - 2012-07-29 23:54 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\uTorrent 2013-09-20 18:45 - 2013-09-20 18:45 - 00000000 ____D C:\FRST 2013-09-20 18:37 - 2013-09-20 18:37 - 00377856 _____ C:\Users\Maszek\Desktop\11ntnd5u.exe 2013-09-20 18:35 - 2013-09-20 18:35 - 00602112 _____ (OldTimer Tools) C:\Users\Maszek\Desktop\OTL.exe 2013-09-20 18:34 - 2013-09-20 18:33 - 01950622 _____ (Farbar) C:\Users\Maszek\Desktop\FRST64.exe 2013-09-20 18:24 - 2013-09-18 05:44 - 00000000 ____D C:\Program Files (x86)\Godus 2013-09-20 15:26 - 2013-09-20 15:26 - 00000000 ____D C:\NvidiaLogging 2013-09-20 15:26 - 2013-09-11 22:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-09-20 11:26 - 2012-07-29 16:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-09-20 11:26 - 2012-07-29 16:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-20 11:26 - 2012-07-29 16:54 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-09-19 14:21 - 2013-09-05 13:42 - 00000000 ____D C:\Program Files (x86)\Total War ROME II 2013-09-19 13:57 - 2013-07-25 17:59 - 00000168 _____ C:\Users\Maszek\Desktop\hwmonitorw.ini 2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\Documents\Amnesia 2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\NVIDIA 2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Maszek\AppData\Roaming\fltk.org 2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\ProgramData\fltk.org 2013-09-18 05:45 - 2013-07-24 22:18 - 00000000 ____D C:\Users\Maszek\AppData\Local\SKIDROW 2013-09-18 05:23 - 2013-09-18 05:23 - 00000852 _____ C:\Users\Public\Desktop\Amnesia - A Machine for Pigs.lnk 2013-09-18 05:16 - 2013-08-28 05:12 - 00000000 ____D C:\Games 2013-09-17 09:20 - 2013-09-17 09:20 - 00000000 ____D C:\Users\Maszek\Downloads\pj2013 2013-09-16 03:25 - 2013-09-11 00:02 - 568299014 ____R C:\Users\Maszek\Downloads\pj2013.rar 2013-09-13 15:01 - 2013-08-14 14:04 - 00000000 ____D C:\Users\Maszek\Desktop\CV 2013-09-13 15:00 - 2012-10-08 17:40 - 00000000 ____D C:\Users\Maszek\Desktop\Folder Patrycji 2013-09-13 11:30 - 2013-09-13 11:29 - 00000000 ____D C:\Users\Maszek\Desktop\bank 2013-09-12 08:13 - 2013-03-30 16:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-09-12 08:13 - 2013-03-30 16:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-09-11 23:41 - 2012-08-04 09:23 - 00209946 _____ C:\Windows\DirectX.log 2013-09-11 23:39 - 2012-08-04 09:13 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-09-11 23:39 - 2012-08-04 09:13 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-09-11 23:38 - 2013-09-11 23:38 - 00250441 _____ C:\Users\Maszek\Downloads\dxwebsetup.rar 2013-09-11 23:14 - 2013-09-11 23:05 - 00000000 ____D C:\Qoobox 2013-09-11 23:12 - 2013-09-11 23:05 - 00000000 ____D C:\Windows\erdnt 2013-09-11 23:12 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-09-11 23:04 - 2013-09-11 23:04 - 05124599 ____R (Swearware) C:\Users\Maszek\Downloads\ComboFix.exe 2013-09-11 22:50 - 2013-09-11 22:50 - 00001347 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-09-11 22:49 - 2013-09-11 22:49 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-09-11 22:49 - 2012-07-29 17:40 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-09-11 22:49 - 2012-07-29 17:39 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-09-11 22:48 - 2013-09-11 22:48 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-09-11 22:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2013-09-11 22:35 - 2013-06-01 11:05 - 00000000 ____D C:\Users\Maszek\AppData\Local\NVIDIA 2013-09-10 23:55 - 2013-09-03 19:35 - 00000000 ____D C:\Users\Maszek\Downloads\Total.War.ROME.II-RELOADED 2013-09-05 14:06 - 2013-09-05 14:06 - 00000836 _____ C:\Users\Public\Desktop\Total War ROME II.lnk 2013-09-03 05:27 - 2013-08-11 01:10 - 00000000 ____D C:\ProgramData\Origin 2013-09-01 14:09 - 2013-01-03 17:03 - 00070656 ____H C:\Users\Maszek\Desktop\photothumb.db 2013-08-28 05:14 - 2013-08-28 05:14 - 00000000 ____D C:\Users\Maszek\Zomboid 2013-08-28 05:14 - 2012-07-29 15:36 - 00000000 ____D C:\Users\Maszek 2013-08-24 05:21 - 2013-08-24 05:06 - 00000000 ____D C:\Users\Maszek\Downloads\Contagion.2011. BRRip.XviD.AC3.PL 2013-08-22 19:50 - 2013-08-22 19:50 - 00292816 _____ C:\Windows\Minidump\082213-19546-01.dmp 2013-08-22 19:50 - 2013-06-08 07:25 - 458403916 _____ C:\Windows\MEMORY.DMP 2013-08-22 19:50 - 2012-08-06 20:56 - 00000000 ____D C:\Windows\Minidump Some content of TEMP: ==================== C:\Users\Maszek\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-13 13:05 ==================== End Of Log ============================