Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2013
Ran by Danny (administrator) on DANNY-HP on 21-09-2013 12:46:38
Running from C:\Users\Danny\Downloads
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe
(Microsoft Corp.) C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0369.0\mswinext.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [568888 2010-01-18] ()
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [25623336 2009-10-09] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1811368 2013-09-06] (Valve Corporation)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20097696 2013-06-27] (Google)
HKCU\...\Run: [Google Update*] - [x] <===== ATTENTION (ZeroAccess rootkit hidden path)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-11] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-01-15] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [BATINDICATOR] - C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe [2068992 2009-05-09] (Hewlett-Packard)
HKLM-x32\...\Run: [LaunchHPOSIAPP] - C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe [385024 2009-04-04] (Hewlett-Packard)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NOBuActivation.exe [3331944 2009-12-04] (Symantec Corporation)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2010-01-25] (EasyBits Software AS)
HKLM-x32\...\Run: [MSN Toolbar] - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0369.0\mswinext.exe [240472 2009-11-30] (Microsoft Corp.)
HKLM-x32\...\Run: [Microsoft Default Manager] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [288080 2009-07-17] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\Default\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [1712184 2010-02-10] ()
HKU\Default User\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [1712184 2010-02-10] ()
HKU\Ludzie\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe [1712184 2010-02-10] ()
Startup: C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hstart.bat ()
Startup: C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/HPDSK/2
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPDSK/2
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPDSK/2
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/HPDSK/2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPDSK/2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/HPDSK/2
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {1B187875-E9CE-4900-92F9-E7433D85DBC9} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {1B187875-E9CE-4900-92F9-E7433D85DBC9} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {1B187875-E9CE-4900-92F9-E7433D85DBC9} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0369.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0369.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2010-10-03] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR Extension: (Context) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aalnjolghjkkogicompabhhbbkljnlka\0.402_0
CHR Extension: (Dark Legends) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfbekphmapfjpdkfedomagjpccekhaa\2.0.0.0_0
CHR Extension: (Docs) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Lucidchart: Diagrams Online) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apboafhkiegglekeafbckfjldecefkhn\18_0
CHR Extension: (Google Drive) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (Web Developer) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm\0.4.3_0
CHR Extension: (ColorZilla) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp\0.5.3_0
CHR Extension: (YouTube) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Adblock Plus) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.4_0
CHR Extension: (Google Search) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Tampermonkey) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.3.3487_0
CHR Extension: (PerfectPixel by WellDoneCode) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkaagdgjmgdmbnecmcefdhjekcoceebi\1.55_0
CHR Extension: (Gmail Offline) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk\1.20_0
CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh\1_0
CHR Extension: (AdBlock) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.4_0
CHR Extension: (avast! Online Security) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0
CHR Extension: (AppJump App Launcher and Organizer) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\hccbinpobnjcpckmcfngmdpnbnjpmcbd\0.9.3_0
CHR Extension: (WhatFont) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm\2.0.2_0
CHR Extension: (Analytics Blocker) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmcpbefnpobogldglnlikgojpaddibgb\1.0.1_0
CHR Extension: (Auto HD For YouTube) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\koiaokdomkpjdgniimnkhgbilbjgpeak\4.0.2_0
CHR Extension: (StayFocusd) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\laankejkbhbdhmipfmgcngdelahlfoji\1.3.12_0
CHR Extension: (Corporate Ipsum) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmadckmfehehmdnmhaebniooenedcbb\0.0.0.1_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Picasa) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb\6.2.2_0
CHR Extension: (Gmail) - C:\Users\Danny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
U2 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{874a5589-1488-2c18-7512-653219bcfd28}\   \...\???\{874a5589-1488-2c18-7512-653219bcfd28}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 PCDSRVC{F36B3A4C-F95654BD-06000000}_0; \??\c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-21 12:46 - 2013-09-21 12:46 - 00000000 ____D C:\FRST
2013-09-21 12:43 - 2013-09-21 12:44 - 75837288 _____ C:\Users\Danny\Downloads\documents-export-2013-09-21.zip
2013-09-21 12:10 - 2013-09-21 12:10 - 00000000 ____D C:\Users\Danny\Downloads\__MACOSX
2013-09-21 12:10 - 2012-12-11 19:12 - 00000201 ____N C:\Users\Danny\Downloads\READ_ME.txt
2013-09-21 12:10 - 2012-12-11 19:04 - 291625371 ____N C:\Users\Danny\Downloads\iPodTouch2G_WD6.ipsw
2013-09-21 12:06 - 2012-11-14 23:56 - 01039360 _____ (iH8sn0w) C:\Users\Danny\Downloads\iREB-r6.exe
2013-09-21 12:01 - 2013-09-21 12:01 - 01956670 _____ (Farbar) C:\Users\Danny\Downloads\FRST64.exe
2013-09-21 12:01 - 2013-09-21 12:01 - 00602112 _____ (OldTimer Tools) C:\Users\Danny\Downloads\OTL.exe
2013-09-21 11:57 - 2013-09-21 11:57 - 00000000 __SHD C:\Windows\system32\%APPDATA%
2013-09-21 11:52 - 2013-09-21 11:52 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-21 11:52 - 2013-09-21 11:52 - 00001924 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-09-21 11:52 - 2013-09-21 11:52 - 00000000 ____D C:\Program Files\AVAST Software
2013-09-21 11:52 - 2013-09-21 11:52 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-21 11:52 - 2013-08-30 08:48 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-09-21 11:52 - 2013-08-30 08:48 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-09-21 11:52 - 2013-08-30 08:48 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-09-21 11:52 - 2013-08-30 08:48 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-09-21 11:52 - 2013-08-30 08:48 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-09-21 11:52 - 2013-08-30 08:48 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-09-21 11:52 - 2013-08-30 08:48 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-09-21 11:52 - 2013-08-30 08:48 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-09-21 11:52 - 2013-08-30 08:47 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-09-21 11:52 - 2013-08-30 08:47 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-09-21 11:51 - 2013-09-21 11:52 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-21 11:50 - 2013-09-21 11:51 - 00000000 ____D C:\Users\Danny\AppData\Roaming\test
2013-09-21 11:43 - 2013-09-21 11:43 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Apple Computer
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Users\Danny\AppData\Local\Apple Computer
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Program Files\iTunes
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Program Files\iPod
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-21 11:43 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Users\Danny\AppData\Local\Apple
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\ProgramData\Apple
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Program Files\Bonjour
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-09-21 11:39 - 2013-09-21 11:40 - 97176400 _____ (Apple Inc.) C:\Users\Danny\Downloads\iTunes64Setup.exe
2013-09-21 11:38 - 2013-09-21 11:38 - 00407827 _____ C:\Users\Danny\Downloads\iREBWindows.zip
2013-09-21 11:33 - 2013-09-21 11:36 - 291709509 _____ C:\Users\Danny\Downloads\iPodTouch2G_WD6.zip
2013-09-21 00:37 - 2013-08-07 04:22 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-09-21 00:22 - 2013-09-21 11:53 - 00000000 ____D C:\Users\Danny\AppData\Local\CrashDumps
2013-09-21 00:21 - 2013-09-21 00:21 - 01255472 _____ C:\Users\Danny\Downloads\simplicty_by_corbj-d6mmuzv.rmskin
2013-09-21 00:16 - 2013-09-21 00:18 - 131918888 _____ C:\Users\Danny\Downloads\avast_free_antivirus_setup.exe
2013-09-21 00:16 - 2013-09-21 00:16 - 00000000 ____D C:\Users\Danny\Downloads\Adobe Photoshop CS5 Ext.Edition (Patched)
2013-09-21 00:15 - 2013-09-21 00:15 - 00000815 _____ C:\Users\Danny\Desktop\µTorrent.lnk
2013-09-21 00:15 - 2013-09-21 00:15 - 00000795 _____ C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-09-21 00:14 - 2013-09-21 01:14 - 00000000 ____D C:\Users\Danny\AppData\Roaming\uTorrent
2013-09-21 00:13 - 2013-09-21 00:13 - 01130576 _____ (BitTorrent Inc.) C:\Users\Danny\Downloads\utorrent.exe
2013-09-21 00:12 - 2013-09-21 01:45 - 00000000 ____D C:\Program Files\PeerBlock
2013-09-21 00:12 - 2013-09-21 00:12 - 00001738 _____ C:\Users\Danny\Desktop\PeerBlock.lnk
2013-09-21 00:07 - 2013-09-21 00:07 - 01366830 _____ C:\Users\Danny\Downloads\roboto (1).zip
2013-09-21 00:05 - 2013-09-21 00:05 - 00036838 _____ C:\Users\Danny\Downloads\hexi__by_hammer_and_nail86-d6lmtaj.rmskin
2013-09-21 00:04 - 2013-09-21 00:04 - 00918009 _____ C:\Users\Danny\Downloads\Roboto.zip
2013-09-21 00:01 - 2013-09-21 00:01 - 00004455 _____ C:\Users\Danny\Downloads\neon_1_0_by_stickdudeseven-d6mktl4.rmskin
2013-09-20 23:57 - 2013-09-20 23:57 - 02105040 _____ (PeerBlock, LLC                                              ) C:\Users\Danny\Downloads\PeerBlock-Setup_v1.1_r518.exe
2013-09-20 23:57 - 2013-09-20 23:57 - 00000000 ____D C:\Users\Danny\Documents\Rainmeter
2013-09-20 23:57 - 2013-09-20 23:57 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Rainmeter
2013-09-20 23:57 - 2013-09-20 23:57 - 00000000 ____D C:\Program Files\Rainmeter
2013-09-20 23:55 - 2013-09-20 23:55 - 05673816 _____ (Microsoft Corporation) C:\Users\Danny\Downloads\vcredist_x64.exe
2013-09-20 23:55 - 2013-09-20 23:55 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-20 23:54 - 2013-09-20 23:54 - 01386624 _____ C:\Users\Danny\Downloads\Rainmeter-2.5.exe
2013-09-20 23:47 - 2013-09-20 23:47 - 00001184 _____ C:\Users\Danny\Desktop\foobar2000 - Shortcut (2).lnk
2013-09-20 23:46 - 2013-09-20 23:46 - 00001412 _____ C:\Users\Danny\Desktop\foobar2000 - Shortcut.lnk
2013-09-20 23:39 - 2013-09-20 23:39 - 00000000 ____D C:\Users\Danny\Downloads\Metro_by_fanco86
2013-09-20 23:38 - 2013-09-20 23:36 - 00000818 _____ C:\Users\Danny\Desktop\7-Zip File Manager.lnk
2013-09-20 23:37 - 2013-09-21 01:45 - 00000000 ____D C:\Users\Danny\AppData\Roaming\foobar2000
2013-09-20 23:36 - 2013-09-20 23:36 - 00000000 ____D C:\Program Files\7-Zip
2013-09-20 23:35 - 2013-09-20 23:35 - 01376768 _____ C:\Users\Danny\Downloads\7z920-x64.msi
2013-09-20 23:34 - 2013-09-20 23:34 - 01745934 _____ C:\Users\Danny\Downloads\Metro_by_fanco86.7z
2013-09-20 23:34 - 2013-09-20 23:34 - 01110476 _____ C:\Users\Danny\Downloads\7z920.exe
2013-09-20 23:33 - 2013-09-20 23:39 - 00000000 ____D C:\Program Files (x86)\foobar2000
2013-09-20 23:33 - 2013-09-20 23:33 - 03740128 _____ (foobar2000.org) C:\Users\Danny\Downloads\foobar2000_v1.2.9.exe
2013-09-20 23:33 - 2013-09-20 23:33 - 00001037 _____ C:\Users\Public\Desktop\foobar2000.lnk
2013-08-28 12:58 - 2013-08-28 12:58 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Macromedia
2013-08-28 12:58 - 2013-08-28 12:58 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\LolClient
2013-08-28 12:58 - 2013-08-28 12:58 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Adobe
2013-08-28 09:27 - 2013-09-20 22:23 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForLudzie.job
2013-08-28 09:27 - 2013-09-20 18:04 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLudzie
2013-08-28 09:20 - 2013-08-28 09:20 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-08-28 09:20 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-08-28 09:20 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-08-28 09:20 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-08-28 09:20 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-08-28 09:20 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-08-28 09:19 - 2013-08-28 16:32 - 00000000 ____D C:\Users\Ludzie\AppData\Local\PMB Files
2013-08-28 09:19 - 2013-08-28 16:32 - 00000000 ____D C:\ProgramData\PMB Files
2013-08-28 09:19 - 2013-08-28 09:19 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-08-28 09:19 - 2013-08-28 09:19 - 00000000 ____D C:\Riot Games
2013-08-28 09:19 - 2013-08-28 09:19 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-08-28 09:17 - 2013-08-28 09:19 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Riot Games
2013-08-28 09:14 - 2013-08-28 09:27 - 00000000 ____D C:\Users\Ludzie\AppData\Local\Hewlett-Packard
2013-08-28 09:13 - 2013-08-28 09:14 - 34249488 _____ (Riot Games) C:\Users\Ludzie\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe
2013-08-28 09:13 - 2013-08-28 09:13 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\ATI
2013-08-28 09:13 - 2013-08-28 09:13 - 00000000 ____D C:\Users\Ludzie\AppData\Local\ATI
2013-08-28 09:12 - 2013-08-28 09:26 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Hewlett-Packard
2013-08-28 09:12 - 2013-08-28 09:12 - 00079864 _____ C:\Users\Ludzie\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-28 09:12 - 2013-08-28 09:12 - 00001449 _____ C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-28 09:12 - 2013-08-28 09:12 - 00001415 _____ C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-08-28 09:12 - 2013-08-28 09:12 - 00000000 ___RD C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-28 09:12 - 2013-08-28 09:12 - 00000000 ___RD C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-28 09:12 - 2013-08-28 09:12 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Intel Corporation
2013-08-28 09:11 - 2013-08-28 09:12 - 00000000 ____D C:\Users\Ludzie\AppData\Local\Google
2013-08-28 09:11 - 2013-08-28 09:12 - 00000000 ____D C:\Users\Ludzie
2013-08-28 09:11 - 2013-08-28 09:11 - 00000020 ___SH C:\Users\Ludzie\ntuser.ini
2013-08-28 09:11 - 2013-08-28 09:11 - 00000000 ____D C:\Users\Ludzie\AppData\Local\VirtualStore
2013-08-28 09:11 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-08-28 09:11 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-08-24 07:43 - 2013-09-21 11:26 - 00000000 ___RD C:\Users\Danny\Google Drive
2013-08-24 07:43 - 2013-08-24 07:43 - 00001673 _____ C:\Users\Danny\Desktop\Google Drive.lnk
2013-08-24 07:42 - 2013-08-24 07:42 - 00002046 _____ C:\Users\Public\Desktop\Google Slides.lnk
2013-08-24 07:42 - 2013-08-24 07:42 - 00002042 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2013-08-24 07:42 - 2013-08-24 07:42 - 00002030 _____ C:\Users\Public\Desktop\Google Docs.lnk
2013-08-24 07:41 - 2013-08-24 07:41 - 00784832 _____ (Google Inc.) C:\Users\Danny\Downloads\googledrivesync.exe
2013-08-24 01:14 - 2013-08-24 01:14 - 00000491 _____ C:\Users\Danny\Desktop\g.txt
2013-08-24 00:14 - 2013-08-24 00:14 - 00000000 ____D C:\Users\Danny\AppData\Roaming\HpUpdate
2013-08-23 23:06 - 2013-08-23 23:06 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-08-23 18:43 - 2013-09-21 11:27 - 00000000 ____D C:\Program Files (x86)\Steam
2013-08-23 18:43 - 2013-08-23 18:43 - 00000919 _____ C:\Users\Public\Desktop\Steam.lnk
2013-08-23 18:42 - 2013-08-23 18:42 - 01669632 _____ C:\Users\Danny\Downloads\SteamInstall.msi
2013-08-23 15:43 - 2013-08-23 15:43 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Nero
2013-08-23 15:43 - 2013-08-23 15:43 - 00000000 ____D C:\ProgramData\LightScribe
2013-08-23 15:42 - 2013-08-23 15:42 - 00000032 ____N C:\Users\Danny\Downloads\bus.txt
2013-08-23 15:22 - 2013-08-23 15:22 - 00000000 ____D C:\ProgramData\Nero
2013-08-23 15:22 - 2013-08-23 15:22 - 00000000 ____D C:\Program Files (x86)\Nero
2013-08-23 15:22 - 2006-03-17 14:49 - 00368640 _____ (Pegasus Imaging Corporation) C:\Windows\SysWOW64\TwnLib4.dll
2013-08-23 15:22 - 2006-03-17 11:45 - 01757184 _____ (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagX7.dll
2013-08-23 15:22 - 2006-03-17 11:45 - 00802816 _____ (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagXRA7.dll
2013-08-23 15:22 - 2006-03-17 11:45 - 00497296 _____ (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagXpr7.dll
2013-08-23 15:22 - 2006-03-17 11:45 - 00258048 _____ (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagXR7.dll
2013-08-23 15:15 - 2013-08-23 15:15 - 00000034 _____ C:\Users\Danny\Downloads\serial.txt
2013-08-23 15:14 - 2013-08-23 15:28 - 621283886 _____ C:\Users\Danny\Downloads\Hirens.BootCD.15.2.zip
2013-08-23 15:13 - 2013-08-23 15:14 - 51319552 _____ (Updatepack.nl                                               ) C:\Users\Danny\Downloads\nero-8.2.8.0_europe_lite.exe
2013-08-23 15:12 - 2013-09-21 11:26 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Skype
2013-08-23 15:12 - 2013-08-23 15:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-23 15:12 - 2013-08-23 15:12 - 00000000 ____D C:\ProgramData\Skype
2013-08-23 10:58 - 2013-08-23 10:59 - 00000000 ____D C:\Users\Danny\AppData\Roaming\FreeVoipDeal
2013-08-23 10:58 - 2013-08-23 10:58 - 00001252 _____ C:\Users\Danny\Desktop\FreeVoipDeal.lnk
2013-08-23 10:58 - 2013-08-23 10:58 - 00000000 ____D C:\Program Files (x86)\FreeVoipDeal.com
2013-08-23 10:56 - 2013-08-23 10:56 - 06745704 _____ (Finarea S.A. Switzerland                                    ) C:\Users\Danny\Downloads\setupFreeVoipDeal.exe
2013-08-23 10:56 - 2013-08-23 10:56 - 00000056 ____H C:\Windows\SysWOW64\ezsidmv.dat
2013-08-23 10:56 - 2009-07-14 02:14 - 01397248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win_utilman.exe
2013-08-23 01:48 - 2013-08-23 14:12 - 00000154 _____ C:\Users\Danny\Desktop\New Text Document.txt
2013-08-23 00:10 - 2013-08-23 00:10 - 00002261 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-23 00:09 - 2013-09-21 12:14 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-23 00:09 - 2013-09-21 11:51 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-23 00:09 - 2013-09-21 11:50 - 00000000 ____D C:\Users\Danny\AppData\Local\Google
2013-08-23 00:09 - 2013-09-21 11:26 - 00000892 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-23 00:09 - 2013-08-23 00:09 - 00003892 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-23 00:09 - 2013-08-23 00:09 - 00003640 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-23 00:09 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Roaming\ATI
2013-08-23 00:09 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Local\Deployment
2013-08-23 00:09 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Local\ATI
2013-08-23 00:09 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Local\Apps\2.0
2013-08-23 00:08 - 2013-09-21 11:50 - 00000000 ___RD C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-23 00:08 - 2013-09-21 00:08 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForDanny
2013-08-23 00:08 - 2013-09-21 00:08 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForDanny.job
2013-08-23 00:08 - 2013-08-23 15:43 - 00000000 ____D C:\Users\Danny\AppData\Local\VirtualStore
2013-08-23 00:08 - 2013-08-23 00:08 - 00001449 _____ C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-23 00:08 - 2013-08-23 00:08 - 00001415 _____ C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-08-23 00:08 - 2013-08-23 00:08 - 00000000 ___RD C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-23 00:08 - 2013-08-23 00:08 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Macromedia
2013-08-23 00:08 - 2013-08-23 00:08 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Intel Corporation
2013-08-23 00:08 - 2013-08-23 00:08 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Adobe
2013-08-23 00:07 - 2013-08-23 00:10 - 00000000 ____D C:\Users\Danny\AppData\Local\Hewlett-Packard
2013-08-23 00:07 - 2013-08-23 00:07 - 00003706 _____ C:\Windows\System32\Tasks\RecoveryCDWin7
2013-08-23 00:02 - 2013-08-23 01:46 - 00000544 _____ C:\Windows\Tasks\PCDRScheduledMaintenance.job
2013-08-23 00:02 - 2013-08-23 00:08 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Hewlett-Packard
2013-08-23 00:02 - 2013-08-23 00:02 - 00004992 _____ C:\Windows\System32\Tasks\PCDRScheduledMaintenance
2013-08-23 00:02 - 2013-08-23 00:02 - 00000000 ____D C:\Users\Public\Symantec
2013-08-23 00:01 - 2013-08-24 07:43 - 00000000 ____D C:\Users\Danny
2013-08-23 00:01 - 2013-08-23 00:01 - 00079864 _____ C:\Users\Danny\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-23 00:01 - 2013-08-23 00:01 - 00000020 ___SH C:\Users\Danny\ntuser.ini
2013-08-23 00:01 - 2013-08-23 00:01 - 00000000 __RSH C:\Windows\SysWOW64\Drivers\103C_HP_53316J G D_p6551uk_Y53316J G D_0U_QCZC039_ECZC039CQVZ DPS_4A_I2A9C_SMSI_V1.0_6.12_T100712_WU3-0_L409_M6072_J1000_7Intel_8655_93.20_#130811_N18143090;10EC8168_(WX169EA#ABU)_X_CD3_Z_2xxx0204GRxxxxxxxx0.MRK
2013-08-23 00:01 - 2013-08-23 00:01 - 00000000 __RSH C:\Windows\system32\Drivers\103C_HP_53316J G D_p6551uk_Y53316J G D_0U_QCZC039_ECZC039CQVZ DPS_4A_I2A9C_SMSI_V1.0_6.12_T100712_WU3-0_L409_M6072_J1000_7Intel_8655_93.20_#130811_N18143090;10EC8168_(WX169EA#ABU)_X_CD3_Z_2xxx0204GRxxxxxxxx0.MRK
2013-08-23 00:01 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-08-23 00:01 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-08-22 23:58 - 2013-09-21 12:46 - 00055520 _____ C:\Windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

2013-09-21 12:46 - 2013-09-21 12:46 - 00000000 ____D C:\FRST
2013-09-21 12:46 - 2013-08-22 23:58 - 00055520 _____ C:\Windows\WindowsUpdate.log
2013-09-21 12:44 - 2013-09-21 12:43 - 75837288 _____ C:\Users\Danny\Downloads\documents-export-2013-09-21.zip
2013-09-21 12:14 - 2013-08-23 00:09 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-21 12:10 - 2013-09-21 12:10 - 00000000 ____D C:\Users\Danny\Downloads\__MACOSX
2013-09-21 12:01 - 2013-09-21 12:01 - 01956670 _____ (Farbar) C:\Users\Danny\Downloads\FRST64.exe
2013-09-21 12:01 - 2013-09-21 12:01 - 00602112 _____ (OldTimer Tools) C:\Users\Danny\Downloads\OTL.exe
2013-09-21 11:57 - 2013-09-21 11:57 - 00000000 __SHD C:\Windows\system32\%APPDATA%
2013-09-21 11:53 - 2013-09-21 00:22 - 00000000 ____D C:\Users\Danny\AppData\Local\CrashDumps
2013-09-21 11:52 - 2013-09-21 11:52 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-21 11:52 - 2013-09-21 11:52 - 00001924 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-09-21 11:52 - 2013-09-21 11:52 - 00000000 ____D C:\Program Files\AVAST Software
2013-09-21 11:52 - 2013-09-21 11:52 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-21 11:52 - 2013-09-21 11:51 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-21 11:51 - 2013-09-21 11:50 - 00000000 ____D C:\Users\Danny\AppData\Roaming\test
2013-09-21 11:51 - 2013-08-23 00:09 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-21 11:50 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Local\Google
2013-09-21 11:50 - 2013-08-23 00:08 - 00000000 ___RD C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-21 11:43 - 2013-09-21 11:43 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Apple Computer
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Users\Danny\AppData\Local\Apple Computer
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Program Files\iTunes
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Program Files\iPod
2013-09-21 11:43 - 2013-09-21 11:43 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Users\Danny\AppData\Local\Apple
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\ProgramData\Apple
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Program Files\Bonjour
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-09-21 11:42 - 2013-09-21 11:42 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-09-21 11:40 - 2013-09-21 11:39 - 97176400 _____ (Apple Inc.) C:\Users\Danny\Downloads\iTunes64Setup.exe
2013-09-21 11:38 - 2013-09-21 11:38 - 00407827 _____ C:\Users\Danny\Downloads\iREBWindows.zip
2013-09-21 11:36 - 2013-09-21 11:33 - 291709509 _____ C:\Users\Danny\Downloads\iPodTouch2G_WD6.zip
2013-09-21 11:33 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-21 11:33 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-21 11:30 - 2009-07-14 06:13 - 00713888 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-21 11:27 - 2013-08-23 18:43 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-21 11:26 - 2013-08-24 07:43 - 00000000 ___RD C:\Users\Danny\Google Drive
2013-09-21 11:26 - 2013-08-23 15:12 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Skype
2013-09-21 11:26 - 2013-08-23 00:09 - 00000892 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-21 11:26 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-21 11:25 - 2010-10-03 04:13 - 00000000 ____D C:\ProgramData\Norton
2013-09-21 01:45 - 2013-09-21 00:12 - 00000000 ____D C:\Program Files\PeerBlock
2013-09-21 01:45 - 2013-09-20 23:37 - 00000000 ____D C:\Users\Danny\AppData\Roaming\foobar2000
2013-09-21 01:14 - 2013-09-21 00:14 - 00000000 ____D C:\Users\Danny\AppData\Roaming\uTorrent
2013-09-21 00:21 - 2013-09-21 00:21 - 01255472 _____ C:\Users\Danny\Downloads\simplicty_by_corbj-d6mmuzv.rmskin
2013-09-21 00:18 - 2013-09-21 00:16 - 131918888 _____ C:\Users\Danny\Downloads\avast_free_antivirus_setup.exe
2013-09-21 00:16 - 2013-09-21 00:16 - 00000000 ____D C:\Users\Danny\Downloads\Adobe Photoshop CS5 Ext.Edition (Patched)
2013-09-21 00:15 - 2013-09-21 00:15 - 00000815 _____ C:\Users\Danny\Desktop\µTorrent.lnk
2013-09-21 00:15 - 2013-09-21 00:15 - 00000795 _____ C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-09-21 00:13 - 2013-09-21 00:13 - 01130576 _____ (BitTorrent Inc.) C:\Users\Danny\Downloads\utorrent.exe
2013-09-21 00:12 - 2013-09-21 00:12 - 00001738 _____ C:\Users\Danny\Desktop\PeerBlock.lnk
2013-09-21 00:08 - 2013-08-23 00:08 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForDanny
2013-09-21 00:08 - 2013-08-23 00:08 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForDanny.job
2013-09-21 00:07 - 2013-09-21 00:07 - 01366830 _____ C:\Users\Danny\Downloads\roboto (1).zip
2013-09-21 00:05 - 2013-09-21 00:05 - 00036838 _____ C:\Users\Danny\Downloads\hexi__by_hammer_and_nail86-d6lmtaj.rmskin
2013-09-21 00:04 - 2013-09-21 00:04 - 00918009 _____ C:\Users\Danny\Downloads\Roboto.zip
2013-09-21 00:01 - 2013-09-21 00:01 - 00004455 _____ C:\Users\Danny\Downloads\neon_1_0_by_stickdudeseven-d6mktl4.rmskin
2013-09-20 23:57 - 2013-09-20 23:57 - 02105040 _____ (PeerBlock, LLC                                              ) C:\Users\Danny\Downloads\PeerBlock-Setup_v1.1_r518.exe
2013-09-20 23:57 - 2013-09-20 23:57 - 00000000 ____D C:\Users\Danny\Documents\Rainmeter
2013-09-20 23:57 - 2013-09-20 23:57 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Rainmeter
2013-09-20 23:57 - 2013-09-20 23:57 - 00000000 ____D C:\Program Files\Rainmeter
2013-09-20 23:55 - 2013-09-20 23:55 - 05673816 _____ (Microsoft Corporation) C:\Users\Danny\Downloads\vcredist_x64.exe
2013-09-20 23:55 - 2013-09-20 23:55 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-20 23:54 - 2013-09-20 23:54 - 01386624 _____ C:\Users\Danny\Downloads\Rainmeter-2.5.exe
2013-09-20 23:47 - 2013-09-20 23:47 - 00001184 _____ C:\Users\Danny\Desktop\foobar2000 - Shortcut (2).lnk
2013-09-20 23:46 - 2013-09-20 23:46 - 00001412 _____ C:\Users\Danny\Desktop\foobar2000 - Shortcut.lnk
2013-09-20 23:39 - 2013-09-20 23:39 - 00000000 ____D C:\Users\Danny\Downloads\Metro_by_fanco86
2013-09-20 23:39 - 2013-09-20 23:33 - 00000000 ____D C:\Program Files (x86)\foobar2000
2013-09-20 23:36 - 2013-09-20 23:38 - 00000818 _____ C:\Users\Danny\Desktop\7-Zip File Manager.lnk
2013-09-20 23:36 - 2013-09-20 23:36 - 00000000 ____D C:\Program Files\7-Zip
2013-09-20 23:35 - 2013-09-20 23:35 - 01376768 _____ C:\Users\Danny\Downloads\7z920-x64.msi
2013-09-20 23:34 - 2013-09-20 23:34 - 01745934 _____ C:\Users\Danny\Downloads\Metro_by_fanco86.7z
2013-09-20 23:34 - 2013-09-20 23:34 - 01110476 _____ C:\Users\Danny\Downloads\7z920.exe
2013-09-20 23:33 - 2013-09-20 23:33 - 03740128 _____ (foobar2000.org) C:\Users\Danny\Downloads\foobar2000_v1.2.9.exe
2013-09-20 23:33 - 2013-09-20 23:33 - 00001037 _____ C:\Users\Public\Desktop\foobar2000.lnk
2013-09-20 22:23 - 2013-08-28 09:27 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForLudzie.job
2013-09-20 18:04 - 2013-08-28 09:27 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLudzie
2013-08-30 08:48 - 2013-09-21 11:52 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 08:48 - 2013-09-21 11:52 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 08:48 - 2013-09-21 11:52 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 08:48 - 2013-09-21 11:52 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 08:48 - 2013-09-21 11:52 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 08:48 - 2013-09-21 11:52 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 08:48 - 2013-09-21 11:52 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 08:48 - 2013-09-21 11:52 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 08:47 - 2013-09-21 11:52 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 08:47 - 2013-09-21 11:52 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-28 16:32 - 2013-08-28 09:19 - 00000000 ____D C:\Users\Ludzie\AppData\Local\PMB Files
2013-08-28 16:32 - 2013-08-28 09:19 - 00000000 ____D C:\ProgramData\PMB Files
2013-08-28 12:58 - 2013-08-28 12:58 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Macromedia
2013-08-28 12:58 - 2013-08-28 12:58 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\LolClient
2013-08-28 12:58 - 2013-08-28 12:58 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Adobe
2013-08-28 09:27 - 2013-08-28 09:14 - 00000000 ____D C:\Users\Ludzie\AppData\Local\Hewlett-Packard
2013-08-28 09:26 - 2013-08-28 09:12 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Hewlett-Packard
2013-08-28 09:20 - 2013-08-28 09:20 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-08-28 09:19 - 2013-08-28 09:19 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-08-28 09:19 - 2013-08-28 09:19 - 00000000 ____D C:\Riot Games
2013-08-28 09:19 - 2013-08-28 09:19 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-08-28 09:19 - 2013-08-28 09:17 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Riot Games
2013-08-28 09:14 - 2013-08-28 09:13 - 34249488 _____ (Riot Games) C:\Users\Ludzie\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe
2013-08-28 09:13 - 2013-08-28 09:13 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\ATI
2013-08-28 09:13 - 2013-08-28 09:13 - 00000000 ____D C:\Users\Ludzie\AppData\Local\ATI
2013-08-28 09:12 - 2013-08-28 09:12 - 00079864 _____ C:\Users\Ludzie\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-28 09:12 - 2013-08-28 09:12 - 00001449 _____ C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-28 09:12 - 2013-08-28 09:12 - 00001415 _____ C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-08-28 09:12 - 2013-08-28 09:12 - 00000000 ___RD C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-28 09:12 - 2013-08-28 09:12 - 00000000 ___RD C:\Users\Ludzie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-28 09:12 - 2013-08-28 09:12 - 00000000 ____D C:\Users\Ludzie\AppData\Roaming\Intel Corporation
2013-08-28 09:12 - 2013-08-28 09:11 - 00000000 ____D C:\Users\Ludzie\AppData\Local\Google
2013-08-28 09:12 - 2013-08-28 09:11 - 00000000 ____D C:\Users\Ludzie
2013-08-28 09:11 - 2013-08-28 09:11 - 00000020 ___SH C:\Users\Ludzie\ntuser.ini
2013-08-28 09:11 - 2013-08-28 09:11 - 00000000 ____D C:\Users\Ludzie\AppData\Local\VirtualStore
2013-08-24 07:43 - 2013-08-24 07:43 - 00001673 _____ C:\Users\Danny\Desktop\Google Drive.lnk
2013-08-24 07:43 - 2013-08-23 00:01 - 00000000 ____D C:\Users\Danny
2013-08-24 07:42 - 2013-08-24 07:42 - 00002046 _____ C:\Users\Public\Desktop\Google Slides.lnk
2013-08-24 07:42 - 2013-08-24 07:42 - 00002042 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2013-08-24 07:42 - 2013-08-24 07:42 - 00002030 _____ C:\Users\Public\Desktop\Google Docs.lnk
2013-08-24 07:41 - 2013-08-24 07:41 - 00784832 _____ (Google Inc.) C:\Users\Danny\Downloads\googledrivesync.exe
2013-08-24 01:14 - 2013-08-24 01:14 - 00000491 _____ C:\Users\Danny\Desktop\g.txt
2013-08-24 00:14 - 2013-08-24 00:14 - 00000000 ____D C:\Users\Danny\AppData\Roaming\HpUpdate
2013-08-23 23:06 - 2013-08-23 23:06 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-08-23 18:43 - 2013-08-23 18:43 - 00000919 _____ C:\Users\Public\Desktop\Steam.lnk
2013-08-23 18:42 - 2013-08-23 18:42 - 01669632 _____ C:\Users\Danny\Downloads\SteamInstall.msi
2013-08-23 15:43 - 2013-08-23 15:43 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Nero
2013-08-23 15:43 - 2013-08-23 15:43 - 00000000 ____D C:\ProgramData\LightScribe
2013-08-23 15:43 - 2013-08-23 00:08 - 00000000 ____D C:\Users\Danny\AppData\Local\VirtualStore
2013-08-23 15:42 - 2013-08-23 15:42 - 00000032 ____N C:\Users\Danny\Downloads\bus.txt
2013-08-23 15:28 - 2013-08-23 15:14 - 621283886 _____ C:\Users\Danny\Downloads\Hirens.BootCD.15.2.zip
2013-08-23 15:22 - 2013-08-23 15:22 - 00000000 ____D C:\ProgramData\Nero
2013-08-23 15:22 - 2013-08-23 15:22 - 00000000 ____D C:\Program Files (x86)\Nero
2013-08-23 15:15 - 2013-08-23 15:15 - 00000034 _____ C:\Users\Danny\Downloads\serial.txt
2013-08-23 15:14 - 2013-08-23 15:13 - 51319552 _____ (Updatepack.nl                                               ) C:\Users\Danny\Downloads\nero-8.2.8.0_europe_lite.exe
2013-08-23 15:12 - 2013-08-23 15:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-23 15:12 - 2013-08-23 15:12 - 00000000 ____D C:\ProgramData\Skype
2013-08-23 15:12 - 2010-10-03 04:00 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-08-23 14:12 - 2013-08-23 01:48 - 00000154 _____ C:\Users\Danny\Desktop\New Text Document.txt
2013-08-23 10:59 - 2013-08-23 10:58 - 00000000 ____D C:\Users\Danny\AppData\Roaming\FreeVoipDeal
2013-08-23 10:58 - 2013-08-23 10:58 - 00001252 _____ C:\Users\Danny\Desktop\FreeVoipDeal.lnk
2013-08-23 10:58 - 2013-08-23 10:58 - 00000000 ____D C:\Program Files (x86)\FreeVoipDeal.com
2013-08-23 10:57 - 2010-10-03 04:05 - 00000000 ____D C:\Program Files (x86)\EasyBits For Kids
2013-08-23 10:56 - 2013-08-23 10:56 - 06745704 _____ (Finarea S.A. Switzerland                                    ) C:\Users\Danny\Downloads\setupFreeVoipDeal.exe
2013-08-23 10:56 - 2013-08-23 10:56 - 00000056 ____H C:\Windows\SysWOW64\ezsidmv.dat
2013-08-23 01:47 - 2009-07-25 02:45 - 00000000 ____D C:\swsetup
2013-08-23 01:46 - 2013-08-23 00:02 - 00000544 _____ C:\Windows\Tasks\PCDRScheduledMaintenance.job
2013-08-23 01:46 - 2009-07-14 05:45 - 00328688 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-23 00:10 - 2013-08-23 00:10 - 00002261 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-23 00:10 - 2013-08-23 00:07 - 00000000 ____D C:\Users\Danny\AppData\Local\Hewlett-Packard
2013-08-23 00:09 - 2013-08-23 00:09 - 00003892 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-23 00:09 - 2013-08-23 00:09 - 00003640 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-23 00:09 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Roaming\ATI
2013-08-23 00:09 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Local\Deployment
2013-08-23 00:09 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Local\ATI
2013-08-23 00:09 - 2013-08-23 00:09 - 00000000 ____D C:\Users\Danny\AppData\Local\Apps\2.0
2013-08-23 00:08 - 2013-08-23 00:08 - 00001449 _____ C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-23 00:08 - 2013-08-23 00:08 - 00001415 _____ C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-08-23 00:08 - 2013-08-23 00:08 - 00000000 ___RD C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-23 00:08 - 2013-08-23 00:08 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Macromedia
2013-08-23 00:08 - 2013-08-23 00:08 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Intel Corporation
2013-08-23 00:08 - 2013-08-23 00:08 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Adobe
2013-08-23 00:08 - 2013-08-23 00:02 - 00000000 ____D C:\Users\Danny\AppData\Roaming\Hewlett-Packard
2013-08-23 00:07 - 2013-08-23 00:07 - 00003706 _____ C:\Windows\System32\Tasks\RecoveryCDWin7
2013-08-23 00:07 - 2009-08-04 22:46 - 00000000 ___HD C:\SYSTEM.SAV
2013-08-23 00:07 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore
2013-08-23 00:02 - 2013-08-23 00:02 - 00004992 _____ C:\Windows\System32\Tasks\PCDRScheduledMaintenance
2013-08-23 00:02 - 2013-08-23 00:02 - 00000000 ____D C:\Users\Public\Symantec
2013-08-23 00:02 - 2010-10-03 04:00 - 00000000 ___RD C:\Program Files (x86)\Online Services
2013-08-23 00:02 - 2010-06-18 11:23 - 00000000 _RSHD C:\hp
2013-08-23 00:02 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-08-23 00:02 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-08-23 00:01 - 2013-08-23 00:01 - 00079864 _____ C:\Users\Danny\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-23 00:01 - 2013-08-23 00:01 - 00000020 ___SH C:\Users\Danny\ntuser.ini
2013-08-23 00:01 - 2013-08-23 00:01 - 00000000 __RSH C:\Windows\SysWOW64\Drivers\103C_HP_53316J G D_p6551uk_Y53316J G D_0U_QCZC039_ECZC039CQVZ DPS_4A_I2A9C_SMSI_V1.0_6.12_T100712_WU3-0_L409_M6072_J1000_7Intel_8655_93.20_#130811_N18143090;10EC8168_(WX169EA#ABU)_X_CD3_Z_2xxx0204GRxxxxxxxx0.MRK
2013-08-23 00:01 - 2013-08-23 00:01 - 00000000 __RSH C:\Windows\system32\Drivers\103C_HP_53316J G D_p6551uk_Y53316J G D_0U_QCZC039_ECZC039CQVZ DPS_4A_I2A9C_SMSI_V1.0_6.12_T100712_WU3-0_L409_M6072_J1000_7Intel_8655_93.20_#130811_N18143090;10EC8168_(WX169EA#ABU)_X_CD3_Z_2xxx0204GRxxxxxxxx0.MRK
2013-08-23 00:01 - 2009-07-24 20:22 - 00000000 ____D C:\Windows\Panther
2013-08-22 23:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

Files to move or delete:
====================
ZeroAccess:
C:\Users\Danny\AppData\Local\Google\Desktop\Install
ZeroAccess:
C:\Program Files (x86)\Google\Desktop\Install


Some content of TEMP:
====================
C:\Users\Ludzie\AppData\Local\Temp\swt-win32-3349.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2010-10-03 04:35] - [2010-10-03 04:35] - 2868736 ____A (Microsoft Corporation) 6D4F9E4B640B413C6F73414327484C80

C:\Windows\SysWOW64\explorer.exe
[2010-10-03 04:35] - [2010-10-03 04:35] - 2613248 ____A (Microsoft Corporation) FC89FACA0473641CB625EDA9277D0885

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender


LastRegBack: 2013-09-05 08:19

==================== End Of Log ============================