Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2013 Ran by Ozi (administrator) on OZI-KOMPUTER on 21-09-2013 18:00:35 Running from C:\Users\Ozi\Desktop\Nowy folder Windows 7 Home Premium (X64) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Comodo Security Solutions, Inc.) C:\Program Files\COMODO\COMODO System Utilities\CSUService.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe () C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE (Comodo Security Solutions, Inc.) C:\Program Files\COMODO\COMODO System Utilities\CSU_CLI.exe (Sourcefire, Inc.) C:\Program Files\Immunet\3.0.8\agent.exe (Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaUI.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe (Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Immunet) C:\Program Files\Immunet\3.0.8\iptray.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Microsoft Corporation) C:\Windows\system32\prevhost.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM-x32\...\Run: [Immunet Protect] - C:\Program Files\Immunet\3.0.8\iptray.exe [3508552 2012-09-25] (Immunet) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblockx64.dll (Simple Adblock) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblock.dll (Simple Adblock) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Tcpip\Parameters: [DhcpNameServer] 87.199.0.12 81.15.194.39 FireFox: ======== FF ProfilePath: C:\Users\Ozi\AppData\Roaming\Mozilla\Firefox\Profiles\htpvcphs.default-1379778492357 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( ) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) ==================== Services (Whitelisted) ================= R2 CSUService; C:\Program Files\COMODO\COMODO System Utilities\CSUService.exe [347968 2012-02-24] (Comodo Security Solutions, Inc.) R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-03-02] () R2 ImmunetProtect; C:\Program Files\Immunet\3.0.8\agent.exe [514408 2012-09-25] (Sourcefire, Inc.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 scan; C:\Program Files\Immunet\tetra\scan.dll [411648 2012-09-25] (S.C. BitDefender S.R.L) ==================== Drivers (Whitelisted) ==================== R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-11-04] (DT Soft Ltd) R3 gdrv; C:\Windows\gdrv.sys [25640 2013-09-21] (Windows (R) Server 2003 DDK provider) R3 gdrv; C:\Windows\gdrv.sys [25640 2013-09-21] (Windows (R) Server 2003 DDK provider) R2 ImmunetNetworkMonitorDriver; C:\Windows\System32\Drivers\ImmunetNetworkMonitor.sys [98632 2012-09-25] (Sourcefire, Inc.) R1 ImmunetProtectDriver; C:\Windows\System32\DRIVERS\ImmunetProtect.sys [57672 2012-09-25] (Windows (R) Win 7 DDK provider) R1 ImmunetSelfProtectDriver; C:\Windows\System32\DRIVERS\ImmunetSelfProtect.sys [32584 2012-09-25] (Windows (R) Win 7 DDK provider) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [284232 2012-09-25] (BitDefender S.R.L.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-21 17:53 - 2013-09-21 17:53 - 00000000 ____D C:\AdwCleaner 2013-09-21 17:52 - 2013-09-21 17:52 - 01039554 _____ C:\Users\Ozi\Downloads\AdwCleaner.exe 2013-09-21 17:48 - 2013-09-21 17:48 - 00000000 ____D C:\Users\Ozi\Desktop\Stare dane programu Firefox 2013-09-21 17:37 - 2013-09-21 17:37 - 00003316 _____ C:\Windows\System32\Tasks\{70D5D8A9-8055-4F06-A6DE-3732F7D03D63} 2013-09-21 17:33 - 2013-09-21 18:00 - 00000000 ____D C:\Users\Ozi\Desktop\Nowy folder 2013-09-21 17:33 - 2013-09-21 17:34 - 00000000 ____D C:\Users\Ozi\Desktop\Nowy folder (2) 2013-09-21 15:03 - 2013-09-21 15:03 - 00000000 ____D C:\FRST 2013-09-21 14:35 - 2013-09-21 14:35 - 00021453 _____ C:\ComboFix.txt 2013-09-21 13:42 - 2013-09-21 17:54 - 00006112 _____ C:\Windows\PFRO.log 2013-09-21 13:31 - 2013-09-21 13:31 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2013-09-21 13:31 - 2013-09-21 13:31 - 00000000 ____D C:\Users\Ozi\AppData\Roaming\Malwarebytes 2013-09-21 13:31 - 2013-09-21 13:31 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-21 13:31 - 2013-09-21 13:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-09-21 13:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-09-21 13:30 - 2013-09-21 13:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ozi\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-21 13:16 - 2013-09-21 14:35 - 00000000 ____D C:\Qoobox 2013-09-21 13:16 - 2013-09-21 13:22 - 00000000 ____D C:\Windows\erdnt 2013-09-21 13:16 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-09-21 13:16 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-09-21 13:16 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-09-21 13:16 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-09-21 13:16 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-09-21 13:16 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-09-21 13:16 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-09-21 13:16 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-09-21 13:15 - 2013-09-21 13:16 - 05128554 ____R (Swearware) C:\Users\Ozi\Desktop\ComboFix.exe 2013-09-21 12:58 - 2013-09-21 17:57 - 00013025 _____ C:\Windows\WindowsUpdate.log 2013-09-19 12:50 - 2013-09-19 12:50 - 00000000 ____D C:\Program Files (x86)\Techland 2013-09-14 22:58 - 2013-09-14 22:59 - 00000000 ____D C:\Users\Ozi\Documents\NFS Carbon 2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Ozi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat 2013-09-12 19:41 - 2013-09-21 17:54 - 00000840 _____ C:\Windows\setupact.log 2013-09-12 19:41 - 2013-09-12 19:41 - 00000000 _____ C:\Windows\setuperr.log 2013-09-11 21:43 - 2013-09-11 21:43 - 02347384 _____ (ESET) C:\Users\Ozi\Desktop\esetsmartinstaller_plk.exe 2013-09-11 21:43 - 2013-09-11 21:43 - 00000000 ____D C:\Program Files (x86)\ESET 2013-09-09 20:06 - 2013-09-09 20:39 - 00001719 _____ C:\Users\Ozi\Desktop\allegro.txt 2013-09-09 19:07 - 2013-09-09 19:07 - 00003096 _____ C:\Windows\System32\Tasks\{69D2669B-2D7B-4229-A391-DBAC4FBFF709} 2013-09-07 12:05 - 2013-09-07 12:05 - 00003832 _____ C:\Windows\System32\Tasks\Disk Cleaner 07-09-2013 12-05-37 2013-09-03 13:43 - 2013-09-03 21:25 - 00000509 _____ C:\Users\Ozi\Desktop\adrian.txt 2013-08-25 21:27 - 2013-08-25 21:27 - 00798720 _____ (Firelight Technologies) C:\Windows\system32\fmodex.dll ==================== One Month Modified Files and Folders ======= 2013-09-21 18:00 - 2013-09-21 17:33 - 00000000 ____D C:\Users\Ozi\Desktop\Nowy folder 2013-09-21 17:57 - 2013-09-21 12:58 - 00013025 _____ C:\Windows\WindowsUpdate.log 2013-09-21 17:55 - 2013-07-03 23:07 - 00001038 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-21 17:55 - 2012-09-25 22:14 - 00000145 _____ C:\service.log 2013-09-21 17:54 - 2013-09-21 13:42 - 00006112 _____ C:\Windows\PFRO.log 2013-09-21 17:54 - 2013-09-12 19:41 - 00000840 _____ C:\Windows\setupact.log 2013-09-21 17:54 - 2012-09-25 23:14 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-21 17:54 - 2012-09-25 22:24 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2013-09-21 17:54 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-21 17:53 - 2013-09-21 17:53 - 00000000 ____D C:\AdwCleaner 2013-09-21 17:53 - 2012-09-25 22:40 - 00000803 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-09-21 17:53 - 2012-09-25 22:12 - 00000927 _____ C:\Users\Ozi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-09-21 17:53 - 2012-09-25 22:12 - 00000859 _____ C:\Users\Ozi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2013-09-21 17:52 - 2013-09-21 17:52 - 01039554 _____ C:\Users\Ozi\Downloads\AdwCleaner.exe 2013-09-21 17:48 - 2013-09-21 17:48 - 00000000 ____D C:\Users\Ozi\Desktop\Stare dane programu Firefox 2013-09-21 17:44 - 2012-09-25 22:11 - 00000000 ____D C:\Users\Ozi 2013-09-21 17:37 - 2013-09-21 17:37 - 00003316 _____ C:\Windows\System32\Tasks\{70D5D8A9-8055-4F06-A6DE-3732F7D03D63} 2013-09-21 17:35 - 2012-09-27 12:19 - 00000000 ____D C:\Users\Ozi\AppData\Local\Google 2013-09-21 17:35 - 2012-09-25 22:12 - 00000000 ___RD C:\Users\Ozi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-09-21 17:34 - 2013-09-21 17:33 - 00000000 ____D C:\Users\Ozi\Desktop\Nowy folder (2) 2013-09-21 17:28 - 2013-07-03 23:07 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-21 17:28 - 2012-09-25 22:31 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-21 15:05 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-21 15:05 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-21 15:03 - 2013-09-21 15:03 - 00000000 ____D C:\FRST 2013-09-21 15:00 - 2012-09-25 22:28 - 00062904 _____ C:\Users\Ozi\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-21 14:35 - 2013-09-21 14:35 - 00021453 _____ C:\ComboFix.txt 2013-09-21 14:35 - 2013-09-21 13:16 - 00000000 ____D C:\Qoobox 2013-09-21 14:33 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-09-21 13:31 - 2013-09-21 13:31 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2013-09-21 13:31 - 2013-09-21 13:31 - 00000000 ____D C:\Users\Ozi\AppData\Roaming\Malwarebytes 2013-09-21 13:31 - 2013-09-21 13:31 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-21 13:31 - 2013-09-21 13:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-09-21 13:30 - 2013-09-21 13:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ozi\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-21 13:23 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-09-21 13:22 - 2013-09-21 13:16 - 00000000 ____D C:\Windows\erdnt 2013-09-21 13:16 - 2013-09-21 13:15 - 05128554 ____R (Swearware) C:\Users\Ozi\Desktop\ComboFix.exe 2013-09-20 10:12 - 2012-09-25 22:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-09-20 10:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-09-20 10:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2013-09-20 10:05 - 2012-09-25 22:31 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-09-20 10:05 - 2012-09-25 22:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-20 10:05 - 2012-09-25 22:31 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-09-20 09:34 - 2012-10-03 18:14 - 00000000 ____D C:\Users\Ozi\AppData\Roaming\OpenOffice.org2 2013-09-20 09:14 - 2009-07-14 06:45 - 00291584 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-19 12:50 - 2013-09-19 12:50 - 00000000 ____D C:\Program Files (x86)\Techland 2013-09-14 22:59 - 2013-09-14 22:58 - 00000000 ____D C:\Users\Ozi\Documents\NFS Carbon 2013-09-14 22:03 - 2013-09-14 22:03 - 00000000 ____D C:\Users\Ozi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat 2013-09-12 19:41 - 2013-09-12 19:41 - 00000000 _____ C:\Windows\setuperr.log 2013-09-11 21:43 - 2013-09-11 21:43 - 02347384 _____ (ESET) C:\Users\Ozi\Desktop\esetsmartinstaller_plk.exe 2013-09-11 21:43 - 2013-09-11 21:43 - 00000000 ____D C:\Program Files (x86)\ESET 2013-09-09 20:39 - 2013-09-09 20:06 - 00001719 _____ C:\Users\Ozi\Desktop\allegro.txt 2013-09-09 20:11 - 2009-07-14 19:55 - 00737242 _____ C:\Windows\system32\perfh015.dat 2013-09-09 20:11 - 2009-07-14 19:55 - 00153930 _____ C:\Windows\system32\perfc015.dat 2013-09-09 20:11 - 2009-07-14 07:13 - 01661232 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-09 19:07 - 2013-09-09 19:07 - 00003096 _____ C:\Windows\System32\Tasks\{69D2669B-2D7B-4229-A391-DBAC4FBFF709} 2013-09-09 19:07 - 2012-11-28 12:18 - 00000000 ____D C:\Users\Ozi\Documents\EA Games 2013-09-07 12:05 - 2013-09-07 12:05 - 00003832 _____ C:\Windows\System32\Tasks\Disk Cleaner 07-09-2013 12-05-37 2013-09-07 12:04 - 2013-06-24 15:32 - 00000000 ____D C:\Users\Ozi\AppData\Roaming\GG 2013-09-07 12:00 - 2013-04-22 14:45 - 00000000 ____D C:\Windows\Minidump 2013-09-07 10:03 - 2013-06-24 15:32 - 00001276 _____ C:\Users\Ozi\Desktop\GG.lnk 2013-09-07 10:03 - 2013-02-26 23:23 - 00000000 ____D C:\ProgramData\ipla 2013-09-07 10:00 - 2013-02-26 23:23 - 00000000 ____D C:\Users\Ozi\AppData\Roaming\ipla 2013-09-05 14:43 - 2013-06-24 15:32 - 00000000 ____D C:\Users\Ozi\AppData\Local\GG 2013-09-03 21:25 - 2013-09-03 13:43 - 00000509 _____ C:\Users\Ozi\Desktop\adrian.txt 2013-08-25 21:27 - 2013-08-25 21:27 - 00798720 _____ (Firelight Technologies) C:\Windows\system32\fmodex.dll Some content of TEMP: ==================== C:\Users\Ozi\AppData\Local\Temp\bi_cleaner.exe C:\Users\Ozi\AppData\Local\Temp\Quarantine.exe C:\Users\Ozi\AppData\Local\Temp\uninst1.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-21 09:23 ==================== End Of Log ============================