Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 Ran by Patryk (administrator) on PATRYK-KOMPUTER on 05-10-2013 17:24:33 Running from C:\Users\Patryk\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe (Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe (Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe (Valve Corporation) D:\Steam\Steam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Sidebar\sidebar.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Apple Inc.) D:\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (LogMeIn Inc.) D:\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) D:\LogMeIn Hamachi\hamachi-2.exe (CyberLink Corp.) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-03-23] (IDT, Inc.) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation) HKLM\...\Run: [ProfilerU] - C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek) HKLM\...\Run: [SaiMfd] - C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek) HKLM\...\Run: [Autodesk Sync] - C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.) HKCU\...\Run: [GG] - C:\Users\Patryk\AppData\Local\GG\Application\gghub.exe [4009024 2013-09-15] (GG Network S.A.) HKCU\...\Run: [Steam] - D:\Steam\steam.exe [1813928 2013-10-05] (Valve Corporation) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKCU\...\Run: [Xvid] - C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] () HKCU\...\Policies\Explorer: [] HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-01-28] (Apple Inc.) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-01-28] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2013-02-20] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - D:\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&affID=119520&tt=gc_&babsrc=SP_ss&mntrId=D2E100FFB3084521 BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 FireFox: ======== FF ProfilePath: C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-486265634-1215011000-3083432935-1000\FireFox FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - D:\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - D:\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin HKCU: ubisoft.com/uplaypc - D:\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx ==================== Services (Whitelisted) ================= R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-01-28] (Kaspersky Lab ZAO) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-10] () R2 Hamachi2Svc; D:\LogMeIn Hamachi\hamachi-2.exe [2470736 2013-06-28] (LogMeIn Inc.) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-03] () R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe [247808 2010-03-23] (IDT, Inc.) S3 TunngleService; D:\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH) ==================== Drivers (Whitelisted) ==================== R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-11-01] () R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-04-24] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-10-25] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-10-25] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-06-19] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-04-24] (Kaspersky Lab ZAO) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-11-01] () R3 SaiK0CC3; C:\Windows\System32\DRIVERS\SaiK0CC3.sys [180584 2012-09-20] (Saitek) R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [24680 2012-10-15] (Saitek) R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek) R3 SaiU0CC3; C:\Windows\System32\DRIVERS\SaiU0CC3.sys [47208 2012-09-20] (Saitek) R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net) S3 iscFlash; \??\C:\Users\Patryk\AppData\Local\Temp\7zSED2C.tmp\iscflashx64.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-04-24] (Kaspersky Lab ZAO) S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [x] U3 kwrdipog; \??\C:\Users\Patryk\AppData\Local\Temp\kwrdipog.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-05 17:24 - 2013-10-05 17:24 - 00000000 ____D C:\FRST 2013-10-05 17:21 - 2013-10-05 17:22 - 00076434 _____ C:\Users\Patryk\Desktop\Extras.Txt 2013-10-05 17:19 - 2013-10-05 17:21 - 00116782 _____ C:\Users\Patryk\Desktop\OTL.Txt 2013-10-05 17:09 - 2013-10-05 17:09 - 00008283 _____ C:\Users\Patryk\Desktop\GMER.txt 2013-10-05 15:54 - 2013-10-05 15:54 - 01954124 _____ (Farbar) C:\Users\Patryk\Desktop\FRST64.exe 2013-10-05 15:51 - 2013-10-05 15:51 - 00602112 _____ (OldTimer Tools) C:\Users\Patryk\Desktop\OTL.exe 2013-10-05 15:49 - 2013-10-05 15:49 - 00377856 _____ C:\Users\Patryk\Desktop\2urimw2f.exe 2013-10-05 15:40 - 2013-10-05 16:39 - 00009504 _____ C:\Windows\PFRO.log 2013-10-05 15:38 - 2013-10-05 15:38 - 00621568 _____ (Duplex Secure Ltd.) C:\Users\Patryk\Downloads\SPTDinst-v184-x64.exe 2013-10-05 15:20 - 2013-10-05 15:20 - 00000000 ____D C:\CrashReport 2013-10-05 14:47 - 2013-10-05 14:47 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-10-05 14:46 - 2013-10-05 16:39 - 00000168 _____ C:\Windows\setupact.log 2013-10-05 14:46 - 2013-10-05 14:46 - 00000000 _____ C:\Windows\setuperr.log 2013-10-05 01:37 - 2013-10-05 01:37 - 00007605 _____ C:\Users\Patryk\AppData\Local\Resmon.ResmonCfg 2013-10-05 00:16 - 2013-10-05 00:32 - 00026360 _____ C:\Windows\DirectX.log 2013-10-05 00:15 - 2013-10-05 00:30 - 00000579 _____ C:\Users\Public\Desktop\Dragon's Prophet.lnk 2013-10-04 19:19 - 2013-10-04 19:19 - 00008280 _____ C:\Users\Patryk\Downloads\CA20131004_1919.slk 2013-10-04 16:36 - 2013-10-05 00:35 - 00000000 ____D C:\ProgramData\Solid State Networks 2013-10-04 16:35 - 2013-10-04 16:35 - 01435928 _____ (Infernum) C:\Users\Patryk\Downloads\DragonsProphetDLM-lmln.exe 2013-10-02 14:57 - 2013-10-02 17:40 - 00051945 _____ C:\Users\Patryk\Desktop\Rysunek3.dwg 2013-10-01 21:22 - 2013-10-01 21:22 - 00036892 _____ C:\Windows\SysWOW64\bassmod.dll 2013-10-01 21:15 - 2013-10-01 21:15 - 00000000 ____D C:\Users\Patryk\Documents\FLiNGTrainer 2013-10-01 20:29 - 2013-10-04 19:36 - 00000000 ____D C:\Users\Patryk\Desktop\trainer 2013-09-30 22:48 - 2013-09-30 22:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-09-29 14:12 - 2013-09-29 15:07 - 00000958 _____ C:\Users\Patryk\Desktop\Skyrim (SKSE).lnk 2013-09-26 16:24 - 2013-09-26 16:24 - 00000201 ____H C:\Users\Patryk\Documents\Rysunek1.dwl2 2013-09-26 16:24 - 2013-09-26 16:24 - 00000050 ____H C:\Users\Patryk\Documents\Rysunek1.dwl 2013-09-16 22:22 - 2013-09-16 22:22 - 00013670 _____ C:\Users\Patryk\Downloads\Lista operacji.htm 2013-09-15 20:30 - 2013-09-15 20:30 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2013-09-15 20:06 - 2013-09-15 20:06 - 00000000 ____D C:\Users\Patryk\AppData\Local\Patcher 2013-09-15 20:05 - 2013-08-26 13:00 - 00668672 _____ C:\Users\Patryk\Desktop\DayZRP.exe 2013-09-15 20:04 - 2013-09-15 20:05 - 00401556 _____ C:\Users\Patryk\Downloads\DayZRP.zip 2013-09-15 19:55 - 2013-09-15 19:55 - 00335777 _____ (DayZRP ) C:\Users\Patryk\Downloads\DayZRP-1.2.3v3-Patch.exe 2013-09-15 18:09 - 2013-10-02 17:36 - 00000000 ____D C:\Users\Patryk\AppData\Local\cache 2013-09-15 18:00 - 2013-09-15 18:00 - 00000000 ____D C:\Users\Patryk\Documents\Inventor Server SDK ACAD 2013 2013-09-15 17:59 - 2013-09-15 17:59 - 00000153 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2013-09-15 17:58 - 2013-09-15 17:58 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2013-09-15 17:57 - 2013-09-26 16:13 - 00000000 ____D C:\Users\Patryk\AppData\Local\Autodesk 2013-09-15 17:57 - 2013-09-15 18:01 - 00001871 _____ C:\Users\Public\Desktop\AutoCAD 2013 – Polski (Polish).lnk 2013-09-15 17:54 - 2013-09-15 18:01 - 00000000 ____D C:\Program Files\Autodesk 2013-09-15 17:54 - 2013-09-15 18:00 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2013-09-15 17:54 - 2013-09-15 17:54 - 00000000 ____D C:\Program Files (x86)\Autodesk 2013-09-15 17:49 - 2013-09-15 20:30 - 00000000 ____D C:\ProgramData\Autodesk 2013-09-15 17:49 - 2013-09-15 18:18 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Autodesk 2013-09-15 14:18 - 2013-09-15 14:18 - 00000000 ____D C:\Users\Patryk\AppData\Local\Skyrim 2013-09-15 13:12 - 2013-09-15 13:12 - 00026112 _____ C:\Users\Patryk\Desktop\EDT B1.1 g1.xls 2013-09-15 13:12 - 2013-09-15 13:12 - 00025600 _____ C:\Users\Patryk\Desktop\EDT-OPTIONS.xls 2013-09-15 03:14 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-15 03:14 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-15 03:14 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-15 03:14 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-15 03:14 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-15 03:14 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-15 03:14 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-15 03:14 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-15 03:14 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-15 03:14 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-15 03:14 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-15 03:14 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-15 03:14 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-15 03:14 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-15 03:14 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-09-15 03:14 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-09-15 03:14 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-09-15 03:14 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-15 03:14 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-09-15 03:14 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-15 03:14 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-09-14 20:35 - 2013-09-14 20:35 - 00000196 _____ C:\Users\Patryk\Desktop\notka.txt 2013-09-14 20:08 - 2013-09-14 20:08 - 00000000 ____D C:\Windows\8A809006C25A4A3A9DAB94659BCDB107.TMP 2013-09-14 19:10 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-09-14 19:10 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-09-14 19:10 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-09-14 19:10 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-09-14 19:10 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2013-09-14 19:10 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-09-14 19:10 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2013-09-14 19:10 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-09-14 19:10 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2013-09-14 19:10 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-09-14 19:10 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-09-14 19:10 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-09-14 19:10 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-09-14 19:10 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-09-14 19:10 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-09-14 19:10 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-09-14 19:10 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-09-14 19:10 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-09-14 19:10 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-09-14 19:10 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-09-14 19:10 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-09-14 19:10 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-09-14 19:10 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-09-14 19:10 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-09-14 19:10 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-09-14 19:10 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-09-14 19:10 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-09-14 19:10 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-09-14 19:10 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-09-14 19:10 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-09-14 19:10 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-09-14 19:10 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-09-14 19:10 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-09-14 19:10 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-09-14 19:10 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-09-14 19:10 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-09-14 19:10 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-09-14 19:10 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-09-14 19:10 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-09-14 19:10 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-09-14 19:10 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-09-14 19:10 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-09-14 19:10 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys ==================== One Month Modified Files and Folders ======= 2013-10-05 17:24 - 2013-10-05 17:24 - 00000000 ____D C:\FRST 2013-10-05 17:24 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-10-05 17:22 - 2013-10-05 17:21 - 00076434 _____ C:\Users\Patryk\Desktop\Extras.Txt 2013-10-05 17:22 - 2012-08-25 12:04 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Skype 2013-10-05 17:21 - 2013-10-05 17:19 - 00116782 _____ C:\Users\Patryk\Desktop\OTL.Txt 2013-10-05 17:09 - 2013-10-05 17:09 - 00008283 _____ C:\Users\Patryk\Desktop\GMER.txt 2013-10-05 17:08 - 2013-01-28 19:17 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-10-05 16:54 - 2012-08-24 23:38 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-05 16:48 - 2009-07-14 06:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-05 16:48 - 2009-07-14 06:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-05 16:44 - 2012-08-24 20:56 - 01194169 _____ C:\Windows\WindowsUpdate.log 2013-10-05 16:42 - 2012-08-27 18:24 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\GG 2013-10-05 16:40 - 2013-05-09 00:00 - 00000000 ____D C:\Users\Patryk\AppData\Local\LogMeIn Hamachi 2013-10-05 16:39 - 2013-10-05 15:40 - 00009504 _____ C:\Windows\PFRO.log 2013-10-05 16:39 - 2013-10-05 14:46 - 00000168 _____ C:\Windows\setupact.log 2013-10-05 16:39 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-05 16:38 - 2013-06-17 22:21 - 00000000 ____D C:\Users\Patryk\Downloads\sony vegas 2013-10-05 16:38 - 2013-06-12 16:12 - 00000000 ____D C:\Users\Patryk\Downloads\CS3_Key 2013-10-05 15:54 - 2013-10-05 15:54 - 01954124 _____ (Farbar) C:\Users\Patryk\Desktop\FRST64.exe 2013-10-05 15:51 - 2013-10-05 15:51 - 00602112 _____ (OldTimer Tools) C:\Users\Patryk\Desktop\OTL.exe 2013-10-05 15:49 - 2013-10-05 15:49 - 00377856 _____ C:\Users\Patryk\Desktop\2urimw2f.exe 2013-10-05 15:38 - 2013-10-05 15:38 - 00621568 _____ (Duplex Secure Ltd.) C:\Users\Patryk\Downloads\SPTDinst-v184-x64.exe 2013-10-05 15:33 - 2012-12-11 00:19 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\TS3Client 2013-10-05 15:20 - 2013-10-05 15:20 - 00000000 ____D C:\CrashReport 2013-10-05 14:47 - 2013-10-05 14:47 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-10-05 14:46 - 2013-10-05 14:46 - 00000000 _____ C:\Windows\setuperr.log 2013-10-05 01:37 - 2013-10-05 01:37 - 00007605 _____ C:\Users\Patryk\AppData\Local\Resmon.ResmonCfg 2013-10-05 01:34 - 2013-06-12 12:05 - 00000000 ____D C:\Users\Patryk\Documents\dragoon 2013-10-05 00:35 - 2013-10-04 16:36 - 00000000 ____D C:\ProgramData\Solid State Networks 2013-10-05 00:32 - 2013-10-05 00:16 - 00026360 _____ C:\Windows\DirectX.log 2013-10-05 00:30 - 2013-10-05 00:15 - 00000579 _____ C:\Users\Public\Desktop\Dragon's Prophet.lnk 2013-10-04 19:36 - 2013-10-01 20:29 - 00000000 ____D C:\Users\Patryk\Desktop\trainer 2013-10-04 19:19 - 2013-10-04 19:19 - 00008280 _____ C:\Users\Patryk\Downloads\CA20131004_1919.slk 2013-10-04 17:02 - 2013-01-23 21:18 - 00000000 ____D C:\Users\Patryk\Desktop\śmieci 2013-10-04 17:00 - 2012-08-24 21:49 - 00000000 ____D C:\Windows\Panther 2013-10-04 16:56 - 2012-08-24 20:56 - 00000000 ____D C:\Users\Patryk 2013-10-04 16:55 - 2012-11-01 16:20 - 00000000 ____D C:\Users\Patryk\Documents\My Games 2013-10-04 16:50 - 2013-04-14 23:38 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\.technic 2013-10-04 16:35 - 2013-10-04 16:35 - 01435928 _____ (Infernum) C:\Users\Patryk\Downloads\DragonsProphetDLM-lmln.exe 2013-10-03 13:01 - 2012-08-24 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-02 17:40 - 2013-10-02 14:57 - 00051945 _____ C:\Users\Patryk\Desktop\Rysunek3.dwg 2013-10-02 17:36 - 2013-09-15 18:09 - 00000000 ____D C:\Users\Patryk\AppData\Local\cache 2013-10-02 14:39 - 2013-07-20 15:33 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Foxit Software 2013-10-01 21:22 - 2013-10-01 21:22 - 00036892 _____ C:\Windows\SysWOW64\bassmod.dll 2013-10-01 21:15 - 2013-10-01 21:15 - 00000000 ____D C:\Users\Patryk\Documents\FLiNGTrainer 2013-09-30 22:53 - 2013-09-30 22:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-09-30 22:53 - 2012-08-24 23:34 - 00000000 ____D C:\Users\Patryk\AppData\Local\Mozilla 2013-09-29 23:20 - 2013-03-08 22:00 - 00000000 ____D C:\Users\Patryk\AppData\Local\ArmA 2 OA 2013-09-29 15:07 - 2013-09-29 14:12 - 00000958 _____ C:\Users\Patryk\Desktop\Skyrim (SKSE).lnk 2013-09-26 16:24 - 2013-09-26 16:24 - 00000201 ____H C:\Users\Patryk\Documents\Rysunek1.dwl2 2013-09-26 16:24 - 2013-09-26 16:24 - 00000050 ____H C:\Users\Patryk\Documents\Rysunek1.dwl 2013-09-26 16:13 - 2013-09-15 17:57 - 00000000 ____D C:\Users\Patryk\AppData\Local\Autodesk 2013-09-23 21:43 - 2013-01-23 21:17 - 00000000 ____D C:\Users\Patryk\Desktop\gry 2013-09-21 11:40 - 2012-08-24 21:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-09-21 11:37 - 2013-03-07 17:45 - 00000000 ___HD C:\jexepackres 2013-09-20 22:48 - 2009-07-14 06:45 - 02422416 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-20 15:54 - 2012-08-24 23:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-09-20 15:54 - 2012-08-24 23:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-20 15:54 - 2012-08-24 23:38 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-09-20 11:25 - 2012-12-09 15:07 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Audacity 2013-09-16 22:22 - 2013-09-16 22:22 - 00013670 _____ C:\Users\Patryk\Downloads\Lista operacji.htm 2013-09-15 20:31 - 2012-10-06 20:30 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\DAEMON Tools Lite 2013-09-15 20:30 - 2013-09-15 20:30 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2013-09-15 20:30 - 2013-09-15 17:49 - 00000000 ____D C:\ProgramData\Autodesk 2013-09-15 20:06 - 2013-09-15 20:06 - 00000000 ____D C:\Users\Patryk\AppData\Local\Patcher 2013-09-15 20:05 - 2013-09-15 20:04 - 00401556 _____ C:\Users\Patryk\Downloads\DayZRP.zip 2013-09-15 19:55 - 2013-09-15 19:55 - 00335777 _____ (DayZRP ) C:\Users\Patryk\Downloads\DayZRP-1.2.3v3-Patch.exe 2013-09-15 18:18 - 2013-09-15 17:49 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Autodesk 2013-09-15 18:03 - 2012-08-25 15:17 - 00142512 _____ C:\Users\Patryk\AppData\Local\GDIPFONTCACHEV1.DAT 2013-09-15 18:01 - 2013-09-15 17:57 - 00001871 _____ C:\Users\Public\Desktop\AutoCAD 2013 – Polski (Polish).lnk 2013-09-15 18:01 - 2013-09-15 17:54 - 00000000 ____D C:\Program Files\Autodesk 2013-09-15 18:00 - 2013-09-15 18:00 - 00000000 ____D C:\Users\Patryk\Documents\Inventor Server SDK ACAD 2013 2013-09-15 18:00 - 2013-09-15 17:54 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2013-09-15 17:59 - 2013-09-15 17:59 - 00000153 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2013-09-15 17:58 - 2013-09-15 17:58 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2013-09-15 17:54 - 2013-09-15 17:54 - 00000000 ____D C:\Program Files (x86)\Autodesk 2013-09-15 17:51 - 2013-04-30 18:31 - 01638694 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-09-15 17:51 - 2011-04-12 15:21 - 00737980 _____ C:\Windows\system32\perfh015.dat 2013-09-15 17:51 - 2011-04-12 15:21 - 00154636 _____ C:\Windows\system32\perfc015.dat 2013-09-15 17:51 - 2009-07-14 07:13 - 01638694 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-15 14:18 - 2013-09-15 14:18 - 00000000 ____D C:\Users\Patryk\AppData\Local\Skyrim 2013-09-15 13:12 - 2013-09-15 13:12 - 00026112 _____ C:\Users\Patryk\Desktop\EDT B1.1 g1.xls 2013-09-15 13:12 - 2013-09-15 13:12 - 00025600 _____ C:\Users\Patryk\Desktop\EDT-OPTIONS.xls 2013-09-15 04:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-09-15 03:37 - 2012-08-27 18:24 - 00000000 ____D C:\Users\Patryk\AppData\Local\GG 2013-09-15 03:35 - 2012-08-24 20:57 - 00000000 ___RD C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-09-15 03:35 - 2012-08-24 20:57 - 00000000 ___RD C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-09-15 03:14 - 2013-07-19 03:01 - 00000000 ____D C:\Windows\system32\MRT 2013-09-15 03:11 - 2012-10-06 19:47 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-14 20:35 - 2013-09-14 20:35 - 00000196 _____ C:\Users\Patryk\Desktop\notka.txt 2013-09-14 20:08 - 2013-09-14 20:08 - 00000000 ____D C:\Windows\8A809006C25A4A3A9DAB94659BCDB107.TMP 2013-09-14 19:11 - 2012-08-25 12:04 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-09-14 19:11 - 2012-08-25 12:04 - 00000000 ____D C:\ProgramData\Skype ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-01 02:07 ==================== End Of Log ============================