Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 Ran by Jola (administrator) on JOLA-KOMPUTER on 10-10-2013 10:32:33 Running from H:\ Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\STacSV64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\system32\CISVC.EXE (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (Microsoft Corporation) C:\Windows\system32\mqsvc.exe (Microsoft Corporation) C:\Windows\System32\tcpsvcs.exe (Microsoft Corporation) C:\Windows\System32\snmp.exe (Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-01-14] (IDT, Inc.) HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-08-12] (Microsoft Corporation) HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKCU\...\Policies\system: [DisableLockWorkstation] 0 HKCU\...\Policies\system: [DisableChangePassword] 0 HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software) HKU\Default\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe HKU\Default User\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe ==================== Internet (Whitelisted) ==================== StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - Yandex URL = http://yandex.ru/yandsearch?clid=47356&text={searchTerms} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {1B3F4474-0BCC-436A-8D0D-796C5D5AAB5D} http://195.205.60.35/VatDec.cab DPF: HKLM-x32 {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab DPF: HKLM-x32 {6E49B4EF-9FE5-44DF-8D04-445AA94F83DB} http://80.54.113.2/program/SonyNetworkCameraViewer.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] ShellExecuteHooks-x32: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Jola\AppData\Roaming\Mozilla\Firefox\Profiles\xp05b0h2.default FF Homepage: www.google.pl FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Iplex to ALLPlayer - C:\Users\Jola\AppData\Roaming\Mozilla\Firefox\Profiles\xp05b0h2.default\Extensions\IplextoALL@ALLPlayer.org FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird ==================== Services (Whitelisted) ================= S4 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software) S4 hpdoccardsvc; C:\Program Files (x86)\Hewlett-Packard\HP ENVY Document Card Utilities\doccardsvc.exe [83240 2010-03-24] (Hewlett-Packard Developement Company, L.P.) R2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation) S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2012-06-14] () R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-08-12] (Microsoft Corporation) R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-08-12] (Microsoft Corporation) S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG) R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-20] (Microsoft Corporation) R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\STacSV64.exe [244736 2010-01-14] (IDT, Inc.) S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) S2 MBAMScheduler; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe" [x] S2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [x] ==================== Drivers (Whitelisted) ==================== R1 11748921; C:\Windows\System32\DRIVERS\11748921.sys [157712 2013-09-27] (Kaspersky Lab) R0 11748922; C:\Windows\System32\DRIVERS\11748922.sys [40464 2013-09-27] (Kaspersky Lab) R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] () S3 DCamUSBET; C:\Windows\System32\DRIVERS\etDevice64.sys [527744 2007-07-23] (eMPIA Technology, Inc.) R1 DVMIO; C:\Windows\System32\DRIVERS\dvmio.sys [20056 2010-01-29] (DeviceVM, Inc.) S3 FiltUSBET; C:\Windows\System32\DRIVERS\etFilter64.sys [281088 2007-06-14] (eMPIA Technology Inc.) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation) R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation) S3 ScanUSBET; C:\Windows\System32\DRIVERS\etScan64.sys [9216 2007-07-23] (eMPIA Technology, Inc.) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 TC131; C:\Windows\SysWow64\Drivers\TC131.sys [13568 2008-11-12] () S3 ALSysIO; \??\C:\Users\Jola\AppData\Local\Temp\ALSysIO64.sys [x] U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [x] S3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [x] S3 TC131; System32\Drivers\TC131.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-10 10:32 - 2013-10-10 10:32 - 00000000 ____D C:\FRST 2013-10-09 15:06 - 2013-10-09 15:06 - 00002971 _____ C:\Users\Jola\Desktop\HiJackThis.lnk 2013-10-09 15:06 - 2013-10-09 15:06 - 00000000 ____D C:\Users\Jola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis 2013-10-09 15:06 - 2013-10-09 15:06 - 00000000 ____D C:\Program Files (x86)\Trend Micro 2013-10-09 08:01 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-09 08:01 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-09 08:01 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-09 08:01 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-09 08:01 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-09 08:01 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-09 08:01 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-09 08:01 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-09 08:01 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-09 08:01 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-09 08:01 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-09 08:01 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-09 07:53 - 2013-10-09 07:53 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-10-09 07:53 - 2013-10-09 07:53 - 00001922 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-09 07:53 - 2013-08-30 09:48 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-10-09 07:53 - 2013-08-30 09:48 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-10-09 07:53 - 2013-08-30 09:48 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-10-09 07:53 - 2013-08-30 09:48 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-10-09 07:53 - 2013-08-30 09:48 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-10-09 07:53 - 2013-08-30 09:48 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-10-09 07:53 - 2013-08-30 09:48 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-10-09 07:53 - 2013-08-30 09:48 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-10-09 07:53 - 2013-08-30 09:47 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-10-09 07:52 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-10-09 07:51 - 2013-10-09 07:51 - 00000000 ____D C:\ProgramData\AVAST Software 2013-10-09 07:51 - 2013-10-09 07:51 - 00000000 ____D C:\Program Files\AVAST Software 2013-10-09 07:26 - 2013-08-29 03:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys 2013-10-09 07:26 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-10-09 07:26 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-10-09 07:26 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-10-09 07:26 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-10-09 07:26 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-10-09 07:26 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-10-09 07:26 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-10-09 07:26 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-10-09 07:26 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-10-09 07:26 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-10-09 07:26 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-10-09 07:26 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-10-09 07:26 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-10-09 07:26 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-10-09 07:26 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-10-09 07:26 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-10-09 07:26 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-10-09 07:26 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-10-09 07:26 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-10-09 07:26 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-10-09 07:26 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-10-09 07:26 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-10-09 07:26 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-09 07:26 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-09 07:26 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-09 07:26 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-09 07:26 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-09 07:26 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-09 07:26 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-09 07:26 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-09 07:26 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-09 07:26 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-09 07:26 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-09 07:26 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-09 07:26 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-09 07:26 - 2012-06-01 07:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll 2013-10-09 07:26 - 2012-06-01 07:36 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll 2013-10-09 07:26 - 2012-06-01 07:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll 2013-10-09 07:26 - 2012-06-01 07:35 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll 2013-10-09 07:26 - 2012-06-01 07:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll 2013-10-09 07:26 - 2012-06-01 07:33 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe 2013-10-09 07:26 - 2012-06-01 06:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wamregps.dll 2013-10-09 07:26 - 2012-06-01 06:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll 2013-10-09 07:26 - 2012-06-01 06:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisrstap.dll 2013-10-09 07:26 - 2012-06-01 06:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admwprox.dll 2013-10-09 07:26 - 2012-06-01 06:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll 2013-10-09 07:26 - 2012-06-01 06:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisreset.exe 2013-10-09 07:25 - 2013-10-09 07:45 - 131918888 _____ C:\Users\Jola\Downloads\avast_free_antivirus_setup.exe 2013-10-09 07:25 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-09 07:25 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-09 07:25 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-09 07:25 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-09 07:25 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-09 07:25 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-09 07:25 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-09 07:25 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-09 07:25 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-09 07:25 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-09 07:25 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-09 07:25 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-09 07:25 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-09 07:25 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-09 07:25 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-09 07:25 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-09 07:25 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-09 07:25 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-09 07:25 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-09 07:25 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-09 07:25 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-09 07:25 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-10-09 07:25 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-10-09 07:25 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-10-09 07:25 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-10-09 07:25 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 07:25 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 07:25 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-09 07:25 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-09 07:25 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-09 07:25 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-09 07:25 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-09 07:25 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-09 07:25 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-09 07:25 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2013-10-09 07:25 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-09 07:25 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-09 07:25 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-10-09 07:22 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-09 07:21 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-09 07:21 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-09 07:21 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-09 07:21 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-09 07:21 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-09 07:21 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-10-09 07:21 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-08 16:19 - 2013-10-08 16:18 - 86543360 _____ C:\Users\Jola\Downloads\mksvir2007setup.exe 2013-10-07 19:28 - 2013-10-07 19:28 - 00347424 _____ (Microsoft Corporation) C:\Users\Jola\Downloads\MicrosoftFixit.wu.LB.196304598192717558.1.1.Run.exe 2013-10-06 21:46 - 2013-10-06 23:05 - 481070281 _____ C:\Users\Jola\Downloads\ESET.Smart.Security&Nod32;-x86x64-Bit-6-FINAL-PL-INSTRUKCJA.rar 2013-10-06 19:45 - 2013-10-10 10:27 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-06 19:45 - 2013-10-10 06:26 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-10-06 19:43 - 2013-10-09 07:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-06 19:43 - 2013-10-09 07:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-06 19:42 - 2013-10-06 19:42 - 13078152 _____ (Microsoft Corporation) C:\Users\Jola\Downloads\Silverlight_x64.exe 2013-10-06 19:41 - 2013-10-06 19:41 - 00000000 ____D C:\ProgramData\Oracle 2013-10-06 19:40 - 2013-10-06 19:40 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-06 19:40 - 2013-10-06 19:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-10-06 19:40 - 2013-10-06 19:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-10-06 19:40 - 2013-10-06 19:40 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-06 19:40 - 2013-10-06 19:40 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-06 19:39 - 2013-10-06 19:39 - 00913832 _____ (Oracle Corporation) C:\Users\Jola\Downloads\jxpiinstall.exe 2013-10-06 19:37 - 2013-10-06 19:44 - 246185648 _____ (Kaspersky Lab) C:\Users\Jola\Downloads\kav14.0.0.4651pl-pl.exe 2013-10-06 19:35 - 2013-10-06 19:41 - 00000000 ____D C:\Users\Jola\Desktop\ArcaVirMicroScan 2013-10-06 17:15 - 2013-10-10 06:32 - 00009248 _____ C:\Windows\PFRO.log 2013-10-06 17:11 - 2013-10-06 17:13 - 02124676 _____ C:\Windows\system32\Drivers\Cat.DB 2013-10-06 17:04 - 2013-10-06 17:47 - 00000000 ____D C:\Program Files (x86)\Spyware Doctor 2013-10-06 16:58 - 2013-10-06 17:02 - 23637767 _____ C:\Users\Jola\Downloads\Spyware.Doctor.v6.0.1440.PL.rar 2013-10-06 16:53 - 2013-10-06 17:46 - 00000000 ____D C:\ProgramData\PC Tools 2013-10-06 16:53 - 2013-10-06 16:53 - 00000000 ____D C:\Users\Jola\AppData\Roaming\TestApp 2013-10-06 16:52 - 2013-10-06 16:52 - 04130384 _____ (PC Tools) C:\Users\Jola\Downloads\sdsetup.exe 2013-10-06 15:12 - 2013-10-06 15:12 - 03841551 _____ (FranmoSoftware ) C:\Users\Jola\Downloads\odk13.4.0.1685setup.exe 2013-10-06 12:42 - 2013-10-06 12:44 - 04794189 _____ C:\Users\Jola\Downloads\Jak gotowac Maria Disslowa .rar 2013-10-06 12:02 - 2013-10-06 19:34 - 00000000 ____D C:\Program Files\GridinSoft Trojan Killer 2013-10-06 11:51 - 2013-10-06 11:51 - 00685248 _____ C:\Users\Jola\Downloads\Trojan-Killer(45675).exe 2013-10-06 09:38 - 2013-10-06 11:38 - 733851648 _____ C:\Users\Jola\Downloads\Before.Midnight.2013.PLSUBBED.BRRip.XviD-GHW.avi 2013-10-05 21:49 - 2013-10-05 21:53 - 00000000 ____D C:\Users\Jola\Downloads\Wife Switch #4 [scenes] 2013-10-05 19:57 - 2013-10-05 21:16 - 240989696 _____ C:\Users\Jola\Downloads\Maxwell.John.C..-.Przywodztwo..Zlote.zasady.biznes.part2.rar 2013-10-05 19:56 - 2013-10-05 20:40 - 266240000 _____ C:\Users\Jola\Downloads\Maxwell.John.C..-.Przywodztwo..Zlote.zasady.biznes.part1.rar 2013-10-05 19:23 - 2012-03-04 16:23 - 54215544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe 2013-10-05 15:00 - 2013-10-05 15:00 - 00000665 _____ C:\INSTALL.LOG 2013-10-05 05:05 - 2013-10-05 06:24 - 00003994 _____ C:\spyhunter.fix 2013-10-05 05:05 - 2013-10-04 20:33 - 00008192 _____ C:\shldr.mbr 2013-10-05 05:05 - 2012-11-02 16:23 - 00285747 _____ C:\shldr 2013-10-05 04:59 - 2013-10-05 05:35 - 221456183 _____ C:\Users\Jola\Downloads\Tracy.Brian.-.Sila.pewnosci.siebie.rar 2013-10-05 04:59 - 2013-10-05 05:13 - 81127367 _____ C:\Users\Jola\Downloads\Tracy.Brian.-.Samodyscyplina.rar 2013-09-30 19:58 - 2013-10-09 14:01 - 00044948 _____ C:\Windows\iis7.log 2013-09-30 19:57 - 2013-09-30 19:57 - 00000000 ____D C:\Windows\SysWOW64\BestPractices 2013-09-30 19:57 - 2013-09-30 19:57 - 00000000 ____D C:\Windows\system32\msmq 2013-09-30 19:57 - 2013-09-30 19:57 - 00000000 ____D C:\Windows\system32\BestPractices 2013-09-30 19:57 - 2013-09-30 19:57 - 00000000 ____D C:\Program Files\Windows Journal 2013-09-30 19:56 - 2013-09-30 19:56 - 00000862 _____ C:\Windows\system32\termcap 2013-09-30 19:56 - 2013-09-30 19:56 - 00000000 ____D C:\inetpub 2013-09-29 22:54 - 2013-10-10 09:56 - 00002184 _____ C:\Windows\setupact.log 2013-09-29 22:54 - 2013-09-29 22:54 - 00000000 _____ C:\Windows\setuperr.log 2013-09-29 21:55 - 2013-09-29 21:55 - 00000000 _____ C:\autoexec.bat 2013-09-29 21:54 - 2013-10-06 21:24 - 00000000 ____D C:\Windows\027B5748C40941FE949B7B81A8304EF4.TMP 2013-09-29 21:53 - 2013-09-29 21:53 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group 2013-09-29 21:44 - 2013-09-29 21:52 - 52140861 _____ C:\Users\Jola\Downloads\SpyHunter4_4.14.5.4268_ENG_-full-(cicha_instalka).rar 2013-09-29 20:27 - 2013-10-09 14:50 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-09-29 20:27 - 2013-10-09 14:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-09-29 19:54 - 2013-09-29 20:05 - 00000000 ____D C:\AdwCleaner 2013-09-29 19:53 - 2013-09-29 19:53 - 02074878 _____ C:\Users\Jola\Downloads\AdwCleaner.rar 2013-09-28 00:02 - 2013-09-29 09:52 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-28 00:01 - 2013-09-27 17:32 - 00352784 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\1174892.sys 2013-09-28 00:01 - 2013-09-27 17:32 - 00157712 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\11748921.sys 2013-09-28 00:01 - 2013-09-27 17:32 - 00040464 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\11748922.sys 2013-09-27 23:12 - 2013-10-06 15:28 - 00000000 ____D C:\Users\Jola\Doctor Web 2013-09-27 23:10 - 2013-09-27 23:10 - 131193208 _____ C:\Users\Jola\Downloads\launch.exe 2013-09-22 14:52 - 2013-09-22 15:11 - 114968594 _____ C:\Users\Jola\Downloads\May.Ewa.-.Technika.Uzdrawiania.Pola.Zycia.rar 2013-09-21 22:14 - 2013-10-06 17:57 - 00000000 ____D C:\Users\Jola\Desktop\Przepisy LIDL 2013-09-19 22:23 - 2013-09-19 22:23 - 00000000 ____D C:\Users\Jola\Desktop\PRZEPISY 2013-09-14 20:31 - 2013-09-14 22:32 - 734664704 _____ C:\Users\Jola\Downloads\z dystansu.lektor.pl.avi ==================== One Month Modified Files and Folders ======= 2013-10-10 10:32 - 2013-10-10 10:32 - 00000000 ____D C:\FRST 2013-10-10 10:27 - 2013-10-06 19:45 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-10 10:05 - 2009-07-14 06:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-10 10:05 - 2009-07-14 06:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-10 10:01 - 2010-06-08 01:40 - 01763190 _____ C:\Windows\WindowsUpdate.log 2013-10-10 09:56 - 2013-09-29 22:54 - 00002184 _____ C:\Windows\setupact.log 2013-10-10 09:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-10 06:32 - 2013-10-06 17:15 - 00009248 _____ C:\Windows\PFRO.log 2013-10-10 06:28 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-10-10 06:26 - 2013-10-06 19:45 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-10-10 06:26 - 2012-03-31 20:55 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-10-10 06:26 - 2011-07-03 11:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-10-09 15:06 - 2013-10-09 15:06 - 00002971 _____ C:\Users\Jola\Desktop\HiJackThis.lnk 2013-10-09 15:06 - 2013-10-09 15:06 - 00000000 ____D C:\Users\Jola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis 2013-10-09 15:06 - 2013-10-09 15:06 - 00000000 ____D C:\Program Files (x86)\Trend Micro 2013-10-09 15:06 - 2010-05-30 06:48 - 00755224 _____ C:\Windows\system32\perfh015.dat 2013-10-09 15:06 - 2010-05-30 06:48 - 00158738 _____ C:\Windows\system32\perfc015.dat 2013-10-09 15:06 - 2009-07-14 07:13 - 01702720 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-09 14:59 - 2010-05-29 22:01 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-09 14:56 - 2010-12-04 16:52 - 00000000 ____D C:\Program Files\LockHunter 2013-10-09 14:52 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini 2013-10-09 14:50 - 2013-09-29 20:27 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-10-09 14:50 - 2013-09-29 20:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-10-09 14:50 - 2010-12-24 14:40 - 00001912 _____ C:\Windows\epplauncher.mif 2013-10-09 14:04 - 2013-04-27 15:26 - 00000000 ____D C:\Users\Jola\AppData\Roaming\BitTorrent 2013-10-09 14:02 - 2010-10-06 02:44 - 00000000 ___RD C:\Users\Jola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-10-09 14:02 - 2010-10-06 02:44 - 00000000 ___RD C:\Users\Jola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-10-09 14:01 - 2013-09-30 19:58 - 00044948 _____ C:\Windows\iis7.log 2013-10-09 14:01 - 2009-09-07 03:57 - 00000000 ____D C:\Windows\Panther 2013-10-09 13:59 - 2009-07-14 06:45 - 00433096 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-09 11:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\inetsrv 2013-10-09 11:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\inetsrv 2013-10-09 07:53 - 2013-10-09 07:53 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-10-09 07:53 - 2013-10-09 07:53 - 00001922 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-09 07:53 - 2010-12-23 22:21 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-10-09 07:51 - 2013-10-09 07:51 - 00000000 ____D C:\ProgramData\AVAST Software 2013-10-09 07:51 - 2013-10-09 07:51 - 00000000 ____D C:\Program Files\AVAST Software 2013-10-09 07:47 - 2013-10-06 19:43 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-09 07:47 - 2013-10-06 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-09 07:45 - 2013-10-09 07:25 - 131918888 _____ C:\Users\Jola\Downloads\avast_free_antivirus_setup.exe 2013-10-08 16:18 - 2013-10-08 16:19 - 86543360 _____ C:\Users\Jola\Downloads\mksvir2007setup.exe 2013-10-08 16:17 - 2011-12-22 20:14 - 00000000 ____D C:\Program Files\SkanerOnline 2013-10-08 16:16 - 2011-03-17 21:10 - 00000000 ____D C:\Users\Jola\AppData\Roaming\ArcaVirMicroScan 2013-10-08 16:12 - 2009-07-14 04:34 - 00000942 _____ C:\Windows\system.ini 2013-10-07 19:28 - 2013-10-07 19:28 - 00347424 _____ (Microsoft Corporation) C:\Users\Jola\Downloads\MicrosoftFixit.wu.LB.196304598192717558.1.1.Run.exe 2013-10-06 23:05 - 2013-10-06 21:46 - 481070281 _____ C:\Users\Jola\Downloads\ESET.Smart.Security&Nod32;-x86x64-Bit-6-FINAL-PL-INSTRUKCJA.rar 2013-10-06 22:35 - 2012-01-31 19:02 - 00000000 ____D C:\Program Files (x86)\The KMPlayer 2013-10-06 21:24 - 2013-09-29 21:54 - 00000000 ____D C:\Windows\027B5748C40941FE949B7B81A8304EF4.TMP 2013-10-06 19:46 - 2010-10-14 17:49 - 00000000 ____D C:\Users\Jola\AppData\Local\Adobe 2013-10-06 19:44 - 2013-10-06 19:37 - 246185648 _____ (Kaspersky Lab) C:\Users\Jola\Downloads\kav14.0.0.4651pl-pl.exe 2013-10-06 19:42 - 2013-10-06 19:42 - 13078152 _____ (Microsoft Corporation) C:\Users\Jola\Downloads\Silverlight_x64.exe 2013-10-06 19:41 - 2013-10-06 19:41 - 00000000 ____D C:\ProgramData\Oracle 2013-10-06 19:41 - 2013-10-06 19:35 - 00000000 ____D C:\Users\Jola\Desktop\ArcaVirMicroScan 2013-10-06 19:40 - 2013-10-06 19:40 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-06 19:40 - 2013-10-06 19:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-10-06 19:40 - 2013-10-06 19:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-10-06 19:40 - 2013-10-06 19:40 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-06 19:40 - 2013-10-06 19:40 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-06 19:40 - 2012-06-16 20:01 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll 2013-10-06 19:40 - 2010-10-21 18:44 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-10-06 19:39 - 2013-10-06 19:39 - 00913832 _____ (Oracle Corporation) C:\Users\Jola\Downloads\jxpiinstall.exe 2013-10-06 19:34 - 2013-10-06 12:02 - 00000000 ____D C:\Program Files\GridinSoft Trojan Killer 2013-10-06 17:57 - 2013-09-21 22:14 - 00000000 ____D C:\Users\Jola\Desktop\Przepisy LIDL 2013-10-06 17:47 - 2013-10-06 17:04 - 00000000 ____D C:\Program Files (x86)\Spyware Doctor 2013-10-06 17:46 - 2013-10-06 16:53 - 00000000 ____D C:\ProgramData\PC Tools 2013-10-06 17:13 - 2013-10-06 17:11 - 02124676 _____ C:\Windows\system32\Drivers\Cat.DB 2013-10-06 17:02 - 2013-10-06 16:58 - 23637767 _____ C:\Users\Jola\Downloads\Spyware.Doctor.v6.0.1440.PL.rar 2013-10-06 16:53 - 2013-10-06 16:53 - 00000000 ____D C:\Users\Jola\AppData\Roaming\TestApp 2013-10-06 16:52 - 2013-10-06 16:52 - 04130384 _____ (PC Tools) C:\Users\Jola\Downloads\sdsetup.exe 2013-10-06 15:29 - 2013-07-01 22:49 - 00000000 ____D C:\Program Files (x86)\MarkAny 2013-10-06 15:29 - 2010-06-08 02:40 - 00000000 ____D C:\Intel 2013-10-06 15:28 - 2013-09-27 23:12 - 00000000 ____D C:\Users\Jola\Doctor Web 2013-10-06 15:28 - 2011-04-24 21:19 - 00000000 ____D C:\Windows\pss 2013-10-06 15:28 - 2011-01-16 21:58 - 00000000 ____D C:\Program Files (x86)\NAPI-PROJEKT 2013-10-06 15:28 - 2010-11-27 16:51 - 00000000 ____D C:\Users\Jola\Tracing 2013-10-06 15:28 - 2010-10-06 02:23 - 00000000 ____D C:\Users\Jola 2013-10-06 15:12 - 2013-10-06 15:12 - 03841551 _____ (FranmoSoftware ) C:\Users\Jola\Downloads\odk13.4.0.1685setup.exe 2013-10-06 12:44 - 2013-10-06 12:42 - 04794189 _____ C:\Users\Jola\Downloads\Jak gotowac Maria Disslowa .rar 2013-10-06 11:51 - 2013-10-06 11:51 - 00685248 _____ C:\Users\Jola\Downloads\Trojan-Killer(45675).exe 2013-10-06 11:38 - 2013-10-06 09:38 - 733851648 _____ C:\Users\Jola\Downloads\Before.Midnight.2013.PLSUBBED.BRRip.XviD-GHW.avi 2013-10-05 21:53 - 2013-10-05 21:49 - 00000000 ____D C:\Users\Jola\Downloads\Wife Switch #4 [scenes] 2013-10-05 21:16 - 2013-10-05 19:57 - 240989696 _____ C:\Users\Jola\Downloads\Maxwell.John.C..-.Przywodztwo..Zlote.zasady.biznes.part2.rar 2013-10-05 20:40 - 2013-10-05 19:56 - 266240000 _____ C:\Users\Jola\Downloads\Maxwell.John.C..-.Przywodztwo..Zlote.zasady.biznes.part1.rar 2013-10-05 15:00 - 2013-10-05 15:00 - 00000665 _____ C:\INSTALL.LOG 2013-10-05 06:24 - 2013-10-05 05:05 - 00003994 _____ C:\spyhunter.fix 2013-10-05 05:35 - 2013-10-05 04:59 - 221456183 _____ C:\Users\Jola\Downloads\Tracy.Brian.-.Sila.pewnosci.siebie.rar 2013-10-05 05:13 - 2013-10-05 04:59 - 81127367 _____ C:\Users\Jola\Downloads\Tracy.Brian.-.Samodyscyplina.rar 2013-10-04 21:15 - 2013-05-16 07:11 - 00000000 ____D C:\Users\Jola\Desktop\Obrazky 2013-10-04 20:33 - 2013-10-05 05:05 - 00008192 _____ C:\shldr.mbr 2013-10-01 20:39 - 2010-10-07 12:35 - 00000000 ____D C:\Users\Jola\Desktop\Robert 2013-09-30 23:09 - 2013-08-17 11:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-09-30 23:09 - 2010-10-16 16:36 - 00000000 ____D C:\Users\Jola\AppData\Local\Mozilla 2013-09-30 19:57 - 2013-09-30 19:57 - 00000000 ____D C:\Windows\SysWOW64\BestPractices 2013-09-30 19:57 - 2013-09-30 19:57 - 00000000 ____D C:\Windows\system32\msmq 2013-09-30 19:57 - 2013-09-30 19:57 - 00000000 ____D C:\Windows\system32\BestPractices 2013-09-30 19:57 - 2013-09-30 19:57 - 00000000 ____D C:\Program Files\Windows Journal 2013-09-30 19:57 - 2010-10-06 03:17 - 00000000 ____D C:\Windows\SHELLNEW 2013-09-30 19:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-09-30 19:57 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-09-30 19:56 - 2013-09-30 19:56 - 00000862 _____ C:\Windows\system32\termcap 2013-09-30 19:56 - 2013-09-30 19:56 - 00000000 ____D C:\inetpub 2013-09-30 19:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2013-09-30 19:18 - 2011-09-16 16:37 - 00000000 ____D C:\Program Files (x86)\AP Tuner 2013-09-29 22:54 - 2013-09-29 22:54 - 00000000 _____ C:\Windows\setuperr.log 2013-09-29 22:38 - 2011-02-12 21:49 - 00000000 ____D C:\Users\Jola\AppData\Roaming\Media Player Classic 2013-09-29 22:38 - 2010-10-16 22:18 - 00000000 ____D C:\Users\Jola\AppData\Roaming\Skype 2013-09-29 22:37 - 2010-11-02 23:23 - 00000000 ____D C:\Users\Jola\AppData\Local\CrashDumps 2013-09-29 21:55 - 2013-09-29 21:55 - 00000000 _____ C:\autoexec.bat 2013-09-29 21:53 - 2013-09-29 21:53 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group 2013-09-29 21:52 - 2013-09-29 21:44 - 52140861 _____ C:\Users\Jola\Downloads\SpyHunter4_4.14.5.4268_ENG_-full-(cicha_instalka).rar 2013-09-29 20:05 - 2013-09-29 19:54 - 00000000 ____D C:\AdwCleaner 2013-09-29 19:53 - 2013-09-29 19:53 - 02074878 _____ C:\Users\Jola\Downloads\AdwCleaner.rar 2013-09-29 18:10 - 2011-11-27 13:15 - 00000000 ____D C:\Users\Jola\Desktop\Audiobook2 2013-09-29 09:52 - 2013-09-28 00:02 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-27 23:10 - 2013-09-27 23:10 - 131193208 _____ C:\Users\Jola\Downloads\launch.exe 2013-09-27 17:32 - 2013-09-28 00:01 - 00352784 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\1174892.sys 2013-09-27 17:32 - 2013-09-28 00:01 - 00157712 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\11748921.sys 2013-09-27 17:32 - 2013-09-28 00:01 - 00040464 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\11748922.sys 2013-09-26 01:46 - 2010-10-23 11:43 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-23 01:28 - 2013-10-09 08:01 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-09-23 01:28 - 2013-10-09 08:01 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-09-23 01:27 - 2013-10-09 08:01 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-09-23 00:55 - 2013-10-09 08:01 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-23 00:55 - 2013-10-09 08:01 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-23 00:55 - 2013-10-09 08:01 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-23 00:54 - 2013-10-09 08:01 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-23 00:54 - 2013-10-09 08:01 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-22 15:11 - 2013-09-22 14:52 - 114968594 _____ C:\Users\Jola\Downloads\May.Ewa.-.Technika.Uzdrawiania.Pola.Zycia.rar 2013-09-21 17:40 - 2012-07-02 17:53 - 00000000 ____D C:\ProgramData\architekt3d 2013-09-21 05:38 - 2013-10-09 08:01 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-21 05:30 - 2013-10-09 08:01 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-09-21 04:48 - 2013-10-09 08:01 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-21 04:39 - 2013-10-09 08:01 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-09-19 22:23 - 2013-09-19 22:23 - 00000000 ____D C:\Users\Jola\Desktop\PRZEPISY 2013-09-19 22:21 - 2010-10-14 16:38 - 00000000 ____D C:\Users\Jola\Desktop\Jolka 2013-09-19 22:01 - 2011-12-11 11:18 - 00000000 ____D C:\Users\Jola\Desktop\PDF7 2013-09-19 21:59 - 2013-02-24 21:51 - 00000000 ____D C:\Users\Jola\Desktop\Muza3 2013-09-18 22:00 - 2010-10-19 21:12 - 00003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForJola 2013-09-18 22:00 - 2010-10-19 21:12 - 00000328 _____ C:\Windows\Tasks\HPCeeScheduleForJola.job 2013-09-14 22:32 - 2013-09-14 20:31 - 734664704 _____ C:\Users\Jola\Downloads\z dystansu.lektor.pl.avi 2013-09-14 03:10 - 2013-10-09 07:25 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-09-11 19:36 - 2013-05-15 21:04 - 00000000 ____D C:\Users\Jola\Desktop\telewizja Mama 2013-09-11 19:04 - 2012-05-15 15:48 - 00000000 ____D C:\Users\Jola\Desktop\MULTIMEDIA ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-08 19:19 ==================== End Of Log ============================