Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by mara (administrator) on MARA-KOMPUTER on 16-10-2013 13:57:15
Running from C:\Users\mara\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(PC Tools) C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(PC Tools) C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\GIGABYTE\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\GIGABYTE\Common\RaRegistry64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [UpdateMyDrivers] - C:\Program Files (x86)\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe [2391304 2012-12-27] ()
MountPoints2: D - D:\setup.exe
MountPoints2: {40b912ac-4c8c-11e3-b3aa-bddc1ceefff7} - E:\AutoRun.exe
HKLM-x32\...\Run: [00PCTFW] - C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe [2672600 2011-04-07] (PC Tools)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-10-15] (AVAST Software)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1391272 2012-01-03] (Ask)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=10148&l=dis&tb=STT
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA5552A372BC9CE01
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} -  No File
SearchScopes: HKCU - DefaultScope {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
SearchScopes: HKCU - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
SearchScopes: HKCU - {DE93DBDC-E5DB-489F-B736-906DF8F5D4FF} URL = http://websearch.ask.com/redirect?client=ie&tb=STT&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=&apn_uid=807E8652-4595-4CF5-A5C9-3185DC94928C&apn_sauid=3F2277F7-D568-4831-A49C-F60C825CE5B6
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\mara\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1
CHR Extension: (Google Drive) - C:\Users\mara\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\mara\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1
CHR Extension: (Google Search) - C:\Users\mara\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (avast! Online Security) - C:\Users\mara\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\mara\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1
CHR Extension: (Gmail) - C:\Users\mara\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-15] (AVAST Software)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PCToolsFirewallPlus; C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe [286000 2011-01-24] (PC Tools)
R2 RalinkRegistryWriter; C:\Program Files (x86)\GIGABYTE\Common\RaRegistry.exe [185632 2009-08-19] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\GIGABYTE\Common\RaRegistry64.exe [212256 2009-08-19] (Ralink Technology, Corp.)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-15] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-10-15] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-10-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-15] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 PCTFW-PacketFilter; C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys [119688 2011-01-12] (PC Tools)
R1 pctgntdi; C:\Windows\System32\drivers\pctgntdi64.sys [334976 2011-01-17] (PC Tools)
R1 pctgntdi; C:\Windows\System32\drivers\pctgntdi64.sys [334976 2011-01-17] (PC Tools)
S3 pctNdis; C:\Windows\System32\DRIVERS\pctNdis64.sys [79000 2010-07-08] (PC Tools)
R3 pctNdisMP; C:\Windows\System32\DRIVERS\pctNdis64.sys [79000 2010-07-08] (PC Tools)
R3 pctplfw; C:\Windows\System32\drivers\pctplfw64.sys [179976 2011-01-17] (PC Tools)
R3 pctplfw; C:\Windows\System32\drivers\pctplfw64.sys [179976 2011-01-17] (PC Tools)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 BdfNdisf; \??\c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [x]
S1 bdftdif; \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdftdif.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
U3 aftciaog; \??\C:\Users\mara\AppData\Local\Temp\aftciaog.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-11 17:36 - 2013-11-11 17:36 - 00001421 _____ C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-11 17:36 - 2013-11-11 17:36 - 00000020 ___SH C:\Users\mara\ntuser.ini
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Ustawienia lokalne
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Szablony
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Moje dokumenty
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Menu Start
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Documents\Moje wideo
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Documents\Moje obrazy
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Documents\Moja muzyka
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Dane aplikacji
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\AppData\Local\Historia
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\AppData\Local\Dane aplikacji
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 ____D C:\Users\mara\AppData\Roaming\Adobe
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 ____D C:\Users\mara\AppData\Local\VirtualStore
2013-11-11 17:36 - 2013-10-15 13:27 - 00000000 ____D C:\Users\mara
2013-11-11 17:36 - 2013-10-14 22:38 - 00000000 ___RD C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-11 17:36 - 2013-10-14 22:38 - 00000000 ___RD C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-11 17:36 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-11 17:36 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Szablony
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Moje dokumenty
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Menu Start
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Dane aplikacji
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Ulubione
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Szablony
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Pulpit
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Menu Start
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Dokumenty
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Dane aplikacji
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 __SHD C:\Recovery
2013-11-11 17:21 - 2013-11-11 17:21 - 00000000 ____D C:\Windows\CSC
2013-10-16 13:56 - 2013-10-16 13:56 - 00000000 ____D C:\FRST
2013-10-16 13:55 - 2013-10-16 13:55 - 01954124 _____ (Farbar) C:\Users\mara\Downloads\FRST64.exe
2013-10-16 13:52 - 2013-10-16 13:52 - 00116158 _____ C:\Users\mara\Desktop\OTL.Txt
2013-10-16 13:51 - 2013-10-16 13:51 - 00021184 _____ C:\Users\mara\Desktop\Extras.Txt
2013-10-16 13:44 - 2013-10-16 13:44 - 00234513 _____ C:\Users\mara\Desktop\gmer full scan.log
2013-10-16 13:23 - 2013-10-16 13:24 - 00234682 _____ C:\Users\mara\Downloads\gmer.log
2013-10-16 13:11 - 2013-10-16 13:11 - 00000812 _____ C:\Users\mara\Desktop\µTorrent.lnk
2013-10-16 13:11 - 2013-10-16 13:11 - 00000792 _____ C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-10-16 13:01 - 2013-10-16 13:02 - 00000000 ____D C:\ProgramData\Gigabyte Driver
2013-10-16 13:01 - 2013-10-16 13:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-16 13:01 - 2013-10-16 13:01 - 00000000 ____D C:\Windows\LastGood
2013-10-16 13:01 - 2013-10-16 13:01 - 00000000 ____D C:\Program Files (x86)\GIGABYTE
2013-10-16 13:01 - 2013-10-16 13:01 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-10-16 13:01 - 2009-09-28 18:22 - 00013931 _____ C:\Windows\system32\RaCoInst.dat
2013-10-16 13:01 - 2009-09-21 15:46 - 01056768 _____ (Ralink Technology, Corp.) C:\Windows\SysWOW64\RAIHV.dll
2013-10-16 13:01 - 2009-09-21 15:46 - 01056768 _____ (Ralink Technology, Corp.) C:\Windows\system32\RAIHV.dll
2013-10-16 13:01 - 2009-09-15 12:35 - 00013931 _____ C:\Windows\SysWOW64\RaCoInst.dat
2013-10-16 13:01 - 2009-09-03 19:11 - 02056192 _____ (Ralink Technology, Corp.) C:\Windows\system32\RaCertMgr.dll
2013-10-16 13:01 - 2009-09-03 19:08 - 01585152 _____ (Ralink Technology, Corp.) C:\Windows\SysWOW64\RaCertMgr.dll
2013-10-16 13:01 - 2009-08-25 15:15 - 00104448 _____ (Ralink Technology, Corp.) C:\Windows\SysWOW64\RAEXTUI.dll
2013-10-16 13:01 - 2009-08-25 15:15 - 00104448 _____ (Ralink Technology, Corp.) C:\Windows\system32\RAEXTUI.dll
2013-10-16 13:01 - 2009-07-29 17:21 - 00717312 _____ (Ralink Technology, Corp.) C:\Windows\system32\Drivers\netr7364.sys
2013-10-16 13:01 - 2009-07-29 16:59 - 00305152 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll
2013-10-16 12:51 - 2013-10-16 12:51 - 00000000 ____D C:\Users\mara\AppData\Roaming\InstallShield
2013-10-16 12:45 - 2013-10-16 12:45 - 00000000 ____D C:\Program Files (x86)\Intel
2013-10-16 12:45 - 2000-01-01 02:00 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2013-10-16 12:44 - 2013-10-16 12:44 - 00000000 ____D C:\Intel
2013-10-16 12:43 - 2013-10-16 12:43 - 00000000 ____D C:\Users\mara\AppData\Local\SlimWare Utilities Inc
2013-10-16 12:42 - 2013-10-16 12:42 - 00002467 _____ C:\Users\Public\Desktop\SlimDrivers.lnk
2013-10-16 12:42 - 2013-10-16 12:42 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2013-10-16 12:38 - 2013-10-16 12:38 - 00003826 _____ C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
2013-10-16 12:38 - 2013-10-16 12:38 - 00000000 ____D C:\Program Files (x86)\Ask.com
2013-10-16 12:37 - 2013-10-16 12:37 - 00001283 _____ C:\Users\Public\Desktop\UpdateMyDrivers.lnk
2013-10-16 12:37 - 2013-10-16 12:37 - 00000000 __HDC C:\ProgramData\{FFD2E6B7-6252-40B7-8283-662B5BD3D179}
2013-10-16 12:37 - 2013-10-16 12:37 - 00000000 ____D C:\Users\mara\AppData\Local\PackageAware
2013-10-16 12:37 - 2013-10-16 12:37 - 00000000 ____D C:\Program Files (x86)\SmartTweak Software
2013-10-16 12:32 - 2013-10-16 12:51 - 00001008 _____ C:\Windows\setupact.log
2013-10-16 12:32 - 2013-10-16 12:32 - 00220040 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-16 12:32 - 2013-10-16 12:32 - 00000000 _____ C:\Windows\setuperr.log
2013-10-15 22:53 - 2013-10-15 22:53 - 00000000 ____D C:\Users\mara\Documents\AvastPEToolkit
2013-10-15 20:00 - 2013-10-15 20:00 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-15 20:00 - 2013-10-15 20:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 20:00 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-15 19:15 - 2013-10-15 19:15 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-15 19:15 - 2013-10-15 19:15 - 00000000 ____D C:\Users\mara\AppData\Roaming\AVAST Software
2013-10-15 19:08 - 2013-10-15 19:08 - 00000000 ____D C:\Users\mara\AppData\Roaming\PCToolsFirewallPlus
2013-10-15 19:05 - 2011-03-24 12:39 - 00140800 _____ (PC Tools) C:\Windows\system32\Drivers\pctwfpfilter64.sys
2013-10-15 19:05 - 2011-01-17 09:09 - 00334976 _____ (PC Tools) C:\Windows\system32\Drivers\pctgntdi64.sys
2013-10-15 19:05 - 2010-03-29 11:06 - 00233488 _____ (PC Tools) C:\Windows\system32\Drivers\PCTCore64.sys
2013-10-15 19:03 - 2013-10-16 13:11 - 01633699 _____ C:\Windows\WindowsUpdate.log
2013-10-15 19:03 - 2013-10-15 20:00 - 00000000 ____D C:\Program Files (x86)\PC Tools Firewall Plus
2013-10-15 19:03 - 2011-01-17 08:11 - 00179976 _____ (PC Tools) C:\Windows\system32\Drivers\pctplfw64.sys
2013-10-15 19:03 - 2011-01-12 10:35 - 00119688 _____ (PC Tools) C:\Windows\system32\Drivers\pctNdis-PacketFilter64.sys
2013-10-15 19:03 - 2010-07-08 08:49 - 00079000 _____ (PC Tools) C:\Windows\system32\Drivers\pctNdis64.sys
2013-10-15 19:03 - 2010-02-05 08:26 - 00042968 _____ (PC Tools) C:\Windows\system32\Drivers\pctNdis-DNS64.sys
2013-10-15 18:38 - 2013-10-15 18:38 - 00000990 _____ C:\Windows\system32\.crusader
2013-10-15 18:35 - 2013-10-15 18:35 - 00001935 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-10-15 18:32 - 2013-10-15 18:46 - 00000000 ____D C:\ProgramData\HitmanPro
2013-10-15 18:32 - 2013-10-15 18:35 - 00000000 ____D C:\Program Files\HitmanPro
2013-10-15 18:20 - 2013-10-15 18:20 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-10-15 13:27 - 2013-10-15 15:28 - 00000000 ____D C:\Users\mara\Doctor Web
2013-10-15 12:32 - 2013-10-15 12:32 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2013-10-15 11:41 - 2013-10-15 12:30 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-15 09:13 - 2013-10-15 09:13 - 00000017 _____ C:\ProgramData\adaware-installer-reboot-required.tmp
2013-10-15 08:58 - 2013-10-15 12:30 - 00000000 ____D C:\Program Files\CCleaner
2013-10-15 08:38 - 2013-10-15 08:38 - 00000085 _____ C:\Windows\wininit.ini
2013-10-15 08:20 - 2013-10-15 08:20 - 00000000 _____ C:\autoexec.bat
2013-10-15 08:18 - 2013-10-15 09:10 - 00000000 ____D C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP
2013-10-15 08:15 - 2013-10-15 08:15 - 00000000 ____D C:\Users\mara\AppData\Roaming\WinRAR
2013-10-15 08:14 - 2013-10-15 08:14 - 00000000 ____D C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-15 08:14 - 2013-10-15 08:14 - 00000000 ____D C:\Program Files\WinRAR
2013-10-15 08:06 - 2013-10-16 13:36 - 00000000 ____D C:\Users\mara\AppData\Roaming\uTorrent
2013-10-15 08:03 - 2013-10-15 08:03 - 00015845 _____ C:\Users\mara\Downloads\[www.tnt24.info] Płyta Ratunkowa 2014 Komputer Świat -2013- -ISO-.torrent
2013-10-15 08:01 - 2013-10-15 08:01 - 00475446 _____ C:\Users\mara\Downloads\[www.tnt24.info] Pro Evolution Soccer 2014-RELOADED.torrent
2013-10-15 08:00 - 2013-10-15 08:00 - 00033696 _____ C:\Users\mara\Downloads\[www.tnt24.info] [PC] FIFA 14 Ultimate Edition FULL [MULTI 14]  - SKIDROW [PL].torrent
2013-10-15 07:45 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20131015-074504.backup
2013-10-15 07:39 - 2013-10-15 07:39 - 00000000 ____D C:\Users\mara\Documents\ProcAlyzer Dumps
2013-10-15 02:26 - 2013-10-15 07:42 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-15 02:26 - 2013-10-15 02:26 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-10-15 01:52 - 2013-10-15 09:13 - 00000000 ____D C:\Users\mara\AppData\Roaming\LavasoftStatistics
2013-10-15 01:43 - 2013-10-15 01:43 - 00000000 ____D C:\ProgramData\BitDefender
2013-10-15 01:28 - 2013-10-15 01:28 - 00000000 ____D C:\Program Files\Lavasoft
2013-10-15 01:26 - 2013-10-15 01:26 - 00000000 ____D C:\ProgramData\Lavasoft
2013-10-15 01:20 - 2013-10-15 01:24 - 00014476 _____ C:\Windows\system32\Drivers\fvstore.dat
2013-10-15 01:20 - 2013-10-15 01:20 - 00000000 ___HD C:\VTRoot
2013-10-15 01:14 - 2013-10-15 01:15 - 00000000 ____D C:\ProgramData\Comodo
2013-10-15 01:14 - 2013-10-15 01:14 - 00000000 ____D C:\ProgramData\Comodo Downloader
2013-10-15 01:14 - 2013-10-15 01:14 - 00000000 ____D C:\ProgramData\Adtrustmedia
2013-10-15 01:14 - 2013-10-15 01:14 - 00000000 ____D C:\Program Files\AdTrustMedia
2013-10-15 01:10 - 2013-10-15 01:10 - 00003250 _____ C:\Windows\System32\Tasks\{E030DF0A-60C8-4912-B9E3-DE45BC58F149}
2013-10-15 00:52 - 2013-10-15 00:53 - 00000000 ____D C:\Users\mara\AppData\Roaming\QuickScan
2013-10-15 00:27 - 2013-10-15 00:27 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-15 00:26 - 2013-10-16 13:31 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-15 00:26 - 2013-10-16 12:47 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-15 00:26 - 2013-10-15 00:26 - 00004040 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 00:26 - 2013-10-15 00:26 - 00003788 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 00:23 - 2013-10-15 00:26 - 00000000 ____D C:\Users\mara\AppData\Local\Deployment
2013-10-15 00:23 - 2013-10-15 00:23 - 00000000 ____D C:\Users\mara\AppData\Local\Apps\2.0
2013-10-15 00:06 - 2013-10-15 00:06 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-10-15 00:06 - 2013-10-15 00:06 - 00000000 ____D C:\Windows\system32\Macromed
2013-10-15 00:06 - 2013-10-15 00:06 - 00000000 ____D C:\Users\mara\AppData\Roaming\Macromedia
2013-10-15 00:01 - 2013-10-15 00:01 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-10-15 00:01 - 2013-10-15 00:01 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-10-14 22:57 - 2013-10-15 19:15 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-10-14 22:57 - 2013-10-15 18:23 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-10-14 22:57 - 2013-10-15 00:27 - 00000000 ____D C:\Users\mara\AppData\Local\Google
2013-10-14 22:57 - 2013-10-15 00:27 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-14 22:56 - 2013-04-30 10:51 - 00040616 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tap0901.sys
2013-10-14 22:55 - 2013-10-15 19:13 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-14 22:55 - 2013-10-15 09:21 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-14 22:30 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-14 22:30 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-14 22:30 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-14 22:30 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-14 22:30 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-14 22:30 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-14 22:30 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-14 22:30 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-14 22:30 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-14 22:30 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-14 22:30 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-14 22:30 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-14 22:30 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-14 22:30 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-14 22:30 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-14 22:30 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-14 22:30 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-14 22:30 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-14 22:30 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-14 22:29 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-14 22:29 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-14 22:29 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-14 22:29 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-14 22:29 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-14 22:29 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-14 22:29 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-14 22:29 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-14 22:29 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-14 22:29 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-14 22:29 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-14 22:29 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-14 22:24 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-14 22:24 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-14 22:24 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-14 22:24 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-14 22:24 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-14 22:24 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-14 22:24 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-14 22:24 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-14 22:24 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-14 22:24 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-14 22:24 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-14 22:24 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-14 22:23 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-14 22:23 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-14 22:23 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-10-14 22:23 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-14 22:23 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-10-14 22:23 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-10-14 22:23 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-10-14 22:23 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-10-14 22:23 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-14 22:23 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-14 22:23 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-14 22:23 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-10-14 22:23 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-10-14 22:23 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-10-14 22:23 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-10-14 22:23 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-14 22:23 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-14 22:23 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-14 22:23 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-14 22:23 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-10-14 22:23 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-10-14 22:22 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-14 22:22 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-14 22:22 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-14 22:22 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-14 22:22 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-14 22:22 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-14 22:22 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-14 22:22 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-14 22:22 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-14 22:15 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-14 20:22 - 2013-10-14 20:22 - 00000000 ____D C:\Users\mara\AppData\Roaming\Malwarebytes
2013-10-14 20:22 - 2013-10-14 20:22 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-14 20:18 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-14 20:18 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

==================== One Month Modified Files and Folders =======

2013-11-11 17:36 - 2013-11-11 17:36 - 00001421 _____ C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-11 17:36 - 2013-11-11 17:36 - 00000020 ___SH C:\Users\mara\ntuser.ini
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Ustawienia lokalne
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Szablony
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Moje dokumenty
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Menu Start
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Documents\Moje wideo
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Documents\Moje obrazy
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Documents\Moja muzyka
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\Dane aplikacji
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\AppData\Local\Historia
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 _SHDL C:\Users\mara\AppData\Local\Dane aplikacji
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 ____D C:\Users\mara\AppData\Roaming\Adobe
2013-11-11 17:36 - 2013-11-11 17:36 - 00000000 ____D C:\Users\mara\AppData\Local\VirtualStore
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Szablony
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Moje dokumenty
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Menu Start
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\Dane aplikacji
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Ulubione
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Szablony
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Pulpit
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Menu Start
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Dokumenty
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 _SHDL C:\ProgramData\Dane aplikacji
2013-11-11 17:35 - 2013-11-11 17:35 - 00000000 __SHD C:\Recovery
2013-11-11 17:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-11-11 17:35 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-11-11 17:21 - 2013-11-11 17:21 - 00000000 ____D C:\Windows\CSC
2013-11-11 17:20 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-11-11 17:20 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-10-16 13:57 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-10-16 13:56 - 2013-10-16 13:56 - 00000000 ____D C:\FRST
2013-10-16 13:55 - 2013-10-16 13:55 - 01954124 _____ (Farbar) C:\Users\mara\Downloads\FRST64.exe
2013-10-16 13:52 - 2013-10-16 13:52 - 00116158 _____ C:\Users\mara\Desktop\OTL.Txt
2013-10-16 13:51 - 2013-10-16 13:51 - 00021184 _____ C:\Users\mara\Desktop\Extras.Txt
2013-10-16 13:44 - 2013-10-16 13:44 - 00234513 _____ C:\Users\mara\Desktop\gmer full scan.log
2013-10-16 13:36 - 2013-10-15 08:06 - 00000000 ____D C:\Users\mara\AppData\Roaming\uTorrent
2013-10-16 13:31 - 2013-10-15 00:26 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-16 13:24 - 2013-10-16 13:23 - 00234682 _____ C:\Users\mara\Downloads\gmer.log
2013-10-16 13:11 - 2013-10-16 13:11 - 00000812 _____ C:\Users\mara\Desktop\µTorrent.lnk
2013-10-16 13:11 - 2013-10-16 13:11 - 00000792 _____ C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-10-16 13:11 - 2013-10-15 19:03 - 01633699 _____ C:\Windows\WindowsUpdate.log
2013-10-16 13:02 - 2013-10-16 13:01 - 00000000 ____D C:\ProgramData\Gigabyte Driver
2013-10-16 13:01 - 2013-10-16 13:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-16 13:01 - 2013-10-16 13:01 - 00000000 ____D C:\Windows\LastGood
2013-10-16 13:01 - 2013-10-16 13:01 - 00000000 ____D C:\Program Files (x86)\GIGABYTE
2013-10-16 13:01 - 2013-10-16 13:01 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-10-16 12:54 - 2009-07-14 06:45 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-16 12:54 - 2009-07-14 06:45 - 00026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-16 12:52 - 2011-04-12 15:21 - 00697674 _____ C:\Windows\system32\perfh015.dat
2013-10-16 12:52 - 2011-04-12 15:21 - 00134784 _____ C:\Windows\system32\perfc015.dat
2013-10-16 12:52 - 2009-07-14 07:13 - 01549696 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-16 12:51 - 2013-10-16 12:51 - 00000000 ____D C:\Users\mara\AppData\Roaming\InstallShield
2013-10-16 12:51 - 2013-10-16 12:32 - 00001008 _____ C:\Windows\setupact.log
2013-10-16 12:47 - 2013-10-15 00:26 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-16 12:46 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-16 12:45 - 2013-10-16 12:45 - 00000000 ____D C:\Program Files (x86)\Intel
2013-10-16 12:44 - 2013-10-16 12:44 - 00000000 ____D C:\Intel
2013-10-16 12:43 - 2013-10-16 12:43 - 00000000 ____D C:\Users\mara\AppData\Local\SlimWare Utilities Inc
2013-10-16 12:42 - 2013-10-16 12:42 - 00002467 _____ C:\Users\Public\Desktop\SlimDrivers.lnk
2013-10-16 12:42 - 2013-10-16 12:42 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2013-10-16 12:38 - 2013-10-16 12:38 - 00003826 _____ C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
2013-10-16 12:38 - 2013-10-16 12:38 - 00000000 ____D C:\Program Files (x86)\Ask.com
2013-10-16 12:37 - 2013-10-16 12:37 - 00001283 _____ C:\Users\Public\Desktop\UpdateMyDrivers.lnk
2013-10-16 12:37 - 2013-10-16 12:37 - 00000000 __HDC C:\ProgramData\{FFD2E6B7-6252-40B7-8283-662B5BD3D179}
2013-10-16 12:37 - 2013-10-16 12:37 - 00000000 ____D C:\Users\mara\AppData\Local\PackageAware
2013-10-16 12:37 - 2013-10-16 12:37 - 00000000 ____D C:\Program Files (x86)\SmartTweak Software
2013-10-16 12:32 - 2013-10-16 12:32 - 00220040 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-16 12:32 - 2013-10-16 12:32 - 00000000 _____ C:\Windows\setuperr.log
2013-10-15 22:53 - 2013-10-15 22:53 - 00000000 ____D C:\Users\mara\Documents\AvastPEToolkit
2013-10-15 20:00 - 2013-10-15 20:00 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-15 20:00 - 2013-10-15 20:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 20:00 - 2013-10-15 19:03 - 00000000 ____D C:\Program Files (x86)\PC Tools Firewall Plus
2013-10-15 19:15 - 2013-10-15 19:15 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-15 19:15 - 2013-10-15 19:15 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-10-15 19:15 - 2013-10-15 19:15 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-15 19:15 - 2013-10-15 19:15 - 00000000 ____D C:\Users\mara\AppData\Roaming\AVAST Software
2013-10-15 19:15 - 2013-10-14 22:57 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-10-15 19:13 - 2013-10-14 22:55 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-15 19:08 - 2013-10-15 19:08 - 00000000 ____D C:\Users\mara\AppData\Roaming\PCToolsFirewallPlus
2013-10-15 18:46 - 2013-10-15 18:32 - 00000000 ____D C:\ProgramData\HitmanPro
2013-10-15 18:38 - 2013-10-15 18:38 - 00000990 _____ C:\Windows\system32\.crusader
2013-10-15 18:35 - 2013-10-15 18:35 - 00001935 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2013-10-15 18:35 - 2013-10-15 18:32 - 00000000 ____D C:\Program Files\HitmanPro
2013-10-15 18:23 - 2013-10-14 22:57 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-10-15 18:20 - 2013-10-15 18:20 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-10-15 15:28 - 2013-10-15 13:27 - 00000000 ____D C:\Users\mara\Doctor Web
2013-10-15 13:27 - 2013-11-11 17:36 - 00000000 ____D C:\Users\mara
2013-10-15 12:32 - 2013-10-15 12:32 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2013-10-15 12:30 - 2013-10-15 11:41 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-15 12:30 - 2013-10-15 08:58 - 00000000 ____D C:\Program Files\CCleaner
2013-10-15 09:21 - 2013-10-14 22:55 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-15 09:13 - 2013-10-15 09:13 - 00000017 _____ C:\ProgramData\adaware-installer-reboot-required.tmp
2013-10-15 09:13 - 2013-10-15 01:52 - 00000000 ____D C:\Users\mara\AppData\Roaming\LavasoftStatistics
2013-10-15 09:13 - 2013-08-17 20:52 - 00000000 ____D C:\Windows\Panther
2013-10-15 09:10 - 2013-10-15 08:18 - 00000000 ____D C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP
2013-10-15 08:38 - 2013-10-15 08:38 - 00000085 _____ C:\Windows\wininit.ini
2013-10-15 08:20 - 2013-10-15 08:20 - 00000000 _____ C:\autoexec.bat
2013-10-15 08:15 - 2013-10-15 08:15 - 00000000 ____D C:\Users\mara\AppData\Roaming\WinRAR
2013-10-15 08:14 - 2013-10-15 08:14 - 00000000 ____D C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-15 08:14 - 2013-10-15 08:14 - 00000000 ____D C:\Program Files\WinRAR
2013-10-15 08:03 - 2013-10-15 08:03 - 00015845 _____ C:\Users\mara\Downloads\[www.tnt24.info] Płyta Ratunkowa 2014 Komputer Świat -2013- -ISO-.torrent
2013-10-15 08:01 - 2013-10-15 08:01 - 00475446 _____ C:\Users\mara\Downloads\[www.tnt24.info] Pro Evolution Soccer 2014-RELOADED.torrent
2013-10-15 08:00 - 2013-10-15 08:00 - 00033696 _____ C:\Users\mara\Downloads\[www.tnt24.info] [PC] FIFA 14 Ultimate Edition FULL [MULTI 14]  - SKIDROW [PL].torrent
2013-10-15 07:42 - 2013-10-15 02:26 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-15 07:39 - 2013-10-15 07:39 - 00000000 ____D C:\Users\mara\Documents\ProcAlyzer Dumps
2013-10-15 03:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-15 02:26 - 2013-10-15 02:26 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-10-15 01:43 - 2013-10-15 01:43 - 00000000 ____D C:\ProgramData\BitDefender
2013-10-15 01:28 - 2013-10-15 01:28 - 00000000 ____D C:\Program Files\Lavasoft
2013-10-15 01:26 - 2013-10-15 01:26 - 00000000 ____D C:\ProgramData\Lavasoft
2013-10-15 01:24 - 2013-10-15 01:20 - 00014476 _____ C:\Windows\system32\Drivers\fvstore.dat
2013-10-15 01:20 - 2013-10-15 01:20 - 00000000 ___HD C:\VTRoot
2013-10-15 01:15 - 2013-10-15 01:14 - 00000000 ____D C:\ProgramData\Comodo
2013-10-15 01:15 - 2010-11-21 04:50 - 00000000 ____D C:\Users\Administrator
2013-10-15 01:14 - 2013-10-15 01:14 - 00000000 ____D C:\ProgramData\Comodo Downloader
2013-10-15 01:14 - 2013-10-15 01:14 - 00000000 ____D C:\ProgramData\Adtrustmedia
2013-10-15 01:14 - 2013-10-15 01:14 - 00000000 ____D C:\Program Files\AdTrustMedia
2013-10-15 01:10 - 2013-10-15 01:10 - 00003250 _____ C:\Windows\System32\Tasks\{E030DF0A-60C8-4912-B9E3-DE45BC58F149}
2013-10-15 00:53 - 2013-10-15 00:52 - 00000000 ____D C:\Users\mara\AppData\Roaming\QuickScan
2013-10-15 00:27 - 2013-10-15 00:27 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-15 00:27 - 2013-10-14 22:57 - 00000000 ____D C:\Users\mara\AppData\Local\Google
2013-10-15 00:27 - 2013-10-14 22:57 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-15 00:26 - 2013-10-15 00:26 - 00004040 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 00:26 - 2013-10-15 00:26 - 00003788 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 00:26 - 2013-10-15 00:23 - 00000000 ____D C:\Users\mara\AppData\Local\Deployment
2013-10-15 00:23 - 2013-10-15 00:23 - 00000000 ____D C:\Users\mara\AppData\Local\Apps\2.0
2013-10-15 00:06 - 2013-10-15 00:06 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-10-15 00:06 - 2013-10-15 00:06 - 00000000 ____D C:\Windows\system32\Macromed
2013-10-15 00:06 - 2013-10-15 00:06 - 00000000 ____D C:\Users\mara\AppData\Roaming\Macromedia
2013-10-15 00:01 - 2013-10-15 00:01 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-10-15 00:01 - 2013-10-15 00:01 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-10-14 22:38 - 2013-11-11 17:36 - 00000000 ___RD C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-14 22:38 - 2013-11-11 17:36 - 00000000 ___RD C:\Users\mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-14 21:33 - 2013-08-17 21:21 - 00000000 ____D C:\Windows\system32\MRT
2013-10-14 21:31 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-10-14 20:22 - 2013-10-14 20:22 - 00000000 ____D C:\Users\mara\AppData\Roaming\Malwarebytes
2013-10-14 20:22 - 2013-10-14 20:22 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-26 01:46 - 2013-08-17 21:21 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-23 01:28 - 2013-10-14 22:29 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-14 22:29 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-14 22:30 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-14 22:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-14 22:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-14 22:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-14 22:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-14 22:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-14 22:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-23 01:27 - 2013-10-14 22:29 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-14 22:29 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-14 22:29 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-14 22:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-23 00:55 - 2013-10-14 22:30 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:55 - 2013-10-14 22:29 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-14 22:29 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:54 - 2013-10-14 22:30 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-14 22:30 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-14 22:30 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-14 22:30 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-14 22:30 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-14 22:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-14 22:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-23 00:54 - 2013-10-14 22:29 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-14 22:29 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-14 22:29 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-14 22:29 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-21 05:38 - 2013-10-14 22:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-14 22:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-14 22:30 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-14 22:30 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

Some content of TEMP:
====================
C:\Users\mara\AppData\Local\Temp\16abe893-122c-4c16-8c40-8bf3ed56010b.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-15 03:39

==================== End Of Log ============================