Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-10-2013 Ran by Kacprut (administrator) on KACPRUT-DOM on 28-10-2013 18:22:00 Running from C:\Users\Kacprut\Desktop Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe () C:\Users\Kacprut\AppData\Roaming\Mozilla\Firefox\Profiles\l5z2wp99.default\extensions\startup.service@mozilla.com\svc.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Nalpeiron Ltd.) C:\Windows\system32\nlssrv32.exe (Secunia) C:\Program Files\Secunia\PSI\psia.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (Secunia) C:\Program Files\Secunia\PSI\sua.exe (Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (QFX Software Corporation) C:\Program Files\KeyScrambler\KeyScrambler.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Murray Hurps Software Pty Ltd) C:\Program Files\Ad Muncher\AdMunch.exe (Flux Software LLC) C:\Users\Kacprut\AppData\Local\FluxSoftware\Flux\flux.exe (PeerBlock, LLC) C:\Program Files\PeerBlock\peerblock.exe (BitTorrent, Inc.) C:\Program Files\uTorrent\uTorrent.exe (Stardock) C:\Program Files\Stardock\ObjectDockPlus2\ObjectDock.exe (Microsoft) C:\Program Files\Stardock\ObjectDockPlus2\ObjectDockTray.exe (Opera Software) C:\Program Files\Opera\17.0.1241.45\opera.exe (Opera Software) C:\Program Files\Opera\17.0.1241.45\opera.exe (Opera Software) C:\Program Files\Opera\17.0.1241.45\opera.exe (Opera Software) C:\Program Files\Opera\17.0.1241.45\opera.exe (Opera Software) C:\Program Files\Opera\17.0.1241.45\opera.exe (Opera Software) C:\Program Files\Opera\17.0.1241.45\opera.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10828392 2011-08-26] (Realtek Semiconductor) HKLM\...\Run: [KeyScrambler] - C:\Program Files\KeyScrambler\KeyScrambler.exe [431760 2012-06-08] (QFX Software Corporation) HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [Ad Muncher] - C:\Program Files\Ad Muncher\AdMunch.exe [595144 2013-10-16] (Murray Hurps Software Pty Ltd) HKLM\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKCU\...\Run: [F.lux] - C:\Users\Kacprut\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC) HKCU\...\Run: [PeerBlock] - C:\Program Files\PeerBlock\peerblock.exe [1866864 2010-11-06] (PeerBlock, LLC) HKCU\...\Run: [uTorrent] - C:\Program Files\uTorrent\uTorrent.exe [289584 2012-02-26] (BitTorrent, Inc.) MountPoints2: {4272db23-8711-11e0-99bf-001d7de805ac} - F:\Startme.exe Startup: C:\Users\Kacprut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files\Stardock\ObjectDockPlus2\ObjectDock.exe (Stardock) ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM - DefaultScope value is missing. BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL No File [ ] Hosts: Hosts file not detected in the default directory Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Kacprut\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Kacprut\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Kacprut\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Kacprut\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Kacprut\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird ========================== Services (Whitelisted) ================= R2 Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [2153808 2011-04-01] (Diskeeper Corporation) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET) R2 Firefox Service; C:\Users\Kacprut\AppData\Roaming\Mozilla\Firefox\Profiles\l5z2wp99.default\extensions\startup.service@mozilla.com\svc.exe [83456 2011-03-10] () R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\psia.exe [1223704 2013-02-07] (Secunia) R2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [660504 2013-02-07] (Secunia) S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) ==================== Drivers (Whitelisted) ==================== R3 DKRtWrt; C:\Windows\System32\DRIVERS\DKRtWrt.sys [38608 2011-02-14] (Diskeeper Corporation) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [188808 2013-09-16] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-16] (ESET) R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-16] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37416 2013-09-16] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [49240 2013-09-16] (ESET) R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [173880 2011-12-15] (QFX Software Corporation) R3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [20080 2010-11-06] () R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-02-07] (Secunia) S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [89256 2008-05-16] (MCCI Corporation) S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [15016 2008-05-16] (MCCI Corporation) S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [120744 2008-05-16] (MCCI Corporation) S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [114216 2008-05-16] (MCCI Corporation) S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [25512 2008-05-16] (MCCI Corporation) S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [110632 2008-05-16] (MCCI Corporation) S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [115752 2008-05-16] (MCCI Corporation) S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [104744 2009-03-25] (MCCI Corporation) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-28 18:20 - 2013-10-28 18:20 - 00000000 ____D C:\FRST 2013-10-28 18:19 - 2013-10-28 18:19 - 01089183 _____ (Farbar) C:\Users\Kacprut\Desktop\FRST.exe 2013-10-28 18:07 - 2013-10-28 18:07 - 00001089 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2013-10-28 18:07 - 2013-10-28 18:07 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-10-28 18:07 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-10-28 17:37 - 2013-10-28 17:37 - 00001044 _____ C:\Users\Kacprut\Desktop\Uninstaller!.lnk 2013-10-28 17:37 - 2013-10-28 17:37 - 00000000 ____D C:\Program Files\Your Uninstaller! 7 2013-10-28 13:03 - 2013-10-28 13:03 - 00000000 ____D C:\Users\Kacprut\Doctor Web 2013-10-28 12:52 - 2013-10-28 13:00 - 133553944 _____ C:\Users\Kacprut\Desktop\launch.exe 2013-10-28 12:49 - 2013-10-28 12:49 - 00003920 _____ C:\Users\Kacprut\Desktop\KTOZ podręczne.lnk 2013-10-20 18:49 - 2013-10-08 06:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-10-20 18:49 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-20 18:49 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-20 18:49 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-20 18:48 - 2013-10-20 18:49 - 00004113 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log 2013-10-16 20:27 - 2013-10-16 20:28 - 00000000 ____D C:\Program Files\Ad Muncher 2013-10-16 20:27 - 2013-10-16 20:27 - 00000000 ____D C:\ProgramData\Ad Muncher 2013-10-16 19:09 - 2013-10-16 19:09 - 00000000 ____D C:\Users\Kacprut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux 2013-10-16 19:09 - 2013-10-16 19:09 - 00000000 ____D C:\Users\Kacprut\AppData\Local\FluxSoftware 2013-10-14 17:24 - 2013-10-14 17:24 - 00000218 _____ C:\Users\Kacprut\AppData\Local\recently-used.xbel 2013-10-13 17:13 - 2013-10-28 17:41 - 15664598 _____ C:\Windows\PFRO.log 2013-10-13 17:13 - 2013-10-28 17:41 - 00001998 _____ C:\Windows\setupact.log 2013-10-13 17:13 - 2013-10-13 17:13 - 03791696 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-13 17:13 - 2013-10-13 17:13 - 00000000 _____ C:\Windows\setuperr.log 2013-10-13 17:06 - 2013-10-13 17:06 - 00121120 _____ C:\Users\Kacprut\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-09 02:09 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-09 02:09 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-09 02:09 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-09 02:09 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-09 02:09 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-09 02:09 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-09 02:09 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-09 02:09 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-09 02:09 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-09 02:09 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-09 02:09 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-09 02:09 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-09 02:08 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-09 02:08 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-09 02:08 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-09 02:08 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-08 22:23 - 2013-10-08 22:23 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe 2013-10-08 19:38 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-08 19:38 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-08 19:38 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-08 19:38 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-08 19:38 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-08 19:38 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-08 19:38 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-08 19:38 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-08 19:38 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-10-08 19:38 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-08 19:38 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-10-08 19:38 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-08 19:38 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-08 19:38 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-08 19:38 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-08 19:38 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-08 19:38 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-08 19:38 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-08 19:38 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-08 19:38 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-08 19:38 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-08 19:38 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-08 19:38 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-08 19:38 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-08 19:38 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-08 19:38 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-08 19:38 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-08 19:37 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-08 19:37 - 2013-07-12 11:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys 2013-10-08 19:37 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-08 19:37 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-08 19:37 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-08 19:37 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-09-29 16:35 - 2013-10-20 18:50 - 00000000 ____D C:\ProgramData\Oracle 2013-09-29 16:35 - 2013-09-29 16:35 - 00000000 ____D C:\Program Files\Common Files\Java 2013-09-28 19:22 - 2013-09-28 19:22 - 00001028 _____ C:\Users\Public\Desktop\VLC media player.lnk ==================== One Month Modified Files and Folders ======= 2013-10-28 18:22 - 2012-02-26 13:50 - 00000000 ____D C:\Users\Kacprut\AppData\Roaming\uTorrent 2013-10-28 18:22 - 2011-05-04 17:59 - 00000000 ____D C:\Program Files\PeerBlock 2013-10-28 18:20 - 2013-10-28 18:20 - 00000000 ____D C:\FRST 2013-10-28 18:19 - 2013-10-28 18:19 - 01089183 _____ (Farbar) C:\Users\Kacprut\Desktop\FRST.exe 2013-10-28 18:13 - 2011-12-26 12:05 - 01884322 _____ C:\Windows\WindowsUpdate.log 2013-10-28 18:07 - 2013-10-28 18:07 - 00001089 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2013-10-28 18:07 - 2013-10-28 18:07 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-10-28 17:49 - 2009-07-14 05:34 - 00021024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-28 17:49 - 2009-07-14 05:34 - 00021024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-28 17:46 - 2011-06-28 22:19 - 03145624 _____ C:\Windows\system32\perfh019.dat 2013-10-28 17:46 - 2011-06-28 22:19 - 02488954 _____ C:\Windows\system32\perfc019.dat 2013-10-28 17:46 - 2011-05-04 09:41 - 00005462 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-28 17:46 - 2009-07-14 09:07 - 07884516 _____ C:\Windows\system32\perfh015.dat 2013-10-28 17:46 - 2009-07-14 09:07 - 02574050 _____ C:\Windows\system32\perfc015.dat 2013-10-28 17:41 - 2013-10-13 17:13 - 15664598 _____ C:\Windows\PFRO.log 2013-10-28 17:41 - 2013-10-13 17:13 - 00001998 _____ C:\Windows\setupact.log 2013-10-28 17:41 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-28 17:37 - 2013-10-28 17:37 - 00001044 _____ C:\Users\Kacprut\Desktop\Uninstaller!.lnk 2013-10-28 17:37 - 2013-10-28 17:37 - 00000000 ____D C:\Program Files\Your Uninstaller! 7 2013-10-28 17:23 - 2013-08-15 17:01 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-28 16:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\L2Schemas 2013-10-28 14:51 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Cursors 2013-10-28 13:40 - 2011-05-04 11:40 - 00000000 ____D C:\Windows\PCHEALTH 2013-10-28 13:03 - 2013-10-28 13:03 - 00000000 ____D C:\Users\Kacprut\Doctor Web 2013-10-28 13:03 - 2011-05-04 09:37 - 00000000 ____D C:\Users\Kacprut 2013-10-28 13:00 - 2013-10-28 12:52 - 133553944 _____ C:\Users\Kacprut\Desktop\launch.exe 2013-10-28 12:49 - 2013-10-28 12:49 - 00003920 _____ C:\Users\Kacprut\Desktop\KTOZ podręczne.lnk 2013-10-20 18:50 - 2013-09-29 16:35 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 18:49 - 2013-10-20 18:48 - 00004113 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log 2013-10-20 18:49 - 2011-05-04 17:56 - 00000000 ____D C:\Program Files\Java 2013-10-18 19:42 - 2013-03-11 14:03 - 00000000 ____D C:\Program Files\Opera 2013-10-16 20:28 - 2013-10-16 20:27 - 00000000 ____D C:\Program Files\Ad Muncher 2013-10-16 20:27 - 2013-10-16 20:27 - 00000000 ____D C:\ProgramData\Ad Muncher 2013-10-16 19:09 - 2013-10-16 19:09 - 00000000 ____D C:\Users\Kacprut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux 2013-10-16 19:09 - 2013-10-16 19:09 - 00000000 ____D C:\Users\Kacprut\AppData\Local\FluxSoftware 2013-10-14 21:03 - 2013-03-12 22:15 - 00000000 ____D C:\Program Files\NapiProjekt 2013-10-14 17:24 - 2013-10-14 17:24 - 00000218 _____ C:\Users\Kacprut\AppData\Local\recently-used.xbel 2013-10-14 17:19 - 2013-08-05 01:15 - 00000000 ____D C:\Users\Kacprut\AppData\Roaming\inkscape 2013-10-13 17:13 - 2013-10-13 17:13 - 03791696 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-13 17:13 - 2013-10-13 17:13 - 00000000 _____ C:\Windows\setuperr.log 2013-10-13 17:06 - 2013-10-13 17:06 - 00121120 _____ C:\Users\Kacprut\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-13 13:33 - 2011-05-04 10:30 - 00000000 ____D C:\Windows\Panther 2013-10-11 23:09 - 2011-07-22 14:41 - 00000000 ____D C:\Users\Kacprut\AppData\Roaming\vlc 2013-10-09 19:20 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache 2013-10-09 16:49 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-10-09 16:36 - 2011-05-04 12:06 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-09 02:35 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\ru-RU 2013-10-09 02:35 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pl-PL 2013-10-09 02:21 - 2011-05-04 11:38 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-09 02:17 - 2013-08-02 01:25 - 00000000 ____D C:\Windows\system32\MRT 2013-10-09 02:13 - 2011-05-04 10:08 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-09 01:43 - 2011-05-08 02:37 - 00001496 _____ C:\Users\Kacprut\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs 2013-10-08 22:23 - 2013-10-08 22:23 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe 2013-10-08 22:23 - 2012-04-08 11:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-10-08 22:23 - 2011-06-10 12:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-10-08 06:50 - 2013-10-20 18:49 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-10-08 06:46 - 2013-10-20 18:49 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-08 06:46 - 2013-10-20 18:49 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-08 06:46 - 2013-10-20 18:49 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-09-29 21:52 - 2011-05-07 23:06 - 00000000 ____D C:\Users\Kacprut\AppData\Local\Axialis 2013-09-29 17:39 - 2011-05-04 12:37 - 00000000 ____D C:\Users\Kacprut\AppData\Roaming\Skype 2013-09-29 16:38 - 2012-02-26 16:25 - 00000000 ___RD C:\Program Files\Skype 2013-09-29 16:38 - 2011-05-04 12:36 - 00000000 ____D C:\ProgramData\Skype 2013-09-29 16:35 - 2013-09-29 16:35 - 00000000 ____D C:\Program Files\Common Files\Java 2013-09-29 16:31 - 2011-07-27 09:01 - 00000969 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-09-29 16:31 - 2011-05-04 11:12 - 00000000 ____D C:\Program Files\CCleaner 2013-09-29 15:16 - 2011-05-08 13:03 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-28 19:22 - 2013-09-28 19:22 - 00001028 _____ C:\Users\Public\Desktop\VLC media player.lnk Some content of TEMP: ==================== C:\Users\Kacprut\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2011-05-04 10:06] - [2011-05-04 11:48] - 2590720 ____A (Microsoft Corporation) ABED2CCF4E3614DB350253546C91896F C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-22 20:24 ==================== End Of Log ============================