Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-10-2013 Ran by Xavi (administrator) on XAVI-KOMPUTER on 29-10-2013 17:09:33 Running from C:\Users\Xavi\Downloads Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\adminservice.exe (Atheros) C:\Program Files\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe (Atheros) C:\Program Files\Dell Wireless\Ath_WlanAgent.exe (Atheros Communications) C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\AthBtTray.exe (Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AtherosBtStack] - C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe [876160 2012-03-08] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files\Dell Wireless\Bluetooth Suite\AthBtTray.exe [695936 2012-03-08] (Atheros Commnucations) HKLM\...\Run: [QuickSet] - C:\Program Files\Dell\QuickSet\quickset.exe [3405168 2011-03-24] (Dell Inc.) HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-08-12] (Microsoft Corporation) HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-10-25] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.) HKCU\...\Run: [ALLUpdate] - C:\Program Files\ALLPlayer\ALLUpdate.exe [2995712 2013-07-19] (ALLPlayer Group Ltd.) HKCU\...\Run: [ooVoo.exe] - C:\Program Files\ooVoo\ooVoo.exe [35253312 2013-09-10] (ooVoo LLC) HKCU\...\Run: [729BF7A0DE60737367BB0620CFF232D89BEF5DF5._service_run] - C:\Program Files\Google\Chrome\Application\chrome.exe [844752 2013-10-09] (Google Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://badoo.com/startpage/ SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {8A244612-A1F7-11E0-95C0-E71F4824019B} URL = http://badoo.com/startpage/?source=bsb&q={searchTerms} BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Chrome: ======= CHR HomePage: hxxp://google.pl/ CHR RestoreOnStartup: "hxxp://cango.pl/" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\pdf.dll () CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Extension: (Google Docs) - C:\Users\Xavi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Xavi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Xavi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Xavi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\Xavi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 CHR Extension: (Adblock Pro) - C:\Users\Xavi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.6_0 CHR Extension: (Gmail) - C:\Users\Xavi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ========================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2012-10-25] (Advanced Micro Devices, Inc.) R2 AtherosSvc; C:\Program Files\Dell Wireless\Bluetooth Suite\adminservice.exe [87168 2012-03-08] (Atheros Commnucations) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-08-12] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-08-12] (Microsoft Corporation) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [159360 2012-03-08] (Atheros) R2 ZAtheros Wlan Agent; C:\Program Files\Dell Wireless\Ath_WlanAgent.exe [77824 2012-03-28] (Atheros) ==================== Drivers (Whitelisted) ==================== R0 amd_sata; C:\Windows\System32\DRIVERS\amd_sata.sys [67712 2011-06-16] (Advanced Micro Devices) R0 amd_xata; C:\Windows\System32\DRIVERS\amd_xata.sys [33920 2011-06-16] (Advanced Micro Devices) R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [25728 2012-03-08] (Atheros) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation) S1 MpKsl641b3d73; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6DE647AC-2237-4E0A-BA52-2CDC749BE9EF}\MpKsl641b3d73.sys [40392 2013-10-28] () R1 MpKsld7d04f11; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6DE647AC-2237-4E0A-BA52-2CDC749BE9EF}\MpKsld7d04f11.sys [40392 2013-10-29] (Microsoft Corporation) S3 amdiox86; system32\DRIVERS\amdiox86.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-29 16:07 - 2013-10-29 16:11 - 00000000 ____D C:\AdwCleaner 2013-10-29 16:06 - 2013-10-29 16:06 - 01060070 _____ C:\Users\Xavi\Downloads\adwcleaner.exe 2013-10-28 20:46 - 2013-10-28 20:46 - 00000000 ____D C:\Users\Xavi\AppData\Roaming\IDT 2013-10-28 20:11 - 2013-10-28 20:11 - 00377856 _____ C:\Users\Xavi\Downloads\k2zu3qnr.exe 2013-10-28 20:11 - 2013-10-28 20:11 - 00000000 ____D C:\FRST 2013-10-28 20:09 - 2013-10-28 20:10 - 01089183 _____ (Farbar) C:\Users\Xavi\Downloads\FRST.exe 2013-10-28 19:56 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-28 19:55 - 2013-10-08 07:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-10-28 19:55 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-28 19:55 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-28 19:53 - 2013-10-28 19:55 - 00004142 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log 2013-10-26 22:42 - 2013-10-28 20:31 - 00000000 ____D C:\Program Files\IDT 2013-10-25 21:16 - 2013-10-25 21:21 - 00000000 ____D C:\Windows\Minidump 2013-10-12 06:27 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-12 06:27 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-12 06:27 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-12 06:27 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-12 06:27 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-12 06:27 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-10-12 06:27 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-10 13:05 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-10 13:05 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-10 13:05 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-10 13:05 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-10 13:05 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-10 13:05 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-10 13:05 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-10 13:05 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-10 13:05 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-10 13:05 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-10 13:05 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-10 13:05 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-10 13:05 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-10 13:04 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-10 13:04 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-10 13:04 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-10 12:51 - 2013-10-10 12:51 - 00007605 _____ C:\Users\Xavi\AppData\Local\Resmon.ResmonCfg 2013-10-10 12:50 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 12:50 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-10 12:50 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-10 12:50 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-10 12:50 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-10 12:50 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-10 12:50 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-10 12:50 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-10 12:50 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-10 12:50 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-10 12:49 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-10 12:49 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-10 12:49 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-10 12:49 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-10-10 12:49 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-10 12:49 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-10 12:49 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-10 12:49 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-10 12:49 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-10 12:49 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-10 12:49 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-10 12:49 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-10 12:49 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-10 12:49 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2013-10-10 12:49 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-10 12:49 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-10 12:49 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-04 21:47 - 2012-08-23 15:10 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2013-10-04 21:46 - 2012-08-23 15:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2013-10-04 21:46 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2013-10-04 21:46 - 2012-08-23 15:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2013-10-04 21:46 - 2012-08-23 15:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2013-10-04 21:46 - 2012-08-23 14:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2013-10-04 21:46 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2013-10-04 21:46 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2013-10-04 21:46 - 2012-08-23 14:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2013-10-04 21:46 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-10-04 21:46 - 2012-08-23 12:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2013-10-04 21:46 - 2012-08-23 12:32 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2013-10-04 21:46 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-10-04 21:46 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2013-10-04 21:46 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2013-10-04 21:46 - 2012-08-23 11:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2013-10-04 21:46 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-10-04 21:44 - 2013-10-28 20:32 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-04 21:38 - 2012-08-24 18:05 - 00136560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-10-04 21:38 - 2012-08-24 18:02 - 00369856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-10-04 21:38 - 2012-08-24 17:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-10-04 21:38 - 2012-08-24 17:56 - 01039360 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-10-04 21:36 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2013-10-04 10:14 - 2013-10-29 16:34 - 02055457 ____N C:\Windows\WindowsUpdate.log 2013-09-29 20:31 - 2013-09-29 20:31 - 00000000 ____D C:\Program Files\ooVoo 2013-09-29 19:48 - 2011-05-30 14:42 - 00240640 _____ C:\Windows\system32\xvidvfw.dll 2013-09-29 19:47 - 2013-09-29 19:47 - 00000000 ____D C:\ProgramData\DivX 2013-09-29 19:46 - 2013-09-29 19:56 - 00000000 ____D C:\Users\Xavi\AppData\Roaming\LavFilters ==================== One Month Modified Files and Folders ======= 2013-10-29 16:55 - 2013-08-20 21:44 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-29 16:48 - 2013-08-20 21:44 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-29 16:45 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-10-29 16:34 - 2013-10-04 10:14 - 02055457 ____N C:\Windows\WindowsUpdate.log 2013-10-29 16:21 - 2009-07-14 05:34 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-29 16:21 - 2009-07-14 05:34 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-29 16:20 - 2013-08-20 16:49 - 01549696 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-29 16:20 - 2009-07-14 09:07 - 00697912 _____ C:\Windows\system32\perfh015.dat 2013-10-29 16:20 - 2009-07-14 09:07 - 00134990 _____ C:\Windows\system32\perfc015.dat 2013-10-29 16:18 - 2013-09-14 21:31 - 00000000 ____D C:\Users\Xavi\AppData\Roaming\Skype 2013-10-29 16:14 - 2013-09-06 14:50 - 00000435 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2013-10-29 16:14 - 2013-08-20 21:44 - 00001028 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-29 16:14 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-29 16:11 - 2013-10-29 16:07 - 00000000 ____D C:\AdwCleaner 2013-10-29 16:06 - 2013-10-29 16:06 - 01060070 _____ C:\Users\Xavi\Downloads\adwcleaner.exe 2013-10-29 11:46 - 2013-08-20 21:46 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-10-29 09:50 - 2013-08-30 11:53 - 00000000 ____D C:\Users\Xavi\AppData\Local\CrashDumps 2013-10-29 09:45 - 2013-09-09 21:07 - 00000000 ____D C:\Users\Xavi\AppData\Local\GG 2013-10-29 09:43 - 2013-09-09 21:08 - 00000000 ____D C:\Users\Xavi\AppData\Roaming\GG 2013-10-28 21:04 - 2013-08-20 20:38 - 00000000 ____D C:\dell 2013-10-28 20:46 - 2013-10-28 20:46 - 00000000 ____D C:\Users\Xavi\AppData\Roaming\IDT 2013-10-28 20:32 - 2013-10-04 21:44 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-28 20:32 - 2013-09-14 21:31 - 00000000 ___RD C:\Program Files\Skype 2013-10-28 20:32 - 2013-09-14 21:31 - 00000000 ____D C:\ProgramData\Skype 2013-10-28 20:32 - 2013-08-30 11:57 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-10-28 20:32 - 2013-08-20 21:44 - 00000000 ____D C:\Windows\system32\Macromed 2013-10-28 20:32 - 2013-08-20 20:51 - 00000000 ____D C:\ProgramData\Atheros 2013-10-28 20:32 - 2009-07-14 09:28 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-10-28 20:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF 2013-10-28 20:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\AppCompat 2013-10-28 20:31 - 2013-10-26 22:42 - 00000000 ____D C:\Program Files\IDT 2013-10-28 20:31 - 2013-09-14 21:31 - 00000000 ____D C:\Program Files\Common Files\Skype 2013-10-28 20:31 - 2013-09-09 18:31 - 00000000 ____D C:\Program Files\AMD AVT 2013-10-28 20:31 - 2013-09-09 18:30 - 00000000 ____D C:\Program Files\AMD APP 2013-10-28 20:31 - 2013-08-20 20:48 - 00000000 ____D C:\Program Files\Cisco 2013-10-28 20:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration 2013-10-28 20:31 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-10-28 20:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-10-28 20:11 - 2013-10-28 20:11 - 00377856 _____ C:\Users\Xavi\Downloads\k2zu3qnr.exe 2013-10-28 20:11 - 2013-10-28 20:11 - 00000000 ____D C:\FRST 2013-10-28 20:10 - 2013-10-28 20:09 - 01089183 _____ (Farbar) C:\Users\Xavi\Downloads\FRST.exe 2013-10-28 19:56 - 2013-09-26 10:20 - 00000000 ____D C:\ProgramData\Oracle 2013-10-28 19:55 - 2013-10-28 19:53 - 00004142 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log 2013-10-28 19:55 - 2013-09-26 10:19 - 00000000 ____D C:\Program Files\Java 2013-10-28 19:42 - 2013-08-20 16:44 - 00000000 ____D C:\Users\Xavi 2013-10-28 19:33 - 2013-09-02 11:48 - 00000000 ____D C:\Windows\865537E164904193A4B6669C62711852.TMP 2013-10-28 19:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\wfp 2013-10-28 19:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pl-PL 2013-10-25 21:21 - 2013-10-25 21:16 - 00000000 ____D C:\Windows\Minidump 2013-10-12 06:30 - 2013-08-30 11:58 - 00001912 _____ C:\Windows\epplauncher.mif 2013-10-10 13:34 - 2013-08-20 17:19 - 00000000 ____D C:\Windows\Panther 2013-10-10 13:28 - 2009-07-14 05:33 - 00412056 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-10 13:21 - 2013-08-20 22:12 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-10 13:15 - 2013-08-21 11:10 - 00000000 ____D C:\Windows\system32\MRT 2013-10-10 13:10 - 2013-08-21 11:10 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-10 12:51 - 2013-10-10 12:51 - 00007605 _____ C:\Users\Xavi\AppData\Local\Resmon.ResmonCfg 2013-10-08 21:52 - 2013-08-20 21:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-10-08 21:52 - 2013-08-20 21:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-10-08 07:50 - 2013-10-28 19:55 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-10-08 07:46 - 2013-10-28 19:56 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-08 07:46 - 2013-10-28 19:55 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-08 07:46 - 2013-10-28 19:55 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-01 18:53 - 2013-09-26 10:40 - 00000000 ____D C:\Users\Xavi\AppData\Local\ALLPlayer 2013-09-29 20:31 - 2013-09-29 20:31 - 00000000 ____D C:\Program Files\ooVoo 2013-09-29 19:56 - 2013-09-29 19:46 - 00000000 ____D C:\Users\Xavi\AppData\Roaming\LavFilters 2013-09-29 19:47 - 2013-09-29 19:47 - 00000000 ____D C:\ProgramData\DivX Some content of TEMP: ==================== C:\Users\Xavi\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Xavi\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-27 19:37 ==================== End Of Log ============================