Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013 Ran by sebek (administrator) on DUDEK-PC on 08-11-2013 14:47:51 Running from C:\Users\sebek\Desktop Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (The Within Network, LLC) C:\Windows\UnsignedThemesSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgwdsvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE () C:\Windows\system32\PnkBstrA.exe (Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgrsx.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgcsrvx.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe (Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe () D:\Gry\Lol\League of Legends\RADS\system\rads_user_kernel.exe () D:\Gry\Lol\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.190\deploy\LoLLauncher.exe (Opera Software) C:\Program Files\Opera\opera.exe (OldTimer Tools) C:\Users\sebek\Desktop\OTL.com (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Users\sebek\Desktop\SystemLook.exe () C:\Users\sebek\Desktop\74bdtw0j.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AVG9_TRAY] - C:\Program Files\AVG\AVG9\avgtray.exe [2077536 2012-01-26] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [UX Launcher] - C:\Windows\System32\uxlaunch.exe [195767 2011-06-11] () HKLM\...\Run: [KiesHelper] - C:\Program Files\Samsung\Kies\KiesHelper.exe [929680 2011-09-29] (Samsung) HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3508112 2011-09-29] (Samsung Electronics Co., Ltd.) HKLM\...\Run: [WinampAgent] - C:\Program Files\Winamp\winampa.exe [74752 2011-07-11] (Nullsoft, Inc.) HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [NSU_agent] - C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe [190768 2012-02-28] () HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [KPeerNexonEU] - C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2012-04-29] (NEXON Inc.) HKCU\...\Run: [Pando Media Booster] - C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-04] () HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd) HKCU\...\Run: [Tiny download manager] - C:\Users\sebek\AppData\Local\DM\TinyDM.exe [282624 2013-07-13] (http://www.tinydm.com/) MountPoints2: {075a705b-0c6f-11e1-a6ea-e0cb4ecbaa63} - K:\setup.exe HKU\Dudek\...\Run: [PC Suite Tray] - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [ 2011-06-16] (Nokia) HKU\Dudek\...\Run: [PCSpeedUp] - C:\Program Files\Przyspiesz Komputer\PCSpeedUp.lnk [ 2011-09-23] () HKU\Dudek\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [ 2011-09-29] () HKU\Dudek\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [ 2011-11-10] (DT Soft Ltd) HKU\Dudek\...\Run: [AlcoholAutomount] - C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [ 2010-08-20] (Alcohol Soft Development Team) HKU\Dudek\...\Run: [ALLUpdate] - C:\Program Files\ALLPlayer\ALLUpdate.exe [ 2011-08-16] () HKU\Dudek\...\Run: [Sony Ericsson PC Companion] - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [ 2010-04-19] () HKU\UpdatusUser\...\Run: [AlcoholAutomount] - "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount HKU\UpdatusUser\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [ 2010-11-20] (Microsoft Corporation) HKU\UpdatusUser\...\RunOnce: [DPAPIKeyMig] - C:\Windows\System32\dpapimig.exe [ 2009-07-14] (Microsoft Corporation) HKU\UpdatusUser\...\RunOnce: [avg_spchecker] - C:\Program Files\AVG\AVG9\Notification\SPChecker1.exe [ 2011-09-21] () AppInit_DLLs: c:\progra~2\bitguard\271769~1.27\{c16c1~1\bitguard.dll [ 2013-10-22] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=16F0E0CB4ECBAA63&affID=120695&tsp=4942 HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=16F0E0CB4ECBAA63&affID=120695&tsp=4942 HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm URLSearchHook: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo2.dll (Conduit Ltd.) SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678 SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=16F0E0CB4ECBAA63&affID=120695&tsp=4942 BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.) BHO: YouTube To ALLPlayer - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo2.dll (Conduit Ltd.) BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) BHO: IEPluginBHO Class - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\Dudek\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) Toolbar: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo2.dll (Conduit Ltd.) Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com) Toolbar: HKCU - uTorrentBar Toolbar - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\prxtbuTo2.dll (Conduit Ltd.) DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.80.2.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\dp3pc76r.default FF user.js: detected! => C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\dp3pc76r.default\user.js FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @gamersfirst.com/LiveLauncher - C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll No File FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @Webzen.com/NPBrowserExt - C:\Program Files\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\dp3pc76r.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\dp3pc76r.default\searchplugins\BrowserDefender.xml FF SearchPlugin: C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\dp3pc76r.default\searchplugins\delta.xml FF Extension: No Name - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\dp3pc76r.default\Extensions\ffxtlbr@babylon.com FF Extension: Delta Toolbar - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\dp3pc76r.default\Extensions\ffxtlbr@delta.com Chrome: ======= CHR Extension: (Click to call with Skype) - C:\Users\sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8153_0 CHR HKLM\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Dudek\AppData\Local\Temp\crxC7E5.tmp CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\sebek\AppData\Roaming\BabSolution\CR\Delta.crx CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx ========================== Services (Whitelisted) ================= R2 avg9wd; C:\Program Files\AVG\AVG9\avgwdsvc.exe [308136 2011-09-21] (AVG Technologies CZ, s.r.o.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.) S3 npggsvc; C:\Windows\system32\GameMon.des [4137464 2011-05-03] (INCA Internet Co., Ltd.) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2012-12-18] () S3 Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [153808 2010-06-08] (Avanquest Software) R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) R2 UnsignedThemes; C:\Windows\UnsignedThemesSvc.exe [21096 2009-07-13] (The Within Network, LLC) ==================== Drivers (Whitelisted) ==================== R1 AvgLdx86; C:\Windows\System32\Drivers\avgldx86.sys [226016 2013-01-15] (AVG Technologies CZ, s.r.o.) R1 AvgMfx86; C:\Windows\System32\Drivers\avgmfx86.sys [29712 2011-09-21] (AVG Technologies CZ, s.r.o.) R1 AvgTdiX; C:\Windows\System32\Drivers\avgtdix.sys [243152 2011-09-21] (AVG Technologies CZ, s.r.o.) R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [239168 2011-11-11] (DT Soft Ltd) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] () S1 prodrv06; C:\Windows\System32\drivers\prodrv06.sys [51744 2003-09-06] (Protection Technology) S0 prohlp02; C:\Windows\System32\drivers\prohlp02.sys [62656 2003-09-06] (Protection Technology) S0 prosync1; C:\Windows\System32\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation) S0 sfhlp01; C:\Windows\System32\drivers\sfhlp01.sys [4832 2003-09-06] (Protection Technology) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [428088 2012-03-29] () S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2010-12-21] (MCCI) S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-12-21] (MCCI Corporation) S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-12-21] (MCCI Corporation) S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [100224 2010-12-21] (MCCI Corporation) R2 uxpatch; C:\Windows\system32\drivers\uxpatch.sys [25448 2009-07-13] () S3 xhunter1; C:\Windows\xhunter1.sys [25560 2013-11-04] (Wellbia.com Co., Ltd.) U3 agikmrvl; C:\Windows\System32\Drivers\agikmrvl.sys [0 ] (Microsoft Corporation) U3 aoeed9q4; C:\Windows\System32\Drivers\aoeed9q4.sys [0 ] (Microsoft Corporation) S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x] S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] S0 vmci; system32\DRIVERS\vmci.sys [x] S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x] S3 vtany; \??\C:\Windows\vtany.sys [x] S3 XDva390; \??\C:\Windows\system32\XDva390.sys [x] U3 ugloapow; \??\C:\Users\sebek\AppData\Local\Temp\ugloapow.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-08 14:47 - 2013-11-08 14:47 - 01089445 _____ (Farbar) C:\Users\sebek\Desktop\FRST.exe 2013-11-08 14:47 - 2013-11-08 14:47 - 00000000 ____D C:\FRST 2013-11-08 14:44 - 2013-11-08 14:44 - 00377856 _____ C:\Users\sebek\Desktop\74bdtw0j.exe 2013-11-08 14:40 - 2013-11-08 14:40 - 00102852 _____ C:\Users\sebek\Desktop\Extras.Txt 2013-11-08 14:40 - 2013-11-08 14:40 - 00080956 _____ C:\Users\sebek\Desktop\OTL.Txt 2013-11-08 14:34 - 2013-11-08 14:37 - 00002542 _____ C:\Users\sebek\Desktop\SystemLook.txt 2013-11-08 14:33 - 2013-11-08 14:33 - 00139264 _____ C:\Users\sebek\Desktop\SystemLook.exe 2013-11-08 14:32 - 2013-11-08 14:32 - 00602112 _____ (OldTimer Tools) C:\Users\sebek\Desktop\OTL.com 2013-11-04 17:25 - 2013-11-04 17:25 - 00025560 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys 2013-11-03 23:02 - 2013-11-04 17:24 - 00000000 _____ C:\dfu.log 2013-11-03 23:02 - 2013-11-03 23:02 - 00001888 _____ C:\Users\Public\Desktop\S.K.I.L.L. - Special Force 2.lnk 2013-11-03 23:02 - 2013-11-03 23:02 - 00001029 _____ C:\Users\Public\Desktop\Gameforge Live.lnk 2013-11-03 23:02 - 2013-11-03 23:02 - 00000000 ____D C:\Users\Dudek\Downloads\Gameforge Live 2013-11-03 23:02 - 2013-11-03 23:02 - 00000000 ____D C:\Users\Dudek\AppData\Local\Gameforge4d 2013-11-03 23:02 - 2013-11-03 23:02 - 00000000 ____D C:\Program Files\GameforgeLive 2013-11-03 23:01 - 2013-11-03 23:01 - 19368272 _____ (Gameforge ) C:\Users\Dudek\Desktop\SKILL_GameforgeLiveSetup.exe 2013-11-01 23:10 - 2013-11-01 23:10 - 00005432 _____ C:\Users\sebek\Desktop\11012013_230221.log 2013-10-31 11:59 - 2013-10-31 11:59 - 00018334 _____ C:\Users\Dudek\Desktop\P90X+Xtreme+Workout+Series+Fitness+And+Nutrition+Guides+pdf+Goon.torrent 2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ____D C:\Users\Dudek\Downloads\P90X Xtreme Workout Series Fitness And Nutrition Guides 2013-10-28 09:05 - 2013-10-28 09:05 - 00000000 ____D C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-10-22 17:39 - 2013-10-22 17:39 - 00000000 ____D C:\ProgramData\Oracle 2013-10-22 17:38 - 2013-10-22 17:38 - 00000000 ____D C:\Program Files\Common Files\Java 2013-10-22 17:38 - 2013-10-08 06:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-10-22 17:38 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-22 17:38 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-22 17:38 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-22 17:37 - 2013-10-22 17:38 - 00004734 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log 2013-10-22 17:00 - 2013-10-22 17:00 - 00000763 _____ C:\Users\Dudek\Desktop\lol.launcher — skrót.lnk 2013-10-14 19:38 - 2013-10-14 19:38 - 00000000 ____D C:\Users\Dudek\AppData\Roaming\MKKE 2013-10-14 17:25 - 2013-10-14 17:25 - 00040114 _____ C:\Users\Dudek\Desktop\[TorrentDownloads.me]_Mortal_Kombat_Complete_Edition_RePack_ENG iso.torrent 2013-10-09 21:28 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-09 21:28 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-09 21:28 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-09 21:28 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-09 21:28 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-09 21:28 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-09 21:28 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-09 21:28 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-09 21:28 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-09 21:28 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-09 21:28 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-09 21:28 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-09 21:27 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-09 21:27 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-09 21:27 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-09 21:27 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-09 15:09 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-09 15:09 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-09 15:09 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-09 15:09 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-09 15:09 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-09 15:09 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-09 15:09 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-09 15:09 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-09 15:09 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-10-09 15:09 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-09 15:09 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-10-09 15:09 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-09 15:09 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-09 15:09 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-09 15:09 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-09 15:09 - 2013-08-29 02:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys 2013-10-09 15:09 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-09 15:09 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-09 15:09 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-09 15:09 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 15:09 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-09 15:09 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-09 15:09 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-09 15:09 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-09 15:09 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-09 15:09 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-09 15:09 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-09 15:09 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-09 15:09 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-09 15:09 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-09 15:09 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-09 15:09 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-09 15:09 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll ==================== One Month Modified Files and Folders ======= 2013-11-08 14:47 - 2013-11-08 14:47 - 01089445 _____ (Farbar) C:\Users\sebek\Desktop\FRST.exe 2013-11-08 14:47 - 2013-11-08 14:47 - 00000000 ____D C:\FRST 2013-11-08 14:47 - 2012-11-26 16:41 - 00000000 ____D C:\Users\sebek\AppData\Roaming\TS3Client 2013-11-08 14:44 - 2013-11-08 14:44 - 00377856 _____ C:\Users\sebek\Desktop\74bdtw0j.exe 2013-11-08 14:40 - 2013-11-08 14:40 - 00102852 _____ C:\Users\sebek\Desktop\Extras.Txt 2013-11-08 14:40 - 2013-11-08 14:40 - 00080956 _____ C:\Users\sebek\Desktop\OTL.Txt 2013-11-08 14:37 - 2013-11-08 14:34 - 00002542 _____ C:\Users\sebek\Desktop\SystemLook.txt 2013-11-08 14:36 - 2011-09-25 08:36 - 00001034 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-08 14:33 - 2013-11-08 14:33 - 00139264 _____ C:\Users\sebek\Desktop\SystemLook.exe 2013-11-08 14:32 - 2013-11-08 14:32 - 00602112 _____ (OldTimer Tools) C:\Users\sebek\Desktop\OTL.com 2013-11-08 14:29 - 2011-11-10 09:28 - 00000000 ____D C:\Users\sebek\AppData\Local\PMB Files 2013-11-08 14:29 - 2011-09-17 20:35 - 00000000 ____D C:\Windows\system32\Drivers\Avg 2013-11-08 14:15 - 2011-09-18 15:56 - 00006512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-08 14:15 - 2011-09-18 15:56 - 00006512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-08 14:14 - 2011-09-18 16:18 - 01549932 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-08 14:14 - 2009-07-14 09:07 - 00697896 _____ C:\Windows\system32\perfh015.dat 2013-11-08 14:14 - 2009-07-14 09:07 - 00135006 _____ C:\Windows\system32\perfc015.dat 2013-11-08 14:12 - 2011-09-18 16:08 - 01573927 _____ C:\Windows\WindowsUpdate.log 2013-11-08 14:09 - 2011-09-25 08:36 - 00000000 ____D C:\Users\sebek\AppData\Roaming\Skype 2013-11-08 14:08 - 2012-11-28 19:28 - 00065536 _____ C:\Windows\system32\Ikeext.etl 2013-11-08 14:08 - 2011-09-25 08:36 - 00001030 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-08 14:08 - 2011-09-17 19:06 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-08 14:08 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-08 14:08 - 2009-07-14 05:39 - 09009956 _____ C:\Windows\setupact.log 2013-11-08 14:08 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing 2013-11-08 00:36 - 2011-09-20 22:58 - 00000000 ____D C:\Users\Dudek\AppData\Local\PMB Files 2013-11-08 00:36 - 2011-09-20 22:58 - 00000000 ____D C:\ProgramData\PMB Files 2013-11-08 00:08 - 2011-09-23 20:42 - 00000000 ____D C:\Users\Dudek\AppData\Roaming\Winamp 2013-11-07 23:59 - 2012-04-02 13:24 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-07 23:41 - 2011-11-09 19:32 - 00000000 ____D C:\Users\Dudek\AppData\Roaming\TS3Client 2013-11-04 17:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF 2013-11-04 17:25 - 2013-11-04 17:25 - 00025560 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys 2013-11-04 17:24 - 2013-11-03 23:02 - 00000000 _____ C:\dfu.log 2013-11-03 23:02 - 2013-11-03 23:02 - 00001888 _____ C:\Users\Public\Desktop\S.K.I.L.L. - Special Force 2.lnk 2013-11-03 23:02 - 2013-11-03 23:02 - 00001029 _____ C:\Users\Public\Desktop\Gameforge Live.lnk 2013-11-03 23:02 - 2013-11-03 23:02 - 00000000 ____D C:\Users\Dudek\Downloads\Gameforge Live 2013-11-03 23:02 - 2013-11-03 23:02 - 00000000 ____D C:\Users\Dudek\AppData\Local\Gameforge4d 2013-11-03 23:02 - 2013-11-03 23:02 - 00000000 ____D C:\Program Files\GameforgeLive 2013-11-03 23:01 - 2013-11-03 23:01 - 19368272 _____ (Gameforge ) C:\Users\Dudek\Desktop\SKILL_GameforgeLiveSetup.exe 2013-11-01 23:19 - 2011-09-18 16:03 - 00194578 _____ C:\Windows\PFRO.log 2013-11-01 23:10 - 2013-11-01 23:10 - 00005432 _____ C:\Users\sebek\Desktop\11012013_230221.log 2013-11-01 23:10 - 2011-09-17 20:35 - 00000000 ____D C:\ProgramData\avg9 2013-10-31 13:01 - 2011-11-16 11:43 - 00000000 ____D C:\Users\Dudek\AppData\Roaming\uTorrent 2013-10-31 11:59 - 2013-10-31 11:59 - 00018334 _____ C:\Users\Dudek\Desktop\P90X+Xtreme+Workout+Series+Fitness+And+Nutrition+Guides+pdf+Goon.torrent 2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ____D C:\Users\Dudek\Downloads\P90X Xtreme Workout Series Fitness And Nutrition Guides 2013-10-29 16:27 - 2013-09-14 15:20 - 00000000 ____D C:\ProgramData\BitGuard 2013-10-28 09:05 - 2013-10-28 09:05 - 00000000 ____D C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-10-22 17:39 - 2013-10-22 17:39 - 00000000 ____D C:\ProgramData\Oracle 2013-10-22 17:38 - 2013-10-22 17:38 - 00000000 ____D C:\Program Files\Common Files\Java 2013-10-22 17:38 - 2013-10-22 17:37 - 00004734 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log 2013-10-22 17:38 - 2013-06-23 14:31 - 00000000 ____D C:\Program Files\Java 2013-10-22 17:00 - 2013-10-22 17:00 - 00000763 _____ C:\Users\Dudek\Desktop\lol.launcher — skrót.lnk 2013-10-20 15:37 - 2012-11-07 16:45 - 00000000 ____D C:\Users\sebek\Documents\Euro Truck Simulator 2 2013-10-19 15:19 - 2013-07-21 15:14 - 00002012 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-10-19 15:19 - 2013-07-21 15:14 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-10-18 14:15 - 2009-07-14 05:53 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-10-14 19:38 - 2013-10-14 19:38 - 00000000 ____D C:\Users\Dudek\AppData\Roaming\MKKE 2013-10-14 19:38 - 2013-06-24 18:29 - 00000000 ____D C:\ProgramData\Steam 2013-10-14 19:29 - 2011-11-11 18:34 - 00000000 ____D C:\Users\Dudek\AppData\Roaming\DAEMON Tools Lite 2013-10-14 17:25 - 2013-10-14 17:25 - 00040114 _____ C:\Users\Dudek\Desktop\[TorrentDownloads.me]_Mortal_Kombat_Complete_Edition_RePack_ENG iso.torrent 2013-10-10 19:49 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache 2013-10-10 19:00 - 2012-04-02 13:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-10-10 19:00 - 2011-09-20 21:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-10-10 17:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-10-10 15:26 - 2009-07-14 05:33 - 00343488 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-10 15:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pl-PL 2013-10-10 15:21 - 2011-09-23 20:44 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-09 21:33 - 2006-11-02 11:23 - 00000240 _____ C:\Windows\win.ini 2013-10-09 21:32 - 2013-08-14 15:19 - 00000000 ____D C:\Windows\system32\MRT 2013-10-09 21:29 - 2011-09-26 16:44 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe Some content of TEMP: ==================== C:\Users\Dudek\AppData\Local\Temp\83bffc39cfa850598ab365ba8c1f3bf4.dll C:\Users\Dudek\AppData\Local\Temp\nowegg.upgr.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-31 00:56 ==================== End Of Log ============================