Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013 Ran by adam (administrator) on ATTOSHIBA on 16-11-2013 11:07:37 Running from C:\Zasoby\instalki\diagnosostykaDlaFixit.pl Windows 7 Professional Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe () C:\Users\adam\Downloads\dsksve8\DeskSave.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Zasoby\PortApps\Rainlendar2\Rainlendar2.exe (Miranda IM) C:\Zasoby\PortApps\Miranda\miranda32.exe (PortableApps.com) C:\Zasoby\PortApps\ThunderbirdPort\ThunderbirdPortable.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TOSHIBA Corporation) C:\Windows\system32\ThpSrv.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Ericsson AB) C:\Program Files (x86)\TOSHIBA\F3607gw Mobile Broadband Device\WMCore\mini_WMCore.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Mozilla Corporation) C:\Zasoby\PortApps\ThunderbirdPort\App\thunderbird\thunderbird.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (PortableApps.com) C:\Zasoby\PortApps\FirefoxPortable\FirefoxPortable.exe (Mozilla Corporation) C:\Zasoby\PortApps\FirefoxPortable\App\firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng_D.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ThpSrv] - C:\Windows\system32\thpsrv /logon HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2107176 2010-03-11] (Synaptics Incorporated) HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation) HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKLM\...\Policies\Explorer: [NoDrives] 65536 HKCU\...\Run: [DeskSave] - C:\Users\adam\Downloads\dsksve8\DeskSave.exe [82944 2008-07-26] () HKCU\...\Run: [Rainlendar2] - C:\Zasoby\PortApps\Rainlendar2\Rainlendar2.exe [2346496 2011-02-04] () MountPoints2: {090ffbaa-c231-11e2-9588-028037ec0200} - F:\SETUP.EXE HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) AppInit_DLLs: [ ] () AppInit_DLLs-x32: [ ] () Startup: C:\Users\adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\miranda.lnk ShortcutTarget: miranda.lnk -> C:\Zasoby\PortApps\Miranda\miranda32.exe (Miranda IM) Startup: C:\Users\adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ThunderbirdP.lnk ShortcutTarget: ThunderbirdP.lnk -> C:\Zasoby\PortApps\ThunderbirdPort\ThunderbirdPortable.exe (PortableApps.com) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba.msn.com HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://toshiba.msn.com HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {EFAFA146-5974-41D3-90C3-27BF31DAB495} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {108D3206-846A-4A93-BACB-F0572D043ED7} http://10.0.0.17/webrec.cab Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 87.204.204.204 62.233.233.233 Tcpip\..\Interfaces\{94F6C60B-E10D-4B6F-BD99-5D0E0728A0CE}: [NameServer]213.158.199.1 213.158.199.5 FireFox: ======== FF ProfilePath: C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\clz1m9wx.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\adam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF HKLM-x32\...\Firefox\Extensions: [{302BCF7B-E09E-4854-9F2F-8B2DA4EF70F9}] - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\FirefoxAddin FF Extension: TOSHIBA Fingerprint Utility Automatic Password Input - C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\FirefoxAddin ==================== Services (Whitelisted) ================= R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 WMCoreService; C:\Program Files (x86)\TOSHIBA\F3607gw Mobile Broadband Device\WMCore\mini_WMCore.exe [462888 2010-04-08] (Ericsson AB) ==================== Drivers (Whitelisted) ==================== S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc) R3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2010-03-03] (Ericsson AB) R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [30248 2010-03-03] (Ericsson AB) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) S3 mv2; C:\Windows\System32\DRIVERS\mv2.sys [12904 2012-09-10] (UVNC BVBA) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) S3 PortTalk; C:\Windows\SysWow64\Drivers\PortTalk.sys [3567 2013-06-11] (Beyond Logic http://www.beyondlogic.org) R3 t36gbus; C:\Windows\System32\DRIVERS\t36gbus.sys [329216 2009-06-26] (MCCI Corporation) R3 t36gmdfl; C:\Windows\System32\DRIVERS\t36gmdfl.sys [19456 2009-06-26] (MCCI Corporation) R3 t36gmdm; C:\Windows\System32\DRIVERS\t36gmdm.sys [432640 2009-06-26] (MCCI Corporation) R3 t36gmgmt; C:\Windows\System32\DRIVERS\t36gmgmt.sys [376320 2009-06-26] (MCCI Corporation) R3 t36wgps; C:\Windows\System32\DRIVERS\t36wgps64.sys [96296 2009-07-10] (Ericsson AB) R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [269864 2010-03-09] (Ericsson AB) S3 Ser2pl; \SystemRoot\system32\DRIVERS\ser2pl64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-16 11:06 - 2013-11-16 11:06 - 00000000 ____D C:\FRST 2013-11-16 03:08 - 2013-11-16 03:08 - 00000000 ____D C:\Users\test\Desktop\AdwCleaner 2013-11-16 03:06 - 2013-11-16 03:06 - 00122472 _____ C:\Users\test\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-16 03:06 - 2013-11-16 03:06 - 00001427 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-16 03:06 - 2013-11-16 03:06 - 00000892 __RSH C:\Users\test\ntuser.pol 2013-11-16 03:06 - 2013-11-16 03:06 - 00000020 ___SH C:\Users\test\ntuser.ini 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Ustawienia lokalne 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Szablony 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Moje dokumenty 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Menu Start 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Documents\Moje wideo 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Documents\Moje obrazy 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Documents\Moja muzyka 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Dane aplikacji 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\AppData\Local\Historia 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\AppData\Local\Dane aplikacji 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ___RD C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ___RD C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ____D C:\Users\test\AppData\Roaming\Adobe 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ____D C:\Users\test\AppData\Local\Toshiba 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ____D C:\Users\test 2013-11-16 03:06 - 2013-07-11 02:16 - 00000000 ____D C:\Users\test\AppData\Local\Microsoft Help 2013-11-16 03:06 - 2010-06-24 07:09 - 00000000 ____D C:\Users\test\AppData\Roaming\Macromedia 2013-11-16 03:06 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-11-16 03:06 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-11-16 00:57 - 2013-11-16 02:52 - 00000112 _____ C:\Windows\setupact.log 2013-11-16 00:57 - 2013-11-16 00:57 - 00000824 _____ C:\Windows\PFRO.log 2013-11-16 00:57 - 2013-11-16 00:57 - 00000000 _____ C:\Windows\setuperr.log 2013-11-16 00:23 - 2013-11-16 00:23 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-16 00:23 - 2013-11-16 00:23 - 00000000 ____D C:\Program Files\CCleaner 2013-11-15 23:49 - 2013-11-15 23:53 - 00000000 ____D C:\AdwCleaner 2013-11-15 23:42 - 2013-11-15 23:42 - 00001209 _____ C:\Users\adam\Desktop\Pobrane.lnk 2013-11-15 21:06 - 2013-11-15 21:06 - 01191834 _____ C:\Users\adam\Downloads\ProcessExplorer.zip 2013-11-15 21:06 - 2013-11-15 21:06 - 00000000 ____D C:\Users\adam\Downloads\ProcessExplorer 2013-11-15 19:59 - 2013-11-15 20:23 - 00000000 ____D C:\Program Files (x86)\Unlocker 2013-11-15 19:40 - 2013-11-15 19:40 - 00000000 ____D C:\Users\adam\Downloads\ProcessMonitor 2013-11-15 19:39 - 2013-11-15 19:39 - 01110478 _____ C:\Users\adam\Downloads\ProcessMonitor.zip 2013-11-14 14:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-14 14:47 - 2013-11-14 14:47 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 14:47 - 2013-11-14 14:47 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 14:47 - 2013-11-14 14:47 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-14 14:47 - 2013-11-14 14:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-14 14:47 - 2013-11-14 14:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-14 14:47 - 2013-11-14 14:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 14:46 - 2013-11-14 14:46 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 14:46 - 2013-11-14 14:46 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-14 14:46 - 2013-11-14 14:46 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-14 14:46 - 2013-11-14 14:46 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-14 14:46 - 2013-11-14 14:46 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-14 14:45 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2013-11-14 14:45 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2013-11-14 14:45 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2013-11-14 14:45 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2013-11-14 14:45 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2013-11-14 14:45 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-11-14 14:45 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2013-11-14 14:45 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2013-11-14 14:45 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2013-11-14 14:45 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2013-11-14 14:45 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2013-11-14 14:45 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2013-11-14 14:45 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2013-11-14 14:45 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2013-11-14 14:45 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2013-11-14 14:45 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2013-11-14 14:45 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-11-14 14:45 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2013-11-14 14:40 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2013-11-14 14:40 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2013-11-13 22:32 - 2013-11-15 20:04 - 00000000 ___HD C:\Users\adam\AppData\Roaming\pwo6 2013-11-13 22:25 - 2013-09-13 14:52 - 00012072 _____ C:\Windows\SysWOW64\Drivers\MoborobAssDriver64.sys 2013-11-13 22:21 - 2013-11-13 22:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_androidusb_01009.Wdf 2013-11-13 12:03 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-13 12:03 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-13 12:03 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-13 12:03 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-13 12:03 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-13 12:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-13 12:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-13 12:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-13 12:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-13 12:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-13 12:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-13 12:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-13 12:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-13 12:03 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-13 12:03 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-13 12:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-13 12:03 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-13 12:03 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-13 12:03 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-13 12:03 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-13 12:03 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-13 12:03 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-13 12:03 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-13 12:03 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-13 12:03 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-13 12:03 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-13 12:03 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-13 12:03 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-13 12:03 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-13 12:03 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-06 08:56 - 2013-11-06 08:56 - 02952819 _____ (Miranda IM Project) C:\Users\adam\Downloads\miranda-im-v0.10.19-unicode.exe 2013-10-28 09:49 - 2013-11-16 00:22 - 04379048 _____ (Piriform Ltd) C:\Users\adam\Downloads\ccsetup407.exe 2013-10-21 09:52 - 2013-10-21 09:52 - 00000000 ____D C:\Users\adam\AppData\Roaming\.mono 2013-10-21 09:38 - 2013-10-21 09:39 - 00001135 _____ C:\Users\Public\Desktop\Creeper World 3.lnk 2013-10-21 09:38 - 2013-10-21 09:38 - 00000000 ____D C:\Program Files\KnuckleCracker 2013-10-21 09:30 - 2013-10-21 09:31 - 07052272 _____ (PortableApps.com) C:\Users\adam\Downloads\qBittorrentPortable_3.1.0.paf.exe 2013-10-21 09:26 - 2013-10-21 09:27 - 09976766 _____ (The qBittorrent project) C:\Users\adam\Downloads\qbittorrent_3.1.0_setup.exe 2013-10-21 09:25 - 2013-10-21 09:37 - 00000000 ____D C:\Users\adam\Downloads\Creeper World 3 2013-10-19 20:11 - 2013-10-19 20:40 - 00000000 ____D C:\Users\adam\Downloads\keymappery 2013-10-18 14:09 - 2013-10-18 14:09 - 00013631 _____ C:\Users\adam\Downloads\nsmail-1.eml ==================== One Month Modified Files and Folders ======= 2013-11-16 11:06 - 2013-11-16 11:06 - 00000000 ____D C:\FRST 2013-11-16 11:03 - 2013-06-11 08:48 - 00000000 ____D C:\Users\adam\Downloads\diagnostyka 2013-11-16 10:35 - 2013-10-03 21:25 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-16 10:18 - 2013-06-30 12:50 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-16 10:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing 2013-11-16 08:33 - 2009-07-14 05:45 - 00020368 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-16 08:33 - 2009-07-14 05:45 - 00020368 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-16 03:08 - 2013-11-16 03:08 - 00000000 ____D C:\Users\test\Desktop\AdwCleaner 2013-11-16 03:06 - 2013-11-16 03:06 - 00122472 _____ C:\Users\test\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-16 03:06 - 2013-11-16 03:06 - 00001427 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-16 03:06 - 2013-11-16 03:06 - 00000892 __RSH C:\Users\test\ntuser.pol 2013-11-16 03:06 - 2013-11-16 03:06 - 00000020 ___SH C:\Users\test\ntuser.ini 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Ustawienia lokalne 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Szablony 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Moje dokumenty 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Menu Start 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Documents\Moje wideo 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Documents\Moje obrazy 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Documents\Moja muzyka 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\Dane aplikacji 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\AppData\Local\Historia 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 _SHDL C:\Users\test\AppData\Local\Dane aplikacji 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ___RD C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ___RD C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ____D C:\Users\test\AppData\Roaming\Adobe 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ____D C:\Users\test\AppData\Local\Toshiba 2013-11-16 03:06 - 2013-11-16 03:06 - 00000000 ____D C:\Users\test 2013-11-16 03:06 - 2013-10-03 21:25 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-16 03:00 - 2013-05-16 10:10 - 01638409 _____ C:\Windows\WindowsUpdate.log 2013-11-16 02:57 - 2009-07-14 18:55 - 00698590 _____ C:\Windows\system32\perfh015.dat 2013-11-16 02:57 - 2009-07-14 18:55 - 00135410 _____ C:\Windows\system32\perfc015.dat 2013-11-16 02:57 - 2009-07-14 06:13 - 01551444 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-16 02:53 - 2013-05-21 07:03 - 00065536 _____ C:\Windows\system32\Ikeext.etl 2013-11-16 02:53 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-16 02:52 - 2013-11-16 00:57 - 00000112 _____ C:\Windows\setupact.log 2013-11-16 00:57 - 2013-11-16 00:57 - 00000824 _____ C:\Windows\PFRO.log 2013-11-16 00:57 - 2013-11-16 00:57 - 00000000 _____ C:\Windows\setuperr.log 2013-11-16 00:36 - 2013-05-18 20:25 - 00000000 ____D C:\Users\adam\AppData\Roaming\Mozilla 2013-11-16 00:35 - 2013-05-20 16:44 - 00000000 ____D C:\Users\adam\AppData\Roaming\Thunderbird 2013-11-16 00:35 - 2013-05-19 08:00 - 00000000 ____D C:\Users\adam\Desktop\Skróty 2013-11-16 00:24 - 2010-06-24 06:06 - 00000000 ____D C:\Windows\Panther 2013-11-16 00:23 - 2013-11-16 00:23 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-16 00:23 - 2013-11-16 00:23 - 00000000 ____D C:\Program Files\CCleaner 2013-11-16 00:22 - 2013-10-28 09:49 - 04379048 _____ (Piriform Ltd) C:\Users\adam\Downloads\ccsetup407.exe 2013-11-15 23:53 - 2013-11-15 23:49 - 00000000 ____D C:\AdwCleaner 2013-11-15 23:42 - 2013-11-15 23:42 - 00001209 _____ C:\Users\adam\Desktop\Pobrane.lnk 2013-11-15 23:25 - 2009-07-14 06:08 - 00032592 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-11-15 21:06 - 2013-11-15 21:06 - 01191834 _____ C:\Users\adam\Downloads\ProcessExplorer.zip 2013-11-15 21:06 - 2013-11-15 21:06 - 00000000 ____D C:\Users\adam\Downloads\ProcessExplorer 2013-11-15 20:46 - 2013-05-19 01:51 - 00000000 ____D C:\Zasoby 2013-11-15 20:27 - 2013-05-23 05:21 - 00000000 ____D C:\Users\adam\Downloads\android 2013-11-15 20:23 - 2013-11-15 19:59 - 00000000 ____D C:\Program Files (x86)\Unlocker 2013-11-15 20:04 - 2013-11-13 22:32 - 00000000 ___HD C:\Users\adam\AppData\Roaming\pwo6 2013-11-15 19:40 - 2013-11-15 19:40 - 00000000 ____D C:\Users\adam\Downloads\ProcessMonitor 2013-11-15 19:39 - 2013-11-15 19:39 - 01110478 _____ C:\Users\adam\Downloads\ProcessMonitor.zip 2013-11-15 19:12 - 2013-06-18 17:22 - 00000000 ____D C:\Users\adam\AppData\Local\Adobe 2013-11-15 19:08 - 2013-06-30 12:50 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-15 19:08 - 2013-05-19 08:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-15 19:08 - 2013-05-19 08:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-14 19:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-14 17:36 - 2013-05-16 10:53 - 00001331 _____ C:\Users\adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-14 17:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-14 14:47 - 2013-11-14 14:47 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 14:47 - 2013-11-14 14:47 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 14:47 - 2013-11-14 14:47 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-14 14:47 - 2013-11-14 14:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-14 14:47 - 2013-11-14 14:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-14 14:47 - 2013-11-14 14:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-14 14:47 - 2013-11-14 14:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-14 14:47 - 2013-11-14 14:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 14:46 - 2013-11-14 14:46 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 14:46 - 2013-11-14 14:46 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-14 14:46 - 2013-11-14 14:46 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-14 14:46 - 2013-11-14 14:46 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-14 14:46 - 2013-11-14 14:46 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-14 14:46 - 2013-11-14 14:46 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-14 14:46 - 2013-11-14 14:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-14 14:45 - 2013-05-19 07:48 - 00002155 _____ C:\Windows\epplauncher.mif 2013-11-14 14:45 - 2013-05-19 07:48 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-11-14 14:45 - 2013-05-19 07:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-11-14 03:06 - 2013-05-21 17:55 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-14 03:03 - 2013-08-04 02:00 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 03:01 - 2013-05-16 11:43 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-13 22:44 - 2013-05-16 10:50 - 00000000 ___RD C:\Users\adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-13 22:21 - 2013-11-13 22:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_androidusb_01009.Wdf 2013-11-08 09:38 - 2013-06-11 05:17 - 00002192 ____H C:\Users\adam\Documents\Default.rdp 2013-11-08 09:38 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-11-07 10:21 - 2013-05-16 10:50 - 00000000 ____D C:\Users\adam 2013-11-06 08:56 - 2013-11-06 08:56 - 02952819 _____ (Miranda IM Project) C:\Users\adam\Downloads\miranda-im-v0.10.19-unicode.exe 2013-11-05 20:43 - 2013-10-12 10:25 - 00000000 ____D C:\Users\adam\AppData\Roaming\CreeperWorld3 2013-10-28 09:52 - 2013-10-03 21:25 - 00000000 ____D C:\Program Files (x86)\Google 2013-10-28 09:44 - 2013-05-19 08:10 - 00000000 ____D C:\Users\adam\Desktop\serwery 2013-10-21 10:02 - 2013-10-12 10:26 - 00000000 ____D C:\Users\adam\Documents\CreeperWorld3 2013-10-21 09:52 - 2013-10-21 09:52 - 00000000 ____D C:\Users\adam\AppData\Roaming\.mono 2013-10-21 09:39 - 2013-10-21 09:38 - 00001135 _____ C:\Users\Public\Desktop\Creeper World 3.lnk 2013-10-21 09:38 - 2013-10-21 09:38 - 00000000 ____D C:\Program Files\KnuckleCracker 2013-10-21 09:37 - 2013-10-21 09:25 - 00000000 ____D C:\Users\adam\Downloads\Creeper World 3 2013-10-21 09:31 - 2013-10-21 09:30 - 07052272 _____ (PortableApps.com) C:\Users\adam\Downloads\qBittorrentPortable_3.1.0.paf.exe 2013-10-21 09:27 - 2013-10-21 09:26 - 09976766 _____ (The qBittorrent project) C:\Users\adam\Downloads\qbittorrent_3.1.0_setup.exe 2013-10-19 20:40 - 2013-10-19 20:11 - 00000000 ____D C:\Users\adam\Downloads\keymappery 2013-10-19 20:29 - 2013-09-06 09:54 - 00000000 ____D C:\Program Files\WinRAR 2013-10-18 14:09 - 2013-10-18 14:09 - 00013631 _____ C:\Users\adam\Downloads\nsmail-1.eml ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-10 00:13 ==================== End Of Log ============================