Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-12-2013 02 Ran by $ (administrator) on RAVVEN on 04-12-2013 18:20:39 Running from C:\Users\$\Desktop Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe () C:\Program Files\Program DJ\Dualview Server\dualviewsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe () C:\ProgramData\DatacardService\HWDeviceService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Compal Electronics, Inc.) C:\Program Files\Program DJ\Wireless Switch\wlss.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe () C:\Program Files\Razer\DeathAdder\razerhid.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe () C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe () C:\Windows\System32\PnkBstrA.exe () C:\Program Files\Prio\prio_svc.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe () C:\Program Files\Razer\DeathAdder\razertra.exe () C:\Program Files\Program DJ\Smart Watchdog\SWDsvc.exe (Razer Inc.) C:\Program Files\Razer\DeathAdder\razerofa.exe (TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SSUpdate.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe () C:\Users\$\Desktop\ddliu8b5.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [WLSS] - C:\Program Files\Program DJ\Wireless Switch\wlss.exe [882032 2009-08-12] (Compal Electronics, Inc.) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [DeathAdder] - C:\Program Files\Razer\DeathAdder\razerhid.exe [251392 2010-05-05] () HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2416368 2013-02-25] (Synaptics Incorporated) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [IDMan] - C:\Program Files\Internet Download Manager\IDMan.exe [3265944 2011-02-01] (Tonec Inc.) HKCU\...\Run: [Google Update] - C:\Users\$\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-29] (Google Inc.) HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5717272 2013-11-05] (SUPERAntiSpyware) AppInit_DLLs: prio.dll [ ] () BootExecute: autocheck autochk * sdnclean.exe ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:8080 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-07] (SuperAdBlocker.com) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 172.16.200.5 172.16.205.2 Tcpip\..\Interfaces\{1B084926-4C44-4811-8D62-FDC0175F44A1}: [NameServer]193.41.112.14 193.41.112.18 Tcpip\..\Interfaces\{5BD1D015-9033-429C-ADDD-1A4DE66F6A4C}: [NameServer]8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{8BDFE20C-1E86-4E2B-B19D-6910EA1BBF73}: [NameServer]193.41.112.14 193.41.112.18 Tcpip\..\Interfaces\{DD22165A-C754-4788-8C2A-B4510558E808}: [NameServer]193.41.112.14 193.41.112.18 FireFox: ======== FF ProfilePath: C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default FF Homepage: chrome://speeddial/content/speeddial.xul FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin: @videolan.org/vlc,version=1.1.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\$\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\$\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Extension: United States English Spellchecker - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\en-US@dictionaries.addons.mozilla.org FF Extension: IDM CC - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\mozilla_cc@internetdownloadmanager.com FF Extension: New Tab Homepage - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{66E978CD-981F-47DF-AC42-E3CF417C1467} FF Extension: WOT - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF Extension: historybutton - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\historybutton@darktrojan.net.xpi FF Extension: movableAppButton - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\movableAppButton@Merci.chao.xpi FF Extension: tineye - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\tineye@ideeinc.com.xpi FF Extension: No Name - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{5F590AA2-1221-4113-A6F4-A4BB62414FAC}.xpi FF Extension: speeddial - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi FF Extension: noscript - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{c0c588b6-b11d-4898-af00-079fed05aa32}.xpi FF Extension: Adblock Plus - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ FF HKCU\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\$\AppData\Roaming\IDM\idmmzcc3 FF Extension: IDM CC - C:\Users\$\AppData\Roaming\IDM\idmmzcc3 FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\$\AppData\Roaming\IDM\idmmzcc3 FF Extension: IDM CC - C:\Users\$\AppData\Roaming\IDM\idmmzcc3 Chrome: ======= CHR DefaultSearchURL: (qvo6) - http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEKT-00PVMT0_WD-WXB1AA0K4691K4691&ts=1374264759&type=default&q={searchTerms} CHR DefaultSuggestURL: (qvo6) - "suggest_url": "", CHR Plugin: (Shockwave Flash) - C:\Users\$\AppData\Local\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\$\AppData\Local\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Users\$\AppData\Local\Google\Chrome\Application\30.0.1599.69\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (VLC Multimedia Plug-in) - C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) CHR Plugin: (Google Update) - C:\Users\$\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\system32\npDeployJava1.dll No File CHR Extension: (Skype Click to Call) - C:\Users\$\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) S3 Connectify; C:\Program Files\Connectify\ConnectifyService.exe [487936 2013-09-24] (Connectify) R2 DualView Server; C:\Program Files\Program DJ\Dualview Server\dualviewsvc.exe [126976 2009-08-20] () R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] () R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14573856 2013-08-27] (NVIDIA Corporation) S2 PLAY ONLINE. RunOuc; C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe [246112 2012-09-21] () R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2012-12-06] () R2 prio_svc; C:\Program Files\Prio\prio_svc.exe [12656 2012-11-08] () R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) R2 Smart Watchdog; C:\Program Files\Program DJ\Smart Watchdog\SWDsvc.exe [208896 2009-08-26] () S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2011-03-19] (TuneUp Software) R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [1043784 2010-01-19] (TuneUp Software) S3 DAUpdaterSvc; E:\Dragon Age - Origins\bin_ship\daupdatersvc.service.exe [x] S2 matlabserver; C:\MATLAB701\webserver\bin\win32\matlabserver.exe [x] ==================== Drivers (Whitelisted) ==================== R1 Amfilter; C:\Windows\System32\DRIVERS\Amfilter.sys [8704 2007-01-24] (A4Tech Co.,Ltd.) S3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbprt.sys [14336 2007-12-25] (A4Tech Co.,Ltd.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-11-25] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-11-25] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-01] (Avira Operations GmbH & Co. KG) R1 cnnctfy3; C:\Windows\System32\DRIVERS\cnnctfy3.sys [29672 2013-09-25] (Connectify) S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2009-12-18] () R3 DAdderFltr; C:\Windows\System32\drivers\dadder.sys [9728 2010-04-19] (Razer (Asia-Pacific) Pte Ltd) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [232512 2012-04-21] (DT Soft Ltd) R3 DualViewFilter; C:\Windows\System32\Drivers\DualViewFilter.sys [22016 2009-06-11] () R0 EMSC; C:\Windows\System32\DRIVERS\EMSC.SYS [13680 2009-06-26] (Windows (R) Win 7 DDK provider) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14216 2011-07-29] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [8456 2011-07-29] () R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [89856 2012-09-21] (Huawei Technologies Co., Ltd.) S3 huawei_ext_ctrl; C:\Windows\System32\DRIVERS\ew_juextctrl.sys [26624 2012-09-21] (Huawei Technologies Co., Ltd.) S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [190976 2012-09-21] (Huawei Technologies Co., Ltd.) R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7087616 2011-01-19] (Intel Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [33568 2013-08-20] (NVIDIA Corporation) R1 prio; C:\Windows\System32\drivers\prio.sys [54128 2012-11-08] (Xeno) R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R0 speedfan; C:\Windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [443448 2011-11-03] () R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-28] (Avira GmbH) R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [10064 2009-10-14] (TuneUp Software) R3 vHidDev; C:\Windows\System32\DRIVERS\vHidDev.sys [5760 2009-12-21] (Windows (R) Win 7 DDK provider) S3 WinRing0_1_2_0; C:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys [14416 2012-11-13] (OpenLibSys.org) U3 a0r76c2t; C:\Windows\System32\Drivers\a0r76c2t.sys [0 ] (JMicron Technology Corporation) S3 catchme; \??\C:\Users\$\AppData\Local\Temp\catchme.sys [x] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] S3 GGSAFERDriver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys [x] S3 RivaTuner32; \??\C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys [x] U3 kgldrpob; \??\C:\Users\$\AppData\Local\Temp\kgldrpob.sys [x] U3 mbr; \??\C:\Users\$\AppData\Local\Temp\mbr.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-04 18:20 - 2013-12-04 18:21 - 00018075 _____ C:\Users\$\Desktop\FRST.txt 2013-12-04 18:20 - 2013-12-04 18:20 - 00000000 ____D C:\FRST 2013-12-04 18:03 - 2013-12-04 18:03 - 00377856 _____ C:\Users\$\Desktop\ddliu8b5.exe 2013-12-04 17:54 - 2013-12-04 18:20 - 00078888 _____ C:\Users\$\Desktop\SUPERAntiSpyware Quick Scan.Txt 2013-12-04 17:40 - 2013-12-04 17:40 - 00891200 _____ C:\Users\$\Desktop\SecurityCheck.exe 2013-12-04 17:39 - 2013-12-04 17:39 - 00017550 _____ C:\Users\$\Desktop\dds.txt 2013-12-04 17:39 - 2013-12-04 17:39 - 00007098 _____ C:\Users\$\Desktop\attach.txt 2013-12-04 17:38 - 2013-12-04 17:38 - 00688992 ____R (Swearware) C:\Users\$\Desktop\dds.com 2013-12-04 17:37 - 2013-12-04 17:52 - 00001376 _____ C:\Users\$\Desktop\SUPERAntiSpyware Scan.log 2013-12-04 17:28 - 2013-12-04 17:28 - 00096088 _____ C:\Users\$\Desktop\Extras.Txt 2013-12-04 17:26 - 2013-12-04 17:26 - 00127456 _____ C:\Users\$\Desktop\OTL.Txt 2013-12-04 17:16 - 2013-12-04 17:16 - 00602112 _____ (OldTimer Tools) C:\Users\$\Desktop\OTL.exe 2013-12-04 17:13 - 2013-12-04 17:13 - 01092545 _____ (Farbar) C:\Users\$\Desktop\FRST.exe 2013-12-04 16:45 - 2013-12-04 15:35 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\$\Desktop\tdsskiller.exe 2013-12-04 15:47 - 2013-12-04 15:47 - 28742296 _____ (SUPERAntiSpyware) C:\Users\$\Desktop\SUPERAntiSpyware.exe 2013-12-04 15:47 - 2013-12-04 15:47 - 00001974 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk 2013-12-04 15:47 - 2013-12-04 15:47 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2013-12-04 15:47 - 2013-12-04 15:47 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2013-12-04 15:42 - 2013-12-04 15:42 - 00000000 ____D C:\Program Files\ESET 2013-12-04 15:22 - 2013-12-04 15:22 - 00000000 ____D C:\Program Files\AuthenTec 2013-12-04 15:22 - 2012-08-23 15:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2013-12-04 15:22 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2013-12-04 15:22 - 2012-08-23 15:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2013-12-04 15:22 - 2012-08-23 15:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2013-12-04 15:22 - 2012-08-23 15:10 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2013-12-04 15:22 - 2012-08-23 14:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2013-12-04 15:22 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2013-12-04 15:22 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2013-12-04 15:22 - 2012-08-23 14:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2013-12-04 15:22 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-12-04 15:22 - 2012-08-23 12:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2013-12-04 15:22 - 2012-08-23 12:32 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2013-12-04 15:22 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2013-12-04 15:22 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2013-12-04 15:22 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2013-12-04 15:22 - 2012-08-23 11:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2013-12-04 15:22 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-12-04 15:09 - 2013-12-04 15:09 - 00000000 ____D C:\Program Files\Trend Micro 2013-12-04 01:57 - 2013-12-04 01:57 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-04 01:57 - 2013-12-04 01:57 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-04 01:57 - 2013-12-04 01:57 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-04 01:57 - 2013-12-04 01:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-04 01:57 - 2013-12-04 01:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-04 01:57 - 2013-12-04 01:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-04 01:55 - 2013-12-04 02:01 - 00009974 _____ C:\Windows\IE11_main.log 2013-12-03 17:35 - 2013-12-03 20:48 - 00038736 _____ C:\Users\$\Desktop\badania wstępne.xlsx 2013-12-02 16:01 - 2013-12-03 16:05 - 00011933 _____ C:\Users\$\Desktop\inżynierka.xlsx 2013-11-25 19:40 - 2013-11-25 19:41 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-25 19:13 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-25 19:13 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-25 19:13 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-25 19:13 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-25 19:13 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-25 19:13 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-25 19:13 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-25 19:13 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-25 19:13 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-25 19:13 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-25 19:13 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-25 19:13 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-25 19:13 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-25 19:13 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-25 19:09 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-25 19:08 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-25 19:08 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-25 19:08 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL ==================== One Month Modified Files and Folders ======= 2013-12-04 18:21 - 2013-12-04 18:20 - 00018075 _____ C:\Users\$\Desktop\FRST.txt 2013-12-04 18:20 - 2013-12-04 18:20 - 00000000 ____D C:\FRST 2013-12-04 18:20 - 2013-12-04 17:54 - 00078888 _____ C:\Users\$\Desktop\SUPERAntiSpyware Quick Scan.Txt 2013-12-04 18:20 - 2011-03-09 18:27 - 01230699 _____ C:\Windows\WindowsUpdate.log 2013-12-04 18:03 - 2013-12-04 18:03 - 00377856 _____ C:\Users\$\Desktop\ddliu8b5.exe 2013-12-04 17:52 - 2013-12-04 17:37 - 00001376 _____ C:\Users\$\Desktop\SUPERAntiSpyware Scan.log 2013-12-04 17:45 - 2011-11-29 14:58 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-361691920-1955263522-1173037568-1000UA.job 2013-12-04 17:40 - 2013-12-04 17:40 - 00891200 _____ C:\Users\$\Desktop\SecurityCheck.exe 2013-12-04 17:39 - 2013-12-04 17:39 - 00017550 _____ C:\Users\$\Desktop\dds.txt 2013-12-04 17:39 - 2013-12-04 17:39 - 00007098 _____ C:\Users\$\Desktop\attach.txt 2013-12-04 17:38 - 2013-12-04 17:38 - 00688992 ____R (Swearware) C:\Users\$\Desktop\dds.com 2013-12-04 17:28 - 2013-12-04 17:28 - 00096088 _____ C:\Users\$\Desktop\Extras.Txt 2013-12-04 17:26 - 2013-12-04 17:26 - 00127456 _____ C:\Users\$\Desktop\OTL.Txt 2013-12-04 17:23 - 2012-10-17 12:12 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-04 17:17 - 2009-07-14 05:34 - 00015168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-04 17:17 - 2009-07-14 05:34 - 00015168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-04 17:16 - 2013-12-04 17:16 - 00602112 _____ (OldTimer Tools) C:\Users\$\Desktop\OTL.exe 2013-12-04 17:16 - 2011-03-09 18:30 - 00006248 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-04 17:16 - 2009-07-14 09:07 - 04593412 _____ C:\Windows\system32\perfh015.dat 2013-12-04 17:16 - 2009-07-14 09:07 - 01500528 _____ C:\Windows\system32\perfc015.dat 2013-12-04 17:13 - 2013-12-04 17:13 - 01092545 _____ (Farbar) C:\Users\$\Desktop\FRST.exe 2013-12-04 17:13 - 2012-10-01 23:56 - 00000000 ____D C:\ProgramData\PMB Files 2013-12-04 17:09 - 2013-05-13 00:00 - 00029492 _____ C:\Windows\setupact.log 2013-12-04 17:09 - 2011-10-03 11:06 - 00065536 _____ C:\Windows\system32\Ikeext.etl 2013-12-04 17:09 - 2011-05-18 00:19 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-04 17:09 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-04 16:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-12-04 15:47 - 2013-12-04 15:47 - 28742296 _____ (SUPERAntiSpyware) C:\Users\$\Desktop\SUPERAntiSpyware.exe 2013-12-04 15:47 - 2013-12-04 15:47 - 00001974 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk 2013-12-04 15:47 - 2013-12-04 15:47 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2013-12-04 15:47 - 2013-12-04 15:47 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2013-12-04 15:42 - 2013-12-04 15:42 - 00000000 ____D C:\Program Files\ESET 2013-12-04 15:35 - 2013-12-04 16:45 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\$\Desktop\tdsskiller.exe 2013-12-04 15:25 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pl-PL 2013-12-04 15:22 - 2013-12-04 15:22 - 00000000 ____D C:\Program Files\AuthenTec 2013-12-04 15:22 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2013-12-04 15:09 - 2013-12-04 15:09 - 00000000 ____D C:\Program Files\Trend Micro 2013-12-04 14:43 - 2011-03-10 10:38 - 00259082 _____ C:\Windows\PFRO.log 2013-12-04 14:29 - 2011-05-06 17:27 - 00014172 _____ C:\Windows\IE9_main.log 2013-12-04 12:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing 2013-12-04 02:01 - 2013-12-04 01:55 - 00009974 _____ C:\Windows\IE11_main.log 2013-12-04 01:57 - 2013-12-04 01:57 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-04 01:57 - 2013-12-04 01:57 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-04 01:57 - 2013-12-04 01:57 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-04 01:57 - 2013-12-04 01:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-04 01:57 - 2013-12-04 01:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-04 01:57 - 2013-12-04 01:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-04 01:57 - 2013-12-04 01:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-04 01:57 - 2013-12-04 01:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-03 20:48 - 2013-12-03 17:35 - 00038736 _____ C:\Users\$\Desktop\badania wstępne.xlsx 2013-12-03 20:45 - 2011-11-29 14:58 - 00000990 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-361691920-1955263522-1173037568-1000Core.job 2013-12-03 16:05 - 2013-12-02 16:01 - 00011933 _____ C:\Users\$\Desktop\inżynierka.xlsx 2013-12-02 21:07 - 2013-05-17 21:06 - 00000000 ____D C:\Users\$\Desktop\inżynierka 2013-12-01 14:47 - 2013-09-27 19:10 - 00000000 ____D C:\Program Files\SpeedFan 2013-11-27 14:30 - 2012-06-10 17:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-11-27 14:30 - 2011-11-29 14:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-11-26 15:07 - 2013-10-11 12:26 - 00000000 ____D C:\Windows\rescache 2013-11-26 08:44 - 2013-06-24 00:35 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-11-26 08:22 - 2011-03-10 17:12 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-26 08:19 - 2013-08-16 07:45 - 00000000 ____D C:\Windows\system32\MRT 2013-11-26 08:11 - 2011-03-09 19:20 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-25 21:58 - 2013-02-28 12:36 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-11-25 21:58 - 2013-02-28 12:36 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-11-25 19:41 - 2013-11-25 19:40 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-11 05:50 - 2011-03-09 19:04 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-02 08:06 ==================== End Of Log ============================