Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-12-2013
Ran by $ (administrator) on RAVVEN on 05-12-2013 19:20:36
Running from C:\Users\$\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
() C:\Program Files\Program DJ\Dualview Server\dualviewsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\System32\PnkBstrA.exe
() C:\Program Files\Prio\prio_svc.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
() C:\Program Files\Program DJ\Smart Watchdog\SWDsvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
(Compal Electronics, Inc.) C:\Program Files\Program DJ\Wireless Switch\wlss.exe
() C:\Program Files\Razer\DeathAdder\razerhid.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files\Razer\DeathAdder\razertra.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Razer Inc.) C:\Program Files\Razer\DeathAdder\razerofa.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Microsoft Corporation) C:\Windows\System32\wbengine.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [WLSS] - C:\Program Files\Program DJ\Wireless Switch\wlss.exe [882032 2009-08-12] (Compal Electronics, Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [DeathAdder] - C:\Program Files\Razer\DeathAdder\razerhid.exe [251392 2010-05-05] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2416368 2013-02-25] (Synaptics Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [IDMan] - C:\Program Files\Internet Download Manager\IDMan.exe [3265944 2011-02-01] (Tonec Inc.)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5717272 2013-11-05] (SUPERAntiSpyware)
AppInit_DLLs: C:\Program Files\Prio\prio.dll [ 2012-11-08] (O&K Software)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.msn.com/?ocid=U220DHP&pc=U220
BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-07] (SuperAdBlocker.com)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 172.16.200.5 172.16.205.2

FireFox:
========
FF ProfilePath: C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default
FF Homepage: chrome://speeddial/content/speeddial.xul
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @videolan.org/vlc,version=1.1.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: United States English Spellchecker - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\en-US@dictionaries.addons.mozilla.org
FF Extension: IDM CC - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\mozilla_cc@internetdownloadmanager.com
FF Extension: New Tab Homepage - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{66E978CD-981F-47DF-AC42-E3CF417C1467}
FF Extension: WOT - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: historybutton - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\historybutton@darktrojan.net.xpi
FF Extension: movableAppButton - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\movableAppButton@Merci.chao.xpi
FF Extension: tineye - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\tineye@ideeinc.com.xpi
FF Extension: SmoothWheel - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{5F590AA2-1221-4113-A6F4-A4BB62414FAC}.xpi
FF Extension: speeddial - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
FF Extension: noscript - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: FXChrome - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{c0c588b6-b11d-4898-af00-079fed05aa32}.xpi
FF Extension: Adblock Plus - C:\Users\$\AppData\Roaming\Mozilla\Firefox\Profiles\ny1c8zor.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\
FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\
FF HKCU\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\$\AppData\Roaming\IDM\idmmzcc3
FF Extension: IDM CC - C:\Users\$\AppData\Roaming\IDM\idmmzcc3
FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\$\AppData\Roaming\IDM\idmmzcc3
FF Extension: IDM CC - C:\Users\$\AppData\Roaming\IDM\idmmzcc3

========================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
S3 Connectify; C:\Program Files\Connectify\ConnectifyService.exe [487936 2013-09-24] (Connectify)
R2 DualView Server; C:\Program Files\Program DJ\Dualview Server\dualviewsvc.exe [126976 2009-08-20] ()
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14573856 2013-08-27] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2012-12-06] ()
R2 prio_svc; C:\Program Files\Prio\prio_svc.exe [12656 2012-11-08] ()
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
R2 Smart Watchdog; C:\Program Files\Program DJ\Smart Watchdog\SWDsvc.exe [208896 2009-08-26] ()
S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2011-03-19] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [1043784 2010-01-19] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R1 Amfilter; C:\Windows\System32\DRIVERS\Amfilter.sys [8704 2007-01-24] (A4Tech Co.,Ltd.)
S3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbprt.sys [14336 2007-12-25] (A4Tech Co.,Ltd.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 cnnctfy3; C:\Windows\System32\DRIVERS\cnnctfy3.sys [29672 2013-09-25] (Connectify)
S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2009-12-18] ()
R3 DAdderFltr; C:\Windows\System32\drivers\dadder.sys [9728 2010-04-19] (Razer (Asia-Pacific) Pte Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [232512 2012-04-21] (DT Soft Ltd)
R3 DualViewFilter; C:\Windows\System32\Drivers\DualViewFilter.sys [22016 2009-06-11] ()
R0 EMSC; C:\Windows\System32\DRIVERS\EMSC.SYS [13680 2009-06-26] (Windows (R) Win 7 DDK provider)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14216 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [8456 2011-07-29] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7087616 2011-01-19] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [33568 2013-08-20] (NVIDIA Corporation)
R1 prio; C:\Windows\System32\drivers\prio.sys [54128 2012-11-08] (Xeno)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 speedfan; C:\Windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [443448 2011-11-03] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-28] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [10064 2009-10-14] (TuneUp Software)
R3 vHidDev; C:\Windows\System32\DRIVERS\vHidDev.sys [5760 2009-12-21] (Windows (R) Win 7 DDK provider)
S3 WinRing0_1_2_0; C:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys [14416 2012-11-13] (OpenLibSys.org)
U3 auyxxzqm; C:\Windows\System32\Drivers\auyxxzqm.sys [0 ] (JMicron Technology Corporation)
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-05 19:16 - 2013-12-05 19:16 - 01405939 _____ (Farbar) C:\Users\$\Desktop\FRST.exe
2013-12-05 00:26 - 2013-12-05 00:26 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-12-04 21:57 - 2013-12-04 21:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 21:57 - 2013-12-04 21:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-04 21:57 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-04 18:47 - 2013-12-04 18:47 - 00024829 _____ C:\Users\$\Desktop\GMER.txt
2013-12-04 18:20 - 2013-12-05 19:20 - 00014278 _____ C:\Users\$\Desktop\FRST.txt
2013-12-04 18:20 - 2013-12-04 18:20 - 00000000 ____D C:\FRST
2013-12-04 18:03 - 2013-12-04 18:03 - 00377856 _____ C:\Users\$\Desktop\ddliu8b5.exe
2013-12-04 17:54 - 2013-12-04 18:20 - 00078888 _____ C:\Users\$\Desktop\SUPERAntiSpyware Quick Scan.Txt
2013-12-04 17:40 - 2013-12-04 17:40 - 00891200 _____ C:\Users\$\Desktop\SecurityCheck.exe
2013-12-04 17:39 - 2013-12-04 17:39 - 00017550 _____ C:\Users\$\Desktop\dds.txt
2013-12-04 17:39 - 2013-12-04 17:39 - 00007098 _____ C:\Users\$\Desktop\attach.txt
2013-12-04 17:38 - 2013-12-04 17:38 - 00688992 ____R (Swearware) C:\Users\$\Desktop\dds.com
2013-12-04 17:37 - 2013-12-04 17:52 - 00001376 _____ C:\Users\$\Desktop\SUPERAntiSpyware Scan.log
2013-12-04 17:28 - 2013-12-04 17:28 - 00096088 _____ C:\Users\$\Desktop\Extras.Txt
2013-12-04 17:26 - 2013-12-04 17:26 - 00127456 _____ C:\Users\$\Desktop\OTL.Txt
2013-12-04 17:16 - 2013-12-04 17:16 - 00602112 _____ (OldTimer Tools) C:\Users\$\Desktop\OTL.exe
2013-12-04 16:45 - 2013-12-04 15:35 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\$\Desktop\tdsskiller.exe
2013-12-04 15:47 - 2013-12-04 15:47 - 00001974 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2013-12-04 15:47 - 2013-12-04 15:47 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2013-12-04 15:47 - 2013-12-04 15:47 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-12-04 15:22 - 2013-12-04 15:22 - 00000000 ____D C:\Program Files\AuthenTec
2013-12-04 15:22 - 2012-08-23 15:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-12-04 15:22 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-12-04 15:22 - 2012-08-23 15:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-12-04 15:22 - 2012-08-23 15:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-12-04 15:22 - 2012-08-23 15:10 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-12-04 15:22 - 2012-08-23 14:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-12-04 15:22 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-12-04 15:22 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-12-04 15:22 - 2012-08-23 14:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-12-04 15:22 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-12-04 15:22 - 2012-08-23 12:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-12-04 15:22 - 2012-08-23 12:32 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-12-04 15:22 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-12-04 15:22 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-12-04 15:22 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-12-04 15:22 - 2012-08-23 11:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-12-04 15:22 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-12-04 01:55 - 2013-12-05 00:26 - 00014308 _____ C:\Windows\IE11_main.log
2013-12-03 17:35 - 2013-12-04 22:17 - 00038839 _____ C:\Users\$\Desktop\badania wstępne.xlsx
2013-12-02 16:01 - 2013-12-03 16:05 - 00011933 _____ C:\Users\$\Desktop\inżynierka.xlsx
2013-11-26 08:19 - 2013-10-12 08:04 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:19 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 08:19 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 08:19 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 08:19 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 08:19 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-25 19:40 - 2013-11-25 19:41 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-25 19:13 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-25 19:13 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-25 19:13 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-25 19:13 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-25 19:13 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-25 19:13 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-25 19:13 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-25 19:13 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-25 19:13 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-25 19:13 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-25 19:13 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-25 19:13 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-25 19:13 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-25 19:13 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-25 19:09 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-25 19:08 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-25 19:08 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-25 19:08 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

==================== One Month Modified Files and Folders =======

2013-12-05 19:21 - 2013-12-04 18:20 - 00014278 _____ C:\Users\$\Desktop\FRST.txt
2013-12-05 19:17 - 2012-10-01 23:56 - 00000000 ____D C:\ProgramData\PMB Files
2013-12-05 19:17 - 2011-03-09 18:27 - 01305172 _____ C:\Windows\WindowsUpdate.log
2013-12-05 19:16 - 2013-12-05 19:16 - 01405939 _____ (Farbar) C:\Users\$\Desktop\FRST.exe
2013-12-05 18:23 - 2012-10-17 12:12 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-05 18:08 - 2011-03-09 18:30 - 00006248 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-05 18:08 - 2009-07-14 09:07 - 04631356 _____ C:\Windows\system32\perfh015.dat
2013-12-05 18:08 - 2009-07-14 09:07 - 01513788 _____ C:\Windows\system32\perfc015.dat
2013-12-05 18:06 - 2013-02-28 12:36 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-05 08:50 - 2013-10-11 12:26 - 00000000 ____D C:\Windows\rescache
2013-12-05 00:39 - 2009-07-14 05:34 - 00015168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-05 00:39 - 2009-07-14 05:34 - 00015168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-05 00:33 - 2013-05-13 00:00 - 00029828 _____ C:\Windows\setupact.log
2013-12-05 00:33 - 2011-10-03 11:06 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-12-05 00:33 - 2011-05-18 00:19 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-05 00:33 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-05 00:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pl-PL
2013-12-05 00:26 - 2013-12-05 00:26 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-12-05 00:26 - 2013-12-04 01:55 - 00014308 _____ C:\Windows\IE11_main.log
2013-12-04 23:59 - 2011-03-10 10:38 - 00259614 _____ C:\Windows\PFRO.log
2013-12-04 23:59 - 2009-07-14 09:07 - 00000000 ____D C:\Windows\pl-PL
2013-12-04 22:41 - 2013-05-17 21:06 - 00000000 ____D C:\Users\$\Desktop\inżynierka
2013-12-04 22:36 - 2012-09-21 13:40 - 00000000 ____D C:\ProgramData\DatacardService
2013-12-04 22:36 - 2012-09-21 13:40 - 00000000 ____D C:\Program Files\PLAY ONLINE
2013-12-04 22:17 - 2013-12-03 17:35 - 00038839 _____ C:\Users\$\Desktop\badania wstępne.xlsx
2013-12-04 21:57 - 2013-12-04 21:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 21:57 - 2013-12-04 21:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-04 18:47 - 2013-12-04 18:47 - 00024829 _____ C:\Users\$\Desktop\GMER.txt
2013-12-04 18:20 - 2013-12-04 18:20 - 00000000 ____D C:\FRST
2013-12-04 18:20 - 2013-12-04 17:54 - 00078888 _____ C:\Users\$\Desktop\SUPERAntiSpyware Quick Scan.Txt
2013-12-04 18:03 - 2013-12-04 18:03 - 00377856 _____ C:\Users\$\Desktop\ddliu8b5.exe
2013-12-04 17:52 - 2013-12-04 17:37 - 00001376 _____ C:\Users\$\Desktop\SUPERAntiSpyware Scan.log
2013-12-04 17:40 - 2013-12-04 17:40 - 00891200 _____ C:\Users\$\Desktop\SecurityCheck.exe
2013-12-04 17:39 - 2013-12-04 17:39 - 00017550 _____ C:\Users\$\Desktop\dds.txt
2013-12-04 17:39 - 2013-12-04 17:39 - 00007098 _____ C:\Users\$\Desktop\attach.txt
2013-12-04 17:38 - 2013-12-04 17:38 - 00688992 ____R (Swearware) C:\Users\$\Desktop\dds.com
2013-12-04 17:28 - 2013-12-04 17:28 - 00096088 _____ C:\Users\$\Desktop\Extras.Txt
2013-12-04 17:26 - 2013-12-04 17:26 - 00127456 _____ C:\Users\$\Desktop\OTL.Txt
2013-12-04 17:16 - 2013-12-04 17:16 - 00602112 _____ (OldTimer Tools) C:\Users\$\Desktop\OTL.exe
2013-12-04 16:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-04 15:47 - 2013-12-04 15:47 - 00001974 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2013-12-04 15:47 - 2013-12-04 15:47 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2013-12-04 15:47 - 2013-12-04 15:47 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-12-04 15:35 - 2013-12-04 16:45 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\$\Desktop\tdsskiller.exe
2013-12-04 15:22 - 2013-12-04 15:22 - 00000000 ____D C:\Program Files\AuthenTec
2013-12-04 15:22 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-12-04 14:29 - 2011-05-06 17:27 - 00014172 _____ C:\Windows\IE9_main.log
2013-12-04 12:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2013-12-03 16:05 - 2013-12-02 16:01 - 00011933 _____ C:\Users\$\Desktop\inżynierka.xlsx
2013-12-01 14:47 - 2013-09-27 19:10 - 00000000 ____D C:\Program Files\SpeedFan
2013-11-27 14:30 - 2012-06-10 17:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-11-27 14:30 - 2011-11-29 14:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-11-26 08:44 - 2013-06-24 00:35 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-26 08:22 - 2011-03-10 17:12 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-26 08:19 - 2013-08-16 07:45 - 00000000 ____D C:\Windows\system32\MRT
2013-11-26 08:11 - 2011-03-09 19:20 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-25 21:58 - 2013-02-28 12:36 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-25 19:41 - 2013-11-25 19:40 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-11 05:50 - 2011-03-09 19:04 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-02 08:06

==================== End Of Log ============================