Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2013 01 Ran by Madzia (administrator) on MADZIA-VAIO on 17-12-2013 13:53:40 Running from C:\Users\Madzia\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Play\Volume Panel\VolPanlu.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11106408 2012-01-11] (Realtek Semiconductor) HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) MountPoints2: {92ab1981-dae6-11df-9710-00264370ad09} - G:\_AUTORUN\AUTORUN.EXE HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-11-20] (Nullsoft, Inc.) HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster Play\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3568312 2013-12-17] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [20131121] - C:\Program Files\Alwil Software\Avast5\Setup\emupdate\be594912-f706-4ba5-a693-6e4f04118611.exe [180184 2013-11-23] (AVAST Software) HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=FADC0022FBCA3EC7&affID=119357&tsp=4952 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=SVEA&bmod=EU01 SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FADC0022FBCA3EC7&affID=119357&tsp=4952 SearchScopes: HKCU - {31DFB111-64D2-4197-9FB0-1F6669B40606} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=8DFA5D28-753A-4DA5-A8C0-188BF647D6D7&apn_sauid=63CCAC93-A279-43B2-B486-06B80044AF90 SearchScopes: HKCU - {37659CDE-EB9A-435A-ABD9-58628316CC4F} URL = http://rover.ebay.com/rover/1/710-42480-16445-5/4?satitle={searchTerms} SearchScopes: HKCU - {53C5AB4A-D69B-4D73-9370-D295A97C90EB} URL = http://services.zinio.com/search?s={selection}&rf=sonyslices SearchScopes: HKCU - {F77C7CB6-F66C-46AE-9336-3CE818015637} URL = http://www.google.co.uk/search?hl=en&q={searchTerms}&meta= BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) BHO-x32: Pomocnik rejestracji usługi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: IEPluginBHO Class - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{D8D83F79-9606-43A3-B20E-A9897771CE87}: [NameServer]168.95.1.1 FireFox: ======== FF ProfilePath: C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default FF user.js: detected! => C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default\searchplugins\delta.xml FF Extension: FoxyProxy Basic - C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default\Extensions\foxyproxy@eric.h.jung FF Extension: Screengrab - C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default\Extensions\{02450954-cdd9-410f-b1da-db804e18c671} FF Extension: No Name - C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default\Extensions\{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}.xpi FF Extension: Adblock Plus - C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\1de6um8o.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF Chrome: ======= CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=FADC0022FBCA3EC7&affID=119357&tsp=4952 CHR RestoreOnStartup: "hxxp://85.128.74.216/admin" CHR DefaultSearchKeyword: google.pl CHR DefaultSearchProvider: Google CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Skype Toolbars) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll (Skype Technologies S.A.) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Microsoft Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll No File CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\SysWOW64\npdeployJava1.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Extension: (Google Docs) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Skype Click to Call) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0 CHR Extension: (Google Wallet) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Madzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2013-12-17] (AVAST Software) R2 yksvc; C:\Windows\System32\yk62x64.dll [382976 2009-07-31] (Marvell) S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [x] S3 aspnet_state; %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [x] ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-12-17] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-12-17] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-21] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-21] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-12-17] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-08] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-12-17] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-21] () S3 OAfilt; C:\Windows\System32\drivers\OAfilt.sys [27136 2010-03-09] (Creative Technology Ltd.) S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [128000 2009-09-19] (MCCI Corporation) S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x] S3 Prot6Flt; system32\DRIVERS\Prot6Flt.sys [x] S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-17 13:53 - 2013-12-17 13:53 - 00017873 _____ C:\Users\Madzia\Downloads\FRST.txt 2013-12-17 13:52 - 2013-12-17 13:52 - 01928078 _____ (Farbar) C:\Users\Madzia\Downloads\FRST64.exe 2013-12-17 13:42 - 2013-12-17 13:42 - 00129248 _____ C:\Users\Madzia\Downloads\Extras.Txt 2013-12-17 13:40 - 2013-12-17 13:40 - 00148774 _____ C:\Users\Madzia\Downloads\OTL.Txt 2013-12-17 12:40 - 2013-12-17 12:40 - 00623224 _____ (Duplex Secure Ltd.) C:\Users\Madzia\Downloads\SPTDinst-v186-x64.exe 2013-12-13 03:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-13 03:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-13 03:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-13 03:05 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-13 03:02 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-13 03:02 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-13 03:02 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-13 03:02 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-13 03:02 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-13 03:02 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-13 03:02 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-13 03:02 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-13 03:02 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-13 03:02 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-13 03:02 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-13 03:02 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-13 03:02 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-13 03:02 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-13 03:02 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-13 03:02 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-13 03:02 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-13 03:02 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-13 03:02 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-13 03:02 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-13 03:02 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-13 03:02 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-13 03:02 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-13 03:02 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-13 03:02 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-13 03:02 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-13 03:02 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-13 03:02 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-13 03:02 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-13 03:02 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-13 03:02 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-12 03:14 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-12 03:14 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-12 03:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-12 03:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-12 03:14 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-12 03:14 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-12 03:14 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-12 03:09 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-12 03:09 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-12 03:09 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-12 03:09 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-12 03:08 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-12 03:08 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-12 03:08 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-12 03:08 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-12 03:08 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-12 03:08 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-12 03:08 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-12 03:08 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-09 04:13 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-09 04:08 - 2013-12-09 04:08 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-09 04:08 - 2013-12-09 04:08 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-09 04:08 - 2013-12-09 04:08 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-09 04:08 - 2013-12-09 04:08 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-09 04:08 - 2013-12-09 04:08 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-09 04:08 - 2013-12-09 04:08 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-09 04:08 - 2013-12-09 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-04 15:37 - 2013-12-04 15:37 - 05323936 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S06_04.12.zip 2013-12-04 15:36 - 2013-12-04 15:36 - 02223960 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K17_04.12.zip 2013-12-04 15:35 - 2013-12-04 15:35 - 02018633 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K16_04.12.zip 2013-12-04 15:34 - 2013-12-04 15:34 - 05998642 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S05_04.12.zip 2013-12-04 15:33 - 2013-12-04 15:33 - 02017873 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K15_04.12.zip 2013-12-04 15:31 - 2013-12-04 15:31 - 02018655 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K14_04.12.zip 2013-12-04 15:30 - 2013-12-04 15:30 - 02018832 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K13_04.12.zip 2013-12-04 15:29 - 2013-12-04 15:29 - 05185530 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S04_04.12.zip 2013-12-04 15:27 - 2013-12-04 15:27 - 02072537 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K12_04.12.zip 2013-12-04 15:26 - 2013-12-04 15:26 - 02019110 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K11_04.12.zip 2013-12-04 15:25 - 2013-12-04 15:25 - 02018717 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K10_04.12.zip 2013-12-04 15:24 - 2013-12-04 15:24 - 05317570 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S03_04.12.zip 2013-12-04 15:23 - 2013-12-04 15:23 - 02018312 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K09_04.12.zip 2013-12-04 15:22 - 2013-12-04 15:22 - 02018403 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K08_04.12.zip 2013-12-04 15:21 - 2013-12-04 15:21 - 02073347 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K07_04.12.zip 2013-12-04 15:19 - 2013-12-04 15:19 - 05600781 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S02_04.12.zip 2013-12-04 15:18 - 2013-12-04 15:18 - 02019314 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K06_04.12.zip 2013-12-04 15:17 - 2013-12-04 15:17 - 02019014 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K05_04.12.zip 2013-12-04 15:16 - 2013-12-04 15:16 - 02018216 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K04_04.12.zip 2013-12-04 15:14 - 2013-12-04 15:14 - 05621439 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S01_04.12.zip 2013-12-04 15:13 - 2013-12-04 15:13 - 02018296 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K03_04.12.zip 2013-12-04 15:12 - 2013-12-04 15:12 - 02018980 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K02_04.12.zip 2013-12-04 15:11 - 2013-12-04 15:11 - 02019142 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K01_04.12.zip 2013-12-04 15:10 - 2013-12-04 15:10 - 02281579 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L17_04.12.zip 2013-12-04 15:09 - 2013-12-04 15:09 - 02060821 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L16_04.12.zip 2013-12-04 15:08 - 2013-12-04 15:08 - 02080752 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L15_04.12.zip 2013-12-04 15:05 - 2013-12-04 15:05 - 02028270 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L14_04.12.zip 2013-12-04 15:04 - 2013-12-04 15:04 - 02075257 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L13_04.12.zip 2013-12-04 15:01 - 2013-12-04 15:01 - 02481876 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L12_04.12.zip 2013-12-04 14:59 - 2013-12-04 15:00 - 02031705 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L11_04.12.zip 2013-12-04 14:58 - 2013-12-04 14:58 - 04360008 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L10_04.12.zip 2013-12-04 14:57 - 2013-12-04 14:57 - 02067361 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L09_04.12.zip 2013-12-04 14:56 - 2013-12-04 14:56 - 02160816 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L08_04.12.zip 2013-12-04 14:55 - 2013-12-04 14:55 - 02067867 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L07_04.12.zip 2013-12-04 14:53 - 2013-12-04 14:53 - 02043718 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L06_04.12.zip 2013-12-04 14:52 - 2013-12-04 14:52 - 02030696 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L05_04.12.zip 2013-12-04 14:51 - 2013-12-04 14:51 - 02075354 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L04_04.12.zip 2013-12-04 14:50 - 2013-12-04 14:50 - 02053716 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L03_04.12.zip 2013-12-04 14:49 - 2013-12-04 14:49 - 02029356 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L02_04.12.zip 2013-12-04 14:48 - 2013-12-04 14:48 - 02041494 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L01_04.12.zip 2013-12-04 13:33 - 2013-12-04 13:33 - 01015321 _____ C:\Users\Madzia\Desktop\katedra-gotycka-kolonia-hohenzzolernow-most.jpeg 2013-12-03 15:57 - 2013-12-09 04:13 - 00074945 _____ C:\Windows\IE11_main.log 2013-11-30 13:49 - 2013-11-30 19:27 - 00002737 _____ C:\Users\Public\Desktop\Nero Burning ROM 2014.lnk 2013-11-30 13:48 - 2013-11-30 13:49 - 00000000 ____D C:\Program Files (x86)\Nero 2013-11-30 13:38 - 2013-11-30 13:39 - 82684232 _____ (Nero AG) C:\Users\Madzia\Desktop\Nero_BurningRom2014-15.0.02800_3p_trial.exe 2013-11-30 13:36 - 2013-11-30 13:36 - 00401736 _____ (Softonic ) C:\Users\Madzia\Documents\SoftonicDownloader_dla_nero-burning-rom.exe 2013-11-30 13:31 - 2013-11-30 13:31 - 82680832 _____ (Nero AG) C:\Users\Madzia\Downloads\Nero_BurningROM2014-15.0.03600_trial.exe 2013-11-30 12:55 - 2013-11-30 13:35 - 00000000 ____D C:\Program Files (x86)\Mobogenie 2013-11-30 12:55 - 2013-11-30 13:14 - 00000000 ____D C:\Users\Madzia\AppData\Local\Mobogenie 2013-11-30 12:55 - 2013-11-30 12:56 - 00000205 _____ C:\Users\Madzia\daemonprocess.txt 2013-11-30 12:55 - 2013-11-30 12:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie 2013-11-30 12:55 - 2013-11-30 12:55 - 00000000 ____D C:\Users\wangzhisong 2013-11-30 12:55 - 2013-11-30 12:55 - 00000000 ____D C:\Users\Madzia\Documents\Mobogenie 2013-11-22 22:15 - 2013-11-22 22:15 - 12973360 _____ (Nullsoft, Inc.) C:\Users\Madzia\Documents\winamp566_full_pl-pl.exe 2013-11-20 19:29 - 2013-11-20 19:29 - 00602112 _____ (OldTimer Tools) C:\Users\Madzia\Downloads\OTL.exe 2013-11-20 19:29 - 2013-11-20 19:29 - 00602112 _____ (OldTimer Tools) C:\Users\Madzia\Downloads\OTL.com 2013-11-20 19:29 - 2013-11-20 19:29 - 00377856 _____ C:\Users\Madzia\Downloads\rx2mnjpo.exe 2013-11-20 19:29 - 2013-11-20 19:29 - 00000000 ____D C:\FRST ==================== One Month Modified Files and Folders ======= 2013-12-17 13:53 - 2013-12-17 13:53 - 00017873 _____ C:\Users\Madzia\Downloads\FRST.txt 2013-12-17 13:52 - 2013-12-17 13:52 - 01928078 _____ (Farbar) C:\Users\Madzia\Downloads\FRST64.exe 2013-12-17 13:42 - 2013-12-17 13:42 - 00129248 _____ C:\Users\Madzia\Downloads\Extras.Txt 2013-12-17 13:40 - 2013-12-17 13:40 - 00148774 _____ C:\Users\Madzia\Downloads\OTL.Txt 2013-12-17 13:20 - 2009-10-28 02:57 - 01434989 _____ C:\Windows\WindowsUpdate.log 2013-12-17 13:07 - 2013-02-05 02:42 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-17 13:00 - 2012-04-15 16:29 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-17 12:57 - 2009-10-28 03:30 - 00000000 ____D C:\Users\Madzia\AppData\Roaming\Winamp 2013-12-17 12:53 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-17 12:53 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-17 12:48 - 2013-02-05 02:42 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-17 12:45 - 2013-11-01 14:59 - 00032784 _____ C:\Windows\setupact.log 2013-12-17 12:45 - 2013-11-01 14:58 - 00002806 _____ C:\Windows\PFRO.log 2013-12-17 12:45 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-17 12:40 - 2013-12-17 12:40 - 00623224 _____ (Duplex Secure Ltd.) C:\Users\Madzia\Downloads\SPTDinst-v186-x64.exe 2013-12-17 12:06 - 2013-01-12 13:29 - 00003926 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-12-17 12:06 - 2011-05-17 21:07 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-12-17 12:06 - 2011-02-02 02:57 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-12-17 12:06 - 2011-02-02 02:57 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-12-17 12:06 - 2011-02-02 02:57 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-12-17 12:06 - 2011-02-02 02:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-12-17 12:06 - 2011-02-02 02:57 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-12-17 08:43 - 2009-10-27 20:06 - 00003982 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E319D058-C75C-4565-8A9B-EA33A9FA6A0C} 2013-12-17 00:42 - 2011-04-27 18:56 - 00000000 ___RD C:\Users\Madzia\Desktop\Pobrane 2013-12-16 18:23 - 2013-08-16 20:49 - 00000000 ___RD C:\Users\Madzia\Desktop\Kaytech 2013-12-15 21:32 - 2011-10-01 11:57 - 00000000 ___RD C:\Users\Madzia\Desktop\Studia 2013-12-15 15:03 - 2009-08-25 20:24 - 00707756 _____ C:\Windows\system32\perfh015.dat 2013-12-15 15:03 - 2009-08-25 20:24 - 00140738 _____ C:\Windows\system32\perfc015.dat 2013-12-15 15:03 - 2009-07-14 06:13 - 01578822 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-15 12:12 - 2013-07-23 12:04 - 00000000 ____D C:\Users\Madzia\AppData\Local\Paint.NET 2013-12-14 08:44 - 2013-08-14 02:02 - 00000000 ____D C:\Windows\system32\MRT 2013-12-14 08:41 - 2009-10-28 18:25 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-13 22:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-13 11:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-13 03:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-13 03:25 - 2009-07-14 05:45 - 03073080 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-13 03:05 - 2009-09-07 22:21 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-11 21:00 - 2012-04-15 16:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 21:00 - 2012-04-15 16:29 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-11 21:00 - 2011-05-17 13:08 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-09 13:21 - 2009-10-27 20:05 - 00001421 _____ C:\Users\Madzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-09 13:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-09 04:13 - 2013-12-03 15:57 - 00074945 _____ C:\Windows\IE11_main.log 2013-12-09 04:08 - 2013-12-09 04:08 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-09 04:08 - 2013-12-09 04:08 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-09 04:08 - 2013-12-09 04:08 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-09 04:08 - 2013-12-09 04:08 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-09 04:08 - 2013-12-09 04:08 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-09 04:08 - 2013-12-09 04:08 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-09 04:08 - 2013-12-09 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-09 04:08 - 2013-12-09 04:08 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-09 04:08 - 2013-12-09 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-04 15:37 - 2013-12-04 15:37 - 05323936 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S06_04.12.zip 2013-12-04 15:36 - 2013-12-04 15:36 - 02223960 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K17_04.12.zip 2013-12-04 15:35 - 2013-12-04 15:35 - 02018633 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K16_04.12.zip 2013-12-04 15:34 - 2013-12-04 15:34 - 05998642 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S05_04.12.zip 2013-12-04 15:33 - 2013-12-04 15:33 - 02017873 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K15_04.12.zip 2013-12-04 15:31 - 2013-12-04 15:31 - 02018655 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K14_04.12.zip 2013-12-04 15:30 - 2013-12-04 15:30 - 02018832 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K13_04.12.zip 2013-12-04 15:29 - 2013-12-04 15:29 - 05185530 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S04_04.12.zip 2013-12-04 15:27 - 2013-12-04 15:27 - 02072537 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K12_04.12.zip 2013-12-04 15:26 - 2013-12-04 15:26 - 02019110 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K11_04.12.zip 2013-12-04 15:25 - 2013-12-04 15:25 - 02018717 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K10_04.12.zip 2013-12-04 15:24 - 2013-12-04 15:24 - 05317570 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S03_04.12.zip 2013-12-04 15:23 - 2013-12-04 15:23 - 02018312 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K09_04.12.zip 2013-12-04 15:22 - 2013-12-04 15:22 - 02018403 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K08_04.12.zip 2013-12-04 15:21 - 2013-12-04 15:21 - 02073347 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K07_04.12.zip 2013-12-04 15:19 - 2013-12-04 15:19 - 05600781 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S02_04.12.zip 2013-12-04 15:18 - 2013-12-04 15:18 - 02019314 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K06_04.12.zip 2013-12-04 15:17 - 2013-12-04 15:17 - 02019014 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K05_04.12.zip 2013-12-04 15:16 - 2013-12-04 15:16 - 02018216 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K04_04.12.zip 2013-12-04 15:14 - 2013-12-04 15:14 - 05621439 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_S01_04.12.zip 2013-12-04 15:13 - 2013-12-04 15:13 - 02018296 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K03_04.12.zip 2013-12-04 15:12 - 2013-12-04 15:12 - 02018980 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K02_04.12.zip 2013-12-04 15:11 - 2013-12-04 15:11 - 02019142 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_K01_04.12.zip 2013-12-04 15:10 - 2013-12-04 15:10 - 02281579 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L17_04.12.zip 2013-12-04 15:09 - 2013-12-04 15:09 - 02060821 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L16_04.12.zip 2013-12-04 15:08 - 2013-12-04 15:08 - 02080752 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L15_04.12.zip 2013-12-04 15:05 - 2013-12-04 15:05 - 02028270 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L14_04.12.zip 2013-12-04 15:04 - 2013-12-04 15:04 - 02075257 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L13_04.12.zip 2013-12-04 15:01 - 2013-12-04 15:01 - 02481876 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L12_04.12.zip 2013-12-04 15:00 - 2013-12-04 14:59 - 02031705 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L11_04.12.zip 2013-12-04 14:58 - 2013-12-04 14:58 - 04360008 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L10_04.12.zip 2013-12-04 14:57 - 2013-12-04 14:57 - 02067361 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L09_04.12.zip 2013-12-04 14:56 - 2013-12-04 14:56 - 02160816 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L08_04.12.zip 2013-12-04 14:55 - 2013-12-04 14:55 - 02067867 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L07_04.12.zip 2013-12-04 14:53 - 2013-12-04 14:53 - 02043718 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L06_04.12.zip 2013-12-04 14:52 - 2013-12-04 14:52 - 02030696 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L05_04.12.zip 2013-12-04 14:51 - 2013-12-04 14:51 - 02075354 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L04_04.12.zip 2013-12-04 14:51 - 2010-08-14 19:46 - 00000000 ____D C:\Users\Madzia\AppData\Roaming\Skype 2013-12-04 14:50 - 2013-12-04 14:50 - 02053716 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L03_04.12.zip 2013-12-04 14:49 - 2013-12-04 14:49 - 02029356 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L02_04.12.zip 2013-12-04 14:48 - 2013-12-04 14:48 - 02041494 _____ C:\Users\Madzia\Downloads\NIEAK_3KP_L01_04.12.zip 2013-12-04 13:38 - 2012-12-03 14:22 - 00000000 ___RD C:\Users\Madzia\Desktop\WSiP 2013-12-04 13:33 - 2013-12-04 13:33 - 01015321 _____ C:\Users\Madzia\Desktop\katedra-gotycka-kolonia-hohenzzolernow-most.jpeg 2013-12-04 05:02 - 2013-02-05 02:42 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-04 05:02 - 2013-02-05 02:42 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-30 19:27 - 2013-11-30 13:49 - 00002737 _____ C:\Users\Public\Desktop\Nero Burning ROM 2014.lnk 2013-11-30 13:52 - 2011-11-19 18:06 - 00000000 ____D C:\Users\Madzia\AppData\Roaming\Nero 2013-11-30 13:49 - 2013-11-30 13:48 - 00000000 ____D C:\Program Files (x86)\Nero 2013-11-30 13:49 - 2011-11-19 18:04 - 00000000 ____D C:\ProgramData\Nero 2013-11-30 13:39 - 2013-11-30 13:38 - 82684232 _____ (Nero AG) C:\Users\Madzia\Desktop\Nero_BurningRom2014-15.0.02800_3p_trial.exe 2013-11-30 13:36 - 2013-11-30 13:36 - 00401736 _____ (Softonic ) C:\Users\Madzia\Documents\SoftonicDownloader_dla_nero-burning-rom.exe 2013-11-30 13:35 - 2013-11-30 12:55 - 00000000 ____D C:\Program Files (x86)\Mobogenie 2013-11-30 13:31 - 2013-11-30 13:31 - 82680832 _____ (Nero AG) C:\Users\Madzia\Downloads\Nero_BurningROM2014-15.0.03600_trial.exe 2013-11-30 13:25 - 2009-10-27 20:01 - 00000000 ____D C:\Users\Madzia\AppData\Roaming\Sony Corporation 2013-11-30 13:14 - 2013-11-30 12:55 - 00000000 ____D C:\Users\Madzia\AppData\Local\Mobogenie 2013-11-30 12:56 - 2013-11-30 12:55 - 00000205 _____ C:\Users\Madzia\daemonprocess.txt 2013-11-30 12:56 - 2009-11-01 14:12 - 00000000 ____D C:\Users\Madzia\AppData\Local\cache 2013-11-30 12:55 - 2013-11-30 12:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie 2013-11-30 12:55 - 2013-11-30 12:55 - 00000000 ____D C:\Users\wangzhisong 2013-11-30 12:55 - 2013-11-30 12:55 - 00000000 ____D C:\Users\Madzia\Documents\Mobogenie 2013-11-30 12:55 - 2009-10-27 20:01 - 00000000 ____D C:\Users\Madzia 2013-11-26 19:55 - 2009-10-28 03:30 - 00000000 ____D C:\Program Files (x86)\Winamp 2013-11-26 12:54 - 2013-12-13 03:02 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 11:19 - 2013-12-13 03:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 11:18 - 2013-12-13 03:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 11:11 - 2013-12-13 03:02 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 10:48 - 2013-12-13 03:02 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 10:46 - 2013-12-13 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 10:41 - 2013-12-13 03:02 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 10:29 - 2013-12-13 03:02 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 10:27 - 2013-12-13 03:02 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 10:23 - 2013-12-13 03:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 10:21 - 2013-12-13 03:02 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 10:18 - 2013-12-13 03:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 10:18 - 2013-12-13 03:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 10:16 - 2013-12-13 03:02 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:57 - 2013-12-13 03:02 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 09:38 - 2013-12-13 03:02 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 09:38 - 2013-12-13 03:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 09:35 - 2013-12-13 03:02 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:32 - 2013-12-13 03:02 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 09:28 - 2013-12-13 03:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 09:16 - 2013-12-13 03:02 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 09:02 - 2013-12-13 03:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:48 - 2013-12-13 03:02 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 08:32 - 2013-12-13 03:02 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 08:26 - 2013-12-13 03:02 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 08:07 - 2013-12-13 03:02 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:40 - 2013-12-13 03:02 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 07:34 - 2013-12-13 03:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:34 - 2013-12-13 03:02 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 07:33 - 2013-12-13 03:02 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 07:27 - 2013-12-13 03:02 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-23 19:26 - 2013-12-12 03:14 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-11-23 18:47 - 2013-12-12 03:14 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-22 22:15 - 2013-11-22 22:15 - 12973360 _____ (Nullsoft, Inc.) C:\Users\Madzia\Documents\winamp566_full_pl-pl.exe 2013-11-20 19:29 - 2013-11-20 19:29 - 00602112 _____ (OldTimer Tools) C:\Users\Madzia\Downloads\OTL.exe 2013-11-20 19:29 - 2013-11-20 19:29 - 00602112 _____ (OldTimer Tools) C:\Users\Madzia\Downloads\OTL.com 2013-11-20 19:29 - 2013-11-20 19:29 - 00377856 _____ C:\Users\Madzia\Downloads\rx2mnjpo.exe 2013-11-20 19:29 - 2013-11-20 19:29 - 00000000 ____D C:\FRST 2013-11-20 18:11 - 2011-09-06 15:45 - 00000000 ___RD C:\Users\Madzia\Desktop\Rachunki Files to move or delete: ==================== C:\ProgramData\nvUnsupRes.dat C:\Users\Madzia\setup.exe Some content of TEMP: ==================== C:\Users\Madzia\AppData\Local\Temp\dateinj01.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-10 03:02 ==================== End Of Log ============================