Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2013 02 Ran by Adam (administrator) on ADAM-KOMPUTER on 17-12-2013 20:30:29 Running from C:\Users\Adam\Desktop\skanery Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Advanced Micro Devices, Inc.) D:\ATI.ACE\Fuel\Fuel.Service.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe () C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe () C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (ASUS) C:\Windows\AsScrPro.exe (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe () C:\Program Files (x86)\ATI Technologies\HydraVision\HydraGrd.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\Grid64.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 4\Integrator.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\HSSCP.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe (Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.) HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-11] () HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-08-30] (AMD) HKCU\...\Run: [Raptr] - C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2013-11-06] (Raptr, Inc) HKCU\...\Run: [Grid] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraGrd.exe [401408 2013-08-30] () HKCU\...\Run: [GUDelayStartup] - C:\Program Files (x86)\Glary Utilities 4\StartupManager.exe [37152 2013-11-19] (Glarysoft Ltd) HKCU\...\Run: [BackgroundContainer] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Adam\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-24] (AVAST Software) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) BootExecute: autocheck autochk * ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&CUI=UN35630368772843622&UM=1&ctid=CT1561552 HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com URLSearchHook: HKLM-x32 - Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files (x86)\Hotspot_Shield\prxtbHots.dll (Conduit Ltd.) URLSearchHook: HKCU - Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files (x86)\Hotspot_Shield\prxtbHots.dll (Conduit Ltd.) SearchScopes: HKLM-x32 - DefaultScope {BE0BBBB4-35ED-481B-889E-EA570502907B} URL = SearchScopes: HKCU - DefaultScope {BE0BBBB4-35ED-481B-889E-EA570502907B} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=UN35630368772843622&UM=1 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {BE0BBBB4-35ED-481B-889E-EA570502907B} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=UN35630368772843622&UM=1 BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files (x86)\Hotspot_Shield\prxtbHots.dll (Conduit Ltd.) BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files (x86)\Hotspot_Shield\prxtbHots.dll (Conduit Ltd.) Toolbar: HKCU - No Name - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} - No File DPF: HKLM-x32 {00BC5049-C7F3-4AC9-92AE-1991C76608B0} http://weblogin.talesrunner.com.hk/TRLauncher.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\rkr5jux3.default FF DefaultSearchEngine: Hotspot Shield Customized Web Search FF SelectedSearchEngine: Hotspot Shield Customized Web Search FF Homepage: hxxp://search.conduit.com/?ctid=CT1561552&CUI=UN42087662722265227&UM=1&SearchSource=13 FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1561552&SearchSource=2&CUI=UN42087662722265227&UM=1&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll No File FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Adam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\rkr5jux3.default\searchplugins\conduit.xml FF Extension: Hotspot Shield - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\rkr5jux3.default\Extensions\{c95a4e8e-816d-4655-8c79-d736da1adb6d} FF Extension: fdm_ffext - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\rkr5jux3.default\Extensions\fdm_ffext@freedownloadmanager.org FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afext@anchorfree.com FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF Chrome: ======= CHR HomePage: hxxp://www.google.pl/ CHR RestoreOnStartup: "hxxp://google.pl/" CHR DefaultSearchKeyword: google.pl CHR DefaultSearchProvider: Google CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR Extension: (Magic Actions for YouTube\u2122) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif\6.7.0_0 CHR Extension: (Google Docs) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1 CHR Extension: (Google Drive) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1 CHR Extension: (Google Search) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1 CHR Extension: (Mario kart 1280x800) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhhiddcdcikeinpmaonckilelgcpgpeb\1_0 CHR Extension: (Give Up) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\diippoclinjdbklinhchgedilfncehbi\1.0.0_0 CHR Extension: (*Split Screen*) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\eachfleknamlcepmplpdghagngjfjkin\0.45_0 CHR Extension: (Collusion for Chrome) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp\2.2.0_0 CHR Extension: (Cut the Rope) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkddaofiamhgfjmaccfcfpfolpgbeomj\16_0 CHR Extension: (Note Board) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\goficmpcgcnombioohjcgdhbaloknabb\6.0.0.0_0 CHR Extension: (avast! Online Security) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0 CHR Extension: (Stop & Hide \u2192 Instant Escape from Angry Boss) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilokdhmdlnaoiaagjjljbegopnmopgnm\1.0.0.19_0 CHR Extension: (Skype Click to Call) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0 CHR Extension: (QR Image from URL) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioihlfoddilijjjeknopfcbglallkce\1.2_0 CHR Extension: (Google Wallet) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; D:\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-07] (Advanced Micro Devices, Inc.) S4 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-02-17] (ASUS) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-24] (AVAST Software) R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [906024 2013-11-02] (AnchorFree Inc.) S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-11-02] () R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [555304 2013-11-02] () R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.) S4 MsgPlusService; C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [125952 2013-01-23] (Yuna Software) S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group) S4 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2011-11-29] (Atheros) ==================== Drivers (Whitelisted) ==================== R3 AiCharger; C:\Windows\SysWow64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.) R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [31872 2012-02-01] (Advanced Micro Devices, Inc.) R2 AODDriver4.2.0; D:\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices) R3 AsusVBus; C:\Windows\System32\DRIVERS\AsusVBus.sys [35968 2011-12-21] (Windows (R) Win 7 DDK provider) R3 AsusVTouch; C:\Windows\System32\DRIVERS\AsusVTouch.sys [16512 2011-11-08] (Windows (R) Win 7 DDK provider) R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-24] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-24] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-24] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-24] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-24] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-24] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-24] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-24] () R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-04-19] (BlueStack Systems) S3 CEDRIVER60; C:\Program Files (x86)\Cheat Engine 6.2\dbk64.sys [62752 2012-06-26] () R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2013-11-02] (AnchorFree Inc.) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R3 MsgPlusDriver; C:\Windows\System32\DRIVERS\MsgPlusDriver.sys [102160 2012-07-23] (Yune Software) S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] () R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-09-19] (TuneUp Software) S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-15 17:13 - 2013-12-15 17:13 - 00000000 ____D C:\Users\Adam\AppData\Local\Blizzard 2013-12-14 22:20 - 2013-12-14 22:20 - 00000017 _____ C:\Windows\SysWOW64\shortcut_ex.dat 2013-12-14 19:46 - 2013-12-14 19:46 - 00000000 ____D C:\Users\Adam\AppData\Local\{CD694E56-C947-4247-BEC6-2405138E8B18} 2013-12-14 19:20 - 2013-12-15 17:14 - 00000000 ___DC C:\Program Files (x86)\Hearthstone 2013-12-14 19:20 - 2013-12-14 19:20 - 00001189 _____ C:\Users\Public\Desktop\Hearthstone.lnk 2013-12-14 19:14 - 2013-12-17 09:41 - 00000000 ____D C:\Users\Adam\AppData\Local\Battle.net 2013-12-14 19:14 - 2013-12-14 19:18 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Battle.net 2013-12-14 19:14 - 2013-12-14 19:14 - 00001152 _____ C:\Users\Public\Desktop\Battle.net.lnk 2013-12-14 19:14 - 2013-12-14 19:14 - 00000000 ____D C:\Users\Adam\AppData\Local\Blizzard Entertainment 2013-12-14 19:13 - 2013-12-14 19:14 - 00000000 ___DC C:\ProgramData\Blizzard Entertainment 2013-12-14 19:13 - 2013-12-14 19:14 - 00000000 ___DC C:\Program Files (x86)\Battle.net 2013-12-14 19:05 - 2013-12-14 19:05 - 00000000 ___DC C:\ProgramData\Battle.net 2013-12-14 19:02 - 2013-12-14 19:04 - 05933240 _____ (Blizzard Entertainment) C:\Users\Adam\Downloads\Hearthstone-Beta-Setup-plPL.exe 2013-12-14 19:01 - 2013-12-14 19:01 - 01449592 _____ C:\Users\Adam\Downloads\SystemCheck_plPL.exe 2013-12-14 17:53 - 2013-12-14 17:53 - 00001247 _____ C:\Users\Adam\Desktop\Neverwinter.lnk 2013-12-14 17:53 - 2013-12-14 17:53 - 00000000 ____D C:\Users\Public\Games 2013-12-14 17:53 - 2013-12-14 17:53 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-14 17:52 - 2013-12-14 17:53 - 03798712 _____ (Cryptic Studios) C:\Users\Adam\Downloads\neverwinter_setup.exe 2013-12-13 17:58 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-13 17:58 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-13 17:58 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-13 17:58 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-13 17:57 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-13 17:57 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-13 17:57 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-13 17:57 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-13 17:57 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-13 17:57 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-13 17:57 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-13 17:57 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-13 17:57 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-13 17:57 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-13 17:57 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-13 17:57 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-13 17:57 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-13 17:57 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-13 17:57 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-13 17:57 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-13 17:57 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-13 17:57 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-13 17:56 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-13 17:56 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-13 17:56 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-13 17:56 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-13 17:56 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-13 17:56 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-13 17:56 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-13 17:56 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-13 17:56 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-13 17:56 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-13 17:56 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-13 17:56 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-13 17:56 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-13 16:11 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-13 16:11 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-13 16:11 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-13 16:11 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-13 16:11 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-13 16:11 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-13 16:11 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-13 16:11 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-13 16:11 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-13 16:11 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-13 16:11 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-13 16:11 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-13 16:11 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-13 16:11 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-13 16:11 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-13 16:11 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-13 16:11 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-13 16:11 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-13 16:11 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-10 16:17 - 2013-09-13 23:57 - 09251143 _____ C:\Users\Adam\Desktop\Superbrothers Sword & Sworcery v1.0.15 apkpmania.com.apk 2013-12-10 16:17 - 2013-09-13 23:55 - 00000000 ____D C:\Users\Adam\Desktop\com.capybaragames.sworcery 2013-12-10 15:53 - 2013-12-10 16:05 - 170448083 _____ C:\Users\Adam\Downloads\Superbrothers Sword & Sworcery v1.0.15 apkpmania.com.rar 2013-12-07 22:42 - 2013-12-07 22:42 - 00005860 _____ C:\Users\Adam\Downloads\[www.tnt24.info] Max and the Magic Marker v1.04.torrent 2013-12-07 22:41 - 2013-12-07 22:41 - 00013919 _____ C:\Users\Adam\Downloads\[www.tnt24.info] Max And The Magic Marker RIP.torrent 2013-12-07 18:41 - 2013-12-07 19:48 - 01986560 _____ C:\Users\Adam\Desktop\praca na wos3.ppt 2013-12-06 22:43 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-06 22:38 - 2013-12-06 22:38 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-06 22:38 - 2013-12-06 22:38 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-06 22:38 - 2013-12-06 22:38 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-06 22:38 - 2013-12-06 22:38 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-06 22:38 - 2013-12-06 22:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-06 22:38 - 2013-12-06 22:38 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-06 22:38 - 2013-12-06 22:38 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-06 22:35 - 2013-12-06 22:43 - 00011663 _____ C:\Windows\IE11_main.log 2013-12-06 20:47 - 2013-12-07 16:07 - 01095680 _____ C:\Users\Adam\Desktop\praca na wos.ppt 2013-12-06 19:36 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-12-06 19:36 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-12-06 19:36 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-12-06 19:36 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-12-06 19:36 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-12-06 19:36 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-12-06 19:36 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-12-06 19:36 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-12-06 19:36 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-12-06 19:36 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-12-06 19:36 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-12-06 19:36 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-12-06 19:36 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-12-06 19:36 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-12-06 19:36 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-12-06 19:36 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-12-06 19:36 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-12-06 19:36 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-12-06 19:36 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-12-06 19:36 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-12-06 19:36 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-12-06 19:36 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-12-06 19:36 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-12-06 19:36 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-12-06 19:35 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-12-06 19:35 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-12-06 19:35 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-12-06 19:35 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-12-06 19:35 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-12-06 19:35 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-12-06 19:35 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-12-06 19:35 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-12-06 19:35 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-12-06 19:35 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-12-06 19:35 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-12-06 19:35 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-12-06 19:35 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-12-06 19:35 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-12-06 19:35 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-12-06 19:35 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-12-06 19:35 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-12-06 19:35 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-12-06 19:35 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-12-06 19:35 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-12-06 19:35 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-12-06 19:35 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-12-06 19:35 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-12-06 19:35 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-12-06 19:35 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-12-06 19:35 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-12-06 19:35 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-12-06 19:35 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-12-06 19:35 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-12-06 19:35 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-12-06 19:35 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-12-06 17:54 - 2013-12-06 20:45 - 00613603 _____ C:\Users\Adam\Desktop\Bez tytułu 1.odp 2013-12-06 16:38 - 2013-12-06 16:39 - 00413944 _____ (Company #1) C:\Users\Adam\Downloads\Revolution Engine 8.3.exe 2013-12-06 15:19 - 2013-12-06 15:19 - 00000000 ____D C:\Users\Adam\AppData\Local\Macromedia 2013-12-05 16:57 - 2013-12-17 08:31 - 00007840 _____ C:\Windows\PFRO.log 2013-12-05 10:31 - 2013-12-05 10:43 - 00000000 ___DC C:\ProgramData\SystemExplorer 2013-12-05 10:31 - 2013-12-05 10:31 - 01978640 _____ (Mister Group ) C:\Users\Adam\Downloads\SystemExplorerSetup_450 (1).exe 2013-12-05 10:31 - 2013-12-05 10:31 - 00001092 _____ C:\Users\Public\Desktop\System Explorer.lnk 2013-12-05 10:31 - 2013-12-05 10:31 - 00000000 ___DC C:\Program Files (x86)\System Explorer 2013-12-05 10:30 - 2013-12-05 10:31 - 01978640 _____ (Mister Group ) C:\Users\Adam\Downloads\SystemExplorerSetup_450.exe 2013-12-04 16:19 - 2013-12-05 16:08 - 00000000 ___DC C:\Program Files (x86)\LogMeIn Hamachi 2013-12-01 16:33 - 2013-12-01 16:33 - 00000000 ____D C:\Windows\SysWOW64\Hotspot Shield 2013-12-01 11:59 - 2013-11-02 00:31 - 00044744 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys 2013-11-30 22:46 - 2013-12-01 12:00 - 00001050 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk 2013-11-30 22:46 - 2013-11-30 22:46 - 00003364 _____ C:\Windows\System32\Tasks\BackgroundContainer Startup Task 2013-11-30 22:46 - 2013-11-30 22:46 - 00000000 ___DC C:\ProgramData\Conduit 2013-11-30 22:46 - 2013-11-30 22:46 - 00000000 ___DC C:\Program Files (x86)\Hotspot_Shield 2013-11-30 22:46 - 2013-11-30 22:46 - 00000000 ___DC C:\Program Files (x86)\Conduit 2013-11-30 22:46 - 2013-11-30 22:46 - 00000000 ____D C:\Users\Adam\AppData\Local\Conduit 2013-11-30 22:45 - 2013-11-30 22:46 - 00000009 ____C C:\END 2013-11-30 22:44 - 2013-11-30 22:44 - 00000000 ___DC C:\ProgramData\Hotspot Shield 2013-11-30 22:43 - 2013-12-05 16:08 - 00000000 ___DC C:\Program Files (x86)\Hotspot Shield 2013-11-30 22:43 - 2013-11-30 22:43 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Hotspot Shield 2013-11-30 22:41 - 2013-11-30 22:42 - 07750920 _____ C:\Users\Adam\Downloads\HSS-3-19-install-hss-596-conduit.exe 2013-11-28 15:34 - 2013-12-17 20:16 - 00002744 _____ C:\Windows\setupact.log 2013-11-28 15:34 - 2013-11-28 15:34 - 00000000 _____ C:\Windows\setuperr.log 2013-11-27 15:44 - 2013-11-27 15:45 - 00365453 _____ C:\Users\Adam\Desktop\AnalysisLog.sr0 2013-11-27 15:39 - 2013-12-17 20:18 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize 4.job 2013-11-27 15:39 - 2013-12-17 20:18 - 00000000 ___DC C:\Program Files (x86)\Glary Utilities 4 2013-11-27 15:39 - 2013-11-27 15:39 - 00002630 _____ C:\Windows\System32\Tasks\GlaryInitialize 4 2013-11-27 15:39 - 2013-11-27 15:39 - 00001086 _____ C:\Users\Public\Desktop\Glary Utilities 4.lnk 2013-11-27 15:39 - 2013-11-27 15:39 - 00000000 ___DC C:\ProgramData\GlarySoft 2013-11-27 15:37 - 2013-11-27 15:38 - 12240688 _____ C:\Users\Adam\Downloads\Glary_Utilities_v4.0.0.53.exe 2013-11-26 15:14 - 2013-11-26 15:14 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-26 15:04 - 2013-11-26 15:04 - 04733592 _____ (AVAST Software) C:\Users\Adam\Downloads\avast_free_antivirus_setup_online.exe 2013-11-26 14:54 - 2013-11-26 14:54 - 00000000 ____D C:\Users\Adam\AppData\Roaming\AVAST Software 2013-11-24 18:13 - 2013-10-31 07:46 - 00131232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFW.sys ==================== One Month Modified Files and Folders ======= 2013-12-17 20:31 - 2012-12-11 19:05 - 00000000 ____D C:\Users\Adam\AppData\Local\PMB Files 2013-12-17 20:30 - 2013-09-14 13:25 - 00000000 ____D C:\Users\Adam\Desktop\skanery 2013-12-17 20:30 - 2013-09-02 13:45 - 00000000 ___DC C:\FRST 2013-12-17 20:25 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-17 20:25 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-17 20:23 - 2012-04-27 12:05 - 01731677 _____ C:\Windows\WindowsUpdate.log 2013-12-17 20:19 - 2013-11-08 21:43 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Raptr 2013-12-17 20:18 - 2013-11-27 15:39 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize 4.job 2013-12-17 20:18 - 2013-11-27 15:39 - 00000000 ___DC C:\Program Files (x86)\Glary Utilities 4 2013-12-17 20:18 - 2013-02-20 20:25 - 00000000 ____D C:\Users\Adam\AppData\Local\LogMeIn Hamachi 2013-12-17 20:17 - 2013-11-04 19:35 - 00000380 _____ C:\Users\Adam\AppData\Roaming\sp_data.sys 2013-12-17 20:17 - 2013-03-29 14:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-12-17 20:16 - 2013-11-28 15:34 - 00002744 _____ C:\Windows\setupact.log 2013-12-17 20:16 - 2012-11-21 16:42 - 00000095 _____ C:\Users\Adam\.accessibility.properties 2013-12-17 20:16 - 2012-11-10 10:30 - 00000000 ____D C:\Users\Adam 2013-12-17 20:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-17 09:41 - 2013-12-14 19:14 - 00000000 ____D C:\Users\Adam\AppData\Local\Battle.net 2013-12-17 09:32 - 2012-11-11 19:26 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Skype 2013-12-17 08:32 - 2013-07-03 16:57 - 00015406 ____C C:\autoupdate.log 2013-12-17 08:31 - 2013-12-05 16:57 - 00007840 _____ C:\Windows\PFRO.log 2013-12-15 17:14 - 2013-12-14 19:20 - 00000000 ___DC C:\Program Files (x86)\Hearthstone 2013-12-15 17:13 - 2013-12-15 17:13 - 00000000 ____D C:\Users\Adam\AppData\Local\Blizzard 2013-12-15 12:43 - 2013-08-29 14:02 - 00000000 ____D C:\Windows\system32\MRT 2013-12-15 12:40 - 2013-08-29 14:02 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-15 09:52 - 2013-09-24 13:15 - 00000000 ____D C:\Windows\rescache 2013-12-14 22:20 - 2013-12-14 22:20 - 00000017 _____ C:\Windows\SysWOW64\shortcut_ex.dat 2013-12-14 19:46 - 2013-12-14 19:46 - 00000000 ____D C:\Users\Adam\AppData\Local\{CD694E56-C947-4247-BEC6-2405138E8B18} 2013-12-14 19:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-14 19:20 - 2013-12-14 19:20 - 00001189 _____ C:\Users\Public\Desktop\Hearthstone.lnk 2013-12-14 19:18 - 2013-12-14 19:14 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Battle.net 2013-12-14 19:14 - 2013-12-14 19:14 - 00001152 _____ C:\Users\Public\Desktop\Battle.net.lnk 2013-12-14 19:14 - 2013-12-14 19:14 - 00000000 ____D C:\Users\Adam\AppData\Local\Blizzard Entertainment 2013-12-14 19:14 - 2013-12-14 19:13 - 00000000 ___DC C:\ProgramData\Blizzard Entertainment 2013-12-14 19:14 - 2013-12-14 19:13 - 00000000 ___DC C:\Program Files (x86)\Battle.net 2013-12-14 19:05 - 2013-12-14 19:05 - 00000000 ___DC C:\ProgramData\Battle.net 2013-12-14 19:04 - 2013-12-14 19:02 - 05933240 _____ (Blizzard Entertainment) C:\Users\Adam\Downloads\Hearthstone-Beta-Setup-plPL.exe 2013-12-14 19:01 - 2013-12-14 19:01 - 01449592 _____ C:\Users\Adam\Downloads\SystemCheck_plPL.exe 2013-12-14 18:52 - 2013-02-21 12:12 - 00000000 ___DC C:\Program Files (x86)\Talesrunner 2013-12-14 17:53 - 2013-12-14 17:53 - 00001247 _____ C:\Users\Adam\Desktop\Neverwinter.lnk 2013-12-14 17:53 - 2013-12-14 17:53 - 00000000 ____D C:\Users\Public\Games 2013-12-14 17:53 - 2013-12-14 17:53 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-14 17:53 - 2013-12-14 17:52 - 03798712 _____ (Cryptic Studios) C:\Users\Adam\Downloads\neverwinter_setup.exe 2013-12-13 19:28 - 2011-02-19 06:31 - 00741124 _____ C:\Windows\system32\perfh015.dat 2013-12-13 19:28 - 2011-02-19 06:31 - 00156408 _____ C:\Windows\system32\perfc015.dat 2013-12-13 19:28 - 2009-07-14 06:13 - 01672070 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-13 19:22 - 2009-07-14 05:45 - 00314112 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-10 16:05 - 2013-12-10 15:53 - 170448083 _____ C:\Users\Adam\Downloads\Superbrothers Sword & Sworcery v1.0.15 apkpmania.com.rar 2013-12-07 22:46 - 2013-07-08 13:03 - 00000000 ____D C:\Users\Adam\AppData\Roaming\BitTorrent 2013-12-07 22:42 - 2013-12-07 22:42 - 00005860 _____ C:\Users\Adam\Downloads\[www.tnt24.info] Max and the Magic Marker v1.04.torrent 2013-12-07 22:41 - 2013-12-07 22:41 - 00013919 _____ C:\Users\Adam\Downloads\[www.tnt24.info] Max And The Magic Marker RIP.torrent 2013-12-07 20:11 - 2013-11-15 17:33 - 00001120 _____ C:\Users\Adam\Desktop\GIMP 2.lnk 2013-12-07 20:11 - 2013-11-09 20:21 - 00001634 _____ C:\Users\Adam\Desktop\amd_catalyst_13.11_betav9.2 — skrót.lnk 2013-12-07 19:48 - 2013-12-07 18:41 - 01986560 _____ C:\Users\Adam\Desktop\praca na wos3.ppt 2013-12-07 16:07 - 2013-12-06 20:47 - 01095680 _____ C:\Users\Adam\Desktop\praca na wos.ppt 2013-12-07 14:16 - 2013-03-02 13:51 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Free Download Manager 2013-12-07 14:14 - 2012-11-10 11:17 - 00000000 ____D C:\Users\Adam\AppData\Local\CrashDumps 2013-12-07 13:56 - 2009-07-14 06:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-07 13:50 - 2012-11-10 10:32 - 00001331 _____ C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-07 13:50 - 2009-07-29 07:03 - 00000000 ____D C:\Windows\Panther 2013-12-07 13:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-06 22:43 - 2013-12-06 22:35 - 00011663 _____ C:\Windows\IE11_main.log 2013-12-06 22:38 - 2013-12-06 22:38 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-06 22:38 - 2013-12-06 22:38 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-06 22:38 - 2013-12-06 22:38 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-06 22:38 - 2013-12-06 22:38 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-06 22:38 - 2013-12-06 22:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-06 22:38 - 2013-12-06 22:38 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-06 22:38 - 2013-12-06 22:38 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-06 22:38 - 2013-12-06 22:38 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-06 22:38 - 2013-12-06 22:38 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-06 22:33 - 2012-02-24 12:39 - 01644676 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-06 20:45 - 2013-12-06 17:54 - 00613603 _____ C:\Users\Adam\Desktop\Bez tytułu 1.odp 2013-12-06 16:39 - 2013-12-06 16:38 - 00413944 _____ (Company #1) C:\Users\Adam\Downloads\Revolution Engine 8.3.exe 2013-12-06 15:19 - 2013-12-06 15:19 - 00000000 ____D C:\Users\Adam\AppData\Local\Macromedia 2013-12-05 16:08 - 2013-12-04 16:19 - 00000000 ___DC C:\Program Files (x86)\LogMeIn Hamachi 2013-12-05 16:08 - 2013-11-30 22:43 - 00000000 ___DC C:\Program Files (x86)\Hotspot Shield 2013-12-05 16:08 - 2013-11-08 21:43 - 00000000 ___DC C:\Program Files (x86)\Raptr 2013-12-05 16:00 - 2012-11-11 19:26 - 00000000 ____D C:\ProgramData\Skype 2013-12-05 15:59 - 2012-11-11 17:04 - 00000000 ____D C:\Users\Adam\AppData\Roaming\.minecraft 2013-12-05 15:52 - 2012-04-27 12:16 - 00002086 _____ C:\Windows\system32\ServiceFilter.ini 2013-12-05 10:43 - 2013-12-05 10:31 - 00000000 ___DC C:\ProgramData\SystemExplorer 2013-12-05 10:41 - 2012-12-05 18:36 - 00002950 _____ C:\Windows\System32\Tasks\{9B904FAA-0CCF-4B7F-93AE-BE8D492FAB5F} 2013-12-05 10:41 - 2012-12-01 15:20 - 00002950 _____ C:\Windows\System32\Tasks\{7EBDD3D2-A6AA-4FE4-A9FB-F2EBC9A273F2} 2013-12-05 10:31 - 2013-12-05 10:31 - 01978640 _____ (Mister Group ) C:\Users\Adam\Downloads\SystemExplorerSetup_450 (1).exe 2013-12-05 10:31 - 2013-12-05 10:31 - 00001092 _____ C:\Users\Public\Desktop\System Explorer.lnk 2013-12-05 10:31 - 2013-12-05 10:31 - 00000000 ___DC C:\Program Files (x86)\System Explorer 2013-12-05 10:31 - 2013-12-05 10:30 - 01978640 _____ (Mister Group ) C:\Users\Adam\Downloads\SystemExplorerSetup_450.exe 2013-12-01 16:33 - 2013-12-01 16:33 - 00000000 ____D C:\Windows\SysWOW64\Hotspot Shield 2013-12-01 12:00 - 2013-11-30 22:46 - 00001050 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk 2013-11-30 22:46 - 2013-11-30 22:46 - 00003364 _____ C:\Windows\System32\Tasks\BackgroundContainer Startup Task 2013-11-30 22:46 - 2013-11-30 22:46 - 00000000 ___DC C:\ProgramData\Conduit 2013-11-30 22:46 - 2013-11-30 22:46 - 00000000 ___DC C:\Program Files (x86)\Hotspot_Shield 2013-11-30 22:46 - 2013-11-30 22:46 - 00000000 ___DC C:\Program Files (x86)\Conduit 2013-11-30 22:46 - 2013-11-30 22:46 - 00000000 ____D C:\Users\Adam\AppData\Local\Conduit 2013-11-30 22:46 - 2013-11-30 22:45 - 00000009 ____C C:\END 2013-11-30 22:44 - 2013-11-30 22:44 - 00000000 ___DC C:\ProgramData\Hotspot Shield 2013-11-30 22:43 - 2013-11-30 22:43 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Hotspot Shield 2013-11-30 22:42 - 2013-11-30 22:41 - 07750920 _____ C:\Users\Adam\Downloads\HSS-3-19-install-hss-596-conduit.exe 2013-11-30 22:41 - 2013-07-05 13:13 - 00007648 _____ C:\Users\Adam\AppData\Local\Resmon.ResmonCfg 2013-11-28 17:40 - 2013-07-02 08:38 - 00000000 ____D C:\Users\Adam\AppData\Roaming\.minecraftzyczu 2013-11-28 15:35 - 2012-04-27 12:16 - 00002544 _____ C:\Windows\system32\AutoRunFilter.ini 2013-11-28 15:34 - 2013-11-28 15:34 - 00000000 _____ C:\Windows\setuperr.log 2013-11-27 15:45 - 2013-11-27 15:44 - 00365453 _____ C:\Users\Adam\Desktop\AnalysisLog.sr0 2013-11-27 15:39 - 2013-11-27 15:39 - 00002630 _____ C:\Windows\System32\Tasks\GlaryInitialize 4 2013-11-27 15:39 - 2013-11-27 15:39 - 00001086 _____ C:\Users\Public\Desktop\Glary Utilities 4.lnk 2013-11-27 15:39 - 2013-11-27 15:39 - 00000000 ___DC C:\ProgramData\GlarySoft 2013-11-27 15:39 - 2013-11-15 20:26 - 00000000 ____D C:\Users\Adam\AppData\Roaming\GlarySoft 2013-11-27 15:38 - 2013-11-27 15:37 - 12240688 _____ C:\Users\Adam\Downloads\Glary_Utilities_v4.0.0.53.exe 2013-11-27 15:36 - 2012-11-11 19:26 - 00000000 __RDC C:\Program Files (x86)\Skype 2013-11-26 16:00 - 2013-10-23 17:00 - 00000213 _____ C:\Users\Adam\Downloads\raymanlegends_dvt_trainer.rar 2013-11-26 15:14 - 2013-11-26 15:14 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-26 15:04 - 2013-11-26 15:04 - 04733592 _____ (AVAST Software) C:\Users\Adam\Downloads\avast_free_antivirus_setup_online.exe 2013-11-26 14:54 - 2013-11-26 14:54 - 00000000 ____D C:\Users\Adam\AppData\Roaming\AVAST Software 2013-11-26 12:54 - 2013-12-13 17:57 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 11:19 - 2013-12-13 17:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 11:18 - 2013-12-13 17:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 11:11 - 2013-12-13 17:56 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 10:48 - 2013-12-13 17:57 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 10:46 - 2013-12-13 17:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 10:41 - 2013-12-13 17:56 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 10:29 - 2013-12-13 17:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 10:27 - 2013-12-13 17:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 10:23 - 2013-12-13 17:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 10:21 - 2013-12-13 17:57 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 10:18 - 2013-12-13 17:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 10:18 - 2013-12-13 17:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 10:16 - 2013-12-13 17:57 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:57 - 2013-12-13 17:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 09:38 - 2013-12-13 17:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 09:38 - 2013-12-13 17:56 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 09:35 - 2013-12-13 17:56 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:32 - 2013-12-13 17:57 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 09:28 - 2013-12-13 17:57 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 09:16 - 2013-12-13 17:56 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 09:02 - 2013-12-13 17:56 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:48 - 2013-12-13 17:56 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 08:32 - 2013-12-13 17:56 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 08:26 - 2013-12-13 17:56 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 08:07 - 2013-12-13 17:56 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:40 - 2013-12-13 17:56 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 07:34 - 2013-12-13 17:57 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:34 - 2013-12-13 17:57 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 07:33 - 2013-12-13 17:56 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 07:27 - 2013-12-13 17:56 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-24 18:26 - 2013-09-14 21:12 - 00447888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2013-11-24 18:26 - 2013-03-29 14:47 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-11-24 18:26 - 2013-03-29 14:47 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-11-24 18:26 - 2013-03-29 14:47 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-11-24 18:26 - 2013-03-29 14:47 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-11-24 18:26 - 2013-03-29 14:47 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-11-24 18:26 - 2013-03-29 14:47 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-11-24 18:26 - 2013-03-29 14:47 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-11-24 18:26 - 2013-03-29 14:47 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-11-24 18:26 - 2013-03-29 14:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-24 18:26 - 2013-03-29 14:47 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-11-24 18:14 - 2013-03-29 14:43 - 00000000 ___DC C:\ProgramData\AVAST Software 2013-11-24 18:13 - 2013-03-29 14:47 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-11-23 19:26 - 2013-12-13 16:11 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-11-23 18:47 - 2013-12-13 16:11 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-19 03:33 - 2013-04-07 19:28 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-10 19:33 ==================== End Of Log ============================