Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-12-2013 Ran by Łukasz (administrator) on ŁUKASZ-KOMPUTER on 18-12-2013 10:12:12 Running from C:\Users\Łukasz\Downloads Microsoft Windows 7 Ultimate (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe () C:\Program Files\ATKGFNEX\GFNEXSrv.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\audiodg.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10029672 2011-03-28] (Realtek Semiconductor) HKLM\...\Run: [HControlUser] - C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [738496 2013-10-18] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387294360&from=cor&uid=ST9500325AS_5VE9JK2SXXXX5VE9JK2S&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387294360&from=cor&uid=ST9500325AS_5VE9JK2SXXXX5VE9JK2S&q={searchTerms} BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 78.28.0.17 158.75.33.142 Chrome: ======= CHR DefaultSearchKeyword: google.pl CHR DefaultSearchProvider: Google CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding} CHR Extension: (Google Wallet) - C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1 ========================== Services (Whitelisted) ================= R2 ASLDRService; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [84536 2009-06-15] (ASUS) R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-07] () R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14573856 2013-08-27] (NVIDIA Corporation) ==================== Drivers (Whitelisted) ==================== R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] () R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [33568 2013-08-20] (NVIDIA Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-18 10:12 - 2013-12-18 10:12 - 00007515 _____ C:\Users\Łukasz\Downloads\FRST.txt 2013-12-18 10:11 - 2013-12-18 10:11 - 00000000 ____D C:\FRST 2013-12-18 10:10 - 2013-12-18 10:10 - 01062023 _____ (Farbar) C:\Users\Łukasz\Downloads\FRST.exe 2013-12-17 16:38 - 2013-12-17 16:38 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\AVG 2013-12-17 16:36 - 2013-12-17 16:38 - 00000000 ____D C:\ProgramData\AVG 2013-12-17 16:36 - 2013-12-17 16:36 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2013-12-17 16:36 - 2013-12-17 16:36 - 00000000 ____D C:\Users\Łukasz\AppData\Local\FreemakeVideoConverter 2013-12-17 16:35 - 2013-12-17 20:40 - 00000000 ____D C:\ProgramData\Freemake 2013-12-17 16:35 - 2013-12-17 16:37 - 00000000 ____D C:\Users\Łukasz\Documents\Freemake 2013-12-17 16:35 - 2013-12-17 16:35 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\OpenCandy 2013-12-17 16:33 - 2013-12-17 18:03 - 00000000 ____D C:\Program Files\BrowseSmart 2013-12-17 16:33 - 2013-12-17 16:37 - 00000000 ____D C:\ProgramData\WPM 2013-12-17 16:33 - 2013-12-17 16:34 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Mobogenie 2013-12-17 16:33 - 2013-12-17 16:33 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie 2013-12-17 16:33 - 2013-12-17 16:33 - 00000000 ____D C:\Users\wangzhisong 2013-12-17 16:33 - 2013-12-17 16:33 - 00000000 ____D C:\Users\Łukasz\AppData\Local\cache 2013-12-17 16:33 - 2013-12-17 16:33 - 00000000 _____ C:\Users\Łukasz\daemonprocess.txt 2013-12-17 16:32 - 2013-12-17 16:37 - 00000000 ____D C:\Program Files\Mobogenie 2013-12-17 16:32 - 2013-12-17 16:36 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\aartemis 2013-12-17 16:03 - 2013-12-17 16:09 - 419381612 _____ C:\Users\Łukasz\Downloads\Wokół futbolu - Okolofutbola 2013.PLSUBBED.BRRip.XviD-GHW.rmvb 2013-12-16 14:25 - 2013-12-16 14:25 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Chromium 2013-12-16 14:19 - 2013-12-16 14:19 - 00000000 ____D C:\Users\ťukasz 2013-12-16 14:19 - 2013-12-16 14:19 - 00000000 ____D C:\Users\Public\Documents\Sports Interactive 2013-12-16 14:19 - 2013-12-16 14:19 - 00000000 ____D C:\Users\Łukasz\Documents\Sports Interactive 2013-12-16 14:19 - 2013-12-16 14:19 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Sports Interactive 2013-12-16 14:19 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2013-12-16 14:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2013-12-16 14:19 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2013-12-16 14:19 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2013-12-16 14:19 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2013-12-16 14:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2013-12-16 14:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2013-12-16 14:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2013-12-16 14:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2013-12-16 14:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2013-12-16 14:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2013-12-16 14:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2013-12-16 14:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2013-12-16 14:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2013-12-16 14:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2013-12-16 14:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2013-12-16 14:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2013-12-16 14:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2013-12-16 14:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2013-12-16 14:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2013-12-16 14:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2013-12-16 14:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2013-12-16 14:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2013-12-16 14:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2013-12-16 14:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2013-12-16 14:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2013-12-16 14:19 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2013-12-16 14:19 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2013-12-16 14:19 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2013-12-16 14:19 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2013-12-16 14:19 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2013-12-16 14:19 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2013-12-16 14:19 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2013-12-16 14:19 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2013-12-16 14:19 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2013-12-16 14:19 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2013-12-16 14:19 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2013-12-16 14:19 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2013-12-16 14:19 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2013-12-16 14:19 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2013-12-16 14:19 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2013-12-16 14:19 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2013-12-16 14:19 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2013-12-16 14:19 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2013-12-16 14:19 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2013-12-16 14:19 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2013-12-16 14:19 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2013-12-16 14:19 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2013-12-16 14:19 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2013-12-16 14:19 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2013-12-16 14:19 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2013-12-16 14:19 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2013-12-16 14:19 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2013-12-16 14:19 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2013-12-16 14:19 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2013-12-16 14:19 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2013-12-16 14:19 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2013-12-16 14:19 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2013-12-16 14:19 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2013-12-16 14:19 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2013-12-16 14:19 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2013-12-16 14:19 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2013-12-16 14:19 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2013-12-16 14:19 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2013-12-16 14:19 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2013-12-16 14:19 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2013-12-16 14:19 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2013-12-16 14:19 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2013-12-16 14:19 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2013-12-16 14:19 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2013-12-16 14:19 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2013-12-16 14:19 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2013-12-16 14:19 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2013-12-16 14:19 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2013-12-16 14:19 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2013-12-16 14:19 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2013-12-16 14:19 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2013-12-16 14:19 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2013-12-16 14:19 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2013-12-16 14:19 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2013-12-16 14:19 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2013-12-16 14:19 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2013-12-16 14:19 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2013-12-16 14:19 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2013-12-16 14:19 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2013-12-16 14:19 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2013-12-16 14:19 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2013-12-16 14:19 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2013-12-16 14:19 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2013-12-16 14:19 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2013-12-16 14:19 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2013-12-07 11:43 - 2013-12-16 15:20 - 00001984 _____ C:\Users\Public\Desktop\Adobe Reader 9.lnk 2013-12-07 11:43 - 2013-12-07 11:43 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\Adobe 2013-12-07 11:43 - 2013-12-07 11:43 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Adobe 2013-12-07 11:43 - 2013-12-07 11:43 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-12-07 11:43 - 2013-12-07 11:43 - 00000000 ____D C:\Program Files\Adobe 2013-12-07 11:37 - 2013-12-07 11:44 - 00000000 ____D C:\ProgramData\Adobe 2013-12-02 23:02 - 2013-12-02 23:02 - 00000000 ____D C:\Users\Łukasz\Downloads\WOS 2013-12-02 21:57 - 2013-12-02 21:57 - 03555065 _____ C:\Users\Łukasz\Downloads\KURWY.zip 2013-11-26 12:33 - 2013-11-26 12:33 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software 2013-11-26 12:33 - 2013-11-26 12:33 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software 2013-11-20 20:31 - 2013-11-20 20:31 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\Media Player Classic 2013-11-18 22:01 - 2013-11-18 19:15 - 00000000 ____D C:\Users\Łukasz\Downloads\sprawdzian 2013-11-18 21:59 - 2013-11-14 19:12 - 00000000 ____D C:\Users\Łukasz\Downloads\Funkcje 2013-11-18 21:43 - 2013-11-18 21:43 - 03869990 _____ C:\Users\Łukasz\Downloads\mata spr.rar 2013-11-18 21:30 - 2013-11-18 21:30 - 02839446 _____ C:\Users\Łukasz\Downloads\zadaniazmatematyki.zip 2013-11-18 21:29 - 2013-11-18 21:29 - 03633464 _____ C:\Users\Łukasz\Downloads\skanymatma.zip ==================== One Month Modified Files and Folders ======= 2013-12-18 10:12 - 2013-12-18 10:12 - 00007515 _____ C:\Users\Łukasz\Downloads\FRST.txt 2013-12-18 10:11 - 2013-12-18 10:11 - 00000000 ____D C:\FRST 2013-12-18 10:10 - 2013-12-18 10:10 - 01062023 _____ (Farbar) C:\Users\Łukasz\Downloads\FRST.exe 2013-12-18 10:04 - 2013-10-19 07:24 - 01661232 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-18 10:04 - 2009-07-14 09:07 - 00737604 _____ C:\Windows\system32\perfh015.dat 2013-12-18 10:04 - 2009-07-14 09:07 - 00154260 _____ C:\Windows\system32\perfc015.dat 2013-12-18 10:03 - 2013-10-19 07:17 - 01080399 _____ C:\Windows\WindowsUpdate.log 2013-12-18 09:59 - 2013-10-19 09:02 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-18 09:59 - 2013-10-19 08:30 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-18 09:59 - 2013-10-19 07:31 - 00003110 _____ C:\Windows\PFRO.log 2013-12-18 09:59 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-18 09:59 - 2009-07-14 05:39 - 00048710 _____ C:\Windows\setupact.log 2013-12-18 09:58 - 2009-07-14 05:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-18 09:58 - 2009-07-14 05:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-18 09:54 - 2013-10-19 08:23 - 00000000 ____D C:\ProgramData\MFAData 2013-12-18 09:45 - 2013-10-19 08:30 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-17 22:09 - 2013-10-19 08:51 - 00000000 ____D C:\Program Files\Steam 2013-12-17 20:40 - 2013-12-17 16:35 - 00000000 ____D C:\ProgramData\Freemake 2013-12-17 18:03 - 2013-12-17 16:33 - 00000000 ____D C:\Program Files\BrowseSmart 2013-12-17 16:40 - 2013-10-19 21:09 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\NVIDIA 2013-12-17 16:38 - 2013-12-17 16:38 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\AVG 2013-12-17 16:38 - 2013-12-17 16:36 - 00000000 ____D C:\ProgramData\AVG 2013-12-17 16:37 - 2013-12-17 16:35 - 00000000 ____D C:\Users\Łukasz\Documents\Freemake 2013-12-17 16:37 - 2013-12-17 16:33 - 00000000 ____D C:\ProgramData\WPM 2013-12-17 16:37 - 2013-12-17 16:32 - 00000000 ____D C:\Program Files\Mobogenie 2013-12-17 16:36 - 2013-12-17 16:36 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2013-12-17 16:36 - 2013-12-17 16:36 - 00000000 ____D C:\Users\Łukasz\AppData\Local\FreemakeVideoConverter 2013-12-17 16:36 - 2013-12-17 16:32 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\aartemis 2013-12-17 16:36 - 2013-10-19 08:30 - 00002135 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-12-17 16:35 - 2013-12-17 16:35 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\OpenCandy 2013-12-17 16:34 - 2013-12-17 16:33 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Mobogenie 2013-12-17 16:33 - 2013-12-17 16:33 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie 2013-12-17 16:33 - 2013-12-17 16:33 - 00000000 ____D C:\Users\wangzhisong 2013-12-17 16:33 - 2013-12-17 16:33 - 00000000 ____D C:\Users\Łukasz\AppData\Local\cache 2013-12-17 16:33 - 2013-12-17 16:33 - 00000000 _____ C:\Users\Łukasz\daemonprocess.txt 2013-12-17 16:33 - 2013-10-19 07:20 - 00000000 ____D C:\Users\Łukasz 2013-12-17 16:09 - 2013-12-17 16:03 - 419381612 _____ C:\Users\Łukasz\Downloads\Wokół futbolu - Okolofutbola 2013.PLSUBBED.BRRip.XviD-GHW.rmvb 2013-12-16 15:20 - 2013-12-07 11:43 - 00001984 _____ C:\Users\Public\Desktop\Adobe Reader 9.lnk 2013-12-16 15:18 - 2009-07-14 05:53 - 00032590 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-16 14:25 - 2013-12-16 14:25 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Chromium 2013-12-16 14:19 - 2013-12-16 14:19 - 00000000 ____D C:\Users\ťukasz 2013-12-16 14:19 - 2013-12-16 14:19 - 00000000 ____D C:\Users\Public\Documents\Sports Interactive 2013-12-16 14:19 - 2013-12-16 14:19 - 00000000 ____D C:\Users\Łukasz\Documents\Sports Interactive 2013-12-16 14:19 - 2013-12-16 14:19 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Sports Interactive 2013-12-16 14:19 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-12-07 11:44 - 2013-12-07 11:37 - 00000000 ____D C:\ProgramData\Adobe 2013-12-07 11:43 - 2013-12-07 11:43 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\Adobe 2013-12-07 11:43 - 2013-12-07 11:43 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Adobe 2013-12-07 11:43 - 2013-12-07 11:43 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-12-07 11:43 - 2013-12-07 11:43 - 00000000 ____D C:\Program Files\Adobe 2013-12-02 23:02 - 2013-12-02 23:02 - 00000000 ____D C:\Users\Łukasz\Downloads\WOS 2013-12-02 21:57 - 2013-12-02 21:57 - 03555065 _____ C:\Users\Łukasz\Downloads\KURWY.zip 2013-11-26 12:33 - 2013-11-26 12:33 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software 2013-11-26 12:33 - 2013-11-26 12:33 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software 2013-11-26 12:33 - 2013-10-19 08:25 - 00000965 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2013-11-20 20:31 - 2013-11-20 20:31 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\Media Player Classic 2013-11-18 21:43 - 2013-11-18 21:43 - 03869990 _____ C:\Users\Łukasz\Downloads\mata spr.rar 2013-11-18 21:30 - 2013-11-18 21:30 - 02839446 _____ C:\Users\Łukasz\Downloads\zadaniazmatematyki.zip 2013-11-18 21:29 - 2013-11-18 21:29 - 03633464 _____ C:\Users\Łukasz\Downloads\skanymatma.zip 2013-11-18 19:15 - 2013-11-18 22:01 - 00000000 ____D C:\Users\Łukasz\Downloads\sprawdzian Some content of TEMP: ==================== C:\Users\Łukasz\AppData\Local\Temp\SRLDetectionLibrary428007876435623540.dll C:\Users\Łukasz\AppData\Local\Temp\_isEAF.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-10 23:25 ==================== End Of Log ============================