Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 Ran by Sebek (administrator) on SEBEK-KOMPUTER on 29-12-2013 15:47:41 Running from C:\Users\Sebek\Downloads\FRST Windows 7 Professional Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\System32\audiodg.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Hi-Rez Studios) E:\Smite\HiPatchService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (FNet Co., Ltd.) C:\Program Files (x86)\XFastUsb\XFastUsb.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe (Creative Technology Ltd) C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Macrovision Europe Ltd.) C:\Users\Sebek\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001 (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Creative Labs) C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RunDLLEntry] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-10-18] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2583040 2009-09-21] (VIA) HKLM-x32\...\Run: [XFastUsb] - C:\Program Files (x86)\XFastUsb\XFastUsb.exe [4942336 2013-10-18] (FNet Co., Ltd.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated) HKLM-x32\...\Run: [CTSyncService] - C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd) HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKCU\...\Run: [IDMan] - C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3821136 2013-11-24] (Tonec Inc.) HKCU\...\Run: [EADM] - E:\Origin\Origin.exe [3551576 2013-11-21] (Electronic Arts) HKCU\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3035968 2012-02-02] (DT Soft Ltd) HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation) ==================== Internet (Whitelisted) ==================== BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.) BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0 Chrome: ======= CHR HomePage: hxxp://www.google.pl/ig CHR RestoreOnStartup: "hxxp://www.google.pl/ig" CHR DefaultSearchKeyword: youtube.com CHR DefaultSearchProvider: Wyszukiwarka film\u00F3w w YouTube CHR DefaultSearchURL: http://www.youtube.com/results?search_query={searchTerms}&page={startPage?}&utm_source=opensearch CHR DefaultNewTabURL: CHR Extension: (Google Docs) - C:\Users\Sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0 CHR Extension: (Google Search) - C:\Users\Sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (IDM Integration Module) - C:\Users\Sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn\6.18.2_0 CHR Extension: (Google Wallet) - C:\Users\Sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (Gmail) - C:\Users\Sebek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM-x32\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx ==================== Services (Whitelisted) ================= R2 HiPatchService; E:\Smite\HiPatchService.exe [9216 2013-12-13] (Hi-Rez Studios) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation) ==================== Drivers (Whitelisted) ==================== R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-19] (DT Soft Ltd) S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [31808 2013-10-18] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [15936 2013-10-18] (FNet Co., Ltd.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2013-10-19] (Duplex Secure Ltd.) U3 afx3awi5; C:\Windows\System32\Drivers\afx3awi5.sys [0 ] (NVIDIA Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-29 15:21 - 2013-12-29 15:21 - 00000000 ____D C:\FRST 2013-12-29 15:20 - 2013-12-29 15:47 - 00000000 ____D C:\Users\Sebek\Downloads\FRST 2013-12-26 20:04 - 2013-12-29 14:49 - 00000573 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk 2013-12-25 21:23 - 2013-12-25 21:23 - 00000538 _____ C:\Users\Public\Desktop\Steam.lnk 2013-12-25 21:22 - 2013-12-25 21:22 - 01669632 _____ C:\Users\Sebek\Downloads\SteamInstall.msi 2013-12-25 20:59 - 2013-12-25 20:59 - 00000000 ____D C:\Users\Sebek\Downloads\19-08-2011_www_ModBase_PL_PS2_Graphics_for_PC_by_arkai 2013-12-25 20:58 - 2013-12-25 20:59 - 38465496 _____ C:\Users\Sebek\Downloads\19-08-2011_www_ModBase_PL_PS2_Graphics_for_PC_by_arkai.rar 2013-12-25 14:43 - 2013-12-25 14:43 - 00020144 _____ C:\Users\Sebek\Downloads\advvac3pr00f.rar 2013-12-25 14:43 - 2013-12-25 14:43 - 00000000 ____D C:\Users\Sebek\Downloads\advvac3pr00f 2013-12-25 14:28 - 2013-12-25 14:28 - 00058611 _____ C:\Users\Sebek\Downloads\LMv3.rar 2013-12-25 14:28 - 2013-12-25 14:28 - 00000000 ____D C:\Users\Sebek\Downloads\LMv3 2013-12-24 11:04 - 2013-12-24 11:04 - 00003584 _____ C:\Users\Sebek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-12-24 10:29 - 2013-12-24 10:29 - 00000000 ____D C:\Users\Sebek\Downloads\www_ModBase_PL_ultrahdmodgtasanandreas 2013-12-24 10:13 - 2013-12-24 10:13 - 06590679 _____ (Cenega Poland Sp. z o.o. ) C:\Users\Sebek\Downloads\Spolszczenie GTA San Andreas.exe 2013-12-24 10:01 - 2013-12-26 20:16 - 00000000 ____D C:\Users\Sebek\Documents\GTA San Andreas User Files 2013-12-24 09:55 - 2013-12-24 10:20 - 1611932820 _____ C:\Users\Sebek\Downloads\www_ModBase_PL_ultrahdmodgtasanandreas.rar 2013-12-24 09:31 - 2013-12-24 09:31 - 00000000 ____D C:\Users\Sebek\Downloads\[PC GAME MULTI] - Gran Theft Auto San Andreas + Crack NoCD - (Perfect DVD Version) - (Eng-Ita-Deu-Fra-Esp) - (By G-ADLVR_R7 2013-12-22 12:00 - 2013-12-23 09:28 - 4205696685 _____ C:\Users\Sebek\Downloads\[PC GAME MULTI] - Gran Theft Auto San Andreas + Crack NoCD - (Perfect DVD Version) - (Eng-Ita-Deu-Fra-Esp) - (By G-ADLVR_R7.rar 2013-12-19 20:43 - 2013-12-19 20:43 - 00000000 ____D C:\ProgramData\Steam 2013-12-19 20:34 - 2013-12-19 20:34 - 00000000 ____D C:\Users\Sebek\Downloads\13564965132-TW2DE1PC 2013-12-19 19:56 - 2013-12-19 20:00 - 122132127 _____ C:\Users\Sebek\Downloads\13564965132-TW2DE1PC.part2.rar 2013-12-19 19:23 - 2013-12-19 19:55 - 1047527424 _____ C:\Users\Sebek\Downloads\13564965132-TW2DE1PC.part1.rar 2013-12-14 12:48 - 2013-12-14 12:48 - 00404640 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-14 12:48 - 2013-12-14 12:48 - 00000000 ____D C:\Users\Sebek\Documents\My Games 2013-12-14 11:37 - 2013-12-19 20:43 - 00000000 ____D C:\Users\Sebek\Documents\Telltale Games 2013-12-14 11:37 - 2013-12-14 11:37 - 00000000 ____D C:\ProgramData\RELOADED 2013-12-14 11:07 - 2013-12-14 11:07 - 00000000 ____D C:\Users\Sebek\AppData\Roaming\Awesomium 2013-12-14 10:21 - 2013-12-14 10:21 - 00000640 _____ C:\Users\Public\Desktop\Smite.lnk 2013-12-14 10:21 - 2013-12-14 10:21 - 00000000 ____D C:\ProgramData\Hi-Rez Studios 2013-12-12 11:29 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-12 11:29 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-12 11:29 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-12 11:29 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-12 11:28 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-12 11:28 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-12 11:28 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-12 11:28 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-12 11:28 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-12 11:28 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-12 11:28 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-12 11:28 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-12 11:28 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-12 11:28 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-12 11:28 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-12 11:28 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-12 11:28 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-12 11:28 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-12 11:28 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-12 11:28 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-12 11:28 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-12 11:28 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-12 11:28 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-12 11:28 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-12 11:28 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-12 11:28 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-12 11:28 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-12 11:28 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-12 11:28 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-12 11:28 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-12 11:28 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-12 11:28 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-12 11:28 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-12 11:28 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-12 11:28 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-12 11:26 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-12 11:26 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-12 11:26 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-12 11:26 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-12 11:26 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-12 11:26 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-12 11:26 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-12 11:26 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-12 11:26 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-12 11:26 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-12 11:26 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-12 11:26 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-12 11:26 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-12 11:26 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-12 11:26 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-12 11:26 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-12 11:26 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-12 11:26 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-12 11:26 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-09 17:19 - 2013-12-09 17:19 - 00000000 ____D C:\Users\Public\Documents\DAEMON Tools Images 2013-12-08 19:00 - 2013-12-08 19:41 - 1467252736 _____ C:\Users\Sebek\Downloads\Willow (Lektor PL).avi 2013-12-08 09:09 - 2013-12-08 09:09 - 00000000 ____D C:\Users\Sebek\Downloads\redkit_77_1bc898cf 2013-12-08 08:57 - 2013-12-08 08:57 - 00000000 ____D C:\Users\Sebek\Downloads\FCR2_v1.1 2013-12-08 08:05 - 2013-12-08 08:05 - 00835844 _____ C:\Users\Sebek\Downloads\redkit_77_1bc898cf.zip 2013-12-02 17:47 - 2013-12-02 17:47 - 01082835 _____ C:\Users\Sebek\Downloads\Jezyk_polski_PP.zip 2013-12-02 17:47 - 2013-12-02 17:47 - 00000000 ____D C:\Users\Sebek\Downloads\Jezyk_polski_PP ==================== One Month Modified Files and Folders ======= 2013-12-29 15:47 - 2013-12-29 15:20 - 00000000 ____D C:\Users\Sebek\Downloads\FRST 2013-12-29 15:47 - 2013-10-18 15:13 - 01685245 _____ C:\Windows\WindowsUpdate.log 2013-12-29 15:45 - 2013-10-19 10:48 - 00000000 ____D C:\Users\Sebek\AppData\Roaming\DMCache 2013-12-29 15:44 - 2013-10-18 15:44 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-29 15:44 - 2013-10-18 15:32 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-29 15:44 - 2010-11-21 04:47 - 00248638 _____ C:\Windows\PFRO.log 2013-12-29 15:44 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-29 15:44 - 2009-07-14 05:51 - 00131374 _____ C:\Windows\setupact.log 2013-12-29 15:21 - 2013-12-29 15:21 - 00000000 ____D C:\FRST 2013-12-29 15:00 - 2013-10-18 15:44 - 00001046 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-29 14:49 - 2013-12-26 20:04 - 00000573 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk 2013-12-29 14:49 - 2013-10-19 11:37 - 00000000 ____D C:\Users\Sebek\AppData\Local\CrashDumps 2013-12-29 13:30 - 2013-11-03 17:35 - 00000000 ____D C:\Users\Sebek\Documents\FIFA 14 2013-12-29 13:24 - 2009-07-14 05:45 - 00034640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-29 13:24 - 2009-07-14 05:45 - 00034640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-29 13:05 - 2013-10-18 15:59 - 00000000 ____D C:\Users\Sebek\AppData\Local\PMB Files 2013-12-29 13:05 - 2013-10-18 15:59 - 00000000 ____D C:\ProgramData\PMB Files 2013-12-28 19:17 - 2013-10-18 19:06 - 00000000 ____D C:\Users\Sebek\AppData\Roaming\GG 2013-12-26 20:16 - 2013-12-24 10:01 - 00000000 ____D C:\Users\Sebek\Documents\GTA San Andreas User Files 2013-12-26 20:04 - 2013-10-18 15:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-25 21:23 - 2013-12-25 21:23 - 00000538 _____ C:\Users\Public\Desktop\Steam.lnk 2013-12-25 21:23 - 2013-10-18 15:13 - 00000000 ____D C:\Users\Sebek 2013-12-25 21:22 - 2013-12-25 21:22 - 01669632 _____ C:\Users\Sebek\Downloads\SteamInstall.msi 2013-12-25 20:59 - 2013-12-25 20:59 - 00000000 ____D C:\Users\Sebek\Downloads\19-08-2011_www_ModBase_PL_PS2_Graphics_for_PC_by_arkai 2013-12-25 20:59 - 2013-12-25 20:58 - 38465496 _____ C:\Users\Sebek\Downloads\19-08-2011_www_ModBase_PL_PS2_Graphics_for_PC_by_arkai.rar 2013-12-25 14:43 - 2013-12-25 14:43 - 00020144 _____ C:\Users\Sebek\Downloads\advvac3pr00f.rar 2013-12-25 14:43 - 2013-12-25 14:43 - 00000000 ____D C:\Users\Sebek\Downloads\advvac3pr00f 2013-12-25 14:28 - 2013-12-25 14:28 - 00058611 _____ C:\Users\Sebek\Downloads\LMv3.rar 2013-12-25 14:28 - 2013-12-25 14:28 - 00000000 ____D C:\Users\Sebek\Downloads\LMv3 2013-12-24 22:34 - 2013-11-24 19:39 - 00000000 ____D C:\Users\Sebek\AppData\Roaming\TS3Client 2013-12-24 12:13 - 2013-10-22 15:06 - 00000000 ____D C:\Users\Sebek\AppData\Roaming\uTorrent 2013-12-24 11:04 - 2013-12-24 11:04 - 00003584 _____ C:\Users\Sebek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-12-24 10:29 - 2013-12-24 10:29 - 00000000 ____D C:\Users\Sebek\Downloads\www_ModBase_PL_ultrahdmodgtasanandreas 2013-12-24 10:20 - 2013-12-24 09:55 - 1611932820 _____ C:\Users\Sebek\Downloads\www_ModBase_PL_ultrahdmodgtasanandreas.rar 2013-12-24 10:13 - 2013-12-24 10:13 - 06590679 _____ (Cenega Poland Sp. z o.o. ) C:\Users\Sebek\Downloads\Spolszczenie GTA San Andreas.exe 2013-12-24 10:01 - 2013-11-02 08:04 - 00000000 ____D C:\Users\Sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-24 09:31 - 2013-12-24 09:31 - 00000000 ____D C:\Users\Sebek\Downloads\[PC GAME MULTI] - Gran Theft Auto San Andreas + Crack NoCD - (Perfect DVD Version) - (Eng-Ita-Deu-Fra-Esp) - (By G-ADLVR_R7 2013-12-24 09:25 - 2010-11-21 13:53 - 00737730 _____ C:\Windows\system32\perfh015.dat 2013-12-24 09:25 - 2010-11-21 13:53 - 00154418 _____ C:\Windows\system32\perfc015.dat 2013-12-24 09:25 - 2009-07-14 06:13 - 01662556 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-23 09:28 - 2013-12-22 12:00 - 4205696685 _____ C:\Users\Sebek\Downloads\[PC GAME MULTI] - Gran Theft Auto San Andreas + Crack NoCD - (Perfect DVD Version) - (Eng-Ita-Deu-Fra-Esp) - (By G-ADLVR_R7.rar 2013-12-19 20:43 - 2013-12-19 20:43 - 00000000 ____D C:\ProgramData\Steam 2013-12-19 20:43 - 2013-12-14 11:37 - 00000000 ____D C:\Users\Sebek\Documents\Telltale Games 2013-12-19 20:34 - 2013-12-19 20:34 - 00000000 ____D C:\Users\Sebek\Downloads\13564965132-TW2DE1PC 2013-12-19 20:00 - 2013-12-19 19:56 - 122132127 _____ C:\Users\Sebek\Downloads\13564965132-TW2DE1PC.part2.rar 2013-12-19 19:55 - 2013-12-19 19:23 - 1047527424 _____ C:\Users\Sebek\Downloads\13564965132-TW2DE1PC.part1.rar 2013-12-15 18:41 - 2013-10-18 16:50 - 00000000 ____D C:\Windows\system32\MRT 2013-12-15 18:40 - 2013-10-18 16:50 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-14 12:48 - 2013-12-14 12:48 - 00404640 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-14 12:48 - 2013-12-14 12:48 - 00000000 ____D C:\Users\Sebek\Documents\My Games 2013-12-14 12:48 - 2013-11-02 17:15 - 00157943 _____ C:\Windows\DirectX.log 2013-12-14 11:37 - 2013-12-14 11:37 - 00000000 ____D C:\ProgramData\RELOADED 2013-12-14 11:36 - 2013-10-19 10:48 - 00000000 ____D C:\Users\Sebek\Downloads\Compressed 2013-12-14 11:07 - 2013-12-14 11:07 - 00000000 ____D C:\Users\Sebek\AppData\Roaming\Awesomium 2013-12-14 10:21 - 2013-12-14 10:21 - 00000640 _____ C:\Users\Public\Desktop\Smite.lnk 2013-12-14 10:21 - 2013-12-14 10:21 - 00000000 ____D C:\ProgramData\Hi-Rez Studios 2013-12-12 15:55 - 2013-10-18 15:44 - 00004042 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-12 15:55 - 2013-10-18 15:44 - 00003790 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-12 15:22 - 2009-07-14 05:45 - 00442728 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-09 17:19 - 2013-12-09 17:19 - 00000000 ____D C:\Users\Public\Documents\DAEMON Tools Images 2013-12-08 19:41 - 2013-12-08 19:00 - 1467252736 _____ C:\Users\Sebek\Downloads\Willow (Lektor PL).avi 2013-12-08 09:09 - 2013-12-08 09:09 - 00000000 ____D C:\Users\Sebek\Downloads\redkit_77_1bc898cf 2013-12-08 08:57 - 2013-12-08 08:57 - 00000000 ____D C:\Users\Sebek\Downloads\FCR2_v1.1 2013-12-08 08:05 - 2013-12-08 08:05 - 00835844 _____ C:\Users\Sebek\Downloads\redkit_77_1bc898cf.zip 2013-12-02 17:47 - 2013-12-02 17:47 - 01082835 _____ C:\Users\Sebek\Downloads\Jezyk_polski_PP.zip 2013-12-02 17:47 - 2013-12-02 17:47 - 00000000 ____D C:\Users\Sebek\Downloads\Jezyk_polski_PP 2013-11-30 13:44 - 2013-11-25 15:40 - 00000000 _____ C:\dfu.log ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-18 15:07 ==================== End Of Log ============================