Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by mlody (administrator) on MLODY-HP on 04-01-2014 16:52:02
Running from C:\Users\mlody.mlody-HP\Desktop\Skan PC
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(GG Network S.A.) C:\Users\mlody.mlody-HP\AppData\Local\GG\Application\gghub.exe
(GG Network S.A.) C:\Users\mlody.mlody-HP\AppData\Local\GG\Application\ggapp.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(GG Network S.A.) C:\Users\mlody.mlody-HP\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE
(OldTimer Tools) F:\Skan PC\OTL.scr


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [FullScreen] - C:\BLOCK\CFG\flexbuild\FullScreen\launchFS.cmd
HKLM\...\Run: [hpsysdrv] - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-02-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [563736 2009-10-14] (PDF Complete Inc)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe [54576 2008-12-08] (Hewlett-Packard)
HKLM-x32\...\Run: [Microsoft Default Manager] - "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
HKLM-x32\...\Run: [Nokia FastStart] - "C:\Program Files (x86)\Nokia\Nokia Music\NokiaMusic.exe" /command:faststart
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3459712 2011-05-10] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [190808 2011-03-01] (Logitech Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2013-12-12] (Hewlett-Packard)
HKLM\...\RunOnce: [PCDrProfiler] - "C:\Program Files\PC-Doctor for Windows\RunProfiler.exe" -r [89584 2010-01-19] (PC-Doctor, Inc.)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe [1715768 2010-09-28] (Hewlett-Packard)
HKCU\...\Run: [Badoo Desktop] - C:\ProgramData\Badoo\Badoo Desktop\1.6.30.1002\Badoo.Desktop.exe
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3883856 2009-07-26] (Microsoft Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
HKCU\...\Run: [GG] - C:\Users\mlody.mlody-HP\AppData\Local\GG\Application\gghub.exe [4047424 2013-12-20] (GG Network S.A.)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
HKU\Default\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe [1715768 2010-09-28] (Hewlett-Packard)
HKU\Default User\...\Run: [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe [1715768 2010-09-28] (Hewlett-Packard)
Startup: C:\Users\mlody.mlody-HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.facebook.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/CQDSK/2
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - DefaultScope {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120118160449620&tb_oid=18-01-2012&tb_mrud=18-01-2012
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120118160449620&tb_oid=18-01-2012&tb_mrud=18-01-2012
SearchScopes: HKCU - DefaultScope {171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U4&apn_dtid=OSJ000YYUK&apn_uid=F60D5DDC-B0C1-40FD-A883-0D914B66EFF6&apn_sauid=908A4698-7473-4E9B-B92D-BBA7C1403E9A
SearchScopes: HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = http://start.facemoods.com/?a=gppc&s={searchTerms}&f=4
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119828&tt=gc_&babsrc=SP_ss&mntrId=1E34008EF2751C5A
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U4&apn_dtid=OSJ000YYUK&apn_uid=F60D5DDC-B0C1-40FD-A883-0D914B66EFF6&apn_sauid=908A4698-7473-4E9B-B92D-BBA7C1403E9A
SearchScopes: HKCU - {1F096B29-E9DA-4D64-8D63-936BE7762CC5} URL = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=1e3437550000000000009444527cbd0b&tlver=1.4.19.19&affID=17160
SearchScopes: HKCU - {8A244612-A1F7-11E0-95C0-E71F4824019B} URL = http://badoo.com/startpage/?source=bsb&q={searchTerms}
SearchScopes: HKCU - {EA7DE890-7026-4544-8DAA-BE70D1009E57} URL = http://comprendo.info/search?query={searchTerms}
SearchScopes: HKCU - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120118160449620&tb_oid=18-01-2012&tb_mrud=18-01-2012
SearchScopes: HKCU - {F4AEF05F-FAA3-4CF8-A655-D57DE4E7478C} URL = http://www.google.com/search?hl=pl&q={searchTerms}
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO-x32: Webexp Enhanced - {f345b0ab-9b1a-4b78-b212-9f87ffd1d595} - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha952\ie\WebexpEnhancedV1alpha952.dll ()
BHO-x32: PricePeep - {FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} - C:\Program Files (x86)\PricePeep\pricepeep.dll (PricePeep)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2010-06-07] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: " hxxp://badoo.com/startpage/"
CHR DefaultSearchProvider: facemoods
CHR DefaultSearchURL: http://start.facemoods.com/?a=gppc&s={searchTerms}&f=4
CHR Extension: (Entanglement) - C:\Users\mlody.mlody-HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\2.1.1_0
CHR Extension: (avast! WebRep) - C:\Users\mlody.mlody-HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1125_0
CHR Extension: (Iminent) - C:\Users\mlody.mlody-HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.21.4.1
CHR Extension: (Poppit) - C:\Users\mlody.mlody-HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\2.2_0
CHR HKLM-x32\...\Chrome\Extension: [dedmngkbaffkenlfdcbganndoghblmap] - C:\Program Files (x86)\BetterSurf\ch\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [ldkepchipdondmjafdpbpmeggfhagfil] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha952\ch\WebexpEnhancedV1alpha952.crx
CHR HKLM-x32\...\Chrome\Extension: [mmifolfpllfdhilecpdpmemhelmanajl] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ch\BetterSurfPlus.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [42184 2011-05-10] (AVAST Software)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [635416 2009-10-14] (PDF Complete Inc)
R2 WSWNA3100; C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [303360 2011-12-07] ()
S3 GameConsoleService; "C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe" [x]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [x]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [22360 2011-05-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [64344 2011-05-10] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [31064 2011-05-10] (AVAST Software)
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [600920 2011-05-10] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [287576 2011-05-10] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [53592 2011-05-10] (AVAST Software)
S3 NPF; C:\Windows\System32\DRIVERS\npf.sys [47632 2010-02-03] (CACE Technologies, Inc.)
R1 RapportCerberus_34302; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\34302\RapportCerberus64_34302.sys [397520 2011-12-15] ()
S1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [55096 2012-07-29] ()
R0 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [101464 2012-07-08] (Trusteer Ltd.)
S1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [297240 2012-07-29] ()
S3 netr28ux; system32\DRIVERS\netr28ux.sys [x]
S3 nmwcdcx64; system32\drivers\ccdcmbox64.sys [x]
S3 nmwcdnsux64; system32\drivers\nmwcdnsux64.sys [x]
S3 nmwcdx64; system32\drivers\ccdcmbx64.sys [x]
S3 upperdev; system32\DRIVERS\usbser_lowerfltx64.sys [x]
S3 UsbserFilt; system32\DRIVERS\usbser_lowerfltx64j.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 16:51 - 2014-01-04 16:51 - 00000000 ____D C:\FRST
2014-01-04 16:50 - 2014-01-04 16:52 - 00000000 ____D C:\Users\mlody.mlody-HP\Desktop\Skan PC
2014-01-03 15:47 - 2014-01-03 15:47 - 00480648 _____ C:\Users\mlody.mlody-HP\Downloads\Setup.exe
2014-01-01 13:28 - 2014-01-04 07:45 - 00000000 ____D C:\Users\mlody.mlody-HP\Tracing
2013-12-20 22:05 - 2013-12-20 22:05 - 00000000 ____D C:\Program Files (x86)\WebexpEnhancedV1
2013-12-15 09:38 - 2013-12-14 22:31 - 00014765 _____ C:\Users\mlody.mlody-HP\Documents\lukasz%20mlodzik%2031.doc_0.odt
2013-12-15 08:49 - 2013-11-26 11:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 08:49 - 2013-11-26 10:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 08:49 - 2013-11-26 10:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 08:49 - 2013-11-26 10:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 08:49 - 2013-11-26 09:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 08:49 - 2013-11-26 09:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 08:49 - 2013-11-26 09:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 08:49 - 2013-11-26 09:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 08:49 - 2013-11-26 09:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 08:49 - 2013-11-26 09:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 08:49 - 2013-11-26 09:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 08:49 - 2013-11-26 09:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 08:49 - 2013-11-26 09:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 08:49 - 2013-11-26 09:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 08:49 - 2013-11-26 08:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 08:49 - 2013-11-26 08:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 08:49 - 2013-11-26 08:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 08:49 - 2013-11-26 08:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 08:49 - 2013-11-26 08:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 08:49 - 2013-11-26 08:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 08:49 - 2013-11-26 08:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 08:49 - 2013-11-26 08:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 08:49 - 2013-11-26 07:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 08:49 - 2013-11-26 07:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 08:49 - 2013-11-26 07:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 08:49 - 2013-11-26 07:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 08:49 - 2013-11-26 06:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 08:49 - 2013-11-26 06:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 08:49 - 2013-11-26 06:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 08:49 - 2013-11-26 06:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 08:49 - 2013-11-26 06:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-15 08:41 - 2013-12-15 08:41 - 00274464 _____ C:\Windows\Minidump\121513-26223-01.dmp
2013-12-14 03:08 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-14 03:06 - 2013-12-14 03:06 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-14 03:06 - 2013-12-14 03:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-14 03:06 - 2013-12-14 03:06 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-14 03:06 - 2013-12-14 03:06 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-14 03:06 - 2013-12-14 03:06 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-14 03:06 - 2013-12-14 03:06 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-14 03:06 - 2013-12-14 03:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-12-14 03:03 - 2013-12-14 03:03 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-12-14 03:03 - 2013-12-14 03:03 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-12-14 03:03 - 2013-12-14 03:03 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-14 03:03 - 2013-12-14 03:03 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-12-14 03:03 - 2013-12-14 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-12-14 03:02 - 2013-12-14 03:08 - 00009487 _____ C:\Windows\IE11_main.log
2013-12-11 18:15 - 2013-10-30 01:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 18:15 - 2013-10-19 02:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 18:15 - 2013-10-19 01:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 18:14 - 2013-11-12 02:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 18:14 - 2013-11-12 02:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 18:13 - 2013-10-12 02:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 18:13 - 2013-10-12 02:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 18:13 - 2013-10-12 02:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 18:13 - 2013-10-12 02:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 18:13 - 2013-10-12 01:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 18:13 - 2013-10-12 01:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 18:13 - 2013-10-12 01:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 18:13 - 2013-10-12 01:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-10 19:36 - 2013-12-20 22:05 - 00000161 _____ C:\extensions.ini

==================== One Month Modified Files and Folders =======

2014-01-04 16:52 - 2014-01-04 16:50 - 00000000 ____D C:\Users\mlody.mlody-HP\Desktop\Skan PC
2014-01-04 16:51 - 2014-01-04 16:51 - 00000000 ____D C:\FRST
2014-01-04 16:50 - 2009-07-14 04:51 - 00138641 _____ C:\Windows\setupact.log
2014-01-04 16:32 - 2012-09-13 12:11 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-04 16:26 - 2009-07-14 04:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 16:26 - 2009-07-14 04:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 16:21 - 2013-05-29 17:12 - 00000374 _____ C:\Windows\Tasks\AmiUpdXp.job
2014-01-04 16:20 - 2011-12-25 18:58 - 00001046 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-04 16:20 - 2010-09-01 02:08 - 00000000 ____D C:\Users\mlody.mlody-HP\AppData\Roaming\Skype
2014-01-04 16:20 - 2010-09-01 01:19 - 01840937 _____ C:\Windows\WindowsUpdate.log
2014-01-04 07:47 - 2010-09-01 01:19 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D3F224D5-39EE-4155-8872-3C06C76E5209}
2014-01-04 07:45 - 2014-01-01 13:28 - 00000000 ____D C:\Users\mlody.mlody-HP\Tracing
2014-01-04 07:44 - 2011-12-25 18:58 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-04 07:44 - 2010-09-01 09:22 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2014-01-04 07:43 - 2009-07-14 05:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-03 15:54 - 2010-09-13 18:52 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2014-01-03 15:53 - 2011-10-29 02:42 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-01-03 15:52 - 2010-09-13 18:50 - 00000000 ____D C:\Users\mlody.mlody-HP\AppData\Roaming\HP Support Assistant
2014-01-03 15:52 - 2010-09-01 02:11 - 00000000 ____D C:\Users\mlody.mlody-HP\AppData\Roaming\HpUpdate
2014-01-03 15:47 - 2014-01-03 15:47 - 00480648 _____ C:\Users\mlody.mlody-HP\Downloads\Setup.exe
2014-01-02 21:10 - 2012-03-04 10:01 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleFormlody
2014-01-02 21:10 - 2012-03-04 10:01 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleFormlody.job
2014-01-01 13:28 - 2010-09-01 02:05 - 00000000 ____D C:\Users\mlody.mlody-HP
2014-01-01 00:33 - 2010-06-07 20:47 - 00000000 ____D C:\ProgramData\PDFC
2013-12-23 18:17 - 2013-11-27 00:20 - 00000000 ____D C:\Users\mlody.mlody-HP\AppData\Roaming\GG
2013-12-23 16:51 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-23 13:46 - 2013-07-14 10:51 - 00000000 ____D C:\Users\mlody.mlody-HP\Desktop\tsheet
2013-12-21 18:05 - 2010-09-01 02:06 - 00000000 ___RD C:\Users\mlody.mlody-HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-21 15:19 - 2010-09-01 01:12 - 00228080 _____ C:\Windows\PFRO.log
2013-12-21 15:13 - 2010-09-01 15:13 - 00000000 ____D C:\Program Files (x86)\Winamp
2013-12-21 15:11 - 2012-11-06 12:23 - 00000000 ____D C:\Firefox
2013-12-21 15:10 - 2012-12-18 13:18 - 00000000 ____D C:\Users\mlody.mlody-HP\AppData\Local\Unity
2013-12-20 22:05 - 2013-12-20 22:05 - 00000000 ____D C:\Program Files (x86)\WebexpEnhancedV1
2013-12-20 22:05 - 2013-12-10 19:36 - 00000161 _____ C:\extensions.ini
2013-12-20 22:05 - 2013-11-27 00:20 - 00000000 ____D C:\Users\mlody.mlody-HP\AppData\Local\GG
2013-12-15 11:59 - 2010-09-07 11:45 - 00000000 ____D C:\Users\mlody.mlody-HP\AppData\Local\CrashDumps
2013-12-15 08:49 - 2013-08-14 02:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 08:47 - 2010-09-08 23:22 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-15 08:41 - 2013-12-15 08:41 - 00274464 _____ C:\Windows\Minidump\121513-26223-01.dmp
2013-12-15 08:41 - 2011-09-19 19:54 - 299829922 _____ C:\Windows\MEMORY.DMP
2013-12-15 08:41 - 2011-09-19 19:54 - 00000000 ____D C:\Windows\Minidump
2013-12-14 22:31 - 2013-12-15 09:38 - 00014765 _____ C:\Users\mlody.mlody-HP\Documents\lukasz%20mlodzik%2031.doc_0.odt
2013-12-14 18:43 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\rescache
2013-12-14 18:37 - 2010-09-01 02:06 - 00001423 _____ C:\Users\mlody.mlody-HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-14 03:24 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-14 03:08 - 2013-12-14 03:02 - 00009487 _____ C:\Windows\IE11_main.log
2013-12-14 03:06 - 2013-12-14 03:06 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-14 03:06 - 2013-12-14 03:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-14 03:06 - 2013-12-14 03:06 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-14 03:06 - 2013-12-14 03:06 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-14 03:06 - 2013-12-14 03:06 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-14 03:06 - 2013-12-14 03:06 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-14 03:06 - 2013-12-14 03:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-14 03:06 - 2013-12-14 03:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-14 03:06 - 2013-12-14 03:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-12-14 03:04 - 2013-12-14 03:04 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-12-14 03:04 - 2013-12-14 03:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-12-14 03:03 - 2013-12-14 03:03 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-12-14 03:03 - 2013-12-14 03:03 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-12-14 03:03 - 2013-12-14 03:03 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-14 03:03 - 2013-12-14 03:03 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-12-14 03:03 - 2013-12-14 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-12-12 20:38 - 2009-07-14 04:45 - 00344832 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 17:50 - 2012-09-13 12:11 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 17:50 - 2012-09-13 12:11 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 17:50 - 2011-05-16 21:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 00:00 - 2011-12-25 18:58 - 00004042 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-10 00:00 - 2011-12-25 18:58 - 00003790 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.14656.dll


Some content of TEMP:
====================
C:\Users\mlody.mlody-HP\AppData\Local\Temp\3itg0zeb.dll
C:\Users\mlody.mlody-HP\AppData\Local\Temp\BackupSetup.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\contentDATs.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\dotNetFx40_Client_setup.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\gg10.upgr.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\gg10_upgr_to_13096_from_12444.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\installstats.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\mssinstaller.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\NEventMessages.dll
C:\Users\mlody.mlody-HP\AppData\Local\Temp\Nokia_Ovi_Suite_PCS_Update.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\Resource.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\SCC.dll
C:\Users\mlody.mlody-HP\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\SkypeSetup.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\Softonic_PL_1-4-9.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\sp53904.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\sp54931.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\sp58915.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\uninst1.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\Updater.exe
C:\Users\mlody.mlody-HP\AppData\Local\Temp\_is4EA1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 13:29

==================== End Of Log ============================