Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2014 03 Ran by patryk (administrator) on PATRYK-KOMPUTER on 18-01-2014 16:42:49 Running from C:\Users\patryk\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (Logitech, Inc.) C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe (APC) C:\Program Files (x86)\APC\PowerChute Business Edition\agent\pbeagent.exe (APC) C:\Program Files (x86)\APC\PowerChute Business Edition\server\pbeserver.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\pg_ctl.exe (Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LBTWiz.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe (Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL3\KHALMNPR.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe () C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe (Microsoft Corporation) C:\Program Files\Windows Mail\WinMail.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Valve Corporation) D:\Games\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (OldTimer Tools) C:\Users\patryk\Downloads\OTL.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-13] (Adobe Systems Incorporated) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.) HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.) HKLM\...\Run: [Bluetooth Connection Assistant] - LBTWIZ.EXE -silent HKLM\...\Run: [OODefragTray] - C:\Program Files\OO Software\Defrag\oodtray.exe HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1612504 2013-11-11] (COMODO) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Bonus.SSR.FR11] - "C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [LogitechQuickCamRibbon] - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304 2009-10-14] () HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKCU\...\Run: [uTorrent] - C:\Program Files (x86)\uTorrent\uTorrent.exe [1022352 2012-12-12] (BitTorrent, Inc.) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.) HKCU\...\Run: [Steam] - D:\Games\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation) HKCU\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3108480 2012-10-23] (DT Soft Ltd) HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung) HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup MountPoints2: {199be893-4495-11e2-af36-bc5ff41ba1de} - I:\autorun.exe MountPoints2: {2e74596e-1305-11e3-9f71-bc5ff41ba1de} - F:\setup_the_witcher_2_ee_3.0.1.17.exe AppInit_DLLs: [ ] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=121845&tt=120613_ndc&babsrc=HP_ss_din2g&mntrId=F2FCBC5FF41BA1DE SearchScopes: HKCU - DefaultScope {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=121845&tt=120613_ndc&babsrc=SP_ss&mntrId=F2FCBC5FF41BA1DE SearchScopes: HKCU - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default FF user.js: detected! => C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\searchplugins\delta.xml FF Extension: ChatZilla - C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2013-07-30] FF Extension: DownloadHelper - C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-10-20] FF Extension: Iplex to ALLPlayer - C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2013-01-12] FF Extension: ALLYouTubeDownloader - C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\Extensions\YouTubetoALL@ALLPlayer.org.xpi [2013-01-12] FF Extension: Adblock Plus - C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-12] FF Extension: DownThemAll! - C:\Users\patryk\AppData\Roaming\Mozilla\Firefox\Profiles\i6k7lh0z.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-01-05] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2013-12-10] FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-11-22] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION ==================== Services (Whitelisted) ================= S4 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821840 2012-07-19] (ABBYY) S4 Apache2.4; c:\web\apache24\bin\httpd.exe [24576 2013-02-22] (Apache Software Foundation) R2 APCPBEAgent; C:\Program Files (x86)\APC\PowerChute Business Edition\agent\pbeagent.exe [35960 2012-12-05] (APC) R2 APCPBEServer; C:\Program Files (x86)\APC\PowerChute Business Edition\server\pbeserver.exe [56520 2012-12-05] (APC) R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6254152 2013-10-20] (COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [164056 2013-09-24] (COMODO) R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-07-05] (CyberLink) R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-07-05] (CyberLink) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-10-23] (Overwolf Ltd) R2 postgresql-x64-9.2; C:/Program Files/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N "postgresql-x64-9.2" -D "C:/Program Files/PostgreSQL/9.2/data" -w [x] ==================== Drivers (Whitelisted) ==================== R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-09-24] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [709144 2013-11-14] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48872 2013-09-24] (COMODO) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-11-06] (DT Soft Ltd) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation) R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-09-24] (COMODO) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-03-20] (Intel Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-09-01] (Duplex Secure Ltd.) S3 uisp; C:\Windows\System32\Drivers\mtdfu.sys [17936 2013-11-05] (Logitech, Inc.) R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-07-06] (CyberLink Corp.) U3 aa98kq5p; C:\Windows\System32\Drivers\aa98kq5p.sys [0 ] (Intel Corporation) S3 lvpepf64; system32\DRIVERS\lv302a64.sys [x] S3 PID_PEPI; system32\DRIVERS\LV302V64.SYS [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-18 16:42 - 2014-01-18 16:42 - 00019296 _____ C:\Users\patryk\Downloads\FRST.txt 2014-01-18 16:42 - 2014-01-18 16:42 - 00000000 ____D C:\FRST 2014-01-18 16:41 - 2014-01-18 16:41 - 00065188 _____ C:\Users\patryk\Downloads\Extras.Txt 2014-01-18 16:41 - 2014-01-17 22:15 - 02076160 _____ (Farbar) C:\Users\patryk\Downloads\FRST64.exe 2014-01-18 14:51 - 2014-01-18 14:51 - 00734912 _____ C:\Users\patryk\Downloads\Potwierdzenie_66.tiff 2014-01-18 14:46 - 2011-08-16 02:45 - 00199228 _____ C:\Users\patryk\Downloads\Windows6.1-KB2598845-x64.msu 2014-01-18 14:45 - 2011-08-16 02:45 - 00196723 _____ C:\Users\patryk\Downloads\Windows6.1-KB2598845-x86.msu 2014-01-18 14:43 - 2011-05-02 15:02 - 00833082 _____ C:\Users\patryk\Downloads\Windows6.1-KB2544521-x64.msu 2014-01-18 14:36 - 2011-04-19 12:23 - 05207896 _____ (Microsoft Corporation) C:\Users\patryk\Downloads\vcredist_x64.exe 2014-01-18 14:33 - 2013-07-19 08:46 - 765883568 _____ (Microsoft Corporation) C:\Users\patryk\Downloads\officesp2010-kb2687455-fullfile-x64-en-us.exe 2014-01-18 14:32 - 2013-09-20 06:44 - 70087104 _____ (Microsoft Corporation) C:\Users\patryk\Downloads\NDP451-KB2858728-x86-x64-AllOS-ENU.exe 2014-01-18 14:31 - 2013-09-20 05:37 - 06049016 _____ (Microsoft Corporation) C:\Users\patryk\Downloads\NDP451-KB2858728-x86-x64-AllOS-PLK.exe 2014-01-15 21:55 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 21:55 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 21:55 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 21:55 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 21:55 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 21:55 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 21:55 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 21:55 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 21:55 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-11 20:11 - 2013-05-23 17:39 - 01944960 _____ (mIRC Co. Ltd.) C:\Users\patryk\Downloads\mirc732.exe 2014-01-09 20:25 - 2014-01-09 20:25 - 00001349 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2014-01-09 20:24 - 2014-01-09 20:24 - 00000000 ____D C:\Users\patryk\AppData\Local\NVIDIA Corporation 2014-01-09 20:23 - 2014-01-09 20:23 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2014-01-09 20:23 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-01-09 20:23 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-01-09 20:21 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-01-09 20:21 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-01-09 20:21 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-01-09 20:20 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-01-09 20:20 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-01-09 20:20 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-01-09 20:16 - 2013-12-19 21:33 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-01-09 20:16 - 2013-12-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-01-09 20:16 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-01-09 20:16 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-01-09 20:16 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-01-09 20:16 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-01-09 20:16 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-01-09 20:16 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-01-09 20:16 - 2013-12-19 06:01 - 03539040 _____ C:\Windows\system32\nvcoproc.bin 2014-01-09 20:15 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-01-09 20:15 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-01-09 20:15 - 2013-12-19 21:33 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2014-01-09 20:12 - 2014-01-09 20:12 - 00000000 ____D C:\NVIDIA 2014-01-09 11:10 - 2014-01-09 11:10 - 00001977 _____ C:\Users\patryk\Desktop\Driver Cleaner Pro.lnk 2014-01-09 11:10 - 2014-01-09 11:10 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro 2014-01-09 11:10 - 2014-01-09 11:10 - 00000000 ____D C:\Program Files (x86)\Driver Cleaner Pro 2014-01-09 11:09 - 2012-10-24 08:01 - 02817354 _____ C:\Users\patryk\Downloads\Driver_Cleaner_Pro_15.zip 2014-01-07 20:37 - 2014-01-07 14:55 - 262041840 _____ (NVIDIA Corporation) C:\Users\patryk\Downloads\332.21-desktop-win8-win7-winvista-64bit-international-whql.exe 2014-01-07 11:26 - 2014-01-07 11:26 - 00249856 ____N (Microsoft Corporation) C:\Windows\Setup1.exe 2014-01-07 11:26 - 2014-01-07 11:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE 2014-01-07 11:26 - 2014-01-07 11:26 - 00000000 ____D C:\Users\patryk\Downloads\hltsetup 2014-01-07 11:26 - 2014-01-07 11:26 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HLTooLz 2014-01-07 11:26 - 2014-01-07 11:26 - 00000000 ____D C:\Program Files (x86)\HLTooLz 2014-01-07 11:26 - 2010-04-10 19:49 - 01718171 _____ C:\Users\patryk\Downloads\hltsetup.zip 2014-01-05 22:08 - 2011-09-05 22:28 - 00437105 _____ C:\Users\patryk\Downloads\Localizer660.zip 2014-01-05 21:58 - 2014-01-05 21:58 - 1605664768 _____ C:\Users\patryk\Downloads\God of War Chains of Olympus.iso 2014-01-05 17:37 - 2014-01-05 17:37 - 00251721 _____ C:\Users\patryk\Downloads\Do Poradnika.rar 2014-01-05 17:03 - 2014-01-05 17:03 - 01072809 _____ C:\Users\patryk\Downloads\660PRO-C2.rar 2013-12-29 13:27 - 2014-01-17 16:58 - 00000298 _____ C:\Users\patryk\Desktop\Nowy dokument tekstowy.txt 2013-12-29 13:27 - 2013-12-29 13:54 - 00005204 _____ C:\Users\patryk\Desktop\p.cfg 2013-12-27 15:21 - 2013-12-27 15:21 - 00002004 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2013-12-27 15:21 - 2013-12-27 15:21 - 00001994 _____ C:\Users\Public\Desktop\Samsung Kies.lnk 2013-12-27 15:21 - 2013-12-27 15:21 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log 2013-12-27 15:21 - 2013-12-27 15:21 - 00000000 ____D C:\Users\patryk\Documents\samsung 2013-12-27 15:21 - 2013-12-27 15:21 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Samsung 2013-12-27 15:21 - 2013-12-27 15:21 - 00000000 ____D C:\Users\patryk\AppData\Local\Samsung 2013-12-27 15:19 - 2013-12-27 15:20 - 00000000 ____D C:\ProgramData\Samsung 2013-12-27 15:19 - 2013-12-27 15:20 - 00000000 ____D C:\Program Files (x86)\Samsung 2013-12-27 15:19 - 2013-10-30 12:13 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll 2013-12-27 15:19 - 2013-10-30 12:06 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll 2013-12-27 14:40 - 2013-12-27 14:40 - 00000000 ____D C:\Users\patryk\AppData\Local\Downloaded Installations 2013-12-27 14:27 - 2013-12-27 14:29 - 70015304 _____ (Samsung Electronics Co., Ltd. ) C:\Users\patryk\Downloads\KiesSetup.exe 2013-12-24 00:38 - 2013-12-24 00:38 - 00000132 _____ C:\Users\patryk\AppData\Roaming\Preferencje CC formatu BMP firmy Adobe 2013-12-23 23:31 - 2013-12-24 01:02 - 3009558528 _____ C:\Users\patryk\Downloads\Hugo Fabryka Gier (2009) PL-PROPHET.iso 2013-12-23 23:02 - 2013-12-23 23:02 - 00000000 ____D C:\Users\patryk\Downloads\Barbie Salon Piękności 2013-12-22 14:56 - 2013-12-22 14:56 - 00011114 _____ C:\Users\patryk\Downloads\mousefix.zip 2013-12-22 14:22 - 2013-12-22 14:22 - 00000000 _____ C:\Users\patryk\Downloads\Nowy dokument tekstowy.txt 2013-12-22 14:01 - 2013-12-22 14:01 - 00002142 _____ C:\Users\Public\Desktop\Brother Creative Center.lnk 2013-12-22 14:00 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll 2013-12-22 14:00 - 2007-12-13 22:16 - 00004608 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll 2013-12-22 14:00 - 2007-12-13 22:16 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll 2013-12-22 14:00 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll 2013-12-22 13:54 - 2013-12-22 13:54 - 00000000 ____D C:\Users\patryk\AppData\Roaming\InstallShield 2013-12-21 15:59 - 2013-12-21 15:59 - 00000000 ____D C:\ProgramData\Logitech 2013-12-21 00:39 - 2013-12-22 22:10 - 00005163 _____ C:\Users\patryk\Downloads\p.cfg 2013-12-20 23:41 - 2013-12-22 01:18 - 00000000 ____D C:\CCE_Quarantine 2013-12-20 00:17 - 2013-12-29 18:43 - 00078344 _____ C:\Windows\system32\Drivers\fvstore.dat 2013-12-20 00:17 - 2013-12-20 00:17 - 00000000 ___HD C:\VTRoot 2013-12-20 00:05 - 2013-05-12 15:56 - 00000941 _____ C:\Windows\system32\Drivers\etc\hosts.ccebak 2013-12-19 23:59 - 2013-12-20 00:20 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Comodo 2013-12-19 23:54 - 2013-12-19 23:54 - 00001888 _____ C:\Users\Public\Desktop\COMODO Internet Security.lnk 2013-12-19 23:54 - 2013-12-19 23:54 - 00000599 _____ C:\Users\Public\Desktop\Współdzielona przestrzeń.lnk 2013-12-19 23:54 - 2013-12-19 23:54 - 00000000 ___SD C:\ProgramData\Shared Space 2013-12-19 23:54 - 2013-12-19 23:54 - 00000000 ____D C:\Windows\System32\Tasks\COMODO 2013-12-19 23:54 - 2013-12-19 23:54 - 00000000 ____D C:\Program Files\COMODO 2013-12-19 23:53 - 2013-12-19 23:53 - 00000000 ____D C:\ProgramData\Comodo Downloader 2013-12-19 23:46 - 2013-12-19 23:52 - 211388240 _____ (COMODO) C:\Users\patryk\Downloads\cispremium_installer.exe 2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe ==================== One Month Modified Files and Folders ======= 2014-01-18 16:42 - 2014-01-18 16:42 - 00019296 _____ C:\Users\patryk\Downloads\FRST.txt 2014-01-18 16:42 - 2014-01-18 16:42 - 00000000 ____D C:\FRST 2014-01-18 16:41 - 2014-01-18 16:41 - 00065188 _____ C:\Users\patryk\Downloads\Extras.Txt 2014-01-18 16:40 - 2013-12-05 23:39 - 00129624 _____ C:\Users\patryk\Downloads\OTL.Txt 2014-01-18 16:39 - 2013-03-23 19:11 - 00000000 ____D C:\Users\patryk\AppData\Roaming\mIRC 2014-01-18 16:37 - 2012-12-06 21:51 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat 2014-01-18 16:23 - 2012-12-05 22:16 - 01733574 _____ C:\Windows\WindowsUpdate.log 2014-01-18 16:04 - 2012-12-05 22:31 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-18 14:51 - 2014-01-18 14:51 - 00734912 _____ C:\Users\patryk\Downloads\Potwierdzenie_66.tiff 2014-01-18 14:49 - 2013-05-24 22:30 - 00000000 ____D C:\Windows\System32\Tasks\Zadania podglądu zdarzeń 2014-01-18 14:40 - 2011-04-12 14:21 - 00741476 _____ C:\Windows\system32\perfh015.dat 2014-01-18 14:40 - 2011-04-12 14:21 - 00156548 _____ C:\Windows\system32\perfc015.dat 2014-01-18 14:40 - 2009-07-14 06:13 - 01692072 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-18 14:39 - 2013-05-23 19:16 - 01645682 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2014-01-18 14:15 - 2013-11-27 23:19 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs 2014-01-18 14:15 - 2013-06-09 00:00 - 00038212 _____ C:\Windows\setupact.log 2014-01-18 02:00 - 2013-01-13 23:30 - 00000000 ____D C:\Users\patryk\AppData\Local\Adobe 2014-01-18 00:43 - 2012-12-12 19:19 - 00000000 ____D C:\Users\patryk\AppData\Roaming\TS3Client 2014-01-18 00:01 - 2012-12-29 20:34 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Skype 2014-01-17 22:50 - 2012-12-12 20:08 - 00000000 ____D C:\Users\patryk\AppData\Roaming\uTorrent 2014-01-17 22:15 - 2014-01-18 16:41 - 02076160 _____ (Farbar) C:\Users\patryk\Downloads\FRST64.exe 2014-01-17 17:49 - 2013-05-30 11:50 - 00000266 _____ C:\Windows\Tasks\AutoKMS.job 2014-01-17 17:21 - 2013-03-25 22:07 - 00000000 ____D C:\tmp 2014-01-17 16:58 - 2013-12-29 13:27 - 00000298 _____ C:\Users\patryk\Desktop\Nowy dokument tekstowy.txt 2014-01-16 08:55 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-16 08:55 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-16 03:17 - 2012-12-06 22:37 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-16 03:17 - 2010-11-21 04:47 - 00071646 _____ C:\Windows\PFRO.log 2014-01-16 03:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-16 03:17 - 2009-07-14 05:45 - 05082208 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-16 03:01 - 2013-08-15 02:00 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 03:00 - 2012-12-12 20:24 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-14 03:04 - 2012-12-12 20:56 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-13 16:06 - 2013-10-25 14:56 - 00000000 ____D C:\Users\patryk\AppData\Local\Overwolf 2014-01-11 20:12 - 2013-03-23 19:11 - 00000953 _____ C:\Users\Public\Desktop\mIRC.lnk 2014-01-11 20:12 - 2013-03-23 19:11 - 00000000 ____D C:\Program Files (x86)\mIRC 2014-01-09 20:25 - 2014-01-09 20:25 - 00001349 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2014-01-09 20:25 - 2013-06-01 15:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-09 20:25 - 2013-05-23 20:22 - 00000000 ____D C:\Users\patryk\AppData\Local\NVIDIA 2014-01-09 20:24 - 2014-01-09 20:24 - 00000000 ____D C:\Users\patryk\AppData\Local\NVIDIA Corporation 2014-01-09 20:23 - 2014-01-09 20:23 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2014-01-09 20:23 - 2012-12-20 18:48 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2014-01-09 20:23 - 2012-12-20 18:48 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-09 20:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help 2014-01-09 20:12 - 2014-01-09 20:12 - 00000000 ____D C:\NVIDIA 2014-01-09 11:10 - 2014-01-09 11:10 - 00001977 _____ C:\Users\patryk\Desktop\Driver Cleaner Pro.lnk 2014-01-09 11:10 - 2014-01-09 11:10 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro 2014-01-09 11:10 - 2014-01-09 11:10 - 00000000 ____D C:\Program Files (x86)\Driver Cleaner Pro 2014-01-07 14:55 - 2014-01-07 20:37 - 262041840 _____ (NVIDIA Corporation) C:\Users\patryk\Downloads\332.21-desktop-win8-win7-winvista-64bit-international-whql.exe 2014-01-07 11:33 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini 2014-01-07 11:26 - 2014-01-07 11:26 - 00249856 ____N (Microsoft Corporation) C:\Windows\Setup1.exe 2014-01-07 11:26 - 2014-01-07 11:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE 2014-01-07 11:26 - 2014-01-07 11:26 - 00000000 ____D C:\Users\patryk\Downloads\hltsetup 2014-01-07 11:26 - 2014-01-07 11:26 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HLTooLz 2014-01-07 11:26 - 2014-01-07 11:26 - 00000000 ____D C:\Program Files (x86)\HLTooLz 2014-01-07 11:26 - 2012-12-05 22:16 - 00000000 ___RD C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-07 01:56 - 2013-11-24 15:07 - 00001100 __RSH C:\ProgramData\ntuser.pol 2014-01-05 21:58 - 2014-01-05 21:58 - 1605664768 _____ C:\Users\patryk\Downloads\God of War Chains of Olympus.iso 2014-01-05 17:37 - 2014-01-05 17:37 - 00251721 _____ C:\Users\patryk\Downloads\Do Poradnika.rar 2014-01-05 17:03 - 2014-01-05 17:03 - 01072809 _____ C:\Users\patryk\Downloads\660PRO-C2.rar 2013-12-29 18:43 - 2013-12-20 00:17 - 00078344 _____ C:\Windows\system32\Drivers\fvstore.dat 2013-12-29 13:54 - 2013-12-29 13:27 - 00005204 _____ C:\Users\patryk\Desktop\p.cfg 2013-12-27 15:21 - 2013-12-27 15:21 - 00002004 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2013-12-27 15:21 - 2013-12-27 15:21 - 00001994 _____ C:\Users\Public\Desktop\Samsung Kies.lnk 2013-12-27 15:21 - 2013-12-27 15:21 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log 2013-12-27 15:21 - 2013-12-27 15:21 - 00000000 ____D C:\Users\patryk\Documents\samsung 2013-12-27 15:21 - 2013-12-27 15:21 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Samsung 2013-12-27 15:21 - 2013-12-27 15:21 - 00000000 ____D C:\Users\patryk\AppData\Local\Samsung 2013-12-27 15:20 - 2013-12-27 15:19 - 00000000 ____D C:\ProgramData\Samsung 2013-12-27 15:20 - 2013-12-27 15:19 - 00000000 ____D C:\Program Files (x86)\Samsung 2013-12-27 15:19 - 2012-12-05 22:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-27 14:40 - 2013-12-27 14:40 - 00000000 ____D C:\Users\patryk\AppData\Local\Downloaded Installations 2013-12-27 14:29 - 2013-12-27 14:27 - 70015304 _____ (Samsung Electronics Co., Ltd. ) C:\Users\patryk\Downloads\KiesSetup.exe 2013-12-26 18:36 - 2012-12-29 20:34 - 00000000 ____D C:\ProgramData\Skype 2013-12-26 18:35 - 2013-02-07 20:06 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-12-24 01:41 - 2013-11-05 21:38 - 00002032 _____ C:\Windows\LkmdfCoInst.log 2013-12-24 01:37 - 2013-11-05 21:38 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-12-24 01:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-24 01:02 - 2013-12-23 23:31 - 3009558528 _____ C:\Users\patryk\Downloads\Hugo Fabryka Gier (2009) PL-PROPHET.iso 2013-12-24 00:38 - 2013-12-24 00:38 - 00000132 _____ C:\Users\patryk\AppData\Roaming\Preferencje CC formatu BMP firmy Adobe 2013-12-23 23:02 - 2013-12-23 23:02 - 00000000 ____D C:\Users\patryk\Downloads\Barbie Salon Piękności 2013-12-23 22:39 - 2013-11-22 21:26 - 00036020 _____ C:\Windows\system32\lvcoinst.log 2013-12-22 22:10 - 2013-12-21 00:39 - 00005163 _____ C:\Users\patryk\Downloads\p.cfg 2013-12-22 14:56 - 2013-12-22 14:56 - 00011114 _____ C:\Users\patryk\Downloads\mousefix.zip 2013-12-22 14:22 - 2013-12-22 14:22 - 00000000 _____ C:\Users\patryk\Downloads\Nowy dokument tekstowy.txt 2013-12-22 14:01 - 2013-12-22 14:01 - 00002142 _____ C:\Users\Public\Desktop\Brother Creative Center.lnk 2013-12-22 14:01 - 2012-12-12 21:08 - 00000404 _____ C:\Windows\BRWMARK.INI 2013-12-22 14:01 - 2012-12-12 21:08 - 00000027 _____ C:\Windows\BRPP2KA.INI 2013-12-22 14:01 - 2012-12-12 21:07 - 00000050 _____ C:\Windows\system32\bridf08b.dat 2013-12-22 14:01 - 2012-12-12 21:07 - 00000000 ____D C:\Program Files (x86)\Brother 2013-12-22 13:54 - 2013-12-22 13:54 - 00000000 ____D C:\Users\patryk\AppData\Roaming\InstallShield 2013-12-22 03:02 - 2012-12-12 21:09 - 00000255 _____ C:\Windows\Brpfx04a.ini 2013-12-22 03:02 - 2012-12-12 21:09 - 00000094 _____ C:\Windows\brpcfx.ini 2013-12-22 01:18 - 2013-12-20 23:41 - 00000000 ____D C:\CCE_Quarantine 2013-12-21 15:59 - 2013-12-21 15:59 - 00000000 ____D C:\ProgramData\Logitech 2013-12-21 01:06 - 2013-07-02 19:08 - 00000000 ____D C:\Program Files (x86)\ABBYY FineReader 11 2013-12-20 00:20 - 2013-12-19 23:59 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Comodo 2013-12-20 00:17 - 2013-12-20 00:17 - 00000000 ___HD C:\VTRoot 2013-12-20 00:15 - 2013-10-17 12:03 - 00025817 _____ C:\Windows\system32\config\rules.rdb 2013-12-19 23:59 - 2012-12-06 21:50 - 00000000 ____D C:\ProgramData\Comodo 2013-12-19 23:54 - 2013-12-19 23:54 - 00001888 _____ C:\Users\Public\Desktop\COMODO Internet Security.lnk 2013-12-19 23:54 - 2013-12-19 23:54 - 00000599 _____ C:\Users\Public\Desktop\Współdzielona przestrzeń.lnk 2013-12-19 23:54 - 2013-12-19 23:54 - 00000000 ___SD C:\ProgramData\Shared Space 2013-12-19 23:54 - 2013-12-19 23:54 - 00000000 ____D C:\Windows\System32\Tasks\COMODO 2013-12-19 23:54 - 2013-12-19 23:54 - 00000000 ____D C:\Program Files\COMODO 2013-12-19 23:53 - 2013-12-19 23:53 - 00000000 ____D C:\ProgramData\Comodo Downloader 2013-12-19 23:52 - 2013-12-19 23:46 - 211388240 _____ (COMODO) C:\Users\patryk\Downloads\cispremium_installer.exe 2013-12-19 23:41 - 2013-04-04 14:07 - 00000000 ____D C:\Windows\system32\appmgmt 2013-12-19 23:41 - 2013-01-13 23:29 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-12-19 23:41 - 2012-12-05 22:31 - 00000000 ____D C:\Users\patryk\AppData\Roaming\Adobe 2013-12-19 23:17 - 2013-04-04 11:19 - 00000000 ____D C:\Windows\pss 2013-12-19 21:33 - 2014-01-09 20:16 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2013-12-19 21:33 - 2014-01-09 20:16 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-12-19 21:33 - 2014-01-09 20:15 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-12-19 21:33 - 2014-01-09 20:15 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2013-12-19 19:53 - 2014-01-09 20:16 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-12-19 19:53 - 2014-01-09 20:16 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-12-19 19:53 - 2014-01-09 20:16 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-12-19 19:53 - 2014-01-09 20:16 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-12-19 19:53 - 2014-01-09 20:16 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-12-19 19:53 - 2014-01-09 20:16 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-12-19 17:49 - 2013-01-14 19:37 - 00002896 _____ C:\Windows\System32\Tasks\AutoKMS 2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-12-19 09:53 - 2013-11-14 23:05 - 00001096 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk 2013-12-19 06:01 - 2014-01-09 20:16 - 03539040 _____ C:\Windows\system32\nvcoproc.bin Some content of TEMP: ==================== C:\Users\patryk\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe C:\Users\patryk\AppData\Local\Temp\AAMHelper.exe C:\Users\patryk\AppData\Local\Temp\AdobeApplicationManager.exe C:\Users\patryk\AppData\Local\Temp\bi_cleaner.exe C:\Users\patryk\AppData\Local\Temp\COMAP.EXE C:\Users\patryk\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\patryk\AppData\Local\Temp\LMkRstPt.exe C:\Users\patryk\AppData\Local\Temp\mirc732.exe C:\Users\patryk\AppData\Local\Temp\Mobogenie_Setup_2.1.23_515.exe C:\Users\patryk\AppData\Local\Temp\nv3DVStreaming.dll C:\Users\patryk\AppData\Local\Temp\nvSCPAPI.dll C:\Users\patryk\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\patryk\AppData\Local\Temp\nvStereoApiI.dll C:\Users\patryk\AppData\Local\Temp\nvStInst.exe C:\Users\patryk\AppData\Local\Temp\OutpostSecuritySuiteProInstall64_NoBase.exe C:\Users\patryk\AppData\Local\Temp\qc_a402013b_7656_4f6f_b57f_5a8ef69f5fc4_32.exe C:\Users\patryk\AppData\Local\Temp\qc_a402013b_7656_4f6f_b57f_5a8ef69f5fc4_64.exe C:\Users\patryk\AppData\Local\Temp\SkypeSetup.exe C:\Users\patryk\AppData\Local\Temp\smt_dosearches_2013114182624.exe C:\Users\patryk\AppData\Local\Temp\SRLDetectionLibrary3893624232635060573.dll C:\Users\patryk\AppData\Local\Temp\vlc-2.0.7-win32.exe C:\Users\patryk\AppData\Local\Temp\vlc-2.0.8-win32.exe C:\Users\patryk\AppData\Local\Temp\_is2EFB.exe C:\Users\patryk\AppData\Local\Temp\_is6E2D.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-09 00:21 ==================== End Of Log ============================