Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-01-2014 Ran by Patryk (administrator) on PATRYK-KOMPUTER on 25-01-2014 16:24:34 Running from C:\Users\Patryk\Downloads Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) =================== (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Akamai Technologies, Inc.) C:\Users\Patryk\AppData\Local\Akamai\netsession_win.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\System32\audiodg.exe (Akamai Technologies, Inc.) C:\Users\Patryk\AppData\Local\Akamai\netsession_win.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Valve Corporation) G:\Steam\Steam.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Kaspersky Lab ZAO) C:\Users\Patryk\AppData\Local\Temp\Rar$EXa0.586\SalityKiller.exe (OldTimer Tools) C:\Users\Patryk\Downloads\OTL.exe () C:\Users\Patryk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XRQ1U25B\kmmzlwm8.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKCU\...\Run: [NextLive] - C:\Users\Patryk\AppData\Roaming\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe) HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 MountPoints2: {9958ef88-df25-11e2-ac60-002522d14474} - F:\Setup.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.b1.org/?bsrc=hmior&chid=c167991 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Before = http://search.babylon.com/?babsrc=HP_ss_din2g&mntrId=AC5D002522D14474&affID=119357&tt=040713_ifrmful&tsp=4938 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1387656518&from=cor&uid=WDCXWD5000AADS-00M2B0_WD-WCAV5T60395803958&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1387656518&from=cor&uid=WDCXWD5000AADS-00M2B0_WD-WCAV5T60395803958&q={searchTerms} URLSearchHook: HKLM - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15} URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15} SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKLM - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchesplace.info/?l=1&q={searchTerms}&pid=930&r=2013/08/04&hid=4129496371&lg=EN&cc=PL&unqvl=30 SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchesplace.info/?l=1&q={searchTerms}&pid=930&r=2013/08/04&hid=4129496371&lg=EN&cc=PL&unqvl=30 BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: privitize Helper Object - {1ACB5ABE-4890-4747-952C-F13BDB93FB75} - C:\Program Files\Industriya\privitize\1.8.21.6\bh\privitize.dll (Industriya LLC) Toolbar: HKLM - No Name - {CA9B9C89-4662-4ADC-9C23-A452BECD5D19} - No File Toolbar: HKLM - No Name - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - No File DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\752vvgwe.default-1372538607783 FF user.js: detected! => C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\752vvgwe.default-1372538607783\user.js FF NewTab: about:newtab FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll No File FF Plugin: @esn/esnlaunch,version=2.1.4 - C:\Program Files\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File FF Plugin: @esn/esnlaunch,version=2.1.7 - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll No File FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll No File FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals) FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll No File FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll No File FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Patryk\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF SearchPlugin: C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\752vvgwe.default-1372538607783\searchplugins\privitize.xml FF SearchPlugin: C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\752vvgwe.default-1372538607783\searchplugins\WebSearch.xml FF Extension: BonanzaDeals - C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\752vvgwe.default-1372538607783\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca} [2013-12-21] FF Extension: BrowseSmart - C:\Users\Patryk\AppData\Roaming\Mozilla\Firefox\Profiles\752vvgwe.default-1372538607783\Extensions\firefox@browsesmart.net.xpi [2013-12-06] Chrome: ======= CHR HomePage: hxxp://google.pl/ CHR RestoreOnStartup: "hxxp://google.pl/", "hxxp://search.babylon.com/home?affID=17425", "" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File CHR Plugin: (ESN Sonar API) - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll No File CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File CHR Plugin: (Nexon Game Controller) - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll () CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\system32\npDeployJava1.dll No File CHR Extension: (Privitize Chrome Toolbar) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhfcbmlocifngpbjdpgnkbjmgkadkjpp [2013-08-08] CHR Extension: (BonanzaDeals) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj [2013-12-21] CHR Extension: (BrowseSmart) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ippenodjaoidmkkfdlmdhofiebnpjddb [2013-12-21] CHR Extension: (DefaultTab) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc [2013-12-14] CHR Extension: (Google Wallet) - C:\Users\Patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21] CHR HKLM\...\Chrome\Extension: [boipimhfjpakfgckhbljjengakjhkcbp] - C:\Users\Patryk\AppData\Roaming\CRMixiDJTB\mixiDJ.crx [2013-08-21] CHR HKLM\...\Chrome\Extension: [dgjkhjdcljddbedokogakmmdjgnbeanf] - C:\Users\Patryk\AppData\Roaming\SpeedAnalysis2\SpeedAnalysis.crx [2013-06-11] CHR HKLM\...\Chrome\Extension: [dhfcbmlocifngpbjdpgnkbjmgkadkjpp] - C:\Program Files\Industriya\privitize\1.8.21.6\privitize.crx [2013-05-21] CHR HKLM\...\Chrome\Extension: [ippenodjaoidmkkfdlmdhofiebnpjddb] - C:\Program Files\BrowseSmart\ippenodjaoidmkkfdlmdhofiebnpjddb.crx [2013-05-21] CHR HKLM\...\Chrome\Extension: [kdidombaedgpfiiedeimiebkmbilgmlc] - C:\Program Files\DefaultTab\DefaultTab.crx [2013-05-21] CHR HKLM\...\Chrome\Extension: [kpepfkjapeclaafmhoelccknpfedainn] - C:\Program Files\mixidj\mixidj\1.8.4.1\mixidj.crx [2013-05-21] ========================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235520 2014-01-24] (McAfee, Inc.) S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20480 2014-01-24] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14658848 2013-12-10] (NVIDIA Corporation) R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [1741624 2013-12-18] (AVG) R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [500224 2014-01-24] (Cherished Technololgy LIMITED) S3 NisSrv; "c:\Program Files\Microsoft Security Client\NisSrv.exe" [x] ==================== Drivers (Whitelisted) ==================== R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-06-27] (DT Soft Ltd) R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation) R2 npf; C:\Windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-05] (NVIDIA Corporation) R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2013-12-16] (TuneUp Software) R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1108480 2009-11-25] (VIA Technologies, Inc.) S3 AsrCDDrv; \??\C:\Windows\system32\Drivers\AsrCDDrv.sys [x] S1 bnpwgttx; \??\C:\Windows\system32\drivers\bnpwgttx.sys [x] S3 dgderdrv; System32\drivers\dgderdrv.sys [x] S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [x] S3 iSafeKrnl; \??\C:\Program Files\iSafe\iSafeKrnl.sys [x] S1 iSafeNetFilter; \??\C:\Program Files\iSafe\iSafeNetFilter.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] S3 WinRing0_1_2_0; \??\C:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys [x] S1 ylmpjkjk; \??\C:\Windows\system32\drivers\ylmpjkjk.sys [x] U3 kwrdipog; \??\C:\Users\Patryk\AppData\Local\Temp\kwrdipog.sys [x] ========================== Drivers MD5 ======================= C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit C:\Windows\system32\drivers\afd.sys 9EBBBA55060F786F0FCAA3893BFA2806 C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\djsvs.sys ==> MD5 is legit C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit C:\Windows\system32\drivers\amdagp.sys ==> MD5 is legit C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit C:\Windows\system32\drivers\amdsata.sys D320BF87125326F996D4904FE24300FC C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit C:\Windows\System32\drivers\amdxata.sys 46387FB17B086D16DEA267D5BE23A2F2 C:\Windows\system32\drivers\appid.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\avgdiskx.sys 9C7C45DE9E167F6268D32D6D10133F7D C:\Windows\System32\DRIVERS\avgidsdriverx.sys C66B17D93F94622293608C2FB91C5806 C:\Windows\System32\DRIVERS\avgidshx.sys 0C70FAB4B08DC1FF6612AA3F352CFCA9 C:\Windows\System32\DRIVERS\avgidsshimx.sys 4118A9D326A76D485713A36988102C3E C:\Windows\System32\DRIVERS\avgldx86.sys 578ECC3D911897B2C5B760EDAF8ED6CA C:\Windows\System32\DRIVERS\avglogx.sys BD1A440B9F126AFE52978A44952B0018 C:\Windows\System32\DRIVERS\avgmfx86.sys 7DC192EC714342E7C020C7CF42E394D8 C:\Windows\System32\DRIVERS\avgrkx86.sys E6322DF686CE1C59D7797FAEF0732454 C:\Windows\System32\DRIVERS\avgtdix.sys E98603F9D1F412F38ADF2F76053F9E5A C:\Windows\system32\DRIVERS\bxvbdx.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\b57nd60x.sys ==> MD5 is legit C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit C:\Windows\System32\CLFS.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 is legit C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit C:\Windows\System32\Drivers\cng.sys 247B4CE2DAB1160CD422D532D5241E1F C:\Windows\system32\DRIVERS\compbatt.sys ==> MD5 is legit C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit C:\Windows\System32\drivers\csc.sys ==> MD5 is legit C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit C:\Windows\System32\drivers\discache.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\dtsoftbus01.sys 687AF6BB383885FF6A64071B189A7F3E C:\Windows\System32\drivers\dxgkrnl.sys 16498EBC04AE9DD07049A8884B205C05 C:\Windows\system32\DRIVERS\evbdx.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legitB C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit C:\Windows\System32\Drivers\Fs_Rec.sys 7DAE5EBCC80E45D3253F4923DC424D05 C:\Windows\System32\DRIVERS\fvevol.sys E306A24D9694C724FA2491278BF50FDB C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\hamachi.sys 833051C6C6C42117191935F734CFBD97 C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit C:\Windows\system32\drivers\HdAudio.sys A5EF29D5315111C80A5C1ABAD14C8972 C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit C:\Windows\system32\drivers\iaStorV.sys 5CD5F9A5444E6CDCB0AC89BD62D8B76E C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit C:\Windows\System32\drivers\intelide.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit C:\Windows\System32\Drivers\ksecdd.sys B7895B4182C0D16F6EFADEB8081E8D36 C:\Windows\System32\Drivers\ksecpkg.sys D30159AC9237519FBC62C6EC247D2D46 C:\Windows\System32\DRIVERS\L1C62x86.sys 1A91EAAD2D73758140B3B7B6AD736573 C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\lvuvc.sys 5BC80451109A8DD7F2DDD35BCE2929A3 C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit C:\Windows\System32\drivers\modem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\MpFilter.sys CF105EE42E3F71E648CEBB3F666E1CF0 C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\mrxsmb.sys 5D16C921E3671636C0EBA3BBAAC5FD25 C:\Windows\System32\DRIVERS\mrxsmb10.sys 6D17A4791ACA19328C685D256349FEFC C:\Windows\System32\DRIVERS\mrxsmb20.sys B81F204D146000BE76651A50670A5E9E C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit C:\Windows\System32\drivers\ndis.sys 8C9C922D71F1CD4DEF73F186416B7896 C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\NisDrvWFP.sys 832E098BCA8235436FE2D8AE50AC3718 C:\Windows\System32\drivers\npf.sys B9730495E0CF674680121E34BD95A73B C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit C:\Windows\System32\Drivers\Ntfs.sys 5E43D2B0EE64123D4880DFA6626DEFDE C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit C:\Windows\System32\drivers\nvhda32v.sys FBEC0FD36ED61EFEE1E3063281EAB984 C:\Windows\System32\DRIVERS\nvlddmkm.sys FB20C4EE6242B71AB95A65AC2CE19161 C:\Windows\system32\drivers\nvraid.sys B3E25EE28883877076E0E1FF877D02E0 C:\Windows\system32\drivers\nvstor.sys 4380E59A170D88C4F1022EFF6719A8A4 C:\Windows\System32\drivers\nvvad32v.sys DAC9726D9C90631D6A1C0ECAA0226021 C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit C:\Windows\System32\drivers\partmgr.sys 3F34A1B4C5F6475F320C275E63AFCE9B C:\Windows\System32\DRIVERS\parvdm.sys ==> MD5 is legit C:\Windows\System32\drivers\pci.sys ==> MD5 is legit C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit C:\Windows\System32\drivers\rdpvideominiport.sys ==> MD5 is legit C:\Windows\System32\Drivers\RDPWD.sys F031683E6D1FEA157ABB2FF260B51E61 C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\Rtnicxp.sys 4E20765744BFBC16F6D6E5BD5598786B C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit C:\Windows\system32\drivers\sisagp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\srv.sys E4C2764065D66EA1D2D3EBC28FE99C46 C:\Windows\System32\DRIVERS\srv2.sys 03F0545BD8D4C77FA0AE1CEEDFCC71AB C:\Windows\System32\DRIVERS\srvnet.sys BE6BD660CAA6F291AE06A718A4FA8ABC C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit C:\Windows\System32\drivers\tcpip.sys D32FDAC73FCD76B85389C39BC1087F2A C:\Windows\System32\DRIVERS\tcpip.sys D32FDAC73FCD76B85389C39BC1087F2A C:\Windows\System32\drivers\tcpipreg.sys 3EEBD3BD93DA46A26E89893C7AB2FF3B C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit C:\Windows\System32\drivers\tdtcp.sys 2C2C5AFE7EE4F620D69C23C0617651A8 C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\tssecsrv.sys ==> MD5 is legit C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys E5049C43601473B5A909058596111229 C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit C:\Windows\system32\drivers\usbaudio.sys 1D9F2BD026E8E2D45033A4DF3F16B78C C:\Windows\System32\DRIVERS\usbccgp.sys BD9C55D7023C5DE374507ACC7A14E2AC C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\usbehci.sys F92DE757E4B7CE9C07C5E65423F3AE3B C:\Windows\System32\DRIVERS\usbhub.sys 8DC94AEC6A7E644A06135AE7506DC2E9 C:\Windows\system32\drivers\usbohci.sys E185D44FAC515A18D9DEDDC23C2CDF44 C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\USBSTOR.SYS F991AB9CC6B908DB552166768176896A C:\Windows\System32\DRIVERS\usbuhci.sys 68DF884CF41CDADA664BEB01DAF67E3D C:\Windows\System32\Drivers\usbvideo.sys 45F4E7BF43DB40A6C6B4D92C76CBC3F2 C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit C:\Windows\System32\drivers\vga.sys ==> MD5 is legit C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit C:\Windows\system32\drivers\viaagp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\viac7.sys ==> MD5 is legit C:\Windows\System32\drivers\viahduaa.sys 4B1C025D194BBB41B1D7E86B54D88DC1 C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit C:\Windows\System32\drivers\vmbus.sys ==> MD5 is legit C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit C:\Windows\System32\drivers\Wdf01000.sys A840213F1ACDCC175B4D1D5AAEAC0D7A C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\WinUsb.sys A67E5F9A400F3BD1BE3D80613B45F708 C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070 C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-25 16:24 - 2014-01-25 16:27 - 00000000 ____D C:\Users\Patryk\Desktop\fixitpc 2014-01-25 16:24 - 2014-01-25 16:24 - 01222144 _____ (Farbar) C:\Users\Patryk\Downloads\FRST.exe 2014-01-25 16:24 - 2014-01-25 16:24 - 00000000 ____D C:\FRST 2014-01-25 16:05 - 2014-01-25 16:05 - 00602112 _____ (OldTimer Tools) C:\Users\Patryk\Downloads\OTL.exe 2014-01-25 15:56 - 2014-01-25 15:56 - 00164134 _____ C:\Users\Patryk\Downloads\sk.zip 2014-01-24 23:06 - 2014-01-24 23:07 - 34249488 _____ (Riot Games) C:\Users\Patryk\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe 2014-01-24 23:01 - 2014-01-24 23:01 - 00000519 _____ C:\Users\Patryk\Desktop\Sejf gier.lnk 2014-01-24 22:18 - 2014-01-24 22:18 - 00002201 _____ C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk 2014-01-24 22:18 - 2014-01-24 22:18 - 00002159 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-24 22:18 - 2013-12-18 09:38 - 00036152 _____ (AVG) C:\Windows\system32\TURegOpt.exe 2014-01-24 22:18 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\system32\authuitu.dll 2014-01-24 22:17 - 2014-01-24 22:17 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\AVG 2014-01-24 22:11 - 2014-01-24 22:21 - 00000000 ____D C:\ProgramData\AVG 2014-01-24 22:09 - 2014-01-24 22:39 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-24 21:45 - 2014-01-24 21:45 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\AVG2014 2014-01-24 21:44 - 2014-01-24 22:25 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-24 21:44 - 2014-01-24 21:44 - 00000965 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-24 21:44 - 2014-01-24 21:44 - 00000000 ___HD C:\$AVG 2014-01-24 21:44 - 2014-01-24 21:44 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\TuneUp Software 2014-01-24 21:43 - 2014-01-24 22:14 - 00000000 ____D C:\Program Files\AVG 2014-01-24 21:41 - 2014-01-25 12:59 - 00000000 ____D C:\ProgramData\MFAData 2014-01-24 21:41 - 2014-01-24 21:47 - 00000000 ____D C:\Users\Patryk\AppData\Local\Avg2014 2014-01-24 21:41 - 2014-01-24 21:41 - 00000000 ____D C:\Users\Patryk\AppData\Local\MFAData 2014-01-23 18:45 - 2014-01-24 23:32 - 00000000 ____D C:\Program Files\LOLReplay 2014-01-23 18:45 - 2014-01-24 10:28 - 00000000 ____D C:\Users\Patryk\Documents\LOLReplay 2014-01-23 18:45 - 2014-01-23 18:45 - 00001851 _____ C:\Users\Public\Desktop\LOL Recorder.lnk 2014-01-22 23:32 - 2014-01-22 23:32 - 00000010 _____ C:\Users\Patryk\Desktop\Nowy dokument tekstowy.txt 2014-01-22 10:43 - 2014-01-25 15:49 - 00000000 ____D C:\Users\Patryk\AppData\Local\dxhr 2014-01-22 10:42 - 2014-01-22 10:42 - 00000000 ____D C:\Users\Patryk\AppData\Local\28050 2014-01-21 19:30 - 2014-01-24 21:49 - 01133568 _____ C:\Users\Patryk\Downloads\SteamSetup (1).exe 2014-01-20 19:53 - 2014-01-20 19:53 - 00233946 _____ C:\Windows\ExplorerSrv.exe 2014-01-20 14:54 - 2014-01-24 21:43 - 00000000 ____D C:\Windows\system32\appmgmt 2014-01-20 13:14 - 2014-01-25 10:23 - 00002128 _____ C:\Windows\PFRO.log 2014-01-19 10:00 - 2014-01-25 15:09 - 00203728 _____ C:\Windows\setupact.log 2014-01-19 10:00 - 2014-01-19 10:00 - 00000000 _____ C:\Windows\setuperr.log 2014-01-19 09:57 - 2014-01-24 21:49 - 01133568 _____ C:\Users\Patryk\Downloads\SteamSetup.exe 2014-01-18 12:07 - 2014-01-25 00:00 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2014-01-18 12:07 - 2014-01-18 12:07 - 00001124 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-01-17 20:28 - 2014-01-17 20:28 - 00000000 ____D C:\Users\Patryk\Documents\wazne 2014-01-13 20:16 - 2014-01-13 20:16 - 00000000 ____D C:\Users\Patryk\AppData\Local\SKIDROW 2014-01-13 20:14 - 2014-01-13 20:14 - 00000000 ____D C:\Users\Patryk\Documents\Stronghold 3 2014-01-10 22:04 - 2014-01-24 21:38 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-01-06 13:43 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-01-06 13:43 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-01-05 18:07 - 2014-01-05 18:07 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-01-05 17:52 - 2014-01-06 13:39 - 00000000 ____D C:\Program Files\FireFly Studios 2013-12-30 22:13 - 2013-12-30 23:19 - 00000000 ____D C:\Windows\Minidump 2013-12-30 14:30 - 2014-01-20 15:43 - 00000000 __SHD C:\Users\Patryk\AppData\Local\.# 2013-12-29 18:05 - 2014-01-20 15:43 - 00000000 ____D C:\Users\Patryk\AppData\Local\Akamai ==================== One Month Modified Files and Folders ======= 2014-01-25 16:27 - 2014-01-25 16:24 - 00000000 ____D C:\Users\Patryk\Desktop\fixitpc 2014-01-25 16:24 - 2014-01-25 16:24 - 01222144 _____ (Farbar) C:\Users\Patryk\Downloads\FRST.exe 2014-01-25 16:24 - 2014-01-25 16:24 - 00000000 ____D C:\FRST 2014-01-25 16:21 - 2013-03-20 15:28 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Skype 2014-01-25 16:14 - 2013-12-21 21:09 - 00000914 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job 2014-01-25 16:05 - 2014-01-25 16:05 - 00602112 _____ (OldTimer Tools) C:\Users\Patryk\Downloads\OTL.exe 2014-01-25 15:57 - 2013-03-24 16:52 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-01-25 15:57 - 2013-03-24 16:52 - 00000000 ____D C:\Program Files\WinRAR 2014-01-25 15:57 - 2009-07-14 03:04 - 00000233 _____ C:\Windows\system.ini 2014-01-25 15:56 - 2014-01-25 15:56 - 00164134 _____ C:\Users\Patryk\Downloads\sk.zip 2014-01-25 15:53 - 2013-12-21 02:04 - 00000000 ____D C:\Windows\pss 2014-01-25 15:49 - 2014-01-22 10:43 - 00000000 ____D C:\Users\Patryk\AppData\Local\dxhr 2014-01-25 15:49 - 2013-12-21 00:26 - 00326443 _____ C:\Windows\WindowsUpdate.log 2014-01-25 15:49 - 2013-08-08 19:35 - 00000000 ____D C:\ProgramData\Package Cache 2014-01-25 15:09 - 2014-01-19 10:00 - 00203728 _____ C:\Windows\setupact.log 2014-01-25 12:59 - 2014-01-24 21:41 - 00000000 ____D C:\ProgramData\MFAData 2014-01-25 10:32 - 2013-12-21 00:36 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\newnext.me 2014-01-25 10:31 - 2013-12-21 21:09 - 00000910 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job 2014-01-25 10:31 - 2009-07-14 05:34 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-25 10:31 - 2009-07-14 05:34 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-25 10:24 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-25 10:23 - 2014-01-20 13:14 - 00002128 _____ C:\Windows\PFRO.log 2014-01-25 10:23 - 2013-03-20 17:31 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-25 00:02 - 2013-11-16 19:28 - 00000000 ____D C:\Program Files\Spy Cleaner Free Version 2014-01-25 00:01 - 2013-12-21 21:08 - 00000000 ____D C:\Program Files\BonanzaDeals 2014-01-25 00:00 - 2014-01-18 12:07 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2014-01-24 23:38 - 2013-12-24 21:26 - 00000000 ____D C:\Program Files\Ventrilo 2014-01-24 23:38 - 2013-08-04 18:37 - 00000000 ____D C:\Program Files\WebSearch 2014-01-24 23:33 - 2013-12-21 21:09 - 00000000 ____D C:\Program Files\Mobogenie 2014-01-24 23:32 - 2014-01-23 18:45 - 00000000 ____D C:\Program Files\LOLReplay 2014-01-24 23:10 - 2013-12-21 15:05 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin 2014-01-24 23:07 - 2014-01-24 23:06 - 34249488 _____ (Riot Games) C:\Users\Patryk\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe 2014-01-24 23:01 - 2014-01-24 23:01 - 00000519 _____ C:\Users\Patryk\Desktop\Sejf gier.lnk 2014-01-24 22:46 - 2013-12-24 21:20 - 00000000 ____D C:\Program Files\Opera 2014-01-24 22:39 - 2014-01-24 22:09 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-24 22:39 - 2013-03-25 17:32 - 00000000 ____D C:\Users\Patryk\AppData\Local\Downloaded Installations 2014-01-24 22:35 - 2013-07-09 06:25 - 00444416 _____ C:\Program Files\Common Files\WinPcapNmap.exe 2014-01-24 22:25 - 2014-01-24 21:44 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-24 22:21 - 2014-01-24 22:11 - 00000000 ____D C:\ProgramData\AVG 2014-01-24 22:18 - 2014-01-24 22:18 - 00002201 _____ C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk 2014-01-24 22:18 - 2014-01-24 22:18 - 00002159 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-24 22:17 - 2014-01-24 22:17 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\AVG 2014-01-24 22:14 - 2014-01-24 21:43 - 00000000 ____D C:\Program Files\AVG 2014-01-24 21:49 - 2014-01-21 19:30 - 01133568 _____ C:\Users\Patryk\Downloads\SteamSetup (1).exe 2014-01-24 21:49 - 2014-01-19 09:57 - 01133568 _____ C:\Users\Patryk\Downloads\SteamSetup.exe 2014-01-24 21:47 - 2014-01-24 21:41 - 00000000 ____D C:\Users\Patryk\AppData\Local\Avg2014 2014-01-24 21:45 - 2014-01-24 21:45 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\AVG2014 2014-01-24 21:44 - 2014-01-24 21:44 - 00000965 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-24 21:44 - 2014-01-24 21:44 - 00000000 ___HD C:\$AVG 2014-01-24 21:44 - 2014-01-24 21:44 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\TuneUp Software 2014-01-24 21:43 - 2014-01-20 14:54 - 00000000 ____D C:\Windows\system32\appmgmt 2014-01-24 21:41 - 2014-01-24 21:41 - 00000000 ____D C:\Users\Patryk\AppData\Local\MFAData 2014-01-24 21:38 - 2014-01-10 22:04 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-01-24 10:28 - 2014-01-23 18:45 - 00000000 ____D C:\Users\Patryk\Documents\LOLReplay 2014-01-23 18:45 - 2014-01-23 18:45 - 00001851 _____ C:\Users\Public\Desktop\LOL Recorder.lnk 2014-01-22 23:32 - 2014-01-22 23:32 - 00000010 _____ C:\Users\Patryk\Desktop\Nowy dokument tekstowy.txt 2014-01-22 10:42 - 2014-01-22 10:42 - 00000000 ____D C:\Users\Patryk\AppData\Local\28050 2014-01-21 23:05 - 2013-12-21 09:07 - 00000000 ____D C:\Program Files\iSafe 2014-01-21 19:29 - 2013-12-21 09:07 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\iSafe 2014-01-20 19:53 - 2014-01-20 19:53 - 00233946 _____ C:\Windows\ExplorerSrv.exe 2014-01-20 19:53 - 2013-07-09 06:25 - 00000000 ____D C:\Program Files\WinPcap 2014-01-20 19:52 - 2013-08-23 12:18 - 00000000 ____D C:\Program Files\Common Files\Desura 2014-01-20 19:52 - 2013-08-07 22:52 - 00000000 ____D C:\Program Files\Common Files\Steam 2014-01-20 19:52 - 2013-06-27 17:15 - 00000000 ____D C:\Program Files\DAEMON Tools Lite 2014-01-20 19:52 - 2013-06-12 15:44 - 00000000 ____D C:\Program Files\McAfee Security Scan 2014-01-20 19:52 - 2013-03-24 20:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2014-01-20 19:52 - 2013-03-20 22:08 - 00000000 ____D C:\Program Files\Common Files\logishrd 2014-01-20 19:52 - 2013-03-19 16:27 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2014-01-20 19:52 - 2013-03-19 15:49 - 00000000 ____D C:\Program Files\Microsoft Security Client 2014-01-20 15:44 - 2013-11-14 16:44 - 00000000 ____D C:\Windows\system32\Tibia 2014-01-20 15:44 - 2013-04-04 15:31 - 00000000 ____D C:\Windows\system32\SPReview 2014-01-20 15:43 - 2013-12-30 14:30 - 00000000 __SHD C:\Users\Patryk\AppData\Local\.# 2014-01-20 15:43 - 2013-12-29 18:05 - 00000000 ____D C:\Users\Patryk\AppData\Local\Akamai 2014-01-20 15:43 - 2013-12-21 21:08 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\aartemis 2014-01-20 15:43 - 2013-12-21 00:36 - 00000000 ____D C:\Users\Patryk\AppData\Local\genienext 2014-01-20 15:43 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Patryk\AppData\Local\TeamSpeak 3 Client 2014-01-20 15:43 - 2013-08-04 18:36 - 00000000 ____D C:\ProgramData\sayfE suavee 2014-01-20 15:43 - 2013-07-31 18:55 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\B1Toolbar 2014-01-20 15:43 - 2013-06-13 18:21 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\File Scout 2014-01-20 15:43 - 2013-03-20 15:14 - 00000000 ____D C:\Users\Patryk\League of Legends 2014-01-20 15:43 - 2013-03-19 15:32 - 00000000 ____D C:\Windows\system32\Atheros_L1e 2014-01-20 15:43 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2014-01-20 14:58 - 2013-12-21 00:36 - 00000000 ____D C:\Users\Patryk\AppData\Local\Mobogenie 2014-01-20 14:28 - 2013-03-24 13:19 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\BitTorrent 2014-01-20 14:27 - 2013-03-19 15:32 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2014-01-19 10:00 - 2014-01-19 10:00 - 00000000 _____ C:\Windows\setuperr.log 2014-01-19 09:46 - 2013-06-27 17:15 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\DAEMON Tools Lite 2014-01-19 09:46 - 2013-04-30 15:32 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\TS3Client 2014-01-18 12:07 - 2014-01-18 12:07 - 00001124 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-01-17 20:28 - 2014-01-17 20:28 - 00000000 ____D C:\Users\Patryk\Documents\wazne 2014-01-16 15:49 - 2013-12-25 18:00 - 00000000 ____D C:\Users\Patryk\Desktop\wazne 2014-01-16 14:57 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles 2014-01-13 20:16 - 2014-01-13 20:16 - 00000000 ____D C:\Users\Patryk\AppData\Local\SKIDROW 2014-01-13 20:14 - 2014-01-13 20:14 - 00000000 ____D C:\Users\Patryk\Documents\Stronghold 3 2014-01-10 17:38 - 2013-12-21 00:36 - 00000000 ____D C:\Users\Patryk\AppData\Local\cache 2014-01-10 17:24 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF 2014-01-09 21:41 - 2013-12-21 00:36 - 00006539 _____ C:\Users\Patryk\daemonprocess.txt 2014-01-09 14:57 - 2013-11-14 16:44 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Tibia 2014-01-07 19:06 - 2009-07-14 05:53 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-06 13:39 - 2014-01-05 17:52 - 00000000 ____D C:\Program Files\FireFly Studios 2014-01-05 18:07 - 2014-01-05 18:07 - 00000000 ____D C:\Users\Patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-01-05 17:51 - 2013-03-19 15:35 - 00000000 ____D C:\Program Files\Common Files\InstallShield 2013-12-30 23:19 - 2013-12-30 22:13 - 00000000 ____D C:\Windows\Minidump ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== BCD ================================ Menedľer rozruchu systemu Windows --------------------------------- Identyfikator {bootmgr} device partition=\Device\HarddiskVolume1 description Windows Boot Manager locale pl-PL inherit {globalsettings} default {current} resumeobject {f9107e86-909f-11e2-a6c0-afab88176c0a} displayorder {current} toolsdisplayorder {memdiag} timeout 30 Moduˆ ˆadujĄcy rozruchu systemu Windows --------------------------------------- Identyfikator {current} device partition=C: path \Windows\system32\winload.exe description Windows 7 locale pl-PL inherit {bootloadersettings} recoverysequence {f9107e88-909f-11e2-a6c0-afab88176c0a} recoveryenabled Yes osdevice partition=C: systemroot \Windows resumeobject {f9107e86-909f-11e2-a6c0-afab88176c0a} nx OptIn increaseuserva 2800 Moduˆ ˆadujĄcy rozruchu systemu Windows --------------------------------------- Identyfikator {f9107e88-909f-11e2-a6c0-afab88176c0a} device ramdisk=[C:]\Recovery\f9107e88-909f-11e2-a6c0-afab88176c0a\Winre.wim,{f9107e89-909f-11e2-a6c0-afab88176c0a} path \windows\system32\winload.exe description Windows Recovery Environment inherit {bootloadersettings} osdevice ramdisk=[C:]\Recovery\f9107e88-909f-11e2-a6c0-afab88176c0a\Winre.wim,{f9107e89-909f-11e2-a6c0-afab88176c0a} systemroot \windows nx OptIn winpe Yes Wznawianie ze stanu hibernacji ------------------------------ Identyfikator {f9107e86-909f-11e2-a6c0-afab88176c0a} device partition=C: path \Windows\system32\winresume.exe description Windows Resume Application locale pl-PL inherit {resumeloadersettings} filedevice partition=C: filepath \hiberfil.sys pae No debugoptionenabled No Moduˆ testujĄcy pami©† systemu Windows -------------------------------------- Identyfikator {memdiag} device partition=\Device\HarddiskVolume1 path \boot\memtest.exe description Diagnostyka pami©ci systemu Windows locale pl-PL inherit {globalsettings} badmemoryaccess Yes Ustawienia usˆug EMS -------------------- Identyfikator {emssettings} bootems Yes Ustawienia debugera ------------------- Identyfikator {dbgsettings} debugtype Serial debugport 1 baudrate 115200 Uszkodzenia pami©ci RAM ----------------------- Identyfikator {badmemory} Ustawienia globalne ------------------- Identyfikator {globalsettings} inherit {dbgsettings} {emssettings} {badmemory} Ustawienia moduˆu ˆadujĄcego rozruchu ------------------------------------- Identyfikator {bootloadersettings} inherit {globalsettings} {hypervisorsettings} Ustawienia funkcji hypervisor ----------------------------- Identyfikator {hypervisorsettings} hypervisordebugtype Serial hypervisordebugport 1 hypervisorbaudrate 115200 Ustawienia moduˆu ˆadujĄcego wznawiania --------------------------------------- Identyfikator {resumeloadersettings} inherit {globalsettings} Opcje urzĄdzenia ---------------- Identyfikator {f9107e89-909f-11e2-a6c0-afab88176c0a} description Ramdisk Options ramdisksdidevice partition=C: ramdisksdipath \Recovery\f9107e88-909f-11e2-a6c0-afab88176c0a\boot.sdi