Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014 Ran by pc (administrator) on PC-KOMPUTER on 27-01-2014 15:12:42 Running from C:\Users\pc\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlx64.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (Somoto) C:\Users\pc\AppData\Local\FilesFrog Update Checker\update_checker.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe ==================== Registry (Whitelisted) ================== HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5199984 2011-06-20] (VIA) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-28] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG) HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [YTDownloader] - "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) MountPoints2: {29ba6ae3-8721-11e3-87fe-bc5ff4b68d5c} - G:\Setup.exe AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => File Not Found Startup: C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 3050A J611 series.lnk ShortcutTarget: Powiadomienia monitorowania tuszu - HP Deskjet 3050A J611 series.lnk -> C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyE0ByCzz0DyD0Czy0CtA0CtN0D0Tzu0SyByEyCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=1672835684&ir= HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyE0ByCzz0DyD0Czy0CtA0CtN0D0Tzu0SyByEyCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=1672835684&ir= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyE0ByCzz0DyD0Czy0CtA0CtN0D0Tzu0SyByEyCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=1672835684&ir= StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=fb5153ab-d329-1e3a-6a82-d2469dfc5c5e&searchtype=ds&q={searchTerms}&installDate=18/10/2013 SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=fb5153ab-d329-1e3a-6a82-d2469dfc5c5e&searchtype=ds&q={searchTerms}&installDate=18/10/2013 SearchScopes: HKCU - DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyE0ByCzz0DyD0Czy0CtA0CtN0D0Tzu0SyCzyyCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1941652583&ir= SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=fb5153ab-d329-1e3a-6a82-d2469dfc5c5e&searchtype=ds&q={searchTerms}&installDate=18/10/2013 SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyE0ByCzz0DyD0Czy0CtA0CtN0D0Tzu0SyCzyyCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1941652583&ir= SearchScopes: HKCU - {A8E1E413-7EDA-4502-83C8-65689731BD70} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyE0ByCzz0DyD0Czy0CtA0CtN0D0Tzu0SyByEyCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=1672835684&ir= BHO: The Amazon 1Button App for IE - {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} - C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonAppIE64.dll No File BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\yat7orbq.default FF user.js: detected! => C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\yat7orbq.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF SearchPlugin: C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\yat7orbq.default\searchplugins\iminent.xml FF SearchPlugin: C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\yat7orbq.default\searchplugins\ividi.xml FF SearchPlugin: C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\yat7orbq.default\searchplugins\Mysearchdial.xml FF Extension: MySearchDial NewTab - C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\yat7orbq.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-15] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (Search-Gol Toolbar) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac [2013-10-08] CHR Extension: (YouTube) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-08] CHR Extension: (Google Search) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-08] CHR Extension: (iVidi Chrome Toolbar) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdhgpkkloealnjnmepfhanpcleldbef [2013-11-12] CHR Extension: (Gmail) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-08] CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\pc\AppData\Local\mysearchdial-speeddial.crx [2013-11-26] CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\pc\AppData\Local\mysearchdial-speeddial.crx [2013-11-26] CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\pc\AppData\Local\mysearchdial-speeddial.crx [2013-11-26] ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-09-28] (Advanced Micro Devices, Inc.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlx64.exe [2562208 2013-10-15] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-06-14] (VIA Technologies, Inc.) ==================== Drivers (Whitelisted) ==================== R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-27] (Disc Soft Ltd) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-11-01] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-11-01] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2013-11-01] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2014-01-24] (G Data Software AG) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-11-01] (G Data Software AG) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2014-01-27] (Duplex Secure Ltd.) U3 a5c7b06d; C:\Windows\System32\Drivers\a5c7b06d.sys [0 ] (NVIDIA Corporation) S3 MSICDSetup; \??\E:\CDriver64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-27 15:12 - 2014-01-27 15:13 - 00012300 _____ C:\Users\pc\Downloads\FRST.txt 2014-01-27 15:10 - 2014-01-27 15:10 - 02078208 _____ (Farbar) C:\Users\pc\Downloads\FRST64.exe 2014-01-27 15:10 - 2014-01-27 15:10 - 00000000 ____D C:\FRST 2014-01-27 14:39 - 2014-01-27 14:39 - 00666648 _____ C:\Users\pc\Downloads\NET-Framework(12105).exe 2014-01-27 14:33 - 2014-01-27 14:33 - 02869264 _____ (Microsoft Corporation) C:\Users\pc\Downloads\dotNetFx35setup(1).exe 2014-01-27 14:32 - 2014-01-27 14:32 - 02869264 _____ (Microsoft Corporation) C:\Users\pc\Downloads\dotNetFx35setup.exe 2014-01-27 13:30 - 2014-01-27 13:30 - 00000670 _____ C:\Users\Public\Desktop\MailShare.lnk 2014-01-27 13:30 - 2009-12-12 16:15 - 00206848 _____ C:\Windows\system32\unrar.dll 2014-01-27 13:29 - 2014-01-27 13:29 - 09040305 _____ (MailShare ) C:\Users\pc\Downloads\MailShare_[www.programosy.pl].exe 2014-01-27 12:32 - 2014-01-27 12:44 - 00001492 _____ C:\Users\pc\Desktop\skrzynki.txt 2014-01-27 09:10 - 2014-01-27 09:10 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-01-27 09:08 - 2014-01-27 09:10 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2014-01-27 09:08 - 2014-01-27 09:08 - 00001954 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-01-27 09:07 - 2014-01-27 09:07 - 13485616 _____ (Disc Soft Ltd) C:\Users\pc\Downloads\DTLite4481-0347_[www.programosy.pl].exe 2014-01-27 09:06 - 2014-01-27 09:06 - 00666648 _____ C:\Users\pc\Downloads\DAEMON-Tools-Lite(12708).exe 2014-01-27 09:06 - 2014-01-27 09:06 - 00643880 _____ C:\Users\pc\Downloads\DTLite4481-0347_Downloader.exe 2014-01-27 08:03 - 2014-01-27 09:08 - 00381440 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-01-27 01:55 - 2014-01-27 01:56 - 00000000 ____D C:\Users\pc\AppData\Roaming\Oxy 2014-01-27 01:55 - 2014-01-27 01:55 - 06177736 _____ C:\Users\pc\Downloads\Train_Simulator_2014_Downloader.exe 2014-01-27 01:49 - 2014-01-27 01:49 - 00000611 _____ C:\Users\pc\Desktop\Train Simulator 2014.lnk 2014-01-26 21:52 - 2014-01-27 08:10 - 00000000 ____D C:\Users\pc\AppData\Roaming\uTorrent 2014-01-26 21:52 - 2014-01-26 21:52 - 00661519 _____ C:\Users\pc\Downloads\uTorrent-1.6.1-install.exe 2014-01-26 21:52 - 2014-01-26 21:52 - 00000971 _____ C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-01-26 21:52 - 2014-01-26 21:52 - 00000947 _____ C:\Users\pc\Desktop\µTorrent.lnk 2014-01-26 21:52 - 2014-01-26 21:52 - 00000000 ____D C:\Program Files (x86)\uTorrent 2014-01-26 21:50 - 2014-01-26 21:50 - 00666648 _____ C:\Users\pc\Downloads\BitTorrent(13103).exe 2014-01-26 21:47 - 2014-01-26 21:47 - 00643880 _____ C:\Users\pc\Downloads\BitTorrent_Downloader.exe 2014-01-26 14:21 - 2013-07-10 03:39 - 00000000 ____D C:\Users\pc\Downloads\TS2013_BR185Pack_v2.1 2014-01-26 14:21 - 2013-03-11 01:26 - 00000000 ____D C:\Users\pc\Downloads\ThyssenKrupp 2014-01-26 14:21 - 2012-05-09 17:38 - 00000000 ____D C:\Users\pc\Downloads\RW3Italia_Carri_Laaers_v1.1 2014-01-26 14:21 - 2012-05-09 17:34 - 00000000 ____D C:\Users\pc\Downloads\RW3Italia_Carri_Sggnss_Pack_v2.1 2014-01-26 14:21 - 2012-05-07 22:14 - 00000000 ____D C:\Users\pc\Downloads\RW3Italia_Carri_Smmps_Pack_v2.0 2014-01-26 14:21 - 2012-05-07 15:54 - 00000000 ____D C:\Users\pc\Downloads\RW3Italia_Carri_Kgps_Pack_v2.0 2014-01-26 14:21 - 2012-04-30 00:30 - 00000000 ____D C:\Users\pc\Downloads\Sdggmrss Extra Pack 01 2014-01-26 14:21 - 2012-02-24 09:42 - 00000000 ____D C:\Users\pc\Downloads\Eurofimawagen - Deutsche Bahn 2014-01-26 14:21 - 2012-01-20 06:42 - 00000000 ____D C:\Users\pc\Downloads\BR 294 - DB rot 2014-01-26 14:21 - 2011-10-29 02:28 - 00000000 ____D C:\Users\pc\Downloads\BR 189 - Repaints 2014-01-26 14:21 - 2011-10-29 02:04 - 00000000 ____D C:\Users\pc\Downloads\Siemens ES64F4 - BR 189 2014-01-26 14:21 - 2009-11-07 00:53 - 00000000 ____D C:\Users\pc\Downloads\RSItaliaRW_Carri_Rils_Pack 2014-01-26 14:21 - 2009-06-28 08:49 - 00000000 ____D C:\Users\pc\Downloads\RSItaliaRW_Carri_Cisterna_Pack 2014-01-26 14:21 - 2009-04-27 07:32 - 00000000 ____D C:\Users\pc\Downloads\RSItalia_Carri_Shimmns_Pack_v1.0 2014-01-26 13:43 - 2014-01-26 13:43 - 00000000 ____D C:\Users\pc\AppData\Roaming\LogMate 2014-01-26 13:41 - 2014-01-26 13:41 - 02145696 _____ C:\Users\pc\Desktop\blxt_habre_pack03.zip 2014-01-25 14:26 - 2014-01-25 14:26 - 00000000 ____D C:\Users\pc\Desktop\12 2014-01-25 14:25 - 2014-01-25 14:25 - 00000000 ____D C:\Users\pc\Desktop\Uploads 2014-01-24 01:01 - 2014-01-24 01:02 - 00000000 ____D C:\ProgramData\Oracle 2014-01-24 00:30 - 2014-01-24 00:30 - 00000145 _____ C:\Windows\SysWOW64\interfaces.bat 2014-01-24 00:27 - 2014-01-24 00:39 - 00000000 ____D C:\Users\pc\AppData\Local\BartVPN 2014-01-23 13:44 - 2014-01-23 13:44 - 00000000 ____D C:\Users\pc\Documents\MightAndMagicXLegacy 2014-01-21 20:50 - 2014-01-21 20:50 - 00000000 ____D C:\Users\pc\Documents\Larian Studios 2014-01-20 22:36 - 2014-01-21 21:00 - 00000196 _____ C:\Users\pc\Desktop\godziny.txt 2014-01-20 21:17 - 2013-09-01 11:59 - 01103872 _____ C:\Windows\SysWOW64\CBLCtlsU.ocx 2014-01-20 21:17 - 2013-07-13 11:15 - 00805376 _____ C:\Windows\SysWOW64\EditCtlsU.ocx 2014-01-20 21:17 - 2013-07-12 21:57 - 00539648 _____ C:\Windows\SysWOW64\LblCtlsU.ocx 2014-01-20 21:17 - 2013-04-05 12:55 - 00476160 _____ C:\Windows\SysWOW64\TabStripCtlU.ocx 2014-01-20 21:17 - 2013-03-28 22:13 - 00645632 _____ C:\Windows\SysWOW64\BtnCtlsU.ocx 2014-01-20 21:17 - 2013-03-03 13:37 - 01061888 _____ C:\Windows\SysWOW64\ExLvwU.ocx 2014-01-20 21:17 - 1999-05-12 23:00 - 01064456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomctl.ocx 2014-01-20 21:17 - 1999-05-06 23:00 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.OCX 2014-01-19 21:13 - 2014-01-19 21:13 - 00000000 ____D C:\Program Files (x86)\Gas Guzzlers Extreme 2014-01-19 21:08 - 2014-01-19 21:08 - 00000000 ____D C:\Users\pc\Documents\Gamepires 2014-01-16 16:37 - 2006-03-31 12:39 - 00067280 _____ C:\Users\pc\infinst.exe 2014-01-16 16:34 - 2014-01-16 16:34 - 00000000 ____D C:\Users\pc\Documents\Ghost Games 2014-01-16 01:17 - 2014-01-17 14:18 - 00000000 ____D C:\Users\pc\Documents\SpellForce2 2014-01-16 00:24 - 2014-01-16 00:24 - 00000000 ____D C:\Users\pc\AppData\Roaming\IsolatedStorage 2014-01-16 00:24 - 2014-01-16 00:24 - 00000000 ____D C:\Users\pc\AppData\Local\FileViewPro 2014-01-16 00:24 - 2014-01-16 00:24 - 00000000 ____D C:\ProgramData\IsolatedStorage 2014-01-16 00:22 - 2014-01-16 00:25 - 00000000 ____D C:\Users\pc\AppData\Roaming\Solvusoft 2014-01-16 00:22 - 2014-01-16 00:22 - 00000000 ____D C:\Spacekace 2014-01-15 18:12 - 2014-01-15 18:12 - 00000000 ____D C:\Users\pc\Documents\Assassin's Creed Liberation HD 2014-01-15 18:08 - 2014-01-15 18:09 - 00000000 ____D C:\Users\pc\AppData\Roaming\mysearchdial 2014-01-15 14:10 - 2014-01-15 14:10 - 00000000 ____D C:\Users\pc\AppData\Roaming\TheBannerSaga 2014-01-15 13:56 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 13:56 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 13:56 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 13:56 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 13:56 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 13:56 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 13:56 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 13:56 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 13:56 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 12:35 - 2014-01-14 12:37 - 00000000 ____D C:\Users\pc\Documents\Xenonauts 2014-01-14 12:35 - 2014-01-14 12:35 - 00000000 ____D C:\Users\pc\AppData\Roaming\PlayFirst 2014-01-14 12:35 - 2014-01-14 12:35 - 00000000 ____D C:\ProgramData\PlayFirst 2014-01-12 17:46 - 2014-01-12 17:46 - 00000000 ____D C:\Users\Public\Documents\DAEMON Tools Images 2014-01-11 17:36 - 2014-01-23 13:45 - 00000000 ____D C:\ProgramData\Orbit 2014-01-11 17:35 - 2014-01-12 13:18 - 00000000 ____D C:\Users\pc\AppData\Local\Ubisoft Game Launcher 2014-01-11 17:31 - 2014-01-12 13:18 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2014-01-04 19:01 - 2014-01-04 19:01 - 00000000 ____D C:\Users\pc\Documents\IAmAlive 2014-01-03 09:04 - 2014-01-03 09:04 - 00000000 ____D C:\Users\pc\Documents\Telltale Games 2014-01-03 08:06 - 2014-01-27 09:09 - 00008388 _____ C:\Windows\PFRO.log 2014-01-02 22:12 - 2014-01-04 01:37 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2014-01-02 22:12 - 2014-01-02 22:12 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2014-01-02 22:12 - 2014-01-02 22:12 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2014-01-02 22:10 - 2014-01-02 22:16 - 00005505 _____ C:\Users\pc\Documents\Dragon Age Origins 1.05.log 2014-01-02 21:26 - 2014-01-04 01:54 - 00016290 _____ C:\Users\pc\Documents\Uninstall Dragon Age Początek.log 2014-01-02 21:06 - 2014-01-02 22:09 - 00046338 _____ C:\Users\pc\Documents\Install Dragon Age Początek.log 2014-01-02 15:22 - 2014-01-19 10:39 - 00000000 ____D C:\Users\pc\Documents\The Raven 2014-01-02 08:08 - 2014-01-24 19:43 - 00121755 _____ C:\Windows\DirectX.log 2014-01-01 18:35 - 2014-01-27 09:09 - 00002632 _____ C:\Windows\setupact.log 2014-01-01 18:35 - 2014-01-01 18:35 - 00000000 _____ C:\Windows\setuperr.log 2013-12-31 12:21 - 2013-12-31 12:21 - 00000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP 2013-12-30 15:52 - 2013-12-30 15:52 - 00000000 ____D C:\Users\pc\AppData\Roaming\Games 2013-12-30 15:51 - 2013-12-30 15:51 - 00000000 ____D C:\ProgramData\Solidshield 2013-12-30 00:05 - 2013-12-30 00:05 - 00000000 ____D C:\Users\pc\Documents\Shadowrun Returns 2013-12-30 00:05 - 2013-12-30 00:05 - 00000000 ____D C:\Users\pc\AppData\Local\Harebrained Schemes 2013-12-29 08:41 - 2013-12-29 08:42 - 00000000 ____D C:\Users\pc\Zomboid 2013-12-28 09:55 - 2013-12-28 09:55 - 00000000 ____D C:\Users\pc\AppData\Roaming\Landwirt2014 ==================== One Month Modified Files and Folders ======= 2014-01-27 15:13 - 2014-01-27 15:12 - 00012300 _____ C:\Users\pc\Downloads\FRST.txt 2014-01-27 15:10 - 2014-01-27 15:10 - 02078208 _____ (Farbar) C:\Users\pc\Downloads\FRST64.exe 2014-01-27 15:10 - 2014-01-27 15:10 - 00000000 ____D C:\FRST 2014-01-27 15:09 - 2013-11-26 21:02 - 00000280 _____ C:\Windows\Tasks\MySearchDial.job 2014-01-27 15:07 - 2009-07-14 05:45 - 00028912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-27 15:07 - 2009-07-14 05:45 - 00028912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-27 14:53 - 2013-10-08 18:43 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-27 14:39 - 2014-01-27 14:39 - 00666648 _____ C:\Users\pc\Downloads\NET-Framework(12105).exe 2014-01-27 14:34 - 2013-09-27 17:40 - 01950599 _____ C:\Windows\WindowsUpdate.log 2014-01-27 14:33 - 2014-01-27 14:33 - 02869264 _____ (Microsoft Corporation) C:\Users\pc\Downloads\dotNetFx35setup(1).exe 2014-01-27 14:33 - 2013-11-02 21:47 - 00000000 ____D C:\ProgramData\Package Cache 2014-01-27 14:32 - 2014-01-27 14:32 - 02869264 _____ (Microsoft Corporation) C:\Users\pc\Downloads\dotNetFx35setup.exe 2014-01-27 13:30 - 2014-01-27 13:30 - 00000670 _____ C:\Users\Public\Desktop\MailShare.lnk 2014-01-27 13:29 - 2014-01-27 13:29 - 09040305 _____ (MailShare ) C:\Users\pc\Downloads\MailShare_[www.programosy.pl].exe 2014-01-27 13:19 - 2013-12-08 01:19 - 00001260 _____ C:\Windows\Tasks\iWebar-updater.job 2014-01-27 13:17 - 2013-12-08 01:17 - 00001290 _____ C:\Windows\Tasks\Plus-HD-2.2-updater.job 2014-01-27 12:44 - 2014-01-27 12:32 - 00001492 _____ C:\Users\pc\Desktop\skrzynki.txt 2014-01-27 12:28 - 2013-10-15 21:12 - 00000000 ____D C:\ProgramData\Adobe 2014-01-27 09:14 - 2011-04-12 14:21 - 00737730 _____ C:\Windows\system32\perfh015.dat 2014-01-27 09:14 - 2011-04-12 14:21 - 00154418 _____ C:\Windows\system32\perfc015.dat 2014-01-27 09:14 - 2009-07-14 06:13 - 01662556 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-27 09:10 - 2014-01-27 09:10 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-01-27 09:10 - 2014-01-27 09:08 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2014-01-27 09:09 - 2014-01-03 08:06 - 00008388 _____ C:\Windows\PFRO.log 2014-01-27 09:09 - 2014-01-01 18:35 - 00002632 _____ C:\Windows\setupact.log 2014-01-27 09:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-27 09:08 - 2014-01-27 09:08 - 00001954 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-01-27 09:08 - 2014-01-27 08:03 - 00381440 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-01-27 09:07 - 2014-01-27 09:07 - 13485616 _____ (Disc Soft Ltd) C:\Users\pc\Downloads\DTLite4481-0347_[www.programosy.pl].exe 2014-01-27 09:06 - 2014-01-27 09:06 - 00666648 _____ C:\Users\pc\Downloads\DAEMON-Tools-Lite(12708).exe 2014-01-27 09:06 - 2014-01-27 09:06 - 00643880 _____ C:\Users\pc\Downloads\DTLite4481-0347_Downloader.exe 2014-01-27 08:10 - 2014-01-26 21:52 - 00000000 ____D C:\Users\pc\AppData\Roaming\uTorrent 2014-01-27 01:56 - 2014-01-27 01:55 - 00000000 ____D C:\Users\pc\AppData\Roaming\Oxy 2014-01-27 01:55 - 2014-01-27 01:55 - 06177736 _____ C:\Users\pc\Downloads\Train_Simulator_2014_Downloader.exe 2014-01-27 01:49 - 2014-01-27 01:49 - 00000611 _____ C:\Users\pc\Desktop\Train Simulator 2014.lnk 2014-01-26 21:52 - 2014-01-26 21:52 - 00661519 _____ C:\Users\pc\Downloads\uTorrent-1.6.1-install.exe 2014-01-26 21:52 - 2014-01-26 21:52 - 00000971 _____ C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-01-26 21:52 - 2014-01-26 21:52 - 00000947 _____ C:\Users\pc\Desktop\µTorrent.lnk 2014-01-26 21:52 - 2014-01-26 21:52 - 00000000 ____D C:\Program Files (x86)\uTorrent 2014-01-26 21:50 - 2014-01-26 21:50 - 00666648 _____ C:\Users\pc\Downloads\BitTorrent(13103).exe 2014-01-26 21:47 - 2014-01-26 21:47 - 00643880 _____ C:\Users\pc\Downloads\BitTorrent_Downloader.exe 2014-01-26 13:43 - 2014-01-26 13:43 - 00000000 ____D C:\Users\pc\AppData\Roaming\LogMate 2014-01-26 13:41 - 2014-01-26 13:41 - 02145696 _____ C:\Users\pc\Desktop\blxt_habre_pack03.zip 2014-01-25 19:29 - 2013-11-14 12:32 - 00000000 ____D C:\Users\pc\AppData\Roaming\StarTrekPC 2014-01-25 14:26 - 2014-01-25 14:26 - 00000000 ____D C:\Users\pc\Desktop\12 2014-01-25 14:25 - 2014-01-25 14:25 - 00000000 ____D C:\Users\pc\Desktop\Uploads 2014-01-25 10:18 - 2013-10-08 18:56 - 00000000 ____D C:\Users\pc\AppData\Local\SKIDROW 2014-01-24 22:46 - 2013-11-01 14:51 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-01-24 22:46 - 2013-11-01 14:51 - 00001929 _____ C:\Users\Public\Desktop\G Data AntiVirus 2014.lnk 2014-01-24 19:43 - 2014-01-02 08:08 - 00121755 _____ C:\Windows\DirectX.log 2014-01-24 19:08 - 2013-10-08 18:44 - 00000000 ____D C:\Users\pc\AppData\Roaming\Mozilla 2014-01-24 01:02 - 2014-01-24 01:01 - 00000000 ____D C:\ProgramData\Oracle 2014-01-24 00:39 - 2014-01-24 00:27 - 00000000 ____D C:\Users\pc\AppData\Local\BartVPN 2014-01-24 00:39 - 2013-09-27 17:40 - 00000000 ___RD C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-24 00:30 - 2014-01-24 00:30 - 00000145 _____ C:\Windows\SysWOW64\interfaces.bat 2014-01-23 13:45 - 2014-01-11 17:36 - 00000000 ____D C:\ProgramData\Orbit 2014-01-23 13:44 - 2014-01-23 13:44 - 00000000 ____D C:\Users\pc\Documents\MightAndMagicXLegacy 2014-01-21 21:00 - 2014-01-20 22:36 - 00000196 _____ C:\Users\pc\Desktop\godziny.txt 2014-01-21 20:50 - 2014-01-21 20:50 - 00000000 ____D C:\Users\pc\Documents\Larian Studios 2014-01-19 21:13 - 2014-01-19 21:13 - 00000000 ____D C:\Program Files (x86)\Gas Guzzlers Extreme 2014-01-19 21:08 - 2014-01-19 21:08 - 00000000 ____D C:\Users\pc\Documents\Gamepires 2014-01-19 10:39 - 2014-01-02 15:22 - 00000000 ____D C:\Users\pc\Documents\The Raven 2014-01-17 14:18 - 2014-01-16 01:17 - 00000000 ____D C:\Users\pc\Documents\SpellForce2 2014-01-16 16:37 - 2013-09-27 17:40 - 00000000 ____D C:\Users\pc 2014-01-16 16:34 - 2014-01-16 16:34 - 00000000 ____D C:\Users\pc\Documents\Ghost Games 2014-01-16 07:24 - 2009-07-14 05:45 - 00447664 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-16 01:52 - 2013-10-15 21:45 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-16 01:52 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini 2014-01-16 01:51 - 2013-10-28 14:26 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 01:50 - 2013-10-28 14:26 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 00:25 - 2014-01-16 00:22 - 00000000 ____D C:\Users\pc\AppData\Roaming\Solvusoft 2014-01-16 00:24 - 2014-01-16 00:24 - 00000000 ____D C:\Users\pc\AppData\Roaming\IsolatedStorage 2014-01-16 00:24 - 2014-01-16 00:24 - 00000000 ____D C:\Users\pc\AppData\Local\FileViewPro 2014-01-16 00:24 - 2014-01-16 00:24 - 00000000 ____D C:\ProgramData\IsolatedStorage 2014-01-16 00:22 - 2014-01-16 00:22 - 00000000 ____D C:\Spacekace 2014-01-16 00:09 - 2013-10-26 19:26 - 00000000 ____D C:\Users\pc\Documents\My Games 2014-01-15 18:12 - 2014-01-15 18:12 - 00000000 ____D C:\Users\pc\Documents\Assassin's Creed Liberation HD 2014-01-15 18:09 - 2014-01-15 18:08 - 00000000 ____D C:\Users\pc\AppData\Roaming\mysearchdial 2014-01-15 18:09 - 2013-11-26 21:02 - 00003220 _____ C:\Windows\System32\Tasks\MySearchDial 2014-01-15 18:08 - 2013-11-26 20:43 - 00366611 _____ C:\Users\pc\AppData\Local\mysearchdial-speeddial.crx 2014-01-15 14:10 - 2014-01-15 14:10 - 00000000 ____D C:\Users\pc\AppData\Roaming\TheBannerSaga 2014-01-15 08:01 - 2013-09-27 17:47 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2014-01-14 12:37 - 2014-01-14 12:35 - 00000000 ____D C:\Users\pc\Documents\Xenonauts 2014-01-14 12:35 - 2014-01-14 12:35 - 00000000 ____D C:\Users\pc\AppData\Roaming\PlayFirst 2014-01-14 12:35 - 2014-01-14 12:35 - 00000000 ____D C:\ProgramData\PlayFirst 2014-01-12 17:46 - 2014-01-12 17:46 - 00000000 ____D C:\Users\Public\Documents\DAEMON Tools Images 2014-01-12 17:38 - 2013-12-14 13:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-01-12 13:18 - 2014-01-11 17:35 - 00000000 ____D C:\Users\pc\AppData\Local\Ubisoft Game Launcher 2014-01-12 13:18 - 2014-01-11 17:31 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2014-01-06 21:52 - 2013-10-08 14:39 - 00000000 ____D C:\Users\pc\Desktop\rachunki 2014-01-04 19:01 - 2014-01-04 19:01 - 00000000 ____D C:\Users\pc\Documents\IAmAlive 2014-01-04 01:54 - 2014-01-02 21:26 - 00016290 _____ C:\Users\pc\Documents\Uninstall Dragon Age Początek.log 2014-01-04 01:37 - 2014-01-02 22:12 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2014-01-03 09:04 - 2014-01-03 09:04 - 00000000 ____D C:\Users\pc\Documents\Telltale Games 2014-01-03 09:04 - 2013-10-08 16:57 - 00000000 ____D C:\ProgramData\Steam 2014-01-02 22:16 - 2014-01-02 22:10 - 00005505 _____ C:\Users\pc\Documents\Dragon Age Origins 1.05.log 2014-01-02 22:12 - 2014-01-02 22:12 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2014-01-02 22:12 - 2014-01-02 22:12 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2014-01-02 22:09 - 2014-01-02 21:06 - 00046338 _____ C:\Users\pc\Documents\Install Dragon Age Początek.log 2014-01-02 21:17 - 2013-10-08 18:43 - 00000000 ____D C:\Users\pc\AppData\Roaming\Adobe 2014-01-02 08:23 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2014-01-01 18:35 - 2014-01-01 18:35 - 00000000 _____ C:\Windows\setuperr.log 2013-12-31 12:21 - 2013-12-31 12:21 - 00000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP 2013-12-30 15:52 - 2013-12-30 15:52 - 00000000 ____D C:\Users\pc\AppData\Roaming\Games 2013-12-30 15:51 - 2013-12-30 15:51 - 00000000 ____D C:\ProgramData\Solidshield 2013-12-30 00:05 - 2013-12-30 00:05 - 00000000 ____D C:\Users\pc\Documents\Shadowrun Returns 2013-12-30 00:05 - 2013-12-30 00:05 - 00000000 ____D C:\Users\pc\AppData\Local\Harebrained Schemes 2013-12-29 08:42 - 2013-12-29 08:41 - 00000000 ____D C:\Users\pc\Zomboid 2013-12-28 09:55 - 2013-12-28 09:55 - 00000000 ____D C:\Users\pc\AppData\Roaming\Landwirt2014 Files to move or delete: ==================== C:\Users\pc\infinst.exe C:\Users\Public\AlexaNSISPlugin.1908.dll Some content of TEMP: ==================== C:\Users\pc\AppData\Local\Temp\1280uninstall.exe C:\Users\pc\AppData\Local\Temp\3346uninstall.exe C:\Users\pc\AppData\Local\Temp\83513uninstall.exe C:\Users\pc\AppData\Local\Temp\afgytdrp_155388_setup.exe C:\Users\pc\AppData\Local\Temp\appshat-distribution.exe C:\Users\pc\AppData\Local\Temp\BingBarSetup-Partner.exe C:\Users\pc\AppData\Local\Temp\burn4free-setup-silent.exe C:\Users\pc\AppData\Local\Temp\CmdLineExt02.dll C:\Users\pc\AppData\Local\Temp\drm_dialogs.dll C:\Users\pc\AppData\Local\Temp\dufgmr4c.exe C:\Users\pc\AppData\Local\Temp\fp_pl_pfs_installer-1.exe C:\Users\pc\AppData\Local\Temp\fp_pl_pfs_installer-2.exe C:\Users\pc\AppData\Local\Temp\fp_pl_pfs_installer-3.exe C:\Users\pc\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\pc\AppData\Local\Temp\hdfgjd2.exe C:\Users\pc\AppData\Local\Temp\htmlayout.dll C:\Users\pc\AppData\Local\Temp\i4jdel0.exe C:\Users\pc\AppData\Local\Temp\ICReinstall_BitTorrent_Downloader.exe C:\Users\pc\AppData\Local\Temp\ICReinstall_DTLite4481-0347_Downloader.exe C:\Users\pc\AppData\Local\Temp\Installer.exe C:\Users\pc\AppData\Local\Temp\iupdate.exe C:\Users\pc\AppData\Local\Temp\iv_uninstall.exe C:\Users\pc\AppData\Local\Temp\MSIAFTERBURNERSETUP.EXE C:\Users\pc\AppData\Local\Temp\nsc26A8.exe C:\Users\pc\AppData\Local\Temp\nscC4DA.exe C:\Users\pc\AppData\Local\Temp\nsz5251.exe C:\Users\pc\AppData\Local\Temp\OptimizerPro.exe C:\Users\pc\AppData\Local\Temp\ose00000.exe C:\Users\pc\AppData\Local\Temp\ose00002.exe C:\Users\pc\AppData\Local\Temp\setup.exe C:\Users\pc\AppData\Local\Temp\setupA9_.exe C:\Users\pc\AppData\Local\Temp\SETUP_AFTERBURNER.EXE C:\Users\pc\AppData\Local\Temp\SIntf16.dll C:\Users\pc\AppData\Local\Temp\SIntf32.dll C:\Users\pc\AppData\Local\Temp\SIntfNT.dll C:\Users\pc\AppData\Local\Temp\soiygu3.exe C:\Users\pc\AppData\Local\Temp\sonarinst.exe C:\Users\pc\AppData\Local\Temp\Sqlite3.dll C:\Users\pc\AppData\Local\Temp\tmp877A.exe C:\Users\pc\AppData\Local\Temp\uninst1.exe C:\Users\pc\AppData\Local\Temp\UpdateCheckerSetup.exe C:\Users\pc\AppData\Local\Temp\utt2C5A.tmp.exe C:\Users\pc\AppData\Local\Temp\utt958B.tmp.exe C:\Users\pc\AppData\Local\Temp\uttF759.tmp.exe C:\Users\pc\AppData\Local\Temp\vpbypc35.exe C:\Users\pc\AppData\Local\Temp\wajam_download.exe C:\Users\pc\AppData\Local\Temp\war3_Install.exe C:\Users\pc\AppData\Local\Temp\YTDUninst.exe C:\Users\pc\AppData\Local\Temp\ytd_bu10_setup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-21 17:37 ==================== End Of Log ============================