Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01 Ran by Miły (administrator) on DESTINY on 13-02-2014 23:08:39 Running from C:\Users\Miły\Desktop\Nowy folder Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\windows\system32\WLANExt.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Software 2000 Limited) C:\windows\system32\spool\DRIVERS\x64\3\HP1006MC.EXE (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Opera Software) C:\Program Files (x86)\Opera\opera.exe (Microsoft Corporation) C:\windows\system32\msiexec.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11369576 2010-08-11] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2586504 2010-08-05] (ELAN Microelectronics Corp.) HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [ShadowPlay] - C:\windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation) AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-10-23] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-10-23] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hao.dashi.com SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Ó¦Óñ¦Ň»Ľü°˛×°˛ĺĽţ - {50F4150A-48B2-417A-BE4C-C83F580FB904} - C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll (腾讯公司) DPF: HKLM-x32 {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 192.168.0.1 ==================== Services (Whitelisted) ================= S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team) S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG) R2 nTuneService; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [278336 2011-09-19] (NVIDIA) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) ==================== Drivers (Whitelisted) ==================== R3 nvoclk64; C:\Windows\System32\DRIVERS\nvoclk64.sys [42088 2009-09-15] (NVIDIA Corp.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) S3 Rockusb; C:\Windows\System32\DRIVERS\rockusb.sys [64880 2011-05-11] (Fuzhou Rockchip Electronics Co,Ltd.) R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2013-06-26] (Sony Ericsson Mobile Communications) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-19] (Duplex Secure Ltd.) U3 a3wwk3lr; C:\Windows\System32\Drivers\a3wwk3lr.sys [0 ] (Intel Corporation) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-13 23:04 - 2014-02-13 23:04 - 00010981 _____ () C:\DeQuarantine.txt 2014-02-13 23:04 - 2014-02-13 23:04 - 00000000 ____D () C:\Program Files (x86)\SaveSenseLive 2014-02-13 23:02 - 2014-02-13 23:04 - 00000000 ___SD () C:\ComboFix 2014-02-13 22:58 - 2014-02-13 22:58 - 05180679 ____R (Swearware) C:\Users\Miły\Desktop\ComboFix.exe 2014-02-13 22:57 - 2014-02-13 22:57 - 00000000 ____D () C:\NVIDIA 2014-02-13 22:37 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys 2014-02-13 22:37 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll 2014-02-13 22:05 - 2014-02-13 22:05 - 00966912 _____ () C:\Users\Miły\Desktop\Download_Driver_1.0_Setup.rar 2014-02-13 15:49 - 2014-02-13 22:15 - 00000000 ____D () C:\Program Files (x86)\ZhuoDaShi 2014-02-13 14:43 - 2014-02-13 22:29 - 00000000 ____D () C:\Users\Miły\Desktop\rom alcatel 2014-02-12 22:26 - 2014-02-12 22:26 - 00000000 ____D () C:\Users\Miły\Desktop\1.2.2a 2014-02-12 22:26 - 2011-05-11 13:29 - 00064880 _____ (Fuzhou Rockchip Electronics Co,Ltd.) C:\windows\system32\Drivers\rockusb.sys 2014-02-12 22:20 - 2014-02-13 23:08 - 00000000 ____D () C:\Users\Miły\Desktop\Nowy folder 2014-02-12 17:28 - 2014-02-12 21:54 - 00044966 _____ () C:\BROM_DLL.log 2014-02-12 17:08 - 2014-02-12 17:44 - 00002122 _____ () C:\windows\PFRO.log 2014-02-11 23:48 - 2014-02-12 17:17 - 00000000 ____D () C:\Flashtool 2014-02-11 19:19 - 2014-02-12 17:18 - 00000000 ____D () C:\Program Files (x86)\Tencent 2014-02-11 19:19 - 2014-02-11 19:19 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\Tencent 2014-02-11 18:50 - 2014-02-13 22:14 - 00000000 ____D () C:\Program Files (x86)\PdaNet for Android 2014-02-11 18:50 - 2011-11-25 00:25 - 00015360 _____ (June Fabrics Technology Inc.) C:\windows\system32\Drivers\pneteth.sys 2014-02-10 16:22 - 2014-02-13 22:48 - 00001790 _____ () C:\sc-cleaner.txt 2014-02-08 21:31 - 2014-02-13 23:08 - 00000000 ____D () C:\FRST 2014-02-06 22:28 - 2014-02-06 22:28 - 00000000 ____D () C:\TDSSKiller_Quarantine 2014-02-05 22:01 - 2014-02-05 22:01 - 00000000 _____ () C:\autoexec.bat 2014-02-05 21:48 - 2014-02-05 21:51 - 00000000 ____D () C:\AdwCleaner 2014-02-05 20:35 - 2014-02-13 23:00 - 00000356 _____ () C:\windows\Tasks\MemOptimizer-02BB2F56CB964deb8996194DE7EB5275.job 2014-02-05 20:35 - 2014-02-05 20:35 - 00002716 _____ () C:\windows\System32\Tasks\MemOptimizer-02BB2F56CB964deb8996194DE7EB5275 2014-02-05 15:16 - 2014-02-13 23:07 - 00000046 _____ () C:\windows\SysWOW64\_WKERNEL.SYL 2014-02-05 15:14 - 2014-02-05 20:44 - 00000000 ____D () C:\Program Files (x86)\WinUtilities 2014-02-05 15:14 - 2010-07-25 22:23 - 01706800 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdiplus.dll 2014-02-05 15:14 - 2010-07-25 22:23 - 00544768 _____ (Stardock Corporation) C:\windows\SysWOW64\wbocx.ocx 2014-02-05 15:14 - 2010-07-25 22:23 - 00258352 _____ (Microsoft Corporation) C:\windows\SysWOW64\unicows.dll 2014-02-05 15:14 - 2010-07-25 22:23 - 00056496 _____ (Stardock.Net, Inc) C:\windows\SysWOW64\wbhelp2.dll 2014-02-05 15:14 - 2010-07-25 22:23 - 00033968 _____ (Neil Banfield) C:\windows\SysWOW64\anim.dll 2014-02-05 15:14 - 2010-07-25 22:23 - 00004608 _____ (Microsoft Corporation) C:\windows\SysWOW64\W95INF32.DLL 2014-02-05 15:14 - 2010-07-25 22:23 - 00002272 _____ (Microsoft Corporation) C:\windows\SysWOW64\W95INF16.DLL 2014-02-04 23:24 - 2014-02-04 23:24 - 00000683 _____ () C:\windows\ie7_main.log 2014-02-04 22:54 - 2014-02-05 20:59 - 00000000 ____D () C:\Users\Miły\AppData\Local\Razer 2014-02-04 22:40 - 2014-02-05 20:59 - 00000000 ____D () C:\ProgramData\Razer 2014-02-04 22:40 - 2014-02-05 20:59 - 00000000 ____D () C:\Program Files (x86)\Razer 2014-02-04 22:33 - 2014-02-13 22:51 - 00009166 _____ () C:\windows\setupact.log 2014-02-04 22:33 - 2014-02-04 22:33 - 00000000 _____ () C:\windows\setuperr.log 2014-02-04 22:11 - 2014-02-04 22:11 - 41363400 _____ (Razer Inc. ) C:\Users\Miły\Documents\RazerGameBoosterSetup_4.1.59.0_1.exe 2014-02-04 21:32 - 2014-02-04 21:32 - 00273852 _____ () C:\Users\Miły\Documents\cc_20140204_213202.reg 2014-02-04 21:22 - 2014-02-04 21:22 - 00002770 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC 2014-02-04 21:22 - 2014-02-04 21:22 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-26 15:48 - 2014-01-26 15:48 - 02257408 _____ () C:\Users\Miły\Downloads\LeagueofLegends.exe 2014-01-25 14:06 - 2014-02-01 19:19 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\.minecraft 2014-01-25 14:05 - 2014-01-25 14:08 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\.minecraftzyczu 2014-01-25 11:08 - 2014-01-25 11:14 - 00021134 _____ () C:\Users\Miły\AppData\Local\SocialSafe-Helper.log 2014-01-25 11:08 - 2014-01-25 11:08 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\com.1minus1.socialsafe.D675411CF670AA3EFAC13BDD847989BEDE2115E2.1 2014-01-19 20:48 - 2014-02-06 22:57 - 00000000 ____D () C:\Users\Mi�y 2014-01-19 20:48 - 2014-02-01 00:32 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive 2014-01-19 19:20 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_39.dll 2014-01-19 19:20 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_39.dll 2014-01-19 19:20 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_39.dll 2014-01-19 18:52 - 2014-02-04 21:11 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-01-19 18:52 - 2014-01-19 18:52 - 00000073 _____ () C:\Users\Miły\AppData\Roaming\WB.CFG 2014-01-19 18:51 - 2014-01-19 18:51 - 02257408 _____ () C:\Users\Miły\Downloads\League of Legends.exe 2014-01-19 13:18 - 2014-01-19 13:18 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\Riot Games 2014-01-18 03:51 - 2014-01-20 14:44 - 00000124 _____ () C:\Users\Miły\Documents\ax_files.xml 2014-01-17 22:55 - 2014-01-17 22:55 - 00000000 ___RD () C:\Program Files (x86)\Skype ==================== One Month Modified Files and Folders ======= 2014-02-13 23:08 - 2014-02-12 22:20 - 00000000 ____D () C:\Users\Miły\Desktop\Nowy folder 2014-02-13 23:08 - 2014-02-08 21:31 - 00000000 ____D () C:\FRST 2014-02-13 23:07 - 2014-02-05 15:16 - 00000046 _____ () C:\windows\SysWOW64\_WKERNEL.SYL 2014-02-13 23:06 - 2010-09-02 05:50 - 01495301 _____ () C:\windows\WindowsUpdate.log 2014-02-13 23:04 - 2014-02-13 23:04 - 00010981 _____ () C:\DeQuarantine.txt 2014-02-13 23:04 - 2014-02-13 23:04 - 00000000 ____D () C:\Program Files (x86)\SaveSenseLive 2014-02-13 23:04 - 2014-02-13 23:02 - 00000000 ___SD () C:\ComboFix 2014-02-13 23:04 - 2013-11-25 13:06 - 00000000 ____D () C:\Qoobox 2014-02-13 23:01 - 2013-10-22 16:22 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-02-13 23:01 - 2010-09-01 13:56 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-13 23:00 - 2014-02-05 20:35 - 00000356 _____ () C:\windows\Tasks\MemOptimizer-02BB2F56CB964deb8996194DE7EB5275.job 2014-02-13 22:58 - 2014-02-13 22:58 - 05180679 ____R (Swearware) C:\Users\Miły\Desktop\ComboFix.exe 2014-02-13 22:58 - 2009-07-14 05:45 - 00014144 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-13 22:58 - 2009-07-14 05:45 - 00014144 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-13 22:57 - 2014-02-13 22:57 - 00000000 ____D () C:\NVIDIA 2014-02-13 22:51 - 2014-02-04 22:33 - 00009166 _____ () C:\windows\setupact.log 2014-02-13 22:51 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-02-13 22:48 - 2014-02-10 16:22 - 00001790 _____ () C:\sc-cleaner.txt 2014-02-13 22:39 - 2013-10-31 14:15 - 00000000 ____D () C:\Users\Miły\AppData\Local\NVIDIA 2014-02-13 22:38 - 2013-01-25 17:40 - 00000000 ____D () C:\Users\Miły\AppData\Local\NVIDIA Corporation 2014-02-13 22:37 - 2013-01-25 11:16 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-13 22:29 - 2014-02-13 14:43 - 00000000 ____D () C:\Users\Miły\Desktop\rom alcatel 2014-02-13 22:15 - 2014-02-13 15:49 - 00000000 ____D () C:\Program Files (x86)\ZhuoDaShi 2014-02-13 22:14 - 2014-02-11 18:50 - 00000000 ____D () C:\Program Files (x86)\PdaNet for Android 2014-02-13 22:14 - 2012-11-26 19:05 - 00000000 _RSHD () C:\Users\Miły\AppData\Local\Start 2014-02-13 22:05 - 2014-02-13 22:05 - 00966912 _____ () C:\Users\Miły\Desktop\Download_Driver_1.0_Setup.rar 2014-02-13 16:02 - 2010-09-02 06:17 - 00739226 _____ () C:\windows\system32\perfh015.dat 2014-02-13 16:02 - 2010-09-02 06:17 - 00155304 _____ () C:\windows\system32\perfc015.dat 2014-02-13 16:02 - 2009-07-14 06:13 - 01666116 _____ () C:\windows\system32\PerfStringBackup.INI 2014-02-13 15:49 - 2013-06-27 17:04 - 00000000 ____D () C:\Users\Miły\.android 2014-02-12 22:26 - 2014-02-12 22:26 - 00000000 ____D () C:\Users\Miły\Desktop\1.2.2a 2014-02-12 21:54 - 2014-02-12 17:28 - 00044966 _____ () C:\BROM_DLL.log 2014-02-12 17:44 - 2014-02-12 17:08 - 00002122 _____ () C:\windows\PFRO.log 2014-02-12 17:44 - 2009-07-14 06:08 - 00032514 _____ () C:\windows\Tasks\SCHEDLGU.TXT 2014-02-12 17:18 - 2014-02-11 19:19 - 00000000 ____D () C:\Program Files (x86)\Tencent 2014-02-12 17:17 - 2014-02-11 23:48 - 00000000 ____D () C:\Flashtool 2014-02-12 00:04 - 2013-12-07 18:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-11 19:19 - 2014-02-11 19:19 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\Tencent 2014-02-10 16:22 - 2012-08-03 20:57 - 00001142 _____ () C:\Users\Miły\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-09 16:15 - 2012-08-03 21:34 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\Mozilla 2014-02-09 16:15 - 2012-08-03 21:34 - 00000000 ____D () C:\Users\Miły\AppData\Local\Mozilla 2014-02-09 16:15 - 2012-08-03 20:46 - 00000000 ____D () C:\Users\Miły 2014-02-06 23:01 - 2010-09-01 14:15 - 00000000 ____D () C:\ProgramData\WinClon 2014-02-06 23:01 - 2010-09-01 14:03 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-02-06 23:01 - 2010-09-01 13:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-02-06 22:57 - 2014-01-19 20:48 - 00000000 ____D () C:\Users\Mi�y 2014-02-06 22:54 - 2009-07-14 06:09 - 00000000 ____D () C:\windows\System32\Tasks\WPD 2014-02-06 22:54 - 2009-07-14 03:34 - 00000215 _____ () C:\windows\system.ini 2014-02-06 22:53 - 2009-07-14 03:34 - 69992448 _____ () C:\windows\system32\config\software.bak 2014-02-06 22:53 - 2009-07-14 03:34 - 23330816 _____ () C:\windows\system32\config\system.bak 2014-02-06 22:53 - 2009-07-14 03:34 - 00524288 _____ () C:\windows\system32\config\default.bak 2014-02-06 22:53 - 2009-07-14 03:34 - 00262144 _____ () C:\windows\system32\config\security.bak 2014-02-06 22:53 - 2009-07-14 03:34 - 00262144 _____ () C:\windows\system32\config\sam.bak 2014-02-06 22:52 - 2013-11-25 13:05 - 00000000 ____D () C:\windows\erdnt 2014-02-06 22:28 - 2014-02-06 22:28 - 00000000 ____D () C:\TDSSKiller_Quarantine 2014-02-05 22:42 - 2009-07-14 06:08 - 00000000 ____D () C:\Users\Administrator 2014-02-05 22:01 - 2014-02-05 22:01 - 00000000 _____ () C:\autoexec.bat 2014-02-05 21:51 - 2014-02-05 21:48 - 00000000 ____D () C:\AdwCleaner 2014-02-05 21:16 - 2013-10-02 18:29 - 00000000 ____D () C:\filmy 2014-02-05 21:11 - 2012-08-03 20:53 - 00113928 _____ () C:\Users\Miły\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-05 21:00 - 2012-11-16 19:17 - 00000000 ____D () C:\ProgramData\Sony Ericsson 2014-02-05 21:00 - 2012-11-16 19:17 - 00000000 ____D () C:\Program Files (x86)\Sony Ericsson 2014-02-05 20:59 - 2014-02-04 22:54 - 00000000 ____D () C:\Users\Miły\AppData\Local\Razer 2014-02-05 20:59 - 2014-02-04 22:40 - 00000000 ____D () C:\ProgramData\Razer 2014-02-05 20:59 - 2014-02-04 22:40 - 00000000 ____D () C:\Program Files (x86)\Razer 2014-02-05 20:49 - 2012-10-17 22:05 - 00007597 _____ () C:\Users\Miły\AppData\Local\Resmon.ResmonCfg 2014-02-05 20:44 - 2014-02-05 15:14 - 00000000 ____D () C:\Program Files (x86)\WinUtilities 2014-02-05 20:35 - 2014-02-05 20:35 - 00002716 _____ () C:\windows\System32\Tasks\MemOptimizer-02BB2F56CB964deb8996194DE7EB5275 2014-02-05 20:21 - 2012-08-04 01:42 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2014-02-05 20:21 - 2012-08-04 01:42 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-05 20:20 - 2009-07-14 05:45 - 00427760 _____ () C:\windows\system32\FNTCACHE.DAT 2014-02-04 23:24 - 2014-02-04 23:24 - 00000683 _____ () C:\windows\ie7_main.log 2014-02-04 23:11 - 2012-08-03 20:48 - 00000000 ____D () C:\Users\Miły\AppData\Local\VirtualStore 2014-02-04 22:39 - 2013-10-22 16:18 - 01638722 _____ () C:\windows\SysWOW64\PerfStringBackup.INI 2014-02-04 22:33 - 2014-02-04 22:33 - 00000000 _____ () C:\windows\setuperr.log 2014-02-04 22:11 - 2014-02-04 22:11 - 41363400 _____ (Razer Inc. ) C:\Users\Miły\Documents\RazerGameBoosterSetup_4.1.59.0_1.exe 2014-02-04 21:33 - 2012-08-03 22:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-02-04 21:32 - 2014-02-04 21:32 - 00273852 _____ () C:\Users\Miły\Documents\cc_20140204_213202.reg 2014-02-04 21:30 - 2012-10-17 18:32 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\AIMP3 2014-02-04 21:30 - 2012-09-07 12:19 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\Media Player Classic 2014-02-04 21:29 - 2009-08-02 03:27 - 00000000 ____D () C:\windows\Panther 2014-02-04 21:22 - 2014-02-04 21:22 - 00002770 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC 2014-02-04 21:22 - 2014-02-04 21:22 - 00000000 ____D () C:\Program Files\CCleaner 2014-02-04 21:15 - 2013-11-01 16:12 - 00000000 ____D () C:\Users\Miły\AppData\Local\Unity 2014-02-04 21:11 - 2014-01-19 18:52 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-02-02 18:02 - 2012-08-04 01:24 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\Skype 2014-02-01 19:19 - 2014-01-25 14:06 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\.minecraft 2014-02-01 12:30 - 2012-08-03 22:02 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-02-01 00:32 - 2014-01-19 20:48 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive 2014-01-26 15:48 - 2014-01-26 15:48 - 02257408 _____ () C:\Users\Miły\Downloads\LeagueofLegends.exe 2014-01-25 14:08 - 2014-01-25 14:05 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\.minecraftzyczu 2014-01-25 11:14 - 2014-01-25 11:08 - 00021134 _____ () C:\Users\Miły\AppData\Local\SocialSafe-Helper.log 2014-01-25 11:08 - 2014-01-25 11:08 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\com.1minus1.socialsafe.D675411CF670AA3EFAC13BDD847989BEDE2115E2.1 2014-01-20 14:44 - 2014-01-18 03:51 - 00000124 _____ () C:\Users\Miły\Documents\ax_files.xml 2014-01-19 18:52 - 2014-01-19 18:52 - 00000073 _____ () C:\Users\Miły\AppData\Roaming\WB.CFG 2014-01-19 18:51 - 2014-01-19 18:51 - 02257408 _____ () C:\Users\Miły\Downloads\League of Legends.exe 2014-01-19 13:18 - 2014-01-19 13:18 - 00000000 ____D () C:\Users\Miły\AppData\Roaming\Riot Games 2014-01-17 22:55 - 2014-01-17 22:55 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-01-17 22:55 - 2012-08-03 20:51 - 00000000 ____D () C:\ProgramData\Skype 2014-01-16 09:59 - 2012-08-03 21:45 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe Some content of TEMP: ==================== C:\Users\Miły\AppData\Local\temp\install_1392142729.exe C:\Users\Miły\AppData\Local\temp\install_1392303013.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-08 22:22 ==================== End Of Log ============================