Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-02-2014 Ran by kompjuter (administrator) on KOMPJUTER-PC on 06-02-2014 00:37:42 Running from C:\Users\kompjuter\Downloads Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Polish Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) =================== (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (ASUS) C:\Program Files\ASUS\SmartLogon\smartlogon.exe () C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe () C:\Program Files\ATK Hotkey\AsLdrSrv.exe () C:\Program Files\ATKGFNEX\GFNEXSrv.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (Infowatch) C:\Program Files\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe () C:\Windows\System32\PnkBstrA.exe (ASUS) C:\Program Files\ASUS\SmartLogon\sensorsrv.exe () C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe () C:\Program Files\ASUS\ASUS Live Update\ALU.exe (ATK0100) C:\Program Files\ATK Hotkey\HControl.exe () C:\Program Files\ATK Hotkey\MsgTranAgt.exe () C:\Program Files\Wireless Console 2\wcourier.exe (ATK) C:\Program Files\P4G\BatteryLife.exe (ATK) C:\Program Files\ASUS\Splendid\ACMON.exe () C:\Program Files\ATK Hotkey\ATKOSD.exe (ASUSTeK) C:\Windows\System32\ACEngSvr.exe () C:\Program Files\ATK Hotkey\KBFiltr.exe () C:\Program Files\ATK Hotkey\WDC.exe (Microsoft Corporation) C:\Windows\System32\conime.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe (CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe () C:\Program Files\ATK Hotkey\HControlUser.exe () C:\Program Files\ATKOSD2\ATKOSD2.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe () C:\Program Files\ASUS\ATK Media\DMedia.exe () C:\Program Files\P4P\P4P.exe (ASUS) C:\Windows\AsScrPro.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Gadu-Gadu S.A.) C:\Program Files\Gadu-Gadu\gg.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Don HO don.h@free.fr) C:\Program Files\Notepad++\notepad++.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [104936 2008-07-19] (CyberLink) HKLM\...\Run: [P2Go_Menu] - C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-06-14] (CyberLink Corp.) HKLM\...\Run: [HControlUser] - C:\Program Files\ATK Hotkey\HcontrolUser.exe [98304 2008-01-12] () HKLM\...\Run: [ATKOSD2] - C:\Program Files\ATKOSD2\ATKOSD2.exe [7766016 2008-01-23] () HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6025216 2008-04-01] (Realtek Semiconductor) HKLM\...\Run: [SMSERIAL] - C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1208320 2008-01-25] (Motorola Inc.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-07] (Synaptics, Inc.) HKLM\...\Run: [ATKMEDIA] - C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [61440 2008-02-01] () HKLM\...\Run: [PowerForPhone] - C:\Program Files\P4P\P4P.exe [778240 2007-08-03] () HKLM\...\Run: [ASUS Screen Saver Protector] - C:\Windows\AsScrPro.exe [3054136 2008-08-30] (ASUS) HKLM\...\Run: [ASUS Camera ScreenSaver] - C:\Windows\AsScrProlog.exe [47672 2008-08-30] () HKLM\...\Run: [EaseUS EPM tray] - C:\Program Files\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe [2081792 2013-03-29] (CHENGDU YIWO Tech Development Co., Ltd) HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-16] (Kaspersky Lab ZAO) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-1772790972-47281523-3289666925-1000\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2008-06-09] (Hewlett-Packard Company) Startup: C:\Users\kompjuter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63 FireFox: ======== FF ProfilePath: C:\Users\kompjuter\AppData\Roaming\Mozilla\Firefox\Profiles\b6ut0650.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\kompjuter\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com [2013-10-14] FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com [2013-10-14] FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com [2013-10-14] FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com [2013-10-14] FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com [2013-10-14] Chrome: ======= CHR Extension: (Dokumenty Google) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-20] CHR Extension: (Dysk Google) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-20] CHR Extension: (YouTube) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-20] CHR Extension: (Szukaj w Google) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-20] CHR Extension: (Kaspersky URL Advisor) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-11-20] CHR Extension: (NetBeans Connector) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hafdlehgocfcodbgjnpecfajgkeejnaa [2013-11-20] CHR Extension: (Bezpieczne pieniądze) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-11-20] CHR Extension: (Virtual Keyboard) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-11-20] CHR Extension: (Google Wallet) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-20] CHR Extension: (Battlefield Play4Free) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2014-01-03] CHR Extension: (Gmail) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-20] CHR Extension: (Blokowanie banerów) - C:\Users\kompjuter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-11-20] CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2013-02-07] CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx [2013-02-07] CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx [2013-02-07] CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx [2013-02-07] CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2013-02-07] ========================== Services (Whitelisted) ================= R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [73728 2007-05-18] () R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-03] () R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] () R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-16] (Kaspersky Lab ZAO) R2 CSObjectsSrv; C:\Program Files\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-01-03] () R2 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496 2007-08-03] () ==================== Drivers (Whitelisted) ==================== R0 AsDsm; C:\Windows\system32\Drivers\AsDsm.sys [29752 2007-08-11] (Windows (R) Codename Longhorn DDK provider) R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] () R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [88632 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [39736 2011-06-02] (Infowatch) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14920 2013-03-07] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9160 2013-03-07] () R2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [20936 2007-08-03] () R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [5632 2007-01-25] ( ) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-10-16] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [595552 2013-10-16] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [24408 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-10-16] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-16] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [44000 2013-10-14] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145040 2013-10-14] (Kaspersky Lab ZAO) R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100) U0 rgkrgqae; C:\Windows\System32\drivers\tajwm.sys [54016 2014-02-06] () R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1769984 2007-10-01] () U0 sptd; C:\Windows\System32\Drivers\sptd.sys [320120 2014-02-06] (Duplex Secure Ltd.) S3 IpInIp; system32\DRIVERS\ipinip.sys [X] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [74848 2013-10-16] (Kaspersky Lab ZAO) S3 mcdbus; system32\DRIVERS\mcdbus.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ========================== Drivers MD5 ======================= C:\Windows\System32\drivers\acpi.sys 82B296AE1892FE3DBEE00C9CF92F8AC7 C:\Windows\system32\drivers\adp94xx.sys 04F0FCAC69C7C71A3AC4EB97FAFC8303 C:\Windows\system32\drivers\adpahci.sys 60505E0041F7751BDBB80F88BF45C2CE C:\Windows\system32\drivers\adpu160m.sys 8A42779B02AEC986EAB64ECFC98F8BD7 C:\Windows\system32\drivers\adpu320.sys 241C9E37F8CE45EF51C3DE27515CA4E5 C:\Windows\system32\drivers\afd.sys 3911B972B55FEA0478476B2E777B29FA C:\Windows\system32\drivers\agp440.sys 13F9E33747E6B41A3FF305C37DB0D360 C:\Windows\system32\drivers\djsvs.sys ==> MD5 is legit C:\Windows\system32\drivers\aliide.sys 9EAEF5FC9B8E351AFA7E78A6FAE91F91 C:\Windows\system32\drivers\amdagp.sys C47344BC706E5F0B9DCE369516661578 C:\Windows\system32\drivers\amdide.sys 9B78A39A4C173FDBC1321E0DD659B34C C:\Windows\system32\drivers\amdk7.sys 18F29B49AD23ECEE3D2A826C725C8D48 C:\Windows\system32\drivers\amdk8.sys 93AE7F7DD54AB986A6F1A1B37BE7442D C:\Windows\System32\Drivers\ssadadb.sys 2F8616646215EEDB28C2E40994DB8E38 C:\Windows\system32\drivers\arc.sys 5D2888182FB46632511ACEE92FDAD522 C:\Windows\system32\drivers\arcsas.sys 5E2A321BD7C8B3624E41FDEC3E244945 C:\Windows\system32\Drivers\AsDsm.sys 4385E371C25C94C804E9D3152BD9E1F7 C:\Program Files\ATKGFNEX\ASMMAP.sys 7B4D08D2017AC06689D422E06C43F0AA C:\Windows\System32\DRIVERS\asyncmac.sys 53B202ABEE6455406254444303E87BE1 C:\Windows\System32\drivers\atapi.sys 1F05B78AB91C9075565A9D8A4B880BC4 C:\Windows\System32\DRIVERS\atikmdag.sys 5000E60040E45B3E72791B19E1CED1E9 C:\Windows\system32\Drivers\Beep.sys 67E506B75BD5326A3EC7B70BD014DFB6 C:\Windows\system32\drivers\blbdrive.sys D4DF28447741FD3D953526E33A617397 C:\Windows\System32\DRIVERS\bowser.sys 35F376253F687BDE63976CCB3F2108CA C:\Windows\system32\drivers\brfiltlo.sys ==> MD5 is legit C:\Windows\system32\drivers\brfiltup.sys ==> MD5 is legit C:\Windows\system32\drivers\brserid.sys ==> MD5 is legit C:\Windows\system32\drivers\brserwdm.sys ==> MD5 is legit C:\Windows\system32\drivers\brusbmdm.sys ==> MD5 is legit C:\Windows\system32\drivers\brusbser.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\BthEnum.sys 6D39C954799B63BA866910234CF7D726 C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bthpan.sys 5904EFA25F829BF84EA6FB045134A1D8 C:\Windows\System32\Drivers\BTHport.sys 611FF3F2F095C8D4A6D4CFD9DCC09793 C:\Windows\System32\Drivers\BTHUSB.sys D330803EAB2A15CAEC7F011F1D4CB30E C:\Windows\System32\drivers\btwaudio.sys F2F7342742180D5060285499DEE50F99 C:\Windows\System32\drivers\btwavdt.sys 32F59F26A30CFC508DA11DB3EA0F8B77 C:\Windows\System32\DRIVERS\btwl2cap.sys ECB98391C756A7B9CFBAE89D9D1235E1 C:\Windows\System32\DRIVERS\btwrchid.sys 03658734EF7D0F3B3F4636D3E8A38964 C:\Windows\System32\DRIVERS\cdfs.sys 7ADD03E75BEB9E6DD102C3081D29840A C:\Windows\System32\DRIVERS\cdrom.sys 6B4BFFB9BECD728097024276430DB314 C:\Windows\system32\drivers\circlass.sys E5D4133F37219DBCFE102BC61072589D C:\Windows\System32\CLFS.sys D7659D3B5B92C31E84E53C1431F35132 C:\Windows\System32\DRIVERS\CmBatt.sys 99AFC3795B58CC478FBBBCDC658FCB56 C:\Windows\system32\drivers\cmdide.sys 0CA25E686A4928484E9FDABD168AB629 C:\Windows\System32\DRIVERS\compbatt.sys 6AFEF0B60FA25DE07C0968983EE4F60A C:\Windows\System32\drivers\crcdisk.sys 741E9DFF4F42D2D8477D0FC1DC0DF871 C:\Windows\system32\drivers\crusoe.sys 1F07BECDCA750766A96CDA811BA86410 C:\Windows\System32\DRIVERS\CSCrySec.sys 64D579F38C5FADFB05182B34808469E1 C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys 4CEDBC3811E655567D99D3123804647B C:\Windows\System32\Drivers\dfsc.sys 622C41A07CA7E6DD91770F50D532CB6C C:\Windows\System32\drivers\disk.sys 5D4AEFC3386920236A548271F8F1AF6A C:\Windows\System32\drivers\drmkaud.sys 97FEF831AB90BEE128C9AF390E243F80 C:\Windows\System32\drivers\dxgkrnl.sys 988670D8343EF9835FB3659DB71B2EFA C:\Windows\System32\DRIVERS\E1G60I32.sys 5425F74AC0C1DBD96A1E04F17D63F94C C:\Windows\System32\drivers\ecache.sys 7F64EA048DCFAC7ACF8B4D7B4E6FE371 C:\Windows\system32\drivers\elxstor.sys 23B62471681A124889978F6295B3F4C6 C:\Windows\system32\epmntdrv.sys 093CEE3B45F0954DCE6CB891F6A920F7 C:\Windows\system32\drivers\errdev.sys 3DB974F3935483555D7148663F726C61 C:\Windows\system32\EuGdiDrv.sys F1DE3EEF501DDA7DDF99F2EDF0C5540E C:\Windows\system32\Drivers\exfat.sys 22B408651F9123527BCEE54B4F6C5CAE C:\Windows\system32\Drivers\fastfat.sys 1E9B9A70D332103C52995E957DC09EF8 C:\Windows\System32\DRIVERS\fdc.sys AFE1E8B9782A0DD7FB46BBD88E43F89A C:\Windows\System32\drivers\fileinfo.sys A8C0139A884861E3AAE9CFE73B208A9F C:\Windows\System32\drivers\filetrace.sys 0AE429A696AECBC5970E3CF2C62635AE C:\Windows\System32\DRIVERS\flpydisk.sys 85B7CF99D532820495D68D747FDA9EBD C:\Windows\System32\drivers\fltmgr.sys 01334F9EA68E6877C4EF05D3EA8ABB05 C:\Windows\system32\Drivers\Fs_Rec.sys B972A66758577E0BFD1DE0F91AAA27B5 C:\Windows\system32\drivers\gagp30kx.sys 34582A6E6573D54A07ECE5FE24A126B5 C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys 31B40F40E09513ADDC460F6A297AD474 C:\Windows\System32\drivers\HdAudio.sys 3F90E001369A07243763BD5A523D8722 C:\Windows\System32\DRIVERS\HDAudBus.sys 062452B7FFD68C8C042A6261FE8DFF4A C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\hidusb.sys CCA4B519B17E23A00B826C55716809CC C:\Windows\system32\drivers\hpcisss.sys 16EE7B23A009E00D835CDB79574A91A6 C:\Windows\System32\drivers\HTTP.sys F870AA3E254628EBEAFE754108D664DE C:\Windows\system32\drivers\i2omp.sys C6B032D69650985468160FC9937CF5B4 C:\Windows\System32\DRIVERS\i8042prt.sys 22D56C8184586B7A1F6FA60BE5F5A2BD C:\Windows\System32\DRIVERS\iaStor.sys 80C633722DA72E97F3F5B3B11325696D C:\Windows\system32\drivers\iastorv.sys 54155EA1B0DF185878E0FC9EC3AC3A14 C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit C:\Windows\System32\drivers\RTKVHDA.sys 2B1B7E0CC16A361FC3E10D5C2E868C72 C:\Windows\system32\drivers\intelide.sys 83AA759F3189E6370C30DE5DC5590718 C:\Windows\System32\DRIVERS\intelppm.sys 224191001E78C89DFA78924C3EA595FF C:\Windows\System32\DRIVERS\ipfltdrv.sys 62C265C38769B864CB25B4BCF62DF6C3 C:\Windows\system32\drivers\ipmidrv.sys B25AAF203552B7B3491139D582B39AD1 C:\Windows\System32\DRIVERS\ipnat.sys 8793643A67B42CEC66490B2A0CF92D68 C:\Windows\System32\drivers\irenum.sys 109C0DFB82C3632FBD11949B73AEEAC9 C:\Windows\system32\drivers\isapnp.sys 6C70698A3E5C4376C6AB5C7C17FB0614 C:\Windows\System32\DRIVERS\msiscsi.sys 232FA340531D940AAC623B121A595034 C:\Windows\system32\drivers\iteatapi.sys ==> MD5 is legit C:\Windows\system32\drivers\iteraid.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\kbdclass.sys 37605E0A8CF00CBBA538E753E4344C6E C:\Windows\System32\DRIVERS\kbdhid.sys EDE59EC70E25C24581ADD1FBEC7325F7 C:\Windows\System32\DRIVERS\kbfiltr.sys CC2A86D7BBF14977340DCA61BBCBA771 C:\Windows\System32\DRIVERS\kl1.sys 2AD446E7A867C48099227415DD66FB34 C:\Windows\System32\DRIVERS\klif.sys 8C547EB6709BF41E0625EFCDF13C63CE C:\Windows\System32\DRIVERS\klim6.sys AF127FE7DD5ED2BBC9049FD8A00DEFC2 C:\Windows\System32\DRIVERS\klkbdflt.sys 249A266AF74ADE44AE8424E78D145E09 C:\Windows\System32\DRIVERS\klmouflt.sys 035724BA6D5676B76FD3AFB66AB4F1E3 C:\Windows\System32\DRIVERS\kltdi.sys 8FD802F86D4AB3FB329B8E51517BFF2A C:\Windows\System32\DRIVERS\kneps.sys 8F932DF10408BCABA2FCF6163C843F8E C:\Windows\System32\Drivers\ksecdd.sys 4A1445EFA932A3BAF5BDB02D7131EE20 C:\Windows\System32\DRIVERS\lltdio.sys D1C5883087A0C3F1344D9D55A44901F6 C:\Windows\system32\drivers\lsi_fc.sys C7E15E82879BF3235B559563D4185365 C:\Windows\system32\drivers\lsi_sas.sys EE01EBAE8C9BF0FA072E0FF68718920A C:\Windows\system32\drivers\lsi_scsi.sys 912A04696E9CA30146A62AFA1463DD5C C:\Windows\system32\drivers\luafv.sys 8F5C7426567798E62A3B3614965D62CC C:\Windows\system32\drivers\megasas.sys 0001CE609D66632FA17B84705F658879 C:\Windows\system32\drivers\megasr.sys C252F32CD9A49DBFC25ECF26EBD51A99 C:\Windows\System32\drivers\modem.sys E13B5EA0F51BA5B1512EC671393D09BA C:\Windows\System32\drivers\MODEMCSA.sys CBB59C41F19EFEA1A000793E08070A62 C:\Windows\System32\DRIVERS\monitor.sys 0A9BB33B56E294F686ABB7C1E4E2D8A8 C:\Windows\System32\DRIVERS\mouclass.sys 5BF6A1326A335C5298477754A506D263 C:\Windows\System32\DRIVERS\mouhid.sys 93B8D4869E12CFBE663915502900876F C:\Windows\System32\drivers\mountmgr.sys BDAFC88AA6B92F7842416EA6A48E1600 C:\Windows\system32\drivers\mpio.sys 511D011289755DD9F9A7579FB0B064E6 C:\Windows\System32\drivers\mpsdrv.sys 22241FEBA9B2DEFA669C8CB0A8DD7D2E C:\Windows\system32\drivers\mraid35x.sys ==> MD5 is legit C:\Windows\system32\drivers\mrxdav.sys 82CEA0395524AACFEB58BA1448E8325C C:\Windows\System32\DRIVERS\mrxsmb.sys 1E94971C4B446AB2290DEB71D01CF0C2 C:\Windows\System32\DRIVERS\mrxsmb10.sys 4FCCB34D793B116423209C0F8B7A3B03 C:\Windows\System32\DRIVERS\mrxsmb20.sys C3CB1B40AD4A0124D617A1199B0B9D7C C:\Windows\System32\drivers\msahci.sys 28023E86F17001F7CD9B15A5BC9AE07D C:\Windows\system32\drivers\msdsm.sys 4468B0F385A86ECDDAF8D3CA662EC0E7 C:\Windows\system32\Drivers\Msfs.sys A9927F4A46B816C92F461ACB90CF8515 C:\Windows\System32\drivers\msisadrv.sys 0F400E306F385C56317357D6DEA56F62 C:\Windows\System32\drivers\MSKSSRV.sys D8C63D34D9C9E56C059E24EC7185CC07 C:\Windows\System32\drivers\MSPCLOCK.sys 1D373C90D62DDB641D50E55B9E78D65E C:\Windows\System32\drivers\MSPQM.sys B572DA05BF4E098D4BBA3A4734FB505B C:\Windows\system32\Drivers\MsRPC.sys B49456D70555DE905C311BCDA6EC6ADB C:\Windows\System32\DRIVERS\mssmbios.sys E384487CB84BE41D09711C30CA79646C C:\Windows\System32\drivers\MSTEE.sys 7199C1EEC1E4993CAF96B8C0A26BD58A C:\Windows\System32\DRIVERS\ATKACPI.sys 97AFFA9D95FFE20EEE6229BC6BE166CF C:\Windows\System32\Drivers\mup.sys 6A57B5733D4CB702C8EA4542E836B96C C:\Windows\System32\DRIVERS\nwifi.sys 85C44FDFF9CF7E72A40DCB7EC06A4416 C:\Windows\System32\drivers\ndis.sys 1357274D1883F68300AEADD15D7BBB42 C:\Windows\System32\DRIVERS\ndistapi.sys 0E186E90404980569FB449BA7519AE61 C:\Windows\System32\DRIVERS\ndisuio.sys D6973AA34C4D5D76C0430B181C3CD389 C:\Windows\System32\DRIVERS\ndiswan.sys 818F648618AE34F729FDB47EC68345C3 C:\Windows\system32\Drivers\NDProxy.sys 71DAB552B41936358F3B541AE5997FB3 C:\Windows\System32\DRIVERS\netbios.sys BCD093A5A6777CF626434568DC7DBA78 C:\Windows\System32\DRIVERS\netbt.sys ECD64230A59CBD93C85F1CD1CAB9F3F6 C:\Windows\System32\DRIVERS\NETw5v32.sys F0C42E0CDCE558D658FA53A222B4CCB1 C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit C:\Windows\system32\Drivers\Npfs.sys D36F239D7CCE1931598E8FB90A0DBC26 C:\Windows\System32\drivers\nsiproxy.sys 609773E344A97410CE4EBF74A8914FCF C:\Windows\system32\Drivers\Ntfs.sys 2C1121F2B87E9A6B12485DF53CD848C7 C:\Windows\system32\drivers\ntrigdigi.sys ==> MD5 is legit C:\Windows\system32\Drivers\Null.sys C5DBBCDA07D780BDA9B685DF333BB41E C:\Windows\system32\drivers\nvraid.sys 2EDF9E7751554B42CBB60116DE727101 C:\Windows\system32\drivers\nvstor.sys ABED0C09758D1D97DB0042DBB2688177 C:\Windows\system32\drivers\nv_agp.sys 18BBDF913916B71BD54575BDB6EEAC0B C:\Windows\System32\DRIVERS\ohci1394.sys 6F310E890D46E246E0E261A63D9B36B4 C:\Windows\system32\drivers\parport.sys ==> MD5 is legit C:\Windows\System32\drivers\partmgr.sys B9C2B89F08670E159F7181891E449CD9 C:\Windows\system32\drivers\parvdm.sys ==> MD5 is legit C:\Windows\System32\drivers\pci.sys 941DC1D19E7E8620F40BBC206981EFDB C:\Windows\system32\drivers\pciide.sys FC175F5DDAB666D7F4D17449A547626F C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\raspptp.sys ECFFFAEC0C1ECD8DBC77F39070EA1DB1 C:\Windows\system32\drivers\processr.sys 2027293619DD0F047C584CF2E7DF4FFD C:\Windows\System32\DRIVERS\pacer.sys 99514FAA8DF93D34B5589187DB3AA0BA C:\Windows\system32\drivers\ql2300.sys 0A6DB55AFB7820C99AA1F3A1D270F4F6 C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit C:\Windows\system32\drivers\qwavedrv.sys 9F5E0E1926014D17486901C88ECA2DB7 C:\Windows\System32\DRIVERS\rasacd.sys 147D7F9C556D259924351FEB0DE606C3 C:\Windows\System32\DRIVERS\rasl2tp.sys A214ADBAF4CB47DD2728859EF31F26B0 C:\Windows\System32\DRIVERS\raspppoe.sys 509A98DD18AF4375E1FC40BC175F1DEF C:\Windows\System32\DRIVERS\rassstp.sys 2005F4A1E05FA09389AC85840F0A9E4D C:\Windows\System32\DRIVERS\rdbss.sys B14C9D5B9ADD2F84F70570BBBFAA7935 C:\Windows\System32\DRIVERS\RDPCDD.sys 89E59BE9A564262A3FB6C4F4F1CD9899 C:\Windows\system32\drivers\rdpdr.sys FBC0BACD9C3D7F6956853F64A66E252D C:\Windows\System32\drivers\rdpencdd.sys 9D91FE5286F748862ECFFA05F8A0710C C:\Windows\system32\Drivers\RDPWD.sys C127EBD5AFAB31524662C48DFCEB773A C:\Windows\System32\DRIVERS\rfcomm.sys 6482707F9F4DA0ECBAB43B2E0398A101 C:\Windows\System32\drivers\tajwm.sys E6D35F3AA51A65EB35C1F2340154A25E C:\Windows\System32\DRIVERS\rimmptsk.sys C35CA13D3627EBD9DD12A23CE781BC3D C:\Windows\System32\DRIVERS\rimsptsk.sys C398BCA91216755B098679A8DA8A2300 C:\Windows\System32\DRIVERS\rixdptsk.sys 2A2554CB24506E0A0508FC395C4A1B42 C:\Windows\System32\DRIVERS\RsFx0103.sys FD692C6FFADE58F7C4C3C3C9A0EC35BD C:\Windows\System32\DRIVERS\rspndr.sys 9C508F4074A39E8B4B31D27198146FAD C:\Windows\System32\DRIVERS\Rtlh86.sys 2FC33077F85D7DC0D03678C06D43898C C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\sdbus.sys 8F36B54688C31EED4580129040C6A3D3 C:\Windows\system32\Drivers\secdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\serenum.sys ==> MD5 is legit C:\Windows\system32\drivers\serial.sys ==> MD5 is legit C:\Windows\system32\drivers\sermouse.sys 8AF3D28A879BF75DB53A0EE7A4289624 C:\Windows\system32\drivers\sffdisk.sys 3EFA810BDCA87F6ECC24F9832243FE86 C:\Windows\system32\drivers\sffp_mmc.sys E95D451F7EA3E583AEC75F3B3EE42DC5 C:\Windows\system32\drivers\sffp_sd.sys 3D0EA348784B7AC9EA9BD9F317980979 C:\Windows\System32\DRIVERS\sfloppy.sys C33BFBD6E9E41FCD9FFEF9729E9FAED6 C:\Windows\system32\drivers\sisagp.sys 1D76624A09A054F682D746B924E2DBC3 C:\Windows\system32\drivers\sisraid2.sys 43CB7AA756C7DB280D01DA9B676CFDE2 C:\Windows\system32\drivers\sisraid4.sys A99C6C8B0BAA970D8AA59DDC50B57F94 C:\Windows\System32\DRIVERS\smb.sys 7B75299A4D201D6A6533603D6914AB04 C:\Windows\System32\DRIVERS\smserial.sys 09CBB7A04C5D6E9FE876BA5D97EB873D C:\Windows\System32\DRIVERS\snp2uvc.sys 0302BC619D4A723317E7F8EB0C362BD3 C:\Windows\system32\Drivers\spldr.sys 7AEBDEEF071FE28B0EEF2CDD69102BFF C:\Windows\System32\Drivers\sptd.sys CBEAEA2729985BFB260641AB424E0166 C:\Windows\System32\DRIVERS\srv.sys 41987F9FC0E61ADF54F581E15029AD91 C:\Windows\System32\DRIVERS\srv2.sys FF33AFF99564B1AA534F58868CBE41EF C:\Windows\System32\DRIVERS\srvnet.sys 7605C0E1D01A08F3ECD743F38B834A44 C:\Windows\System32\DRIVERS\ssadbus.sys BB6EDB0257860083193CC1581AC7D485 C:\Windows\System32\DRIVERS\ssadmdfl.sys 5BCB68F7B62159C07789D3F405750623 C:\Windows\System32\DRIVERS\ssadmdm.sys 1588A89F9CD9E68DE9FCC9F60FDB5C08 C:\Windows\System32\DRIVERS\ssadserd.sys 9EFD9F42795C9E90206C1E9A9B25E8D3 C:\Windows\System32\DRIVERS\swenum.sys 7BA58ECF0C0A9A69D44B3DCA62BECF56 C:\Windows\system32\drivers\symc8xx.sys ==> MD5 is legit C:\Windows\system32\drivers\sym_hi.sys ==> MD5 is legit C:\Windows\system32\drivers\sym_u3.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\SynTP.sys 55F6E55CC2430CA8713387106FA79817 C:\Windows\System32\drivers\tcpip.sys D18D53974FD715D50FC76F9FFE1C830D C:\Windows\System32\DRIVERS\tcpip.sys D18D53974FD715D50FC76F9FFE1C830D C:\Windows\System32\drivers\tcpipreg.sys 608C345A255D82A6289C2D468EB41FD7 C:\Windows\System32\drivers\tdpipe.sys 5DCF5E267BE67A1AE926F2DF77FBCC56 C:\Windows\System32\drivers\tdtcp.sys 389C63E32B3CEFED425B61ED92D3F021 C:\Windows\System32\DRIVERS\tdx.sys 76B06EB8A01FC8624D699E7045303E54 C:\Windows\System32\DRIVERS\termdd.sys 3CAD38910468EAB9A6479E2F01DB43C7 C:\Windows\System32\DRIVERS\tssecsrv.sys F4EAA7ECBCB25DE901C9B7F2CDCDA0B3 C:\Windows\System32\DRIVERS\tunmp.sys CAECC0120AC49E3D2F758B9169872D38 C:\Windows\System32\DRIVERS\tunnel.sys 300DB877AC094FEAB0BE7688C3454A9C C:\Windows\system32\drivers\uagp35.sys 7D33C4DB2CE363C8518D2DFCF533941F C:\Windows\System32\DRIVERS\udfs.sys D9728AF68C4C7693CB100B8441CBDEC6 C:\Windows\system32\drivers\uliagpkx.sys B0ACFDC9E4AF279E9116C03E014B2B27 C:\Windows\system32\drivers\uliahci.sys 9224BB254F591DE4CA8D572A5F0D635C C:\Windows\system32\drivers\ulsata.sys ==> MD5 is legit C:\Windows\system32\drivers\ulsata2.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\umbus.sys 32CFF9F809AE9AED85464492BF3E32D2 C:\Windows\System32\DRIVERS\usbccgp.sys AAB0B5F72D2D726FBFDC895A2902DE1D C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\usbehci.sys 153E8515CB86F8BB5D1A8B478EBF4BB2 C:\Windows\System32\DRIVERS\usbhub.sys 2AE6BCEBD85D31317E433733DAF25888 C:\Windows\system32\drivers\usbohci.sys ==> MD5 is legit C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\USBSTOR.SYS BE3DA31C191BC222D9AD503C5224F2AD C:\Windows\System32\DRIVERS\usbuhci.sys 44056325428A8E4C755830426E29878F C:\Windows\System32\Drivers\usbvideo.sys 73FF24E21B690625A58109637DDA0DF7 C:\Windows\System32\DRIVERS\usb8023x.sys 228F444F9AF0D3B9ECA9FC3F4FEB12F2 C:\Windows\System32\DRIVERS\vgapnp.sys 87B06E1F30B749A114F74622D013F8D4 C:\Windows\System32\drivers\vga.sys 2E93AC0A1D8C79D019DB6C51F036636C C:\Windows\system32\drivers\viaagp.sys 5D7159DEF58A800D5781BA3A879627BC C:\Windows\system32\drivers\viac7.sys C4F3A691B5BAD343E6249BD8C2D45DEE C:\Windows\system32\drivers\viaide.sys AADF5587A4063F52C2C3FED7887426FC C:\Windows\System32\drivers\volmgr.sys 69503668AC66C77C6CD7AF86FBDF8C43 C:\Windows\System32\drivers\volmgrx.sys 23E41B834759917BFD6B9A0D625D0C28 C:\Windows\System32\drivers\volsnap.sys 786DB5771F05EF300390399F626BF30A C:\Windows\system32\drivers\vsmraid.sys 587253E09325E6BF226B299774B728A9 C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26 C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26 C:\Windows\system32\drivers\wd.sys 78FE9542363F297B18C027B2D7E7C07F C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645 C:\Windows\System32\DRIVERS\wmiacpi.sys 2E7255D172DF0B8283CDFB7B433B864E C:\Windows\System32\DRIVERS\wpdusb.sys DE9D36F91A4DF3D911626643DEBF11EA C:\Windows\system32\drivers\ws2ifsl.sys E3A3CB253C0EC2494D4A61F5E43A389C C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070 C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF C:\Windows\System32\DRIVERS\yk60x86.sys 7D1F3B131D503EF43EE594B5A2B9B427 ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-06 00:37 - 2014-02-06 00:40 - 00037002 _____ () C:\Users\kompjuter\Downloads\FRST.txt 2014-02-06 00:35 - 2014-02-06 00:35 - 00054016 _____ () C:\Windows\system32\Drivers\tajwm.sys 2014-02-06 00:13 - 2014-02-06 00:13 - 00380416 _____ () C:\Users\kompjuter\Downloads\fvdf3efy.exe 2014-02-06 00:12 - 2014-02-06 00:37 - 00000000 ____D () C:\FRST 2014-02-06 00:11 - 2014-02-06 00:11 - 00602112 _____ (OldTimer Tools) C:\Users\kompjuter\Downloads\OTL.exe 2014-02-06 00:09 - 2014-02-06 00:09 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Malwarebytes 2014-02-06 00:09 - 2014-02-06 00:09 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-06 00:08 - 2014-02-06 00:09 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-02-06 00:08 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-02-06 00:06 - 2014-02-06 00:07 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\kompjuter\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-06 00:06 - 2014-02-06 00:06 - 01139200 _____ (Farbar) C:\Users\kompjuter\Downloads\FRST.exe 2014-02-06 00:01 - 2014-02-06 00:01 - 00320120 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-02-06 00:00 - 2014-02-06 00:00 - 00522360 _____ (Duplex Secure Ltd.) C:\Users\kompjuter\Downloads\SPTDinst-v186-x86.exe 2014-02-05 23:44 - 2014-02-05 23:44 - 00000000 ____D () C:\Program Files\HD Tune 2014-02-05 23:41 - 2014-02-05 23:41 - 00642632 _____ (EFD Software ) C:\Users\kompjuter\Downloads\hdtune_255.exe 2014-02-05 20:57 - 2014-02-05 20:57 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\kompjuter\Downloads\tdsskiller.exe 2014-02-05 20:03 - 2014-02-05 20:03 - 00000000 ____D () C:\Program Files\ESET 2014-02-05 20:01 - 2014-02-05 20:02 - 02347384 _____ (ESET) C:\Users\kompjuter\Downloads\esetsmartinstaller_enu.exe 2014-02-05 19:55 - 2014-02-05 19:55 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\QuickScan 2014-02-05 18:36 - 2014-02-05 18:36 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eclipse android 2014-02-05 00:36 - 2014-02-05 00:37 - 116046856 _____ (GOG.com ) C:\Users\kompjuter\Downloads\setup_treasure_adventure_game_2.0.0.4.exe 2014-02-05 00:35 - 2014-02-05 00:35 - 50685552 _____ (GOG.com ) C:\Users\kompjuter\Downloads\setup_stargunner_2.0.0.4.exe 2014-02-03 11:40 - 2014-02-03 11:40 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eclipse 2014-02-01 11:21 - 2014-02-01 11:21 - 00000000 ____D () C:\Program Files\Lavalys 2014-02-01 11:19 - 2014-02-01 11:19 - 04179293 _____ (Lavalys, Inc. ) C:\Users\kompjuter\Downloads\everesthome220(dobreprogramy.pl).exe 2014-01-28 15:20 - 2014-01-28 15:20 - 00001026 _____ () C:\Users\kompjuter\_viminfo 2014-01-24 19:43 - 2014-01-24 21:17 - 00000064 _____ () C:\Users\kompjuter\textmate_rspec_last_remembered_file_cache.txt 2014-01-24 19:30 - 2014-01-24 19:30 - 00000000 ____D () C:\Users\kompjuter\Aptana Rubles 2014-01-24 19:09 - 2014-02-03 11:40 - 00000000 ____D () C:\eclipse 2014-01-24 19:05 - 2014-01-24 19:06 - 208687239 _____ () C:\Users\kompjuter\Downloads\eclipse-standard-kepler-SR1-win32.zip 2014-01-24 01:24 - 2014-01-24 01:06 - 00004144 _____ () C:\Users\kompjuter\Documents\PF08702.seed.treeFIXED2.xml 2014-01-23 21:29 - 2014-01-23 21:29 - 00000000 ____D () C:\Users\kompjuter\.m2 2014-01-23 19:51 - 2014-01-23 19:51 - 00005134 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log 2014-01-23 19:51 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-01-23 19:51 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-23 19:51 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-23 19:51 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-22 21:40 - 2014-01-28 02:03 - 00000000 ____D () C:\Users\kompjuter\AppData\Local\Paint.NET 2014-01-22 21:40 - 2014-01-22 21:41 - 00000000 ____D () C:\Program Files\Paint.NET 2014-01-22 21:38 - 2013-08-17 14:02 - 03765592 _____ () C:\Users\kompjuter\Downloads\Paint.NET.3.5.11.Install.exe 2014-01-19 23:21 - 2014-01-19 23:21 - 00000000 ____D () C:\Users\kompjuter\.ssh 2014-01-18 23:15 - 2014-01-18 23:15 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\MPC-HC 2014-01-18 23:14 - 2014-01-18 23:14 - 00000000 ____D () C:\Program Files\MPC-HC 2014-01-18 23:13 - 2014-01-18 23:13 - 10273496 _____ (MPC-HC Team ) C:\Users\kompjuter\Downloads\MPC-HC.1.7.1.x86.exe 2014-01-17 17:05 - 2014-01-17 17:05 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Microsoft Corporation 2014-01-16 11:56 - 2014-01-16 13:01 - 00000013 _____ () C:\Users\kompjuter\Documents\AMINOseq2 2014-01-16 11:54 - 2014-01-16 13:00 - 00000014 _____ () C:\Users\kompjuter\Documents\AMINOseq 2014-01-16 10:07 - 2014-01-20 14:29 - 00001744 _____ () C:\Users\kompjuter\Documents\MATRIX 2014-01-15 23:11 - 2014-01-20 14:27 - 00000040 _____ () C:\Users\kompjuter\Documents\RNAseq 2014-01-15 19:43 - 2014-01-15 19:55 - 00000019 _____ () C:\Users\kompjuter\Documents\BI2 2014-01-15 19:15 - 2014-01-15 19:16 - 00000009 _____ () C:\Users\kompjuter\Documents\BI 2014-01-14 13:02 - 2014-01-28 15:21 - 00001784 ____H () C:\Users\kompjuter\.gitk 2014-01-12 19:00 - 2014-01-12 19:37 - 722276200 _____ () C:\Users\kompjuter\Downloads\qt-windows-opensource-5.2.0-mingw48_opengl-x86-offline.exe 2014-01-12 13:49 - 2014-01-12 13:49 - 00000000 ____D () C:\Program Files\Git 2014-01-12 13:42 - 2014-01-12 13:42 - 15483869 _____ (The Git Development Community ) C:\Users\kompjuter\Downloads\Git-1.8.5.2-preview20131230.exe 2014-01-10 23:42 - 2014-01-10 23:42 - 10673827 _____ () C:\Users\kompjuter\Downloads\cmake-2.8.12.1-win32-x86.exe 2014-01-10 23:42 - 2014-01-10 23:42 - 00000000 ____D () C:\Program Files\CMake 2.8 2014-01-10 20:55 - 2014-01-12 19:09 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\QtProject 2014-01-10 19:49 - 2014-01-10 19:55 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt 5.2.0 2014-01-10 19:49 - 2014-01-10 19:49 - 00000000 ____D () C:\Qt 2014-01-10 19:03 - 2014-01-10 19:40 - 597111040 _____ () C:\Users\kompjuter\Downloads\qt-windows-opensource-5.2.0-msvc2010_opengl-x86-offline.exe 2014-01-09 12:02 - 2014-01-09 12:02 - 01255227 _____ () C:\Users\kompjuter\Downloads\pip-1.5.win32-py3.3.exe 2014-01-09 11:58 - 2014-01-09 12:14 - 00000000 ____D () C:\Users\kompjuter\.matplotlib 2014-01-09 11:57 - 2014-01-09 11:57 - 00226588 _____ () C:\Users\kompjuter\Downloads\pyparsing-2.0.1.win32-py3.3.exe 2014-01-09 11:48 - 2014-01-09 11:50 - 17343594 _____ () C:\Users\kompjuter\Downloads\numpy-MKL-1.8.0.win32-py3.3.exe 2014-01-09 11:18 - 2014-01-09 11:18 - 05862963 _____ () C:\Users\kompjuter\Downloads\matplotlib-1.3.1.win32-py3.3.exe 2014-01-09 11:08 - 2014-01-09 11:10 - 00000000 ____D () C:\Users\kompjuter\.designer 2014-01-09 10:34 - 2014-01-09 10:35 - 29993882 _____ () C:\Users\kompjuter\Downloads\PyQt5-5.2-gpl-Py3.3-Qt5.2.0-x32.exe 2014-01-09 10:17 - 2014-01-09 12:02 - 00000000 ____D () C:\Python33 2014-01-09 10:14 - 2014-01-09 10:15 - 20537344 _____ () C:\Users\kompjuter\Downloads\python-3.3.3.msi 2014-01-07 23:36 - 2014-02-02 13:06 - 00000000 ____D () C:\Users\kompjuter\Documents\MATLAB 2014-01-07 23:36 - 2014-01-07 23:36 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Subversion 2014-01-07 23:35 - 2014-01-07 23:35 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\MathWorks 2014-01-07 20:46 - 2014-02-05 21:06 - 00000530 _____ () C:\Windows\Tasks\MATLAB R2012b Startup Accelerator.job 2014-01-07 20:45 - 2004-03-01 22:05 - 00407104 _____ (Microsoft Corporation) C:\Windows\system32\MSHFLXGD.OCX 2014-01-07 20:45 - 2004-02-11 14:37 - 00203976 _____ (Microsoft Corporation) C:\Windows\system32\RICHTX32.OCX 2014-01-07 20:44 - 2004-09-06 08:05 - 00645120 _____ () C:\Windows\system32\config.gms ==================== One Month Modified Files and Folders ======= 2014-02-06 00:40 - 2014-02-06 00:37 - 00037002 _____ () C:\Users\kompjuter\Downloads\FRST.txt 2014-02-06 00:37 - 2014-02-06 00:12 - 00000000 ____D () C:\FRST 2014-02-06 00:35 - 2014-02-06 00:35 - 00054016 _____ () C:\Windows\system32\Drivers\tajwm.sys 2014-02-06 00:35 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-02-06 00:20 - 2013-09-05 09:38 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-06 00:19 - 2013-12-14 17:53 - 00000000 ____D () C:\Users\kompjuter\Documents\Visual Studio 2010 2014-02-06 00:13 - 2014-02-06 00:13 - 00380416 _____ () C:\Users\kompjuter\Downloads\fvdf3efy.exe 2014-02-06 00:12 - 2008-08-30 04:29 - 01724784 _____ () C:\Windows\WindowsUpdate.log 2014-02-06 00:11 - 2014-02-06 00:11 - 00602112 _____ (OldTimer Tools) C:\Users\kompjuter\Downloads\OTL.exe 2014-02-06 00:09 - 2014-02-06 00:09 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Malwarebytes 2014-02-06 00:09 - 2014-02-06 00:09 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-06 00:09 - 2014-02-06 00:08 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-02-06 00:07 - 2014-02-06 00:06 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\kompjuter\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-06 00:06 - 2014-02-06 00:06 - 01139200 _____ (Farbar) C:\Users\kompjuter\Downloads\FRST.exe 2014-02-06 00:02 - 2013-11-20 16:55 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-06 00:01 - 2014-02-06 00:01 - 00320120 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-02-06 00:00 - 2014-02-06 00:00 - 00522360 _____ (Duplex Secure Ltd.) C:\Users\kompjuter\Downloads\SPTDinst-v186-x86.exe 2014-02-05 23:44 - 2014-02-05 23:44 - 00000000 ____D () C:\Program Files\HD Tune 2014-02-05 23:41 - 2014-02-05 23:41 - 00642632 _____ (EFD Software ) C:\Users\kompjuter\Downloads\hdtune_255.exe 2014-02-05 23:39 - 2013-10-14 17:38 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-02-05 23:05 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-05 23:05 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-05 21:11 - 2008-04-18 01:01 - 00777536 _____ () C:\Windows\system32\perfh015.dat 2014-02-05 21:11 - 2008-04-18 01:01 - 00174580 _____ () C:\Windows\system32\perfc015.dat 2014-02-05 21:11 - 2006-11-02 11:33 - 01791394 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-05 21:06 - 2014-01-07 20:46 - 00000530 _____ () C:\Windows\Tasks\MATLAB R2012b Startup Accelerator.job 2014-02-05 21:05 - 2013-11-20 16:55 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-05 21:05 - 2013-09-02 21:10 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-02-05 21:05 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-05 21:03 - 2008-08-30 04:30 - 00000012 _____ () C:\Windows\bthservsdp.dat 2014-02-05 21:03 - 2006-11-02 14:01 - 00032610 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-02-05 21:02 - 2013-09-14 18:56 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\foobar2000 2014-02-05 20:57 - 2014-02-05 20:57 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\kompjuter\Downloads\tdsskiller.exe 2014-02-05 20:03 - 2014-02-05 20:03 - 00000000 ____D () C:\Program Files\ESET 2014-02-05 20:02 - 2014-02-05 20:01 - 02347384 _____ (ESET) C:\Users\kompjuter\Downloads\esetsmartinstaller_enu.exe 2014-02-05 19:55 - 2014-02-05 19:55 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\QuickScan 2014-02-05 18:45 - 2013-10-17 21:18 - 00000000 ____D () C:\Users\kompjuter\.android 2014-02-05 18:36 - 2014-02-05 18:36 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eclipse android 2014-02-05 00:37 - 2014-02-05 00:36 - 116046856 _____ (GOG.com ) C:\Users\kompjuter\Downloads\setup_treasure_adventure_game_2.0.0.4.exe 2014-02-05 00:35 - 2014-02-05 00:35 - 50685552 _____ (GOG.com ) C:\Users\kompjuter\Downloads\setup_stargunner_2.0.0.4.exe 2014-02-04 21:38 - 2013-11-20 16:57 - 00001984 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-02-04 21:29 - 2013-09-05 09:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-02-04 21:29 - 2013-09-05 09:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-02-03 11:40 - 2014-02-03 11:40 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eclipse 2014-02-03 11:40 - 2014-01-24 19:09 - 00000000 ____D () C:\eclipse 2014-02-02 13:06 - 2014-01-07 23:36 - 00000000 ____D () C:\Users\kompjuter\Documents\MATLAB 2014-02-01 11:21 - 2014-02-01 11:21 - 00000000 ____D () C:\Program Files\Lavalys 2014-02-01 11:19 - 2014-02-01 11:19 - 04179293 _____ (Lavalys, Inc. ) C:\Users\kompjuter\Downloads\everesthome220(dobreprogramy.pl).exe 2014-01-30 12:45 - 2006-11-02 13:52 - 00093861 _____ () C:\Windows\setupact.log 2014-01-28 15:21 - 2014-01-14 13:02 - 00001784 ____H () C:\Users\kompjuter\.gitk 2014-01-28 15:21 - 2013-09-02 21:10 - 00000000 ____D () C:\Users\kompjuter 2014-01-28 15:20 - 2014-01-28 15:20 - 00001026 _____ () C:\Users\kompjuter\_viminfo 2014-01-28 14:09 - 2013-11-20 17:36 - 00000000 ____D () C:\Program Files\NetBeans 7.4 2014-01-28 02:03 - 2014-01-22 21:40 - 00000000 ____D () C:\Users\kompjuter\AppData\Local\Paint.NET 2014-01-26 12:49 - 2013-11-29 21:57 - 00000000 ____D () C:\ProgramData\Unity 2014-01-24 21:17 - 2014-01-24 19:43 - 00000064 _____ () C:\Users\kompjuter\textmate_rspec_last_remembered_file_cache.txt 2014-01-24 19:30 - 2014-01-24 19:30 - 00000000 ____D () C:\Users\kompjuter\Aptana Rubles 2014-01-24 19:06 - 2014-01-24 19:05 - 208687239 _____ () C:\Users\kompjuter\Downloads\eclipse-standard-kepler-SR1-win32.zip 2014-01-24 01:06 - 2014-01-24 01:24 - 00004144 _____ () C:\Users\kompjuter\Documents\PF08702.seed.treeFIXED2.xml 2014-01-23 21:29 - 2014-01-23 21:29 - 00000000 ____D () C:\Users\kompjuter\.m2 2014-01-23 19:52 - 2013-10-17 21:36 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-23 19:51 - 2014-01-23 19:51 - 00005134 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log 2014-01-23 19:51 - 2013-10-17 21:34 - 00000000 ____D () C:\Program Files\Java 2014-01-22 21:41 - 2014-01-22 21:40 - 00000000 ____D () C:\Program Files\Paint.NET 2014-01-20 14:29 - 2014-01-16 10:07 - 00001744 _____ () C:\Users\kompjuter\Documents\MATRIX 2014-01-20 14:27 - 2014-01-15 23:11 - 00000040 _____ () C:\Users\kompjuter\Documents\RNAseq 2014-01-19 23:21 - 2014-01-19 23:21 - 00000000 ____D () C:\Users\kompjuter\.ssh 2014-01-18 23:15 - 2014-01-18 23:15 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\MPC-HC 2014-01-18 23:14 - 2014-01-18 23:14 - 00000000 ____D () C:\Program Files\MPC-HC 2014-01-18 23:13 - 2014-01-18 23:13 - 10273496 _____ (MPC-HC Team ) C:\Users\kompjuter\Downloads\MPC-HC.1.7.1.x86.exe 2014-01-18 23:10 - 2013-09-02 21:15 - 00000951 _____ () C:\Users\kompjuter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-01-17 17:05 - 2014-01-17 17:05 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Microsoft Corporation 2014-01-17 00:49 - 2014-01-03 18:43 - 00282104 _____ () C:\Windows\system32\PnkBstrB.xtr 2014-01-17 00:49 - 2014-01-03 18:25 - 00282104 _____ () C:\Windows\system32\PnkBstrB.exe 2014-01-17 00:49 - 2014-01-03 18:25 - 00139424 _____ () C:\Windows\system32\Drivers\PnkBstrK.sys 2014-01-17 00:48 - 2014-01-03 18:25 - 00234768 _____ () C:\Windows\system32\PnkBstrB.ex0 2014-01-16 19:11 - 2013-09-02 21:13 - 00000000 ____D () C:\Users\kompjuter\AppData\Local\Adobe 2014-01-16 13:01 - 2014-01-16 11:56 - 00000013 _____ () C:\Users\kompjuter\Documents\AMINOseq2 2014-01-16 13:00 - 2014-01-16 11:54 - 00000014 _____ () C:\Users\kompjuter\Documents\AMINOseq 2014-01-16 09:57 - 2008-08-30 04:36 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-01-16 09:55 - 2013-09-03 13:33 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-16 09:51 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-01-15 19:55 - 2014-01-15 19:43 - 00000019 _____ () C:\Users\kompjuter\Documents\BI2 2014-01-15 19:16 - 2014-01-15 19:15 - 00000009 _____ () C:\Users\kompjuter\Documents\BI 2014-01-13 10:27 - 2013-09-03 22:55 - 00010240 _____ () C:\Users\kompjuter\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-01-12 19:37 - 2014-01-12 19:00 - 722276200 _____ () C:\Users\kompjuter\Downloads\qt-windows-opensource-5.2.0-mingw48_opengl-x86-offline.exe 2014-01-12 19:09 - 2014-01-10 20:55 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\QtProject 2014-01-12 13:49 - 2014-01-12 13:49 - 00000000 ____D () C:\Program Files\Git 2014-01-12 13:42 - 2014-01-12 13:42 - 15483869 _____ (The Git Development Community ) C:\Users\kompjuter\Downloads\Git-1.8.5.2-preview20131230.exe 2014-01-10 23:42 - 2014-01-10 23:42 - 10673827 _____ () C:\Users\kompjuter\Downloads\cmake-2.8.12.1-win32-x86.exe 2014-01-10 23:42 - 2014-01-10 23:42 - 00000000 ____D () C:\Program Files\CMake 2.8 2014-01-10 19:55 - 2014-01-10 19:49 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt 5.2.0 2014-01-10 19:49 - 2014-01-10 19:49 - 00000000 ____D () C:\Qt 2014-01-10 19:40 - 2014-01-10 19:03 - 597111040 _____ () C:\Users\kompjuter\Downloads\qt-windows-opensource-5.2.0-msvc2010_opengl-x86-offline.exe 2014-01-09 16:39 - 2006-11-02 13:47 - 00397680 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-09 12:14 - 2014-01-09 11:58 - 00000000 ____D () C:\Users\kompjuter\.matplotlib 2014-01-09 12:02 - 2014-01-09 12:02 - 01255227 _____ () C:\Users\kompjuter\Downloads\pip-1.5.win32-py3.3.exe 2014-01-09 12:02 - 2014-01-09 10:17 - 00000000 ____D () C:\Python33 2014-01-09 11:57 - 2014-01-09 11:57 - 00226588 _____ () C:\Users\kompjuter\Downloads\pyparsing-2.0.1.win32-py3.3.exe 2014-01-09 11:50 - 2014-01-09 11:48 - 17343594 _____ () C:\Users\kompjuter\Downloads\numpy-MKL-1.8.0.win32-py3.3.exe 2014-01-09 11:18 - 2014-01-09 11:18 - 05862963 _____ () C:\Users\kompjuter\Downloads\matplotlib-1.3.1.win32-py3.3.exe 2014-01-09 11:10 - 2014-01-09 11:08 - 00000000 ____D () C:\Users\kompjuter\.designer 2014-01-09 10:35 - 2014-01-09 10:34 - 29993882 _____ () C:\Users\kompjuter\Downloads\PyQt5-5.2-gpl-Py3.3-Qt5.2.0-x32.exe 2014-01-09 10:15 - 2014-01-09 10:14 - 20537344 _____ () C:\Users\kompjuter\Downloads\python-3.3.3.msi 2014-01-09 09:51 - 2013-10-10 10:10 - 00000680 _____ () C:\Users\kompjuter\AppData\Local\d3d9caps.dat 2014-01-07 23:36 - 2014-01-07 23:36 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\Subversion 2014-01-07 23:35 - 2014-01-07 23:35 - 00000000 ____D () C:\Users\kompjuter\AppData\Roaming\MathWorks Some content of TEMP: ==================== C:\Users\kompjuter\AppData\Local\Temp\fwzzjnw5.dll C:\Users\kompjuter\AppData\Local\Temp\GLB1A2B.EXE C:\Users\kompjuter\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\kompjuter\AppData\Local\Temp\numpy-1.8.0-sse3.exe C:\Users\kompjuter\AppData\Local\Temp\xmlUpdater.exe C:\Users\kompjuter\AppData\Local\Temp\{8AE593CA-8816-4BC3-A22E-36274C10C11B}.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-05 21:11 ==================== End Of Log ============================