Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014 Ran by Seweryn (administrator) on SEWERYN on 19-05-2014 22:08:03 Running from C:\Users\Seweryn\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Windows\SysWOW64\PnkBstrB.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe (SafetyNut Inc) C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\SafetyNutManager.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe () C:\Windows\PLFSetI.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (SafetyNut Inc) C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\SafetyNutManager.exe (SafetyNut Inc) C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\safetynut.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (BitTorrent Inc.) C:\Users\Seweryn\AppData\Roaming\uTorrent\uTorrent.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (Mister Group) C:\Program Files (x86)\System Explorer\SystemExplorer.exe (Mister Group) C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\prevhost.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [824352 2009-08-29] (Acer Incorporated) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1808168 2009-06-18] (Synaptics Incorporated) HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] () HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-05-16] (Realtek Semiconductor) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1157640 2009-08-18] (Dritek System Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-08] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SystemExplorerAutoStart] => C:\Program Files (x86)\System Explorer\SystemExplorer.exe [2851784 2013-05-16] (Mister Group) HKLM-x32\...\Run: [AllShareAgent] => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [uTorrent] => C:\Users\Seweryn\AppData\Roaming\uTorrent\uTorrent.exe [1272400 2014-05-10] (BitTorrent Inc.) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPDLR] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-04-23] (Samsung) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-04-23] (Samsung) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-04-23] (Samsung) IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\dprotectsvc.exe: [Debugger] tasklist.exe IFEO\jumpflip: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\searchinstaller.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\searchprotector.exe: [Debugger] tasklist.exe IFEO\searchsettings.exe: [Debugger] tasklist.exe IFEO\searchsettings64.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\umbrella.exe: [Debugger] tasklist.exe IFEO\utiljumpflip.exe: [Debugger] tasklist.exe IFEO\volaro: [Debugger] tasklist.exe IFEO\vonteera: [Debugger] tasklist.exe IFEO\websteroids.exe: [Debugger] tasklist.exe IFEO\websteroidsservice.exe: [Debugger] tasklist.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.) HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\safetycrt.dll [489992 2014-05-12] () HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\x64\safetycrt.dll [664584 2014-05-12] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?o=APN11459&gct=hp&d=488-209&v=a12627-338&t=4 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_search_url = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=209&systemid=488&v=a12627-338&apn_uid=2591851358814523&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms} SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=209&systemid=488&v=a12627-338&apn_uid=2591851358814523&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms} SearchScopes: HKCU - DefaultScope {E4B106E2-C3F2-4098-9E9C-3A6217EF71D6} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=E44F761A042FE497 SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_pl SearchScopes: HKCU - {8E307E27-13D6-4FCF-B144-0AF90D3B315F} URL = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=209&systemid=488&v=a12627-338&apn_uid=2591851358814523&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms} SearchScopes: HKCU - {E4B106E2-C3F2-4098-9E9C-3A6217EF71D6} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms} BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader) BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 62.21.99.94 62.21.99.95 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default FF user.js: detected! => C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default\user.js FF DefaultSearchEngine: Wirtualna Polska FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Wirtualna Polska FF Homepage: www.google.pl FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=209&systemid=488&v=a12627-338&apn_dtid=TCH001&apn_ptnrs=AG1&apn_uid=2591851358814523&o=APN11459&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Seweryn\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Seweryn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer Cloud) FF SearchPlugin: C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default\searchplugins\delta.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml FF Extension: PrivDog - C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default\Extensions\PrivDog@AdTrustMedia.com [2014-04-05] FF Extension: FoxTrick - C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default\Extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba} [2014-03-09] FF Extension: Ask New Tabs - C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default\Extensions\{A418B729-A4C7-8F7E-53DB-5FD4D4C9320C} [2014-05-19] FF Extension: PrivDog - C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default\Extensions\PrivDog@AdTrustMedia.com.xpi [2014-04-25] FF Extension: Start Page - C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}.xpi [2014-04-11] FF Extension: Fasterfox - C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\9uui98j3.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi [2012-11-04] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-07] FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR HKCU\...\Chrome\Extension: [cmaiofennmphjldldcpphcechfnnohja] - C:\Users\Seweryn\AppData\Local\AdTrustMedia\PrivDog\PrivDog_chrome.crx [2014-04-08] CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx [2013-10-14] CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx [2013-12-27] CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06] CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22] ==================== Services (Whitelisted) ================= R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO) R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) R2 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.) S4 ICM_UpdaterService; C:\Program Files (x86)\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [204883 2011-03-18] () S4 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-06] (Egis Technology Inc.) S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-06-01] (Nero AG) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2010-02-27] () R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [103736 2010-02-27] () R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] () S4 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-07] (RealNetworks, Inc.) R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () R2 SafetyNutManager; C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\SafetyNutManager.exe [3544072 2014-05-12] (SafetyNut Inc) R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099512 2013-08-30] (AVG) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [311968 2013-02-04] () R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-07] (DT Soft Ltd) R1 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [42816 2006-12-13] (Eutron) R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\x64\configmgrc1.cfg [36224 2014-05-12] (SafetyNut Inc) S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-12-30] () R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO) R1 kl1; C:\Windows\System32\DRIVERS\kl1.sys [144400 2008-04-16] (Kaspersky Lab) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [128200 2014-05-16] (Qualcomm Atheros Co., Ltd.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2013-02-03] () R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] () S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-02] (Realtek Semiconductor Corp.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-23] (Duplex Secure Ltd.) S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] () R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software) U3 a14d5y2f; C:\Windows\System32\Drivers\a14d5y2f.sys [0 ] (Advanced Micro Devices) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S2 KeyP; SYSTEM32\DRIVERS\KEYP.SYS [X] S3 nmwcdcx64; system32\drivers\ccdcmbox64.sys [X] S3 nmwcdnsucx64; system32\drivers\nmwcdnsucx64.sys [X] S3 nmwcdnsux64; system32\drivers\nmwcdnsux64.sys [X] S3 nmwcdx64; system32\drivers\ccdcmbx64.sys [X] S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X] S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\BatteryCare\WinRing0x64.sys [X] ========================== Drivers MD5 ======================= C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit C:\Windows\system32\drivers\afd.sys 79059559E89D06E8B80CE2944BE20228 C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit C:\Windows\system32\drivers\aksdf.sys 94C0972B06C75456ED574DD46417B1D8 C:\Windows\system32\drivers\aksfridge.sys 7B0BC062CA6ABAB23F88EA483B5A538E C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49 C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048 C:\Windows\system32\drivers\appid.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\athrx.sys 12A145262015D6C7F08CC251A4A9713B C:\Windows\System32\DRIVERS\atikmdag.sys C9F90FEE4FDC829382B9130A92FB744C C:\Windows\System32\DRIVERS\atksgt.sys 1FD0FA6618B31FAD14385740D0F6C333 C:\Windows\system32\DRIVERS\bxvbda.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bcmwl664.sys B44879610F2DC4A046B14BEFA3AE72DE C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\blbdrive.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bridge.sys 5C2F352A4E961D72518261257AAE204B C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit C:\Windows\System32\CLFS.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\cmderd.sys 348A7FDDF0D7354ED6308AF96EEF4F54 C:\Windows\System32\DRIVERS\cmdguard.sys 923659525ADAC632EA6F94570CCE1561 C:\Windows\System32\DRIVERS\cmdhlp.sys 0AB6E8D34782E83AEECEEE76BC788957 C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit C:\Windows\System32\Drivers\cng.sys EBF28856F69CF094A902F884CF989706 C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ssudbus.sys 73BDD44A6088916964945886F9025409 C:\Windows\System32\drivers\discache.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit C:\Windows\SysWow64\Drivers\DKbFltr.sys D5BCB77BE83CF99F508943945D46343D C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\dtsoftbus01.sys 46571ED73AE84469DCA53081D33CF3C8 C:\Windows\System32\drivers\dxgkrnl.sys 88612F1CE3BF42256913BF6E61C70D52 C:\Windows\system32\DRIVERS\evbda.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit C:\Windows\system32\Drivers\eusk2par-amd64.sys EC185E03F186D392DA86391A1A5AF198 C:\Windows\System32\DRIVERS\ew_hwusbdev.sys 86F7951BBCEE4A86E79A97306BD14318 C:\Windows\System32\DRIVERS\ew_usbenumfilter.sys 55E0EDA185869F7EA67EA97FD0655B39 C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\x64\configmgrc1.cfg 255B4B16A1B3BA9F2302D267F55BC202 C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legit C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit C:\Windows\SysWOW64\FsUsbExDisk.SYS DDEE99DC54EFA20BD5A442CD733C4462 C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B C:\Windows\System32\drivers\ftdibus.sys FA169871D8FADCC6539C4E8726610286 C:\Windows\System32\drivers\ftser2k.sys 24237091348D1EFB5635A1CF9649E311 C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0 C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\GEARAspiWDM.sys ==> MD5 is legit C:\Windows\system32\drivers\hardlock.sys 78FAD9117E4527F2CA82259DA10F40BD C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit C:\Windows\System32\Drivers\ANDROIDUSB.sys F47CEC45FB85791D4AB237563AD0FA8F C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ew_jucdcacm.sys 91971BCD780D6063DF90DE4F1DF10C2F C:\Windows\System32\DRIVERS\ew_jucdcecm.sys 53D3E56CB36C9DDE9B7CDB5447DA0E80 C:\Windows\System32\DRIVERS\ew_jubusenum.sys CCE3DB0BA3C615CAA321EB1301532688 C:\Windows\System32\DRIVERS\ew_juextctrl.sys C4BC37B9E5E54A50B2AA458F1FCA428C C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366 C:\Windows\System32\DRIVERS\igdkmd64.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\inspect.sys 8E8C4F5DE79216E56A2E61D573C4F9B3 C:\Windows\System32\drivers\RTKVHD64.sys ECA5E9DA350D2D21376260CD3602449A C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit C:\Windows\system32\drivers\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6 C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\kl1.sys 082A5A26ADAE2A904A05C10E45DDF22D C:\Windows\System32\Drivers\ksecdd.sys 353009DEDF918B2A51414F330CF72DEC C:\Windows\System32\Drivers\ksecpkg.sys 1C2D8E18AA8FD50CD04C15CC27F7F5AB C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\L1C62x64.sys F8FFB44443709A3975581ECD9A7E59ED C:\Windows\System32\DRIVERS\lirsgt.sys 5EA407821BB3104C31A705175AB4F309 C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit C:\Windows\System32\drivers\modem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\mrxdav.sys 1A4F75E63C9FB84B85DFFC6B63FD5404 C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163 C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\mwlPSDFilter.sys 6FFECC25B39DC7652A0CEC0ADA9DB589 C:\Windows\System32\DRIVERS\mwlPSDNServ.sys 0BEFE32CA56D6EE89D58175725596A85 C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys D43BC633B8660463E446E28E14A51262 C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88 C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit C:\Windows\system32\ckldrv.sys 2263727032E9B19231A706046B8C82D3 C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit C:\Windows\System32\Drivers\Ntfs.sys 1A29A59A4C5BA6F8C85062A613B7E2B2 C:\Windows\system32\drivers\NTIDrvr.sys 64DDD0DEE976302F4BD93E5EFCC2F013 C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C C:\Windows\System32\drivers\pci.sys ==> MD5 is legit C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34 C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit C:\Windows\System32\Drivers\RtsUStor.sys DB30AA4DAA0D492FA5D7717D8181FFA1 C:\Windows\SysWOW64\Drivers\RtsUStor.sys DB30AA4DAA0D492FA5D7717D8181FFA1 C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ser2pl64.sys 2437720D4480523562360B2B6B5864A7 C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\serial.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\silabenm.sys 7799106FEE728B907A86D9C9751E02D5 C:\Windows\System32\DRIVERS\silabser.sys 4AD84F9B367B89B48A3338E0AECA06B9 C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit C:\Windows\System32\Drivers\sptd.sys D6AB7C13FCDD2E4CAC35244D2C172D9A C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28 C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3 C:\Windows\System32\DRIVERS\sscebus.sys F74634F46692C8315E7F37F698AF3225 C:\Windows\System32\DRIVERS\sscemdfl.sys 82732B391EFD69B0548044BE9CB37BFC C:\Windows\System32\DRIVERS\sscemdm.sys 43D56ACE4469D90F9790E8352D87D9B5 C:\Windows\System32\DRIVERS\ssudmdm.sys 5252D7BC56E5E0ED715AEA8FE173A455 C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\SynTP.sys BCF305959B53B200CEB2AD25AD22F8A7 C:\Windows\System32\drivers\tcpip.sys 40AF23633D197905F03AB5628C558C51 C:\Windows\System32\DRIVERS\tcpip.sys 40AF23633D197905F03AB5628C558C51 C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8 C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09 C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426 C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys 45427C4B8CAC6B241478F149B935CD80 C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit C:\Windows\system32\drivers\UBHelper.sys 2E22C1FD397A5A9FFEF55E9D1FC96C00 C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\umpass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31 C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965 C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA C:\Windows\system32\drivers\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit C:\Windows\system32\drivers\usbscan.sys 9661DA76B4531B2DA272ECCE25A8AF24 C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6 C:\Windows\System32\DRIVERS\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3 C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7 C:\Windows\System32\DRIVERS\VClone.sys C5E70C4E64666DB9D69C9F2FDAE22428 C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit C:\Windows\System32\drivers\vga.sys ==> MD5 is legit C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vwifimp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8 C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit C:\Windows\system32\drivers\WinUSB.sys FE88B288356E7B47B74B13372ADD906D C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659 C:\Windows\System32\Drivers\a14d5y2f.sys ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-19 22:08 - 2014-05-19 22:08 - 00042976 _____ () C:\Users\Seweryn\Desktop\FRST.txt 2014-05-19 22:07 - 2014-05-19 22:08 - 00000000 ____D () C:\FRST 2014-05-19 22:04 - 2014-05-19 22:04 - 00089884 _____ () C:\Users\Seweryn\Desktop\Extras.Txt 2014-05-19 22:03 - 2014-05-19 22:03 - 01300112 _____ () C:\Users\Seweryn\Desktop\OTL.Txt 2014-05-19 21:38 - 2014-05-19 21:37 - 00602112 _____ (OldTimer Tools) C:\Users\Seweryn\Desktop\OTL.exe 2014-05-19 21:38 - 2014-05-19 21:36 - 02067456 _____ (Farbar) C:\Users\Seweryn\Desktop\FRST64.exe 2014-05-19 18:40 - 2014-05-19 19:29 - 00004128 _____ () C:\Windows\IE11_main.log 2014-05-19 18:10 - 2014-05-19 21:47 - 00000000 ____D () C:\ProgramData\SafetyNut 2014-05-16 14:30 - 2014-05-19 20:47 - 00000496 _____ () C:\Windows\error.log 2014-05-16 14:29 - 2014-05-19 20:47 - 00000336 _____ () C:\Windows\setupact.log 2014-05-16 14:29 - 2014-05-16 14:29 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-16 14:28 - 2014-05-19 20:46 - 00000112 _____ () C:\Windows\errord.log 2014-05-16 00:48 - 2014-05-16 00:48 - 00128200 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C62x64.sys 2014-05-16 00:46 - 2014-05-16 00:46 - 56270848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-16 00:46 - 2014-05-16 00:46 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-16 00:46 - 2014-05-16 00:46 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00245496 _____ (TODO: ) C:\Windows\system32\slprp64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00033008 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-16 00:43 - 2014-05-16 00:43 - 03979776 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys 2014-05-15 15:52 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 15:52 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 15:46 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 15:46 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 15:46 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 15:46 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 15:46 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 15:45 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 15:45 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 15:45 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 15:45 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 15:45 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 15:45 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 15:45 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 15:45 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 15:45 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 15:45 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 15:45 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-15 15:45 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-14 18:40 - 2014-05-14 18:40 - 00039091 _____ () C:\ComboFix.txt 2014-05-14 18:12 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-05-14 18:12 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-05-14 18:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-05-14 18:10 - 2014-05-14 18:40 - 00000000 ____D () C:\Qoobox 2014-05-12 20:29 - 2013-09-07 16:09 - 00003680 ____N () C:\bootsqm.dat 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec 2014-05-12 17:22 - 2014-05-12 17:22 - 00001966 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-05-12 17:22 - 2013-12-30 03:54 - 00233472 _____ (Teruten) C:\Windows\SysWOW64\FsUsbExService.Exe 2014-05-12 17:22 - 2013-12-30 03:54 - 00037344 _____ () C:\Windows\SysWOW64\FsUsbExDisk.Sys 2014-05-12 17:22 - 2012-06-26 16:03 - 00110592 _____ () C:\Windows\SysWOW64\FsUsbExDevice.Dll 2014-05-12 16:59 - 2014-05-12 16:59 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-05-12 16:57 - 2014-05-12 16:57 - 00000000 ____D () C:\ProgramData\Apple 2014-05-12 16:31 - 2014-05-12 16:31 - 00000000 ____D () C:\Windows\Options 2014-05-12 16:31 - 2014-05-12 16:31 - 00000000 ____D () C:\Program Files (x86)\Atheros 2014-05-12 16:31 - 2009-10-13 07:54 - 00049449 _____ () C:\Windows\system32\athrextx.cat 2014-05-12 16:31 - 2009-10-05 09:34 - 01542656 _____ (Atheros Communications, Inc.) C:\Windows\system32\athrx.sys 2014-05-12 16:30 - 2014-05-12 16:31 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-10 21:07 - 2014-05-10 21:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-10 20:53 - 2014-05-10 20:53 - 00000836 _____ () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-05-09 21:30 - 2014-05-09 21:31 - 02415104 _____ () C:\Users\Seweryn\Desktop\INSTYTUCJE POZAMILITARNE.ppt 2014-05-07 23:19 - 2014-05-07 23:21 - 00003364 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-817181791-564608639-3437121551-1000 2014-05-07 23:19 - 2014-05-07 23:19 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\RealNetworks 2014-05-07 23:18 - 2014-05-07 23:18 - 00001042 _____ () C:\Users\Public\Desktop\RealPlayer Cloud.lnk 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\ProgramData\RealNetworks 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\Program Files (x86)\RealNetworks 2014-05-07 23:10 - 2014-05-07 23:10 - 00201800 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll 2014-05-07 23:10 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-07 23:09 - 2014-05-07 23:09 - 00278600 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2014-05-07 23:09 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-07 23:09 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-07 23:09 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-07 23:08 - 2014-05-07 23:09 - 00004129 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-07 23:08 - 2014-05-07 23:08 - 00505416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2014-05-07 23:08 - 2014-05-07 23:08 - 00353864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2014-05-07 18:42 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1 2014-05-07 18:41 - 2014-05-07 20:02 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Htc 2014-05-07 18:40 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC 2014-05-07 18:40 - 2014-05-07 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC Sync 2014-05-07 18:39 - 2014-05-14 19:14 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Downloaded Installations 2014-05-07 18:39 - 2014-05-07 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC 2014-05-07 18:38 - 2014-05-07 20:33 - 00000000 ____D () C:\Program Files (x86)\HTC 2014-05-07 18:38 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications 2014-05-07 18:13 - 2014-05-07 18:13 - 02401195 _____ () C:\Users\Seweryn\Desktop\Geneza, charakter i konsekwencje I wojny światowej.pptx 2014-05-06 22:44 - 2014-05-07 20:22 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-05 22:00 - 2014-05-05 22:00 - 00000000 ____D () C:\Program Files (x86)\Browser Tab Search by Ask 2014-05-04 14:30 - 2014-05-12 18:02 - 00000000 ____D () C:\Users\Seweryn\Desktop\zdjęcia wózka 2014-05-01 12:37 - 2014-05-01 12:37 - 00003618 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Seweryn 2014-04-26 21:47 - 2014-05-09 17:19 - 00000000 ____D () C:\Users\Seweryn\Desktop\BMR 2014-04-24 08:31 - 2014-04-24 08:31 - 00167431 _____ () C:\Users\Seweryn\Desktop\Budowa i różnorodność grzybów.pptx ==================== One Month Modified Files and Folders ======= 2014-05-19 22:08 - 2014-05-19 22:08 - 00042976 _____ () C:\Users\Seweryn\Desktop\FRST.txt 2014-05-19 22:08 - 2014-05-19 22:07 - 00000000 ____D () C:\FRST 2014-05-19 22:07 - 2009-11-13 22:46 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\uTorrent 2014-05-19 22:06 - 2011-01-27 18:00 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat 2014-05-19 22:04 - 2014-05-19 22:04 - 00089884 _____ () C:\Users\Seweryn\Desktop\Extras.Txt 2014-05-19 22:03 - 2014-05-19 22:03 - 01300112 _____ () C:\Users\Seweryn\Desktop\OTL.Txt 2014-05-19 21:47 - 2014-05-19 18:10 - 00000000 ____D () C:\ProgramData\SafetyNut 2014-05-19 21:37 - 2014-05-19 21:38 - 00602112 _____ (OldTimer Tools) C:\Users\Seweryn\Desktop\OTL.exe 2014-05-19 21:36 - 2014-05-19 21:38 - 02067456 _____ (Farbar) C:\Users\Seweryn\Desktop\FRST64.exe 2014-05-19 21:32 - 2013-09-09 19:07 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-05-19 21:14 - 2012-04-07 20:08 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-19 20:58 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-19 20:58 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-19 20:54 - 2013-12-22 17:47 - 01554071 _____ () C:\Windows\WindowsUpdate.log 2014-05-19 20:47 - 2014-05-16 14:30 - 00000496 _____ () C:\Windows\error.log 2014-05-19 20:47 - 2014-05-16 14:29 - 00000336 _____ () C:\Windows\setupact.log 2014-05-19 20:47 - 2014-03-09 22:49 - 00000286 _____ () C:\Windows\Tasks\Driver Booster Update.job 2014-05-19 20:47 - 2013-04-13 20:12 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-05-19 20:47 - 2011-08-01 20:42 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-05-19 20:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-19 20:46 - 2014-05-16 14:28 - 00000112 _____ () C:\Windows\errord.log 2014-05-19 19:29 - 2014-05-19 18:40 - 00004128 _____ () C:\Windows\IE11_main.log 2014-05-19 19:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing 2014-05-19 18:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-19 18:08 - 2009-10-28 14:32 - 00740688 _____ () C:\Windows\system32\perfh015.dat 2014-05-19 18:08 - 2009-10-28 14:32 - 00156230 _____ () C:\Windows\system32\perfc015.dat 2014-05-19 18:08 - 2009-07-14 07:13 - 01670590 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-17 01:21 - 2014-02-16 17:20 - 00000000 ____D () C:\The KMPlayer 2014-05-16 14:29 - 2014-05-16 14:29 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-16 00:49 - 2014-03-09 22:52 - 00000000 ____D () C:\DrvInstall 2014-05-16 00:48 - 2014-05-16 00:48 - 00128200 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C62x64.sys 2014-05-16 00:48 - 2014-03-09 22:54 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-16 00:46 - 2014-05-16 00:46 - 56270848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-16 00:46 - 2014-05-16 00:46 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-16 00:46 - 2014-05-16 00:46 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00245496 _____ (TODO: ) C:\Windows\system32\slprp64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00033008 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-16 00:43 - 2014-05-16 00:43 - 03979776 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys 2014-05-15 23:22 - 2014-04-13 13:24 - 00000000 ____D () C:\Users\Seweryn\Desktop\administracja 2014-05-15 21:31 - 2009-11-12 20:32 - 00000000 ___RD () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-15 21:31 - 2009-11-12 20:32 - 00000000 ___RD () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 16:32 - 2013-03-15 15:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-05-15 16:31 - 2009-10-03 04:35 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-15 16:07 - 2013-07-14 23:59 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 16:03 - 2009-11-14 15:48 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-15 15:59 - 2009-07-14 04:34 - 00000583 _____ () C:\Windows\win.ini 2014-05-14 19:42 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-14 19:14 - 2014-05-07 18:39 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Downloaded Installations 2014-05-14 19:14 - 2012-09-11 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Szkola podstawowa klasa 4 2014-05-14 18:44 - 2013-06-19 18:12 - 00319474 _____ () C:\Windows\system32\Drivers\fvstore.dat 2014-05-14 18:40 - 2014-05-14 18:40 - 00039091 _____ () C:\ComboFix.txt 2014-05-14 18:40 - 2014-05-14 18:10 - 00000000 ____D () C:\Qoobox 2014-05-14 18:33 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-05-14 17:14 - 2012-04-07 20:08 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 17:14 - 2012-04-07 20:08 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-14 17:14 - 2011-06-10 23:21 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-12 18:02 - 2014-05-04 14:30 - 00000000 ____D () C:\Users\Seweryn\Desktop\zdjęcia wózka 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec 2014-05-12 17:22 - 2014-05-12 17:22 - 00001966 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-05-12 16:57 - 2014-05-12 16:57 - 00000000 ____D () C:\ProgramData\Apple 2014-05-12 16:33 - 2009-10-28 13:42 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-05-12 16:31 - 2014-05-12 16:31 - 00000000 ____D () C:\Windows\Options 2014-05-12 16:31 - 2014-05-12 16:31 - 00000000 ____D () C:\Program Files (x86)\Atheros 2014-05-12 16:31 - 2014-05-12 16:30 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-12 16:31 - 2009-10-03 04:12 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-05-12 16:04 - 2013-04-08 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-10 22:48 - 2010-02-07 12:04 - 00016384 _____ () C:\Users\Seweryn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-05-10 21:07 - 2014-05-10 21:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-10 20:53 - 2014-05-10 20:53 - 00000836 _____ () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-05-09 21:31 - 2014-05-09 21:30 - 02415104 _____ () C:\Users\Seweryn\Desktop\INSTYTUCJE POZAMILITARNE.ppt 2014-05-09 17:19 - 2014-04-26 21:47 - 00000000 ____D () C:\Users\Seweryn\Desktop\BMR 2014-05-07 23:38 - 2012-05-21 15:31 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Adobe 2014-05-07 23:30 - 2013-08-11 19:15 - 00000000 ____D () C:\Program Files (x86)\Windows Phone 2014-05-07 23:30 - 2012-09-04 15:40 - 00000000 ____D () C:\Program Files (x86)\Real 2014-05-07 23:29 - 2013-11-28 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-07 23:29 - 2013-09-02 21:06 - 00000000 ____D () C:\ProgramData\SystemExplorer 2014-05-07 23:29 - 2013-08-11 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone 2014-05-07 23:29 - 2013-06-19 13:35 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO 2014-05-07 23:29 - 2012-12-22 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks 2014-05-07 23:29 - 2012-09-04 15:39 - 00000000 ____D () C:\ProgramData\Real 2014-05-07 23:29 - 2012-03-01 19:10 - 00000000 ____D () C:\Windows\system32\Macromed 2014-05-07 23:29 - 2010-12-24 14:55 - 00000000 ____D () C:\Windows\WindowsMobile 2014-05-07 23:29 - 2010-01-06 14:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\XnView 2014-05-07 23:29 - 2009-11-12 20:29 - 00000000 ____D () C:\Users\Seweryn 2014-05-07 23:29 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-07 23:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-07 23:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-07 23:21 - 2014-05-07 23:19 - 00003364 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-817181791-564608639-3437121551-1000 2014-05-07 23:19 - 2014-05-07 23:19 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\RealNetworks 2014-05-07 23:18 - 2014-05-07 23:18 - 00001042 _____ () C:\Users\Public\Desktop\RealPlayer Cloud.lnk 2014-05-07 23:18 - 2012-09-04 15:40 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\Real 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\ProgramData\RealNetworks 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\Program Files (x86)\RealNetworks 2014-05-07 23:11 - 2014-04-07 17:55 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-07 23:10 - 2014-05-07 23:10 - 00201800 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll 2014-05-07 23:09 - 2014-05-07 23:09 - 00278600 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2014-05-07 23:09 - 2014-05-07 23:08 - 00004129 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-07 23:09 - 2009-11-15 19:59 - 00000000 ____D () C:\Program Files (x86)\Java 2014-05-07 23:08 - 2014-05-07 23:08 - 00505416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2014-05-07 23:08 - 2014-05-07 23:08 - 00353864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2014-05-07 20:49 - 2014-04-04 14:20 - 00000000 ____D () C:\ProgramData\Comodo Downloader 2014-05-07 20:46 - 2009-10-03 04:34 - 00000000 ___RD () C:\MSOCache 2014-05-07 20:33 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\HTC 2014-05-07 20:22 - 2014-05-07 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC 2014-05-07 20:22 - 2014-05-06 22:44 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-07 20:02 - 2014-05-07 18:41 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Htc 2014-05-07 18:42 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1 2014-05-07 18:42 - 2014-05-07 18:40 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC 2014-05-07 18:40 - 2014-05-07 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC Sync 2014-05-07 18:38 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications 2014-05-07 18:13 - 2014-05-07 18:13 - 02401195 _____ () C:\Users\Seweryn\Desktop\Geneza, charakter i konsekwencje I wojny światowej.pptx 2014-05-05 22:00 - 2014-05-05 22:00 - 00000000 ____D () C:\Program Files (x86)\Browser Tab Search by Ask 2014-05-01 12:37 - 2014-05-01 12:37 - 00003618 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Seweryn 2014-04-24 08:31 - 2014-04-24 08:31 - 00167431 _____ () C:\Users\Seweryn\Desktop\Budowa i różnorodność grzybów.pptx ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe [2014-05-15 15:45] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== BCD ================================ Menedľer rozruchu systemu Windows --------------------------------- Identyfikator {bootmgr} device partition=\Device\HarddiskVolume2 description Windows Boot Manager locale pl-PL inherit {globalsettings} default {current} resumeobject {123f4797-c3bd-11de-b662-f5e2ede90d14} displayorder {current} toolsdisplayorder {memdiag} timeout 30 Moduˆ ˆadujĄcy rozruchu systemu Windows --------------------------------------- Identyfikator {current} device partition=C: path \Windows\system32\winload.exe description Windows 7 locale pl-PL inherit {bootloadersettings} recoverysequence {123f4799-c3bd-11de-b662-f5e2ede90d14} recoveryenabled Yes osdevice partition=C: systemroot \Windows resumeobject {123f4797-c3bd-11de-b662-f5e2ede90d14} nx OptIn numproc 2 usefirmwarepcisettings No Moduˆ ˆadujĄcy rozruchu systemu Windows --------------------------------------- Identyfikator {123f4799-c3bd-11de-b662-f5e2ede90d14} device ramdisk=[C:]\Recovery\123f4799-c3bd-11de-b662-f5e2ede90d14\Winre.wim,{123f479a-c3bd-11de-b662-f5e2ede90d14} path \windows\system32\winload.exe description Windows Recovery Environment inherit {bootloadersettings} osdevice ramdisk=[C:]\Recovery\123f4799-c3bd-11de-b662-f5e2ede90d14\Winre.wim,{123f479a-c3bd-11de-b662-f5e2ede90d14} systemroot \windows nx OptIn winpe Yes Wznawianie ze stanu hibernacji ------------------------------ Identyfikator {123f4797-c3bd-11de-b662-f5e2ede90d14} device partition=C: path \Windows\system32\winresume.exe description Windows Resume Application locale pl-PL inherit {resumeloadersettings} filedevice partition=C: filepath \hiberfil.sys debugoptionenabled No Moduˆ testujĄcy pami©† systemu Windows -------------------------------------- Identyfikator {memdiag} device partition=\Device\HarddiskVolume2 path \boot\memtest.exe description Windows Memory Diagnostic locale pl-PL inherit {globalsettings} badmemoryaccess Yes Ustawienia usˆug EMS -------------------- Identyfikator {emssettings} bootems Yes Ustawienia debugera ------------------- Identyfikator {dbgsettings} debugtype Serial debugport 1 baudrate 115200 Uszkodzenia pami©ci RAM ----------------------- Identyfikator {badmemory} Ustawienia globalne ------------------- Identyfikator {globalsettings} inherit {dbgsettings} {emssettings} {badmemory} Ustawienia moduˆu ˆadujĄcego rozruchu ------------------------------------- Identyfikator {bootloadersettings} inherit {globalsettings} {hypervisorsettings} Ustawienia funkcji hypervisor ----------------------------- Identyfikator {hypervisorsettings} hypervisordebugtype Serial hypervisordebugport 1 hypervisorbaudrate 115200 Ustawienia moduˆu ˆadujĄcego wznawiania --------------------------------------- Identyfikator {resumeloadersettings} inherit {globalsettings} Opcje urzĄdzenia ---------------- Identyfikator {123f479a-c3bd-11de-b662-f5e2ede90d14} description Ramdisk Options ramdisksdidevice partition=C: ramdisksdipath \Recovery\123f4799-c3bd-11de-b662-f5e2ede90d14\boot.sdi LastRegBack: 2009-11-14 17:49 ==================== End Of Log ============================