Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:17-08-2014 01 Ran by piotr (administrator) on PIOTR-PC on 19-08-2014 21:39:23 Running from D:\Download\frst Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Polski (Polska) Internet Explorer Version 7 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (Lavasoft) C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (VMware, Inc.) C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe (VMware, Inc.) C:\Windows\System32\vmnat.exe (VMware, Inc.) C:\Program Files\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) C:\Windows\System32\vmnetdhcp.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Creative Technology Ltd) C:\Program Files\Creative\Sound Blaster Play\Volume Panel\VolPanlu.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Nullsoft, Inc.) C:\Program Files\Winamp\winamp.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Lavasoft) C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe () C:\Program Files\Samsung\Samsung Update Plus\SUPNotifier.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (OldTimer Tools) D:\Download\OTL.exe (Microsoft Corporation) C:\Windows\System32\conime.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKU\S-1-5-21-2500472054-2611105895-1049644220-1000\...\RunOnce: [AutoLaunch] => C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe [743584 2011-04-24] () HKU\S-1-5-21-2500472054-2611105895-1049644220-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000 Startup: C:\Users\piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Winamp.lnk ShortcutTarget: Winamp.lnk -> C:\Program Files\Winamp\winamp.exe (Nullsoft, Inc.) BootExecute: autocheck autochk * lsdelete ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=6C7F001E65365590&affID=119357&tsp=4985 HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=SMSN&bmod=SMSN URLSearchHook: HKLM - (No Name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - No File SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1098640 SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1098640 SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=6C7F001E65365590&affID=119357&tsp=4985 SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=6C7F001E65365590&affID=119357&tsp=4985 SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1098640 BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet) BHO: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [223232] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog9 12 %SystemRoot%\system32\vsocklib.dll [63088] (VMware, Inc.) Winsock: Catalog9 13 %SystemRoot%\system32\vsocklib.dll [63088] (VMware, Inc.) Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100 Tcpip\..\Interfaces\{1D6C6FB9-8F72-4A13-ABE8-6D2E5D438791}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\jz4d91q7.default FF NewTab: www.google.pl FF DefaultSearchEngine: Allegro FF SelectedSearchEngine: Allegro FF Homepage: hxxp://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.) FF SearchPlugin: C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\jz4d91q7.default\searchplugins\daemon-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml FF Extension: Garmin Communicator - C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\jz4d91q7.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-20] FF Extension: Microsoft .NET Framework Assistant - C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\jz4d91q7.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-29] FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2014-07-30] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-08-22] Chrome: ======= ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 appdrvrem01; C:\Windows\System32\appdrvrem01.exe [316888 2014-02-20] (Protection Technology) S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2010-03-29] (Creative Labs) [File not signed] R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [417792 2008-04-30] (Creative Technology Ltd) [File not signed] R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries) S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [1181328 2011-04-24] (Lavasoft) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2014-03-11] (Microsoft Corporation) S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation) R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed] S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [279776 2014-03-11] (Microsoft Corporation) R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed] R2 VMAuthdService; C:\Program Files\VMware\VMware Player\vmware-authd.exe [79872 2012-01-18] (VMware, Inc.) [File not signed] R2 VMnetDHCP; C:\Windows\system32\vmnetdhcp.exe [354416 2012-01-18] (VMware, Inc.) R2 VMUSBArbService; C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe [665200 2011-08-29] (VMware, Inc.) R2 VMware NAT Service; C:\Windows\system32\vmnat.exe [433264 2012-01-18] (VMware, Inc.) R2 yksvc; C:\Windows\System32\ykx32mpcoinst.dll [282624 2009-01-30] (Marvell) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 63478669; C:\Windows\System32\DRIVERS\63478669.sys [133208 2013-05-12] (Kaspersky Lab ZAO) S3 alcan5wn; C:\Windows\System32\DRIVERS\alcan5wn.sys [53600 2003-09-05] (THOMSON) S3 alcaudsl; C:\Windows\System32\DRIVERS\alcaudsl.sys [70624 2003-09-05] (THOMSON) R1 appdrv01; C:\Windows\System32\Drivers\appdrv01.sys [3332784 2014-02-20] (Protection Technology) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.) R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG) S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [65896 2013-07-25] (FTDI Ltd.) R2 hcmon; C:\Windows\system32\drivers\hcmon.sys [32496 2011-08-29] (VMware, Inc.) R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2006-11-14] (SAMSUNG ELECTRONICS CO., LTD.) R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [64288 2009-09-23] (Lavasoft AB) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231960 2014-01-25] (Microsoft Corporation) R1 RtlProt; C:\Windows\System32\DRIVERS\rtlprot.sys [25896 2007-04-23] (Windows (R) Codename Longhorn DDK provider) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [320120 2014-06-02] (Duplex Secure Ltd.) S3 ST330; C:\Windows\System32\drivers\st330.sys [30464 2009-08-06] (THOMSON Telecom Belgium) S3 STBUS; C:\Windows\System32\drivers\stbus.sys [12672 2009-08-06] (THOMSON Telecom Belgium) S3 STETH; C:\Windows\System32\DRIVERS\steth.sys [40320 2009-08-06] (THOMSON Telecom Belgium) S3 twtyfilt; C:\Windows\System32\drivers\twtyfilt.sys [20480 2008-04-10] (Creative Technology Ltd.) R3 vmkbd; C:\Windows\system32\drivers\VMkbd.sys [25584 2012-01-18] (VMware, Inc.) S3 VMnetAdapter; C:\Windows\System32\DRIVERS\vmnetadapter.sys [16624 2012-01-18] (VMware, Inc.) R2 VMnetBridge; C:\Windows\System32\DRIVERS\vmnetbridge.sys [36464 2012-01-18] (VMware, Inc.) R2 VMnetuserif; C:\Windows\system32\drivers\vmnetuserif.sys [25712 2012-01-18] (VMware, Inc.) R2 vmx86; C:\Windows\system32\Drivers\vmx86.sys [55664 2012-01-18] (VMware, Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 mcdbus; system32\DRIVERS\mcdbus.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] S3 RTL8187; system32\DRIVERS\RTL8187.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-19 21:38 - 2014-08-19 21:39 - 00000000 ____D () C:\FRST 2014-08-19 21:36 - 2014-08-19 21:36 - 00000000 ____D () C:\Users\piotr\Desktop\logi 2014-08-18 22:19 - 2014-08-18 22:20 - 00000096 _____ () C:\Users\piotr\Documents\Powers.log 2014-08-15 18:05 - 2014-06-26 23:17 - 00619664 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-08-15 18:05 - 2014-06-26 23:17 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-08-15 18:05 - 2014-06-26 23:17 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-08-15 18:04 - 2014-06-06 05:28 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-15 17:49 - 2014-07-30 03:13 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-15 17:49 - 2014-07-30 03:12 - 01177600 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-15 17:49 - 2014-07-30 03:12 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 06119936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 03632128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00480768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-15 17:49 - 2014-07-30 03:11 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll 2014-08-15 17:49 - 2014-07-30 01:33 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-08-15 17:49 - 2014-07-30 01:25 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-14 22:13 - 2014-07-25 05:26 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-14 22:13 - 2014-07-25 03:53 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-14 22:13 - 2014-07-08 01:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-08-14 22:13 - 2014-06-14 01:44 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-14 22:13 - 2014-06-14 01:33 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-08-14 22:13 - 2014-06-02 11:31 - 02263552 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-14 22:13 - 2014-06-02 11:31 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-14 22:13 - 2014-06-02 11:30 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-14 22:13 - 2014-06-02 11:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-08-14 22:13 - 2014-06-02 09:56 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-08 18:44 - 2014-08-08 18:44 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-08-08 18:43 - 2014-08-08 18:42 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-08-08 18:43 - 2014-08-08 18:42 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-08-08 18:43 - 2014-08-08 18:42 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-08-08 18:43 - 2014-08-08 18:42 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-07-31 20:53 - 2014-07-21 09:51 - 48955392 _____ () C:\Users\piotr\Desktop\20140720185904.MTS 2014-07-30 01:30 - 2014-07-30 01:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-19 21:39 - 2014-08-19 21:38 - 00000000 ____D () C:\FRST 2014-08-19 21:36 - 2014-08-19 21:36 - 00000000 ____D () C:\Users\piotr\Desktop\logi 2014-08-19 20:00 - 2013-09-26 09:25 - 01262324 _____ () C:\Windows\WindowsUpdate.log 2014-08-19 19:53 - 2012-05-10 23:09 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-08-19 19:53 - 2006-11-02 13:47 - 00004384 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-08-19 19:53 - 2006-11-02 13:47 - 00004384 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-08-19 19:52 - 2010-10-28 20:17 - 00343938 _____ () C:\aaw7boot.log 2014-08-19 19:52 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-08-18 23:28 - 2009-06-25 17:01 - 00000012 _____ () C:\Windows\bthservsdp.dat 2014-08-18 23:28 - 2006-11-02 14:01 - 00032562 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-08-18 22:20 - 2014-08-18 22:19 - 00000096 _____ () C:\Users\piotr\Documents\Powers.log 2014-08-18 22:10 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache 2014-08-18 21:45 - 2006-11-02 13:47 - 00390984 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-16 18:35 - 2009-06-24 09:11 - 00175160 _____ () C:\Windows\system32\perfc015.dat 2014-08-16 18:35 - 2009-06-24 09:11 - 00063226 _____ () C:\Windows\system32\perfh015.dat 2014-08-16 18:35 - 2006-11-02 11:33 - 01064586 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-08-16 18:10 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-08-16 01:05 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-08-15 23:01 - 2010-03-21 21:06 - 00000000 ____D () C:\Users\piotr\AppData\Roaming\Skype 2014-08-08 18:44 - 2014-08-08 18:44 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-08-08 18:44 - 2009-08-25 21:27 - 00000000 ____D () C:\Windows\Minidump 2014-08-08 18:42 - 2014-08-08 18:43 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-08-08 18:42 - 2014-08-08 18:43 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-08-08 18:42 - 2014-08-08 18:43 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-08-08 18:42 - 2014-08-08 18:43 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-07-31 20:46 - 2012-06-15 19:12 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-07-30 19:32 - 2012-12-14 15:45 - 00004310 _____ () C:\Users\piotr\Desktop\do ściągnięcia.txt 2014-07-30 03:13 - 2014-08-15 17:49 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-30 03:12 - 2014-08-15 17:49 - 01177600 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-30 03:12 - 2014-08-15 17:49 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 06119936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 03632128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00480768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-30 03:11 - 2014-08-15 17:49 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll 2014-07-30 01:33 - 2014-08-15 17:49 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-07-30 01:30 - 2014-07-30 01:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-07-30 01:25 - 2014-08-15 17:49 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-27 17:41 - 2010-08-27 20:17 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-07-25 05:26 - 2014-08-14 22:13 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-07-25 03:53 - 2014-08-14 22:13 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-21 09:51 - 2014-07-31 20:53 - 48955392 _____ () C:\Users\piotr\Desktop\20140720185904.MTS ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-19 20:01 ==================== End Of Log ============================