Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-09-2014 Ran by JAREK (administrator) on JAREK-KOMPUTER on 10-09-2014 21:18:38 Running from C:\Users\JAREK\Desktop\Nowy folder Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 10 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe () C:\ProgramData\DatacardService\HWDeviceService.exe (globalUpdate) C:\Program Files\globalUpdate\Update\GoogleUpdate.exe () C:\ProgramData\Internet w Cyfrowym Polsacie\OnlineUpdate\ouc.exe (TMRG, Inc.) C:\Program Files\RelevantKnowledge\rlservice.exe (Aztec Media Inc) C:\Program Files\Settings Manager\systemk\SystemkService.exe () C:\Program Files\PLAY ONLINE\AssistantServices.exe (Aztec Media Inc) C:\Program Files\Settings Manager\systemk\SystemkService.exe (Aztec Media Inc) C:\Program Files\Settings Manager\systemk\systemku.exe (Microsoft Corporation) C:\Windows\System32\UI0Detect.exe (Microsoft Corporation) C:\Windows\System32\dinotify.exe (TMRG, Inc.) C:\Program Files\RelevantKnowledge\rlvknlg.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe () C:\Program Files\Bench\BService\1.1\bservice.exe () C:\Program Files\Bench\Wd\wd.exe () C:\Program Files\Bench\Proxy\pwdg.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-08-09] (AVAST Software) HKLM\...\Run: [Bench Settings Cleaner] => C:\Program Files\Bench\Proxy\cl.exe [55296 2014-07-15] () HKLM\...\Run: [fst_pl_107] => [X] HKLM\...\Run: [BService] => C:\Program Files\Bench\BService\1.1\bservice.exe [52736 2014-07-15] () HKLM\...\Run: [Wd] => C:\Program Files\Bench\Wd\wd.exe [92672 2014-07-15] () HKLM\...\Run: [Bench Communicator Watcher] => C:\Program Files\Bench\Proxy\pwdg.exe [127488 2014-07-15] () HKLM\...\RunOnce: [Discount Dragon-repairJob] => wscript.exe "C:\Users\JAREK\AppData\Local\Discount Dragon\repair.js" "Discount Dragon-repairJob" HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-09] (Microsoft Corporation) HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\Run: [EA Core] => "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\MountPoints2: E - E:\AutoRun.exe HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\MountPoints2: {28a84d96-b226-11e2-afe2-50b7c3e01bd4} - E:\AutoRun.exe HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\MountPoints2: {28a84d9a-b226-11e2-afe2-50b7c3e01bd4} - E:\AutoRun.exe HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\MountPoints2: {499cef5e-38e3-11e3-a04c-50b7c3e01bd4} - E:\AutoRun.exe HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\MountPoints2: {5a910c44-b4d1-11e2-8fac-50b7c3e01bd4} - E:\AutoRun.exe HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\MountPoints2: {5dbdc12a-f38a-11e3-8d20-50b7c3e01bd4} - F:\LGAutoRun.exe HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\MountPoints2: {89e23e92-b225-11e2-90c8-806e6f6e6963} - D:\Autorun.exe HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\MountPoints2: {98c2cd5f-b23e-11e2-98d4-001e101fb4df} - E:\AutoRun.exe IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\dprotectsvc.exe: [Debugger] tasklist.exe IFEO\jumpflip: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\searchinstaller.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\searchprotector.exe: [Debugger] tasklist.exe IFEO\searchsettings.exe: [Debugger] tasklist.exe IFEO\searchsettings64.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\umbrella.exe: [Debugger] tasklist.exe IFEO\utiljumpflip.exe: [Debugger] tasklist.exe IFEO\volaro: [Debugger] tasklist.exe IFEO\vonteera: [Debugger] tasklist.exe IFEO\websteroids.exe: [Debugger] tasklist.exe IFEO\websteroidsservice.exe: [Debugger] tasklist.exe HKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\systemk\x64\sysapcrt.dll HKLM\...\AppCertDlls: [x86] -> C:\Program Files\Settings Manager\systemk\sysapcrt.dll [489488 2014-07-06] () ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120140822 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1398854194&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1398854194&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1398854194&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120140822 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1398854194&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc&ts=1398854194&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1398854194&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1398854194&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826&q={searchTerms} SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=a&ver=13277&tm=397&src=ds&p={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=113348&babsrc=SP_ss&mntrId=9eabdca4000000000000001e101f21c1 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1398854194&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826&q={searchTerms} SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={AE38E523-F8DD-46DD-8563-464FD2FB814A}&mid=01b5e4fde43447d3a786d15756fbc832-d75f75b540b66ca4692600629a241bc715a0d7af&lang=pl&ds=AVG&pr=fr&d=2013-05-01 09:07:51&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms} SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=a&ver=13277&tm=397&src=ds&p={searchTerms} BHO: PlusHD-V1.9 -> {11111111-1111-1111-1111-110511951170} -> C:\Program Files\PlusHD-V1.9\PlusHD-V1.9-bho.dll (PlusHDv1.9) BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited) BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files\AVG\AVG2012\avgssie.dll No File BHO: Linkey -> {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} -> C:\Users\JAREK\AppData\Local\Linkey\IEExtension\iedll.dll (Aztec Media Inc) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) BHO: Discount Dragon BHO -> {EA34C851-D481-49F5-A356-3A8B0A8F3B7E} -> C:\Program Files\Discount Dragon\FrameworkBHO.dll () Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll No File Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: 54.235.90.58 nikdaiaidiiiogaidkkekcmokcgcdeac Tcpip\Parameters: [DhcpNameServer] 62.21.99.94 62.21.99.95 Tcpip\..\Interfaces\{29C06BD8-8D87-4663-B7FF-41A08A7A9473}: [NameServer] 212.2.96.53 212.2.96.54 Tcpip\..\Interfaces\{BFCA06E5-07D7-4D7B-A84E-7A84233198DF}: [NameServer] 212.2.96.51 212.2.96.52 Tcpip\..\Interfaces\{D2067D21-4054-4484-9EE3-3E650FC023EF}: [NameServer] 212.2.96.51 212.2.96.52 Tcpip\..\Interfaces\{E308190F-979D-4B71-B8F4-BDFC4A1F4A77}: [NameServer] 212.2.96.53 212.2.96.54 FireFox: ======== FF ProfilePath: C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default FF DefaultSearchEngine: webssearches FF SearchEngineOrder.1: default-search.net FF SelectedSearchEngine: Google FF Homepage: hxxp://istart.webssearches.com/?type=hppp&ts=1408696601&from=amt&uid=ST1000LM024XHN-M101MBB_S2RQJ9ACC11826 FF Keyword.URL: hxxp://www.default-search.net/search?sid=476&aid=132&itype=a&ver=13277&tm=397&src=ds&p= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF user.js: detected! => C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default\user.js FF SearchPlugin: C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default\searchplugins\default-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\default-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\webssearches.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\default-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\webssearches.xml FF Extension: Plus-HD-V1.9c - C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default\Extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [2014-09-10] FF Extension: PlusHD-V1.9 - C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default\Extensions\3446275a-5477-4d33-bd0d-44b466c519cd@4bf28e24-5833-4fb8-88c3-cd8403bb6141.com [2014-08-12] FF Extension: Site Matcher - C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default\Extensions\sitematchersitesrc@sitematchersitesrc.com [2014-07-21] FF Extension: Site Explorer - C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default\Extensions\sitenew@sitenew.com [2014-07-22] FF Extension: Discount Dragon - C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default\Extensions\{D8A30808-3888-E608-3AA4-A2CEA2623402} [2014-07-08] FF Extension: Adblock Plus - C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\er91gd7f.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-04] FF HKLM\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\q8wugrkr.default\extensions\quick_start@gmail.com FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-01] Chrome: ======= ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-01] (AVAST Software) S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [276248 2012-03-26] (Intel Corporation) S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-07-03] (globalUpdate) [File not signed] S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-07-03] (globalUpdate) [File not signed] R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] () R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED) S2 Internet w Cyfrowym Polsacie. RunOuc; C:\Program Files\Internet w Cyfrowym Polsacie\UpdateDog\ouc.exe [246112 2013-05-01] () R2 RelevantKnowledge; C:\Program Files\RelevantKnowledge\rlservice.exe [186136 2013-08-17] (TMRG, Inc.) R2 SystemkService; C:\Program Files\Settings Manager\systemk\SystemkService.exe [3572240 2014-07-06] (Aztec Media Inc) R2 UI Assistant Service; C:\Program Files\PLAY ONLINE\AssistantServices.exe [260976 2011-05-31] () ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-05-01] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-05-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-05-01] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-05-01] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [777488 2014-05-15] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411680 2014-05-15] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [68312 2014-05-15] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-05-01] () R1 F06DEFF2-5B9C-490D-910F-35D3A91196222; C:\Program Files\Settings Manager\systemk\systemkmgrc2.cfg [34192 2014-07-06] (Aztec Media Inc) R3 intelkmd; C:\Windows\System32\DRIVERS\igdpmd32.sys [13212672 2012-03-26] (Intel Corporation) S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9216 2011-03-26] (MBB Incorporated) R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [55104 2012-07-17] (Intel Corporation) R1 {01531192-f7ef-415f-a549-cfdb11836731}w; C:\Windows\System32\drivers\{01531192-f7ef-415f-a549-cfdb11836731}w.sys [52512 2014-05-27] (StdLib) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-10 21:17 - 2014-09-10 21:18 - 00000000 ____D () C:\FRST 2014-09-10 21:11 - 2014-09-10 21:11 - 00370943 _____ () C:\Users\JAREK\Downloads\gmer.zip 2014-09-10 21:09 - 2014-09-10 21:18 - 00000000 ____D () C:\Users\JAREK\Desktop\Nowy folder 2014-09-10 21:07 - 2014-09-10 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge 2014-08-26 11:00 - 2014-08-26 11:00 - 00000000 _____ () C:\Windows\point.dll 2014-08-24 16:58 - 2014-08-24 17:03 - 39124432 _____ () C:\Users\JAREK\Downloads\iplasetup.exe 2014-08-23 16:33 - 2014-08-23 16:33 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-08-22 11:42 - 2014-08-22 11:42 - 00000000 ____D () C:\Users\JAREK\Documents\Free Sound Recorder 2014-08-22 10:43 - 2014-08-22 10:44 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Free Sound Recorder 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Opera Software 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\New Version Available 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Opera Software 2014-08-22 10:42 - 2014-08-22 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Sound Recorder 2014-08-22 10:42 - 2006-03-23 12:56 - 00113486 _____ () C:\Windows\system32\NCTWMAProfiles.prx 2014-08-22 10:42 - 2005-05-18 11:52 - 01212416 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioInformation2.dll 2014-08-22 10:42 - 2005-05-17 12:37 - 01986560 _____ (NCT Company Ltd.) C:\Windows\system32\NCTAudioFile2.dll 2014-08-22 10:42 - 2005-04-25 13:01 - 00458752 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioRecord2.dll 2014-08-22 10:42 - 2005-04-25 13:01 - 00458752 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioPlayer2.dll 2014-08-22 10:42 - 2005-04-15 12:08 - 00880640 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioEditor2.dll 2014-08-22 10:42 - 2005-04-04 17:21 - 00602112 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioTransform2.dll 2014-08-22 10:42 - 2005-03-28 15:54 - 00479232 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioVisualization2.dll 2014-08-22 10:42 - 2005-03-28 15:52 - 00417792 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTTextToAudio2.dll 2014-08-22 10:42 - 2005-02-24 11:51 - 00348160 _____ (NCT Company Ltd.) C:\Windows\system32\NCTWMAFile2.dll 2014-08-22 10:42 - 2004-11-04 13:31 - 00835584 _____ (NCT) C:\Windows\system32\NCTAudioCDGrabber2.dll 2014-08-22 10:42 - 2002-01-05 16:37 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msvcr70.dll 2014-08-22 10:37 - 2014-09-10 21:01 - 00000000 ____D () C:\Program Files\Opera 2014-08-22 10:37 - 2014-08-22 10:37 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-08-22 10:36 - 2014-08-22 10:36 - 11379008 _____ (Copyright© 2005-2014 FreeSoundRecorder Technologies, Inc. ) C:\Users\JAREK\Downloads\FreeSoundRecorder.exe 2014-08-21 20:58 - 2014-08-21 20:58 - 00000532 _____ () C:\Users\JAREK\Desktop\KOMPUTER i MONITOR.txt 2014-08-21 14:04 - 2014-08-22 14:54 - 00000000 ___RD () C:\Users\JAREK\Desktop\TR 2014-08-21 14:02 - 2014-08-21 14:02 - 00000926 _____ () C:\Users\Public\Desktop\The Sims 2 Rozrywka rodzinna - Akcesoria.lnk 2014-08-21 13:25 - 2014-06-24 22:43 - 00006144 ____R () C:\Windows\update.exe 2014-08-20 16:58 - 2014-08-22 14:50 - 00000000 ____D () C:\Users\JAREK\Desktop\gry na płyte 2014-08-20 10:23 - 2014-08-20 10:23 - 00000793 _____ () C:\Users\Public\Desktop\The Sims™ 3 Kariera.lnk 2014-08-19 23:44 - 2014-08-21 15:38 - 00000000 ____D () C:\Users\JAREK\Documents\SimCity 4 2014-08-19 19:47 - 2014-08-19 23:54 - 2021432831 _____ () C:\Users\JAREK\Downloads\SimCity.4.PL.2003.rar 2014-08-19 09:28 - 2014-08-19 09:28 - 00891551 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_154.rar 2014-08-19 09:26 - 2014-08-19 09:27 - 01114388 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_163.rar 2014-08-19 09:25 - 2014-08-19 09:26 - 01160853 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_175.rar 2014-08-19 09:25 - 2014-08-19 09:25 - 00661974 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_135.rar 2014-08-19 09:24 - 2014-08-19 09:25 - 00892016 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_142.rar 2014-08-19 09:24 - 2014-08-19 09:24 - 01042046 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_149.rar 2014-08-19 09:23 - 2014-08-19 09:23 - 00117050 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_31.rar 2014-08-19 09:23 - 2014-08-19 09:23 - 00007908 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_32.rar 2014-08-19 09:21 - 2014-08-19 09:22 - 01194293 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_217.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00893692 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_184.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00859103 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_226.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00794307 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_185.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00525422 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_227.rar 2014-08-19 09:20 - 2014-08-19 09:20 - 00971262 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_221.rar 2014-08-19 09:20 - 2014-08-19 09:20 - 00804505 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_194.rar 2014-08-19 09:19 - 2014-08-19 09:19 - 01365522 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_225.rar 2014-08-17 18:17 - 2014-08-17 18:17 - 00000000 ____D () C:\Users\JAREK\Documents\SimCity 2014-08-17 18:15 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-08-17 18:15 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-08-17 18:15 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-08-17 18:15 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-08-17 18:15 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-08-17 18:15 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-08-17 18:15 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-08-17 18:15 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-08-17 18:15 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-08-17 18:15 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-08-17 18:15 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-08-17 18:15 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-08-17 18:15 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-08-17 18:15 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-08-17 18:15 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-08-17 18:15 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-08-17 18:15 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-08-17 18:15 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-08-17 18:15 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-08-17 18:15 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-08-17 18:15 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-08-17 18:15 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-08-17 18:15 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-08-14 22:38 - 2014-08-14 22:38 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-14 21:50 - 2014-08-14 21:50 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Origin 2014-08-14 21:40 - 2014-08-14 21:40 - 00000615 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-08-14 15:12 - 2014-08-14 15:12 - 00000867 _____ () C:\Users\Public\Desktop\The Sims™ 3 Zostań gwiazdą.lnk 2014-08-14 14:57 - 2014-08-14 14:57 - 00000807 _____ () C:\Users\Public\Desktop\The Sims™ 3 Pokolenia.lnk 2014-08-14 14:26 - 2014-08-14 14:26 - 00000711 _____ () C:\Users\Public\Desktop\The Sims™ 3.lnk ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-10 21:18 - 2014-09-10 21:17 - 00000000 ____D () C:\FRST 2014-09-10 21:18 - 2014-09-10 21:09 - 00000000 ____D () C:\Users\JAREK\Desktop\Nowy folder 2014-09-10 21:18 - 2014-07-08 08:02 - 00000000 ____D () C:\ProgramData\systemk 2014-09-10 21:11 - 2014-09-10 21:11 - 00370943 _____ () C:\Users\JAREK\Downloads\gmer.zip 2014-09-10 21:09 - 2014-07-04 19:50 - 00000000 ____D () C:\Program Files\RelevantKnowledge 2014-09-10 21:07 - 2014-09-10 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge 2014-09-10 21:04 - 2009-07-14 06:34 - 00017168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-10 21:04 - 2009-07-14 06:34 - 00017168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-10 21:01 - 2014-08-22 10:37 - 00000000 ____D () C:\Program Files\Opera 2014-09-10 20:58 - 2013-05-01 08:23 - 01523412 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-10 20:58 - 2013-05-01 08:11 - 01345730 _____ () C:\Windows\WindowsUpdate.log 2014-09-10 20:58 - 2009-07-14 10:07 - 00687828 _____ () C:\Windows\system32\perfh015.dat 2014-09-10 20:58 - 2009-07-14 10:07 - 00131382 _____ () C:\Windows\system32\perfc015.dat 2014-09-10 20:56 - 2009-07-14 06:39 - 00067433 _____ () C:\Windows\setupact.log 2014-09-10 20:55 - 2014-07-03 15:40 - 00003442 _____ () C:\Windows\Tasks\e29193b0-b61f-4d86-ada8-6277dd849368-11.job 2014-09-10 20:54 - 2014-07-03 15:40 - 00002176 _____ () C:\Windows\Tasks\e29193b0-b61f-4d86-ada8-6277dd849368-4.job 2014-09-10 20:54 - 2014-07-03 15:40 - 00001512 _____ () C:\Windows\Tasks\e29193b0-b61f-4d86-ada8-6277dd849368-1.job 2014-09-10 20:54 - 2014-07-03 15:40 - 00001434 _____ () C:\Windows\Tasks\e29193b0-b61f-4d86-ada8-6277dd849368-5_user.job 2014-09-10 20:54 - 2014-07-03 15:40 - 00001414 _____ () C:\Windows\Tasks\e29193b0-b61f-4d86-ada8-6277dd849368-5.job 2014-09-10 20:54 - 2014-07-03 15:40 - 00001330 _____ () C:\Windows\Tasks\e29193b0-b61f-4d86-ada8-6277dd849368-2.job 2014-09-10 20:54 - 2014-07-03 15:40 - 00000916 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2014-09-10 20:54 - 2014-07-03 15:39 - 00002416 _____ () C:\Windows\Tasks\e29193b0-b61f-4d86-ada8-6277dd849368-3.job 2014-09-10 20:54 - 2013-05-01 10:32 - 00080542 _____ () C:\Windows\PFRO.log 2014-09-10 20:54 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-08-26 11:45 - 2013-06-09 20:19 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-08-26 11:00 - 2014-08-26 11:00 - 00000000 _____ () C:\Windows\point.dll 2014-08-26 10:53 - 2014-05-01 09:37 - 00000332 _____ () C:\Windows\Tasks\bench-sys.job 2014-08-25 17:50 - 2014-05-01 09:37 - 00000332 _____ () C:\Windows\Tasks\bench-S-1-5-21-3503922415-40461195-2409546329-1000.job 2014-08-25 15:45 - 2014-07-03 15:40 - 00000920 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2014-08-24 18:51 - 2014-04-05 18:55 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-24 17:03 - 2014-08-24 16:58 - 39124432 _____ () C:\Users\JAREK\Downloads\iplasetup.exe 2014-08-24 16:59 - 2014-04-05 18:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-08-24 11:20 - 2014-07-05 10:49 - 00000000 ____D () C:\ProgramData\Origin 2014-08-23 18:19 - 2014-06-29 11:44 - 00000000 ___RD () C:\Users\JAREK\Desktop\kasia 2014-08-23 16:34 - 2014-03-15 19:09 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Skype 2014-08-23 16:33 - 2014-08-23 16:33 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-08-23 16:33 - 2014-03-15 19:09 - 00000000 ____D () C:\ProgramData\Skype 2014-08-22 14:54 - 2014-08-21 14:04 - 00000000 ___RD () C:\Users\JAREK\Desktop\TR 2014-08-22 14:50 - 2014-08-20 16:58 - 00000000 ____D () C:\Users\JAREK\Desktop\gry na płyte 2014-08-22 12:05 - 2014-03-14 16:24 - 00000000 ____D () C:\Users\JAREK\Desktop\Originals 2014-08-22 11:42 - 2014-08-22 11:42 - 00000000 ____D () C:\Users\JAREK\Documents\Free Sound Recorder 2014-08-22 10:44 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Free Sound Recorder 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Opera Software 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\New Version Available 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Opera Software 2014-08-22 10:42 - 2014-08-22 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Sound Recorder 2014-08-22 10:37 - 2014-08-22 10:37 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-08-22 10:36 - 2014-08-22 10:36 - 11379008 _____ (Copyright© 2005-2014 FreeSoundRecorder Technologies, Inc. ) C:\Users\JAREK\Downloads\FreeSoundRecorder.exe 2014-08-21 20:58 - 2014-08-21 20:58 - 00000532 _____ () C:\Users\JAREK\Desktop\KOMPUTER i MONITOR.txt 2014-08-21 15:38 - 2014-08-19 23:44 - 00000000 ____D () C:\Users\JAREK\Documents\SimCity 4 2014-08-21 14:02 - 2014-08-21 14:02 - 00000926 _____ () C:\Users\Public\Desktop\The Sims 2 Rozrywka rodzinna - Akcesoria.lnk 2014-08-21 14:02 - 2013-05-01 12:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES 2014-08-20 16:43 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-08-20 10:23 - 2014-08-20 10:23 - 00000793 _____ () C:\Users\Public\Desktop\The Sims™ 3 Kariera.lnk 2014-08-20 10:10 - 2013-08-18 17:49 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-08-19 23:54 - 2014-08-19 19:47 - 2021432831 _____ () C:\Users\JAREK\Downloads\SimCity.4.PL.2003.rar 2014-08-19 09:28 - 2014-08-19 09:28 - 00891551 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_154.rar 2014-08-19 09:27 - 2014-08-19 09:26 - 01114388 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_163.rar 2014-08-19 09:26 - 2014-08-19 09:25 - 01160853 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_175.rar 2014-08-19 09:25 - 2014-08-19 09:25 - 00661974 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_135.rar 2014-08-19 09:25 - 2014-08-19 09:24 - 00892016 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_142.rar 2014-08-19 09:24 - 2014-08-19 09:24 - 01042046 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_149.rar 2014-08-19 09:23 - 2014-08-19 09:23 - 00117050 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_31.rar 2014-08-19 09:23 - 2014-08-19 09:23 - 00007908 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_32.rar 2014-08-19 09:22 - 2014-08-19 09:21 - 01194293 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_217.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00893692 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_184.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00859103 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_226.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00794307 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_185.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00525422 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_227.rar 2014-08-19 09:20 - 2014-08-19 09:20 - 00971262 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_221.rar 2014-08-19 09:20 - 2014-08-19 09:20 - 00804505 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_194.rar 2014-08-19 09:19 - 2014-08-19 09:19 - 01365522 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_225.rar 2014-08-17 18:17 - 2014-08-17 18:17 - 00000000 ____D () C:\Users\JAREK\Documents\SimCity 2014-08-15 10:02 - 2014-05-01 20:07 - 00000000 ____D () C:\Users\JAREK\Documents\Electronic Arts 2014-08-15 10:02 - 2014-02-06 13:31 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-08-15 09:54 - 2014-07-05 10:51 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Origin 2014-08-14 22:38 - 2014-08-14 22:38 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-14 21:50 - 2014-08-14 21:50 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Origin 2014-08-14 21:40 - 2014-08-14 21:40 - 00000615 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-08-14 15:12 - 2014-08-14 15:12 - 00000867 _____ () C:\Users\Public\Desktop\The Sims™ 3 Zostań gwiazdą.lnk 2014-08-14 14:57 - 2014-08-14 14:57 - 00000807 _____ () C:\Users\Public\Desktop\The Sims™ 3 Pokolenia.lnk 2014-08-14 14:26 - 2014-08-14 14:26 - 00000711 _____ () C:\Users\Public\Desktop\The Sims™ 3.lnk 2014-08-12 21:01 - 2014-05-06 21:20 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discount Dragon 2014-08-12 21:01 - 2014-05-01 09:37 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Discount Dragon 2014-08-12 21:00 - 2014-05-01 09:37 - 00000000 ____D () C:\Program Files\Discount Dragon 2014-08-12 21:00 - 2014-05-01 09:37 - 00000000 ____D () C:\Program Files\Bench 2014-08-11 16:24 - 2013-05-01 10:15 - 00000000 ____D () C:\Program Files\Mozilla Firefox Some content of TEMP: ==================== C:\Users\JAREK\AppData\Local\Temp\14441-CTSCameraViewer_1.0.3_sciagnij.exe C:\Users\JAREK\AppData\Local\Temp\AutoRun.exe C:\Users\JAREK\AppData\Local\Temp\AutoRunGUI.dll C:\Users\JAREK\AppData\Local\Temp\avguidx.dll C:\Users\JAREK\AppData\Local\Temp\CommonInstaller.exe C:\Users\JAREK\AppData\Local\Temp\CTSCameraViewer_1.0.3.exe C:\Users\JAREK\AppData\Local\Temp\drm_dialogs.dll C:\Users\JAREK\AppData\Local\Temp\drm_dyndata_7320013.dll C:\Users\JAREK\AppData\Local\Temp\drm_dyndata_7330014.dll C:\Users\JAREK\AppData\Local\Temp\drm_dyndata_7370012.dll C:\Users\JAREK\AppData\Local\Temp\drm_dyndata_7380014.dll C:\Users\JAREK\AppData\Local\Temp\EAD3C93.exe C:\Users\JAREK\AppData\Local\Temp\EADADCB.exe C:\Users\JAREK\AppData\Local\Temp\First15.exe C:\Users\JAREK\AppData\Local\Temp\iGearedHelper.dll C:\Users\JAREK\AppData\Local\Temp\MachineIdCreator.exe C:\Users\JAREK\AppData\Local\Temp\oi_{9DBD2486-1043-4EC0-B06B-5A84337A6742}.exe C:\Users\JAREK\AppData\Local\Temp\SettingsManagerSoftonicSetup.exe C:\Users\JAREK\AppData\Local\Temp\setup.exe C:\Users\JAREK\AppData\Local\Temp\setup[1].exe C:\Users\JAREK\AppData\Local\Temp\SimBundD.exe C:\Users\JAREK\AppData\Local\Temp\SimBundD[1].exe C:\Users\JAREK\AppData\Local\Temp\SkypeSetup.exe C:\Users\JAREK\AppData\Local\Temp\ToolbarInstaller.exe C:\Users\JAREK\AppData\Local\Temp\UNINSTALL.EXE C:\Users\JAREK\AppData\Local\Temp\UninstallEADM.dll C:\Users\JAREK\AppData\Local\Temp\VP6Install.exe C:\Users\JAREK\AppData\Local\Temp\VP6VFW.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-20 14:07 ==================== End Of Log ============================