Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-09-2014 Ran by lukas (administrator) on LUKAS-PC on 29-09-2014 19:33:41 Running from C:\Users\lukas\Downloads Loaded Profiles: lukas & UpdatusUser (Available profiles: lukas & UpdatusUser) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Angielski (Stany Zjednoczone) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (DesktopNerds) C:\Program Files\DesktopNerds\Gamma Control\GC.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Microsoft Corporation) C:\Windows\System32\audiodg.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (Azureus Software, Inc) C:\Program Files\Vuze\Azureus.exe () C:\Program Files\NapiProjekt\napisy.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-29] (AVAST Software) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1537320 2009-06-18] (Synaptics Incorporated) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) HKU\S-1-5-21-3635252407-3609743005-2640781616-1001\...\Run: [GammaControllerDN3] => C:\Program Files\DesktopNerds\Gamma Control\GC.exe [1019904 2012-11-21] (DesktopNerds) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-12-22] (Microsoft Corporation) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) BootExecute: autocheck autochk * sdnclean.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.msn.com/?pc=UP97&ocid=UP97DHP BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\fajivg9s.default FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Site Counselor - C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\fajivg9s.default\Extensions\{e0352044-1439-48ba-99b6-b05ed1a4d2de} [2014-09-25] FF Extension: Youtube MP3 Downloader using youtube-mp3.org - C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\fajivg9s.default\Extensions\jid1-xKH0EoS44u1a2w@jetpack.xpi [2014-09-22] FF Extension: Search By Image (by Google) - C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\fajivg9s.default\Extensions\{ce7e73df-6a44-4028-8079-5927a588c948}.xpi [2014-07-23] FF Extension: Adblock Plus - C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\fajivg9s.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-09] Chrome: ======= CHR CustomProfile: C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-14] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-14] (AVAST Software) S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed] R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-14] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-14] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-14] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-07-14] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-14] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-14] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-14] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-07-14] () S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [145920 2014-09-15] (ITE ) S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [X] R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-29 19:31 - 2014-09-29 19:32 - 00022423 _____ () C:\Users\lukas\Downloads\Addition.txt 2014-09-29 19:30 - 2014-09-29 19:33 - 00008074 _____ () C:\Users\lukas\Downloads\FRST.txt 2014-09-29 17:55 - 2014-09-29 17:55 - 00000000 ____D () C:\Users\lukas\Downloads\The Strain S01E12 WEB-DL XviD-FUM[ettv] 2014-09-29 16:20 - 2014-09-29 18:58 - 00000000 ____D () C:\Users\lukas\Desktop\dsssfddddddddddddddddddddddddd 2014-09-29 12:36 - 2014-09-29 12:36 - 00000000 ____D () C:\ProgramData\Licenses 2014-09-29 12:36 - 2011-11-04 05:13 - 01070352 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL.OCX 2014-09-29 12:36 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\system32\MSSTDFMT.DLL 2014-09-29 10:04 - 2014-09-29 19:33 - 00000000 ____D () C:\FRST 2014-09-29 10:02 - 2014-09-29 10:03 - 01100288 _____ (Farbar) C:\Users\lukas\Downloads\FRST.exe 2014-09-29 09:24 - 2014-09-29 09:24 - 01373475 _____ () C:\Users\lukas\Downloads\AdwCleaner.exe 2014-09-29 08:00 - 2014-09-29 08:00 - 00000000 ____D () C:\Users\lukas\Downloads\[FileTracker.pl]The.Knick.S01E07[wilu75] 2014-09-25 22:20 - 2014-09-29 09:27 - 00000336 _____ () C:\Windows\setupact.log 2014-09-25 22:20 - 2014-09-25 22:20 - 00000000 _____ () C:\Windows\setuperr.log 2014-09-25 22:19 - 2014-09-25 22:19 - 00000368 _____ () C:\Windows\Tasks\{015DDA45-1AD3-4DCF-A9E1-931E0AF1ED76}.job 2014-09-25 22:13 - 2014-09-25 22:13 - 00000368 _____ () C:\Windows\Tasks\{17365AA8-17A6-4BB7-88AD-1E7F7BE3354B}.job 2014-09-25 22:11 - 2014-09-29 09:27 - 00001388 _____ () C:\Windows\PFRO.log 2014-09-25 21:51 - 2014-09-25 21:51 - 00038496 _____ () C:\Users\Public\Documents\cc_20140925_215118.reg 2014-09-25 21:47 - 2014-09-25 21:47 - 00000943 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-09-25 21:47 - 2014-09-25 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-09-25 21:47 - 2014-09-25 21:47 - 00000000 ____D () C:\Program Files\CCleaner 2014-09-25 20:52 - 2014-09-25 20:52 - 00001200 _____ () C:\Users\lukas\Desktop\Revo Uninstaller.lnk 2014-09-25 20:52 - 2014-09-25 20:52 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-09-24 16:39 - 2014-09-29 12:38 - 00000000 ____D () C:\ProgramData\TEMP 2014-09-24 16:39 - 2014-09-24 18:40 - 00000000 ____D () C:\Program Files\HDD Regenerator 2014-09-24 10:22 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-09-23 10:51 - 2014-09-23 11:05 - 419743744 _____ () C:\Users\lukas\Downloads\Gotham.S01E01.PL.SUBBED.HDTV.XviD-KiT.avi 2014-09-23 00:47 - 2014-09-23 00:47 - 00020096 _____ () C:\Users\lukas\Downloads\Z.Nation.S01E02.HDTV.XviD-FUM.txt 2014-09-22 21:45 - 2014-09-22 21:45 - 00015649 _____ () C:\Users\lukas\Downloads\The.Strain.S01E11.The.Third.Rail.WEB-DL.XviD-FUM.txt 2014-09-22 21:23 - 2014-09-22 21:54 - 364639790 _____ () C:\Users\lukas\Downloads\Z.Nation.S01E02.HDTV.XviD-FUM.avi 2014-09-22 21:21 - 2014-09-22 22:07 - 462766910 _____ () C:\Users\lukas\Downloads\Boardwalk.Empire.S05E03.PL.HDTV.XviD-CAMBiO.avi 2014-09-22 21:19 - 2014-09-22 21:42 - 364747086 _____ () C:\Users\lukas\Downloads\The.Strain.S01E11.The.Third.Rail.WEB-DL.XviD-FUM.avi 2014-09-19 08:02 - 2014-09-25 20:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-09-17 13:14 - 2014-09-17 13:14 - 00000984 _____ () C:\Users\Public\Desktop\JDownloader.lnk 2014-09-14 03:53 - 2014-09-14 03:53 - 00034215 _____ () C:\Users\lukas\Downloads\Z.Nation.S01E01.HDTV.XviD-FUM.txt 2014-09-13 21:45 - 2014-09-29 18:55 - 00009216 ____H () C:\Users\lukas\Desktop\photothumb.db 2014-09-13 14:17 - 2014-09-13 14:29 - 365155572 _____ () C:\Users\lukas\Downloads\Z.Nation.S01E01.HDTV.XviD-FUM.avi 2014-09-11 01:55 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-11 01:55 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-11 01:55 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-11 01:55 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-11 01:55 - 2014-08-18 23:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-11 01:55 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-11 01:55 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-11 01:55 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-11 01:55 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-11 01:55 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-11 01:55 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-11 01:55 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-11 01:55 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-11 01:55 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-11 01:55 - 2014-08-18 23:36 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-11 01:55 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-11 01:55 - 2014-08-18 23:30 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-09-11 01:55 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-11 01:55 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-11 01:55 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-11 01:55 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-11 01:55 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-11 01:55 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-11 01:55 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-11 01:55 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-11 01:55 - 2014-08-18 23:08 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-11 01:55 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-09-11 01:55 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-11 01:55 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-11 01:55 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-11 01:54 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-10 22:07 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-10 22:07 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-10 22:06 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-10 22:06 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-10 22:06 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-10 22:06 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-05 13:21 - 2014-09-05 13:39 - 591677902 _____ () C:\Users\lukas\Downloads\Houdini.2014.Part2.REPACK-HDTV.XviD-FUM.avi 2014-09-02 21:52 - 2014-09-02 21:52 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-29 19:30 - 2013-12-22 17:41 - 00000000 ____D () C:\Users\lukas\AppData\Roaming\Azureus 2014-09-29 19:23 - 2014-07-18 20:55 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-29 18:58 - 2013-12-24 17:17 - 00000000 ____D () C:\Users\lukas\AppData\Roaming\PhotoScape 2014-09-29 16:23 - 2013-12-22 16:42 - 00740120 _____ () C:\Windows\system32\perfh015.dat 2014-09-29 16:23 - 2013-12-22 16:42 - 00155662 _____ () C:\Windows\system32\perfc015.dat 2014-09-29 16:23 - 2013-12-22 14:59 - 01668266 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-29 16:18 - 2014-05-28 09:22 - 00000000 ____D () C:\Users\lukas\Downloads\FILMY 2014-09-29 16:17 - 2014-08-04 08:10 - 00000192 _____ () C:\Users\lukas\Desktop\DŁUGGGGGGGGG ASI.txt 2014-09-29 16:06 - 2013-12-22 14:44 - 01312162 _____ () C:\Windows\WindowsUpdate.log 2014-09-29 12:26 - 2013-12-22 22:40 - 00000000 ____D () C:\ProgramData\ArcSoft 2014-09-29 12:26 - 2013-12-22 22:39 - 00000000 ____D () C:\Program Files\Common Files\ArcSoft 2014-09-29 09:52 - 2013-12-22 20:06 - 00000000 ____D () C:\ProgramData\Skype 2014-09-29 09:42 - 2013-12-27 21:31 - 00000000 ____D () C:\Users\lukas\Downloads\xbla 2014-09-29 09:29 - 2013-12-22 20:07 - 00000000 ____D () C:\Users\lukas\AppData\Roaming\Skype 2014-09-29 09:27 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-29 09:26 - 2014-07-03 09:23 - 00000000 ____D () C:\AdwCleaner 2014-09-26 07:59 - 2014-05-14 22:25 - 00000000 ____D () C:\Users\lukas\Desktop\ZDJĘCIA teksty 2014-09-25 21:32 - 2013-12-22 16:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-09-25 21:32 - 2009-07-14 09:49 - 00000000 ____D () C:\Windows\CSC 2014-09-25 20:56 - 2014-08-29 17:21 - 00000000 ____D () C:\Users\lukas\AppData\Local\Adobe 2014-09-25 20:51 - 2014-07-18 20:55 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-09-25 20:51 - 2014-07-18 20:55 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-09-25 20:35 - 2009-07-14 06:34 - 00016960 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-25 20:35 - 2009-07-14 06:34 - 00016960 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-25 11:58 - 2014-05-28 09:20 - 00000000 ____D () C:\Users\lukas\Downloads\SERIALE 2014-09-25 03:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-09-24 16:38 - 2014-08-23 15:10 - 00000000 ____D () C:\Users\lukas\AppData\Local\Downloaded Installations 2014-09-23 13:19 - 2014-01-26 11:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-09-22 20:03 - 2013-12-22 20:49 - 00000000 ____D () C:\Program Files\JDownloader 2014-09-17 13:27 - 2013-12-22 20:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader 2014-09-15 18:54 - 2013-12-22 22:53 - 00145920 _____ (ITE ) C:\Windows\system32\Drivers\IT9135BDA.sys 2014-09-15 18:54 - 2013-12-22 22:35 - 00000356 _____ () C:\Windows\system32\AF15IRTBL.bin 2014-09-15 12:00 - 2013-12-22 15:01 - 00000000 ____D () C:\Users\lukas 2014-09-15 12:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp 2014-09-15 11:56 - 2013-12-23 13:26 - 00000000 ____D () C:\Users\lukas\AppData\Roaming\NapiProjekt 2014-09-15 11:56 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration 2014-09-15 09:06 - 2013-12-22 15:21 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-09-11 12:22 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-09-11 01:54 - 2013-12-22 15:39 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 01:51 - 2014-05-10 02:17 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-11 01:51 - 2013-12-22 15:39 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-03 22:11 - 2013-12-22 21:16 - 00000000 ____D () C:\Users\lukas\AppData\Local\JDownloader 0.9 2014-09-03 14:35 - 2009-07-14 06:53 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT Files to move or delete: ==================== C:\Windows\Tasks\{015DDA45-1AD3-4DCF-A9E1-931E0AF1ED76}.job C:\Windows\Tasks\{17365AA8-17A6-4BB7-88AD-1E7F7BE3354B}.job Some content of TEMP: ==================== C:\Users\lukas\AppData\Local\Temp\i4jdel0.exe C:\Users\lukas\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-27 03:08 ==================== End Of Log ============================