Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-11-2014 Ran by Konrad (administrator) on KONRAD-KOMPUTER on 02-11-2014 12:14:52 Running from C:\Users\Konrad\Downloads Loaded Profiles: Konrad & Ewa (Available profiles: Konrad & Ewa) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Mouse\Amoumain.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () D:\Program Files (x86)\ScreenShooter\screenshooter.exe (Comfort Software Group) D:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Power Software Ltd) D:\Program Files\PowerISO\PWRISOVM.EXE (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\System32\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (OTLand) C:\Users\Konrad\Downloads\ipchanger.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Glarysoft Ltd) D:\Program Files (x86)\Glarysoft\Absolute Uninstaller 5\unInstaller.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [WheelMouse] => C:\Program Files\Mouse\Amoumain.exe [196608 2000-01-01] () HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671640 2000-01-01] (Realtek Semiconductor) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation) HKLM-x32\...\Run: [GrooveMonitor] => D:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe Gamma Colors] => C:\Program Files\Common Files\Flash Player\fffplayer32.exe [2763838 2014-05-11] (CipSoft GmbH ) HKLM-x32\...\Run: [PWRISOVM.EXE] => D:\Program Files\PowerISO\PWRISOVM.EXE [377368 2014-03-30] (Power Software Ltd) HKLM-x32\...\Run: [iPlusManager] => D:\Program Files (x86)\iPlus CDMA\iPlusChecker.exe [406848 2011-01-26] () HKLM-x32\...\Run: [QuickTime Task] => D:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation) HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\Run: [EADM] => D:\Program Files (x86)\Origin\Origin.exe [3600216 2014-09-16] (Electronic Arts) HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\Run: [screenshooter] => D:\Program Files (x86)\ScreenShooter\screenshooter.exe [606208 2010-09-03] () HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\Run: [FreeAC] => D:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe [1553688 2014-02-20] (Comfort Software Group) HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22067296 2014-10-01] (Skype Technologies S.A.) HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\MountPoints2: F - F:\setup.exe HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\MountPoints2: {8f596af3-27c5-11e4-84d5-bc5ff40b78e3} - G:\Launcher.exe HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\MountPoints2: {a81b5c74-2869-11e4-bdb1-bc5ff40b78e3} - G:\Launcher.exe HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\MountPoints2: {cf6e1d01-27c8-11e4-851d-bc5ff40b78e3} - G:\Launcher.exe HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\MountPoints2: {fe7c927f-27b8-11e4-88d6-bc5ff40b78e3} - G:\Launcher.exe HKU\S-1-5-21-3503546630-2230702639-2809708747-1000\...\MountPoints2: {fe7c9283-27b8-11e4-88d6-bc5ff40b78e3} - G:\Launcher.exe HKU\S-1-5-21-3503546630-2230702639-2809708747-1001\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_Plugin.exe -update plugin HKU\S-1-5-21-3503546630-2230702639-2809708747-1001\...\MountPoints2: {cf6e1d01-27c8-11e4-851d-bc5ff40b78e3} - G:\Launcher.exe Startup: C:\Users\Konrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () Startup: C:\Users\Konrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XenoSuite.lnk ShortcutTarget: XenoSuite.lnk -> D:\Program Files (x86)\XenoBot\XenoSuite.exe () CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120140911 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x88CDA4ACD242CF01 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120140911 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120140911 URLSearchHook: HKCU - BlueSprig Toolbar - {15BB261B-E6BD-4D21-BA28-5EBD82BD1499} - C:\Program Files (x86)\BlueSprig Toolbar\IE\9.7\bluesprigToolbarIE64.dll (Spigot, Inc.) URLSearchHook: HKCU - BlueSprig Toolbar - {15BB261B-E6BD-4D21-BA28-5EBD82BD1499} - C:\Program Files (x86)\BlueSprig Toolbar\IE\9.7\bluesprigToolbarIE.dll (Spigot, Inc.) SearchScopes: HKCU - {170F9CDF-2C69-456A-8202-9A8D3B5EC17E} URL = https://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=925777&p={searchTerms} BHO: No Name -> {6EA0EA94-709E-DEAE-4EE4-3680D16DD2A8} -> No File BHO-x32: BlueSprig Toolbar -> {15BB261B-E6BD-4D21-BA28-5EBD82BD1499} -> C:\Program Files (x86)\BlueSprig Toolbar\IE\9.7\bluesprigToolbarIE.dll (Spigot, Inc.) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - BlueSprig Toolbar - {15BB261B-E6BD-4D21-BA28-5EBD82BD1499} - C:\Program Files (x86)\BlueSprig Toolbar\IE\9.7\bluesprigToolbarIE64.dll (Spigot, Inc.) Toolbar: HKLM-x32 - BlueSprig Toolbar - {15BB261B-E6BD-4D21-BA28-5EBD82BD1499} - C:\Program Files (x86)\BlueSprig Toolbar\IE\9.7\bluesprigToolbarIE.dll (Spigot, Inc.) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.3.1 FireFox: ======== FF ProfilePath: C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\619l8zan.default FF Homepage: www.google.pl FF Keyword.URL: https://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=925777&p= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll (EA Digital Illusions CE AB) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> D:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\619l8zan.default\searchplugins\yahoo_ff.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml FF Extension: SNT - C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\619l8zan.default\Extensions\veyey@ujd.org [2014-04-23] FF Extension: MEGA - C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\619l8zan.default\Extensions\firefox@mega.co.nz.xpi [2014-09-18] FF Extension: Adblock Plus - C:\Users\Konrad\AppData\Roaming\Mozilla\Firefox\Profiles\619l8zan.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-20] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR Profile: C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dokumenty Google) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-18] CHR Extension: (Dysk Google) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-18] CHR Extension: (YouTube) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-18] CHR Extension: (Szukaj w Google) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-18] CHR Extension: (Zotero Connector) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekhagklcjbdpajgpjgmbionohlpdbjgc [2014-04-23] CHR Extension: (Select Search) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcjoilhmjjhfpeflkmlhejiaadbgfkgn [2014-06-03] CHR Extension: (Related Content by Zemanta) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\fejeknoakjeblidffkajbioncodnmhge [2014-07-03] CHR Extension: (PHP Notepad) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\goeeiijhgidlcakidjccllfebdkkhaia [2014-06-12] CHR Extension: (Google Wallet) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-18] CHR Extension: (SNT) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\npjmdkkmcnonkbihdopccebmocdmnpjj [2014-04-23] CHR Extension: (Gmail) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-18] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation) S3 Microsoft Office Groove Audit Service; D:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [65824 2006-10-27] (Microsoft Corporation) S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-31] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-24] () S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [974016 2014-03-02] () [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 adusbser; C:\Windows\System32\DRIVERS\adusbser.sys [145024 2008-01-02] (AnyDATA Corporation) R1 Amfilter; C:\Windows\System32\DRIVERS\Amfltx64.sys [12288 2000-01-01] ((Standard mouse types)) R3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbx64.sys [17920 2000-01-01] (A4Tech Co.,Ltd.) R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-30] (AVG Technologies) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-10-31] () ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-02 12:14 - 2014-11-02 12:15 - 00016861 _____ () C:\Users\Konrad\Downloads\FRST.txt 2014-11-02 12:14 - 2014-11-02 12:14 - 02114048 _____ (Farbar) C:\Users\Konrad\Downloads\FRST64.exe 2014-11-02 12:14 - 2014-11-02 12:14 - 00000000 ____D () C:\FRST 2014-11-02 12:05 - 2014-11-02 12:05 - 04495528 _____ () C:\Users\Konrad\Downloads\ausetup.exe 2014-11-02 12:05 - 2014-11-02 12:05 - 00000913 _____ () C:\Users\Public\Desktop\Absolute Uninstaller.lnk 2014-11-02 12:05 - 2014-11-02 12:05 - 00000913 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Absolute Uninstaller.lnk 2014-11-02 12:05 - 2014-11-02 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glarysoft 2014-11-02 12:03 - 2014-11-02 12:03 - 05901824 _____ () C:\Users\Konrad\Downloads\setup(1).msi 2014-11-01 00:01 - 2014-11-01 00:01 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-11-01 00:01 - 2014-11-01 00:01 - 00000000 ____D () C:\Program Files\Realtek 2014-11-01 00:01 - 2000-01-01 01:00 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-11-01 00:01 - 2000-01-01 01:00 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-11-01 00:01 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-11-01 00:01 - 2000-01-01 01:00 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00897152 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00753280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00065112 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00060504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll 2014-11-01 00:01 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-10-31 16:21 - 2000-01-01 01:00 - 00939224 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2014-10-31 16:21 - 2000-01-01 01:00 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2014-10-31 16:18 - 2014-10-31 16:18 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-10-31 16:18 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2014-10-31 16:18 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2014-10-31 16:17 - 2014-10-16 13:27 - 00614544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-10-31 16:15 - 2014-10-16 17:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-10-31 16:15 - 2014-10-16 17:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00870112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-10-31 16:15 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-10-31 16:15 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-10-31 16:15 - 2014-10-16 17:54 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-10-31 16:12 - 2014-10-31 16:12 - 00000000 ____D () C:\NVIDIA 2014-10-31 15:59 - 2014-10-31 15:59 - 00940352 _____ (SlimWare Utilities, Inc.) C:\Users\Konrad\Downloads\SlimDrivers-setup.exe 2014-10-31 15:43 - 2014-10-31 15:43 - 00000706 _____ () C:\Users\Konrad\Desktop\Glyph.lnk 2014-10-31 15:43 - 2014-10-31 15:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph 2014-10-31 14:57 - 2014-10-31 14:59 - 32088688 _____ (Trion Worlds Inc.) C:\Users\Konrad\Downloads\GlyphInstall-0-120(1).exe 2014-10-31 14:31 - 2014-10-31 23:58 - 00022814 _____ () C:\Windows\PFRO.log 2014-10-31 14:29 - 2014-10-31 14:29 - 01375089 _____ () C:\Users\Konrad\Downloads\adwcleaner_3.311.exe 2014-10-31 10:45 - 2014-10-31 10:45 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-10-31 10:45 - 2014-10-31 10:45 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-10-31 10:45 - 2014-10-31 10:45 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-10-31 10:45 - 2014-10-31 10:45 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-10-31 10:45 - 2014-10-31 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-10-31 10:45 - 2014-10-31 10:45 - 00000000 ____D () C:\Program Files (x86)\Java 2014-10-31 10:10 - 2014-10-31 15:43 - 00000000 ____D () C:\Users\Konrad\AppData\Local\Glyph 2014-10-31 10:10 - 2014-10-31 10:10 - 00000000 ____D () C:\ProgramData\Glyph 2014-10-30 17:57 - 2014-10-30 17:59 - 32088688 _____ (Trion Worlds Inc.) C:\Users\Konrad\Downloads\GlyphInstall-0-120.exe 2014-10-30 11:21 - 2014-11-02 08:57 - 00003577 _____ () C:\Windows\setupact.log 2014-10-30 11:21 - 2014-10-30 11:21 - 00000000 _____ () C:\Windows\setuperr.log 2014-10-21 01:17 - 2014-10-21 01:17 - 25772520 _____ (Microsoft Corporation) C:\Users\Konrad\Downloads\wordview_pl-pl.exe 2014-10-21 01:17 - 2014-10-21 01:17 - 00002735 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Word Viewer 2003.lnk 2014-10-21 01:17 - 2014-10-21 01:17 - 00000000 ____D () C:\Program Files (x86)\MSECache 2014-10-21 01:15 - 2014-10-21 01:16 - 00743264 _____ ( ) C:\Users\Konrad\Downloads\Word-Viewer(12113)-dp.exe 2014-10-21 00:10 - 2014-10-21 00:12 - 00000001 ____R () C:\Users\Konrad\random.dat 2014-10-21 00:10 - 2014-10-21 00:10 - 00896506 _____ () C:\Users\Konrad\Downloads\RSBot-6045.jar 2014-10-18 02:21 - 2014-10-18 02:21 - 00638888 _____ (Oracle Corporation) C:\Users\Konrad\Downloads\jxpiinstall.exe 2014-10-18 00:59 - 2014-10-18 01:01 - 1089889174 _____ () C:\Users\Konrad\Desktop\ROZNE ZDJECIA.rar 2014-10-17 23:05 - 2014-10-18 02:11 - 00000000 ____D () C:\Users\Konrad\AppData\Roaming\RSBot 2014-10-17 23:04 - 2014-10-17 23:05 - 00895843 _____ () C:\Users\Konrad\Downloads\RSBot-6044.jar 2014-10-15 12:56 - 2014-10-18 05:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-10-14 20:44 - 2014-10-14 20:44 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-10-14 20:44 - 2014-10-14 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-10-13 18:21 - 2014-10-13 18:21 - 00001352 _____ () C:\Users\Konrad\Documents\AutoHotkey.ahk 2014-10-13 14:40 - 2014-10-13 14:40 - 02047357 _____ () C:\Users\Konrad\Downloads\AutoHotkey104805_Install.exe 2014-10-08 00:10 - 2014-10-08 00:38 - 00000000 ____D () C:\Users\Konrad\Desktop\playlista 2014-10-07 13:40 - 2014-10-07 13:40 - 00245255 _____ () C:\Users\Konrad\Downloads\OSBuddy.jar 2014-10-07 12:32 - 2014-10-07 12:32 - 00881088 _____ () C:\Users\Konrad\Downloads\OSBuddy(3).exe 2014-10-07 12:28 - 2014-10-07 21:56 - 00000000 ____D () C:\Users\Konrad\OSBuddy 2014-10-07 12:28 - 2014-10-07 12:28 - 00881088 _____ () C:\Users\Konrad\Downloads\OSBuddy(2).exe 2014-10-07 12:27 - 2014-10-07 12:27 - 00000000 ____D () C:\Users\Konrad\Desktop\screenshots 2014-10-07 12:25 - 2014-10-07 12:25 - 00000127 _____ () C:\Users\Konrad\Downloads\osbuddy.ver 2014-10-07 12:24 - 2014-10-07 12:24 - 00881088 _____ () C:\Users\Konrad\Downloads\OSBuddy(1).exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-02 12:03 - 2014-08-13 19:49 - 00001740 _____ () C:\Users\Konrad\Desktop\XenoSuite.lnk 2014-11-02 12:03 - 2014-08-13 19:49 - 00000000 ____D () C:\Users\Konrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XenoBot 2014-11-02 12:03 - 2014-03-18 18:52 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-11-02 12:02 - 2014-08-15 17:31 - 00000000 ____D () C:\Users\Konrad\AppData\Roaming\Skype 2014-11-02 12:02 - 2014-05-15 16:15 - 00009538 _____ () C:\MailDgb.txt 2014-11-02 11:58 - 2014-03-18 18:52 - 00000000 ____D () C:\Users\Konrad\AppData\Local\Deployment 2014-11-02 11:16 - 2014-03-18 22:17 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-11-02 09:03 - 2011-04-12 14:21 - 00737242 _____ () C:\Windows\system32\perfh015.dat 2014-11-02 09:03 - 2011-04-12 14:21 - 00153930 _____ () C:\Windows\system32\perfc015.dat 2014-11-02 09:03 - 2009-07-14 06:13 - 01661232 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-11-02 09:03 - 2009-07-14 05:45 - 00030736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-11-02 09:03 - 2009-07-14 05:45 - 00030736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-11-02 09:00 - 2014-09-02 23:38 - 00260190 _____ () C:\Windows\WindowsUpdate.log 2014-11-02 08:56 - 2014-04-23 04:20 - 00000482 ____H () C:\Windows\Tasks\SW_Booster-S-1467139175.job 2014-11-02 08:56 - 2014-03-18 23:04 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-11-02 08:56 - 2014-03-18 18:52 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-11-02 08:56 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-11-01 23:56 - 2014-03-18 21:41 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-11-01 00:06 - 2014-03-18 18:42 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-11-01 00:01 - 2014-03-18 18:37 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-11-01 00:00 - 2014-03-31 01:48 - 00000000 ____D () C:\ProgramData\Origin 2014-10-31 17:22 - 2014-03-21 23:00 - 00000000 ____D () C:\Users\Konrad\AppData\Roaming\TS3Client 2014-10-31 16:21 - 2014-03-18 23:31 - 00000000 ____D () C:\Users\Konrad\AppData\Local\NVIDIA Corporation 2014-10-31 16:21 - 2014-03-18 23:28 - 00000000 ____D () C:\Users\Konrad\AppData\Local\NVIDIA 2014-10-31 16:21 - 2014-03-18 18:37 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-10-31 16:20 - 2014-03-18 23:28 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-10-31 16:19 - 2014-03-18 19:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-10-31 16:18 - 2014-03-18 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-10-31 16:18 - 2014-03-18 23:26 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-10-31 16:18 - 2014-03-18 23:26 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-10-31 15:59 - 2014-03-18 18:59 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys 2014-10-31 15:57 - 2014-09-01 17:01 - 00000000 ____D () C:\Program Files (x86)\BlueSprig Toolbar 2014-10-31 15:56 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-10-31 15:53 - 2011-04-12 14:32 - 00000000 ____D () C:\Windows\ShellNew 2014-10-31 15:30 - 2014-03-18 18:59 - 00000000 ____D () C:\ProgramData\MFAData 2014-10-31 14:34 - 2014-03-29 00:45 - 00000000 ____D () C:\Users\Konrad\AppData\Roaming\.minecraft 2014-10-31 14:30 - 2014-07-07 17:25 - 00000000 ____D () C:\AdwCleaner 2014-10-31 10:45 - 2014-03-18 23:03 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-29 22:15 - 2014-10-01 22:33 - 00881112 _____ () C:\Users\Konrad\Downloads\OSBuddy.exe 2014-10-29 22:15 - 2014-05-29 22:04 - 00000045 _____ () C:\Users\Konrad\jagex_cl_oldschool_LIVE.dat 2014-10-21 00:10 - 2014-03-18 17:11 - 00000000 ____D () C:\Users\Konrad 2014-10-20 21:33 - 2014-09-22 23:37 - 00000000 ____D () C:\Users\Konrad\AppData\Roaming\Tropico 3 2014-10-17 10:10 - 2014-03-18 21:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-10-16 17:54 - 2014-03-18 23:28 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-10-16 17:54 - 2014-03-18 23:28 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-10-16 17:54 - 2014-03-18 23:26 - 00072904 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-10-16 17:54 - 2014-03-18 23:26 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 00987008 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-10-16 17:54 - 2014-03-18 23:20 - 00027024 _____ () C:\Windows\system32\nvinfo.pb 2014-10-16 15:11 - 2014-03-18 23:27 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-10-16 15:11 - 2014-03-18 23:27 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-10-16 15:11 - 2014-03-18 23:27 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-10-16 15:11 - 2014-03-18 23:27 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-10-16 15:11 - 2014-03-18 23:27 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-10-16 15:11 - 2014-03-18 23:26 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-10-15 01:48 - 2014-03-18 23:27 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin 2014-10-14 20:44 - 2014-08-15 17:31 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-10-14 20:44 - 2014-08-15 17:31 - 00000000 ____D () C:\ProgramData\Skype 2014-10-13 13:09 - 2014-10-01 14:27 - 00000024 _____ () C:\Users\Konrad\jagexappletviewer.preferences Files to move or delete: ==================== C:\Users\Konrad\jagex_cl_oldschool_LIVE.dat C:\Users\Konrad\jagex_cl_runescape_LIVE.dat C:\Users\Konrad\random.dat Some content of TEMP: ==================== C:\Users\Konrad\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe C:\Users\Konrad\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Konrad\AppData\Local\Temp\nvStInst.exe C:\Users\Konrad\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-29 18:31 ==================== End Of Log ============================