Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2014 Ran by gacek (administrator) on GACEK-THINK on 30-12-2014 10:45:58 Running from C:\Users\gacek\Desktop Loaded Profile: gacek (Available profiles: gacek) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe (DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe () C:\ProgramData\DataCardService\HWDeviceService64.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe () C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (ESI Audiotechnik) C:\Windows\System32\U24Pan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe () C:\Program Files (x86)\ClipTray\ClipTray.exe (Microsoft Corporation) C:\Users\gacek\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe () C:\Windows\System32\Notepad2.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe (Microsoft Corporation) C:\Windows\System32\audiodg.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [TpShocks] => C:\windows\system32\TpShocks.exe [384344 2014-02-17] (Lenovo.) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [295712 2014-06-20] (Lenovo Group Limited) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [564352 2011-12-15] (Conexant Systems, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-11-20] (Conexant Systems, Inc.) HKLM\...\Run: [U24Pan.exe] => C:\windows\system32\U24Pan.exe [587032 2013-10-02] (ESI Audiotechnik) HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-09-17] (Intel Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2465088 2014-11-17] (NVIDIA Corporation) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-04-13] (Intel Corporation) HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.) HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1091376 2012-11-20] (Lenovo) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [132920 2012-11-20] (Intel Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation) HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [37624 2014-10-16] (Panda Security, S.L.) HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.) HKLM\...\Winlogon: [Userinit] C:\windows\SysWOW64\userinit.exe, Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1 HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\Run: [ClipTray] => C:\Program Files (x86)\ClipTray\ClipTray.exe [464896 2003-07-17] () HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\Run: [SkyDrive] => C:\Users\gacek\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [277672 2014-10-13] (Microsoft Corporation) HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\Run: [Viber] => "C:\Users\gacek\AppData\Local\Viber\Viber.exe" StartMinimized HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\Policies\Explorer: [] HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: F - F:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {063501e1-9c84-11e3-acb4-d85f4ef456fb} - F:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {1c8e08ab-5473-11e4-ad11-d4f690df0a2b} - X:\setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {1c8e08b2-5473-11e4-ad11-d4f690df0a2b} - X:\setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {47e029c5-cc80-11e3-999a-ee5db141062f} - V:\Setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {4b7ca32a-d6b9-11e3-b2ce-ad41dcd410c6} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {4be04e72-5452-11e4-a572-dbae81dfab9e} - X:\setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {516cca22-ceea-11e3-928b-909ed0537f22} - V:\Setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {59ab2265-9ac1-11e3-ae23-ffb55c01640c} - F:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {6a65849d-9a3c-11e3-be8c-833099b66750} - F:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {6a6584ca-9a3c-11e3-be8c-833099b66750} - F:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {7b17f99e-9a40-11e3-a7e7-bc6521c7bd2c} - F:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {7fc1121b-7a96-11e4-985f-f4d35440d42d} - F:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {7ff792a1-4247-11e4-a31e-c2a40bd44157} - W:\setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {91c6e7bb-3e8d-11e4-a94d-c0ce8ebb3428} - W:\autorun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {9c1e6354-c6ee-11e3-b967-883131207ff2} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {9c1e6356-c6ee-11e3-b967-883131207ff2} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {a8b4f415-f3dd-11e3-b945-c690ccd21658} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {a9f1b42e-2454-11e4-83d6-808e7469a552} - V:\autorun.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {a9f1b435-2454-11e4-83d6-808e7469a552} - V:\autorun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {a9f1b436-2454-11e4-83d6-808e7469a552} - V:\autorun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {ae5f09b3-f3de-11e3-8df0-ce20a530202b} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {ae5f09ca-f3de-11e3-8df0-ce20a530202b} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {ae5f09cb-f3de-11e3-8df0-ce20a530202b} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {b302f7b9-d5c0-11e3-9fcb-8a0396a28108} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {b302f7cd-d5c0-11e3-9fcb-8a0396a28108} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {bbd78f27-d28b-11e3-baf4-ebd434633ca9} - V:\Setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {bfd03741-4007-11e4-9756-994ad0daba23} - W:\setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {bfd03743-4007-11e4-9756-994ad0daba23} - W:\setup.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {c337e796-f6d3-11e3-97f4-beb34e6f84e7} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {cb8a9b22-c701-11e3-89fd-f8a972e56d28} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {d474231a-61a0-11e4-bb18-e11abaf20a3b} - G:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {d4742326-61a0-11e4-bb18-e11abaf20a3b} - F:\AutoRun.exe HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {e5c2f3c6-d685-11e3-9f75-9f0524e0b70c} - V:\Setup\Setup.EXE HKU\S-1-5-21-119834685-101719987-1534121613-1001\...\MountPoints2: {ed9ec13b-423d-11e4-8596-fc283e3df122} - W:\setup.exe HKU\S-1-5-18\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000 AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [174856 2014-11-13] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-11-13] (NVIDIA Corporation) AppInit_DLLs-x32: , C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [156840 2014-11-13] (NVIDIA Corporation) Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-119834685-101719987-1534121613-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.) BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx () BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.) BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - TrueSuite Toolbar - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.) Toolbar: HKLM-x32 - TrueSuite Toolbar - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015 FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @microsoft.com/GENUINE -> C:\windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @authentec.com/ffwloplugin -> C:\Program Files\Lenovo Fingerprint Reader\npffwloplugin.dll (AuthenTec, Inc) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> C:\windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF SearchPlugin: C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\searchplugins\4shared.xml FF SearchPlugin: C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\searchplugins\google-default.xml FF SearchPlugin: C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\searchplugins\google-ssl.xml FF Extension: Blur (Formerly DoNotTrackMe) - C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\Extensions\donottrackplus@abine.com [2014-11-22] FF Extension: DownloadHelper - C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-08] FF Extension: Classic Compact Options - C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\Extensions\notreal.ccoptions@environmentalchemistry.com.xpi [2013-11-21] FF Extension: LittleFox - C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\Extensions\{29852C08-1E91-4889-A6BF-C77F91D6A8F3}.xpi [2014-07-23] FF Extension: Adblock Plus - C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-21] FF Extension: classiccompact - C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\Extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}.xpi [2013-11-21] FF Extension: Red Cats (blue flavor) - C:\Users\gacek\AppData\Roaming\Mozilla\Firefox\Profiles\qgqnghdp.default-1385055907015\Extensions\{ff356687-aa08-463d-a46c-11c451824939}.xpi [2014-07-23] FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\websitelogon@truesuite.com [2014-12-22] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-10-17] (Adobe Systems) [File not signed] R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [1005944 2012-09-24] (Broadcom Corporation.) R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8447848 2011-11-09] (DisplayLink Corp.) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [169776 2012-01-17] (Lenovo) S4 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [658432 2014-12-17] (Macrovision Europe Ltd.) [File not signed] R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139944 2013-08-07] (AuthenTec, Inc) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [339456 2010-11-16] () [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129848 2013-05-31] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-05-31] (Intel Corporation) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [197408 2014-06-20] (Lenovo Group Limited) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [335872 2006-10-26] (Microsoft Corporation) [File not signed] S4 msvsmon90; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [4737024 2008-07-29] (Microsoft Corporation) S2 Multimedia mobilNET. RunOuc; C:\Program Files (x86)\Multimedia mobilNET\UpdateDog\ouc.exe [218624 2014-12-24] () [File not signed] S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-02-08] () R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [142072 2014-10-13] (Panda Security, S.L.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-11-17] (NVIDIA Corporation) R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [66808 2014-10-09] (Panda Security, S.L.) R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [38136 2014-10-16] (Panda Security, S.L.) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24560 2014-09-16] () R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401704 2013-07-22] (AuthenTec, Inc.) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3386608 2013-02-08] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 5U877; C:\Windows\System32\DRIVERS\5U877.sys [216704 2012-03-28] (Ricoh co.,Ltd.) [File not signed] S3 adiusbaw; C:\Windows\System32\DRIVERS\adiusbawx64.sys [169496 2007-02-07] (Analog Devices Inc.) S3 adiusbaw; C:\Windows\SysWOW64\DRIVERS\adiusbawx64.sys [169496 2012-12-21] (Analog Devices Inc.) R1 Amfilter; C:\Windows\System32\DRIVERS\Amfltx64.sys [12288 2007-10-15] ((Standard mouse types)) S3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbx64.sys [17920 2008-02-13] (A4Tech Co.,Ltd.) R3 btmaudio; C:\Windows\System32\drivers\btmaud.sys [88376 2013-03-18] (Motorola Solutions, Inc.) R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1385272 2013-04-23] (Motorola Solutions, Inc.) S3 DFX11_1; C:\Windows\System32\drivers\dfx11_1x64.sys [28008 2012-12-13] (Windows (R) Win 7 DDK provider) S2 ELOADER; C:\Windows\System32\Drivers\adildrx64.sys [58264 2007-02-07] (Analog Deivces) S2 ELOADER; C:\Windows\SysWOW64\Drivers\adildrx64.sys [58264 2012-12-21] (Analog Deivces) S3 Fastboot; C:\Windows\System32\Drivers\Fastboot.sys [70416 2012-01-17] (Windows (R) Win 7 DDK provider) S2 MaVctrl; C:\Windows\SysWOW64\DRIVERS\MaVc2K.sys [11473 2013-08-16] (Mobile Action Technology Inc.) [File not signed] S3 mbamchameleon; C:\windows\system32\drivers\mbamchameleon.sys [93400 2014-12-27] (Malwarebytes Corporation) R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [111696 2013-01-03] () R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [96800 2014-06-04] (Panda Security, S.L.) R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [162336 2014-06-18] (Panda Security, S.L.) R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [112160 2014-06-04] (Panda Security, S.L.) R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [115232 2014-06-04] (Panda Security, S.L.) R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [46336 2014-01-16] (Panda Security, S.L.) R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [95776 2014-06-04] (Panda Security, S.L.) R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [70176 2014-06-04] (Panda Security, S.L.) R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [125984 2014-06-04] (Panda Security, S.L.) R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [306720 2014-06-04] (Panda Security, S.L.) R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [169504 2014-06-04] (Panda Security, S.L.) R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [115744 2014-06-04] (Panda Security, S.L.) R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [261152 2014-06-04] (Panda Security, S.L.) R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [109088 2014-06-04] (Panda Security, S.L.) S3 NPF; C:\Windows\System32\drivers\NPF.sys [35344 2011-09-26] (CACE Technologies, Inc.) S3 NPF; C:\Windows\SysWOW64\drivers\NPF.sys [35344 2014-02-20] (CACE Technologies, Inc.) S2 nxsIO32; C:\windows\SysWOW64\DRIVERS\nxsIO32.sys [2208 2013-05-06] () [File not signed] S3 PortTalk; C:\Windows\SysWOW64\Drivers\PortTalk.sys [3567 2013-11-02] (Beyond Logic http://www.beyondlogic.org) [File not signed] R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [163088 2014-10-13] (Panda Security, S.L.) R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [121616 2014-10-13] (Panda Security, S.L.) R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [195616 2014-07-24] (Panda Security, S.L.) R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [122400 2014-07-24] (Panda Security, S.L.) R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [132128 2014-07-24] (Panda Security, S.L.) R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [107792 2014-10-13] (Panda Security, S.L.) R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [60400 2014-03-25] (Panda Security, S.L.) S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\windows\system32\pwdspio.sys [12504 2013-09-30] () R3 RCUVCAVS; C:\Windows\System32\DRIVERS\RCUVCAVS.sys [149632 2013-04-09] (Ricoh co.,Ltd.) S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-11] (RapidSolution Software AG) R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-11] (RapidSolution Software AG) R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.) S3 rspRegMon; C:\Windows\System32\DRIVERS\rspRegMon64.sys [25504 2013-10-25] (Resplendence Software Projects Sp.) S3 SIVDriver; C:\windows\system32\Drivers\SIVX64.sys [143096 2013-07-14] (Ray Hinchliffe) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-04-26] (Synaptics Incorporated) S3 SmbDrvIntel; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-04-26] (Synaptics Incorporated) S3 SynasUSB; C:\Windows\System32\drivers\SynUSB64.sys [29432 2007-10-24] (SIA Syncrosoft) S3 SynUSB64; C:\Windows\System32\DRIVERS\SynUSB64.sys [29432 2007-10-24] (SIA Syncrosoft) R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.) R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-07] (ThinkVantage Communications Utility) S3 U24XL_02; C:\Windows\System32\DRIVERS\U24wdm.sys [38680 2013-10-02] () S1 U24XL_AA; C:\Windows\System32\DRIVERS\U24DRV.sys [64280 2013-10-02] () S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115488 2014-05-16] (Oracle Corporation) R3 vmkbd2; C:\windows\system32\drivers\VMkbd.sys [33496 2014-04-14] (VMware, Inc.) R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2029-09-07 12:31 - 2029-09-07 12:31 - 00028714 _____ (EMC Software GmbH) C:\windows\SysWOW64\codec.dat 2014-12-30 10:25 - 2014-12-30 10:25 - 00165376 _____ () C:\SystemLook_x64.exe 2014-12-30 10:01 - 2014-12-30 10:46 - 00031693 _____ () C:\Users\gacek\Desktop\FRST.txt 2014-12-29 21:14 - 2014-12-29 21:14 - 00000000 __SHD () C:\Users\gacek\AppData\Local\EmieUserList 2014-12-29 21:14 - 2014-12-29 21:14 - 00000000 __SHD () C:\Users\gacek\AppData\Local\EmieSiteList 2014-12-29 21:14 - 2014-12-29 21:14 - 00000000 __SHD () C:\Users\gacek\AppData\Local\EmieBrowserModeList 2014-12-29 20:58 - 2014-12-29 20:58 - 00000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2014-12-29 20:58 - 2014-12-29 20:58 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared 2014-12-29 20:50 - 2014-12-29 20:50 - 00001339 _____ () C:\windows\DirectX.log 2014-12-29 20:50 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll 2014-12-29 20:50 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_7.dll 2014-12-29 20:50 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll 2014-12-29 20:50 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll 2014-12-29 20:50 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_43.dll 2014-12-29 20:50 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_43.dll 2014-12-29 20:50 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_43.dll 2014-12-29 20:50 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll 2014-12-29 20:36 - 2014-12-29 20:59 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Autodesk 2014-12-29 19:54 - 2014-12-30 09:53 - 00001152 _____ () C:\windows\PFRO.log 2014-12-29 17:33 - 2014-12-29 21:02 - 00178720 _____ () C:\Users\gacek\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-29 16:39 - 2014-12-29 16:36 - 00034432 ____H () C:\windows\SysWOW64\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-29 16:39 - 2014-12-29 16:36 - 00034432 ____H () C:\windows\SysWOW64\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-29 16:36 - 2014-12-29 16:36 - 00034432 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0.bak 2014-12-29 16:36 - 2014-12-29 16:36 - 00034432 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0.bak 2014-12-29 16:03 - 2014-12-30 10:02 - 00005984 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-29 13:34 - 2014-12-29 13:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-12-29 13:11 - 2014-12-29 20:59 - 00000000 ____D () C:\ProgramData\Autodesk 2014-12-29 12:26 - 2014-12-29 18:38 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Softube 2014-12-29 12:01 - 2014-12-29 12:01 - 00000000 __HDC () C:\ProgramData\{36047B27-9342-4F25-AB0D-F0DFC71A650A} 2014-12-29 09:55 - 2014-12-30 10:02 - 00005984 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-29 09:55 - 2014-12-29 16:36 - 00002088 _____ () C:\windows\system32\spsys.log 2014-12-28 15:51 - 2014-12-30 03:28 - 00000000 ____D () C:\Users\gacek\AppData\Local\CrashDumps 2014-12-28 15:33 - 2014-12-28 15:33 - 00002012 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition 3.0.lnk 2014-12-26 22:39 - 2014-12-26 22:39 - 00000000 ____D () C:\Users\gacek\Documents\Updater 2014-12-26 20:47 - 2014-12-26 20:47 - 00000000 ____H () C:\ProgramData\DP45977C.lfl 2014-12-26 19:43 - 2014-12-30 10:46 - 00000000 ____D () C:\FRST 2014-12-26 19:11 - 2014-12-29 13:37 - 02123264 _____ (Farbar) C:\Users\gacek\Desktop\FRST64.exe 2014-12-25 11:56 - 2014-12-25 11:56 - 00000000 ___DC () C:\Users\gacek\AppData\Local\MigWiz 2014-12-24 21:06 - 2014-12-24 21:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Password Vault 2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\Syncrosoft 2014-12-24 07:04 - 2014-12-24 07:04 - 00000000 ____D () C:\ProgramData\Multimedia mobilNET 2014-12-24 07:04 - 2014-12-24 07:03 - 01001472 _____ (DiBcom SA) C:\windows\system32\Drivers\mod7700.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00421376 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbwwan.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00221312 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00212992 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juwwanecm.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwusbdev.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00098816 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcacm.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00086016 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jubusenum.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00069632 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcecm.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00028672 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juextctrl.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwupgrade.sys 2014-12-24 07:04 - 2014-12-24 07:03 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_usbenumfilter.sys 2014-12-24 07:03 - 2014-12-24 07:04 - 00000000 ____D () C:\Program Files (x86)\Multimedia mobilNET 2014-12-23 21:47 - 2014-12-23 21:47 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-12-23 21:13 - 2014-12-30 09:53 - 00003850 _____ () C:\windows\setupact.log 2014-12-23 21:13 - 2014-12-23 21:13 - 00000000 _____ () C:\windows\setuperr.log 2014-12-23 21:12 - 2014-12-29 21:08 - 00620000 _____ () C:\windows\system32\FNTCACHE.DAT 2014-12-23 20:14 - 2014-12-29 19:40 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\vlc 2014-12-23 11:57 - 2014-12-23 11:57 - 00000000 ____D () C:\Program Files\VideoLAN 2014-12-23 10:43 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-12-23 10:43 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe 2014-12-22 15:34 - 2014-12-27 14:12 - 00000000 ____D () C:\Program Files (x86)\Dolby Advanced Audio v2 2014-12-22 15:34 - 2014-12-22 15:34 - 00001859 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby Profile.lnk 2014-12-22 15:28 - 2014-12-22 15:28 - 00000000 ____D () C:\windows\SysWOW64\NV 2014-12-22 15:28 - 2014-12-22 15:28 - 00000000 ____D () C:\windows\system32\NV 2014-12-22 15:25 - 2014-11-13 01:20 - 31893136 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 24557712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 20986592 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 20922512 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 19966344 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 18514616 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 17259664 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 16884632 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 14032984 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 13944952 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 13213512 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-12-22 15:25 - 2014-11-13 01:20 - 11397744 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 11336432 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 04292416 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 04011208 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 02874456 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 01876296 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6434475.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 01540424 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6434475.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 00964928 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 00935240 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 00923792 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 00900928 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 00871648 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvumdshim.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 00352016 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 00303600 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll 2014-12-22 15:25 - 2014-11-13 01:20 - 00031560 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvpciflt.sys 2014-12-22 13:16 - 2014-03-25 14:15 - 00060400 _____ (Panda Security, S.L.) C:\windows\system32\Drivers\PSKMAD.sys 2014-12-22 13:15 - 2014-12-22 13:15 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Panda Security 2014-12-22 13:15 - 2014-12-22 13:15 - 00000000 ____D () C:\Program Files (x86)\Panda Security 2014-12-22 13:14 - 2014-12-22 13:15 - 00000000 ____D () C:\ProgramData\Panda Security 2014-12-22 13:13 - 2014-12-22 23:34 - 00000000 ____D () C:\Program Files (x86)\Winamp5 2014-12-22 13:13 - 2014-12-22 13:15 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Winamp5 2014-12-22 13:13 - 2014-12-22 13:13 - 00000000 ____D () C:\Program Files (x86)\Winamp Detect 2014-12-22 12:06 - 2014-12-22 12:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-12-22 11:58 - 2014-12-22 11:58 - 00000000 __HDC () C:\ProgramData\{68B5E2B9-11B5-4D26-BD32-61F322FA4B1D} 2014-12-22 11:24 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2014-12-22 11:24 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll 2014-12-22 11:24 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2014-12-22 11:24 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-12-22 11:24 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-12-22 11:24 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-12-22 11:24 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-12-22 11:24 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-12-22 11:24 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2014-12-22 11:24 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-12-22 11:24 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2014-12-22 11:24 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2014-12-22 11:24 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-12-22 11:24 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll 2014-12-22 11:24 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-12-22 11:24 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-12-22 11:24 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2014-12-22 11:24 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2014-12-22 11:24 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2014-12-22 11:24 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-12-22 11:24 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-12-22 11:24 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-12-22 11:24 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-12-22 11:24 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-22 11:24 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-12-22 11:24 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-12-22 11:24 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-12-22 11:24 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-12-22 11:24 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-12-22 11:24 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-12-22 11:24 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-12-22 11:24 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-12-22 11:24 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-12-22 11:24 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\windows\system32\mf.dll 2014-12-22 11:24 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll 2014-12-22 11:23 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-12-22 11:23 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2014-12-22 11:23 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-12-22 11:23 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2014-12-22 11:23 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-12-22 11:23 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2014-12-22 11:23 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-12-22 11:23 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-12-22 11:23 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-12-22 11:23 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-12-22 11:23 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-12-22 11:23 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll 2014-12-22 11:23 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll 2014-12-22 11:23 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2014-12-22 11:23 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-12-22 11:23 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-12-22 11:23 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll 2014-12-22 11:23 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-12-22 11:23 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-12-22 11:23 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll 2014-12-22 11:23 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-12-22 11:21 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll 2014-12-22 11:21 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll 2014-12-22 11:21 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys 2014-12-22 11:21 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2014-12-22 11:21 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll 2014-12-22 11:21 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\windows\system32\charmap.exe 2014-12-22 11:21 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\windows\SysWOW64\charmap.exe 2014-12-22 11:21 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll 2014-12-22 11:21 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\windows\system32\WSManMigrationPlugin.dll 2014-12-22 11:21 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll 2014-12-22 11:21 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll 2014-12-22 11:21 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\windows\system32\WSManHTTPConfig.exe 2014-12-22 11:21 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll 2014-12-22 11:21 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-22 11:21 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll 2014-12-22 11:21 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll 2014-12-22 11:21 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManHTTPConfig.exe 2014-12-18 11:00 - 2014-12-30 09:58 - 01074435 _____ () C:\windows\WindowsUpdate.log 2014-12-18 10:59 - 2014-12-18 10:59 - 00020986 _____ () C:\windows\Tasks\SCHEDLGU.TXT 2014-12-17 21:28 - 2014-12-17 21:28 - 00000000 ____D () C:\ProgramData\Creative Professional 2014-12-17 18:18 - 2014-12-17 18:18 - 00319488 ____N () C:\windows\SysWOW64\EmuSQL.dll 2014-12-05 20:09 - 2014-12-05 20:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 2014-12-04 10:40 - 2014-12-04 10:40 - 50387842 _____ () C:\Szybka automatyzacja parametrĂłw w Logic i Reaper.mp4 2014-12-04 01:11 - 2014-12-04 01:11 - 00001056 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager.lnk 2014-12-04 01:00 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2014-12-04 01:00 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll 2014-12-04 01:00 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll 2014-12-04 01:00 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll 2014-12-01 10:19 - 2014-12-01 10:19 - 00000000 ____D () C:\ProgramData\Auslogics ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-30 10:28 - 1601-01-01 01:00 - 00006646 _____ () C:\Users\gacek\Desktop\1.txt 2014-12-30 10:24 - 2013-10-05 09:38 - 00023988 _____ () C:\windows\Notepad2.ini 2014-12-30 10:05 - 2013-11-21 11:47 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-12-30 09:59 - 2012-11-21 01:35 - 00061548 _____ () C:\windows\system32\perfh015.dat 2014-12-30 09:59 - 2012-11-21 01:35 - 00028886 _____ () C:\windows\system32\perfc015.dat 2014-12-30 09:59 - 2009-07-14 06:13 - 00174510 _____ () C:\windows\system32\PerfStringBackup.INI 2014-12-30 09:58 - 2013-01-22 21:44 - 00000000 ___RD () C:\Users\gacek\SkyDrive 2014-12-30 09:53 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-12-29 20:50 - 2013-11-10 10:00 - 00000000 ____D () C:\ProgramData\Package Cache 2014-12-29 19:58 - 2014-03-12 19:13 - 00000000 ____D () C:\kopia 2014-12-29 19:58 - 2012-12-21 13:15 - 00000000 ____D () C:\Users\gacek\AppData\Local\GHISLER 2014-12-29 19:14 - 2014-10-13 13:48 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-12-29 18:36 - 2012-12-25 12:44 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\uTorrent 2014-12-29 18:31 - 2012-12-23 13:45 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Applied Acoustics Systems 2014-12-29 18:12 - 2013-07-17 19:51 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Sony 2014-12-29 14:12 - 2014-08-22 19:31 - 00000000 ____D () C:\Users\gacek\AppData\Local\Adobe 2014-12-29 14:12 - 2013-12-11 18:51 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2014-12-29 14:12 - 2013-11-21 11:47 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-12-29 14:12 - 2013-11-21 11:47 - 00003868 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-12-29 14:04 - 2013-01-15 19:55 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-12-29 13:39 - 2013-11-21 19:05 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Free Download Manager 2014-12-29 13:03 - 2012-12-21 14:00 - 00000000 ____D () C:\Program Files\PeerBlock 2014-12-29 12:01 - 2013-01-01 18:58 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments 2014-12-29 12:01 - 2012-12-21 18:50 - 00000000 ____D () C:\Audio 2014-12-28 16:26 - 2014-10-10 19:21 - 00000000 ____D () C:\Users\gacek\Documents\REAPER Media 2014-12-28 15:39 - 2014-09-06 08:54 - 00000000 ____D () C:\Users\gacek\Documents\Adobe 2014-12-28 15:39 - 2012-12-21 13:12 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Adobe 2014-12-28 15:32 - 2012-11-20 17:01 - 00000000 ____D () C:\ProgramData\Adobe 2014-12-28 15:32 - 2012-11-20 17:01 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-12-27 16:21 - 2012-12-21 13:02 - 00000000 ____D () C:\Users\gacek 2014-12-27 13:02 - 2014-10-13 13:48 - 00093400 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2014-12-26 19:21 - 2012-12-22 17:25 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Blue Cat Audio 2014-12-26 10:40 - 2014-07-31 14:13 - 00000000 ____D () C:\Users\gacek\AppData\Local\Data Access Worldwide 2014-12-25 23:43 - 2014-04-14 15:46 - 00000000 ____D () C:\Program Files (x86)\Arturia 2014-12-25 15:32 - 2012-11-20 17:14 - 00000000 ____D () C:\Program Files (x86)\Windows Live 2014-12-24 15:42 - 2014-07-28 09:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-12-24 15:09 - 2013-07-24 15:33 - 00203566 _____ () C:\Users\gacek\AppData\Roaming\CompatAdmin.log 2014-12-24 14:39 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\Help 2014-12-24 14:37 - 2014-07-10 20:13 - 00000000 ____D () C:\Users\gacek\.VirtualBox 2014-12-24 07:05 - 2014-02-20 16:04 - 00000000 ____D () C:\ProgramData\DataCardService 2014-12-24 07:03 - 2014-02-20 16:04 - 01490656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfCoInstaller01007.dll 2014-12-24 07:03 - 2008-03-27 13:51 - 01490656 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01007.dll 2014-12-23 18:57 - 2013-11-21 16:02 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-12-23 00:15 - 2013-04-03 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Muzyka&Audio 2014-12-22 18:45 - 2014-05-13 10:29 - 00000000 ____D () C:\Program Files (x86)\Java 2014-12-22 15:28 - 2013-10-29 16:20 - 00000000 ____D () C:\Users\gacek\AppData\Local\NVIDIA 2014-12-22 15:28 - 2013-08-08 05:05 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-12-22 15:28 - 2013-08-08 05:05 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-12-22 15:28 - 2013-08-08 05:04 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-12-22 15:28 - 2012-11-20 16:50 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-12-22 15:06 - 2014-02-05 16:42 - 00000000 ____D () C:\Users\gacek\Documents\Native Instruments 2014-12-22 14:53 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions 2014-12-22 13:08 - 2013-10-27 21:14 - 00000000 ____D () C:\ProgramData\Oracle 2014-12-22 13:07 - 2014-07-28 09:14 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll 2014-12-22 12:43 - 2012-12-25 12:45 - 00000000 ____D () C:\Program Files (x86)\uTorrent 2014-12-22 12:19 - 2013-11-21 15:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-12-22 11:31 - 2013-07-11 15:56 - 00000000 ____D () C:\windows\system32\MRT 2014-12-22 11:26 - 2012-12-21 18:26 - 112710672 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-12-21 17:59 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools 2014-12-21 17:59 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-12-19 22:40 - 2012-12-22 01:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Grafika 2014-12-18 16:47 - 2014-10-12 21:53 - 00000000 ____D () C:\Users\gacek\Desktop\Blender_kompedium_2007 2014-12-17 18:19 - 2014-06-18 11:46 - 00000000 ____D () C:\Program Files (x86)\Creative Professional 2014-12-17 18:19 - 2012-11-20 16:51 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-12-14 12:27 - 2013-05-26 18:50 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Tokyo Dawn Labs 2014-12-14 08:39 - 2009-07-14 05:54 - 00000749 ___RH () C:\windows\WindowsShell.Manifest 2014-12-14 08:39 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries 2014-12-11 23:28 - 2012-12-22 01:33 - 00000000 ____D () C:\ProgramData\Arturia 2014-12-07 16:48 - 2013-08-24 15:48 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\VMware 2014-12-07 16:48 - 2013-08-24 15:48 - 00000000 ____D () C:\Users\gacek\AppData\Local\VMware 2014-12-05 21:23 - 2013-02-08 18:10 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-05 21:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-12-05 21:13 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\GroupPolicy 2014-12-05 20:03 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system 2014-12-04 20:12 - 2014-07-28 06:21 - 00000000 ____D () C:\Users\gacek\AppData\Local\AuthenTec 2014-12-04 01:12 - 2013-01-02 08:48 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager 2014-12-04 01:05 - 2014-10-13 13:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-11-30 14:00 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\spool 2014-11-30 12:16 - 2012-12-21 13:02 - 00000000 ____D () C:\Users\gacek\AppData\Roaming\Macromedia 2014-11-30 10:53 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\security ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2013-03-15 17:15 ==================== End Of Log ============================