Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-02-2015 01 Ran by dom (administrator) on DOM-KOMPUTER on 20-02-2015 11:31:21 Running from C:\Users\dom\Desktop Loaded Profiles: dom (Available profiles: dom) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe (AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPLoader.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (BlazeVideo Company) C:\Program Files\BlazeVideo\BlazeHDTV 6.0\MediaDetector.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPHelper.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPCenter.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [USB3MON] => C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-20] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-30] (AVAST Software) HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2015-01-14] (Samsung Electronics Co., Ltd.) HKU\S-1-5-21-3115265202-861073304-1815682740-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\dom\AppData\Local\Akamai\netsession_win.exe" HKU\S-1-5-21-3115265202-861073304-1815682740-1000\...\Run: [BlazeServoTool] => C:\Program Files\BlazeVideo\BlazeHDTV 6.0\MediaDetector.exe [286720 2011-12-21] (BlazeVideo Company) HKU\S-1-5-21-3115265202-861073304-1815682740-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd) AppInit_DLLs: C:\Windows\system32\nvinit.dll => C:\Windows\system32\nvinit.dll [156840 2014-09-14] (NVIDIA Corporation) Startup: C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\dom\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\dom\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\dom\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\dom\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3115265202-861073304-1815682740-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-3115265202-861073304-1815682740-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 FireFox: ======== FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3115265202-861073304-1815682740-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\dom\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-09-21] Chrome: ======= CHR HomePage: Default -> https://www.google.com/ CHR StartupUrls: Default -> "hxxp://google.pl/" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Widevine Content Decryption Module) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.6.758\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\40.0.2214.111\internal-nacl-plugin No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\40.0.2214.111\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Unity Player) - C:\Users\dom\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Profile: C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-14] CHR Extension: (YouTube) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-14] CHR Extension: (Google Search) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-14] CHR Extension: (Avast Online Security) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-23] CHR Extension: (Google Wallet) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-14] CHR Extension: (Gmail) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-14] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-15] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-15] (AVAST Software) S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2014-12-15] (Avast Software) S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [276808 2014-08-13] (Intel Corporation) S3 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915784 2014-09-17] (NVIDIA Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [281416 2014-08-13] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [595968 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [642520 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18044744 2014-09-17] (NVIDIA Corporation) R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-07-11] (Microsoft Corporation) R2 wuauserv; C:\Windows\system32\wuaueng.dll [1973728 2014-05-14] (Microsoft Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-12-15] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-12-15] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-12-15] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-12-15] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-12-15] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-12-15] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-12-15] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-12-15] () R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [60616 2014-03-31] (ASUS Corporation) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-10-28] (Disc Soft Ltd) R0 iaStorA; C:\Windows\System32\DRIVERS\iaStorA.sys [489832 2013-11-21] (Intel Corporation) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [24424 2013-11-21] (Intel Corporation) S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [145280 2014-09-18] (ITE ) R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [16880 2013-12-20] (Intel Corporation) R3 iusb3hub; C:\Windows\System32\DRIVERS\iusb3hub.sys [363504 2013-12-20] (Intel Corporation) R3 iusb3xhc; C:\Windows\System32\DRIVERS\iusb3xhc.sys [799216 2013-12-20] (Intel Corporation) R3 MEI; C:\Windows\System32\DRIVERS\TeeDriver.sys [86488 2013-12-10] (Intel Corporation) R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [25800 2014-09-14] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [32928 2014-09-04] (NVIDIA Corporation) R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [330968 2013-07-24] (Realsil Semiconductor Corporation) R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [2591960 2014-01-10] (Realtek Semiconductor Corporation ) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2014-12-15] (Avast Software) S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-20 09:52 - 2015-02-19 21:17 - 00008555 _____ () C:\Users\dom\Desktop\AdwCleaner[R0] - Kopia.txt 2015-02-20 09:47 - 2015-02-19 21:18 - 00008589 _____ () C:\Users\dom\Desktop\AdwCleaner[S0].txt 2015-02-20 09:47 - 2015-02-19 21:17 - 00008555 _____ () C:\Users\dom\Desktop\AdwCleaner[R0].txt 2015-02-20 09:32 - 2015-02-20 09:32 - 00000954 _____ () C:\Users\dom\Desktop\naprawa.txt 2015-02-19 21:28 - 2015-02-19 21:28 - 00028467 _____ () C:\Users\dom\Desktop\Shortcut.txt 2015-02-19 21:27 - 2015-02-20 11:31 - 00015775 _____ () C:\Users\dom\Desktop\FRST.txt 2015-02-19 21:27 - 2015-02-19 21:28 - 00029453 _____ () C:\Users\dom\Desktop\Addition.txt 2015-02-19 21:15 - 2015-02-19 21:18 - 00000000 ____D () C:\AdwCleaner 2015-02-19 21:14 - 2015-02-19 21:14 - 01126400 _____ (Farbar) C:\Users\dom\Downloads\FRST (1).exe 2015-02-19 21:13 - 2015-02-19 21:13 - 01126400 _____ (Farbar) C:\Users\dom\Downloads\FRST.exe 2015-02-19 21:03 - 2015-02-19 21:03 - 01126400 _____ (Farbar) C:\Users\dom\Desktop\FRST.exe 2015-02-19 17:54 - 2015-02-19 17:54 - 00058016 _____ () C:\Users\dom\AppData\Local\GDIPFONTCACHEV1.DAT 2015-02-19 17:52 - 2015-02-19 21:18 - 00001218 _____ () C:\Windows\PFRO.log 2015-02-19 17:52 - 2015-02-19 17:52 - 00267480 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-19 17:42 - 2015-02-19 17:43 - 32830584 _____ () C:\Users\dom\Downloads\360TS_Setup.exe 2015-02-19 16:15 - 2015-02-19 20:41 - 00000000 ____D () C:\Users\dom\Downloads\Nowy folder 2015-02-19 16:08 - 2015-02-19 16:09 - 00031093 _____ () C:\Users\dom\Downloads\Addition.txt 2015-02-19 16:07 - 2015-02-20 11:31 - 00000000 ____D () C:\FRST 2015-02-19 14:50 - 2015-02-20 09:37 - 00001344 _____ () C:\Windows\setupact.log 2015-02-19 14:50 - 2015-02-19 14:50 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-19 14:41 - 2015-02-19 14:41 - 00000000 ____D () C:\Windows\system32\appmgmt 2015-02-18 22:23 - 2015-02-18 22:23 - 00087591 _____ () C:\Users\dom\Downloads\Scenariusz na miłość - 2014 - (Napisy PL) [720x560].rar 2015-02-18 22:20 - 2015-02-18 22:20 - 00000000 ____D () C:\Users\dom\AppData\Roaming\Macromedia 2015-02-18 22:12 - 2015-02-19 15:04 - 00000000 ____D () C:\Program Files\NapiProjekt 2015-02-18 22:12 - 2015-02-18 22:20 - 00000000 ____D () C:\Users\dom\AppData\Roaming\NapiProjekt 2015-02-18 22:12 - 2015-02-18 22:12 - 00000000 ____D () C:\Windows\system32\Macromed 2015-02-18 22:10 - 2015-02-18 22:10 - 09989013 _____ ( ) C:\Users\dom\Downloads\NapiProjektBuild_2.2.0.2399.exe 2015-02-18 20:40 - 2015-02-18 22:10 - 1551807404 _____ () C:\Users\dom\Downloads\Scenariusz na miłość - The Rewrite 2014.avi 2015-02-18 17:51 - 2015-02-18 19:33 - 735479808 _____ () C:\Users\dom\Downloads\The.Interview.2014.PLSUBBED.BDRip.XviD-J25.avi 2015-02-17 21:17 - 2014-11-25 03:15 - 00000000 ____D () C:\Users\dom\Downloads\Europe_v1.4_Map_940_6004 2015-02-17 21:09 - 2015-02-17 21:16 - 95971284 _____ () C:\Users\dom\Downloads\Europe_v1.4_Map_940_6004.part5.rar 2015-02-17 21:06 - 2015-02-18 10:48 - 00000000 ____D () C:\Users\dom\Documents\SelfMV 2015-02-17 21:06 - 2015-02-17 21:06 - 00001915 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2015-02-17 21:02 - 2015-02-17 21:03 - 42538344 _____ (Samsung Electronics Co., Ltd.) C:\Users\dom\Downloads\Kies3Setup.exe 2015-02-17 20:59 - 2015-02-17 20:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf 2015-02-17 20:54 - 2014-10-13 06:57 - 01112288 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll 2015-02-17 20:54 - 2014-10-13 06:57 - 00581192 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll 2015-02-17 20:54 - 2014-10-13 06:57 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys 2015-02-17 20:54 - 2014-10-13 06:57 - 00089856 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys 2015-02-17 20:49 - 2015-02-17 21:08 - 00000000 ____D () C:\Users\dom\Documents\samsung 2015-02-17 20:49 - 2015-02-17 21:06 - 00000000 ____D () C:\Users\dom\AppData\Roaming\Samsung 2015-02-17 20:49 - 2015-02-17 20:49 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2015-02-17 20:49 - 2015-02-17 20:49 - 00000000 ____D () C:\Users\dom\AppData\Local\Samsung 2015-02-17 20:48 - 2015-02-17 20:48 - 00001948 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2015-02-17 20:48 - 2015-02-17 20:48 - 00001938 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk 2015-02-17 20:47 - 2015-02-19 14:55 - 00000000 ____D () C:\Program Files\MyFree Codec 2015-02-17 20:47 - 2015-02-17 21:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2015-02-17 20:47 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\system32\Redemption.dll 2015-02-17 20:47 - 2013-12-30 10:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\system32\secman.dll 2015-02-17 20:46 - 2015-02-17 21:05 - 00000000 ____D () C:\Program Files\Samsung 2015-02-17 20:46 - 2015-02-17 20:47 - 00000000 ____D () C:\ProgramData\Samsung 2015-02-17 20:46 - 2013-12-30 10:52 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\system32\dgderapi.dll 2015-02-17 20:44 - 2015-02-17 20:44 - 00000000 ____D () C:\Users\dom\AppData\Local\Downloaded Installations 2015-02-17 20:39 - 2015-02-17 20:41 - 78374592 _____ (Samsung Electronics Co., Ltd.) C:\Users\dom\Downloads\KiesSetup.exe 2015-02-17 20:10 - 2015-02-17 21:08 - 1073741824 _____ () C:\Users\dom\Downloads\Europe_v1.4_Map_940_6004.part4.rar 2015-02-17 18:51 - 2015-01-09 03:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2015-02-17 18:51 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2015-02-17 18:51 - 2015-01-09 03:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2015-02-17 17:13 - 2015-02-17 19:12 - 1073741824 _____ () C:\Users\dom\Downloads\Europe_v1.4_Map_940_6004.part3.rar 2015-02-17 13:48 - 2015-02-17 15:48 - 1073741824 _____ () C:\Users\dom\Downloads\Europe_v1.4_Map_940_6004.part2.rar 2015-02-17 09:26 - 2015-02-17 11:27 - 1073741824 _____ () C:\Users\dom\Downloads\Europe_v1.4_Map_940_6004.part1.rar 2015-02-17 09:16 - 2014-11-25 03:16 - 00000000 ____D () C:\Users\dom\Downloads\Poland_v1.4_Map_940_6004 2015-02-16 21:42 - 2015-02-16 22:20 - 323483022 _____ () C:\Users\dom\Downloads\Poland_v1.4_Map_940_6004.rar 2015-02-16 13:21 - 2015-02-16 13:22 - 00000197 _____ () C:\Windows\system32\2015-02-16-12-21-54.061-AvastVBoxSVC.exe-2712.log 2015-02-15 22:35 - 2014-12-19 21:29 - 3242665111 _____ (Aqurat sp. z o.o. & Geosystems sp. z. o.o.) C:\Users\dom\Downloads\AutoMapa_6.16_1412_EU_Final_CRACKED.exe 2015-02-15 20:16 - 2015-02-15 22:13 - 1134003200 _____ () C:\Users\dom\Downloads\Au to M a p a_6. 1 6_1 4 12_EU _Fi nal_CRA CKE D.part1.rar 2015-02-15 20:13 - 2015-02-15 22:16 - 1134003200 _____ () C:\Users\dom\Downloads\Au to M a p a_6. 1 6_1 4 12_EU _Fi nal_CRA CKE D.part2.rar 2015-02-15 20:13 - 2015-02-15 21:43 - 974659212 _____ () C:\Users\dom\Downloads\Au to M a p a_6. 1 6_1 4 12_EU _Fi nal_CRA CKE D.part3.rar 2015-02-15 19:08 - 2015-02-15 19:08 - 00000197 _____ () C:\Windows\system32\2015-02-15-18-08-43.086-AvastVBoxSVC.exe-3524.log 2015-02-15 12:59 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-15 12:59 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-15 12:52 - 2015-02-15 12:53 - 00000197 _____ () C:\Windows\system32\2015-02-15-11-52-36.061-AvastVBoxSVC.exe-2592.log 2015-02-12 14:36 - 2015-02-12 14:36 - 00000000 ____D () C:\Users\dom\Desktop\verso 2015-02-12 12:43 - 2015-02-12 12:52 - 00000000 ____D () C:\Users\dom\Desktop\Nowy folder 2015-02-12 09:06 - 2015-02-12 09:06 - 00000197 _____ () C:\Windows\system32\2015-02-12-08-06-56.096-AvastVBoxSVC.exe-3148.log 2015-02-11 13:05 - 2015-02-04 03:54 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-02-11 13:05 - 2015-02-04 03:53 - 00767488 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-02-11 13:05 - 2015-02-04 03:53 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-02-11 13:05 - 2015-02-04 03:53 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-02-11 13:05 - 2015-02-04 03:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-02-11 13:05 - 2015-02-04 03:53 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-02-11 13:05 - 2015-02-04 03:49 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-02-11 13:05 - 2015-01-28 00:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-02-11 13:05 - 2015-01-15 09:09 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-11 13:05 - 2015-01-15 09:09 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-11 13:05 - 2015-01-15 09:09 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-02-11 13:05 - 2015-01-15 05:22 - 00369976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-11 13:05 - 2015-01-14 07:25 - 03977656 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-02-11 13:05 - 2015-01-14 07:25 - 03921848 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-11 13:05 - 2015-01-09 02:52 - 02388992 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-11 13:05 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-11 13:05 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-11 13:05 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2015-02-11 13:04 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-11 13:04 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-11 13:04 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-11 13:04 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-02-11 13:04 - 2015-01-12 03:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-02-11 13:04 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-11 13:04 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-11 13:04 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-11 13:04 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-11 13:04 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-11 13:04 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-11 13:04 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-11 13:04 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-11 13:04 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-11 13:04 - 2015-01-12 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-11 13:04 - 2015-01-12 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-02-11 13:04 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-11 13:04 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-11 13:04 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-11 13:04 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-11 13:04 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-11 13:04 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-11 13:04 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-11 13:04 - 2015-01-12 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-11 13:04 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-02-11 13:04 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-11 13:04 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-11 13:04 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-11 13:04 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-11 13:04 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-11 13:04 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-11 13:04 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-02-05 09:27 - 2015-02-05 09:27 - 00000197 _____ () C:\Windows\system32\2015-02-05-08-27-47.013-AvastVBoxSVC.exe-4548.log 2015-02-04 20:55 - 2014-11-08 10:34 - 00000000 ____D () C:\Users\dom\Downloads\FIFA.15.(2014).XBOX360-SRT 2015-02-04 20:14 - 2015-02-04 20:48 - 1500000000 _____ () C:\Users\dom\Downloads\FIFA.15.2014.XBOX360-SRT.part1.rar 2015-02-04 17:04 - 2015-02-04 19:30 - 1325869711 _____ () C:\Users\dom\Downloads\FIFA.15.2014.XBOX360-SRT.part6 (1).rar 2015-02-04 17:03 - 2015-02-04 19:48 - 1500000000 _____ () C:\Users\dom\Downloads\FIFA.15.2014.XBOX360-SRT.part5.rar 2015-02-04 17:03 - 2015-02-04 19:34 - 1500000000 _____ () C:\Users\dom\Downloads\FIFA.15.2014.XBOX360-SRT.part2.rar 2015-02-04 17:03 - 2015-02-04 19:33 - 1500000000 _____ () C:\Users\dom\Downloads\FIFA.15.2014.XBOX360-SRT.part4.rar 2015-02-04 17:03 - 2015-02-04 19:33 - 1500000000 _____ () C:\Users\dom\Downloads\FIFA.15.2014.XBOX360-SRT.part3.rar 2015-02-04 17:02 - 2015-02-04 19:21 - 1325869711 _____ () C:\Users\dom\Downloads\FIFA.15.2014.XBOX360-SRT.part6.rar 2015-02-04 10:26 - 2015-02-04 10:26 - 00000000 ____D () C:\Users\dom\Downloads\fifa 2015-02-04 10:03 - 2015-02-04 10:20 - 1068576000 _____ () C:\Users\dom\Downloads\Fifa.15.XEX.part7.rar 2015-02-04 08:55 - 2015-02-04 09:07 - 00000000 ____D () C:\Users\dom\Downloads\Fifa.15.XEX 2015-02-04 08:22 - 2015-02-04 08:44 - 1068576000 _____ () C:\Users\dom\Downloads\Fifa.15.XEX.part6.rar 2015-02-03 22:00 - 2015-02-04 00:02 - 1068576000 _____ () C:\Users\dom\Downloads\Fifa.15.XEX.part4.rar 2015-02-03 22:00 - 2015-02-04 00:01 - 1068576000 _____ () C:\Users\dom\Downloads\Fifa.15.XEX.part2.rar 2015-02-03 22:00 - 2015-02-04 00:00 - 1068576000 _____ () C:\Users\dom\Downloads\Fifa.15.XEX.part5.rar 2015-02-03 22:00 - 2015-02-04 00:00 - 1068576000 _____ () C:\Users\dom\Downloads\Fifa.15.XEX.part3.rar 2015-02-03 22:00 - 2015-02-03 23:57 - 1068576000 _____ () C:\Users\dom\Downloads\Fifa.15.XEX.part1.rar 2015-02-01 11:15 - 2015-02-01 11:15 - 00000197 _____ () C:\Windows\system32\2015-02-01-10-15-00.070-AvastVBoxSVC.exe-3648.log 2015-01-27 20:43 - 2015-01-25 17:41 - 04194304 _____ () C:\Users\dom\Desktop\A200_lista 2x1_V2.18B8_patch.abs 2015-01-27 20:38 - 2015-01-27 20:38 - 02508032 _____ () C:\Users\dom\Downloads\A200_Lista 2x1_2.18B8_patch_byJAKITAKI_25012015.rar 2015-01-27 08:18 - 2015-01-27 08:18 - 00007095 _____ () C:\Users\dom\Desktop\Muzo.fm.html 2015-01-27 08:18 - 2015-01-27 08:18 - 00000000 ____D () C:\Users\dom\Desktop\Muzo.fm_files 2015-01-25 18:45 - 2015-01-25 18:45 - 00000197 _____ () C:\Windows\system32\2015-01-25-17-45-12.042-AvastVBoxSVC.exe-3152.log 2015-01-22 18:24 - 2015-01-22 18:24 - 00000197 _____ () C:\Windows\system32\2015-01-22-17-24-30.099-AvastVBoxSVC.exe-4084.log ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-20 11:30 - 2014-09-14 17:22 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-02-20 09:45 - 2009-07-14 05:34 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-20 09:45 - 2009-07-14 05:34 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-20 09:41 - 2014-09-14 16:43 - 01273761 _____ () C:\Windows\WindowsUpdate.log 2015-02-20 09:38 - 2014-09-21 14:27 - 00000000 ____D () C:\Users\dom\AppData\Roaming\DropboxMaster 2015-02-20 09:38 - 2014-09-21 14:25 - 00000000 ____D () C:\Users\dom\AppData\Roaming\Dropbox 2015-02-20 09:37 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-20 09:21 - 2014-09-14 18:23 - 00000000 ____D () C:\Program Files\Java 2015-02-19 20:41 - 2014-12-29 08:26 - 00000000 ____D () C:\Users\dom\AppData\Roaming\Crystal-Launcher 2015-02-19 17:53 - 2014-09-14 17:22 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-02-19 17:48 - 2014-09-22 20:06 - 00000000 ____D () C:\Users\dom\AppData\Roaming\vlc 2015-02-19 17:48 - 2014-09-14 17:40 - 00000000 ____D () C:\Windows\Panther 2015-02-19 14:40 - 2014-11-01 11:09 - 00000000 ____D () C:\Windows\Minidump 2015-02-19 00:52 - 2011-04-12 06:08 - 00741726 _____ () C:\Windows\system32\perfh015.dat 2015-02-19 00:52 - 2011-04-12 06:08 - 00156766 _____ () C:\Windows\system32\perfc015.dat 2015-02-19 00:52 - 2010-11-20 22:01 - 01674012 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-18 09:42 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing 2015-02-17 21:05 - 2014-09-14 17:02 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2015-02-17 20:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-02-16 22:10 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache 2015-02-15 19:07 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF 2015-02-15 12:50 - 2014-12-19 12:24 - 00000000 ____D () C:\Windows\system32\appraiser 2015-02-15 12:50 - 2014-09-17 13:48 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-02-15 12:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2015-02-05 20:58 - 2014-09-14 17:24 - 00002135 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-01-25 18:21 - 2014-10-18 20:13 - 00000000 ____D () C:\Users\dom\AppData\Roaming\.minecraftzyczu 2015-01-22 11:00 - 2014-12-03 20:53 - 00000000 ____D () C:\Program Files\CCleaner Some content of TEMP: ==================== C:\Users\dom\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpj5hwfh.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-19 18:12 ==================== End Of Log ============================