Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-02-2015 01 Ran by Łukasz (administrator) on ŁUKASZ-KOMPUTER on 20-02-2015 12:23:48 Running from C:\Users\Łukasz\Downloads\Programs Loaded Profiles: Łukasz (Available profiles: Łukasz) Platform: Microsoft Windows 7 Home Basic (X86) OS Language: Polski (Polska) Internet Explorer Version 9 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe () C:\Program Files\Gigabyte\EasySaver\essvr.exe () C:\Windows\System32\PnkBstrA.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe (BitTorrent Inc.) C:\Users\Łukasz\AppData\Roaming\uTorrent\uTorrent.exe (Nero AG) C:\Program Files\Nero\Update\NASvc.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.) C:\Program Files\Internet Download Manager\IDMGrHlp.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11734240 2012-12-13] (Realtek Semiconductor) HKLM\...\Run: [NeroFilterCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [3117344 2012-03-07] (ESET) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation) HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3665488 2013-08-06] (Tonec Inc.) HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [GG] => C:\Users\Łukasz\AppData\Local\GG\Application\gghub.exe [4023872 2015-02-03] (GG Network S.A.) HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {33eecd3c-fb8c-11e3-956c-001fd0dfe546} - K:\Setup.exe Startup: C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk ShortcutTarget: IMVU.lnk -> C:\Users\Łukasz\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe () ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll (Tonec Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.pl/ SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Łukasz\AppData\Roaming\Mozilla\Firefox\Profiles\csni0a3f.default-1424428275887 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin HKU\S-1-5-21-3215043942-3594844569-900473125-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Łukasz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml FF Extension: Adblock Plus - C:\Users\Łukasz\AppData\Roaming\Mozilla\Firefox\Profiles\csni0a3f.default-1424428275887\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-20] FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2015-01-31] FF HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Łukasz\AppData\Roaming\IDM\idmmzcc5 FF Extension: IDM CC - C:\Users\Łukasz\AppData\Roaming\IDM\idmmzcc5 [2014-08-06] FF HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Łukasz\AppData\Roaming\IDM\idmmzcc5 Chrome: ======= CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2013-09-13] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [913144 2012-03-07] (ESET) R2 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [80392 2008-07-17] () R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [786256 2014-07-14] (Nero AG) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2013-11-28] () R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-06-24] (Disc Soft Ltd) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [169080 2012-03-14] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [120152 2012-03-14] (ESET) R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [103112 2012-03-14] (ESET) R3 gdrv; C:\Windows\gdrv.sys [16608 2015-02-20] (Windows (R) 2000 DDK provider) S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-20 11:57 - 2015-02-20 11:57 - 00818491 _____ () C:\Users\Łukasz\Downloads\Adblock Plus 2.3 do Firefox.xpi 2015-02-20 11:31 - 2015-02-20 11:31 - 00000000 ____D () C:\Users\Łukasz\Desktop\Stare dane programu Firefox 2015-02-20 11:27 - 2015-02-20 11:27 - 00000000 ____D () C:\Program Files\dumps 2015-02-20 11:00 - 2015-02-20 11:15 - 00000000 ____D () C:\MATS 2015-02-20 09:56 - 2015-02-20 12:23 - 00000000 ____D () C:\FRST 2015-02-20 09:51 - 2015-02-20 09:51 - 00000000 _____ () C:\Users\Łukasz\Desktop\Nowy dokument tekstowy (4).txt 2015-02-20 09:51 - 2015-02-20 09:51 - 00000000 _____ () C:\Users\Łukasz\Desktop\Nowy dokument tekstowy (3).txt 2015-02-20 09:05 - 2015-02-20 09:05 - 00000789 _____ () C:\Users\Public\Desktop\Tom Clancy`s H.A.W.X..lnk 2015-02-19 14:43 - 2015-02-19 14:43 - 00159192 _____ () C:\Windows\Minidump\021915-15943-01.dmp 2015-02-17 20:47 - 2015-02-17 20:47 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Warner Bros. Interactive Entertainment 2015-02-17 20:43 - 2015-02-17 20:43 - 00000893 _____ () C:\Users\Public\Desktop\LEGO MARVEL Super Heroes.lnk 2015-02-17 20:43 - 2015-02-17 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO MARVEL Super Heroes 2015-02-17 15:25 - 2015-02-17 15:25 - 00001034 _____ () C:\Users\Łukasz\Desktop\DAEMON Tools Lite.lnk 2015-02-17 13:28 - 2015-02-17 13:28 - 00000000 ____D () C:\Users\Łukasz\Documents\1C SoftClub 2015-02-17 13:20 - 2015-02-17 14:38 - 00000000 ____D () C:\ProgramData\Solidshield 2015-02-16 09:54 - 2014-01-27 09:42 - 00034304 _____ (Microsoft) C:\Windows\system32\NTSVC.ocx 2015-02-16 09:54 - 2004-03-09 00:00 - 00124688 _____ (Microsoft Corporation) C:\Windows\system32\Mswinsck.ocx 2015-02-16 09:54 - 1998-06-24 00:00 - 00295514 _____ () C:\Windows\system32\Vb6.olb 2015-02-14 15:54 - 2015-02-14 15:54 - 00000000 ____D () C:\Users\Łukasz\Documents\Electronic Arts 2015-02-14 15:53 - 2014-09-16 18:45 - 00447752 _____ (On2.com) C:\Windows\system32\vp6vfw.dll 2015-02-14 15:18 - 2015-02-14 15:18 - 00000000 _____ () C:\Windows\system32\config\SOFTWARE.sav 2015-02-14 15:07 - 2015-02-14 15:07 - 00000955 _____ () C:\Users\Public\Desktop\The Sims 4.lnk 2015-02-14 15:07 - 2015-02-14 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4 2015-02-14 14:56 - 2015-02-14 15:18 - 00001660 _____ () C:\Windows\system32\ASOROSet.bin 2015-02-14 14:56 - 2015-02-14 14:56 - 00000000 ____D () C:\Windows\system32\config\RCCBakup 2015-02-09 18:24 - 2015-02-09 18:24 - 00000000 ____D () C:\Users\Łukasz\Documents\PortableAppsBackup 2015-02-09 18:15 - 2015-02-09 18:28 - 00000000 ____D () C:\ProgramData\Skype 2015-02-09 18:15 - 2015-02-09 18:27 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Skype 2015-02-09 18:15 - 2015-02-09 18:15 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\Skype 2015-02-09 18:05 - 2015-02-09 18:05 - 00000794 _____ () C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-02-09 18:04 - 2015-02-20 12:24 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\uTorrent 2015-02-08 15:10 - 2015-02-08 15:11 - 00000000 ___SD () C:\Users\Łukasz\GG dysk 2015-02-08 15:10 - 2015-02-08 15:10 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\OpenFM 2015-02-08 15:09 - 2015-02-09 18:30 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\OpenFM 2015-02-08 15:09 - 2015-02-08 15:09 - 00001110 _____ () C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk 2015-02-08 15:09 - 2015-02-08 15:09 - 00001102 _____ () C:\Users\Łukasz\Desktop\GG.lnk 2015-02-06 18:06 - 2015-02-06 18:06 - 00001632 _____ () C:\Users\Public\Desktop\Angry Birds Space.lnk 2015-02-06 18:05 - 2015-02-06 18:06 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Rovio Entertainment Ltd 2015-02-06 18:05 - 2015-02-06 18:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio Entertainment Ltd 2015-02-06 16:29 - 2015-02-15 21:05 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\Arma 3 2015-02-06 16:29 - 2015-02-06 16:29 - 00000000 ____D () C:\ProgramData\Bohemia Interactive 2015-02-05 20:01 - 2015-02-05 20:01 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2015-02-05 20:01 - 2015-02-05 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-02-05 20:01 - 2015-02-05 20:01 - 00000000 ____D () C:\Program Files\Common Files\Java 2015-02-02 20:52 - 2015-02-02 20:52 - 00159176 _____ () C:\Windows\Minidump\020215-17799-01.dmp 2015-01-31 18:31 - 2015-01-31 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET 2015-01-31 18:31 - 2015-01-31 18:31 - 00000000 ____D () C:\ProgramData\ESET 2015-01-31 18:31 - 2015-01-31 18:31 - 00000000 ____D () C:\Program Files\ESET 2015-01-31 18:20 - 2015-01-31 19:02 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\NVIDIA Corporation 2015-01-31 18:20 - 2015-01-31 18:20 - 00000000 ____D () C:\Program Files\AGEIA Technologies 2015-01-31 18:18 - 2014-07-02 06:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin 2015-01-31 18:15 - 2014-07-02 21:54 - 24198088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll 2015-01-31 18:15 - 2014-07-02 21:54 - 15296456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-01-31 18:15 - 2014-07-02 21:54 - 11283344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-01-31 18:15 - 2014-07-02 21:54 - 11222048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-01-31 18:15 - 2014-07-02 21:54 - 10681176 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-01-31 18:15 - 2014-07-02 21:54 - 03988952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-01-31 18:15 - 2014-07-02 21:54 - 01054552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234052.dll 2015-01-31 18:15 - 2014-07-02 21:54 - 00907552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234052.dll 2015-01-31 18:15 - 2014-07-02 21:54 - 00907096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll 2015-01-31 18:15 - 2014-07-02 21:54 - 00869152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll 2015-01-27 14:49 - 2015-01-28 13:13 - 00000000 ____D () C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-20 12:13 - 2013-03-13 13:02 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-02-20 11:41 - 2012-12-25 21:44 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\DMCache 2015-02-20 11:37 - 2012-12-24 20:45 - 01120694 _____ () C:\Windows\WindowsUpdate.log 2015-02-20 11:36 - 2012-12-25 21:44 - 00000000 ____D () C:\Users\Łukasz\Downloads\Compressed 2015-02-20 11:28 - 2015-01-05 17:05 - 00000000 ____D () C:\Program Files\Common Files\Steam 2015-02-20 11:27 - 2014-12-18 10:36 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\IMVU 2015-02-20 11:27 - 2012-12-31 09:46 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\GG 2015-02-20 11:26 - 2014-09-21 18:39 - 00018147 _____ () C:\Windows\setupact.log 2015-02-20 11:26 - 2014-06-19 22:33 - 00000125 _____ () C:\service.log 2015-02-20 11:26 - 2014-03-05 13:26 - 00018578 _____ () C:\Windows\PFRO.log 2015-02-20 11:26 - 2013-03-23 08:47 - 00016608 _____ (Windows (R) 2000 DDK provider) C:\Windows\gdrv.sys 2015-02-20 11:26 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-20 11:25 - 2009-07-14 05:34 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-20 11:25 - 2009-07-14 05:34 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-20 11:21 - 2014-04-13 13:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MailShare 2015-02-20 11:18 - 2013-02-23 16:20 - 00000000 ____D () C:\Windows\system32\Adobe 2015-02-20 11:18 - 2012-12-24 20:59 - 00000000 ____D () C:\Windows\system32\Macromed 2015-02-20 10:55 - 2013-10-25 20:18 - 00000000 ____D () C:\Program Files\SqueakyChocolate 2015-02-20 09:05 - 2009-07-14 05:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-02-19 21:09 - 2012-12-24 20:56 - 00006248 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-19 21:09 - 2009-07-14 09:07 - 05498562 _____ () C:\Windows\system32\perfh015.dat 2015-02-19 21:09 - 2009-07-14 09:07 - 01767986 _____ () C:\Windows\system32\perfc015.dat 2015-02-19 14:43 - 2015-01-20 19:47 - 00000000 ____D () C:\Windows\Minidump 2015-02-18 17:58 - 2015-01-06 16:58 - 00000000 ____D () C:\Program Files\Ubisoft 2015-02-18 17:18 - 2013-02-09 15:12 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2015-02-18 17:13 - 2012-12-24 21:23 - 00000000 ____D () C:\Windows\system32\directx 2015-02-18 17:09 - 2014-04-22 17:22 - 00001105 _____ () C:\Users\Łukasz\Desktop\Mozilla Firefox.lnk 2015-02-18 17:09 - 2013-11-20 17:32 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-18 17:09 - 2012-12-24 20:56 - 00001421 _____ () C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-17 17:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-02-17 14:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2015-02-15 16:33 - 2013-05-30 12:14 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\.minecraft 2015-02-14 15:54 - 2014-10-12 18:59 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-14 15:49 - 2012-12-24 21:00 - 00058928 _____ () C:\Users\Łukasz\AppData\Local\GDIPFONTCACHEV1.DAT 2015-02-14 15:20 - 2009-07-14 05:33 - 00271360 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-14 15:18 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak 2015-02-14 15:18 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\SAM.bak 2015-02-13 09:40 - 2015-01-18 14:28 - 02166415 _____ () C:\Users\Łukasz\Desktop\DIAG.LOG 2015-02-13 09:30 - 2015-01-06 17:01 - 00222614 _____ () C:\Windows\DirectX.log 2015-02-11 17:10 - 2014-07-07 13:19 - 00000046 _____ () C:\Users\Łukasz\Desktop\teams.dat 2015-02-11 13:20 - 2013-11-19 08:16 - 00001095 _____ () C:\Users\Łukasz\Desktop\Nowy dokument tekstowy.txt 2015-02-08 15:10 - 2012-12-31 09:46 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\GG 2015-02-08 15:10 - 2012-12-24 20:56 - 00000000 ____D () C:\Users\Łukasz 2015-02-07 20:43 - 2012-12-25 21:44 - 00000000 ____D () C:\Users\Łukasz\Downloads\Video 2015-02-06 18:06 - 2013-03-17 12:32 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\Rovio 2015-02-06 11:46 - 2013-12-26 14:50 - 00000000 ____D () C:\Program Files\Internet Download Manager 2015-02-06 11:20 - 2013-12-26 14:51 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\IDM 2015-02-05 20:01 - 2014-06-20 08:42 - 00000000 ____D () C:\ProgramData\Oracle 2015-02-05 20:01 - 2014-06-20 08:41 - 00000000 ____D () C:\Program Files\Java 2015-02-05 17:58 - 2013-03-23 08:49 - 00000000 ____D () C:\Program Files\Common Files\InstallShield 2015-02-05 14:14 - 2013-03-13 13:02 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-02-05 14:14 - 2013-03-13 13:02 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-01-31 19:04 - 2013-01-07 14:14 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-01-31 19:02 - 2013-04-01 20:04 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2015-01-31 18:41 - 2013-04-01 20:05 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-31 10:56 - 2014-12-18 10:36 - 00001842 _____ () C:\Users\Łukasz\Desktop\IMVU.lnk 2015-01-31 10:53 - 2014-12-18 10:36 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\IMVUClient ==================== Files in the root of some directories ======= 2013-08-14 08:40 - 2013-09-01 13:32 - 0000000 _____ () C:\Users\Łukasz\AppData\Roaming\.NANotifyHere 2014-10-24 18:27 - 2014-10-24 18:27 - 0000287 _____ () C:\Users\Łukasz\AppData\Roaming\removeAllComponents.bat 2015-01-05 17:02 - 2015-01-05 18:32 - 0000098 _____ () C:\Users\Łukasz\AppData\Roaming\theHunterPrimal_LauncherSettings_live.cfg 2014-10-24 17:06 - 2014-10-24 17:06 - 0000130 _____ () C:\Users\Łukasz\AppData\Roaming\tmp_register.bat 2014-10-24 18:26 - 2014-10-24 18:26 - 0000135 _____ () C:\Users\Łukasz\AppData\Roaming\tmp_unregister.bat 2013-09-15 12:00 - 2013-09-15 12:01 - 0010752 _____ () C:\Users\Łukasz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-03-27 21:37 - 2013-03-27 21:37 - 0007604 _____ () C:\Users\Łukasz\AppData\Local\Resmon.ResmonCfg ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-16 15:24 ==================== End Of Log ============================