Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:24-08-2015 Ran by Maciek (administrator) on MACIEK-PC (25-08-2015 00:13:03) Running from C:\Users\Maciek\Downloads Loaded Profiles: Maciek (Available Profiles: Maciek) Platform: Microsoft Windows 7 Ultimate (X86) Language: English (United States) Internet Explorer Version 8 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Realtek) C:\Program Files\REALTEK Wireless LAN Software\RtlService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Realtek Semiconductor Corp.) C:\Program Files\REALTEK Wireless LAN Software\RtWLan.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1206544 2010-03-05] (Intel(R) Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7744032 2009-09-29] (Realtek Semiconductor) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-609451506-4156903826-1265750825-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{79339497-061D-4AE2-AAEE-3264EB5D142E}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{DBB223B2-BAB2-46D3-82B6-6AA83E43C5E1}: [DhcpNameServer] 8.8.8.8 8.8.4.4 FireFox: ======== FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.5\npGoogleUpdate3.dll [2015-08-21] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.5\npGoogleUpdate3.dll [2015-08-21] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-21] CHR Extension: (Google Docs) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-21] CHR Extension: (Google Drive) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-21] CHR Extension: (Video AdBlock for Chrome) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bknbnapaddjdnbilpmlacdkjdkjmbjhd [2015-08-22] CHR Extension: (YouTube) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-21] CHR Extension: (Google Search) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-21] CHR Extension: (Google Sheets) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-21] CHR Extension: (AdBlock) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-08-21] CHR Extension: (Chrome Web Store Payments) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-21] CHR Extension: (Gmail) - C:\Users\Maciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-21] CHR HKLM\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - http://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-609451506-4156903826-1265750825-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - http://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [227600 2010-03-05] () R2 Realtek9xp; C:\Program Files\REALTEK Wireless LAN Software\RtlService.exe [36864 2009-09-01] (Realtek) [File not signed] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 rtl819xp; C:\Windows\System32\DRIVERS\rtl819xp.sys [559208 2015-08-21] (Realtek Semiconductor Corporation ) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-25 00:13 - 2015-08-25 00:13 - 00006680 _____ C:\Users\Maciek\Downloads\FRST.txt 2015-08-25 00:12 - 2015-08-25 00:13 - 00000000 ____D C:\FRST 2015-08-25 00:12 - 2015-08-25 00:12 - 01690112 _____ (Farbar) C:\Users\Maciek\Downloads\FRST.exe 2015-08-24 17:03 - 2015-08-24 17:03 - 00003683 _____ C:\Users\Maciek\Downloads\hijackthis1 2015-08-24 16:47 - 2015-08-24 16:57 - 00004010 _____ C:\Users\Maciek\Downloads\hijackthis.log 2015-08-24 16:47 - 2015-08-24 16:47 - 00388608 _____ (Trend Micro Inc.) C:\Users\Maciek\Downloads\HijackThis.exe 2015-08-24 16:44 - 2015-08-24 16:44 - 00426280 _____ C:\Windows\Minidump\082415-16146-01.dmp 2015-08-24 16:43 - 2015-08-24 16:43 - 00426280 _____ C:\Windows\Minidump\082415-14898-01.dmp 2015-08-24 16:42 - 2015-08-24 16:42 - 00580424 _____ C:\Windows\Minidump\082415-14024-01.dmp 2015-08-24 16:39 - 2015-08-24 16:39 - 00974136 _____ C:\Windows\Minidump\082415-13946-01.dmp 2015-08-24 16:35 - 2015-08-24 16:35 - 01110376 _____ C:\Windows\Minidump\082415-14523-01.dmp 2015-08-24 16:28 - 2015-08-24 16:28 - 00715144 _____ C:\Windows\Minidump\082415-14726-01.dmp 2015-08-24 16:24 - 2015-08-24 16:24 - 00715088 _____ C:\Windows\Minidump\082415-15116-01.dmp 2015-08-24 16:01 - 2015-08-24 16:04 - 355111532 ____R C:\Users\Maciek\Downloads\MomsInControl - Ariella Ferrera, Cherie Deville - A Double Milf Stack,mp4 2015-08-24 15:51 - 2015-08-24 16:00 - 498992915 _____ C:\Users\Maciek\Downloads\MomsBangTeens - Veronica Avluv , Emma Ryder - Yes Maam.mp4 2015-08-24 01:23 - 2015-08-24 01:23 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\Macromedia 2015-08-24 01:23 - 2015-08-24 01:23 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\Adobe 2015-08-24 01:23 - 2015-08-24 01:23 - 00000000 ____D C:\Users\Maciek\AppData\Local\Opera Software 2015-08-24 01:22 - 2015-08-24 01:23 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\NapiProjekt 2015-08-24 01:22 - 2015-08-24 01:23 - 00000000 ____D C:\Program Files\Opera 2015-08-24 01:22 - 2015-08-24 01:22 - 00001093 _____ C:\Users\Public\Desktop\Opera.lnk 2015-08-24 01:22 - 2015-08-24 01:22 - 00001093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2015-08-24 01:22 - 2015-08-24 01:22 - 00000998 _____ C:\Users\Maciek\Desktop\NapiProjekt.lnk 2015-08-24 01:22 - 2015-08-24 01:22 - 00000000 ____D C:\Windows\system32\Macromed 2015-08-24 01:22 - 2015-08-24 01:22 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\Opera Software 2015-08-24 01:22 - 2015-08-24 01:22 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\OpenCandy 2015-08-24 01:22 - 2015-08-24 01:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt 2015-08-24 01:22 - 2015-08-24 01:22 - 00000000 ____D C:\Program Files\NapiProjekt 2015-08-24 01:21 - 2015-08-24 01:21 - 09391243 _____ C:\Users\Maciek\Downloads\setup.zip 2015-08-24 01:05 - 2015-08-24 16:44 - 173306152 _____ C:\Windows\MEMORY.DMP 2015-08-24 01:05 - 2015-08-24 16:44 - 00000000 ____D C:\Windows\Minidump 2015-08-24 01:05 - 2015-08-24 01:05 - 01569184 _____ C:\Windows\Minidump\082415-18220-01.dmp 2015-08-24 00:16 - 2015-08-24 01:23 - 00000000 ____D C:\Users\Maciek\Downloads\A Brilliant Young Mind (2014) 2015-08-24 00:14 - 2015-08-24 00:14 - 00028531 _____ C:\Users\Maciek\Downloads\78456ECD8E9E7CD8BFE06EDC07F90B9142A3B1D0.torrent 2015-08-24 00:11 - 2015-08-24 00:11 - 00100166 _____ C:\Users\Maciek\Downloads\D6FAF0997542FE6936B7CB5773D406FB7D0A1AC9.torrent 2015-08-23 12:43 - 2015-08-23 12:59 - 279623030 _____ C:\Users\Maciek\Downloads\TonightsGirlfriend - Ava Addams, Francesca Le NEW (Naugthty America August 21, 2015) NEW .mp4 2015-08-23 12:30 - 2015-08-23 12:36 - 229525653 _____ C:\Users\Maciek\Downloads\pup_vinna_reed_jt041515_480p_1000.mp4 2015-08-22 15:49 - 2015-08-22 15:49 - 00000000 ____D C:\Intel 2015-08-22 15:49 - 2009-08-18 13:44 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\system32\CSVer.dll 2015-08-22 15:48 - 2009-08-27 19:37 - 02800152 _____ (Intel Corporation) C:\Users\Maciek\Downloads\infinst_autol.exe 2015-08-22 15:48 - 2009-08-27 19:37 - 00087515 _____ C:\Users\Maciek\Downloads\9[1].1.1.1019 pv relnotes.htm 2015-08-22 15:48 - 2009-07-08 17:47 - 00005300 _____ C:\Users\Maciek\Downloads\SWDesc.txt 2015-08-22 15:47 - 2015-08-22 15:48 - 02593712 _____ C:\Users\Maciek\Downloads\Chipset_9.1.1.1019.zip 2015-08-22 14:52 - 2015-08-22 14:52 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\Mozilla 2015-08-22 14:51 - 2015-08-22 14:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack 2015-08-22 14:51 - 2015-08-22 14:51 - 00000000 ____D C:\Program Files\K-Lite Codec Pack 2015-08-22 14:48 - 2015-08-22 14:50 - 39014208 _____ ( ) C:\Users\Maciek\Downloads\K-Lite_Codec_Pack_1136_Full.exe 2015-08-22 14:46 - 2015-08-22 14:46 - 00000606 _____ C:\Users\Maciek\Desktop\KMPlayer.lnk 2015-08-22 14:46 - 2015-08-22 14:46 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer 2015-08-22 14:45 - 2015-08-24 16:36 - 00000000 ____D C:\KMPlayer 2015-08-22 14:44 - 2015-08-22 14:45 - 33837152 _____ (PandoraTV) C:\Users\Maciek\Downloads\3.9.1.138_20150812070707.exe 2015-08-22 14:43 - 2015-08-22 14:49 - 269073180 _____ C:\Users\Maciek\Downloads\nadwcaugustpreston_mob.mp4 2015-08-22 14:35 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-08-22 14:34 - 2011-04-09 08:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-08-22 14:34 - 2011-04-09 08:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-08-22 14:34 - 2010-12-18 07:29 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-08-22 14:27 - 2015-08-22 14:44 - 440623145 _____ C:\Users\Maciek\Downloads\Big Tits Round Asses - Ava Addams (Big Tits Ava Addams gets an Anal Excavation)_480p.mp4 2015-08-22 14:23 - 2015-08-22 14:42 - 368971312 _____ C:\Users\Maciek\Downloads\RealWifeStories - Monique Alexander, Peta Jensen - Our New Maid - Part One.mp4 2015-08-22 01:31 - 2015-08-22 01:31 - 00008192 __RSH C:\BOOTSECT.BAK 2015-08-22 01:31 - 2015-08-21 15:41 - 00000000 ____D C:\Windows\Panther 2015-08-22 01:31 - 2009-07-14 03:38 - 00383562 __RSH C:\bootmgr 2015-08-22 00:38 - 2015-08-22 00:38 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2015-08-22 00:37 - 2015-08-22 00:37 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2015-08-22 00:36 - 2015-08-22 00:36 - 00000000 _____ C:\Windows\ativpsrm.bin 2015-08-22 00:34 - 2015-08-22 00:37 - 00001313 _____ C:\Windows\TSSysprep.log 2015-08-21 19:13 - 2015-08-21 19:13 - 00014721 _____ C:\Users\Maciek\Downloads\PRO100+5.20+%2B+Профессиональная+Библиотека+1.2+%282013%29+PC.torrent 2015-08-21 19:13 - 2015-08-21 19:13 - 00000000 ____D C:\Users\Maciek\Downloads\PRO100 5.20 + Профессиональная Библиотека 1.2 2015-08-21 18:42 - 2015-08-21 18:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2015-08-21 18:42 - 2006-10-26 19:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll 2015-08-21 18:40 - 2015-08-21 18:41 - 12340923 _____ C:\Users\Maciek\Downloads\HDMI_5.0.7000.9.zip 2015-08-21 18:40 - 2015-08-21 18:40 - 00000000 ____D C:\Windows\PCHEALTH 2015-08-21 18:40 - 2015-08-21 18:40 - 00000000 ____D C:\Program Files\Microsoft.NET 2015-08-21 18:40 - 2015-08-21 18:40 - 00000000 ____D C:\Program Files\Microsoft Works 2015-08-21 18:40 - 2015-08-21 18:40 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 2015-08-21 18:40 - 2015-08-21 18:40 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2015-08-21 18:38 - 2015-08-21 18:42 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-08-21 18:38 - 2015-08-21 18:40 - 00000000 ____D C:\Program Files\Microsoft Office 2015-08-21 18:38 - 2015-08-21 18:38 - 00000000 ____D C:\Users\Maciek\AppData\Local\Microsoft Help 2015-08-21 18:38 - 2015-08-21 18:38 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8 2015-08-21 18:37 - 2015-08-21 18:37 - 00000000 __RHD C:\MSOCache 2015-08-21 18:34 - 2015-08-21 18:34 - 00001112 _____ C:\Users\Maciek\Desktop\PRO100 Demo.lnk 2015-08-21 18:34 - 2015-08-21 18:34 - 00001080 _____ C:\Users\Maciek\Desktop\Nowy Rozkrój Demo.lnk 2015-08-21 18:34 - 2015-08-21 18:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PRO100 i NR Demo 2015-08-21 18:31 - 2015-08-21 18:34 - 00000000 ____D C:\Program Files\PRO100 i NR Demo 2015-08-21 18:23 - 2015-08-21 18:23 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\WinRAR 2015-08-21 18:23 - 2015-08-21 18:23 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-08-21 18:23 - 2015-08-21 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-08-21 18:23 - 2015-08-21 18:23 - 00000000 ____D C:\Program Files\WinRAR 2015-08-21 18:21 - 2015-08-21 18:24 - 00002049 _____ C:\RHDSetup.log 2015-08-21 18:21 - 2015-08-21 18:24 - 00000206 _____ C:\setup.log 2015-08-21 18:21 - 2015-08-21 18:24 - 00000000 ___HD C:\Program Files\Temp 2015-08-21 18:21 - 2015-08-21 18:23 - 00000000 ____D C:\Windows\system32\RTCOM 2015-08-21 18:21 - 2015-08-21 18:21 - 00000000 ____D C:\Windows\system32\SRSLabs 2015-08-21 18:21 - 2015-08-21 18:21 - 00000000 ____D C:\Program Files\Realtek 2015-08-21 18:21 - 2015-08-21 18:21 - 00000000 ____D C:\Program Files\Common Files\InstallShield 2015-08-21 18:21 - 2009-09-29 18:28 - 02790944 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll 2015-08-21 18:21 - 2009-09-29 18:28 - 01352736 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll 2015-08-21 18:21 - 2009-09-29 18:28 - 00551456 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl 2015-08-21 18:21 - 2009-09-29 18:28 - 00338464 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll 2015-08-21 18:21 - 2009-09-29 18:28 - 00053280 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInst.dll 2015-08-21 18:21 - 2009-09-29 18:16 - 02776672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys 2015-08-21 18:21 - 2009-09-24 19:40 - 00280576 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll 2015-08-21 18:21 - 2009-08-18 17:16 - 00831488 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2015-08-21 18:21 - 2009-07-02 19:28 - 00347648 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll 2015-08-21 18:21 - 2009-07-02 19:28 - 00164864 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll 2015-08-21 18:21 - 2009-07-02 19:28 - 00073216 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll 2015-08-21 18:21 - 2009-07-02 19:28 - 00059392 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll 2015-08-21 18:21 - 2009-05-04 13:56 - 00306176 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2015-08-21 18:21 - 2009-04-16 18:05 - 01784352 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll 2015-08-21 18:21 - 2009-04-16 10:14 - 00142848 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll 2015-08-21 18:21 - 2009-03-31 14:07 - 00125952 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll 2015-08-21 18:21 - 2009-03-09 05:32 - 00290304 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll 2015-08-21 18:21 - 2009-03-09 05:30 - 00290304 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll 2015-08-21 18:21 - 2008-05-19 18:25 - 01933312 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2015-08-21 18:21 - 2008-04-30 08:48 - 00167936 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll 2015-08-21 18:21 - 2007-07-30 18:26 - 00126976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll 2015-08-21 18:21 - 2007-07-25 09:33 - 00135168 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll 2015-08-21 18:21 - 2007-05-17 11:26 - 00185776 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll 2015-08-21 18:21 - 2006-12-13 10:30 - 00339968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll 2015-08-21 17:16 - 2015-08-21 18:30 - 676107960 _____ C:\Users\Maciek\Downloads\Pro100 4.42 PL.rar 2015-08-21 17:16 - 2015-08-21 17:16 - 00013449 _____ C:\Users\Maciek\Downloads\[kat.cr]pro100.4.42.pl.torrent 2015-08-21 17:15 - 2015-08-21 17:15 - 00002606 _____ C:\Users\Maciek\Desktop\µTorrent.lnk 2015-08-21 17:14 - 2015-08-24 16:34 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\uTorrent 2015-08-21 17:12 - 2015-08-21 17:12 - 00002207 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-21 17:12 - 2015-08-21 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-08-21 17:11 - 2015-08-25 00:09 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-21 17:11 - 2015-08-24 16:16 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-21 17:11 - 2015-08-21 17:12 - 00000000 ____D C:\Users\Maciek\AppData\Local\Google 2015-08-21 17:11 - 2015-08-21 17:12 - 00000000 ____D C:\Program Files\Google 2015-08-21 17:11 - 2015-08-21 17:11 - 00000000 ____D C:\Users\Maciek\AppData\Local\Deployment 2015-08-21 17:11 - 2015-08-21 17:11 - 00000000 ____D C:\Users\Maciek\AppData\Local\Apps\2.0 2015-08-21 17:05 - 2015-08-21 17:05 - 00002063 _____ C:\Users\Public\Desktop\REALTEK Wireless LAN Utility.lnk 2015-08-21 17:05 - 2015-08-21 17:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK Wireless LAN Utility 2015-08-21 17:04 - 2015-08-21 18:21 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2015-08-21 17:04 - 2015-08-21 17:05 - 00000000 ____D C:\Program Files\REALTEK Wireless LAN Software 2015-08-21 17:04 - 2015-08-21 17:04 - 00559208 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtl819xp.sys 2015-08-21 17:04 - 2015-08-21 17:04 - 00000000 ____D C:\Windows\system32\RtlGina 2015-08-21 17:04 - 2009-09-22 14:00 - 00212992 _____ (Realtek) C:\Windows\system32\RtlIhvOid.dll 2015-08-21 17:04 - 2009-03-05 18:54 - 00311296 _____ C:\Windows\system32\Rezip.exe 2015-08-21 17:00 - 2015-08-24 15:45 - 00002094 _____ C:\Windows\PFRO.log 2015-08-21 16:58 - 2015-06-23 13:27 - 00246952 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-08-21 16:56 - 2015-08-21 16:56 - 00000000 ____D C:\Users\Maciek\AppData\Roaming\Intel 2015-08-21 16:55 - 2015-08-22 15:49 - 00000000 ____D C:\Program Files\Intel 2015-08-21 16:55 - 2015-08-21 16:56 - 00006568 _____ C:\Windows\DPINST.LOG 2015-08-21 16:55 - 2015-08-21 16:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2015-08-21 16:55 - 2015-08-21 16:55 - 00000000 ____D C:\ProgramData\Intel 2015-08-21 16:55 - 2015-08-21 16:55 - 00000000 ____D C:\Program Files\Common Files\Intel 2015-08-21 16:55 - 2015-08-21 16:55 - 00000000 ____D C:\Program Files\Cisco 2015-08-21 16:49 - 2012-06-03 00:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-08-21 16:49 - 2012-06-03 00:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-08-21 16:49 - 2012-06-03 00:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-08-21 16:49 - 2012-06-03 00:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-08-21 16:48 - 2015-08-24 15:48 - 00108824 _____ C:\Users\Maciek\AppData\Local\GDIPFONTCACHEV1.DAT 2015-08-21 16:48 - 2012-06-03 00:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-08-21 16:48 - 2012-06-03 00:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-08-21 16:48 - 2012-06-03 00:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-08-21 16:48 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-08-21 16:48 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-08-21 16:37 - 2015-08-21 16:43 - 00018844 _____ C:\Windows\ykinstutil.log 2015-08-21 16:37 - 2015-08-21 16:43 - 00000363 ____R C:\Windows\YukonInstall.log 2015-08-21 16:37 - 2015-08-21 16:37 - 00000000 ____D C:\Program Files\Marvell 2015-08-21 16:36 - 2015-08-21 16:36 - 00000000 ____D C:\SWTOOLS 2015-08-21 15:47 - 2015-08-21 15:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2015-08-21 15:46 - 2015-08-24 16:49 - 00713888 _____ C:\Windows\system32\PerfStringBackup.INI 2015-08-21 15:42 - 2015-08-24 17:02 - 00000000 ____D C:\Users\Maciek\AppData\Local\VirtualStore 2015-08-21 15:42 - 2015-08-21 15:42 - 00001413 _____ C:\Users\Maciek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-08-21 15:41 - 2015-08-21 15:42 - 00000000 ____D C:\Users\Maciek 2015-08-21 15:41 - 2015-08-21 15:41 - 00000020 ___SH C:\Users\Maciek\ntuser.ini 2015-08-21 15:41 - 2009-08-02 10:59 - 00171136 __RSH C:\grldr 2015-08-21 15:41 - 2009-07-14 06:42 - 00000000 ___RD C:\Users\Maciek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-21 15:41 - 2009-07-14 06:37 - 00000000 ___RD C:\Users\Maciek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-08-21 15:40 - 2015-08-25 00:13 - 00444176 _____ C:\Windows\WindowsUpdate.log 2015-08-21 15:40 - 2015-08-21 15:40 - 00000000 __SHD C:\Recovery ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-25 00:09 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-25 00:09 - 2009-07-14 06:39 - 00018463 _____ C:\Windows\setupact.log 2015-08-24 17:03 - 2009-07-14 06:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-24 17:03 - 2009-07-14 06:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-24 01:04 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\LiveKernelReports 2015-08-22 15:51 - 2009-07-14 06:33 - 00412432 _____ C:\Windows\system32\FNTCACHE.DAT 2015-08-22 01:31 - 2009-07-14 06:57 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG 2015-08-22 01:31 - 2009-07-14 06:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2015-08-22 00:37 - 2009-07-14 06:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-08-22 00:37 - 2009-07-14 04:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-22 00:34 - 2009-07-14 09:49 - 00000000 ____D C:\Windows\CSC 2015-08-22 00:34 - 2009-07-14 06:34 - 00001774 _____ C:\Windows\DtcInstall.log 2015-08-21 18:40 - 2009-07-14 09:49 - 00000000 ____D C:\Windows\ShellNew 2015-08-21 18:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild 2015-08-21 18:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-08-21 18:38 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System 2015-08-21 18:38 - 2009-07-14 04:04 - 00000478 _____ C:\Windows\win.ini 2015-08-21 17:54 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache 2015-08-21 16:55 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles 2015-08-21 16:12 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\restore 2015-08-21 15:53 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET Some files in TEMP: ==================== C:\Users\Maciek\AppData\Local\Temp\ose00000.exe ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-08-22 15:36 ==================== End of FRST.txt ============================