[code] HitmanPro 3.7.15.281 www.hitmanpro.com Computer name . . . . : POTWÓR Windows . . . . . . . : 6.1.1.7601.X64/4 User name . . . . . . : Potwór\Marcin UAC . . . . . . . . . : Disabled License . . . . . . . : Free Scan date . . . . . . : 2017-01-05 22:43:44 Scan mode . . . . . . : Normal Scan duration . . . . : 18m 26s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 2 Traces . . . . . . . : 4 Objects scanned . . . : 1 636 506 Files scanned . . . . : 60 099 Remnants scanned . . : 316 920 files / 1 259 487 keys Malware _____________________________________________________________________ C:\Users\Marcin\Desktop\MARCIN\Programy\codec_pack_214302_ff.exe Size . . . . . . . : 341 016 bytes Age . . . . . . . : 1306.1 days (2013-06-09 19:33:19) Entropy . . . . . : 7.9 SHA-256 . . . . . : 9483354978A29591E7A13D14FD4077BC564F9345D4C1309A47FC3A30EA827357 RSA Key Size . . . : 2048 Authenticode . . . : Valid > Kaspersky . . . . : not-a-virus:HEUR:AdWare.NSIS.TornTV.gen Fuzzy . . . . . . : 107.0 C:\Users\Marcin\Desktop\MARCIN\Programy\LUMION5.0\LUMION5.0\lumion.5.pro-patch.exe Size . . . . . . . : 609 792 bytes Age . . . . . . . : 109.1 days (2016-09-18 19:55:21) Entropy . . . . . : 8.0 SHA-256 . . . . . : 24D6BD6FDEA6FA1BBBC1F1E63D6921FB8DA0730E99E8C74EFAB53031A6E22F94 > Bitdefender . . . : Gen:Variant.Strictor.71042 Fuzzy . . . . . . : 114.0 Suspicious files ____________________________________________________________ C:\Users\Marcin\Desktop\FRST\FRST64.exe Size . . . . . . . : 2 418 176 bytes Age . . . . . . . : 0.6 days (2017-01-05 09:12:57) Entropy . . . . . : 7.6 SHA-256 . . . . . : 7B1EAFF262CB947F39609AA61124E60FD28DCD3CCD592DA5826588D3ECDA1E8F Needs elevation . : Yes Fuzzy . . . . . . : 24.0 Program has no publisher information but prompts the user for permission elevation. Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs. Authors name is missing in version info. This is not common to most programs. Version control is missing. This file is probably created by an individual. This is not typical for most programs. Time indicates that the file appeared recently on this computer. Forensic Cluster 0.0s C:\Users\Marcin\Desktop\FRST\FRST64.exe 17.7s C:\Users\Marcin\Desktop\GMER\k0cyn52d.exe Potential Unwanted Programs _________________________________________________ HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\Software\Softonic\ (Softonic) [/code]