Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by ŁYSY (administrator) on 29-08-2013 18:46:56
Running from C:\Users\ŁYSY\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Comodo Security Solutions Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesApp64.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
() C:\Users\ŁYSY\Local Settings\Apps\F.lux\flux.exe
(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(BitTorrent Inc.) C:\Users\ŁYSY\AppData\Roaming\BitTorrent\BitTorrent.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\killswitch.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cce.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1502424 2013-07-08] (COMODO)
HKCU\...\Run: [F.lux] - C:\Users\ŁYSY\Local Settings\Apps\F.lux\flux.exe [966656 2009-08-29] ()
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [KeyScrambler] - C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [508048 2013-07-14] (QFX Software Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files (x86)\InstallShield\2010\Program\0409\blank.htm
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_search_url = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_page_url = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files (x86)\InstallShield\2010\Program\0409\blank.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files (x86)\InstallShield\2010\Program\0409\blank.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{D30478A3-C57C-48C7-9822-63106D8F3097}: [NameServer]8.26.56.26,156.154.70.22

FireFox:
========
FF ProfilePath: C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default
FF Homepage: https://www.google.pl/
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=11.0.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\allegro-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\fbc-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\merlin-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pwn-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-pl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wp-pl.xml
FF Extension: bug643770 - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\bug643770@alice0775.xpi
FF Extension: IplextoALL - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\IplextoALL@ALLPlayer.org.xpi
FF Extension: lazarus - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\lazarus@interclue.com.xpi
FF Extension: stoptube - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\stoptube@kashiif.com.xpi
FF Extension: undoclosedtabsbutton - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\undoclosedtabsbutton@supernova00.biz.xpi
FF Extension: youtubeautoplaystopper - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\youtubeautoplaystopper@grizzlyape.com.xpi
FF Extension: No Name - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
FF Extension: No Name - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\{582195F5-92E7-40a0-A127-DB71295901D7}.xpi
FF Extension: No Name - C:\Users\ŁYSY\AppData\Roaming\Mozilla\Firefox\Profiles\lzr351lu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: No Name - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Docs) - C:\Users\YSY~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\YSY~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\YSY~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\YSY~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (DVDVideoSoft) - C:\Users\YSY~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.2.3.3_0
CHR Extension: (Gmail) - C:\Users\YSY~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70344 2013-04-17] (Comodo Security Solutions Inc.)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6199520 2013-07-08] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [158936 2013-06-18] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2095808 2013-08-01] ()
S4 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [1851088 2013-04-17] (Comodo Security Solutions, Inc.)
S4 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [2570544 2013-04-19] (O&O Software GmbH)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-26] ()
S4 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
S3 TuneUp.Defrag; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [607040 2013-02-06] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [1403200 2011-11-15] (TuneUp Software)
S4 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2013-04-25] (WiseCleaner.com)

==================== Drivers (Whitelisted) ====================

S1 7691617drv; C:\Windows\System32\DRIVERS\7691617drv.sys [556632 2013-08-29] ()
R0 92608138; C:\Windows\System32\DRIVERS\92608138.sys [460888 2013-01-29] (Kaspersky Lab ZAO)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
S3 asusgsb; C:\Windows\System32\drivers\asusgsb.sys [17792 2009-02-17] (ASUSTeK Computer Inc.)
S1 CFRMD; C:\Windows\SysWow64\DRIVERS\CFRMD.sys [37976 2012-09-03] (Windows (R) Win 7 DDK provider)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-06-18] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [708632 2013-07-08] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2013-06-18] (COMODO)
S3 etdrv; C:\Windows\etdrv.sys [25640 2013-03-25] (Windows (R) Server 2003 DDK provider)
S3 etdrv; C:\Windows\etdrv.sys [25640 2013-03-25] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-03-28] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-03-28] (Windows (R) Server 2003 DDK provider)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-03-27] ()
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-03-27] ()
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-06-18] (COMODO)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527360 2007-10-29] (PixArt Imaging Inc.)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
R3 REN2CAP_DRIVER; C:\Windows\System32\drivers\ren2cap.sys [46728 2011-11-07] ()
R3 RTL85n64; C:\Windows\System32\DRIVERS\RTL85n64.sys [378368 2009-06-10] (Realtek)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-05-23] (Duplex Secure Ltd.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [11856 2009-10-14] (TuneUp Software)
S3 WinRing0_1_2_0; C:\Program Files (x86)\PlayClaw3 1\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
S3 WinRing0_1_2_0; C:\Program Files (x86)\PlayClaw3 1\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
U3 awzb5vd2; C:\Windows\System32\Drivers\awzb5vd2.sys [0 ] (Advanced Micro Devices)
S3 12CD1439; \??\C:\Windows\TEMP\12CD1439.sys [x]
S3 131C89BC; \??\C:\Windows\TEMP\131C89BC.sys [x]
S3 AD06C1D; \??\C:\Windows\TEMP\AD06C1D.sys [x]
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [x]
S3 ATP; system32\DRIVERS\cmdatp.sys [x]
S1 CFRMD; system32\DRIVERS\CFRMD.sys [x]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S2 NEWDRIVER; \??\C:\Windows\SysWow64\WinVDEdrv6.sys [x]
S3 pctNdis; system32\DRIVERS\pctNdis64.sys [x]
S3 pctNdisMP; system32\DRIVERS\pctNdis64.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-29 18:36 - 2013-08-29 18:42 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Comodo
2013-08-29 18:18 - 2013-08-29 16:15 - 00102570 _____ C:\Users\ŁYSY\Desktop\CisReport_v6.2.285401.2860_20130829-181459.xml
2013-08-29 18:17 - 2013-08-29 18:17 - 00004561 _____ C:\Users\ŁYSY\Desktop\FIX.REG
2013-08-29 18:14 - 2013-08-29 18:15 - 00038774 _____ C:\Users\ŁYSY\Desktop\CisReport_v6.2.285401.2860_20130829-181454.zip
2013-08-29 18:09 - 2013-08-29 18:09 - 00123403 _____ C:\Users\ŁYSY\Desktop\sfc.txt
2013-08-29 17:43 - 2013-08-29 17:43 - 00283008 _____ C:\Windows\Minidump\082913-23415-01.dmp
2013-08-29 02:33 - 2013-08-29 02:30 - 00556632 _____ C:\Windows\system32\Drivers\7691617drv.sys
2013-08-29 02:33 - 2013-08-23 10:06 - 00000000 ____D C:\Users\ŁYSY\Desktop\CBS
2013-08-29 02:01 - 2013-08-29 02:01 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder (5)
2013-08-29 01:56 - 2013-08-29 01:56 - 00550371 _____ C:\Users\ŁYSY\Desktop\Autoruns.zip
2013-08-29 01:53 - 2013-08-29 02:16 - 181930712 _____ C:\Users\ŁYSY\Desktop\setup_11.0.1.1245.x01_2013_08_29_02_30.exe
2013-08-29 01:52 - 2013-08-29 01:52 - 00000031 _____ C:\Users\ŁYSY\AppData\Roaming\mbam.context.scan
2013-08-29 01:51 - 2013-08-29 01:51 - 02685443 ____R C:\Users\ŁYSY\Desktop\cbs.rar
2013-08-29 00:00 - 2013-08-29 01:52 - 00000000 ____D C:\Users\ŁYSY\Desktop\[BestRepack.net]_Saints Row IV_[R.G. Catalyst]
2013-08-28 23:01 - 2013-08-28 23:01 - 00096427 _____ C:\Users\ŁYSY\Desktop\shexview-x64.zip
2013-08-28 22:59 - 2013-08-28 22:59 - 00000000 ____D C:\Windows\pss
2013-08-28 16:32 - 2013-08-29 18:20 - 00000280 _____ C:\Windows\setupact.log
2013-08-28 16:32 - 2013-08-28 16:32 - 00000000 _____ C:\Windows\setuperr.log
2013-08-28 16:31 - 2013-08-29 18:13 - 00003694 _____ C:\Windows\PFRO.log
2013-08-27 22:37 - 2013-08-27 22:37 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder (4)
2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Secunia PSI
2013-08-27 18:49 - 2013-08-27 18:49 - 00000000 ____D C:\Program Files (x86)\Secunia
2013-08-27 18:29 - 2013-08-27 18:29 - 00026052 _____ C:\Users\ŁYSY\Desktop\cc_20130827_182908.reg
2013-08-27 18:16 - 2013-08-27 18:16 - 00000000 ____D C:\Program Files\CCleaner
2013-08-27 17:09 - 2013-08-27 17:09 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-27 17:09 - 2013-08-27 17:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-27 16:58 - 2013-08-27 16:57 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-08-27 16:57 - 2013-08-27 16:57 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-08-27 16:57 - 2013-08-27 16:57 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-08-27 16:57 - 2013-08-27 16:57 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-08-27 16:57 - 2013-08-27 16:57 - 00000000 ____D C:\Program Files\Java
2013-08-27 16:35 - 2013-08-27 16:35 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Opera Software
2013-08-27 16:35 - 2013-08-27 16:35 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Opera Software
2013-08-27 16:35 - 2013-08-27 16:35 - 00000000 ____D C:\Program Files (x86)\Opera 16
2013-08-27 16:19 - 2013-08-27 16:19 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Deadpool
2013-08-27 12:21 - 2013-08-29 01:32 - 00123346 _____ C:\Windows\WindowsUpdate.log
2013-08-27 03:32 - 2013-08-27 15:36 - 00000000 ____D C:\Users\ŁYSY\Documents\GTA Vice City User Files
2013-08-27 01:52 - 2013-08-27 01:52 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Serato
2013-08-27 01:43 - 2013-08-29 18:41 - 01884514 _____ C:\Windows\system32\Drivers\fvstore.dat
2013-08-26 01:30 - 2013-08-28 19:34 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2013-08-26 01:30 - 2013-08-28 19:33 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\DMCache
2013-08-26 01:30 - 2013-08-26 01:30 - 00000000 ____D C:\Users\ŁYSY\Downloads\Video
2013-08-26 01:30 - 2013-08-26 01:30 - 00000000 ____D C:\Users\ŁYSY\Downloads\Compressed
2013-08-26 01:30 - 2013-08-26 01:30 - 00000000 ____D C:\ProgramData\IDM
2013-08-23 20:18 - 2013-08-23 20:18 - 00123168 _____ C:\Users\YSY~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-23 17:54 - 2013-08-23 21:27 - 00000400 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2013-08-23 17:54 - 2013-08-23 17:54 - 00003208 _____ C:\Windows\System32\Tasks\Wise Turbo Checker
2013-08-23 17:34 - 2013-08-23 17:54 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Wise Care 365
2013-08-23 15:21 - 2013-08-29 18:36 - 00000000 ____D C:\ProgramData\Comodo
2013-08-23 15:21 - 2013-08-23 15:21 - 00000000 ____D C:\Program Files\COMODO
2013-08-23 15:18 - 2013-08-28 16:43 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2013-08-23 15:18 - 2013-08-28 16:42 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-08-23 15:18 - 2013-08-28 16:42 - 00000000 ____D C:\Program Files (x86)\Comodo
2013-08-23 15:18 - 2013-08-23 15:18 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Comodo
2013-08-23 15:18 - 2013-08-23 15:18 - 00000000 ____D C:\ProgramData\Comodo Downloader
2013-08-23 01:46 - 2013-08-23 01:46 - 00000000 ____D C:\ProgramData\Auslogics
2013-08-23 01:46 - 2013-08-23 01:46 - 00000000 ____D C:\Program Files (x86)\Auslogics
2013-08-23 00:29 - 2013-08-23 00:29 - 00000000 ____D C:\Program Files (x86)\NapiProjekt
2013-08-23 00:25 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2013-08-23 00:05 - 2013-08-23 15:58 - 00000000 ____D C:\Users\ŁYSY\Desktop\mp3
2013-08-23 00:02 - 2013-08-23 00:09 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\DVDVideoSoftIEHelpers
2013-08-23 00:01 - 2013-08-23 00:09 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\DVDVideoSoft
2013-08-23 00:01 - 2013-08-23 00:02 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-22 23:21 - 2013-08-22 23:21 - 00001838 _____ C:\Users\ŁYSY\Desktop\aswMBR.txt
2013-08-22 23:21 - 2013-08-22 23:21 - 00000512 _____ C:\Users\ŁYSY\Desktop\MBR.dat
2013-08-22 21:04 - 2013-08-22 21:06 - 00000000 ____D C:\AdwCleaner
2013-08-22 20:12 - 2013-08-22 20:12 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-08-22 20:10 - 2013-08-22 20:10 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-08-22 20:09 - 2013-08-22 20:12 - 00000000 ____D C:\Program Files\ATI Technologies
2013-08-22 20:09 - 2013-08-22 20:09 - 00000000 ____D C:\Program Files\ATI
2013-08-22 17:44 - 2013-08-22 17:44 - 00001473 _____ C:\Windows\system32\oodbs.lor
2013-08-22 02:12 - 2013-08-22 02:12 - 00000000 ____D C:\ProgramData\Steam
2013-08-22 01:26 - 2013-08-22 01:26 - 00000000 ____D C:\Program Files\OO Software
2013-08-22 01:05 - 2013-08-22 01:05 - 00000000 ____D C:\ProgramData\G Data
2013-08-21 22:35 - 2013-08-21 22:35 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg HALionOne
2013-08-20 23:46 - 2013-08-20 23:48 - 20474095 _____ C:\Users\ŁYSY\Desktop\Adobe Reader XI (11.0.03) Remote Code Execution Exploit_youtube_original.mp4
2013-08-20 16:17 - 2013-08-20 16:17 - 00975858 _____ C:\Users\ŁYSY\Desktop\AdwCleaner.exe
2013-08-19 20:43 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe.Back
2013-08-19 20:41 - 2008-03-18 04:07 - 00275360 _____ (Microsoft Corporation) C:\Windows\system32\DreamScene.dll
2013-08-19 19:28 - 2013-08-19 21:02 - 00000000 ____D C:\Program Files (x86)\Sunrise Seven
2013-08-17 20:33 - 2013-08-17 20:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 20:22 - 2013-08-23 00:29 - 00000000 ____D C:\Users\YSY~1\AppData\Local\ALLConverter
2013-08-17 20:22 - 2013-08-23 00:29 - 00000000 ____D C:\Program Files (x86)\ALLConverter PRO
2013-08-17 20:22 - 2013-04-05 21:26 - 00276992 _____ (IntelleSoft) C:\Windows\SysWOW64\BugTrap.dll
2013-08-16 21:32 - 2013-08-17 02:19 - 00000000 ____D C:\Users\ŁYSY\Desktop\tort
2013-08-12 18:05 - 2013-08-23 00:25 - 00000000 ____D C:\Program Files\Revo Group
2013-08-11 19:26 - 2013-08-11 19:26 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder (2)
2013-08-11 19:23 - 2013-08-11 19:23 - 00000000 ____D C:\Users\ŁYSY\Desktop\SAVY
2013-08-11 17:38 - 2013-08-11 17:38 - 00000000 ____D C:\Users\ŁYSY\Downloads\Presonus Studio One 2.5.1 WIN OSX Incl. Keygen -AiR
2013-08-11 17:34 - 2013-08-11 17:34 - 00000816 _____ C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2013-08-11 17:33 - 2013-08-29 18:45 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\BitTorrent
2013-08-10 21:10 - 2013-08-25 01:49 - 00000000 ____D C:\Users\YSY~1\AppData\Local\WMTools Downloaded Files
2013-08-10 21:10 - 2013-08-10 21:10 - 00000000 ____D C:\Program Files (x86)\Movie Maker 2.6
2013-08-10 18:39 - 2013-08-23 00:12 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder
2013-08-09 22:26 - 2013-08-09 22:26 - 09139376 _____ C:\Users\ŁYSY\Desktop\Thunder DV8 ukulele.wav
2013-08-07 23:05 - 2013-08-07 23:05 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-07 20:09 - 2013-08-07 20:27 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder (3)
2013-08-07 19:23 - 2013-08-07 19:23 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2013-08-07 19:23 - 2013-08-07 19:23 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-08-06 20:07 - 2013-08-06 20:07 - 44739556 _____ C:\Users\ŁYSY\Desktop\New Balance - Up & Down.wav
2013-08-06 18:36 - 2013-08-18 14:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-06 18:36 - 2013-08-06 18:36 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-05 20:35 - 2013-08-16 14:04 - 00000000 __SHD C:\DrWeb Quarantine
2013-08-04 22:11 - 2013-08-10 16:29 - 00000000 ____D C:\Users\ŁYSY\Desktop\RAP
2013-08-04 18:57 - 2013-08-04 18:57 - 00000000 _____ C:\Users\ŁYSY\Desktop\46735187.txt
2013-08-04 17:05 - 2013-08-04 17:05 - 00001106 _____ C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk

==================== One Month Modified Files and Folders =======

2013-08-29 18:46 - 2013-06-03 15:23 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Skype
2013-08-29 18:45 - 2013-08-29 18:44 - 01579080 _____ (Farbar) C:\Users\ŁYSY\Desktop\FRST64.exe
2013-08-29 18:45 - 2013-08-11 17:33 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\BitTorrent
2013-08-29 18:42 - 2013-08-29 18:36 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Comodo
2013-08-29 18:41 - 2013-08-27 01:43 - 01884514 _____ C:\Windows\system32\Drivers\fvstore.dat
2013-08-29 18:40 - 2013-06-20 22:24 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat
2013-08-29 18:36 - 2013-08-23 15:21 - 00000000 ____D C:\ProgramData\Comodo
2013-08-29 18:28 - 2013-02-15 04:44 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-29 18:27 - 2009-07-14 06:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-29 18:27 - 2009-07-14 06:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-29 18:20 - 2013-08-28 16:32 - 00000280 _____ C:\Windows\setupact.log
2013-08-29 18:20 - 2013-02-15 04:44 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-29 18:20 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-29 18:17 - 2013-08-29 18:17 - 00004561 _____ C:\Users\ŁYSY\Desktop\FIX.REG
2013-08-29 18:17 - 2013-04-25 12:31 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-29 18:15 - 2013-08-29 18:14 - 00038774 _____ C:\Users\ŁYSY\Desktop\CisReport_v6.2.285401.2860_20130829-181454.zip
2013-08-29 18:13 - 2013-08-28 16:31 - 00003694 _____ C:\Windows\PFRO.log
2013-08-29 18:09 - 2013-08-29 18:09 - 00123403 _____ C:\Users\ŁYSY\Desktop\sfc.txt
2013-08-29 18:08 - 2013-07-22 21:22 - 00123403 _____ C:\Windows\system32\sfc.txt
2013-08-29 17:43 - 2013-08-29 17:43 - 00283008 _____ C:\Windows\Minidump\082913-23415-01.dmp
2013-08-29 17:43 - 2013-02-09 17:19 - 00000000 ____D C:\Windows\Minidump
2013-08-29 16:15 - 2013-08-29 18:18 - 00102570 _____ C:\Users\ŁYSY\Desktop\CisReport_v6.2.285401.2860_20130829-181459.xml
2013-08-29 02:30 - 2013-08-29 02:33 - 00556632 _____ C:\Windows\system32\Drivers\7691617drv.sys
2013-08-29 02:16 - 2013-08-29 01:53 - 181930712 _____ C:\Users\ŁYSY\Desktop\setup_11.0.1.1245.x01_2013_08_29_02_30.exe
2013-08-29 02:09 - 2013-03-14 14:41 - 00000000 ____D C:\Windows\System32\Tasks\Doctor Web
2013-08-29 02:01 - 2013-08-29 02:01 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder (5)
2013-08-29 01:56 - 2013-08-29 01:56 - 00550371 _____ C:\Users\ŁYSY\Desktop\Autoruns.zip
2013-08-29 01:52 - 2013-08-29 01:52 - 00000031 _____ C:\Users\ŁYSY\AppData\Roaming\mbam.context.scan
2013-08-29 01:52 - 2013-08-29 00:00 - 00000000 ____D C:\Users\ŁYSY\Desktop\[BestRepack.net]_Saints Row IV_[R.G. Catalyst]
2013-08-29 01:51 - 2013-08-29 01:51 - 02685443 ____R C:\Users\ŁYSY\Desktop\cbs.rar
2013-08-29 01:33 - 2013-06-12 05:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-29 01:32 - 2013-08-27 12:21 - 00123346 _____ C:\Windows\WindowsUpdate.log
2013-08-29 01:32 - 2013-06-09 17:45 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-28 23:34 - 2013-04-22 20:42 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Media Player Classic
2013-08-28 23:02 - 2013-02-05 23:24 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\GG
2013-08-28 23:01 - 2013-08-28 23:01 - 00096427 _____ C:\Users\ŁYSY\Desktop\shexview-x64.zip
2013-08-28 22:59 - 2013-08-28 22:59 - 00000000 ____D C:\Windows\pss
2013-08-28 19:34 - 2013-08-26 01:30 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2013-08-28 19:33 - 2013-08-26 01:30 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\DMCache
2013-08-28 17:06 - 2013-06-03 15:23 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-28 17:06 - 2013-06-02 15:24 - 00000000 ____D C:\ProgramData\Skype
2013-08-28 16:43 - 2013-08-23 15:18 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2013-08-28 16:42 - 2013-08-23 15:18 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-08-28 16:42 - 2013-08-23 15:18 - 00000000 ____D C:\Program Files (x86)\Comodo
2013-08-28 16:32 - 2013-08-28 16:32 - 00000000 _____ C:\Windows\setuperr.log
2013-08-28 01:52 - 2013-02-09 21:52 - 00033992 _____ C:\Users\ŁYSY\Documents\PlayClaw.txt
2013-08-28 01:13 - 2013-03-28 23:26 - 00000000 ___RD C:\Users\ŁYSY\Desktop\GRY
2013-08-27 22:37 - 2013-08-27 22:37 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder (4)
2013-08-27 21:15 - 2013-02-21 16:19 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-27 19:22 - 2013-02-22 22:15 - 00000000 ___RD C:\Users\ŁYSY\Desktop\Programy
2013-08-27 19:05 - 2013-02-06 00:27 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2010
2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Secunia PSI
2013-08-27 18:49 - 2013-08-27 18:49 - 00000000 ____D C:\Program Files (x86)\Secunia
2013-08-27 18:29 - 2013-08-27 18:29 - 00026052 _____ C:\Users\ŁYSY\Desktop\cc_20130827_182908.reg
2013-08-27 18:16 - 2013-08-27 18:16 - 00000000 ____D C:\Program Files\CCleaner
2013-08-27 17:09 - 2013-08-27 17:09 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-27 17:09 - 2013-08-27 17:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-27 16:57 - 2013-08-27 16:58 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-08-27 16:57 - 2013-08-27 16:57 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-08-27 16:57 - 2013-08-27 16:57 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-08-27 16:57 - 2013-08-27 16:57 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-08-27 16:57 - 2013-08-27 16:57 - 00000000 ____D C:\Program Files\Java
2013-08-27 16:35 - 2013-08-27 16:35 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Opera Software
2013-08-27 16:35 - 2013-08-27 16:35 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Opera Software
2013-08-27 16:35 - 2013-08-27 16:35 - 00000000 ____D C:\Program Files (x86)\Opera 16
2013-08-27 16:20 - 2013-03-16 18:34 - 00000000 ____D C:\Users\YSY~1\AppData\Local\SKIDROW
2013-08-27 16:20 - 2013-02-05 03:04 - 00000000 ____D C:\Users\ŁYSY\Documents\My Games
2013-08-27 16:19 - 2013-08-27 16:19 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Deadpool
2013-08-27 15:36 - 2013-08-27 03:32 - 00000000 ____D C:\Users\ŁYSY\Documents\GTA Vice City User Files
2013-08-27 03:34 - 2013-02-05 18:25 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\AIMP3
2013-08-27 03:31 - 2013-05-22 18:11 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-08-27 02:13 - 2013-06-01 12:30 - 00000000 ____D C:\Users\ŁYSY\Desktop\Video
2013-08-27 01:52 - 2013-08-27 01:52 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Serato
2013-08-27 00:26 - 2013-07-24 19:19 - 00003798 _____ C:\Windows\System32\Tasks\ALL Update
2013-08-26 01:54 - 2013-06-12 03:44 - 00000000 ___HD C:\VTRoot
2013-08-26 01:30 - 2013-08-26 01:30 - 00000000 ____D C:\Users\ŁYSY\Downloads\Video
2013-08-26 01:30 - 2013-08-26 01:30 - 00000000 ____D C:\Users\ŁYSY\Downloads\Compressed
2013-08-26 01:30 - 2013-08-26 01:30 - 00000000 ____D C:\ProgramData\IDM
2013-08-25 02:41 - 2013-07-08 03:50 - 00000658 _____ C:\Users\ŁYSY\Desktop\DNSDataView.cfg
2013-08-25 01:49 - 2013-08-10 21:10 - 00000000 ____D C:\Users\YSY~1\AppData\Local\WMTools Downloaded Files
2013-08-24 18:52 - 2013-06-18 02:12 - 00005120 _____ C:\Users\YSY~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-23 21:27 - 2013-08-23 17:54 - 00000400 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2013-08-23 20:40 - 2013-03-15 21:37 - 00000000 ____D C:\Program Files (x86)\FinalWire
2013-08-23 20:18 - 2013-08-23 20:18 - 00123168 _____ C:\Users\YSY~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-23 18:06 - 2013-06-12 05:40 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Microsoft Help
2013-08-23 17:54 - 2013-08-23 17:54 - 00003208 _____ C:\Windows\System32\Tasks\Wise Turbo Checker
2013-08-23 17:54 - 2013-08-23 17:34 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Wise Care 365
2013-08-23 17:34 - 2013-06-04 02:44 - 00000000 ____D C:\Program Files (x86)\Wise
2013-08-23 15:58 - 2013-08-23 00:05 - 00000000 ____D C:\Users\ŁYSY\Desktop\mp3
2013-08-23 15:22 - 2013-06-20 22:22 - 00000000 ___SD C:\ProgramData\Shared Space
2013-08-23 15:21 - 2013-08-23 15:21 - 00000000 ____D C:\Program Files\COMODO
2013-08-23 15:21 - 2013-02-06 01:49 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-23 15:18 - 2013-08-23 15:18 - 00000000 ____D C:\Users\YSY~1\AppData\Local\Comodo
2013-08-23 15:18 - 2013-08-23 15:18 - 00000000 ____D C:\ProgramData\Comodo Downloader
2013-08-23 10:06 - 2013-08-29 02:33 - 00000000 ____D C:\Users\ŁYSY\Desktop\CBS
2013-08-23 01:46 - 2013-08-23 01:46 - 00000000 ____D C:\ProgramData\Auslogics
2013-08-23 01:46 - 2013-08-23 01:46 - 00000000 ____D C:\Program Files (x86)\Auslogics
2013-08-23 00:29 - 2013-08-23 00:29 - 00000000 ____D C:\Program Files (x86)\NapiProjekt
2013-08-23 00:29 - 2013-08-17 20:22 - 00000000 ____D C:\Users\YSY~1\AppData\Local\ALLConverter
2013-08-23 00:29 - 2013-08-17 20:22 - 00000000 ____D C:\Program Files (x86)\ALLConverter PRO
2013-08-23 00:28 - 2013-07-24 02:55 - 00000000 ____D C:\Users\YSY~1\AppData\Local\ALLPlayer
2013-08-23 00:28 - 2013-07-24 02:55 - 00000000 ____D C:\Program Files (x86)\ALLPlayer
2013-08-23 00:25 - 2013-08-12 18:05 - 00000000 ____D C:\Program Files\Revo Group
2013-08-23 00:20 - 2013-05-28 13:03 - 00000000 ____D C:\Users\ŁYSY\Desktop\Do fl studio
2013-08-23 00:12 - 2013-08-10 18:39 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder
2013-08-23 00:09 - 2013-08-23 00:02 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\DVDVideoSoftIEHelpers
2013-08-23 00:09 - 2013-08-23 00:01 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\DVDVideoSoft
2013-08-23 00:02 - 2013-08-23 00:01 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-22 23:21 - 2013-08-22 23:21 - 00001838 _____ C:\Users\ŁYSY\Desktop\aswMBR.txt
2013-08-22 23:21 - 2013-08-22 23:21 - 00000512 _____ C:\Users\ŁYSY\Desktop\MBR.dat
2013-08-22 21:06 - 2013-08-22 21:04 - 00000000 ____D C:\AdwCleaner
2013-08-22 20:12 - 2013-08-22 20:12 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-08-22 20:12 - 2013-08-22 20:09 - 00000000 ____D C:\Program Files\ATI Technologies
2013-08-22 20:12 - 2013-02-05 02:37 - 00000000 ____D C:\ProgramData\AMD
2013-08-22 20:10 - 2013-08-22 20:10 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-08-22 20:09 - 2013-08-22 20:09 - 00000000 ____D C:\Program Files\ATI
2013-08-22 20:02 - 2013-07-15 15:08 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Cyberlink
2013-08-22 20:02 - 2013-07-15 15:08 - 00000000 ____D C:\ProgramData\CyberLink
2013-08-22 20:02 - 2013-02-05 03:08 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-22 19:03 - 2013-03-14 14:18 - 00000000 ____D C:\ProgramData\Doctor Web
2013-08-22 18:57 - 2013-02-14 22:46 - 00000000 ____D C:\Program Files (x86)\Steinberg
2013-08-22 17:44 - 2013-08-22 17:44 - 00001473 _____ C:\Windows\system32\oodbs.lor
2013-08-22 02:12 - 2013-08-22 02:12 - 00000000 ____D C:\ProgramData\Steam
2013-08-22 02:10 - 2012-09-02 11:03 - 00000000 ___RD C:\Users\ŁYSY\Desktop\Ghotic 3 PL
2013-08-22 01:26 - 2013-08-22 01:26 - 00000000 ____D C:\Program Files\OO Software
2013-08-22 01:05 - 2013-08-22 01:05 - 00000000 ____D C:\ProgramData\G Data
2013-08-22 00:38 - 2013-06-20 18:51 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-08-21 22:35 - 2013-08-21 22:35 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg HALionOne
2013-08-21 03:34 - 2013-04-25 12:31 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 03:34 - 2013-04-25 12:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-21 03:34 - 2013-04-25 12:31 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-20 23:48 - 2013-08-20 23:46 - 20474095 _____ C:\Users\ŁYSY\Desktop\Adobe Reader XI (11.0.03) Remote Code Execution Exploit_youtube_original.mp4
2013-08-20 17:37 - 2013-07-06 01:03 - 00000000 ____D C:\Users\YSY~1\AppData\Local\EA Games
2013-08-20 16:17 - 2013-08-20 16:17 - 00975858 _____ C:\Users\ŁYSY\Desktop\AdwCleaner.exe
2013-08-19 21:03 - 2013-05-20 19:27 - 00000000 ____D C:\Windows\rescache
2013-08-19 21:03 - 2013-02-05 19:06 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer_.exe.Back.4.58288180389576
2013-08-19 21:02 - 2013-08-19 19:28 - 00000000 ____D C:\Program Files (x86)\Sunrise Seven
2013-08-19 20:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Web
2013-08-18 20:11 - 2013-02-05 03:02 - 00000000 ____D C:\Users\ŁYSY\Documents\VirtualDJ
2013-08-18 14:02 - 2013-08-06 18:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-17 20:33 - 2013-08-17 20:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 02:42 - 2013-04-21 10:10 - 00000000 ____D C:\Users\ŁYSY\Desktop\YT FLAC
2013-08-17 02:19 - 2013-08-16 21:32 - 00000000 ____D C:\Users\ŁYSY\Desktop\tort
2013-08-16 14:04 - 2013-08-05 20:35 - 00000000 __SHD C:\DrWeb Quarantine
2013-08-13 01:09 - 2013-03-31 12:52 - 00000000 ___RD C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-13 01:07 - 2013-02-23 22:54 - 00000000 ____D C:\Program Files\VS Revo Group
2013-08-12 03:11 - 2013-02-05 02:33 - 00000000 ____D C:\Users\ŁYSY
2013-08-11 19:35 - 2013-04-25 17:56 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\FlowStone
2013-08-11 19:26 - 2013-08-11 19:26 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder (2)
2013-08-11 19:23 - 2013-08-11 19:23 - 00000000 ____D C:\Users\ŁYSY\Desktop\SAVY
2013-08-11 17:38 - 2013-08-11 17:38 - 00000000 ____D C:\Users\ŁYSY\Downloads\Presonus Studio One 2.5.1 WIN OSX Incl. Keygen -AiR
2013-08-11 17:34 - 2013-08-11 17:34 - 00000816 _____ C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2013-08-11 16:08 - 2013-02-05 18:25 - 00000000 ____D C:\Program Files (x86)\AIMP3
2013-08-10 21:45 - 2013-03-16 17:28 - 00000116 _____ C:\Windows\NeroDigital.ini
2013-08-10 21:10 - 2013-08-10 21:10 - 00000000 ____D C:\Program Files (x86)\Movie Maker 2.6
2013-08-10 20:25 - 2013-02-16 15:51 - 00000000 ____D C:\Program Files (x86)\VirtualDJ
2013-08-10 16:29 - 2013-08-04 22:11 - 00000000 ____D C:\Users\ŁYSY\Desktop\RAP
2013-08-09 22:26 - 2013-08-09 22:26 - 09139376 _____ C:\Users\ŁYSY\Desktop\Thunder DV8 ukulele.wav
2013-08-07 23:05 - 2013-08-07 23:05 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-07 22:31 - 2013-07-24 03:08 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\ImgBurn
2013-08-07 20:27 - 2013-08-07 20:09 - 00000000 ____D C:\Users\ŁYSY\Desktop\Nowy folder (3)
2013-08-07 19:23 - 2013-08-07 19:23 - 00000000 ____D C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2013-08-07 19:23 - 2013-08-07 19:23 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-08-06 20:07 - 2013-08-06 20:07 - 44739556 _____ C:\Users\ŁYSY\Desktop\New Balance - Up & Down.wav
2013-08-06 18:36 - 2013-08-06 18:36 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-05 21:53 - 2013-07-24 23:11 - 00000000 ____D C:\Users\ŁYSY\Documents\GTA San Andreas User Files
2013-08-04 18:57 - 2013-08-04 18:57 - 00000000 _____ C:\Users\ŁYSY\Desktop\46735187.txt
2013-08-04 17:05 - 2013-08-04 17:05 - 00001106 _____ C:\Users\ŁYSY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2013-08-04 17:05 - 2013-02-05 23:24 - 00000000 ____D C:\Users\YSY~1\AppData\Local\GG
2013-07-31 18:47 - 2011-08-01 20:16 - 00061301 _____ C:\Users\ŁYSY\Desktop\nacht.zip

Files to move or delete:
====================
C:\Users\YSY~1\AppData\Local\Temp\SkypeSetup.exe
C:\Users\YSY~1\AppData\Local\Temp\RarSFX0\7691617.exe
C:\Users\YSY~1\AppData\Local\Temp\RarSFX0\7691617rar.exe
C:\Users\YSY~1\AppData\Local\Temp\RarSFX0\helper64.exe
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\CbsProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\CompatProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\DismCore.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\DismCorePS.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\DismHost.exe
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\DismProv.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\DmiProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\FolderProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\IntlProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\LogProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\MsiProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\OSProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\SmiProvider.dll
C:\Users\YSY~1\AppData\Local\Temp\4AFD26A0-A8FB-405B-8A4A-55649AEA393F\TransmogProvider.dll
C:\Windows\Tasks\{00866F5C-419F-4C1D-BEBF-58B615814BEF}.job
C:\Windows\Tasks\{5620D72C-304F-49B0-A320-97B09F4ACC07}.job
C:\Windows\Tasks\{B7CCDA3A-DCB0-4055-9B06-0AF441888BB0}.job

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 19:24

==================== End Of Log ============================