Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2013 01 Ran by SevenPro (administrator) on SEVENPRONET on 11-11-2013 21:36:34 Running from C:\Users\SevenPro\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe () C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\AlarmClock.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (sms-express.com) D:\Program Files (x86)\Gadu-Gadu\gg.exe (Farbar) C:\Users\SevenPro\Desktop\FRST64 (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor) HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [4035152 2011-09-22] (ESET) HKLM-x32\...\RunOnce: [EasyTuneVI] - C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [20480 2007-07-26] () HKCU\...\Run: [Gadu-Gadu] - D:\Program Files (x86)\Gadu-Gadu\gg.exe [790528 2005-03-31] (sms-express.com) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) Startup: C:\Users\SevenPro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: GBHO.BHO - {45d30484-7ded-43d9-957a-d2fd1f046511} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Hosts: 127.0.0.1 localhost Tcpip\Parameters: [DhcpNameServer] 79.173.40.13 79.173.40.16 FireFox: ======== FF ProfilePath: C:\Users\SevenPro\AppData\Roaming\Mozilla\Firefox\Profiles\d147k9k1.default FF SelectedSearchEngine: Google FF Homepage: hxxp://www.onet.pl/ FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Adblock Plus - C:\Users\SevenPro\AppData\Roaming\Mozilla\Firefox\Profiles\d147k9k1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird ==================== Services (Whitelisted) ================= S2 cpextender; D:\Program Files (x86)\slimsvc.exe [355496 2011-10-18] (Check Point Software Technologies) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [974944 2011-09-22] (ESET) R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) ==================== Drivers (Whitelisted) ==================== R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [202576 2011-08-09] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [146432 2011-08-04] (ESET) R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [187632 2011-08-04] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [38288 2011-08-04] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62496 2011-08-04] (ESET) R3 gdrv; C:\Windows\gdrv.sys [25640 2013-11-11] (Windows (R) Server 2003 DDK provider) R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-11-11] () S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R3 VNA; C:\Windows\System32\DRIVERS\vna.sys [161256 2011-10-18] (Check Point Software Technologies) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-11 21:34 - 2013-11-11 21:34 - 00071476 _____ C:\Users\SevenPro\Desktop\Extras.Txt 2013-11-11 21:33 - 2013-11-11 21:33 - 00080522 _____ C:\Users\SevenPro\Desktop\OTL.Txt 2013-11-11 21:27 - 2013-11-11 21:26 - 01957590 _____ (Farbar) C:\Users\SevenPro\Desktop\FRST64 (1).exe 2013-11-11 21:26 - 2013-11-11 21:26 - 01957590 _____ (Farbar) C:\Users\SevenPro\Downloads\FRST64 (1).exe 2013-11-11 17:39 - 2013-11-11 17:39 - 00001033 _____ C:\Users\SevenPro\Desktop\HD Tune Pro.lnk 2013-11-11 17:39 - 2013-11-11 17:39 - 00000000 ____D C:\Users\SevenPro\AppData\Roaming\HD Tune Pro 2013-11-11 17:39 - 2013-11-11 17:39 - 00000000 ____D C:\Program Files (x86)\HD Tune Pro 2013-11-10 11:48 - 2013-11-10 11:48 - 00000926 _____ C:\Users\SevenPro\Desktop\HD Tune.lnk 2013-11-10 11:48 - 2013-11-10 11:48 - 00000000 ____D C:\Program Files (x86)\HD Tune 2013-11-10 00:47 - 2013-11-10 00:47 - 00000000 ____D C:\ProgramData\ESET 2013-11-08 22:17 - 2013-11-08 22:34 - 00000000 ____D C:\Users\SevenPro\Desktop\mbar 2013-11-08 22:17 - 2013-11-08 22:34 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-11-08 22:17 - 2013-11-08 22:17 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2013-11-08 22:17 - 2013-11-08 22:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2013-11-08 22:10 - 2013-11-08 22:11 - 12576792 _____ (Malwarebytes Corp.) C:\Users\SevenPro\Desktop\mbar-1.07.0.1007.exe 2013-11-08 22:00 - 2013-11-08 22:00 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\SevenPro\Desktop\tdsskiller.exe 2013-11-06 18:38 - 2013-11-06 18:38 - 00000000 ____D C:\_OTL 2013-11-06 18:13 - 2013-11-06 18:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-05 21:13 - 2013-11-05 21:13 - 03538944 _____ C:\Users\SevenPro\Desktop\RogueKiller.exe 2013-11-04 20:18 - 2013-11-04 20:18 - 00032228 _____ C:\Users\SevenPro\Downloads\FRST.txt 2013-11-04 20:17 - 2013-11-04 20:18 - 00023361 _____ C:\Users\SevenPro\Downloads\Addition.txt 2013-11-04 20:13 - 2013-11-04 20:13 - 00000000 ____D C:\Users\SevenPro\AppData\Roaming\Oracle 2013-11-04 20:11 - 2013-11-04 20:11 - 00000000 ____D C:\ProgramData\Oracle 2013-11-04 20:10 - 2013-11-04 20:10 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-04 20:10 - 2013-11-04 20:10 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-04 20:10 - 2013-11-04 20:10 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-04 20:10 - 2013-11-04 20:10 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-04 20:10 - 2013-11-04 20:10 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-04 19:47 - 2013-11-04 19:47 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-11-04 19:38 - 2013-11-04 19:38 - 00448512 _____ (OldTimer Tools) C:\Users\SevenPro\Desktop\TFC.exe 2013-11-04 19:22 - 2013-11-04 19:23 - 00000000 ____D C:\AdwCleaner 2013-11-04 19:20 - 2013-11-04 19:20 - 01073258 _____ C:\Users\SevenPro\Desktop\AdwCleaner.exe 2013-11-03 20:47 - 2013-11-04 18:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-10-29 22:05 - 2013-10-29 22:05 - 00730112 _____ C:\Users\SevenPro\Downloads\cpextender.msi 2013-10-27 08:15 - 2013-11-11 08:23 - 00001400 _____ C:\Windows\setupact.log 2013-10-26 20:28 - 2013-10-26 20:28 - 00000000 ____D C:\FRST 2013-10-26 20:21 - 2013-10-26 20:21 - 00602112 _____ (OldTimer Tools) C:\Users\SevenPro\Desktop\OTL.exe 2013-10-26 20:15 - 2013-10-26 20:15 - 00377856 _____ C:\Users\SevenPro\Desktop\GMER.exe ==================== One Month Modified Files and Folders ======= 2013-11-11 21:34 - 2013-11-11 21:34 - 00071476 _____ C:\Users\SevenPro\Desktop\Extras.Txt 2013-11-11 21:33 - 2013-11-11 21:33 - 00080522 _____ C:\Users\SevenPro\Desktop\OTL.Txt 2013-11-11 21:26 - 2013-11-11 21:27 - 01957590 _____ (Farbar) C:\Users\SevenPro\Desktop\FRST64 (1).exe 2013-11-11 21:26 - 2013-11-11 21:26 - 01957590 _____ (Farbar) C:\Users\SevenPro\Downloads\FRST64 (1).exe 2013-11-11 20:41 - 2013-04-03 16:18 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-11 19:09 - 2009-07-14 18:55 - 00697896 _____ C:\Windows\system32\perfh015.dat 2013-11-11 19:09 - 2009-07-14 18:55 - 00135006 _____ C:\Windows\system32\perfc015.dat 2013-11-11 19:09 - 2009-07-14 06:13 - 01549932 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-11 17:39 - 2013-11-11 17:39 - 00001033 _____ C:\Users\SevenPro\Desktop\HD Tune Pro.lnk 2013-11-11 17:39 - 2013-11-11 17:39 - 00000000 ____D C:\Users\SevenPro\AppData\Roaming\HD Tune Pro 2013-11-11 17:39 - 2013-11-11 17:39 - 00000000 ____D C:\Program Files (x86)\HD Tune Pro 2013-11-11 08:38 - 2009-07-14 05:45 - 00015472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-11 08:38 - 2009-07-14 05:45 - 00015472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-11 08:32 - 2011-09-20 10:59 - 01368806 _____ C:\Windows\WindowsUpdate.log 2013-11-11 08:31 - 2011-09-20 11:09 - 00030528 _____ C:\Windows\GVTDrv64.sys 2013-11-11 08:31 - 2011-09-20 11:09 - 00000004 _____ C:\Windows\SysWOW64\GVTunner.ref 2013-11-11 08:31 - 2011-09-20 11:08 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2013-11-11 08:23 - 2013-10-27 08:15 - 00001400 _____ C:\Windows\setupact.log 2013-11-11 08:23 - 2011-09-20 11:14 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-11 08:23 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-11 00:33 - 2012-10-12 10:26 - 00003990 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F36CB218-743C-4F9A-85BF-17AB70D3B3E7} 2013-11-10 11:48 - 2013-11-10 11:48 - 00000926 _____ C:\Users\SevenPro\Desktop\HD Tune.lnk 2013-11-10 11:48 - 2013-11-10 11:48 - 00000000 ____D C:\Program Files (x86)\HD Tune 2013-11-10 00:47 - 2013-11-10 00:47 - 00000000 ____D C:\ProgramData\ESET 2013-11-08 22:34 - 2013-11-08 22:17 - 00000000 ____D C:\Users\SevenPro\Desktop\mbar 2013-11-08 22:34 - 2013-11-08 22:17 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-11-08 22:17 - 2013-11-08 22:17 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2013-11-08 22:17 - 2013-11-08 22:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2013-11-08 22:11 - 2013-11-08 22:10 - 12576792 _____ (Malwarebytes Corp.) C:\Users\SevenPro\Desktop\mbar-1.07.0.1007.exe 2013-11-08 22:00 - 2013-11-08 22:00 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\SevenPro\Desktop\tdsskiller.exe 2013-11-06 18:42 - 2012-05-07 17:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-06 18:38 - 2013-11-06 18:38 - 00000000 ____D C:\_OTL 2013-11-06 18:14 - 2013-11-06 18:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-05 21:13 - 2013-11-05 21:13 - 03538944 _____ C:\Users\SevenPro\Desktop\RogueKiller.exe 2013-11-05 20:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-11-05 17:28 - 2013-10-06 17:31 - 00004562 _____ C:\Windows\PFRO.log 2013-11-04 20:18 - 2013-11-04 20:18 - 00032228 _____ C:\Users\SevenPro\Downloads\FRST.txt 2013-11-04 20:18 - 2013-11-04 20:17 - 00023361 _____ C:\Users\SevenPro\Downloads\Addition.txt 2013-11-04 20:13 - 2013-11-04 20:13 - 00000000 ____D C:\Users\SevenPro\AppData\Roaming\Oracle 2013-11-04 20:11 - 2013-11-04 20:11 - 00000000 ____D C:\ProgramData\Oracle 2013-11-04 20:10 - 2013-11-04 20:10 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-04 20:10 - 2013-11-04 20:10 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-04 20:10 - 2013-11-04 20:10 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-04 20:10 - 2013-11-04 20:10 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-04 20:10 - 2013-11-04 20:10 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-04 19:48 - 2011-09-21 21:21 - 00000000 ____D C:\Users\SevenPro\AppData\Local\Adobe 2013-11-04 19:47 - 2013-11-04 19:47 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-11-04 19:47 - 2011-09-21 20:44 - 00000000 ____D C:\ProgramData\Adobe 2013-11-04 19:41 - 2011-09-21 19:31 - 00000000 ____D C:\Users\SevenPro\AppData\Local\Google 2013-11-04 19:41 - 2011-09-21 19:31 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-04 19:38 - 2013-11-04 19:38 - 00448512 _____ (OldTimer Tools) C:\Users\SevenPro\Desktop\TFC.exe 2013-11-04 19:23 - 2013-11-04 19:22 - 00000000 ____D C:\AdwCleaner 2013-11-04 19:20 - 2013-11-04 19:20 - 01073258 _____ C:\Users\SevenPro\Desktop\AdwCleaner.exe 2013-11-04 18:31 - 2013-11-03 20:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-10-29 22:05 - 2013-10-29 22:05 - 00730112 _____ C:\Users\SevenPro\Downloads\cpextender.msi 2013-10-26 22:26 - 2012-11-05 12:42 - 00000000 ____D C:\Program Files (x86)\Opanda 2013-10-26 20:28 - 2013-10-26 20:28 - 00000000 ____D C:\FRST 2013-10-26 20:21 - 2013-10-26 20:21 - 00602112 _____ (OldTimer Tools) C:\Users\SevenPro\Desktop\OTL.exe 2013-10-26 20:15 - 2013-10-26 20:15 - 00377856 _____ C:\Users\SevenPro\Desktop\GMER.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-10 10:14 ==================== End Of Log ============================