Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-12-2013 02 Ran by Tomek (administrator) on TOMEK-KOMPUTER on 04-12-2013 16:46:18 Running from C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3GC7ZF6Y Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\stacsv64.exe () C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE (ArcSoft, Inc.) C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe (Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\AESTSr64.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe () C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE [5107712 2013-01-02] (Dell Inc.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated) HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-04-07] (IDT, Inc.) HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.Exe [130576 2009-06-17] (Logitech, Inc.) HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation) Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) MountPoints2: {5d169239-e243-11e1-9d20-806e6f6e6963} - E:\autoRcd.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.pl/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.pl/ BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\o8qhx26e.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: feca4b87-3be4-43da-a1b1-137c24220968 - C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\o8qhx26e.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi FF Extension: No Name - C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\o8qhx26e.default\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi FF StartMenuInternet: FIREFOX.EXE - D:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Services (Whitelisted) ================= R2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [43624 2012-08-14] (ArcSoft, Inc.) R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG) R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\STacSV64.exe [247808 2010-04-07] (IDT, Inc.) R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE [33280 2013-01-02] () S2 HPSLPSVC; C:\Users\Tomek\AppData\Local\Temp\7zS0757\hpslpsvc64.dll [x] ==================== Drivers (Whitelisted) ==================== S3 adiusbaw; C:\Windows\System32\DRIVERS\adiusbawx64.sys [169496 2007-02-07] (Analog Devices Inc.) R1 ArcSec; C:\Windows\System32\drivers\ArcSec.sys [311872 2011-11-10] () R0 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [24456 2011-07-27] (IVT Corporation.) S3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [30088 2010-04-06] () R1 Ext2Fsd; C:\Windows\System32\Drivers\Ext2Fsd.sys [769816 2011-07-09] (www.ext2fsd.com) S3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [27016 2010-04-06] (IVT Corporation.) S3 BT; system32\DRIVERS\btnetdrv.sys [x] S3 BTCOM; system32\DRIVERS\btcomport.sys [x] S3 BTCOMBUS; System32\Drivers\btcombus.sys [x] S3 Btcsrusb; System32\Drivers\btcusb.sys [x] S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [x] S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [x] S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-03 16:08 - 2013-12-04 15:55 - 00011040 ____N C:\Windows\WindowsUpdate.log 2013-12-03 15:36 - 2013-12-03 16:04 - 00000000 ____D C:\Users\Tomek\Documents\Ghost Games 2013-12-03 15:36 - 2013-12-03 15:36 - 00000000 ____D C:\ProgramData\Package Cache 2013-11-30 13:44 - 2013-11-30 13:44 - 00000000 ____D C:\Users\Tomek\AppData\Local\Macromedia 2013-11-30 13:14 - 2013-11-30 13:14 - 00000812 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-30 13:14 - 2013-11-30 13:14 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Mozilla 2013-11-30 13:14 - 2013-11-30 13:14 - 00000000 ____D C:\Users\Tomek\AppData\Local\Mozilla 2013-11-29 18:42 - 2013-11-29 18:42 - 00000678 _____ C:\Users\Tomek\Desktop\Crysis® 2.lnk 2013-11-28 21:38 - 2013-11-28 21:41 - 00000000 ____D C:\ProgramData\Solidshield 2013-11-28 21:38 - 2013-11-28 21:38 - 00000000 ____D C:\ProgramData\Electronic Arts 2013-11-28 21:38 - 2013-11-28 21:38 - 00000000 ____D C:\ProgramData\EA Core 2013-11-28 21:23 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2013-11-28 21:23 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2013-11-28 21:23 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2013-11-28 21:23 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2013-11-28 21:03 - 2013-12-02 19:49 - 00000000 ____D C:\Crysis2.PL.2011 2013-11-28 17:01 - 2013-11-28 17:01 - 00000000 ____D C:\Users\Tomek\AppData\Local\IsolatedStorage 2013-11-28 17:01 - 2013-11-28 17:01 - 00000000 ____D C:\Users\Tomek\AppData\Local\Futuremark_Corporation 2013-11-28 16:59 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2013-11-28 16:59 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2013-11-28 16:59 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2013-11-28 16:59 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2013-11-28 16:59 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2013-11-28 16:59 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2013-11-28 16:59 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2013-11-28 16:59 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2013-11-28 16:59 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2013-11-27 17:08 - 2013-11-27 17:08 - 00000968 _____ C:\Users\Tomek\Desktop\FurMark.lnk 2013-11-27 15:15 - 2013-12-03 16:04 - 00000000 ____D C:\AdwCleaner 2013-11-27 15:12 - 2013-11-27 15:12 - 00003350 _____ C:\Windows\System32\Tasks\{3C57F589-A098-4503-95A0-8F68909EBDD4} 2013-11-24 18:31 - 2013-11-24 18:32 - 00377856 _____ C:\Users\Tomek\Desktop\l0wfovl2.exe 2013-11-24 18:24 - 2013-11-24 18:24 - 00602112 _____ (OldTimer Tools) C:\Users\Tomek\Desktop\OTL.exe 2013-11-24 18:20 - 2013-11-24 18:20 - 01958440 _____ (Farbar) C:\Users\Tomek\Desktop\FRST64.exe 2013-11-24 18:20 - 2013-11-24 18:20 - 00000000 ____D C:\FRST 2013-11-24 16:49 - 2013-11-24 16:49 - 00000892 _____ C:\Users\Tomek\Desktop\AIDA64 Extreme Edition.lnk 2013-11-24 16:34 - 2013-11-24 16:34 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-24 16:34 - 2013-11-24 16:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-24 16:34 - 2013-11-24 16:34 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-24 16:34 - 2013-11-24 16:34 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-24 16:34 - 2013-11-24 16:34 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-24 16:34 - 2013-11-24 16:34 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-24 16:34 - 2013-11-24 16:34 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-24 16:34 - 2013-11-24 16:34 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-24 16:34 - 2013-11-24 16:34 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-24 16:34 - 2013-11-24 16:34 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-24 16:34 - 2013-11-24 16:34 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-24 15:51 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-24 15:51 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-24 15:51 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-24 15:51 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-24 15:51 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-24 15:51 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-24 15:51 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-24 15:51 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-24 15:51 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-24 15:51 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-24 15:51 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-24 15:51 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-24 15:51 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-24 15:51 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-24 15:51 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-24 15:51 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-24 15:51 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-24 15:51 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-24 15:51 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-24 15:51 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-24 15:51 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-24 15:51 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-24 15:51 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-24 15:51 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-24 15:51 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-11-24 15:51 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-11-24 15:51 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-11-24 15:51 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-11-24 15:51 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-11-24 15:51 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-11-24 15:51 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-11-24 15:51 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-11-24 15:51 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-11-24 15:51 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-11-24 15:51 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-11-24 15:51 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-11-24 15:51 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-11-24 15:51 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-11-24 15:51 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-11-24 15:51 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-11-24 15:51 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-11-24 15:51 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-11-24 15:51 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-24 15:51 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2013-11-24 15:51 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2013-11-24 15:51 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2013-11-24 15:50 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-24 15:50 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-24 15:50 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-24 15:50 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-24 15:50 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-09 17:00 - 2013-12-03 16:23 - 00000000 ____D C:\Users\Tomek\AppData\Local\JDownloader 2.0 2013-11-09 17:00 - 2013-11-09 17:00 - 00002063 _____ C:\Users\Tomek\Desktop\JDownloader.lnk 2013-11-08 00:03 - 2013-11-08 00:06 - 181928481 _____ C:\Users\Tomek\Desktop\Justin Timberlake - TKO.mp4 2013-11-08 00:01 - 2013-11-08 00:01 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-08 00:01 - 2013-11-08 00:01 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-08 00:01 - 2013-11-08 00:01 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-08 00:01 - 2013-11-08 00:01 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-08 00:01 - 2013-11-08 00:01 - 00000000 ____D C:\ProgramData\Oracle 2013-11-08 00:01 - 2013-11-08 00:01 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-06 14:03 - 2013-11-06 14:04 - 00000000 ____D C:\Users\Tomek\Documents\Ro ==================== One Month Modified Files and Folders ======= 2013-12-04 16:37 - 2012-08-09 20:58 - 00000000 ____D C:\Program Files (x86)\The KMPlayer 2013-12-04 15:58 - 2012-12-03 17:36 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\vlc 2013-12-04 15:55 - 2013-12-03 16:08 - 00011040 ____N C:\Windows\WindowsUpdate.log 2013-12-04 14:24 - 2009-07-14 05:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-04 14:24 - 2009-07-14 05:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-04 14:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing 2013-12-04 14:21 - 2009-07-14 18:55 - 00738192 _____ C:\Windows\system32\perfh015.dat 2013-12-04 14:21 - 2009-07-14 18:55 - 00154848 _____ C:\Windows\system32\perfc015.dat 2013-12-04 14:21 - 2009-07-14 06:13 - 01663412 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-04 14:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-03 16:23 - 2013-11-09 17:00 - 00000000 ____D C:\Users\Tomek\AppData\Local\JDownloader 2.0 2013-12-03 16:04 - 2013-12-03 15:36 - 00000000 ____D C:\Users\Tomek\Documents\Ghost Games 2013-12-03 16:04 - 2013-11-27 15:15 - 00000000 ____D C:\AdwCleaner 2013-12-03 15:36 - 2013-12-03 15:36 - 00000000 ____D C:\ProgramData\Package Cache 2013-12-02 19:49 - 2013-11-28 21:03 - 00000000 ____D C:\Crysis2.PL.2011 2013-11-30 13:44 - 2013-11-30 13:44 - 00000000 ____D C:\Users\Tomek\AppData\Local\Macromedia 2013-11-30 13:40 - 2009-07-14 19:09 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-11-30 13:38 - 2013-10-04 22:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-30 13:38 - 2013-10-04 22:33 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-30 13:38 - 2012-09-08 16:37 - 00000000 ____D C:\Users\Tomek\AppData\Local\Adobe 2013-11-30 13:14 - 2013-11-30 13:14 - 00000812 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-30 13:14 - 2013-11-30 13:14 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Mozilla 2013-11-30 13:14 - 2013-11-30 13:14 - 00000000 ____D C:\Users\Tomek\AppData\Local\Mozilla 2013-11-29 18:42 - 2013-11-29 18:42 - 00000678 _____ C:\Users\Tomek\Desktop\Crysis® 2.lnk 2013-11-28 21:41 - 2013-11-28 21:38 - 00000000 ____D C:\ProgramData\Solidshield 2013-11-28 21:38 - 2013-11-28 21:38 - 00000000 ____D C:\ProgramData\Electronic Arts 2013-11-28 21:38 - 2013-11-28 21:38 - 00000000 ____D C:\ProgramData\EA Core 2013-11-28 17:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-28 17:05 - 2012-08-09 17:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-11-28 17:01 - 2013-11-28 17:01 - 00000000 ____D C:\Users\Tomek\AppData\Local\IsolatedStorage 2013-11-28 17:01 - 2013-11-28 17:01 - 00000000 ____D C:\Users\Tomek\AppData\Local\Futuremark_Corporation 2013-11-27 17:08 - 2013-11-27 17:08 - 00000968 _____ C:\Users\Tomek\Desktop\FurMark.lnk 2013-11-27 15:35 - 2012-08-10 16:54 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\uTorrent 2013-11-27 15:12 - 2013-11-27 15:12 - 00003350 _____ C:\Windows\System32\Tasks\{3C57F589-A098-4503-95A0-8F68909EBDD4} 2013-11-24 18:32 - 2013-11-24 18:31 - 00377856 _____ C:\Users\Tomek\Desktop\l0wfovl2.exe 2013-11-24 18:24 - 2013-11-24 18:24 - 00602112 _____ (OldTimer Tools) C:\Users\Tomek\Desktop\OTL.exe 2013-11-24 18:20 - 2013-11-24 18:20 - 01958440 _____ (Farbar) C:\Users\Tomek\Desktop\FRST64.exe 2013-11-24 18:20 - 2013-11-24 18:20 - 00000000 ____D C:\FRST 2013-11-24 16:49 - 2013-11-24 16:49 - 00000892 _____ C:\Users\Tomek\Desktop\AIDA64 Extreme Edition.lnk 2013-11-24 16:47 - 2012-08-09 18:18 - 00000000 ____D C:\Windows\Panther 2013-11-24 16:40 - 2012-08-09 17:26 - 00001421 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-24 16:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-24 16:34 - 2013-11-24 16:34 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-24 16:34 - 2013-11-24 16:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-24 16:34 - 2013-11-24 16:34 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-24 16:34 - 2013-11-24 16:34 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-24 16:34 - 2013-11-24 16:34 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-24 16:34 - 2013-11-24 16:34 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-24 16:34 - 2013-11-24 16:34 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-24 16:34 - 2013-11-24 16:34 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-24 16:34 - 2013-11-24 16:34 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-24 16:34 - 2013-11-24 16:34 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-24 16:34 - 2013-11-24 16:34 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-24 16:34 - 2013-11-24 16:34 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-24 16:34 - 2013-11-24 16:34 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-24 16:01 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-11-20 20:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-11-18 12:40 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-11-17 22:35 - 2013-01-27 19:24 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\FileZilla 2013-11-11 05:50 - 2012-08-09 20:02 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-09 17:00 - 2013-11-09 17:00 - 00002063 _____ C:\Users\Tomek\Desktop\JDownloader.lnk 2013-11-08 00:06 - 2013-11-08 00:03 - 181928481 _____ C:\Users\Tomek\Desktop\Justin Timberlake - TKO.mp4 2013-11-08 00:01 - 2013-11-08 00:01 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-08 00:01 - 2013-11-08 00:01 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-08 00:01 - 2013-11-08 00:01 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-08 00:01 - 2013-11-08 00:01 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-08 00:01 - 2013-11-08 00:01 - 00000000 ____D C:\ProgramData\Oracle 2013-11-08 00:01 - 2013-11-08 00:01 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-08 00:01 - 2012-08-11 22:06 - 00000000 ____D C:\Windows\Sun 2013-11-08 00:01 - 2012-08-09 21:02 - 00000000 ____D C:\ProgramData\Sun 2013-11-06 14:04 - 2013-11-06 14:03 - 00000000 ____D C:\Users\Tomek\Documents\Ro Some content of TEMP: ==================== C:\Users\Tomek\AppData\Local\Temp\KMP_3.7.0.113.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-01 00:14 ==================== End Of Log ============================