Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-12-2013 Ran by Gość (ATTENTION: The logged in user is not administrator) on DANIEL-KOMPUTER on 05-12-2013 01:23:10 Running from C:\Users\Gość\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal ==================== Could not list processes =============== ==================== Registry (Whitelisted) ================== Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [Facebook Update] - C:\Users\Gość\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-09-02] (Facebook Inc.) HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe -update plugin [814472 2013-06-11] (Adobe Systems Incorporated) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [112232 2010-12-03] (NVIDIA Corporation) AppInit_DLLs-x32: c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll [ ] () BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://samsung.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com URLSearchHook: HKCU - (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - No File SearchScopes: HKCU - DefaultScope {D33394B2-AF29-4EB6-A54A-65BB05BFF2C4} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} SearchScopes: HKCU - {D33394B2-AF29-4EB6-A54A-65BB05BFF2C4} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.) BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: No Name - {11111111-1111-1111-1111-110311551174} - No File BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO-x32: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) BHO-x32: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll () BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com) Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 ==================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [5175856 2013-10-16] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.) S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.) R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] () R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.) R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-04] () R2 vToolbarUpdater13.0.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.0.0\ToolbarUpdater.exe [711112 2012-10-07] () S2 Winmgmt; C:\ProgramData\rbmqgglf.pss [60528 2013-12-04] (Microsoft Corporation) S2 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [x] S2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [x] ==================== Drivers (Whitelisted) ==================== R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. ) R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. ) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. ) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.) R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.) R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [30568 2012-10-07] (AVG Technologies) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems) R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.) S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-05 01:23 - 2013-12-05 01:23 - 00008464 _____ C:\Users\Gość\Desktop\FRST.txt 2013-12-05 01:22 - 2013-12-05 01:22 - 01959766 _____ (Farbar) C:\Users\Gość\Desktop\FRST64.exe 2013-12-05 01:21 - 2013-12-05 01:21 - 01092683 _____ (Farbar) C:\Users\Gość\Desktop\FRST.exe 2013-12-05 01:19 - 2013-12-05 01:19 - 00132112 _____ C:\Users\Gość\Desktop\Extras.Txt 2013-12-05 01:16 - 2013-12-05 01:16 - 00155368 _____ C:\Users\Gość\Desktop\OTL.Txt 2013-12-05 01:09 - 2013-12-05 01:09 - 00000000 ____D C:\sh4ldr 2013-12-05 01:09 - 2013-12-05 01:09 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-12-05 01:04 - 2013-12-05 01:04 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Gość\Desktop\SpyHunter-Installer.exe 2013-12-05 01:03 - 2013-12-05 01:03 - 00602112 _____ (OldTimer Tools) C:\Users\Gość\Desktop\OTL.exe 2013-12-05 00:25 - 2013-12-05 01:09 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-12-05 00:24 - 2013-12-05 00:24 - 00000000 ____D C:\Windows\pss 2013-12-05 00:07 - 2013-12-05 00:07 - 00003352 ____N C:\bootsqm.dat 2013-12-05 00:07 - 2013-12-05 00:07 - 00000000 __SHD C:\found.003 2013-12-04 23:40 - 2013-12-04 23:40 - 00000285 _____ C:\ProgramData\rbmqgglf.reg 2013-12-04 23:38 - 2013-12-05 00:10 - 95025368 ____T C:\ProgramData\rbmqgglf.bxx 2013-12-04 23:38 - 2013-12-05 00:10 - 00000000 _____ C:\ProgramData\rbmqgglf.fvv 2013-12-04 23:38 - 2013-12-04 23:38 - 00209920 _____ (Корпорация Майкрософт) C:\ProgramData\flggqmbr.dss 2013-12-04 23:38 - 2013-12-04 23:38 - 00060528 ____T (Microsoft Corporation) C:\ProgramData\rbmqgglf.pss 2013-11-27 09:04 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-27 08:59 - 2013-11-27 08:59 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-27 08:59 - 2013-11-27 08:59 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-27 08:59 - 2013-11-27 08:59 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-27 08:59 - 2013-11-27 08:59 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-27 08:59 - 2013-11-27 08:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-27 08:59 - 2013-11-27 08:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-27 08:58 - 2013-11-27 08:58 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-27 08:58 - 2013-11-27 08:58 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-27 08:58 - 2013-11-27 08:58 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-27 08:58 - 2013-11-27 08:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-27 08:58 - 2013-11-27 08:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-27 08:54 - 2013-11-27 09:04 - 00011300 _____ C:\Windows\IE11_main.log 2013-11-13 09:22 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-13 09:22 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-13 09:22 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-13 09:22 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-13 09:22 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-13 09:22 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-13 09:22 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-13 09:22 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-13 09:22 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-13 09:21 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-13 09:21 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-13 09:21 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-13 09:21 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-13 09:21 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-13 09:21 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-13 09:21 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-13 09:21 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-13 09:21 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-13 09:21 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-13 09:21 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-13 09:21 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-13 09:21 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-13 09:21 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-13 09:21 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-13 09:21 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-13 09:21 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-13 09:21 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-13 09:21 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-13 09:21 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-13 09:21 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys ==================== One Month Modified Files and Folders ======= 2013-12-05 01:23 - 2013-12-05 01:23 - 00008464 _____ C:\Users\Gość\Desktop\FRST.txt 2013-12-05 01:22 - 2013-12-05 01:22 - 01959766 _____ (Farbar) C:\Users\Gość\Desktop\FRST64.exe 2013-12-05 01:21 - 2013-12-05 01:21 - 01092683 _____ (Farbar) C:\Users\Gość\Desktop\FRST.exe 2013-12-05 01:19 - 2013-12-05 01:19 - 00132112 _____ C:\Users\Gość\Desktop\Extras.Txt 2013-12-05 01:16 - 2013-12-05 01:16 - 00155368 _____ C:\Users\Gość\Desktop\OTL.Txt 2013-12-05 01:09 - 2013-12-05 01:09 - 00000000 ____D C:\sh4ldr 2013-12-05 01:09 - 2013-12-05 01:09 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-12-05 01:09 - 2013-12-05 00:25 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-12-05 01:04 - 2013-12-05 01:04 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Gość\Desktop\SpyHunter-Installer.exe 2013-12-05 01:03 - 2013-12-05 01:03 - 00602112 _____ (OldTimer Tools) C:\Users\Gość\Desktop\OTL.exe 2013-12-05 00:40 - 2010-12-29 15:47 - 01836691 _____ C:\Windows\WindowsUpdate.log 2013-12-05 00:24 - 2013-12-05 00:24 - 00000000 ____D C:\Windows\pss 2013-12-05 00:22 - 2009-07-14 05:45 - 00014144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-05 00:22 - 2009-07-14 05:45 - 00014144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-05 00:14 - 2009-07-14 05:51 - 00241370 _____ C:\Windows\setupact.log 2013-12-05 00:10 - 2013-12-04 23:38 - 95025368 ____T C:\ProgramData\rbmqgglf.bxx 2013-12-05 00:10 - 2013-12-04 23:38 - 00000000 _____ C:\ProgramData\rbmqgglf.fvv 2013-12-05 00:07 - 2013-12-05 00:07 - 00003352 ____N C:\bootsqm.dat 2013-12-05 00:07 - 2013-12-05 00:07 - 00000000 __SHD C:\found.003 2013-12-04 23:57 - 2012-05-06 09:16 - 00001421 _____ C:\Users\Gość\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-04 23:40 - 2013-12-04 23:40 - 00000285 _____ C:\ProgramData\rbmqgglf.reg 2013-12-04 23:38 - 2013-12-04 23:38 - 00209920 _____ (Корпорация Майкрософт) C:\ProgramData\flggqmbr.dss 2013-12-04 23:38 - 2013-12-04 23:38 - 00060528 ____T (Microsoft Corporation) C:\ProgramData\rbmqgglf.pss 2013-12-04 17:32 - 2011-12-30 21:27 - 00000000 ____D C:\Windows\system32\Drivers\AVG 2013-11-28 12:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-28 12:26 - 2013-07-30 19:00 - 00000000 ____D C:\Program Files (x86)\FTdownloader V4.0 2013-11-27 09:39 - 2011-10-23 17:30 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-27 09:39 - 2011-10-16 15:39 - 00000000 ____D C:\ProgramData\Skype 2013-11-27 09:23 - 2012-05-06 15:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-27 09:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-27 09:04 - 2013-11-27 08:54 - 00011300 _____ C:\Windows\IE11_main.log 2013-11-27 08:59 - 2013-11-27 08:59 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-27 08:59 - 2013-11-27 08:59 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-27 08:59 - 2013-11-27 08:59 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-27 08:59 - 2013-11-27 08:59 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-27 08:59 - 2013-11-27 08:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-27 08:59 - 2013-11-27 08:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-27 08:59 - 2013-11-27 08:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-27 08:59 - 2013-11-27 08:59 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-27 08:58 - 2013-11-27 08:58 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-27 08:58 - 2013-11-27 08:58 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-27 08:58 - 2013-11-27 08:58 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-27 08:58 - 2013-11-27 08:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-27 08:58 - 2013-11-27 08:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-27 08:58 - 2013-11-27 08:58 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-27 08:58 - 2013-11-27 08:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-24 20:46 - 2012-10-28 12:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-16 20:16 - 2010-12-29 00:10 - 01232940 _____ C:\Windows\PFRO.log 2013-11-15 09:30 - 2011-10-30 12:10 - 00000000 ____D C:\ProgramData\MFAData 2013-11-10 10:57 - 2013-08-12 08:43 - 00000000 ____D C:\Program Files (x86)\Azuon Files to move or delete: ==================== C:\ProgramData\flggqmbr.dss C:\ProgramData\rbmqgglf.bxx C:\ProgramData\rbmqgglf.fvv C:\ProgramData\rbmqgglf.pss C:\ProgramData\rbmqgglf.reg ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== End Of Log ============================