Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 03 Ran by Peszyn (administrator) on PESZYN on 03-02-2014 19:27:40 Running from C:\Users\radek_000\Desktop Windows 8 Pro (X64) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Google Inc.) C:\Users\radek_000\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\radek_000\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\radek_000\AppData\Local\Google\Chrome\Application\chrome.exe (AIMP DevTeam) C:\Program Files (x86)\AIMP3\AIMP3.exe (Google Inc.) C:\Users\radek_000\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\radek_000\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe [1575192 2013-11-24] (Bitdefender) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated) HKLM-x32\...\Run: [bdruninstaller] - "C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setupdownloader.exe" /args:"/after_restart" HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [fst_pl_38] - [x] HKU\S-1-5-21-1858027016-2946009895-3279990695-1001\...\Run: [ALLUpdate] - C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2995712 2013-10-23] (ALLPlayer Group Ltd.) HKU\S-1-5-21-1858027016-2946009895-3279990695-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-1858027016-2946009895-3279990695-1001\...\Run: [Google Update] - C:\Users\radek_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-29] (Google Inc.) HKU\S-1-5-21-1858027016-2946009895-3279990695-1001\...\MountPoints2: {4e10e084-841a-11e3-be83-b870f450ecce} - "H:\SETUP.EXE" HKU\S-1-5-21-1858027016-2946009895-3279990695-1001\...\MountPoints2: {b477a492-2b7a-11e3-be69-b870f450ecce} - "H:\SETUP.EXE" ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=UP94&ocid=UP94DHP HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x613025B360BFCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: 54.204.28.26 nikdaiaidiiiogaidkkekcmokcgcdeac Chrome: ======= CHR HomePage: https://www.google.pl/ CHR Extension: (Dokumenty Google) - C:\Users\radek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-02] CHR Extension: (Dysk Google) - C:\Users\radek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-02] CHR Extension: (YouTube) - C:\Users\radek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-02] CHR Extension: (Szukaj w Google) - C:\Users\radek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-02] CHR Extension: (AdBlock) - C:\Users\radek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-30] CHR Extension: (Discount Dragon) - C:\Users\radek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac [2014-02-03] CHR Extension: (Google Wallet) - C:\Users\radek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-02] CHR Extension: (Gmail) - C:\Users\radek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-02] ==================== Services (Whitelisted) ================= S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [69392 2013-11-24] (Bitdefender) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) S2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe [67320 2013-11-24] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe [1645256 2013-11-24] (Bitdefender) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-11-24] (BitDefender) R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-11-24] (BitDefender) S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23456 2012-07-11] (Bitdefender) R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-11-24] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-11-24] (BitDefender LLC) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-01-23] (Disc Soft Ltd) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-11-24] (BitDefender LLC) R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [31120 2013-11-01] (Windows (R) Win 7 DDK provider) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-11-24] (BitDefender S.R.L.) S5 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-24] (BitDefender SRL) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-03 19:16 - 2014-02-03 19:16 - 00991232 _____ () C:\Users\radek_000\Desktop\MicrosoftFixit50267.msi 2014-02-03 18:54 - 2014-02-03 18:54 - 00448512 _____ (OldTimer Tools) C:\Users\radek_000\Desktop\TFC.exe 2014-02-03 18:42 - 2014-02-03 18:46 - 00000360 _____ () C:\Windows\Tasks\bench-sys.job 2014-02-03 18:42 - 2014-02-03 18:42 - 00003230 _____ () C:\Windows\System32\Tasks\bench-sys 2014-02-03 18:42 - 2014-02-03 18:42 - 00000360 _____ () C:\Windows\Tasks\bench-S-1-5-21-1858027016-2946009895-3279990695-1001.job 2014-02-03 18:42 - 2014-02-03 18:42 - 00000000 ____D () C:\Users\radek_000\AppData\Local\BenchUpdater 2014-02-03 18:41 - 2014-02-03 18:41 - 00000000 ____D () C:\Program Files (x86)\predm 2014-02-03 18:09 - 2014-02-03 18:40 - 187679936 _____ () C:\Users\radek_000\Desktop\Thor.2.2013.PLDUB.MD.480p.WEB-DL.XviD.AC3-BiDA.rmvb.crdownload 2014-02-03 15:14 - 2014-02-03 15:14 - 01851544 _____ (Adobe Systems Incorporated) C:\Users\radek_000\Desktop\install_flash_player_10.0.12.36.exe 2014-02-03 15:14 - 2014-02-03 15:14 - 00840584 _____ (Adobe Systems Incorporated) C:\Users\radek_000\Desktop\uninstall_flash_player.exe 2014-02-01 17:21 - 2014-02-01 17:21 - 00000000 ____D () C:\Users\radek_000\Desktop\save 2014-02-01 15:59 - 2014-02-01 16:00 - 00116812 _____ () C:\Users\radek_000\Desktop\OTL.Txt 2014-02-01 15:59 - 2014-02-01 15:59 - 00058902 _____ () C:\Users\radek_000\Desktop\Extras.Txt 2014-02-01 15:51 - 2014-02-01 15:51 - 00602112 _____ (OldTimer Tools) C:\Users\radek_000\Desktop\OTL.exe 2014-02-01 15:50 - 2014-02-01 16:00 - 00000000 ____D () C:\Users\radek_000\Desktop\błąd 2014-02-01 15:49 - 2014-02-01 15:49 - 00012157 _____ () C:\Users\radek_000\Desktop\Addition.txt 2014-02-01 15:48 - 2014-02-03 19:27 - 00009308 _____ () C:\Users\radek_000\Desktop\FRST.txt 2014-02-01 15:47 - 2014-02-03 19:27 - 00000000 ____D () C:\FRST 2014-02-01 15:46 - 2014-02-01 15:46 - 02080256 _____ (Farbar) C:\Users\radek_000\Desktop\FRST64.exe 2014-01-31 23:49 - 2014-02-01 00:44 - 318152454 _____ () C:\Users\radek_000\Desktop\20.Ans.d.Ecart.2013.PL.480p.BRRip.RMVB -M69.rmvb 2014-01-31 23:44 - 2014-02-01 01:44 - 727173120 _____ () C:\Users\radek_000\Desktop\Jobs.2013.PL.LQ.BRRip.XviD-M69.avi 2014-01-30 17:49 - 2014-01-30 17:49 - 00000000 ____D () C:\Users\radek_000\AppData\Local\ESET 2014-01-30 14:36 - 2014-01-30 14:36 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-30 14:36 - 2014-01-30 14:36 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-30 14:36 - 2014-01-30 14:36 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-30 14:36 - 2014-01-30 14:36 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-01-30 14:36 - 2014-01-30 14:36 - 00000000 ____D () C:\Program Files\Java 2014-01-30 13:09 - 2014-01-30 13:09 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\radek_000\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-30 00:00 - 2014-01-30 00:00 - 00265752 _____ (Secure By Design Inc.) C:\Users\radek_000\Desktop\Ninite Java Installer.exe 2014-01-29 21:52 - 2014-01-29 21:52 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-29 21:52 - 2014-01-29 21:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-29 21:52 - 2014-01-29 21:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-29 21:52 - 2014-01-29 21:52 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-29 21:52 - 2014-01-29 21:52 - 00000000 ____D () C:\ProgramData\Sun 2014-01-29 21:52 - 2014-01-29 21:52 - 00000000 ____D () C:\Program Files (x86)\Java 2014-01-29 21:50 - 2014-01-29 21:51 - 00921000 _____ (Oracle Corporation) C:\Users\radek_000\Desktop\chromeinstall-7u51.exe 2014-01-29 19:32 - 2014-01-29 19:32 - 00000000 ____D () C:\Windows\system32\appmgmt 2014-01-29 18:00 - 2014-01-29 18:00 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1858027016-2946009895-3279990695-1001Core1cf1d13a566dbb0.job 2014-01-29 17:54 - 2014-01-29 17:54 - 00002392 _____ () C:\Users\radek_000\Desktop\Google Chrome.lnk 2014-01-29 17:54 - 2014-01-29 17:54 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-01-29 16:56 - 2014-02-03 18:42 - 00000860 __RSH () C:\ProgramData\ntuser.pol 2014-01-29 16:55 - 2014-02-03 18:42 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-01-29 10:21 - 2014-01-30 13:46 - 00000000 ____D () C:\Users\radek_000\Desktop\finans 2014-01-28 12:43 - 2014-01-29 22:25 - 00000000 ____D () C:\Users\radek_000\Desktop\finanse 2014-01-24 21:16 - 2014-01-24 21:16 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\Malwarebytes 2014-01-24 21:10 - 2014-01-24 21:10 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-23 23:20 - 2014-01-23 23:20 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\NapiProjekt 2014-01-23 11:41 - 2014-01-23 11:41 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-01-23 11:41 - 2014-01-23 11:41 - 00001954 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-01-23 11:41 - 2014-01-23 11:41 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-01-15 19:22 - 2013-12-07 07:37 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-01-15 19:22 - 2013-12-07 07:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-01-15 19:22 - 2013-12-07 06:15 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-01-15 19:22 - 2013-12-07 06:15 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-01-15 19:22 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2014-01-15 19:22 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll 2014-01-15 19:22 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll 2014-01-15 19:22 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys 2014-01-15 19:22 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2014-01-15 19:22 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2014-01-15 19:22 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys 2014-01-15 19:22 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-01-15 19:22 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-01-15 19:22 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-01-15 19:22 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-01-14 23:54 - 2014-01-14 23:54 - 00003586 _____ () C:\Windows\System32\Tasks\Bitdefender Autoskan 2014-01-14 21:37 - 2014-01-14 21:37 - 00001023 _____ () C:\Users\radek_000\Desktop\ALLPlayer.lnk 2014-01-14 21:37 - 2014-01-14 21:37 - 00000974 _____ () C:\Users\radek_000\Desktop\NapiProjekt.lnk 2014-01-14 21:37 - 2014-01-14 21:37 - 00000000 ____D () C:\ProgramData\ALLPlayer 2014-01-14 21:37 - 2014-01-14 21:37 - 00000000 ____D () C:\Program Files (x86)\NapiProjekt 2014-01-14 21:37 - 2014-01-14 21:37 - 00000000 ____D () C:\Program Files (x86)\ALLPlayer 2014-01-14 21:37 - 2013-04-05 20:26 - 02106368 _____ () C:\Windows\SysWOW64\ac3filter.ax 2014-01-14 21:37 - 2013-04-05 20:26 - 00276992 _____ (IntelleSoft) C:\Windows\SysWOW64\BugTrap.dll 2014-01-14 21:37 - 2011-06-02 01:10 - 00644608 _____ () C:\Windows\SysWOW64\xvidcore.dll 2014-01-14 21:37 - 2007-10-07 14:36 - 00258048 _____ () C:\Windows\SysWOW64\libFLAC.dll 2014-01-14 21:33 - 2014-01-14 21:33 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\rmi 2014-01-13 13:17 - 2014-01-25 15:54 - 00013030 _____ () C:\Users\radek_000\AppData\Roaming\PDOXUSRS.NET 2014-01-07 11:49 - 2014-01-07 11:49 - 00000000 ____D () C:\Users\Gość\AppData\Roaming\WinRAR ==================== One Month Modified Files and Folders ======= 2014-02-03 19:27 - 2014-02-01 15:48 - 00009308 _____ () C:\Users\radek_000\Desktop\FRST.txt 2014-02-03 19:27 - 2014-02-01 15:47 - 00000000 ____D () C:\FRST 2014-02-03 19:26 - 2013-10-03 11:27 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\AIMP3 2014-02-03 19:16 - 2014-02-03 19:16 - 00991232 _____ () C:\Users\radek_000\Desktop\MicrosoftFixit50267.msi 2014-02-03 19:04 - 2013-10-02 12:05 - 01223490 _____ () C:\Windows\WindowsUpdate.log 2014-02-03 19:02 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru 2014-02-03 18:54 - 2014-02-03 18:54 - 00448512 _____ (OldTimer Tools) C:\Users\radek_000\Desktop\TFC.exe 2014-02-03 18:50 - 2013-10-02 16:50 - 00003490 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-02-03 18:47 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-02-03 18:46 - 2014-02-03 18:42 - 00000360 _____ () C:\Windows\Tasks\bench-sys.job 2014-02-03 18:46 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-03 18:44 - 2013-10-02 12:05 - 00000000 ____D () C:\Users\radek_000 2014-02-03 18:42 - 2014-02-03 18:42 - 00003230 _____ () C:\Windows\System32\Tasks\bench-sys 2014-02-03 18:42 - 2014-02-03 18:42 - 00000360 _____ () C:\Windows\Tasks\bench-S-1-5-21-1858027016-2946009895-3279990695-1001.job 2014-02-03 18:42 - 2014-02-03 18:42 - 00000000 ____D () C:\Users\radek_000\AppData\Local\BenchUpdater 2014-02-03 18:42 - 2014-01-29 16:56 - 00000860 __RSH () C:\ProgramData\ntuser.pol 2014-02-03 18:42 - 2014-01-29 16:55 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-02-03 18:41 - 2014-02-03 18:41 - 00000000 ____D () C:\Program Files (x86)\predm 2014-02-03 18:40 - 2014-02-03 18:09 - 187679936 _____ () C:\Users\radek_000\Desktop\Thor.2.2013.PLDUB.MD.480p.WEB-DL.XviD.AC3-BiDA.rmvb.crdownload 2014-02-03 18:18 - 2013-11-25 22:46 - 00000000 ____D () C:\Users\radek_000\AppData\Local\PokerStars.EU 2014-02-03 15:14 - 2014-02-03 15:14 - 01851544 _____ (Adobe Systems Incorporated) C:\Users\radek_000\Desktop\install_flash_player_10.0.12.36.exe 2014-02-03 15:14 - 2014-02-03 15:14 - 00840584 _____ (Adobe Systems Incorporated) C:\Users\radek_000\Desktop\uninstall_flash_player.exe 2014-02-01 17:21 - 2014-02-01 17:21 - 00000000 ____D () C:\Users\radek_000\Desktop\save 2014-02-01 16:00 - 2014-02-01 15:59 - 00116812 _____ () C:\Users\radek_000\Desktop\OTL.Txt 2014-02-01 16:00 - 2014-02-01 15:50 - 00000000 ____D () C:\Users\radek_000\Desktop\błąd 2014-02-01 15:59 - 2014-02-01 15:59 - 00058902 _____ () C:\Users\radek_000\Desktop\Extras.Txt 2014-02-01 15:51 - 2014-02-01 15:51 - 00602112 _____ (OldTimer Tools) C:\Users\radek_000\Desktop\OTL.exe 2014-02-01 15:49 - 2014-02-01 15:49 - 00012157 _____ () C:\Users\radek_000\Desktop\Addition.txt 2014-02-01 15:46 - 2014-02-01 15:46 - 02080256 _____ (Farbar) C:\Users\radek_000\Desktop\FRST64.exe 2014-02-01 15:13 - 2013-10-08 20:34 - 01491456 ___SH () C:\Users\radek_000\Desktop\Thumbs.db 2014-02-01 12:11 - 2012-11-06 08:47 - 00794946 _____ () C:\Windows\system32\perfh015.dat 2014-02-01 12:11 - 2012-11-06 08:47 - 00159530 _____ () C:\Windows\system32\perfc015.dat 2014-02-01 12:11 - 2012-07-26 08:28 - 01793398 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-01 01:44 - 2014-01-31 23:44 - 727173120 _____ () C:\Users\radek_000\Desktop\Jobs.2013.PL.LQ.BRRip.XviD-M69.avi 2014-02-01 00:44 - 2014-01-31 23:49 - 318152454 _____ () C:\Users\radek_000\Desktop\20.Ans.d.Ecart.2013.PL.480p.BRRip.RMVB -M69.rmvb 2014-01-31 23:57 - 2013-10-16 10:10 - 00000000 ____D () C:\Users\radek_000\AppData\Local\Adobe 2014-01-31 12:50 - 2013-10-16 09:58 - 00000000 ____D () C:\Users\radek_000\Desktop\studia rok 2 2014-01-31 11:58 - 2013-10-02 12:13 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1858027016-2946009895-3279990695-1001 2014-01-30 23:31 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-01-30 23:23 - 2013-10-02 12:55 - 00000000 ____D () C:\Users\radek_000\instalki 2014-01-30 17:49 - 2014-01-30 17:49 - 00000000 ____D () C:\Users\radek_000\AppData\Local\ESET 2014-01-30 15:09 - 2013-10-02 11:55 - 00030270 _____ () C:\Windows\PFRO.log 2014-01-30 14:36 - 2014-01-30 14:36 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-30 14:36 - 2014-01-30 14:36 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-30 14:36 - 2014-01-30 14:36 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-30 14:36 - 2014-01-30 14:36 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-01-30 14:36 - 2014-01-30 14:36 - 00000000 ____D () C:\Program Files\Java 2014-01-30 13:46 - 2014-01-29 10:21 - 00000000 ____D () C:\Users\radek_000\Desktop\finans 2014-01-30 13:09 - 2014-01-30 13:09 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\radek_000\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-30 00:00 - 2014-01-30 00:00 - 00265752 _____ (Secure By Design Inc.) C:\Users\radek_000\Desktop\Ninite Java Installer.exe 2014-01-29 22:25 - 2014-01-28 12:43 - 00000000 ____D () C:\Users\radek_000\Desktop\finanse 2014-01-29 21:52 - 2014-01-29 21:52 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-29 21:52 - 2014-01-29 21:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-29 21:52 - 2014-01-29 21:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-29 21:52 - 2014-01-29 21:52 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-29 21:52 - 2014-01-29 21:52 - 00000000 ____D () C:\ProgramData\Sun 2014-01-29 21:52 - 2014-01-29 21:52 - 00000000 ____D () C:\Program Files (x86)\Java 2014-01-29 21:51 - 2014-01-29 21:50 - 00921000 _____ (Oracle Corporation) C:\Users\radek_000\Desktop\chromeinstall-7u51.exe 2014-01-29 19:32 - 2014-01-29 19:32 - 00000000 ____D () C:\Windows\system32\appmgmt 2014-01-29 18:00 - 2014-01-29 18:00 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1858027016-2946009895-3279990695-1001Core1cf1d13a566dbb0.job 2014-01-29 17:54 - 2014-01-29 17:54 - 00002392 _____ () C:\Users\radek_000\Desktop\Google Chrome.lnk 2014-01-29 17:54 - 2014-01-29 17:54 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-01-29 17:54 - 2013-10-02 12:30 - 00000000 ____D () C:\Users\radek_000\AppData\Local\Google 2014-01-29 17:36 - 2013-11-11 13:03 - 00000000 ___RD () C:\Users\radek_000\Desktop\muza 2014-01-29 16:55 - 2012-07-26 09:12 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-01-29 16:55 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-01-25 15:54 - 2014-01-13 13:17 - 00013030 _____ () C:\Users\radek_000\AppData\Roaming\PDOXUSRS.NET 2014-01-24 21:16 - 2014-01-24 21:16 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\Malwarebytes 2014-01-24 21:10 - 2014-01-24 21:10 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-23 23:20 - 2014-01-23 23:20 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\NapiProjekt 2014-01-23 11:44 - 2013-10-15 19:33 - 00000000 ____D () C:\Users\radek_000\AppData\Local\Mobogenie 2014-01-23 11:41 - 2014-01-23 11:41 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-01-23 11:41 - 2014-01-23 11:41 - 00001954 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-01-23 11:41 - 2014-01-23 11:41 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-01-23 11:38 - 2012-07-26 08:21 - 00021801 _____ () C:\Windows\setupact.log 2014-01-17 13:38 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\rescache 2014-01-16 11:06 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF 2014-01-15 21:59 - 2013-10-02 17:39 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-01-15 21:58 - 2013-10-02 19:42 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-15 21:56 - 2013-10-02 19:42 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-15 21:56 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\WinStore 2014-01-14 23:54 - 2014-01-14 23:54 - 00003586 _____ () C:\Windows\System32\Tasks\Bitdefender Autoskan 2014-01-14 21:37 - 2014-01-14 21:37 - 00001023 _____ () C:\Users\radek_000\Desktop\ALLPlayer.lnk 2014-01-14 21:37 - 2014-01-14 21:37 - 00000974 _____ () C:\Users\radek_000\Desktop\NapiProjekt.lnk 2014-01-14 21:37 - 2014-01-14 21:37 - 00000000 ____D () C:\ProgramData\ALLPlayer 2014-01-14 21:37 - 2014-01-14 21:37 - 00000000 ____D () C:\Program Files (x86)\NapiProjekt 2014-01-14 21:37 - 2014-01-14 21:37 - 00000000 ____D () C:\Program Files (x86)\ALLPlayer 2014-01-14 21:33 - 2014-01-14 21:33 - 00000000 ____D () C:\Users\radek_000\AppData\Roaming\rmi 2014-01-13 23:08 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-01-09 09:02 - 2013-10-02 21:08 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-09 09:02 - 2013-10-02 21:08 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-07 11:49 - 2014-01-07 11:49 - 00000000 ____D () C:\Users\Gość\AppData\Roaming\WinRAR ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-30 15:58 ==================== End Of Log ============================