Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2014 Ran by Kuba (administrator) on KUBA1 on 06-02-2014 11:16:27 Running from C:\Users\Kuba\Documents\Aplikacje-skroty Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgchsva.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Windows\SysWOW64\ASDR.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgemc.exe (ASUSTeK Inc.) C:\Program Files (x86)\ASUS\SmartDoctor\SmartDoctor.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgam.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Valve Corporation) D:\Gry\CS 1.6\Steam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG9\avgtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () D:\Gry\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.69\deploy\LolClient.exe () D:\Gry\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.6\deploy\League of Legends.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe () C:\Users\Kuba\AppData\Roaming\003C4B91.exe () C:\Users\Kuba\AppData\Local\Temp\minerd.exe () D:\Gry\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.6\deploy\League of Legends.exe (NVIDIA Corporation) C:\Users\Kuba\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\OAWrapper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] () HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [AVG9_TRAY] - C:\Program Files (x86)\AVG\AVG9\avgtray.exe [2077536 2014-01-06] (AVG Technologies CZ, s.r.o.) HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-08-20] (Microsoft Corporation) HKU\S-1-5-21-3554188659-4125365456-1988714816-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG) HKU\S-1-5-21-3554188659-4125365456-1988714816-1000\...\Run: [Steam] - D:\Gry\CS 1.6\Steam.exe [1823656 2013-12-11] (Valve Corporation) HKU\S-1-5-21-3554188659-4125365456-1988714816-1000\...\Run: [uTorrent] - C:\Users\Kuba\AppData\Roaming\uTorrent\uTorrent.exe [905296 2014-01-29] (BitTorrent Inc.) HKU\S-1-5-21-3554188659-4125365456-1988714816-1000\...\MountPoints2: {410ca00a-2be8-11e3-bc5e-00024495a3c9} - H:\Setup.exe HKU\S-1-5-21-3554188659-4125365456-1988714816-1000\...\MountPoints2: {43690521-089b-11e3-b7b4-806e6f6e6963} - G:\setup.exe AppInit_DLLs: avgrssta.dll => C:\Windows\system32\avgrssta.dll [13048 2014-01-06] (AVG Technologies CZ, s.r.o.) Startup: C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\{259e6fb3-5215-f270-de70-4605259e6fb3}.exe (Synei ) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKCU - (No Name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - No File SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.) Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) Tcpip\..\Interfaces\{A55FD12B-5B46-46FF-90B0-38EBAC3586AA}: [NameServer]194.204.159.1 FireFox: ======== FF ProfilePath: C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\02xakaij.default-1391587896084 FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) ==================== Services (Whitelisted) ================= R2 ASDR; C:\Windows\SysWOW64\ASDR.exe [61440 2009-07-27] () S3 AVG Security Toolbar Service; C:\Program Files (x86)\AVG\AVG9\Toolbar\ToolbarBroker.exe [167264 2011-11-10] () R2 avg9emc; C:\Program Files (x86)\AVG\AVG9\avgemc.exe [921952 2014-01-06] (AVG Technologies CZ, s.r.o.) R2 avg9wd; C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe [308136 2014-01-06] (AVG Technologies CZ, s.r.o.) S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc) S2 vToolbarUpdater17.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [X] ==================== Drivers (Whitelisted) ==================== R1 AvgLdx64; C:\Windows\System32\Drivers\avgldx64.sys [282976 2014-01-06] (AVG Technologies CZ, s.r.o.) R1 AvgMfx64; C:\Windows\System32\Drivers\avgmfx64.sys [35664 2014-01-06] (AVG Technologies CZ, s.r.o.) R0 AvgRkx64; C:\Windows\System32\Drivers\avgrkx64.sys [56008 2014-01-06] (AVG Technologies CZ, s.r.o.) R1 AvgTdiA; C:\Windows\System32\Drivers\avgtdia.sys [317520 2014-01-06] (AVG Technologies CZ, s.r.o.) R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2014-01-07] (AVG Technologies) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-10-03] (Disc Soft Ltd) R1 EIO64; C:\Windows\System32\DRIVERS\EIO64.sys [16384 2013-08-18] (ASUSTeK Computer Inc.) R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [23680 2010-02-22] (ASUSTeK Computer Inc.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation ) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-08-18] (Duplex Secure Ltd.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-06 10:21 - 2014-02-06 10:21 - 00291794 _____ () C:\Users\Kuba\AppData\Roaming\003C4B91.exe 2014-02-05 13:43 - 2014-02-05 13:43 - 00004158 _____ () C:\Windows\PFRO.log 2014-02-05 12:28 - 2014-02-05 12:28 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-02-05 12:28 - 2014-02-05 12:28 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Malwarebytes 2014-02-05 12:28 - 2014-02-05 12:28 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-05 12:28 - 2014-02-05 12:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-05 12:28 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-02-05 08:58 - 2014-02-05 08:58 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Eusing 2014-02-05 08:49 - 2014-02-05 08:49 - 00001057 _____ () C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk 2014-02-05 08:49 - 2014-02-05 08:49 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner 2014-02-05 08:49 - 2014-02-05 08:49 - 00000000 ____D () C:\Program Files (x86)\Eusing Free Registry Cleaner 2014-02-04 17:21 - 2014-02-06 09:15 - 00002016 _____ () C:\Windows\setupact.log 2014-02-04 17:21 - 2014-02-04 17:21 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-04 09:19 - 2014-02-06 11:16 - 00000000 ____D () C:\FRST 2014-02-03 23:12 - 2014-02-03 23:12 - 00208216 _____ (Kaspersky Lab, GERT) C:\Windows\system32\Drivers\48402127.sys 2014-02-03 22:42 - 2014-02-06 11:15 - 00000517 _____ () C:\Users\Kuba\Desktop\123.txt 2014-02-03 22:15 - 2014-02-03 22:15 - 00000000 ___HD () C:\$AVG 2014-02-03 22:02 - 2014-02-03 22:02 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\{259e6fb3-5215-f270-de70-4605259e6fb3} 2014-02-03 13:14 - 2014-02-03 13:14 - 1480236886 _____ () C:\Users\Kuba\Downloads\Hobbit.2012.PLDUB.BRRip.XviD-BiDA.avi 2014-02-02 11:14 - 2014-02-02 11:14 - 735105025 _____ () C:\Users\Kuba\Downloads\Hitch.CD1.LEKTOR.PL.DVDRIP-BiDA.avi 2014-02-01 16:28 - 2014-02-01 16:28 - 735111169 _____ () C:\Users\Kuba\Downloads\Hitch.CD2.LEKTOR.PL.DVDRIP-BiDA.avi 2014-01-29 16:27 - 2014-01-29 16:27 - 00000601 _____ () C:\Users\Kuba\Desktop\Syberia.lnk 2014-01-29 16:27 - 2014-01-29 16:27 - 00000601 _____ () C:\Users\Administrator\Desktop\Syberia.lnk 2014-01-29 10:34 - 2014-01-29 10:34 - 353108830 _____ () C:\Users\Kuba\Downloads\Syberia.Zlota.Edycja.PL.part2.rar 2014-01-29 08:53 - 2014-01-29 08:53 - 00000847 _____ () C:\Users\Kuba\Desktop\µTorrent.lnk 2014-01-28 21:02 - 2013-02-09 14:44 - 00000000 ____D () C:\Users\Kuba\Downloads\Syberia.Zlota.Edycja.PL.M2I 2014-01-28 16:56 - 2014-01-28 16:56 - 00000075 _____ () C:\Users\Kuba\Desktop\asdadaas.txt 2014-01-28 10:55 - 2014-01-28 10:55 - 2136746229 _____ () C:\Users\Kuba\Downloads\Syberia.Zlota.Edycja.PL.part1.rar 2014-01-28 10:49 - 2014-01-28 10:49 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-28 10:49 - 2014-01-28 10:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-27 18:44 - 2014-01-29 17:00 - 00000000 ____D () C:\Users\Kuba\Documents\Syberia Saves 2014-01-27 18:40 - 2014-01-27 18:40 - 00000000 ____D () C:\Program Files (x86)\directx 2014-01-24 19:14 - 2014-01-24 19:14 - 00000024 ____H () C:\Users\Kuba\Downloads\downloads.del.sav 2014-01-24 19:02 - 2014-01-24 19:02 - 00000000 ____D () C:\ProgramData\Free Download Manager 2014-01-17 10:38 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-17 10:38 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-17 10:38 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-17 10:38 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-17 10:37 - 2014-01-17 10:38 - 00005175 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log 2014-01-12 12:46 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-01-12 12:46 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-01-12 12:46 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-01-12 12:46 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-01-12 12:46 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-01-12 12:46 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-01-12 12:37 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-01-12 12:37 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-01-12 12:37 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-01-12 12:37 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-01-12 12:37 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-01-12 12:37 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-01-12 12:35 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-01-12 12:35 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-01-12 12:26 - 2014-01-12 12:26 - 00000000 ____H () C:\Users\Kuba\Downloads\spider.sav 2014-01-07 11:33 - 2014-01-07 11:32 - 00046368 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys 2014-01-07 11:17 - 2014-01-28 10:50 - 00000000 ____D () C:\Users\Kuba\Downloads\FDM 2014-01-07 11:17 - 2014-01-24 19:14 - 00007062 ____H () C:\Users\Kuba\Downloads\downloads.sav 2014-01-07 11:17 - 2014-01-24 19:14 - 00001771 ____H () C:\Users\Kuba\Downloads\downloads.his.sav 2014-01-07 11:17 - 2014-01-24 19:14 - 00000887 ____H () C:\Users\Kuba\Downloads\history.sav 2014-01-07 11:17 - 2014-01-24 19:14 - 00000735 ____H () C:\Users\Kuba\Downloads\dlmgrsi.sav 2014-01-07 11:17 - 2014-01-24 19:14 - 00000020 ____H () C:\Users\Kuba\Downloads\sites.sav 2014-01-07 11:17 - 2014-01-07 11:17 - 00000330 ____H () C:\Users\Kuba\Downloads\groups.sav ==================== One Month Modified Files and Folders ======= 2014-02-06 11:16 - 2014-02-04 09:19 - 00000000 ____D () C:\FRST 2014-02-06 11:16 - 2013-08-18 15:15 - 00000000 ____D () C:\Users\Kuba\Documents\Aplikacje-skroty 2014-02-06 11:15 - 2014-02-03 22:42 - 00000517 _____ () C:\Users\Kuba\Desktop\123.txt 2014-02-06 11:15 - 2014-01-06 11:59 - 00000000 ____D () C:\Windows\system32\Drivers\Avg 2014-02-06 11:10 - 2013-08-18 17:15 - 00000000 ____D () C:\Users\Kuba\AppData\Local\PMB Files 2014-02-06 11:10 - 2013-08-18 17:15 - 00000000 ____D () C:\ProgramData\PMB Files 2014-02-06 10:21 - 2014-02-06 10:21 - 00291794 _____ () C:\Users\Kuba\AppData\Roaming\003C4B91.exe 2014-02-06 09:25 - 2013-08-25 19:48 - 00000000 ____D () C:\Users\Kuba\AppData\Local\Google 2014-02-06 09:25 - 2013-08-25 19:48 - 00000000 ____D () C:\Program Files (x86)\Google 2014-02-06 09:25 - 2009-07-14 05:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-06 09:25 - 2009-07-14 05:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-06 09:21 - 2013-08-18 10:46 - 01655008 _____ () C:\Windows\WindowsUpdate.log 2014-02-06 09:16 - 2013-08-24 16:50 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\uTorrent 2014-02-06 09:15 - 2014-02-04 17:21 - 00002016 _____ () C:\Windows\setupact.log 2014-02-06 09:15 - 2013-08-18 13:33 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-06 09:15 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-06 09:14 - 2013-09-02 15:39 - 00000000 ____D () C:\AdwCleaner 2014-02-06 08:18 - 2013-08-18 14:44 - 00000000 ____D () C:\Users\Kuba\AppData\Local\Adobe 2014-02-05 13:43 - 2014-02-05 13:43 - 00004158 _____ () C:\Windows\PFRO.log 2014-02-05 12:28 - 2014-02-05 12:28 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-02-05 12:28 - 2014-02-05 12:28 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Malwarebytes 2014-02-05 12:28 - 2014-02-05 12:28 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-05 12:28 - 2014-02-05 12:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-05 08:58 - 2014-02-05 08:58 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Eusing 2014-02-05 08:50 - 2013-08-18 10:53 - 00000000 ____D () C:\Users\Kuba 2014-02-05 08:49 - 2014-02-05 08:49 - 00001057 _____ () C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk 2014-02-05 08:49 - 2014-02-05 08:49 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner 2014-02-05 08:49 - 2014-02-05 08:49 - 00000000 ____D () C:\Program Files (x86)\Eusing Free Registry Cleaner 2014-02-04 17:59 - 2013-10-25 11:35 - 00000000 ____D () C:\Users\Kuba\Documents\FIFA 14 2014-02-04 17:21 - 2014-02-04 17:21 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-04 14:32 - 2013-10-05 09:11 - 00000000 ____D () C:\Windows\Minidump 2014-02-04 14:32 - 2013-08-20 16:49 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Media Player Classic 2014-02-04 14:32 - 2013-08-18 17:28 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\DAEMON Tools Lite 2014-02-03 23:12 - 2014-02-03 23:12 - 00208216 _____ (Kaspersky Lab, GERT) C:\Windows\system32\Drivers\48402127.sys 2014-02-03 22:15 - 2014-02-03 22:15 - 00000000 ___HD () C:\$AVG 2014-02-03 22:02 - 2014-02-03 22:02 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\{259e6fb3-5215-f270-de70-4605259e6fb3} 2014-02-03 22:02 - 2013-08-18 10:53 - 00000000 ___RD () C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-03 13:14 - 2014-02-03 13:14 - 1480236886 _____ () C:\Users\Kuba\Downloads\Hobbit.2012.PLDUB.BRRip.XviD-BiDA.avi 2014-02-02 11:14 - 2014-02-02 11:14 - 735105025 _____ () C:\Users\Kuba\Downloads\Hitch.CD1.LEKTOR.PL.DVDRIP-BiDA.avi 2014-02-01 16:28 - 2014-02-01 16:28 - 735111169 _____ () C:\Users\Kuba\Downloads\Hitch.CD2.LEKTOR.PL.DVDRIP-BiDA.avi 2014-01-31 23:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-01-29 21:24 - 2013-11-28 13:44 - 00000000 ____D () C:\Users\Kuba\Desktop\ZAKOPANE 2013 2014-01-29 17:00 - 2014-01-27 18:44 - 00000000 ____D () C:\Users\Kuba\Documents\Syberia Saves 2014-01-29 16:27 - 2014-01-29 16:27 - 00000601 _____ () C:\Users\Kuba\Desktop\Syberia.lnk 2014-01-29 16:27 - 2014-01-29 16:27 - 00000601 _____ () C:\Users\Administrator\Desktop\Syberia.lnk 2014-01-29 10:34 - 2014-01-29 10:34 - 353108830 _____ () C:\Users\Kuba\Downloads\Syberia.Zlota.Edycja.PL.part2.rar 2014-01-29 08:53 - 2014-01-29 08:53 - 00000847 _____ () C:\Users\Kuba\Desktop\µTorrent.lnk 2014-01-29 08:53 - 2013-08-24 16:50 - 00000827 _____ () C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-01-28 16:56 - 2014-01-28 16:56 - 00000075 _____ () C:\Users\Kuba\Desktop\asdadaas.txt 2014-01-28 10:55 - 2014-01-28 10:55 - 2136746229 _____ () C:\Users\Kuba\Downloads\Syberia.Zlota.Edycja.PL.part1.rar 2014-01-28 10:50 - 2014-01-07 11:17 - 00000000 ____D () C:\Users\Kuba\Downloads\FDM 2014-01-28 10:50 - 2014-01-06 16:03 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager 2014-01-28 10:49 - 2014-01-28 10:49 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-28 10:49 - 2014-01-28 10:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-28 10:49 - 2013-11-06 12:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-01-28 10:49 - 2013-08-18 14:04 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Mozilla 2014-01-27 18:43 - 2013-11-15 15:13 - 00000000 ____D () C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-01-27 18:40 - 2014-01-27 18:40 - 00000000 ____D () C:\Program Files (x86)\directx 2014-01-24 19:14 - 2014-01-24 19:14 - 00000024 ____H () C:\Users\Kuba\Downloads\downloads.del.sav 2014-01-24 19:14 - 2014-01-07 11:17 - 00007062 ____H () C:\Users\Kuba\Downloads\downloads.sav 2014-01-24 19:14 - 2014-01-07 11:17 - 00001771 ____H () C:\Users\Kuba\Downloads\downloads.his.sav 2014-01-24 19:14 - 2014-01-07 11:17 - 00000887 ____H () C:\Users\Kuba\Downloads\history.sav 2014-01-24 19:14 - 2014-01-07 11:17 - 00000735 ____H () C:\Users\Kuba\Downloads\dlmgrsi.sav 2014-01-24 19:14 - 2014-01-07 11:17 - 00000020 ____H () C:\Users\Kuba\Downloads\sites.sav 2014-01-24 19:02 - 2014-01-24 19:02 - 00000000 ____D () C:\ProgramData\Free Download Manager 2014-01-17 10:38 - 2014-01-17 10:37 - 00005175 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log 2014-01-17 10:38 - 2013-10-30 12:59 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-17 10:38 - 2013-08-18 14:52 - 00000000 ____D () C:\Program Files (x86)\Java 2014-01-14 16:03 - 2009-07-14 18:55 - 00740422 _____ () C:\Windows\system32\perfh015.dat 2014-01-14 16:03 - 2009-07-14 18:55 - 00155996 _____ () C:\Windows\system32\perfc015.dat 2014-01-14 16:03 - 2009-07-14 06:13 - 01670518 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-01-12 12:52 - 2013-08-18 13:33 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-01-12 12:38 - 2013-08-18 14:46 - 00000000 ____D () C:\Users\Kuba\AppData\Local\NVIDIA 2014-01-12 12:37 - 2013-11-26 09:21 - 00000000 ____D () C:\Users\Kuba\AppData\Local\NVIDIA Corporation 2014-01-12 12:37 - 2013-08-18 13:33 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-01-12 12:36 - 2013-08-18 13:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-01-12 12:26 - 2014-01-12 12:26 - 00000000 ____H () C:\Users\Kuba\Downloads\spider.sav 2014-01-09 19:04 - 2009-07-14 06:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-07 11:32 - 2014-01-07 11:33 - 00046368 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys 2014-01-07 11:17 - 2014-01-07 11:17 - 00000330 ____H () C:\Users\Kuba\Downloads\groups.sav Some content of TEMP: ==================== C:\Users\Kuba\AppData\Local\Temp\libcurl-4.dll C:\Users\Kuba\AppData\Local\Temp\minerd.exe C:\Users\Kuba\AppData\Local\Temp\pthreadGC2.dll C:\Users\Kuba\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-29 10:59 ==================== End Of Log ============================