Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-04-2014 01 Ran by DarekW (administrator) on DAREK on 12-04-2014 21:02:06 Running from C:\Users\DarekW\Downloads Windows 8.1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe () C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Windows\system32\mfevtps.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe (Microsoft Corporation) C:\Windows\syswow64\wwahost.exe (Microsoft Corporation) C:\Windows\system32\dashost.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (TOSHIBA) C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Corporation) C:\Windows\WinStore\WSHost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (Microsoft Corporation) C:\Windows\system32\wbem\WMIADAP.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [TSSSrv] - C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-12] (TOSHIBA Corporation) HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation) HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-14] (TOSHIBA Corporation) HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-18] (TOSHIBA Corporation) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation) HKLM-x32\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [383768 2002-04-12] (Alcor Micro Corp.) HKLM-x32\...\Run: [1.TPUReg] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800 2013-03-27] (TOSHIBA) HKLM-x32\...\Run: [TSVU] - c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1715611341-132608252-1270519658-1002\...\Run: [GG] - C:\Users\DarekW\AppData\Local\GG\Application\gghub.exe [4028480 2014-02-19] (GG Network S.A.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM - DefaultScope {5348BE2E-5B3A-4F26-98AF-A7FBDB67F2CA} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB SearchScopes: HKLM - {5348BE2E-5B3A-4F26-98AF-A7FBDB67F2CA} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB SearchScopes: HKLM-x32 - DefaultScope {5348BE2E-5B3A-4F26-98AF-A7FBDB67F2CA} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB SearchScopes: HKLM-x32 - {5348BE2E-5B3A-4F26-98AF-A7FBDB67F2CA} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\MSC\McSnIePl64.dll (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.) Hosts: Hosts file not detected in the default directory Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1 FireFox: ======== FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL () FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-04-05] Chrome: ======= CHR HomePage: https://www.google.com/ CHR Extension: (Dokumenty Google) - C:\Users\DarekW\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-15] CHR Extension: (Dysk Google) - C:\Users\DarekW\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-15] CHR Extension: (YouTube) - C:\Users\DarekW\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-15] CHR Extension: (Szukaj w Google) - C:\Users\DarekW\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-15] CHR Extension: (Google Wallet) - C:\Users\DarekW\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-15] CHR Extension: (Gmail) - C:\Users\DarekW\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-15] ==================== Services (Whitelisted) ================= R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-08-22] (Windows (R) Win 7 DDK provider) S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com) R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] () R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] () R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-04] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation) R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation) S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-19] (Toshiba Europe GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-16] (Qualcomm Atheros Communications, Inc.) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2014-03-16] () S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39776 2013-08-22] (Microsoft Corporation) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2014-03-16] () S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation) R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.) R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.) R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.) R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.) S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.) R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation) R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation ) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-22] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [56672 2013-08-22] (Microsoft Corporation) R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-12 21:02 - 2014-04-12 21:02 - 00018648 _____ () C:\Users\DarekW\Downloads\FRST.txt 2014-04-12 20:38 - 2014-04-12 20:38 - 00991232 _____ () C:\Users\DarekW\Downloads\MicrosoftFixit50267.msi 2014-04-12 20:31 - 2014-04-12 20:31 - 00448512 _____ (OldTimer Tools) C:\Users\DarekW\Downloads\TFC.exe 2014-04-12 20:11 - 2014-04-12 20:46 - 00022089 _____ () C:\Windows\WindowsUpdate.log 2014-04-12 19:49 - 2014-04-12 19:49 - 00059093 _____ () C:\Users\DarekW\Desktop\FRST.txt 2014-04-12 19:49 - 2014-04-12 19:49 - 00040876 _____ () C:\Users\DarekW\Desktop\Shortcut.txt 2014-04-12 19:49 - 2014-04-12 19:49 - 00027418 _____ () C:\Users\DarekW\Desktop\Addition.txt 2014-04-12 19:46 - 2014-04-12 21:02 - 00000000 ____D () C:\FRST 2014-04-12 19:44 - 2014-04-12 19:45 - 02157568 _____ (Farbar) C:\Users\DarekW\Downloads\FRST64.exe 2014-04-12 19:31 - 2014-04-12 19:31 - 00059212 _____ () C:\Users\DarekW\Desktop\Extras.Txt 2014-04-12 19:30 - 2014-04-12 19:30 - 00160260 _____ () C:\Users\DarekW\Desktop\OTL.Txt 2014-04-12 18:53 - 2014-04-12 18:53 - 00602112 _____ (OldTimer Tools) C:\Users\DarekW\Downloads\OTL.exe 2014-04-12 18:46 - 2014-04-12 18:46 - 00020096 _____ () C:\Users\DarekW\Documents\cc_20140412_184557.reg 2014-04-11 19:09 - 2014-04-11 19:09 - 00001972 _____ () C:\Users\DarekW\Documents\cc_20140411_190900.reg 2014-04-10 21:26 - 2014-04-12 18:46 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-10 21:25 - 2014-04-10 21:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-04-10 21:25 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-10 21:25 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-10 19:08 - 2014-04-10 19:08 - 00000000 ____D () C:\Users\DarekW\AppData\Local\GHISLER 2014-04-10 18:42 - 2014-04-10 18:43 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\GHISLER 2014-04-10 18:42 - 2014-04-10 18:42 - 00000000 ____D () C:\totalcmd 2014-04-07 21:24 - 2014-04-07 21:24 - 00001508 _____ () C:\Users\DarekW\AppData\Local\recently-used.xbel 2014-04-07 21:14 - 2014-04-07 21:25 - 00000000 ____D () C:\Users\DarekW\AppData\Local\gtk-2.0 2014-04-07 21:14 - 2014-04-07 21:14 - 00000000 ____D () C:\Users\DarekW\.thumbnails 2014-04-06 11:54 - 2014-04-06 11:55 - 00005672 _____ () C:\Users\DarekW\Documents\cc_20140406_115456.reg 2014-04-05 20:29 - 2014-04-05 20:29 - 00000017 _____ () C:\Users\DarekW\AppData\Local\resmon.resmoncfg 2014-04-05 20:05 - 2014-04-05 20:05 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\WinRAR 2014-04-05 20:04 - 2014-04-05 20:04 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-04-05 20:03 - 2014-04-05 20:04 - 00000000 ____D () C:\Program Files\WinRAR 2014-04-05 19:58 - 2014-04-05 19:58 - 00000000 ____D () C:\Users\DarekW\Documents\FIFA 14 2014-04-05 19:51 - 2014-04-12 20:26 - 00000000 ___HD () C:\Users\DarekW\AppData\Roaming\Origin 2014-04-05 16:05 - 2014-04-05 16:05 - 00007518 _____ () C:\Users\DarekW\Documents\cc_20140405_160458.reg 2014-04-05 16:01 - 2014-04-05 16:04 - 00080632 _____ () C:\Users\DarekW\Documents\cc_20140405_160147.reg 2014-04-05 09:41 - 2014-04-12 21:02 - 00001871 _____ () C:\Users\Public\Desktop\McAfee AntiVirus Plus.lnk 2014-04-05 09:40 - 2014-04-05 09:40 - 00000000 ____D () C:\Program Files (x86)\McAfee.com 2014-04-05 09:40 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys 2014-04-05 09:39 - 2014-04-05 09:39 - 00000000 ____D () C:\Program Files\McAfee.com 2014-04-04 23:14 - 2014-04-12 20:57 - 00000214 _____ () C:\Windows\Tasks\AutoKMS.job 2014-04-04 23:14 - 2014-04-11 23:14 - 00000214 _____ () C:\Windows\Tasks\AutoKMSDaily.job 2014-04-04 23:14 - 2014-04-04 23:14 - 00002732 _____ () C:\Windows\System32\Tasks\AutoKMSDaily 2014-04-04 23:14 - 2014-04-04 23:14 - 00002426 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-04-04 23:14 - 2014-04-04 23:14 - 00000184 _____ () C:\Windows\AutoKMS.ini 2014-04-04 23:11 - 2014-04-04 23:11 - 00000000 ____D () C:\Windows\PCHEALTH 2014-04-04 23:11 - 2014-04-04 23:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services 2014-04-04 23:11 - 2014-04-04 23:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework 2014-04-04 23:11 - 2014-04-04 23:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2014-04-04 23:10 - 2014-04-04 23:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8 2014-04-04 23:09 - 2014-04-04 23:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-04-04 23:09 - 2014-04-04 23:09 - 00000000 __RHD () C:\MSOCache 2014-04-04 23:09 - 2014-04-04 23:09 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-04-04 23:09 - 2014-04-04 23:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-04-04 22:45 - 2014-04-04 22:45 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-04-04 22:43 - 2014-04-04 23:13 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-04 22:43 - 2014-04-04 22:43 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Microsoft Help 2014-03-20 21:24 - 2014-03-20 21:24 - 00000000 ____D () C:\Users\DarekW\Documents\Criterion Games 2014-03-20 20:43 - 2014-03-20 20:43 - 00001150 _____ () C:\Users\DarekW\Desktop\Play Need For Speed Most Wanted 2012.lnk 2014-03-19 00:53 - 2014-03-19 00:53 - 00001473 _____ () C:\Users\DarekW\Desktop\gimp-2.8 — skrót.lnk 2014-03-19 00:51 - 2014-04-07 21:25 - 00000000 ____D () C:\Users\DarekW\.gimp-2.8 2014-03-19 00:51 - 2014-03-19 00:51 - 00000000 ____D () C:\Users\DarekW\AppData\Local\gegl-0.2 2014-03-19 00:48 - 2014-03-19 00:50 - 00000000 ____D () C:\Program Files\GIMP 2 2014-03-18 16:45 - 2014-03-18 16:45 - 00000000 ____D () C:\Pendrive 2014-03-18 00:28 - 2014-03-18 16:40 - 00000000 __RDO () C:\Users\DarekW\SkyDrive 2014-03-17 23:24 - 2014-04-11 19:05 - 00000000 ____D () C:\AdwCleaner 2014-03-17 21:13 - 2014-03-17 21:13 - 00000082 _____ () C:\Users\DarekW\Documents\cc_20140317_201341.reg 2014-03-17 17:57 - 2014-04-12 20:27 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-03-17 17:44 - 2014-03-17 17:59 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\.minecraft 2014-03-17 17:44 - 2014-03-17 17:57 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\.minecraftzyczu 2014-03-17 17:43 - 2014-03-17 17:43 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Oracle 2014-03-17 17:42 - 2014-03-17 17:42 - 00000000 ____D () C:\ProgramData\Oracle 2014-03-17 17:41 - 2014-03-17 17:41 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-03-17 17:41 - 2014-03-17 17:41 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-03-17 17:41 - 2014-03-17 17:41 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-03-17 17:41 - 2014-03-17 17:41 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-03-17 17:41 - 2014-03-17 17:41 - 00000000 ____D () C:\ProgramData\Sun 2014-03-17 17:41 - 2014-03-17 17:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-03-16 20:10 - 2014-04-10 21:25 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-03-16 20:10 - 2014-04-10 21:25 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Malwarebytes 2014-03-16 20:10 - 2014-04-10 21:25 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-16 20:10 - 2014-04-10 21:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-03-16 20:10 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-16 16:22 - 2014-03-16 16:22 - 00000000 ____D () C:\Users\DarekW\Documents\Deluxe Ski Jump 4 2014-03-16 16:03 - 2014-03-16 16:03 - 00310728 _____ () C:\Windows\system32\Drivers\atksgt.sys 2014-03-16 16:03 - 2014-03-16 16:03 - 00042696 _____ () C:\Windows\system32\Drivers\lirsgt.sys 2014-03-16 16:03 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-03-16 16:03 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-03-16 15:54 - 2014-03-17 21:11 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\DAEMON Tools Lite 2014-03-16 15:53 - 2014-03-16 15:56 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-03-16 15:28 - 2014-04-11 20:18 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\BitComet 2014-03-16 15:28 - 2014-03-16 15:28 - 00000000 ____D () C:\Program Files\BitComet 2014-03-16 13:15 - 2014-04-10 19:03 - 00000000 ___RD () C:\Users\DarekW\Desktop\inne 2014-03-16 12:53 - 2014-03-16 12:53 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-03-16 12:53 - 2014-03-16 12:53 - 00000845 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-03-16 12:53 - 2014-03-16 12:53 - 00000000 ____D () C:\Program Files\CCleaner 2014-03-16 01:41 - 2014-04-12 20:33 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1715611341-132608252-1270519658-1002 2014-03-16 01:37 - 2014-03-15 05:41 - 00000000 ____D () C:\Users\DarekW\AppData\Local\TOSHIBA 2014-03-16 01:35 - 2014-03-16 01:35 - 00000000 ___RD () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-16 01:35 - 2014-03-16 01:35 - 00000000 ___RD () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-03-16 01:34 - 2014-04-07 21:14 - 00000000 ____D () C:\Users\DarekW 2014-03-16 01:34 - 2014-03-17 23:26 - 00001022 _____ () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-03-16 01:34 - 2014-03-17 17:44 - 00000000 ____D () C:\Users\DarekW\AppData\Local\VirtualStore 2014-03-16 01:34 - 2014-03-16 01:39 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Packages 2014-03-16 01:34 - 2014-03-16 01:34 - 00000020 ___SH () C:\Users\DarekW\ntuser.ini 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Ustawienia lokalne 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Szablony 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Moje dokumenty 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Menu Start 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Documents\Moje wideo 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Documents\Moje obrazy 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Documents\Moja muzyka 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Dane aplikacji 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\AppData\Local\Historia 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\AppData\Local\Dane aplikacji 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Adobe 2014-03-16 01:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-16 01:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-03-16 01:34 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-03-16 01:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-03-16 01:03 - 2014-03-16 01:03 - 00000000 ___SD () C:\Users\DarekW\GG dysk 2014-03-16 00:59 - 2014-04-12 20:58 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\GG 2014-03-16 00:59 - 2014-03-16 01:00 - 00000000 ____D () C:\Users\DarekW\AppData\Local\GG 2014-03-16 00:59 - 2014-03-16 00:59 - 00001171 _____ () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk 2014-03-16 00:59 - 2014-03-16 00:59 - 00001163 _____ () C:\Users\DarekW\Desktop\GG.lnk 2014-03-16 00:59 - 2014-03-16 00:59 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Mozilla 2014-03-15 21:58 - 2014-03-15 21:58 - 00000218 _____ () C:\Users\DarekW\Desktop\Counter-Strike.url 2014-03-15 21:46 - 2014-03-15 21:46 - 00001002 _____ () C:\Users\Public\Desktop\Winamp.lnk 2014-03-15 09:43 - 2014-04-04 22:06 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Winamp 2014-03-15 09:43 - 2014-03-15 21:46 - 00000000 ____D () C:\Program Files (x86)\Winamp 2014-03-15 09:18 - 2014-03-15 09:18 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-03-15 09:17 - 2014-03-15 09:17 - 00000000 ____D () C:\Windows\SysWOW64\NV 2014-03-15 09:17 - 2014-03-15 09:17 - 00000000 ____D () C:\Windows\system32\NV 2014-03-15 09:14 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-03-15 09:14 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00484296 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00409544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00377688 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-03-15 09:14 - 2014-03-04 16:35 - 00033736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2014-03-15 08:28 - 2014-03-15 08:28 - 00000000 ____D () C:\Users\DarekW\AppData\Local\NVIDIA Corporation 2014-03-15 08:27 - 2014-01-21 04:53 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-03-15 08:27 - 2014-01-21 04:53 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-03-15 08:27 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-03-15 08:27 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-03-15 08:27 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-03-15 08:27 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-03-15 08:27 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-03-15 08:27 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-03-15 08:26 - 2013-12-27 20:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-03-15 08:26 - 2013-12-27 20:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-03-15 08:26 - 2013-12-27 20:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-03-15 08:25 - 2014-03-15 08:29 - 00000000 ____D () C:\Users\DarekW\AppData\Local\NVIDIA 2014-03-15 08:22 - 2014-04-02 13:16 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\NVIDIA 2014-03-15 08:22 - 2014-03-15 08:22 - 00000000 ____D () C:\Program Files (x86)\GPU-Z 2014-03-15 08:01 - 2014-03-22 18:54 - 00000000 ____D () C:\Program Files\CPUID 2014-03-15 07:38 - 2014-04-12 15:55 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-03-15 07:38 - 2014-03-15 07:38 - 00000986 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-03-15 07:33 - 2014-04-12 21:00 - 00002220 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-15 07:29 - 2014-03-15 07:29 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Macromedia 2014-03-15 07:17 - 2014-04-12 20:58 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-15 07:17 - 2014-04-12 20:28 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-15 07:17 - 2014-03-29 20:23 - 00004032 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-03-15 07:17 - 2014-03-29 20:23 - 00003796 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-03-15 07:17 - 2014-03-15 07:33 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Google 2014-03-15 07:17 - 2014-03-15 07:33 - 00000000 ____D () C:\Program Files (x86)\Google 2014-03-15 07:15 - 2014-03-15 07:17 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Deployment 2014-03-15 07:15 - 2014-03-15 07:15 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Apps\2.0 2014-03-15 06:00 - 2014-03-15 06:00 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Intel_Corporation 2014-03-15 05:39 - 2014-03-15 05:39 - 00001020 _____ () C:\Users\DarekW\Desktop\AxessManager — skrót.lnk 2014-03-15 05:29 - 2014-03-15 05:29 - 00000000 ____D () C:\AxessManager 2014-03-15 05:28 - 2014-03-15 05:28 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-03-15 05:06 - 2014-03-15 05:06 - 00000000 ____D () C:\ProgramData\ToshibaEurope ==================== One Month Modified Files and Folders ======= 2014-04-12 21:02 - 2014-04-12 21:02 - 00018648 _____ () C:\Users\DarekW\Downloads\FRST.txt 2014-04-12 21:02 - 2014-04-12 19:46 - 00000000 ____D () C:\FRST 2014-04-12 21:02 - 2014-04-05 09:41 - 00001871 _____ () C:\Users\Public\Desktop\McAfee AntiVirus Plus.lnk 2014-04-12 21:00 - 2014-03-15 07:33 - 00002220 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-04-12 21:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru 2014-04-12 20:58 - 2014-03-16 00:59 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\GG 2014-04-12 20:58 - 2014-03-15 07:17 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-12 20:57 - 2014-04-04 23:14 - 00000214 _____ () C:\Windows\Tasks\AutoKMS.job 2014-04-12 20:57 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-12 20:57 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-04-12 20:46 - 2014-04-12 20:11 - 00022089 _____ () C:\Windows\WindowsUpdate.log 2014-04-12 20:38 - 2014-04-12 20:38 - 00991232 _____ () C:\Users\DarekW\Downloads\MicrosoftFixit50267.msi 2014-04-12 20:33 - 2014-03-16 01:41 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1715611341-132608252-1270519658-1002 2014-04-12 20:31 - 2014-04-12 20:31 - 00448512 _____ (OldTimer Tools) C:\Users\DarekW\Downloads\TFC.exe 2014-04-12 20:31 - 2013-09-19 19:02 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-12 20:31 - 2013-08-28 16:28 - 00807160 _____ () C:\Windows\system32\perfh015.dat 2014-04-12 20:31 - 2013-08-28 16:28 - 00163478 _____ () C:\Windows\system32\perfc015.dat 2014-04-12 20:28 - 2014-03-15 07:17 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-12 20:27 - 2014-03-17 17:57 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-04-12 20:26 - 2014-04-05 19:51 - 00000000 ___HD () C:\Users\DarekW\AppData\Roaming\Origin 2014-04-12 20:26 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-04-12 19:49 - 2014-04-12 19:49 - 00059093 _____ () C:\Users\DarekW\Desktop\FRST.txt 2014-04-12 19:49 - 2014-04-12 19:49 - 00040876 _____ () C:\Users\DarekW\Desktop\Shortcut.txt 2014-04-12 19:49 - 2014-04-12 19:49 - 00027418 _____ () C:\Users\DarekW\Desktop\Addition.txt 2014-04-12 19:45 - 2014-04-12 19:44 - 02157568 _____ (Farbar) C:\Users\DarekW\Downloads\FRST64.exe 2014-04-12 19:31 - 2014-04-12 19:31 - 00059212 _____ () C:\Users\DarekW\Desktop\Extras.Txt 2014-04-12 19:30 - 2014-04-12 19:30 - 00160260 _____ () C:\Users\DarekW\Desktop\OTL.Txt 2014-04-12 18:53 - 2014-04-12 18:53 - 00602112 _____ (OldTimer Tools) C:\Users\DarekW\Downloads\OTL.exe 2014-04-12 18:46 - 2014-04-12 18:46 - 00020096 _____ () C:\Users\DarekW\Documents\cc_20140412_184557.reg 2014-04-12 18:46 - 2014-04-10 21:26 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-12 15:55 - 2014-03-15 07:38 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-04-11 23:14 - 2014-04-04 23:14 - 00000214 _____ () C:\Windows\Tasks\AutoKMSDaily.job 2014-04-11 20:18 - 2014-03-16 15:28 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\BitComet 2014-04-11 19:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\DesktopTileResources 2014-04-11 19:09 - 2014-04-11 19:09 - 00001972 _____ () C:\Users\DarekW\Documents\cc_20140411_190900.reg 2014-04-11 19:05 - 2014-03-17 23:24 - 00000000 ____D () C:\AdwCleaner 2014-04-10 21:25 - 2014-04-10 21:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-04-10 21:25 - 2014-03-16 20:10 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-04-10 21:25 - 2014-03-16 20:10 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Malwarebytes 2014-04-10 21:25 - 2014-03-16 20:10 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-10 21:25 - 2014-03-16 20:10 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-04-10 19:08 - 2014-04-10 19:08 - 00000000 ____D () C:\Users\DarekW\AppData\Local\GHISLER 2014-04-10 19:03 - 2014-03-16 13:15 - 00000000 ___RD () C:\Users\DarekW\Desktop\inne 2014-04-10 18:43 - 2014-04-10 18:42 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\GHISLER 2014-04-10 18:42 - 2014-04-10 18:42 - 00000000 ____D () C:\totalcmd 2014-04-08 20:10 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF 2014-04-07 21:25 - 2014-04-07 21:14 - 00000000 ____D () C:\Users\DarekW\AppData\Local\gtk-2.0 2014-04-07 21:25 - 2014-03-19 00:51 - 00000000 ____D () C:\Users\DarekW\.gimp-2.8 2014-04-07 21:24 - 2014-04-07 21:24 - 00001508 _____ () C:\Users\DarekW\AppData\Local\recently-used.xbel 2014-04-07 21:14 - 2014-04-07 21:14 - 00000000 ____D () C:\Users\DarekW\.thumbnails 2014-04-07 21:14 - 2014-03-16 01:34 - 00000000 ____D () C:\Users\DarekW 2014-04-07 16:14 - 2013-12-10 03:48 - 00000000 ____D () C:\ProgramData\McAfee 2014-04-07 16:14 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-04-06 11:55 - 2014-04-06 11:54 - 00005672 _____ () C:\Users\DarekW\Documents\cc_20140406_115456.reg 2014-04-05 21:40 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness 2014-04-05 20:29 - 2014-04-05 20:29 - 00000017 _____ () C:\Users\DarekW\AppData\Local\resmon.resmoncfg 2014-04-05 20:05 - 2014-04-05 20:05 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\WinRAR 2014-04-05 20:04 - 2014-04-05 20:04 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-04-05 20:04 - 2014-04-05 20:03 - 00000000 ____D () C:\Program Files\WinRAR 2014-04-05 19:58 - 2014-04-05 19:58 - 00000000 ____D () C:\Users\DarekW\Documents\FIFA 14 2014-04-05 16:05 - 2014-04-05 16:05 - 00007518 _____ () C:\Users\DarekW\Documents\cc_20140405_160458.reg 2014-04-05 16:04 - 2014-04-05 16:01 - 00080632 _____ () C:\Users\DarekW\Documents\cc_20140405_160147.reg 2014-04-05 09:40 - 2014-04-05 09:40 - 00000000 ____D () C:\Program Files (x86)\McAfee.com 2014-04-05 09:40 - 2013-12-10 03:48 - 00000000 ____D () C:\Program Files\mcafee 2014-04-05 09:40 - 2013-12-10 03:48 - 00000000 ____D () C:\Program Files\Common Files\mcafee 2014-04-05 09:40 - 2013-12-10 03:48 - 00000000 ____D () C:\Program Files (x86)\McAfee 2014-04-05 09:39 - 2014-04-05 09:39 - 00000000 ____D () C:\Program Files\McAfee.com 2014-04-05 00:11 - 2013-08-22 16:44 - 00483744 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-04-04 23:14 - 2014-04-04 23:14 - 00002732 _____ () C:\Windows\System32\Tasks\AutoKMSDaily 2014-04-04 23:14 - 2014-04-04 23:14 - 00002426 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-04-04 23:14 - 2014-04-04 23:14 - 00000184 _____ () C:\Windows\AutoKMS.ini 2014-04-04 23:13 - 2014-04-04 22:43 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-04 23:12 - 2013-08-22 21:11 - 00000000 ____D () C:\Windows\ShellNew 2014-04-04 23:11 - 2014-04-04 23:11 - 00000000 ____D () C:\Windows\PCHEALTH 2014-04-04 23:11 - 2014-04-04 23:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services 2014-04-04 23:11 - 2014-04-04 23:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework 2014-04-04 23:11 - 2014-04-04 23:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2014-04-04 23:11 - 2014-04-04 23:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-04-04 23:11 - 2013-08-28 15:54 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-04-04 23:10 - 2014-04-04 23:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8 2014-04-04 23:10 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-04-04 23:09 - 2014-04-04 23:09 - 00000000 __RHD () C:\MSOCache 2014-04-04 23:09 - 2014-04-04 23:09 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-04-04 23:09 - 2014-04-04 23:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-04-04 23:09 - 2013-08-22 15:25 - 00000199 _____ () C:\Windows\win.ini 2014-04-04 22:45 - 2014-04-04 22:45 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-04-04 22:43 - 2014-04-04 22:43 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Microsoft Help 2014-04-04 22:06 - 2014-03-15 09:43 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Winamp 2014-04-03 09:51 - 2014-04-10 21:25 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-10 21:25 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-03-16 20:10 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-02 13:16 - 2014-03-15 08:22 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\NVIDIA 2014-03-29 20:23 - 2014-03-15 07:17 - 00004032 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-03-29 20:23 - 2014-03-15 07:17 - 00003796 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-03-25 18:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-03-22 18:54 - 2014-03-15 08:01 - 00000000 ____D () C:\Program Files\CPUID 2014-03-20 21:24 - 2014-03-20 21:24 - 00000000 ____D () C:\Users\DarekW\Documents\Criterion Games 2014-03-20 20:43 - 2014-03-20 20:43 - 00001150 _____ () C:\Users\DarekW\Desktop\Play Need For Speed Most Wanted 2012.lnk 2014-03-20 16:37 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache 2014-03-20 16:35 - 2013-08-28 16:02 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-03-20 16:35 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-03-20 16:35 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-03-20 16:35 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-03-20 16:35 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-03-20 16:35 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\system32\winrm 2014-03-20 16:35 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\system32\WCN 2014-03-20 16:35 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\system32\slmgr 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\Com 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\IME 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-03-20 16:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-03-20 16:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-03-20 16:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-03-20 16:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep 2014-03-20 16:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe 2014-03-20 16:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism 2014-03-20 16:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing 2014-03-20 16:34 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal 2014-03-20 16:34 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-03-20 16:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform 2014-03-20 16:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Com 2014-03-20 16:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help 2014-03-20 16:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-03-20 16:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-03-20 16:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System 2014-03-19 16:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK 2014-03-19 16:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2014-03-19 00:53 - 2014-03-19 00:53 - 00001473 _____ () C:\Users\DarekW\Desktop\gimp-2.8 — skrót.lnk 2014-03-19 00:51 - 2014-03-19 00:51 - 00000000 ____D () C:\Users\DarekW\AppData\Local\gegl-0.2 2014-03-19 00:50 - 2014-03-19 00:48 - 00000000 ____D () C:\Program Files\GIMP 2 2014-03-18 16:48 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2014-03-18 16:45 - 2014-03-18 16:45 - 00000000 ____D () C:\Pendrive 2014-03-18 16:40 - 2014-03-18 00:28 - 00000000 __RDO () C:\Users\DarekW\SkyDrive 2014-03-17 23:26 - 2014-03-16 01:34 - 00001022 _____ () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-03-17 21:13 - 2014-03-17 21:13 - 00000082 _____ () C:\Users\DarekW\Documents\cc_20140317_201341.reg 2014-03-17 21:11 - 2014-03-16 15:54 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\DAEMON Tools Lite 2014-03-17 17:59 - 2014-03-17 17:44 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\.minecraft 2014-03-17 17:57 - 2014-03-17 17:44 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\.minecraftzyczu 2014-03-17 17:57 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-03-17 17:57 - 2013-08-22 15:25 - 00000871 _____ () C:\Windows\system32\Drivers\etc\hosts.old 2014-03-17 17:44 - 2014-03-16 01:34 - 00000000 ____D () C:\Users\DarekW\AppData\Local\VirtualStore 2014-03-17 17:43 - 2014-03-17 17:43 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Oracle 2014-03-17 17:42 - 2014-03-17 17:42 - 00000000 ____D () C:\ProgramData\Oracle 2014-03-17 17:41 - 2014-03-17 17:41 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-03-17 17:41 - 2014-03-17 17:41 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-03-17 17:41 - 2014-03-17 17:41 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-03-17 17:41 - 2014-03-17 17:41 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-03-17 17:41 - 2014-03-17 17:41 - 00000000 ____D () C:\ProgramData\Sun 2014-03-17 17:41 - 2014-03-17 17:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-03-16 21:13 - 2013-12-10 03:09 - 00000000 ____D () C:\Windows\System32\Tasks\TOSHIBA 2014-03-16 16:22 - 2014-03-16 16:22 - 00000000 ____D () C:\Users\DarekW\Documents\Deluxe Ski Jump 4 2014-03-16 16:09 - 2013-09-19 19:04 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-03-16 16:03 - 2014-03-16 16:03 - 00310728 _____ () C:\Windows\system32\Drivers\atksgt.sys 2014-03-16 16:03 - 2014-03-16 16:03 - 00042696 _____ () C:\Windows\system32\Drivers\lirsgt.sys 2014-03-16 15:56 - 2014-03-16 15:53 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-03-16 15:28 - 2014-03-16 15:28 - 00000000 ____D () C:\Program Files\BitComet 2014-03-16 12:54 - 2013-09-20 20:34 - 00000000 ____D () C:\Windows\Panther 2014-03-16 12:53 - 2014-03-16 12:53 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-03-16 12:53 - 2014-03-16 12:53 - 00000845 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-03-16 12:53 - 2014-03-16 12:53 - 00000000 ____D () C:\Program Files\CCleaner 2014-03-16 01:39 - 2014-03-16 01:34 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Packages 2014-03-16 01:38 - 2013-09-19 19:05 - 00000000 ____D () C:\ProgramData\Toshiba 2014-03-16 01:35 - 2014-03-16 01:35 - 00000000 ___RD () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-16 01:35 - 2014-03-16 01:35 - 00000000 ___RD () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-03-16 01:34 - 2014-03-16 01:34 - 00000020 ___SH () C:\Users\DarekW\ntuser.ini 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Ustawienia lokalne 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Szablony 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Moje dokumenty 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Menu Start 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Documents\Moje wideo 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Documents\Moje obrazy 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Documents\Moja muzyka 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\Dane aplikacji 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\AppData\Local\Historia 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 _SHDL () C:\Users\DarekW\AppData\Local\Dane aplikacji 2014-03-16 01:34 - 2014-03-16 01:34 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Adobe 2014-03-16 01:34 - 2013-08-22 21:09 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-03-16 01:03 - 2014-03-16 01:03 - 00000000 ___SD () C:\Users\DarekW\GG dysk 2014-03-16 01:00 - 2014-03-16 00:59 - 00000000 ____D () C:\Users\DarekW\AppData\Local\GG 2014-03-16 00:59 - 2014-03-16 00:59 - 00001171 _____ () C:\Users\DarekW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk 2014-03-16 00:59 - 2014-03-16 00:59 - 00001163 _____ () C:\Users\DarekW\Desktop\GG.lnk 2014-03-16 00:59 - 2014-03-16 00:59 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Mozilla 2014-03-15 21:58 - 2014-03-15 21:58 - 00000218 _____ () C:\Users\DarekW\Desktop\Counter-Strike.url 2014-03-15 21:46 - 2014-03-15 21:46 - 00001002 _____ () C:\Users\Public\Desktop\Winamp.lnk 2014-03-15 21:46 - 2014-03-15 09:43 - 00000000 ____D () C:\Program Files (x86)\Winamp 2014-03-15 09:18 - 2014-03-15 09:18 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-03-15 09:18 - 2013-12-10 02:54 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-03-15 09:17 - 2014-03-15 09:17 - 00000000 ____D () C:\Windows\SysWOW64\NV 2014-03-15 09:17 - 2014-03-15 09:17 - 00000000 ____D () C:\Windows\system32\NV 2014-03-15 09:17 - 2013-12-10 02:55 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-03-15 08:29 - 2014-03-15 08:25 - 00000000 ____D () C:\Users\DarekW\AppData\Local\NVIDIA 2014-03-15 08:28 - 2014-03-15 08:28 - 00000000 ____D () C:\Users\DarekW\AppData\Local\NVIDIA Corporation 2014-03-15 08:28 - 2013-12-10 02:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-03-15 08:27 - 2013-12-10 02:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-03-15 08:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore 2014-03-15 08:22 - 2014-03-15 08:22 - 00000000 ____D () C:\Program Files (x86)\GPU-Z 2014-03-15 07:38 - 2014-03-15 07:38 - 00000986 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-03-15 07:33 - 2014-03-15 07:17 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Google 2014-03-15 07:33 - 2014-03-15 07:17 - 00000000 ____D () C:\Program Files (x86)\Google 2014-03-15 07:29 - 2014-03-15 07:29 - 00000000 ____D () C:\Users\DarekW\AppData\Roaming\Macromedia 2014-03-15 07:17 - 2014-03-15 07:15 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Deployment 2014-03-15 07:15 - 2014-03-15 07:15 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Apps\2.0 2014-03-15 06:00 - 2014-03-15 06:00 - 00000000 ____D () C:\Users\DarekW\AppData\Local\Intel_Corporation 2014-03-15 05:41 - 2014-03-16 01:37 - 00000000 ____D () C:\Users\DarekW\AppData\Local\TOSHIBA 2014-03-15 05:39 - 2014-03-15 05:39 - 00001020 _____ () C:\Users\DarekW\Desktop\AxessManager — skrót.lnk 2014-03-15 05:29 - 2014-03-15 05:29 - 00000000 ____D () C:\AxessManager 2014-03-15 05:28 - 2014-03-15 05:28 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-03-15 05:06 - 2014-03-15 05:06 - 00000000 ____D () C:\ProgramData\ToshibaEurope ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2013-08-22 11:01] - [2013-08-22 14:39] - 2328880 ____A (Microsoft Corporation) 8479DC46E9A09015C0777A16BC22A15D C:\Windows\SysWOW64\explorer.exe [2013-08-22 04:06] - [2013-08-22 07:25] - 2063408 ____A (Microsoft Corporation) 2CA8E3C9335C3C8BAEB335345E48364D C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-10 19:54 ==================== End Of Log ============================