Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014 Ran by IZA (administrator) on IZA-KOMPUTER on 18-05-2014 23:25:28 Running from C:\Users\IZA\Downloads\FRST Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe () C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe () C:\Program Files (x86)\PLAY ONLINE\PLAY ONLINE.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Vimicro) C:\Program Files (x86)\USB Camera2\VM332_STI.EXE (CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (Farbar) C:\Users\IZA\Downloads\FRST\FRST.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2741544 2011-04-08] (Synaptics Incorporated) HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-10-17] (Lenovo) HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9753024 2011-10-17] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2011-10-17] (Lenovo(beijing) Limited) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-02-18] (Intel Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-03-28] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [536576 2010-01-19] (Vimicro) HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.) HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.) HKLM-x32\...\Run: [VeriFaceManager] => C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2011-10-17] (Lenovo) HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.) Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\...\MountPoints2: E - E:\AutoRun.exe HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\...\MountPoints2: G - G:\AutoRun.exe HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\...\MountPoints2: {5d5e3bfc-41f2-11e2-b840-b870f44b7652} - G:\AutoRun.exe HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\...\MountPoints2: {c9a66be3-37fe-11e2-b7f7-b870f44b7652} - E:\AutoRun.exe HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\...\MountPoints2: {f9a6a668-0e35-11e2-8c57-b870f44b7652} - E:\AutoRun.exe HKU\S-1-5-21-1137575165-3099178337-4115244329-1000\...\MountPoints2: {f9a6a67a-0e35-11e2-8c57-b870f44b7652} - E:\AutoRun.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=128 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://lenovo.msn.com HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Tcpip\..\Interfaces\{62CBFAD0-49F6-4FA7-8A64-5C8C5BF0D6C2}: [NameServer]212.2.96.51 212.2.96.52 Tcpip\..\Interfaces\{7B32C8CF-52F7-439E-B1D4-184A57A0E102}: [NameServer]89.108.202.21 89.108.195.21 Tcpip\..\Interfaces\{B76C3A05-E701-47DE-B870-649E2D823AE2}: [NameServer]89.108.202.21 89.108.195.21 FireFox: ======== FF ProfilePath: C:\Users\IZA\AppData\Roaming\Mozilla\Firefox\Profiles\3r1xywqs.default FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.) FF Plugin-x32: @ganymede/BOARDS,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\BOARDS\NPBOARDS.dll (Ganymede Technologies) FF Plugin-x32: @ganymede/CARDS,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\CARDS\NPCARDS.dll (Ganymede Technologies) FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( ) FF Plugin-x32: @ganymede/WORDS,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\WORDS\NPWORDS.dll (Ganymede Technologies) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Youtube and more - Easy Video Downloader - C:\Users\IZA\AppData\Roaming\Mozilla\Firefox\Profiles\3r1xywqs.default\Extensions\vdpure@link64.xpi [2013-07-14] FF Extension: Adblock Plus - C:\Users\IZA\AppData\Roaming\Mozilla\Firefox\Profiles\3r1xywqs.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-03-01] FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-10-09] Chrome: ======= CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN CHR StartupUrls: "hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\pdf.dll () CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Ganymede Boards Plugin) - C:\Program Files (x86)\Ganymede\Plugins\BOARDS\NPBOARDS.dll (Ganymede Technologies) CHR Plugin: (Ganymede Cards Plugin) - C:\Program Files (x86)\Ganymede\Plugins\CARDS\NPCARDS.dll (Ganymede Technologies) CHR Plugin: (Ganymede Words Plugin) - C:\Program Files (x86)\Ganymede\Plugins\WORDS\NPWORDS.dll (Ganymede Technologies) CHR Plugin: (GanymedeNet.Detector) - C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( ) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.) CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\IZA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-10-10] CHR Extension: (Google Wallet) - C:\Users\IZA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-16] CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-10-09] ==================== Services (Whitelisted) ================= S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-02-19] (Adobe Systems) R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [953632 2010-12-14] (Broadcom Corporation.) R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO) R2 HPSLPSVC; C:\Users\IZA\AppData\Local\Temp\7zS61B4\hpslpsvc64.dll [1039360 2013-07-19] (Hewlett-Packard Co.) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S2 KMService; C:\windows\SysWOW64\srvany.exe [8192 2013-04-04] () S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2012-10-06] () ==================== Drivers (Whitelisted) ==================== R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO) S2 DLPortIO; C:\Windows\SysWow64\Drivers\DLPortIO.sys [3584 1999-01-10] () R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO) S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2013-12-27] (ITE ) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-18 23:05 - 2014-05-18 23:13 - 00000000 ____D () C:\AdwCleaner 2014-05-18 22:54 - 2014-05-18 22:54 - 00000000 ____D () C:\windows\pss 2014-05-18 22:42 - 2014-05-18 22:42 - 00000686 _____ () C:\Users\IZA\Documents\pixfix.txt 2014-05-18 22:41 - 2014-05-18 22:41 - 00000000 ____D () C:\Users\IZA\Downloads\FRST2 2014-05-18 22:38 - 2014-05-18 22:38 - 00000000 ____D () C:\Users\IZA\Downloads\ADWcleaner 2014-05-18 22:29 - 2014-05-18 22:29 - 00003374 _____ () C:\Users\IZA\Documents\fixlist.txt 2014-05-17 16:45 - 2014-05-17 16:45 - 00000000 ____D () C:\Users\IZA\Downloads\SCH 2014-05-17 16:37 - 2014-05-18 23:25 - 00000000 ____D () C:\Users\IZA\Downloads\FRST 2014-05-17 16:35 - 2014-05-18 23:25 - 00000000 ____D () C:\FRST 2014-05-17 15:53 - 2014-05-17 16:04 - 00000000 ____D () C:\Users\IZA\Downloads\OTL 2014-05-17 02:02 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-05-17 02:02 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2014-05-17 02:02 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-05-17 02:02 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2014-05-17 02:02 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-05-17 02:02 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-05-17 02:01 - 2014-05-17 02:01 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-05-17 01:49 - 2014-05-17 01:49 - 00000000 ____D () C:\Users\IZA\Documents\oddzysk 2014-05-17 01:48 - 2014-05-17 01:48 - 00001083 _____ () C:\Users\Public\Desktop\StrongRecovery.lnk 2014-05-17 01:48 - 2014-05-17 01:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StrongRecovery 2014-05-17 01:48 - 2014-05-17 01:48 - 00000000 ____D () C:\Program Files (x86)\StrongRecovery 2014-05-17 01:30 - 2014-05-17 01:30 - 00001050 _____ () C:\Users\IZA\Desktop\VirtualDJ Home FREE.lnk 2014-05-17 01:10 - 2014-05-17 13:58 - 00000000 ____D () C:\Program Files\Recuva 2014-05-17 01:10 - 2014-05-17 01:10 - 00001658 _____ () C:\Users\Public\Desktop\Recuva.lnk 2014-05-17 01:04 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll 2014-05-17 01:04 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2014-05-17 01:04 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys 2014-05-17 01:04 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys 2014-05-17 01:04 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2014-05-17 01:04 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll 2014-05-17 01:04 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe 2014-05-17 01:04 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll 2014-05-17 01:04 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll 2014-05-17 01:04 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll 2014-05-17 01:04 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll 2014-05-17 01:04 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2014-05-17 01:04 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2014-05-17 01:04 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2014-05-17 01:04 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2014-05-17 01:04 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll 2014-05-17 01:04 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll 2014-05-17 01:04 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2014-05-17 01:04 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll 2014-05-17 01:04 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll 2014-05-17 01:04 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll 2014-05-17 01:04 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\wincredprovider.dll 2014-05-17 01:04 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe 2014-05-17 01:04 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\cngprovider.dll 2014-05-17 01:04 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\adprovider.dll 2014-05-17 01:04 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\capiprovider.dll 2014-05-17 01:04 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\dpapiprovider.dll 2014-05-17 01:04 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll 2014-05-17 01:04 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll 2014-05-17 01:04 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe 2014-05-17 01:04 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe 2014-05-17 01:04 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\cngprovider.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\windows\SysWOW64\adprovider.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\windows\SysWOW64\capiprovider.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpapiprovider.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wincredprovider.dll 2014-05-17 01:04 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll 2014-05-17 01:04 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll 2014-05-16 18:19 - 2014-05-17 01:30 - 00000000 ____D () C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ 2014-05-16 18:19 - 2014-05-17 01:30 - 00000000 ____D () C:\Program Files (x86)\VirtualDJ 2014-05-16 17:47 - 2014-05-16 17:48 - 16867957 _____ () C:\Users\IZA\Downloads\pjimg300.zip 2014-05-13 23:16 - 2014-05-15 22:59 - 00000000 ____D () C:\Users\IZA\Documents\VirtualDJ 2014-05-13 23:14 - 2014-05-13 23:14 - 39178560 _____ (Atomix Productions) C:\Users\IZA\Downloads\install_virtualdj_home_v7.4.1(dobreprogramy.pl).exe 2014-05-13 23:05 - 2014-05-18 22:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-08 09:33 - 2014-05-17 13:53 - 00000000 ___SD () C:\windows\system32\CompatTel 2014-05-06 13:58 - 2014-05-06 13:59 - 00000000 ____D () C:\Users\IZA\Desktop\zuza 2014-05-05 23:07 - 2014-05-05 23:07 - 00000650 _____ () C:\Users\IZA\Desktop\Fixture creator.lnk 2014-05-05 23:07 - 2014-05-05 23:07 - 00000650 _____ () C:\Users\IZA\Desktop\Art-Net to DMX.lnk 2014-05-05 23:07 - 2014-05-05 23:07 - 00000645 _____ () C:\Users\IZA\Desktop\FreeStyler.lnk 2014-05-05 23:07 - 2014-05-05 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeStyler 2014-05-05 23:07 - 2012-07-27 20:18 - 00489984 _____ (mcswe) C:\windows\SysWOW64\MCSWE.dll 2014-05-05 23:07 - 2012-07-27 20:18 - 00036864 _____ () C:\windows\SysWOW64\USB.dll 2014-05-05 23:07 - 2012-05-02 11:17 - 00617816 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.ocx 2014-05-05 23:07 - 2011-07-08 15:04 - 00040960 _____ () C:\windows\SysWOW64\prgsrnd.ocx 2014-05-05 23:07 - 2011-07-08 14:47 - 00069632 _____ () C:\windows\SysWOW64\sldr.ocx 2014-05-05 23:07 - 2011-07-08 14:45 - 00049152 _____ () C:\windows\SysWOW64\prgs.ocx 2014-05-05 23:07 - 2010-12-11 00:00 - 00294912 _____ (ilLUTZminator) C:\windows\SysWOW64\uDMX.dll 2014-05-05 23:07 - 2010-02-16 14:22 - 00126800 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSWINSCK.OCX 2014-05-05 23:07 - 2009-05-26 15:27 - 00302592 _____ () C:\windows\SysWOW64\usbdmx.dll 2014-05-05 23:07 - 2009-03-24 07:52 - 00119616 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSCOMM32.OCX 2014-05-05 23:07 - 2007-02-06 14:06 - 00671744 _____ (Next Generation Technologies) C:\windows\SysWOW64\Afterglow.out.dll 2014-05-05 23:07 - 2007-02-02 13:58 - 00077824 _____ (Next Generation Technologies) C:\windows\SysWOW64\AGlowthd.dll 2014-05-05 23:07 - 2007-02-02 13:58 - 00057344 _____ (Next Generation Technologies) C:\windows\SysWOW64\AGlowdrv.dll 2014-05-05 23:07 - 2007-01-16 09:55 - 00084992 _____ () C:\windows\SysWOW64\DMX510Vb.dll 2014-05-05 23:07 - 2006-07-22 02:49 - 00073728 _____ (home) C:\windows\SysWOW64\FSButton.ocx 2014-05-05 23:07 - 2006-07-12 13:21 - 00176128 _____ (FTDI Ltd) C:\windows\SysWOW64\FTD2XX.dll 2014-05-05 23:07 - 2006-03-19 18:29 - 00028672 _____ (Raphael Wellekens) C:\windows\SysWOW64\fsledr.ocx 2014-05-05 23:07 - 2006-03-18 15:44 - 00028672 _____ (Raphael Wellekens) C:\windows\SysWOW64\fsled.ocx 2014-05-05 23:07 - 2006-01-22 15:37 - 00049152 _____ () C:\windows\SysWOW64\EspionDll.dll 2014-05-05 23:07 - 2006-01-16 22:15 - 00049152 _____ (www.oksidizer.com) C:\windows\SysWOW64\usb2dmx.dll 2014-05-05 23:07 - 2005-07-19 14:23 - 00069632 _____ (O'ksi'D Software) C:\windows\SysWOW64\okdmx31.dll 2014-05-05 23:07 - 2005-07-18 16:50 - 00301056 _____ () C:\windows\SysWOW64\usbdmxfs.dll 2014-05-05 23:07 - 2005-06-28 20:23 - 00322048 _____ () C:\windows\SysWOW64\Easylase.dll 2014-05-05 23:07 - 2005-06-18 17:50 - 00032768 _____ () C:\windows\SysWOW64\MPUSBAPI.DLL 2014-05-05 23:07 - 2005-02-01 21:00 - 00017920 _____ () C:\windows\SysWOW64\usbdmxsi.dll 2014-05-05 23:07 - 2004-06-02 07:54 - 00340480 _____ () C:\windows\SysWOW64\K8062e.exe 2014-05-05 23:07 - 2004-06-02 06:54 - 00042496 _____ () C:\windows\SysWOW64\K8062D.dll 2014-05-05 23:07 - 2004-06-02 06:54 - 00016384 _____ () C:\windows\SysWOW64\FASTTime32.dll 2014-05-05 23:07 - 2004-04-02 18:44 - 00110592 _____ () C:\windows\SysWOW64\usb_dll.dll 2014-05-05 23:07 - 2003-11-26 12:29 - 00044544 _____ () C:\windows\SysWOW64\dmx60.dll 2014-05-05 23:07 - 2003-11-26 12:27 - 00044544 _____ () C:\windows\SysWOW64\dmx120.dll 2014-05-05 23:07 - 2002-07-24 04:52 - 00032768 _____ () C:\windows\SysWOW64\inpout32.dll 2014-05-05 23:07 - 2002-06-27 13:01 - 00077824 _____ () C:\windows\SysWOW64\dashardvb.dll 2014-05-05 23:07 - 2002-06-13 16:12 - 00024576 _____ (EliteVB) C:\windows\SysWOW64\Threading.dll 2014-05-05 23:07 - 2002-01-04 15:03 - 00037888 _____ () C:\windows\SysWOW64\LPT_dmx.dll 2014-05-05 23:07 - 1999-01-10 14:00 - 00003584 _____ () C:\windows\SysWOW64\Drivers\dlportio.sys 2014-05-05 23:07 - 1998-12-03 18:11 - 00000331 _____ () C:\windows\SysWOW64\ccrpTmr6.dep 2014-05-05 23:07 - 1998-11-23 18:10 - 00011128 _____ () C:\windows\SysWOW64\ccrpTmr6.tlb 2014-05-05 23:07 - 1998-11-23 17:10 - 00090112 _____ (http://www.mvps.org/vb) C:\windows\SysWOW64\ccrpTmr6.dll 2014-05-05 23:07 - 1998-06-19 01:42 - 00027648 _____ (vbaccelerator) C:\windows\SysWOW64\cProgBar.ocx 2014-05-05 23:07 - 1998-04-18 14:57 - 00024576 _____ (Software Solutions) C:\windows\SysWOW64\hirestimer.ocx 2014-05-05 23:07 - 1996-09-27 10:29 - 00034816 _____ (Scientific Software Tools, Inc.) C:\windows\SysWOW64\DLPORTIO.dll 2014-05-05 23:06 - 2014-05-05 23:06 - 00001490 _____ () C:\Users\IZA\Desktop\Magic 3D Easy View.lnk 2014-05-05 23:06 - 2014-05-05 23:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic 3D Easy View 2014-05-05 23:05 - 2014-05-05 23:05 - 00000000 ____D () C:\SiudiDriver 2014-05-05 23:04 - 2014-05-06 00:50 - 00000000 ____D () C:\FreeStyler 2014-05-05 22:06 - 2014-05-17 00:49 - 00000000 ____D () C:\MyDMX2 2014-05-05 22:06 - 2014-05-05 22:06 - 00001408 _____ () C:\Users\IZA\Desktop\MyDMX 2.0.lnk 2014-05-05 22:06 - 2014-05-05 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyDMX 2.0 2014-05-05 18:28 - 2014-05-05 18:28 - 00000000 ____D () C:\Users\IZA\Desktop\Arkusze 2014 2014-05-03 00:48 - 2014-05-03 00:48 - 00000000 ____D () C:\Users\IZA\AppData\Roaming\EasyView 2014-05-01 12:26 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2014-05-01 12:26 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2014-05-01 12:26 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll 2014-05-01 12:26 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2014-05-01 12:25 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-05-01 12:25 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-05-01 12:25 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-05-01 12:25 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-05-01 12:25 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-05-01 12:25 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-05-01 12:25 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-05-01 12:25 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-05-01 12:25 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-05-01 12:25 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2014-05-01 12:25 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-05-01 12:25 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-05-01 12:25 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-05-01 12:25 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-05-01 12:25 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll 2014-05-01 12:25 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2014-05-01 12:25 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-05-01 12:25 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-05-01 12:25 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-05-01 12:25 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2014-05-01 12:25 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2014-05-01 12:25 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-05-01 12:25 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe 2014-05-01 12:25 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-05-01 12:25 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-05-01 12:25 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-05-01 12:25 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-01 12:25 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-05-01 12:25 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll 2014-05-01 12:25 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-05-01 12:25 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-05-01 12:25 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-05-01 12:25 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-05-01 12:25 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-05-01 12:25 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-05-01 12:25 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-05-01 12:25 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-05-01 12:25 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-05-01 12:25 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-05-01 12:25 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-04-28 20:45 - 2014-05-01 12:44 - 00003206 _____ () C:\windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1137575165-3099178337-4115244329-1000 2014-04-26 17:07 - 2014-05-01 12:44 - 00003344 _____ () C:\windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1137575165-3099178337-4115244329-1000 ==================== One Month Modified Files and Folders ======= 2014-05-18 23:25 - 2014-05-17 16:37 - 00000000 ____D () C:\Users\IZA\Downloads\FRST 2014-05-18 23:25 - 2014-05-17 16:35 - 00000000 ____D () C:\FRST 2014-05-18 23:21 - 2012-01-11 18:04 - 03917834 _____ () C:\FaceProv.log 2014-05-18 23:21 - 2011-10-17 22:37 - 00495183 _____ () C:\windows\system32\fastboot.set 2014-05-18 23:21 - 2011-10-17 22:30 - 00000000 ____D () C:\ProgramData\VeriFace 2014-05-18 23:21 - 2011-10-17 22:23 - 00001058 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-05-18 23:20 - 2013-10-25 19:15 - 00021947 _____ () C:\windows\setupact.log 2014-05-18 23:20 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-05-18 23:19 - 2012-10-06 19:54 - 01391457 _____ () C:\windows\system32\Drivers\sfi.dat 2014-05-18 23:19 - 2011-10-17 13:31 - 00756308 _____ () C:\windows\system32\perfh015.dat 2014-05-18 23:19 - 2011-10-17 13:31 - 00161530 _____ () C:\windows\system32\perfc015.dat 2014-05-18 23:19 - 2009-07-14 07:13 - 01704286 _____ () C:\windows\system32\PerfStringBackup.INI 2014-05-18 23:14 - 2013-12-27 19:50 - 00136998 _____ () C:\windows\PFRO.log 2014-05-18 23:13 - 2014-05-18 23:05 - 00000000 ____D () C:\AdwCleaner 2014-05-18 22:59 - 2014-05-13 23:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-18 22:54 - 2014-05-18 22:54 - 00000000 ____D () C:\windows\pss 2014-05-18 22:54 - 2011-10-17 21:47 - 01361573 _____ () C:\windows\WindowsUpdate.log 2014-05-18 22:54 - 2009-07-14 06:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-18 22:54 - 2009-07-14 06:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-18 22:42 - 2014-05-18 22:42 - 00000686 _____ () C:\Users\IZA\Documents\pixfix.txt 2014-05-18 22:41 - 2014-05-18 22:41 - 00000000 ____D () C:\Users\IZA\Downloads\FRST2 2014-05-18 22:38 - 2014-05-18 22:38 - 00000000 ____D () C:\Users\IZA\Downloads\ADWcleaner 2014-05-18 22:29 - 2014-05-18 22:29 - 00003374 _____ () C:\Users\IZA\Documents\fixlist.txt 2014-05-18 22:25 - 2012-10-06 19:50 - 00003974 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{511C47AA-DD8E-4B04-BB16-C588B12C3751} 2014-05-18 22:12 - 2011-10-17 22:23 - 00001062 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-05-17 16:45 - 2014-05-17 16:45 - 00000000 ____D () C:\Users\IZA\Downloads\SCH 2014-05-17 16:04 - 2014-05-17 15:53 - 00000000 ____D () C:\Users\IZA\Downloads\OTL 2014-05-17 14:14 - 2011-10-17 22:23 - 00002189 _____ () C:\Users\Public\Desktop\Przeglądarka internetowa.lnk 2014-05-17 14:09 - 2013-12-27 17:37 - 00000000 ____D () C:\Users\IZA\Documents\CCCLEANER reg 2014-05-17 13:58 - 2014-05-17 01:10 - 00000000 ____D () C:\Program Files\Recuva 2014-05-17 13:57 - 2012-01-11 18:05 - 00112856 _____ () C:\Users\IZA\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-17 13:56 - 2012-01-11 18:05 - 00000000 ___RD () C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-17 13:56 - 2012-01-11 18:05 - 00000000 ___RD () C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-17 13:55 - 2009-07-14 06:45 - 00438672 _____ () C:\windows\system32\FNTCACHE.DAT 2014-05-17 13:53 - 2014-05-08 09:33 - 00000000 ___SD () C:\windows\system32\CompatTel 2014-05-17 02:03 - 2012-01-11 18:59 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-17 02:01 - 2014-05-17 02:01 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-05-17 02:00 - 2013-08-15 23:34 - 00000000 ____D () C:\windows\system32\MRT 2014-05-17 01:55 - 2013-04-04 11:33 - 93223848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-05-17 01:49 - 2014-05-17 01:49 - 00000000 ____D () C:\Users\IZA\Documents\oddzysk 2014-05-17 01:48 - 2014-05-17 01:48 - 00001083 _____ () C:\Users\Public\Desktop\StrongRecovery.lnk 2014-05-17 01:48 - 2014-05-17 01:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StrongRecovery 2014-05-17 01:48 - 2014-05-17 01:48 - 00000000 ____D () C:\Program Files (x86)\StrongRecovery 2014-05-17 01:30 - 2014-05-17 01:30 - 00001050 _____ () C:\Users\IZA\Desktop\VirtualDJ Home FREE.lnk 2014-05-17 01:30 - 2014-05-16 18:19 - 00000000 ____D () C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ 2014-05-17 01:30 - 2014-05-16 18:19 - 00000000 ____D () C:\Program Files (x86)\VirtualDJ 2014-05-17 01:13 - 2014-03-28 00:58 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-05-17 01:10 - 2014-05-17 01:10 - 00001658 _____ () C:\Users\Public\Desktop\Recuva.lnk 2014-05-17 00:54 - 2012-10-07 17:09 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-05-17 00:51 - 2012-01-11 18:04 - 00000000 ____D () C:\Users\IZA 2014-05-17 00:50 - 2014-04-09 21:12 - 00000000 ____D () C:\windows\System32\Tasks\COMODO 2014-05-17 00:50 - 2013-07-23 20:34 - 00000000 ____D () C:\Users\nasula 2014-05-17 00:49 - 2014-05-05 22:06 - 00000000 ____D () C:\MyDMX2 2014-05-17 00:49 - 2012-10-22 18:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-17 00:49 - 2011-10-17 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-05-17 00:49 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\registration 2014-05-17 00:48 - 2012-01-11 18:04 - 00000000 ____D () C:\Users\IZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-05-17 00:47 - 2012-10-09 12:52 - 00000000 ____D () C:\ProgramData\Real 2014-05-16 18:47 - 2012-01-11 21:11 - 00000000 ____D () C:\Users\IZA\AppData\Roaming\Media Player Classic 2014-05-16 17:48 - 2014-05-16 17:47 - 16867957 _____ () C:\Users\IZA\Downloads\pjimg300.zip 2014-05-15 22:59 - 2014-05-13 23:16 - 00000000 ____D () C:\Users\IZA\Documents\VirtualDJ 2014-05-13 23:14 - 2014-05-13 23:14 - 39178560 _____ (Atomix Productions) C:\Users\IZA\Downloads\install_virtualdj_home_v7.4.1(dobreprogramy.pl).exe 2014-05-13 20:52 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF 2014-05-11 21:36 - 2012-01-11 18:45 - 00000000 ____D () C:\Users\IZA\AppData\Roaming\foobar2000 2014-05-11 14:06 - 2011-10-17 22:23 - 00004058 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-05-11 14:06 - 2011-10-17 22:23 - 00003806 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-05-09 08:14 - 2014-05-17 01:04 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-17 01:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2014-05-08 20:23 - 2012-10-07 19:43 - 00692400 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2014-05-08 20:23 - 2012-10-07 19:43 - 00070832 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-06 13:59 - 2014-05-06 13:58 - 00000000 ____D () C:\Users\IZA\Desktop\zuza 2014-05-06 06:40 - 2014-05-17 02:02 - 23544320 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-17 02:02 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-17 02:02 - 17382912 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-17 02:02 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-17 02:02 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-17 02:02 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-05-06 00:50 - 2014-05-05 23:04 - 00000000 ____D () C:\FreeStyler 2014-05-05 23:07 - 2014-05-05 23:07 - 00000650 _____ () C:\Users\IZA\Desktop\Fixture creator.lnk 2014-05-05 23:07 - 2014-05-05 23:07 - 00000650 _____ () C:\Users\IZA\Desktop\Art-Net to DMX.lnk 2014-05-05 23:07 - 2014-05-05 23:07 - 00000645 _____ () C:\Users\IZA\Desktop\FreeStyler.lnk 2014-05-05 23:07 - 2014-05-05 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeStyler 2014-05-05 23:06 - 2014-05-05 23:06 - 00001490 _____ () C:\Users\IZA\Desktop\Magic 3D Easy View.lnk 2014-05-05 23:06 - 2014-05-05 23:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic 3D Easy View 2014-05-05 23:05 - 2014-05-05 23:05 - 00000000 ____D () C:\SiudiDriver 2014-05-05 23:05 - 2013-12-27 15:59 - 00026704 _____ () C:\windows\DPINST.LOG 2014-05-05 22:06 - 2014-05-05 22:06 - 00001408 _____ () C:\Users\IZA\Desktop\MyDMX 2.0.lnk 2014-05-05 22:06 - 2014-05-05 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyDMX 2.0 2014-05-05 18:28 - 2014-05-05 18:28 - 00000000 ____D () C:\Users\IZA\Desktop\Arkusze 2014 2014-05-04 22:14 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache 2014-05-03 00:48 - 2014-05-03 00:48 - 00000000 ____D () C:\Users\IZA\AppData\Roaming\EasyView 2014-05-01 14:56 - 2014-04-09 21:04 - 00000000 ____D () C:\Users\IZA\Downloads\comodoooo 2014-05-01 12:44 - 2014-04-28 20:45 - 00003206 _____ () C:\windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1137575165-3099178337-4115244329-1000 2014-05-01 12:44 - 2014-04-26 17:07 - 00003344 _____ () C:\windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1137575165-3099178337-4115244329-1000 2014-05-01 12:42 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\PolicyDefinitions 2014-04-26 17:06 - 2009-07-14 07:08 - 00032608 _____ () C:\windows\Tasks\SCHEDLGU.TXT 2014-04-24 18:57 - 2014-01-29 16:34 - 00000000 ____D () C:\Users\IZA\Documents\IZA SZKOŁA 2014-04-18 21:37 - 2014-04-09 21:12 - 00001985 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk Some content of TEMP: ==================== C:\Users\IZA\AppData\Local\Temp\cisC706.exe C:\Users\IZA\AppData\Local\Temp\Quarantine.exe C:\Users\nasula\AppData\Local\Temp\NOSEventMessages.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe [2014-05-17 01:04] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-04 22:05 ==================== End Of Log ============================