Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-06-2014 01 Ran by ppkk (administrator) on PPKK-KOMPUTER on 22-06-2014 08:52:18 Running from C:\OTL Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Micro-Star International) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Highresolution Enterprises) C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe (PixArt Imaging Incorporation) C:\Windows\PixArt\Pac7302\Monitor.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\osk.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Microsoft Corporation) C:\Windows\System32\audiodg.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [436224 2010-10-29] () HKLM\...\Run: [X Mouse] => C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1171088 2013-10-06] (Highresolution Enterprises) HKLM\...\Run: [PAC7302_Monitor] => C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation) HKLM\...\Run: [SpeedFan] => C:\Program Files (x86)\SpeedFan\speedfan.exe [4683768 2013-03-15] (Almico Software (www.almico.com)) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310064 2014-05-28] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-27] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-2120160140-4164336762-2027464182-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2014-06-03] (Glarysoft Ltd) HKU\S-1-5-21-2120160140-4164336762-2027464182-1000\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-2120160140-4164336762-2027464182-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\S-1-5-21-2120160140-4164336762-2027464182-1029\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2014-06-03] (Glarysoft Ltd) HKU\S-1-5-21-2120160140-4164336762-2027464182-1029\...\RunOnce: [osk.exe] - C:\Windows\system32\osk.exe [692736 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-2120160140-4164336762-2027464182-1029\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-2120160140-4164336762-2027464182-1029\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 AppInit_DLLs-x32:  => "" File Not Found ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BootExecute: autocheck autochk * BootDefrag.exesdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKLM-x32 - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D} StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=54892e04-1eb3-11e1-b405-000e50f6b550&q={searchTerms} SearchScopes: HKLM-x32 - {3CAE00F1-DB7E-4E95-A557-8FB865DD779E} URL = http://startsear.ch/?aff=1&src=sp&cf=54892e04-1eb3-11e1-b405-000e50f6b550&q={searchTerms} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {07C10593-2CFD-4C3F-9C0A-8330EC9CC3BE} URL = http://isearch.avg.com/search?cid={B25C2EE9-ACF4-4531-84A4-074713541BA1}&mid=3bab257010be47d1a9b53f6a2ef7942b-da7d42258408861516c3805a72c76914844160f9&lang=en&ds=ft011&pr=sa&d=2012-04-07 16:31:47&v=10.2.0.3&sap=dsp&q={searchTerms} SearchScopes: HKCU - {3CAE00F1-DB7E-4E95-A557-8FB865DD779E} URL = https://isearch.avg.com/search?cid={B25C2EE9-ACF4-4531-84A4-074713541BA1}&mid=3bab257010be47d1a9b53f6a2ef7942b-da7d42258408861516c3805a72c76914844160f9&lang=en&ds=ft011&pr=sa&d=2012-04-07 16:31:47&v=12.2.5.32&sap=dsp&q={searchTerms} SearchScopes: HKCU - {8A69DDED-ECAB-4EC5-9659-41B4CC23955F} URL = http://isearch.avg.com/search?cid={B25C2EE9-ACF4-4531-84A4-074713541BA1}&mid=3bab257010be47d1a9b53f6a2ef7942b-da7d42258408861516c3805a72c76914844160f9&lang=en&ds=ft011&pr=sa&d=2012-04-07 16:31:47&v=13.2.0.4&sap=dsp&q={searchTerms} BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: HistoryTriggerBHO Class - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll (LG Electronics) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - No File BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: No Name - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - No File DPF: HKLM-x32 {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - No File Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll (Belarc, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{1F3B2ACD-D41E-42A3-9F5A-96781A2CC80E}: [NameServer]62.233.233.233 87.204.204.204 FireFox: ======== FF ProfilePath: C:\Users\ppkk\AppData\Roaming\Mozilla\Firefox\Profiles\bbkjaup9.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF user.js: detected! => C:\Users\ppkk\AppData\Roaming\Mozilla\Firefox\Profiles\bbkjaup9.default\user.js FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml FF Extension: DownloadHelper - C:\Users\ppkk\AppData\Roaming\Mozilla\Firefox\Profiles\bbkjaup9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-04] FF Extension: Saved Password Editor - C:\Users\ppkk\AppData\Roaming\Mozilla\Firefox\Profiles\bbkjaup9.default\Extensions\savedpasswordeditor@daniel.dawson.xpi [2013-11-09] FF Extension: pdfit - C:\Users\ppkk\AppData\Roaming\Mozilla\Firefox\Profiles\bbkjaup9.default\Extensions\service@touchpdf.com.xpi [2014-05-09] FF Extension: z - C:\Program Files (x86)\Mozilla Firefox\extensions\{73b8ed72-c249-9feb-b035-35738cba2a45} [2014-05-09] FF HKLM-x32\...\Firefox\Extensions: [{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B}] - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B} FF Extension: LG Air Sync - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B} [2011-12-06] Chrome: ======= CHR HomePage: hxxp://www.gazeta.pl/0,0.html?p=153 CHR StartupUrls: "hxxp://www.gazeta.pl/0,0.html?p=153" CHR Extension: (Dokumenty Google) - C:\Users\ppkk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-06] CHR Extension: (Dysk Google) - C:\Users\ppkk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-06] CHR Extension: (YouTube) - C:\Users\ppkk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-06] CHR Extension: (Szukaj w Google) - C:\Users\ppkk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-06] CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\ppkk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-06] CHR Extension: (Google Wallet) - C:\Users\ppkk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-06] CHR Extension: (Gmail) - C:\Users\ppkk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-06] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-27] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-27] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-27] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG) R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [83952 2014-03-27] (Micro-Star International) R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [341280 2011-11-02] (Nitro PDF Software) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) S3 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.) S3 AVGIDSAgent; "C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe" [X] S3 avgwd; "C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe" [X] ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-06-19] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-27] (Avira Operations GmbH & Co. KG) R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-05-23] (AVG Technologies) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-27] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-27] (Avira Operations GmbH & Co. KG) R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-06-03] (Glarysoft Ltd) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2014-04-24] (DT Soft Ltd) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [13896 2013-03-07] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [117248 2010-11-15] (Huawei Technologies Co., Ltd.) [File not signed] S3 FlashUSB; C:\Windows\System32\DRIVERS\FlashUSB.sys [19968 2013-08-21] (Intel Mobile Communications) R0 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20672 2014-06-06] (Glarysoft Ltd) S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [91136 2010-11-15] (Huawei Technologies Co., Ltd.) [File not signed] R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2014-01-14] (REALiX(tm)) R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.) R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [91368 2013-05-29] (Panda Security, S.L.) S1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [122088 2013-05-29] (Panda Security, S.L.) S1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [109288 2013-05-29] (Panda Security, S.L.) S1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [114920 2013-05-29] (Panda Security, S.L.) S1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [95464 2013-05-29] (Panda Security, S.L.) S4 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [69864 2013-05-29] (Panda Security, S.L.) S1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [119016 2013-05-29] (Panda Security, S.L.) S1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [305896 2013-05-29] (Panda Security, S.L.) R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [118504 2013-05-29] (Panda Security, S.L.) S1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [114920 2013-05-29] (Panda Security, S.L.) S1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [246504 2013-05-29] (Panda Security, S.L.) S1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [106216 2013-05-29] (Panda Security, S.L.) S3 NTIOLib_1_0_2; C:\Program Files (x86)\MSI\BIOS Code Unlocked Technology\NTIOLib_X64.sys [14136 2010-04-21] (MSI) S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [14136 2010-10-22] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) R3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527872 2007-11-08] (PixArt Imaging Inc.) S2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [169192 2013-10-17] (Panda Security, S.L.) S2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [122600 2013-10-11] (Panda Security, S.L.) S1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [206056 2013-10-11] (Panda Security, S.L.) S2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124648 2013-10-11] (Panda Security, S.L.) S2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [137960 2013-10-11] (Panda Security, S.L.) S3 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [105704 2013-10-11] (Panda Security, S.L.) S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [58808 2013-04-29] (Panda Security, S.L.) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-11-10] (Scott) S3 usbUDisc; C:\Windows\SysWOW64\DRIVERS\USBDrv_AMD64.sys [17280 2012-07-31] (Scott) R3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X] U0 Partizan; system32\drivers\Partizan.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-22 08:52 - 2014-06-22 08:52 - 00000000 ____D () C:\FRST 2014-06-22 07:30 - 2014-06-22 07:30 - 00001484 _____ () C:\Users\ppkk\Desktop\FixExec.txt 2014-06-22 07:24 - 2014-06-22 07:30 - 00000000 ____D () C:\OTLitd 2014-06-22 07:22 - 2014-06-22 07:22 - 00000000 ____D () C:\ProgramData\ESET 2014-06-22 07:01 - 2014-06-22 08:52 - 00000000 ____D () C:\OTL 2014-06-21 22:12 - 2014-06-21 22:12 - 00000000 ____D () C:\ProgramData\GlarySoft 2014-06-21 22:12 - 2014-06-03 03:05 - 00017600 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys 2014-06-21 18:28 - 2014-06-21 18:28 - 00006306 _____ () C:\Users\KKPP\Desktop\Rkill.txt 2014-06-21 17:38 - 2014-06-21 17:38 - 00001406 _____ () C:\Users\Public\Desktop\Homefront.lnk 2014-06-21 17:38 - 2014-06-21 17:38 - 00001406 _____ () C:\ProgramData\Desktop\Homefront.lnk 2014-06-21 17:38 - 2014-06-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaos Studios 2014-06-21 17:23 - 2014-06-21 17:23 - 00000000 ____D () C:\Program Files (x86)\Kaos Studios 2014-06-20 08:46 - 2014-06-20 08:46 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\Avira 2014-06-19 15:02 - 2014-06-19 15:02 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\Avira 2014-06-19 15:01 - 2014-06-19 15:00 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-06-19 14:58 - 2014-05-27 17:13 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-06-19 14:58 - 2014-05-27 17:13 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-06-19 14:58 - 2014-05-27 17:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-06-19 14:57 - 2014-06-19 14:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-06-19 14:57 - 2014-06-19 14:58 - 00000000 ____D () C:\ProgramData\Avira 2014-06-19 14:57 - 2014-06-19 14:58 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-06-19 14:51 - 2014-06-19 14:51 - 00000000 _____ () C:\Windows\SysWOW64\config.nt 2014-06-19 14:48 - 2014-06-19 14:48 - 00000000 ____D () C:\TDSSKiller_Quarantine 2014-06-19 09:26 - 2014-06-19 09:41 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-06-19 09:25 - 2014-06-19 09:25 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1403162765909 2014-06-19 09:25 - 2014-06-19 09:25 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1403162765909 2014-06-19 09:25 - 2014-06-19 09:25 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-06-18 18:17 - 2014-06-18 18:18 - 00000000 ____D () C:\ProgramData\ALLPlayer 2014-06-18 18:17 - 2014-06-18 18:17 - 00001016 _____ () C:\Users\ppkk\Desktop\ALLPlayer V4.4.lnk 2014-06-18 18:17 - 2014-06-18 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer 2014-06-18 18:17 - 2014-06-18 18:17 - 00000000 ____D () C:\Program Files (x86)\ALLPlayer 2014-06-18 18:17 - 2009-05-29 23:31 - 00881664 _____ () C:\Windows\SysWOW64\xvidcore.dll 2014-06-18 18:17 - 2008-07-02 20:44 - 00258048 _____ () C:\Windows\SysWOW64\libFLAC.dll 2014-06-17 20:25 - 2014-06-17 20:25 - 00000000 ____D () C:\Users\ppkk\AppData\Local\Adobe 2014-06-16 21:10 - 2014-06-16 21:10 - 00000000 ____D () C:\Users\ppkk\AppData\Local\{1E9DDE55-2FC3-4EE0-962E-BBDB9AED79AA} 2014-06-15 15:11 - 2014-06-15 15:11 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\ABBYY 2014-06-15 15:11 - 2014-06-15 15:11 - 00000000 ____D () C:\Users\KKPP\AppData\Local\ABBYY 2014-06-15 15:02 - 2014-06-15 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 12 2014-06-15 14:56 - 2014-06-17 20:24 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 12 2014-06-15 11:01 - 2014-06-15 11:01 - 00000000 ____D () C:\Users\KKPP\Documents\samsung 2014-06-15 10:56 - 2014-06-15 10:56 - 00000000 ____D () C:\Users\KKPP\AppData\Local\Downloaded Installations 2014-06-15 09:42 - 2014-04-30 19:43 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll 2014-06-07 20:40 - 2014-06-07 20:40 - 00030312 _____ () C:\Users\ppkk\Documents\cc_20140607_204029.reg 2014-06-07 20:34 - 2014-06-07 20:34 - 00000000 ____D () C:\ProgramData\Origin 2014-06-07 20:00 - 2014-06-07 20:07 - 00000000 ____D () C:\Users\ppkk\AppData\Local\ALLBenchmark 2014-06-07 11:29 - 2014-06-07 11:29 - 13084896 _____ (Microsoft Corporation) C:\Users\ppkk\Downloads\Silverlight_x64.exe 2014-06-07 09:23 - 2014-06-07 09:23 - 00000998 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk 2014-06-06 22:34 - 2014-06-06 22:39 - 00000000 ____D () C:\Windows\pss 2014-06-06 21:29 - 2014-06-22 07:00 - 00000628 _____ () C:\BackupLoader.ini 2014-06-06 21:29 - 2014-06-22 06:59 - 00000328 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-06 21:29 - 2014-06-21 21:06 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5 2014-06-06 21:29 - 2014-06-21 10:00 - 00000392 _____ () C:\Windows\Tasks\GlaryUpdate 5.job 2014-06-06 21:29 - 2014-06-15 08:15 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\DiskDefrag 2014-06-06 21:29 - 2014-06-06 21:29 - 00020672 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys 2014-06-06 21:29 - 2014-06-06 21:29 - 00003058 _____ () C:\Windows\System32\Tasks\GlaryUpdate 5 2014-06-06 21:29 - 2014-06-06 21:29 - 00002632 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-06 21:29 - 2014-06-06 21:29 - 00001155 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2014-06-06 21:29 - 2014-06-06 21:29 - 00001143 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk 2014-06-06 21:29 - 2014-06-06 21:29 - 00001143 _____ () C:\ProgramData\Desktop\Glary Utilities 5.lnk 2014-06-06 21:29 - 2014-06-06 21:29 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\GlarySoft 2014-06-06 21:29 - 2014-06-06 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 2014-06-06 21:29 - 2014-06-03 03:26 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe 2014-06-06 20:31 - 2014-06-06 21:28 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\Systweak 2014-06-05 21:02 - 2014-06-05 21:02 - 00000716 _____ () C:\Users\ppkk\Desktop\Outlast.lnk 2014-06-05 21:02 - 2014-06-05 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlast 2014-06-05 20:55 - 2014-06-07 20:22 - 00037214 _____ () C:\Windows\DirectX.log 2014-06-03 15:47 - 2014-06-03 15:47 - 00000000 ____D () C:\Users\ppkk\AppData\Local\TuneUp Software 2014-06-03 15:44 - 2014-06-03 16:06 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-06-03 15:44 - 2014-06-03 15:49 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-06-03 15:15 - 2014-06-03 15:15 - 00030282 _____ () C:\Users\ppkk\Documents\avv.csv 2014-06-03 08:48 - 2014-06-03 08:48 - 00003584 _____ () C:\Users\ppkk\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-06-02 22:41 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\ChemTable Software 2014-06-02 22:41 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\KKPP\AppData\Local\ChemTable Software 2014-06-02 22:07 - 2014-06-02 22:07 - 00000000 ____D () C:\Users\KKPP\AppData\Local\NVIDIA Corporation 2014-06-01 20:19 - 2014-06-01 20:19 - 00000000 ____D () C:\Program Files (x86)\AMD APP 2014-06-01 20:02 - 2014-06-01 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIA 2014-06-01 20:01 - 2014-06-01 20:01 - 00000000 ____D () C:\Windows\system32\SRSLabs 2014-06-01 20:01 - 2014-06-01 20:01 - 00000000 ____D () C:\Program Files\VIA 2014-06-01 20:01 - 2012-10-22 18:09 - 02206864 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\viahduaa.sys 2014-06-01 20:01 - 2012-10-22 16:44 - 02994808 _____ (VIA Technologies, Inc.) C:\Windows\system32\VIAPropPageExt.dll 2014-06-01 20:01 - 2012-10-22 16:44 - 01161336 _____ (VIA Technologies, Inc.) C:\Windows\system32\ViaKaraokeApo.dll 2014-06-01 20:01 - 2012-10-22 16:44 - 01119352 _____ (VIA Technologies, Inc.) C:\Windows\system32\ViaMicArrayAPO.dll 2014-06-01 20:01 - 2012-10-22 16:44 - 00683640 _____ (VIA Technologies, Inc.) C:\Windows\system32\VIASysFx.dll 2014-06-01 20:01 - 2012-10-22 16:44 - 00123512 _____ (VIA Technologies,Inc.) C:\Windows\system32\ViaKaraokePropPageExt.dll 2014-06-01 20:01 - 2012-10-22 16:44 - 00095352 _____ (VIA Technologies,Inc.) C:\Windows\system32\ViaMicArrayPropPageExt.dll 2014-06-01 20:01 - 2012-10-22 16:44 - 00070776 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\VtSrdAPO.dll 2014-06-01 20:01 - 2012-10-22 16:44 - 00027768 _____ (VIA Technologies, Inc.) C:\Windows\system32\ViakaraokeSrv.exe 2014-06-01 20:01 - 2012-10-22 16:43 - 00248952 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\Dts2APO.dll 2014-06-01 20:01 - 2012-10-22 16:43 - 00092280 _____ (VIA Technologies, Inc.) C:\Windows\system32\Dts2PropPageExt.dll 2014-06-01 20:01 - 2012-10-22 16:43 - 00055416 _____ (TODO: ) C:\Windows\system32\PropPageExt.dll 2014-06-01 20:01 - 2012-09-24 16:33 - 03141496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVIA64.dll 2014-06-01 20:01 - 2012-09-24 16:32 - 02080120 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-06-01 20:01 - 2012-09-05 17:12 - 00860024 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-06-01 20:01 - 2012-07-15 13:16 - 00394104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-06-01 20:01 - 2012-06-28 16:54 - 00086016 _____ (QSound Labs, Inc.) C:\Windows\system32\nQPropPageExt.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\EEP64H.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\EED64H.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\EED64A.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 00137056 _____ (Dolby Laboratories) C:\Windows\system32\EEL64H.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 00137056 _____ (Dolby Laboratories) C:\Windows\system32\EEL64A.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 00120160 _____ (Dolby Laboratories) C:\Windows\system32\EEA64H.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 00120160 _____ (Dolby Laboratories) C:\Windows\system32\EEA64A.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 00075104 _____ (Dolby Laboratories) C:\Windows\system32\EEG64H.dll 2014-06-01 20:01 - 2011-12-15 13:16 - 00075104 _____ (Dolby Laboratories) C:\Windows\system32\EEG64A.dll 2014-06-01 20:01 - 2011-09-27 18:13 - 00879616 _____ (Creative Technology Ltd.) C:\Windows\system32\VMAPO64.DLL 2014-06-01 20:01 - 2011-09-27 18:13 - 00739328 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\VMAPO32.DLL 2014-06-01 20:01 - 2011-09-27 18:13 - 00619520 _____ (Creative Technology Ltd.) C:\Windows\system32\VMTHX64.DLL 2014-06-01 20:01 - 2011-09-27 18:13 - 00554496 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\VMTHX32.DLL 2014-06-01 20:01 - 2011-09-27 18:13 - 00057856 _____ (Creative Technology Ltd.) C:\Windows\system32\VMPPLD64.DLL 2014-06-01 20:01 - 2011-06-08 18:19 - 00083968 _____ (QSound Labs, Inc.) C:\Windows\system32\nQAPO.dll 2014-06-01 20:01 - 2010-10-26 18:55 - 00074240 _____ (Creative Technology Ltd.) C:\Windows\system32\VMWRP64.DLL 2014-06-01 20:01 - 2010-10-26 18:54 - 00053760 _____ (Creative Technology Ltd.) C:\Windows\system32\VMPPCN64.DLL 2014-06-01 20:01 - 2009-07-31 11:40 - 00025600 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\VMfilt64.sys 2014-06-01 20:00 - 2014-06-01 20:02 - 00000000 ____D () C:\Program Files (x86)\VIA 2014-06-01 20:00 - 2007-04-11 15:35 - 00414632 ____N (Microsoft Corporation) C:\Windows\difxapi.dll 2014-06-01 19:59 - 2011-12-15 13:16 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\EEP64A.dll 2014-06-01 16:35 - 2014-06-01 20:57 - 00009993 _____ () C:\Windows\SysWOW64\Utility.xml 2014-06-01 16:35 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll 2014-05-29 20:24 - 2014-05-29 20:24 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\J River 2014-05-29 12:50 - 2014-05-29 12:50 - 97836408 _____ () C:\video_1.avi 2014-05-29 12:49 - 2011-07-19 04:05 - 00000046 _____ () C:\Program Files (x86)\Falco.url 2014-05-29 12:38 - 2014-05-29 12:38 - 00000076 _____ () C:\Windows\SysWOW64\dtirc.dll 2014-05-29 12:38 - 2013-11-22 20:15 - 00585728 ____N (Audible Inc.) C:\Windows\SysWOW64\AReadyLB.dll 2014-05-29 12:38 - 2013-11-22 20:15 - 00585728 ____N (Audible Inc.) C:\Windows\system32\AReadyLB.dll 2014-05-29 12:38 - 2013-11-22 20:15 - 00229376 ____N (Audible Inc.) C:\Windows\SysWOW64\AudDevicePlugin.dll 2014-05-29 12:38 - 2013-11-22 20:15 - 00229376 ____N (Audible Inc.) C:\Windows\system32\AudDevicePlugin.dll 2014-05-28 16:02 - 2014-05-28 16:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-28 16:01 - 2014-05-20 01:10 - 00601432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-05-28 16:01 - 2014-05-15 01:49 - 03774821 _____ () C:\Windows\system32\nvcoproc.bin 2014-05-28 15:59 - 2014-05-20 04:44 - 31387936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 24025376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 16003912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 14434704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 12688328 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-05-28 15:59 - 2014-05-20 04:44 - 11644928 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 11599072 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 09735256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 09697640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 03141976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 02953672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 02785568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 02412376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 01889112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433788.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 01541576 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433788.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 00895776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 00867784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-05-28 15:59 - 2014-05-20 04:44 - 00861128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-05-28 15:57 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-05-28 15:57 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-05-28 15:57 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-05-28 15:20 - 2014-05-28 15:20 - 00000000 ____D () C:\Users\KKPP\AppData\Local\CrashDumps 2014-05-28 12:59 - 2014-05-28 12:59 - 00001008 _____ () C:\Users\Public\Desktop\Sniper Ghost Warrior 2.lnk 2014-05-28 12:59 - 2014-05-28 12:59 - 00001008 _____ () C:\ProgramData\Desktop\Sniper Ghost Warrior 2.lnk 2014-05-28 12:59 - 2014-05-28 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sniper Ghost Warrior 2 2014-05-28 12:23 - 2014-06-19 19:07 - 00174936 _____ () C:\Windows\PFRO.log 2014-05-23 17:32 - 2014-05-23 22:05 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\Solvusoft 2014-05-23 17:31 - 2014-05-23 17:35 - 00000000 ____D () C:\Users\ppkk\AppData\Local\SpaceKace ==================== One Month Modified Files and Folders ======= 2014-06-22 08:52 - 2014-06-22 08:52 - 00000000 ____D () C:\FRST 2014-06-22 08:52 - 2014-06-22 07:01 - 00000000 ____D () C:\OTL 2014-06-22 08:51 - 2011-12-04 21:58 - 00000000 ____D () C:\POBR_WIN_7 2014-06-22 08:32 - 2009-07-14 06:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-22 08:32 - 2009-07-14 06:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-22 08:26 - 2012-03-29 19:44 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-22 07:32 - 2014-02-09 09:17 - 00000000 ____D () C:\Windows\Minidump 2014-06-22 07:30 - 2014-06-22 07:30 - 00001484 _____ () C:\Users\ppkk\Desktop\FixExec.txt 2014-06-22 07:30 - 2014-06-22 07:24 - 00000000 ____D () C:\OTLitd 2014-06-22 07:22 - 2014-06-22 07:22 - 00000000 ____D () C:\ProgramData\ESET 2014-06-22 07:16 - 2012-03-29 09:24 - 00000000 ____D () C:\DUUP 2014-06-22 07:03 - 2014-02-09 00:12 - 00632672 _____ () C:\Windows\WindowsUpdate.log 2014-06-22 07:00 - 2014-06-06 21:29 - 00000628 _____ () C:\BackupLoader.ini 2014-06-22 06:59 - 2014-06-06 21:29 - 00000328 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-22 06:59 - 2014-05-09 00:16 - 00018616 _____ () C:\Windows\setupact.log 2014-06-22 06:59 - 2014-02-09 00:13 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-06-22 06:59 - 2011-12-04 22:28 - 00000000 ____D () C:\Program Files (x86)\SpeedFan 2014-06-22 06:59 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-21 22:16 - 2014-02-10 15:32 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{33085781-7CF8-4659-B31D-F7B61733769E} 2014-06-21 22:12 - 2014-06-21 22:12 - 00000000 ____D () C:\ProgramData\GlarySoft 2014-06-21 21:06 - 2014-06-06 21:29 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5 2014-06-21 19:57 - 2014-02-09 00:16 - 00000000 ____D () C:\Users\ppkk 2014-06-21 18:28 - 2014-06-21 18:28 - 00006306 _____ () C:\Users\KKPP\Desktop\Rkill.txt 2014-06-21 18:23 - 2011-12-05 13:43 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\BitTorrent 2014-06-21 17:38 - 2014-06-21 17:38 - 00001406 _____ () C:\Users\Public\Desktop\Homefront.lnk 2014-06-21 17:38 - 2014-06-21 17:38 - 00001406 _____ () C:\ProgramData\Desktop\Homefront.lnk 2014-06-21 17:38 - 2014-06-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaos Studios 2014-06-21 17:23 - 2014-06-21 17:23 - 00000000 ____D () C:\Program Files (x86)\Kaos Studios 2014-06-21 10:00 - 2014-06-06 21:29 - 00000392 _____ () C:\Windows\Tasks\GlaryUpdate 5.job 2014-06-21 08:34 - 2011-02-04 19:20 - 00750200 _____ () C:\Windows\system32\perfh015.dat 2014-06-21 08:34 - 2011-02-04 19:20 - 00160700 _____ () C:\Windows\system32\perfc015.dat 2014-06-21 08:34 - 2009-07-14 07:13 - 01698616 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-20 10:03 - 2014-02-09 23:03 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{FB27E84B-BE58-4D87-A4CE-070BFA35D2F2} 2014-06-20 08:46 - 2014-06-20 08:46 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\Avira 2014-06-19 19:07 - 2014-05-28 12:23 - 00174936 _____ () C:\Windows\PFRO.log 2014-06-19 15:09 - 2011-12-04 21:19 - 00000000 ___RD () C:\Users\ppkk\Desktop\SKKRRÓÓTTY 2014-06-19 15:02 - 2014-06-19 15:02 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\Avira 2014-06-19 15:00 - 2014-06-19 15:01 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-06-19 14:59 - 2014-06-19 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-06-19 14:58 - 2014-06-19 14:57 - 00000000 ____D () C:\ProgramData\Avira 2014-06-19 14:58 - 2014-06-19 14:57 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-06-19 14:57 - 2013-09-01 15:27 - 00000000 ____D () C:\ProgramData\Package Cache 2014-06-19 14:51 - 2014-06-19 14:51 - 00000000 _____ () C:\Windows\SysWOW64\config.nt 2014-06-19 14:48 - 2014-06-19 14:48 - 00000000 ____D () C:\TDSSKiller_Quarantine 2014-06-19 14:40 - 2012-01-10 10:37 - 00000000 ____D () C:\Users\ppkk\AppData\Local\Oblivion 2014-06-19 09:41 - 2014-06-19 09:26 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-06-19 09:25 - 2014-06-19 09:25 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1403162765909 2014-06-19 09:25 - 2014-06-19 09:25 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1403162765909 2014-06-19 09:25 - 2014-06-19 09:25 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-06-19 09:17 - 2014-02-10 07:35 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\BitTorrent 2014-06-19 09:03 - 2011-12-04 20:11 - 00000000 ____D () C:\ProgramData\MFAData 2014-06-19 08:53 - 2011-12-08 22:53 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\PrimoPDF 2014-06-18 18:18 - 2014-06-18 18:17 - 00000000 ____D () C:\ProgramData\ALLPlayer 2014-06-18 18:17 - 2014-06-18 18:17 - 00001016 _____ () C:\Users\ppkk\Desktop\ALLPlayer V4.4.lnk 2014-06-18 18:17 - 2014-06-18 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer 2014-06-18 18:17 - 2014-06-18 18:17 - 00000000 ____D () C:\Program Files (x86)\ALLPlayer 2014-06-18 17:52 - 2014-02-10 13:53 - 00000000 ____D () C:\Users\KKPP\Desktop\Nowy folder 2014-06-18 17:52 - 2013-03-30 17:17 - 00000000 ____D () C:\Users\ppkk\AppData\Local\CrashDumps 2014-06-18 16:36 - 2011-12-05 22:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3Filter 2014-06-18 16:36 - 2011-12-05 22:36 - 00000000 ____D () C:\Program Files (x86)\AC3Filter 2014-06-18 16:27 - 2012-06-11 13:23 - 00000000 ____D () C:\Games 2014-06-17 20:25 - 2014-06-17 20:25 - 00000000 ____D () C:\Users\ppkk\AppData\Local\Adobe 2014-06-17 20:24 - 2014-06-15 14:56 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 12 2014-06-17 20:12 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-06-17 19:52 - 2011-12-17 13:45 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\Nitro PDF 2014-06-16 21:10 - 2014-06-16 21:10 - 00000000 ____D () C:\Users\ppkk\AppData\Local\{1E9DDE55-2FC3-4EE0-962E-BBDB9AED79AA} 2014-06-16 21:10 - 2011-12-24 13:52 - 00000000 ____D () C:\Users\ppkk\AppData\Local\Windows Live 2014-06-16 09:04 - 2014-02-10 08:08 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\Nitro PDF 2014-06-16 08:51 - 2014-02-10 08:05 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\Foxit Software 2014-06-15 15:11 - 2014-06-15 15:11 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\ABBYY 2014-06-15 15:11 - 2014-06-15 15:11 - 00000000 ____D () C:\Users\KKPP\AppData\Local\ABBYY 2014-06-15 15:02 - 2014-06-15 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 12 2014-06-15 14:56 - 2012-02-01 19:30 - 00000000 ____D () C:\Users\ppkk\AppData\Local\ABBYY 2014-06-15 14:32 - 2012-02-01 19:30 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 2014-06-15 13:31 - 2014-02-25 09:22 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-06-15 13:31 - 2012-03-29 19:44 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-15 13:31 - 2011-12-04 21:51 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-15 11:01 - 2014-06-15 11:01 - 00000000 ____D () C:\Users\KKPP\Documents\samsung 2014-06-15 11:01 - 2014-02-09 21:44 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\Samsung 2014-06-15 10:58 - 2012-03-12 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-15 10:58 - 2011-12-04 21:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-15 10:57 - 2012-01-31 20:25 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-15 10:56 - 2014-06-15 10:56 - 00000000 ____D () C:\Users\KKPP\AppData\Local\Downloaded Installations 2014-06-15 09:41 - 2011-12-06 12:32 - 00000000 ____D () C:\Users\ppkk\AppData\Local\Downloaded Installations 2014-06-15 08:15 - 2014-06-06 21:29 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\DiskDefrag 2014-06-07 20:40 - 2014-06-07 20:40 - 00030312 _____ () C:\Users\ppkk\Documents\cc_20140607_204029.reg 2014-06-07 20:38 - 2014-01-21 21:43 - 00000462 _____ () C:\Windows\wininit.ini 2014-06-07 20:35 - 2012-02-27 13:20 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-06-07 20:35 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-06-07 20:34 - 2014-06-07 20:34 - 00000000 ____D () C:\ProgramData\Origin 2014-06-07 20:22 - 2014-06-05 20:55 - 00037214 _____ () C:\Windows\DirectX.log 2014-06-07 20:07 - 2014-06-07 20:00 - 00000000 ____D () C:\Users\ppkk\AppData\Local\ALLBenchmark 2014-06-07 19:28 - 2012-01-21 16:10 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-06-07 19:28 - 2012-01-21 16:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-06-07 11:29 - 2014-06-07 11:29 - 13084896 _____ (Microsoft Corporation) C:\Users\ppkk\Downloads\Silverlight_x64.exe 2014-06-07 11:29 - 2012-01-21 16:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-06-07 09:24 - 2014-02-10 21:52 - 00000861 _____ () C:\Users\ppkk\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk 2014-06-07 09:23 - 2014-06-07 09:23 - 00000998 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk 2014-06-07 09:23 - 2013-05-28 09:04 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-06-07 09:23 - 2013-05-28 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-06-07 09:23 - 2012-01-20 10:28 - 00000000 ____D () C:\Program Files\WinRAR 2014-06-07 09:10 - 2014-02-09 11:28 - 00000000 ____D () C:\ProgramData\Sophos 2014-06-07 09:08 - 2013-06-01 22:50 - 00000000 ____D () C:\Program Files (x86)\AntiTwin 2014-06-06 22:39 - 2014-06-06 22:34 - 00000000 ____D () C:\Windows\pss 2014-06-06 21:39 - 2013-06-12 15:17 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\GlarySoft 2014-06-06 21:29 - 2014-06-06 21:29 - 00020672 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys 2014-06-06 21:29 - 2014-06-06 21:29 - 00003058 _____ () C:\Windows\System32\Tasks\GlaryUpdate 5 2014-06-06 21:29 - 2014-06-06 21:29 - 00002632 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-06 21:29 - 2014-06-06 21:29 - 00001155 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2014-06-06 21:29 - 2014-06-06 21:29 - 00001143 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk 2014-06-06 21:29 - 2014-06-06 21:29 - 00001143 _____ () C:\ProgramData\Desktop\Glary Utilities 5.lnk 2014-06-06 21:29 - 2014-06-06 21:29 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\GlarySoft 2014-06-06 21:29 - 2014-06-06 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 2014-06-06 21:28 - 2014-06-06 20:31 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\Systweak 2014-06-06 21:28 - 2013-04-03 14:39 - 00000000 ____D () C:\Program Files (x86)\WinUtilities 2014-06-05 21:06 - 2011-12-29 15:44 - 00000000 ____D () C:\Users\ppkk\Documents\My Games 2014-06-05 21:02 - 2014-06-05 21:02 - 00000716 _____ () C:\Users\ppkk\Desktop\Outlast.lnk 2014-06-05 21:02 - 2014-06-05 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlast 2014-06-03 16:06 - 2014-06-03 15:44 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-06-03 15:49 - 2014-06-03 15:44 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-06-03 15:47 - 2014-06-03 15:47 - 00000000 ____D () C:\Users\ppkk\AppData\Local\TuneUp Software 2014-06-03 15:47 - 2013-03-27 02:35 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\TuneUp Software 2014-06-03 15:15 - 2014-06-03 15:15 - 00030282 _____ () C:\Users\ppkk\Documents\avv.csv 2014-06-03 08:48 - 2014-06-03 08:48 - 00003584 _____ () C:\Users\ppkk\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-06-03 03:26 - 2014-06-06 21:29 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe 2014-06-03 03:05 - 2014-06-21 22:12 - 00017600 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys 2014-06-02 22:41 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\KKPP\AppData\Roaming\ChemTable Software 2014-06-02 22:41 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\KKPP\AppData\Local\ChemTable Software 2014-06-02 22:37 - 2013-04-03 14:39 - 00000185 _____ () C:\Windows\SysWOW64\_WKERNEL.SYL 2014-06-02 22:07 - 2014-06-02 22:07 - 00000000 ____D () C:\Users\KKPP\AppData\Local\NVIDIA Corporation 2014-06-02 19:49 - 2014-02-10 15:46 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-06-01 21:19 - 2014-02-09 10:53 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DisableStartup 2014-06-01 20:57 - 2014-06-01 16:35 - 00009993 _____ () C:\Windows\SysWOW64\Utility.xml 2014-06-01 20:19 - 2014-06-01 20:19 - 00000000 ____D () C:\Program Files (x86)\AMD APP 2014-06-01 20:02 - 2014-06-01 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIA 2014-06-01 20:02 - 2014-06-01 20:00 - 00000000 ____D () C:\Program Files (x86)\VIA 2014-06-01 20:01 - 2014-06-01 20:01 - 00000000 ____D () C:\Windows\system32\SRSLabs 2014-06-01 20:01 - 2014-06-01 20:01 - 00000000 ____D () C:\Program Files\VIA 2014-06-01 19:56 - 2011-12-04 21:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI 2014-06-01 19:56 - 2011-12-04 21:03 - 00000000 ____D () C:\Program Files (x86)\MSI 2014-05-30 18:20 - 2011-12-24 18:54 - 00000000 ____D () C:\Users\ppkk\dwhelper 2014-05-29 20:24 - 2014-05-29 20:24 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\J River 2014-05-29 12:50 - 2014-05-29 12:50 - 97836408 _____ () C:\video_1.avi 2014-05-29 12:38 - 2014-05-29 12:38 - 00000076 _____ () C:\Windows\SysWOW64\dtirc.dll 2014-05-28 16:06 - 2014-02-09 00:12 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-28 16:06 - 2014-01-18 13:34 - 00000000 ____D () C:\Users\ppkk\AppData\Local\NVIDIA Corporation 2014-05-28 16:02 - 2014-05-28 16:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-28 16:01 - 2014-01-18 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-28 16:01 - 2011-12-04 22:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-28 15:20 - 2014-05-28 15:20 - 00000000 ____D () C:\Users\KKPP\AppData\Local\CrashDumps 2014-05-28 12:59 - 2014-05-28 12:59 - 00001008 _____ () C:\Users\Public\Desktop\Sniper Ghost Warrior 2.lnk 2014-05-28 12:59 - 2014-05-28 12:59 - 00001008 _____ () C:\ProgramData\Desktop\Sniper Ghost Warrior 2.lnk 2014-05-28 12:59 - 2014-05-28 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sniper Ghost Warrior 2 2014-05-28 12:56 - 2014-05-08 00:49 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-05-28 12:05 - 2014-05-09 22:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-28 12:00 - 2013-09-01 14:19 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics 2014-05-28 11:59 - 2013-09-01 15:29 - 00000000 ____D () C:\ProgramData\Orbit 2014-05-28 11:57 - 2014-05-08 16:24 - 00000000 ____D () C:\Program Files (x86)\O22y Inc 2014-05-27 17:13 - 2014-06-19 14:58 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-05-27 17:13 - 2014-06-19 14:58 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-05-27 17:13 - 2014-06-19 14:58 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-05-27 16:01 - 2014-05-09 00:16 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-27 16:01 - 2012-03-13 15:18 - 00002562 _____ () C:\Windows\diagwrn.xml 2014-05-27 16:01 - 2012-03-13 15:18 - 00001908 _____ () C:\Windows\diagerr.xml 2014-05-23 22:05 - 2014-05-23 17:32 - 00000000 ____D () C:\Users\ppkk\AppData\Roaming\Solvusoft 2014-05-23 17:35 - 2014-05-23 17:31 - 00000000 ____D () C:\Users\ppkk\AppData\Local\SpaceKace 2014-05-23 08:36 - 2009-07-14 07:08 - 00032520 _____ () C:\Windows\Tasks\SCHEDLGU.TXT Files to move or delete: ==================== C:\Users\ppkk\Network_Meter_Data.js Some content of TEMP: ==================== C:\Users\KKPP\AppData\Local\Temp\avgnt.exe C:\Users\KKPP\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\KKPP\AppData\Local\Temp\sfamcc00001.dll C:\Users\KKPP\AppData\Local\Temp\sfareca00001.dll C:\Users\ppkk\AppData\Local\Temp\avgnt.exe C:\Users\ppkk\AppData\Local\Temp\muzaf1.dll C:\Users\ppkk\AppData\Local\Temp\muzapp.dll C:\Users\ppkk\AppData\Local\Temp\muzapp.exe C:\Users\ppkk\AppData\Local\Temp\muzwmts.dll C:\Users\ppkk\AppData\Local\Temp\sfamcc00001.dll C:\Users\ppkk\AppData\Local\Temp\sfareca00001.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe [2010-11-21 05:24] - [2011-01-16 02:01] - 0389632 ____A (Microsoft Corporation) 81257415084B84F3C0D95C381A8D4C8F C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll [2010-11-21 05:24] - [2011-01-16 02:01] - 1008640 ____A (Microsoft Corporation) 0B864E15A0BADFF0E7BB8B59009FDDCF C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-18 09:04 ==================== End Of Log ============================