Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2014 Ran by Franek (administrator) on FRANEK-KOMPUTER on 24-06-2014 15:50:41 Running from C:\Users\Franek\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ALWIL Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version4\TeamViewer_Service.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ASUS) C:\Windows\AsScrPro.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe (Comodo Security Solutions, Inc.) C:\Program Files\COMODO\GeekBuddy\unit_manager.exe (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Comodo Security Solutions, Inc.) C:\Program Files\COMODO\GeekBuddy\unit.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe (ALWIL Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Autodesk Inc.) C:\Users\Franek\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-05-17] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-12] (ELAN Microelectronics Corp.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1279480 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation) HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10228224 2010-11-03] (Intel Corporation) HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.) HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] () HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.) HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-08-11] (Macrovision Corporation) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [NeroCheck] => C:\Windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-06-06] (Comodo Security Solutions, Inc.) HKLM-x32\...\Run: [avast5] => C:\Program Files\Alwil Software\Avast5\avastUI.exe [2756488 2010-02-11] (ALWIL Software) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [480648 2014-04-01] (Autodesk Inc.) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [Google Update] => C:\Users\Franek\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-06-25] (Google Inc.) HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466144 2014-04-01] (Sony) HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [Facebook Update] => C:\Users\Franek\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-04-08] (Facebook Inc.) HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [21822128 2014-01-30] (Google) HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [Akamai NetSession Interface] => "C:\Users\Franek\AppData\Local\Akamai\netsession_win.exe" HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [Steam] => "C:\Program Files (x86)\Steam\Steam.exe" -silent HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [EADM] => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [1379840 2011-08-16] () HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Policies\Explorer: [] HKU\S-1-5-21-3831468236-934984104-1669722565-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2013-10-17] (Microsoft Corporation) <==== ATTENTION AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2014-05-20] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation) AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files\COMODO\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShA64.dll (ALWIL Software) ShellIconOverlayIdentifiers: AutoCAD Digital Signatures Icon Overlay Handler -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => No File ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9B3F94397E7ACF01 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: No Name - {DF622988-A727-2398-D335-51926763FB5A} - No File BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: 127.0.0.1 www.iobit.com Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Franek\AppData\Roaming\Mozilla\Firefox\Profiles\99xj1oj0.default FF Homepage: google.pl FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nexon.net/NxGame - C:\ProgramData\NexonUS\NGM\npNxGameUS.dll No File FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc) FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Franek\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Franek\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Franek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-03-11] Chrome: ======= CHR HomePage: hxxp://google.pl/ CHR RestoreOnStartup: "hxxp://google.pl/" CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Franek\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Franek\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\Franek\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Users\Franek\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File CHR Plugin: (Freemake np-plugin for google chrome) - C:\Users\Franek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf\1.0.0_0\npFreemake.dll No File CHR Plugin: (Skype Toolbars) - C:\Users\Franek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll No File CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Java(TM) Platform SE 6 U33) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.330.3) - C:\Windows\SysWOW64\npdeployJava1.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Users\Franek\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll No File CHR Extension: (No Name) - C:\Users\Franek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekpiipochodfnkjafjnmaaehpdlkeekf [2014-02-02] CHR Extension: (No Name) - C:\Users\Franek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihddimbnnlfmjogglfdhahgacblgnkij [2014-03-07] CHR Extension: (Google Wallet) - C:\Users\Franek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (AllCheApPPrIce) - C:\ProgramData\oeiihhoilaonlkmkdameikbhhmogihel\ [2013-09-01] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11] ==================== Services (Whitelisted) ================= R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [581000 2014-04-01] (Autodesk Inc.) S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88424 2013-06-26] (Perfect World Entertainment Inc) R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-02-11] (ALWIL Software) R3 avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-02-11] (ALWIL Software) R3 avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-02-11] (ALWIL Software) R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-11-03] (Intel Corporation) [File not signed] R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed] R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed] R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation) R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70864 2014-06-10] (Comodo Security Solutions, Inc.) S2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed] S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-01-06] (Macrovision Europe Ltd.) [File not signed] R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-06-06] (Comodo Security Solutions, Inc.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [22096 2010-02-11] (ALWIL Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [63568 2010-02-11] (ALWIL Software) R1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [28752 2010-02-11] (ALWIL Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [120912 2010-02-11] (ALWIL Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [51280 2010-02-11] (ALWIL Software) S3 ATHDFU; C:\Windows\System32\Drivers\AthDfu.sys [51872 2011-03-13] (Windows (R) Win 7 DDK provider) [File not signed] S3 BthMtpEnum; C:\Windows\System32\DRIVERS\BthMtpEnum.sys [64512 2009-07-14] (Microsoft Corporation) R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2013-05-07] (Windows (R) Win 7 DDK provider) [File not signed] S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] () S2 DgiVecp; C:\Windows\SysWOW64\Drivers\DgiVecp.sys [41984 2004-05-17] (DeviceGuys, Inc.) [File not signed] R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2013-10-07] () R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-24] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] () R1 {572f484b-455f-44b0-9d6a-da3ad2071365}Gw64; C:\Windows\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}Gw64.sys [61120 2014-04-24] (StdLib) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-24 15:50 - 2014-06-24 15:50 - 00028289 _____ () C:\Users\Franek\Downloads\FRST.txt 2014-06-23 18:28 - 2014-06-23 17:34 - 00156892 _____ () C:\Users\Franek\Desktop\Extras.Txt 2014-06-23 18:28 - 2014-06-23 17:33 - 01117736 _____ () C:\Users\Franek\Desktop\OTL.Txt 2014-06-23 18:27 - 2014-06-23 18:27 - 00265914 _____ () C:\Users\Franek\Desktop\gemer.txt 2014-06-23 17:35 - 2014-06-23 17:35 - 00380416 _____ () C:\Users\Franek\Downloads\vcgfsevp.exe 2014-06-23 17:34 - 2014-06-23 17:34 - 00156892 _____ () C:\Users\Franek\Downloads\Extras.Txt 2014-06-23 17:33 - 2014-06-23 17:33 - 01117736 _____ () C:\Users\Franek\Downloads\OTL.Txt 2014-06-23 17:09 - 2014-06-23 17:09 - 00602112 _____ (OldTimer Tools) C:\Users\Franek\Downloads\OTL.exe 2014-06-23 17:00 - 2014-06-23 17:07 - 00065400 _____ () C:\Users\Franek\Desktop\Shortcut.txt 2014-06-23 16:59 - 2014-06-23 17:07 - 00061342 _____ () C:\Users\Franek\Desktop\Addition.txt 2014-06-23 16:58 - 2014-06-23 17:07 - 00077319 _____ () C:\Users\Franek\Desktop\FRST.txt 2014-06-23 16:55 - 2014-06-24 15:50 - 00000000 ____D () C:\FRST 2014-06-23 16:54 - 2014-06-23 16:54 - 02082816 _____ (Farbar) C:\Users\Franek\Downloads\FRST64.exe 2014-06-23 13:53 - 2014-06-23 13:54 - 00000000 ____D () C:\Users\Franek\Desktop\AutoCad 2014-06-23 13:38 - 2014-06-23 13:38 - 00000000 ____D () C:\Users\Franek\AppData\Local\cache 2014-06-23 13:29 - 2014-06-23 13:29 - 00000000 ____D () C:\Users\Franek\Documents\Inventor Server x64 AutoCAD 2012 Language Pack - Polski 2014-06-23 13:09 - 2014-06-23 13:11 - 00000000 ____D () C:\Users\Franek\Desktop\3rdParty 2014-06-23 13:08 - 2014-06-23 13:11 - 00000000 ____D () C:\Users\Franek\Desktop\CER 2014-06-23 13:08 - 2011-04-05 14:29 - 00000319 _____ () C:\Users\Franek\Desktop\MID.txt 2014-06-23 13:08 - 2011-02-22 14:17 - 00037782 _____ () C:\Users\Franek\Desktop\Setup.ini 2014-06-23 13:00 - 2014-06-23 13:05 - 1345177215 _____ () C:\Users\Franek\Downloads\AutoCAD_2012_Polish_Win_64bit_Trial.exe 2014-06-23 12:36 - 2014-06-23 12:36 - 01415864 _____ () C:\Users\Franek\Downloads\7711-instalator_sciagnij.exe 2014-06-23 12:13 - 2014-06-23 12:13 - 00000000 ____D () C:\Users\Franek\Documents\Autodesk Application Manager 2014-06-23 11:57 - 2014-06-23 19:50 - 00000000 ____D () C:\Users\Franek\AppData\Local\Autodesk 2014-06-23 11:55 - 2014-06-23 11:55 - 00000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2014-06-23 11:55 - 2014-06-23 11:55 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared 2014-06-23 11:53 - 2014-06-23 23:33 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared 2014-06-23 11:53 - 2014-06-23 23:33 - 00000000 ____D () C:\Program Files\Autodesk 2014-06-23 11:51 - 2014-06-23 11:51 - 00000000 ____D () C:\Program Files (x86)\Autodesk 2014-06-23 11:50 - 2014-06-23 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2014-06-23 11:49 - 2014-06-23 13:18 - 00001803 _____ () C:\Windows\DirectX.log 2014-06-23 11:48 - 2014-06-23 12:01 - 00000000 ____D () C:\ProgramData\Package Cache 2014-06-23 11:47 - 2014-06-23 23:33 - 00000000 ____D () C:\ProgramData\Autodesk 2014-06-23 11:47 - 2014-06-23 23:32 - 00000000 ____D () C:\Users\Franek\AppData\Roaming\Autodesk 2014-06-23 11:46 - 2014-06-23 11:46 - 00000000 ____D () C:\Autodesk 2014-06-23 11:45 - 2014-06-23 11:45 - 14066048 _____ () C:\Users\Franek\Downloads\AutoCADLT_2015_Polish_Win_32-64bit_wi_pl-PL_Setup(1).exe 2014-06-23 11:38 - 2014-06-23 11:38 - 14066048 _____ () C:\Users\Franek\Downloads\AutoCADLT_2015_Polish_Win_32-64bit_wi_pl-PL_Setup.exe 2014-06-19 07:55 - 2014-06-19 07:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus 2014-06-19 07:55 - 2014-06-19 07:55 - 00000000 ____D () C:\ProgramData\Alwil Software 2014-06-19 07:55 - 2010-02-11 19:42 - 00120912 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswSP.sys 2014-06-19 07:55 - 2010-02-11 19:42 - 00051280 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswTdi.sys 2014-06-19 07:55 - 2010-02-11 19:39 - 00028752 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswRdr.sys 2014-06-19 07:55 - 2010-02-11 19:38 - 00063568 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-06-19 07:55 - 2010-02-11 19:38 - 00022096 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2014-06-19 07:54 - 2014-06-19 07:54 - 41944808 _____ () C:\Users\Franek\Downloads\setup_av_free_pol.exe 2014-06-19 07:25 - 2014-06-24 15:45 - 00003028 _____ () C:\Windows\setupact.log 2014-06-19 07:25 - 2014-06-19 07:25 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-19 07:24 - 2014-06-23 16:43 - 00004074 _____ () C:\Windows\PFRO.log 2014-06-19 07:01 - 2014-06-24 15:49 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-19 07:01 - 2014-06-19 07:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-06-19 07:01 - 2014-06-19 07:01 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-19 07:01 - 2014-06-19 07:01 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-06-19 07:01 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-19 07:01 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-06-19 07:01 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-06-19 07:00 - 2014-06-19 07:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Franek\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-18 23:38 - 2014-06-18 23:38 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll 2014-06-18 23:38 - 2014-06-18 23:38 - 00000000 ____D () C:\Users\Franek\AppData\Local\AdTrustMedia 2014-06-18 23:37 - 2014-06-18 23:37 - 00000000 ____D () C:\ProgramData\Adtrustmedia 2014-06-18 23:36 - 2014-06-23 15:33 - 00000000 ____D () C:\Program Files\COMODO 2014-06-18 23:36 - 2014-06-23 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo 2014-06-18 23:35 - 2014-06-23 15:33 - 00000000 ____D () C:\ProgramData\Comodo 2014-06-14 18:20 - 2014-06-14 18:20 - 00000000 ____D () C:\Users\Franek\Downloads\Virtual_Camera_Win7_64_Z1026 2014-06-14 18:19 - 2014-06-14 18:20 - 02057030 _____ () C:\Users\Franek\Downloads\Virtual_Camera_Win7_64_Z1026.zip 2014-06-14 18:18 - 2014-06-14 18:18 - 03854867 _____ () C:\Users\Franek\Downloads\Camera_Azurewave_2S005_CR_Win7_64_Z5855133207.zip 2014-06-14 18:18 - 2014-06-14 18:18 - 00000000 ____D () C:\Users\Franek\Downloads\Camera_Azurewave_2S005_CR_Win7_64_Z5855133207 2014-06-14 15:31 - 2014-06-14 15:31 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo 2014-06-14 15:31 - 2014-06-14 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan 2014-06-14 15:30 - 2014-06-14 15:31 - 02143832 _____ () C:\Users\Franek\Downloads\installspeedfan449(dobreprogramy.pl).exe 2014-06-12 17:44 - 2014-06-12 17:44 - 00000000 ____D () C:\Users\Franek\AppData\Local\Macromedia 2014-06-12 16:28 - 2014-06-12 16:28 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-12 16:28 - 2014-06-12 16:28 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-12 16:28 - 2014-06-12 16:28 - 00000000 ____D () C:\Users\Franek\AppData\Local\Mozilla 2014-06-12 16:27 - 2014-06-12 16:27 - 00284208 _____ (Mozilla) C:\Users\Franek\Downloads\Firefox Setup Stub 30.0.exe 2014-06-12 16:27 - 2014-06-12 16:27 - 00284208 _____ (Mozilla) C:\Users\Franek\Downloads\Firefox Setup Stub 30.0 (1).exe 2014-06-11 13:37 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-11 13:37 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-11 13:37 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-11 13:37 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-11 13:37 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-11 13:37 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-11 13:37 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-11 13:37 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-11 13:37 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-11 13:37 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-11 13:37 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-11 13:37 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-11 13:37 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-11 13:37 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-06-11 13:37 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-11 13:37 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-11 13:37 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-11 13:37 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-06-11 13:37 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-11 13:37 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-11 13:37 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-11 13:37 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-06-11 13:37 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-11 13:37 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-06-11 13:37 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-06-11 13:37 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-06-11 13:37 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-11 13:37 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-06-11 13:37 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-06-11 13:37 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-06-11 13:37 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-11 13:37 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-06-11 13:37 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-06-11 13:37 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-11 13:37 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-11 13:37 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-06-11 13:37 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-06-11 13:37 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-06-11 13:37 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-06-11 13:37 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-06-11 13:37 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-06-11 13:37 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-11 13:37 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-06-11 13:37 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-06-11 13:37 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-06-11 13:37 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-11 13:37 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-06-11 13:37 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-11 13:37 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-06-11 13:37 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-06-11 13:37 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-11 13:37 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-06-11 13:37 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-11 13:37 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-11 13:37 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-11 13:37 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-06-11 13:37 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-11 13:37 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-11 13:37 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-11 13:37 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-11 13:37 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-11 13:37 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-11 13:37 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-06-11 13:37 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-06-11 13:37 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-06-11 13:37 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-06-11 13:37 - 2013-11-26 13:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-06-11 13:33 - 2014-06-11 13:35 - 207919021 _____ () C:\Users\Franek\Downloads\lekcja 5.mp4 2014-06-10 21:23 - 2014-06-10 21:23 - 00614912 _____ () C:\Users\Franek\Downloads\pee8.pps 2014-06-10 21:23 - 2014-06-10 21:23 - 00614912 _____ () C:\Users\Franek\Downloads\pee8 (1).pps 2014-06-10 16:42 - 2014-06-10 16:51 - 125352583 _____ () C:\Users\Franek\Downloads\r.różniczkowe sprowadzalne do zm. rozdz. p. podst..mp4 2014-06-10 16:42 - 2014-06-10 16:48 - 68836762 _____ () C:\Users\Franek\Downloads\Równania liniowe I rzędu.mp4 2014-06-10 10:53 - 2014-06-10 10:53 - 00722104 _____ (Elex do Brasil Participações Ltda) C:\Users\Franek\Downloads\yet_another_cleaner_dmga (2).exe 2014-06-05 20:32 - 2014-06-24 15:47 - 00000000 ___RD () C:\Users\Franek\Dysk Google 2014-06-05 20:32 - 2014-06-18 23:41 - 00001877 _____ () C:\Users\Franek\Desktop\Dysk Google.lnk 2014-06-05 20:31 - 2014-06-05 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2014-06-05 20:30 - 2014-06-05 20:30 - 00918672 _____ (Google Inc.) C:\Users\Franek\Downloads\googledrivesync.exe 2014-06-02 18:18 - 2014-05-30 01:07 - 01715176 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2014-06-02 18:18 - 2014-05-30 01:07 - 01291232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2014-05-31 06:22 - 2014-05-31 06:22 - 00000000 ____D () C:\Windows\SysWOW64\NV 2014-05-31 06:22 - 2014-05-31 06:22 - 00000000 ____D () C:\Windows\system32\NV 2014-05-31 06:17 - 2014-05-20 04:44 - 31387936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 24025376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 18531568 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 17480432 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 16003912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 12688328 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-05-31 06:17 - 2014-05-20 04:44 - 11644928 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 11599072 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 09735256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 09697640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 03141976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 02953672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 02785568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 02412376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 01889112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433788.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 01541576 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433788.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 00895776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 00867784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 00861128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-05-31 06:17 - 2014-05-20 04:44 - 00032544 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2014-05-29 16:42 - 2014-06-04 16:08 - 00000000 ____D () C:\Program Files (x86)\TERA 2014-05-29 16:42 - 2014-05-29 16:42 - 15366160 _____ (Gameforge Productions GmbH ) C:\Users\Franek\Downloads\TERASetup.exe 2014-05-29 16:42 - 2014-05-29 16:42 - 00001006 _____ () C:\Users\Franek\Desktop\TERA.lnk 2014-05-29 16:42 - 2014-05-29 16:42 - 00000000 ____D () C:\Users\Franek\AppData\Roaming\TERA 2014-05-29 16:42 - 2014-05-29 16:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA 2014-05-26 21:46 - 2014-05-26 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X3 ==================== One Month Modified Files and Folders ======= 2014-06-24 15:51 - 2014-06-24 15:50 - 00028289 _____ () C:\Users\Franek\Downloads\FRST.txt 2014-06-24 15:50 - 2014-06-23 16:55 - 00000000 ____D () C:\FRST 2014-06-24 15:50 - 2014-02-05 00:31 - 00000000 ____D () C:\AdwCleaner 2014-06-24 15:49 - 2014-06-19 07:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-24 15:48 - 2013-05-11 17:36 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-06-24 15:47 - 2014-06-05 20:32 - 00000000 ___RD () C:\Users\Franek\Dysk Google 2014-06-24 15:47 - 2012-01-05 20:28 - 00150216 _____ () C:\Users\Franek\AppData\Local\GDIPFONTCACHEV1.DAT 2014-06-24 15:46 - 2013-06-13 08:19 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-24 15:45 - 2014-06-19 07:25 - 00003028 _____ () C:\Windows\setupact.log 2014-06-24 15:45 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-24 15:45 - 2009-07-14 06:45 - 05375384 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-06-23 23:36 - 2012-06-25 17:05 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3831468236-934984104-1669722565-1001UA.job 2014-06-23 23:36 - 2012-06-25 17:05 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3831468236-934984104-1669722565-1001Core.job 2014-06-23 23:35 - 2013-06-13 08:19 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-23 23:35 - 2011-10-10 00:30 - 01987186 _____ () C:\Windows\WindowsUpdate.log 2014-06-23 23:33 - 2014-06-23 11:53 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared 2014-06-23 23:33 - 2014-06-23 11:53 - 00000000 ____D () C:\Program Files\Autodesk 2014-06-23 23:33 - 2014-06-23 11:47 - 00000000 ____D () C:\ProgramData\Autodesk 2014-06-23 23:32 - 2014-06-23 11:47 - 00000000 ____D () C:\Users\Franek\AppData\Roaming\Autodesk 2014-06-23 23:31 - 2014-06-23 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2014-06-23 23:20 - 2012-07-15 16:56 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-23 23:07 - 2013-08-09 16:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-06-23 22:39 - 2014-04-08 22:34 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3831468236-934984104-1669722565-1001UA.job 2014-06-23 22:39 - 2014-04-08 22:34 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3831468236-934984104-1669722565-1001Core.job 2014-06-23 21:16 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-23 21:16 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-23 21:08 - 2011-10-10 00:54 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-06-23 20:32 - 2011-04-01 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2014-06-23 20:32 - 2011-04-01 11:19 - 00000000 ____D () C:\Program Files (x86)\ASUS 2014-06-23 19:50 - 2014-06-23 11:57 - 00000000 ____D () C:\Users\Franek\AppData\Local\Autodesk 2014-06-23 18:27 - 2014-06-23 18:27 - 00265914 _____ () C:\Users\Franek\Desktop\gemer.txt 2014-06-23 17:35 - 2014-06-23 17:35 - 00380416 _____ () C:\Users\Franek\Downloads\vcgfsevp.exe 2014-06-23 17:34 - 2014-06-23 18:28 - 00156892 _____ () C:\Users\Franek\Desktop\Extras.Txt 2014-06-23 17:34 - 2014-06-23 17:34 - 00156892 _____ () C:\Users\Franek\Downloads\Extras.Txt 2014-06-23 17:33 - 2014-06-23 18:28 - 01117736 _____ () C:\Users\Franek\Desktop\OTL.Txt 2014-06-23 17:33 - 2014-06-23 17:33 - 01117736 _____ () C:\Users\Franek\Downloads\OTL.Txt 2014-06-23 17:09 - 2014-06-23 17:09 - 00602112 _____ (OldTimer Tools) C:\Users\Franek\Downloads\OTL.exe 2014-06-23 17:07 - 2014-06-23 17:00 - 00065400 _____ () C:\Users\Franek\Desktop\Shortcut.txt 2014-06-23 17:07 - 2014-06-23 16:59 - 00061342 _____ () C:\Users\Franek\Desktop\Addition.txt 2014-06-23 17:07 - 2014-06-23 16:58 - 00077319 _____ () C:\Users\Franek\Desktop\FRST.txt 2014-06-23 17:07 - 2013-12-31 22:22 - 00000000 ____D () C:\ProgramData\oeiihhoilaonlkmkdameikbhhmogihel 2014-06-23 16:54 - 2014-06-23 16:54 - 02082816 _____ (Farbar) C:\Users\Franek\Downloads\FRST64.exe 2014-06-23 16:47 - 2012-02-03 20:56 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-06-23 16:46 - 2012-02-03 20:56 - 00000000 ____D () C:\ProgramData\Skype 2014-06-23 16:45 - 2011-10-10 00:54 - 00002974 _____ () C:\Windows\system32\AutoRunFilter.ini 2014-06-23 16:43 - 2014-06-19 07:24 - 00004074 _____ () C:\Windows\PFRO.log 2014-06-23 15:38 - 2012-01-07 13:16 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-06-23 15:37 - 2012-01-07 13:18 - 00000000 ____D () C:\Program Files\Adobe 2014-06-23 15:37 - 2012-01-06 16:41 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-06-23 15:33 - 2014-06-18 23:36 - 00000000 ____D () C:\Program Files\COMODO 2014-06-23 15:33 - 2014-06-18 23:35 - 00000000 ____D () C:\ProgramData\Comodo 2014-06-23 15:27 - 2014-06-18 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo 2014-06-23 13:54 - 2014-06-23 13:53 - 00000000 ____D () C:\Users\Franek\Desktop\AutoCad 2014-06-23 13:38 - 2014-06-23 13:38 - 00000000 ____D () C:\Users\Franek\AppData\Local\cache 2014-06-23 13:29 - 2014-06-23 13:29 - 00000000 ____D () C:\Users\Franek\Documents\Inventor Server x64 AutoCAD 2012 Language Pack - Polski 2014-06-23 13:18 - 2014-06-23 11:49 - 00001803 _____ () C:\Windows\DirectX.log 2014-06-23 13:11 - 2014-06-23 13:09 - 00000000 ____D () C:\Users\Franek\Desktop\3rdParty 2014-06-23 13:11 - 2014-06-23 13:08 - 00000000 ____D () C:\Users\Franek\Desktop\CER 2014-06-23 13:05 - 2014-06-23 13:00 - 1345177215 _____ () C:\Users\Franek\Downloads\AutoCAD_2012_Polish_Win_64bit_Trial.exe 2014-06-23 12:36 - 2014-06-23 12:36 - 01415864 _____ () C:\Users\Franek\Downloads\7711-instalator_sciagnij.exe 2014-06-23 12:21 - 2012-01-09 20:35 - 00000000 ____D () C:\Users\Franek\AppData\Local\CrashDumps 2014-06-23 12:21 - 2012-01-07 13:11 - 00000000 ____D () C:\Users\Franek\AppData\Local\Adobe 2014-06-23 12:15 - 2011-04-01 10:58 - 00000000 ____D () C:\ProgramData\FLEXnet 2014-06-23 12:13 - 2014-06-23 12:13 - 00000000 ____D () C:\Users\Franek\Documents\Autodesk Application Manager 2014-06-23 12:11 - 2011-10-10 00:54 - 00001983 _____ () C:\Windows\system32\ServiceFilter.ini 2014-06-23 12:01 - 2014-06-23 11:48 - 00000000 ____D () C:\ProgramData\Package Cache 2014-06-23 11:55 - 2014-06-23 11:55 - 00000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2014-06-23 11:55 - 2014-06-23 11:55 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared 2014-06-23 11:51 - 2014-06-23 11:51 - 00000000 ____D () C:\Program Files (x86)\Autodesk 2014-06-23 11:46 - 2014-06-23 11:46 - 00000000 ____D () C:\Autodesk 2014-06-23 11:45 - 2014-06-23 11:45 - 14066048 _____ () C:\Users\Franek\Downloads\AutoCADLT_2015_Polish_Win_32-64bit_wi_pl-PL_Setup(1).exe 2014-06-23 11:38 - 2014-06-23 11:38 - 14066048 _____ () C:\Users\Franek\Downloads\AutoCADLT_2015_Polish_Win_32-64bit_wi_pl-PL_Setup.exe 2014-06-20 12:34 - 2011-02-19 07:31 - 00752552 _____ () C:\Windows\system32\perfh015.dat 2014-06-20 12:34 - 2011-02-19 07:31 - 00160176 _____ () C:\Windows\system32\perfc015.dat 2014-06-20 12:34 - 2009-07-14 07:13 - 01702902 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-19 20:23 - 2013-08-10 13:24 - 00000000 ____D () C:\Users\Franek\AppData\Roaming\Winamp 2014-06-19 07:55 - 2014-06-19 07:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus 2014-06-19 07:55 - 2014-06-19 07:55 - 00000000 ____D () C:\ProgramData\Alwil Software 2014-06-19 07:55 - 2012-08-18 13:09 - 00000000 _____ () C:\Windows\SysWOW64\config.nt 2014-06-19 07:54 - 2014-06-19 07:54 - 41944808 _____ () C:\Users\Franek\Downloads\setup_av_free_pol.exe 2014-06-19 07:25 - 2014-06-19 07:25 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-19 07:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Globalization 2014-06-19 07:01 - 2014-06-19 07:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-06-19 07:01 - 2014-06-19 07:01 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-19 07:01 - 2014-06-19 07:01 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-06-19 07:00 - 2014-06-19 07:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Franek\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-19 06:55 - 2014-04-30 14:55 - 00000000 ____D () C:\Program Files\CCleaner 2014-06-18 23:46 - 2014-02-02 10:25 - 00000000 ____D () C:\ProgramData\UTubeAdBlocKK 2014-06-18 23:41 - 2014-06-05 20:32 - 00001877 _____ () C:\Users\Franek\Desktop\Dysk Google.lnk 2014-06-18 23:38 - 2014-06-18 23:38 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll 2014-06-18 23:38 - 2014-06-18 23:38 - 00000000 ____D () C:\Users\Franek\AppData\Local\AdTrustMedia 2014-06-18 23:37 - 2014-06-18 23:37 - 00000000 ____D () C:\ProgramData\Adtrustmedia 2014-06-14 18:20 - 2014-06-14 18:20 - 00000000 ____D () C:\Users\Franek\Downloads\Virtual_Camera_Win7_64_Z1026 2014-06-14 18:20 - 2014-06-14 18:19 - 02057030 _____ () C:\Users\Franek\Downloads\Virtual_Camera_Win7_64_Z1026.zip 2014-06-14 18:18 - 2014-06-14 18:18 - 03854867 _____ () C:\Users\Franek\Downloads\Camera_Azurewave_2S005_CR_Win7_64_Z5855133207.zip 2014-06-14 18:18 - 2014-06-14 18:18 - 00000000 ____D () C:\Users\Franek\Downloads\Camera_Azurewave_2S005_CR_Win7_64_Z5855133207 2014-06-14 18:16 - 2011-10-10 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility 2014-06-14 15:31 - 2014-06-14 15:31 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo 2014-06-14 15:31 - 2014-06-14 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan 2014-06-14 15:31 - 2014-06-14 15:30 - 02143832 _____ () C:\Users\Franek\Downloads\installspeedfan449(dobreprogramy.pl).exe 2014-06-13 15:32 - 2013-01-14 19:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-12 17:44 - 2014-06-12 17:44 - 00000000 ____D () C:\Users\Franek\AppData\Local\Macromedia 2014-06-12 16:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-06-12 16:28 - 2014-06-12 16:28 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-12 16:28 - 2014-06-12 16:28 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-12 16:28 - 2014-06-12 16:28 - 00000000 ____D () C:\Users\Franek\AppData\Local\Mozilla 2014-06-12 16:28 - 2012-12-13 18:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-12 16:28 - 2012-04-26 19:02 - 00000000 ____D () C:\Users\Franek\AppData\Roaming\Mozilla 2014-06-12 16:27 - 2014-06-12 16:27 - 00284208 _____ (Mozilla) C:\Users\Franek\Downloads\Firefox Setup Stub 30.0.exe 2014-06-12 16:27 - 2014-06-12 16:27 - 00284208 _____ (Mozilla) C:\Users\Franek\Downloads\Firefox Setup Stub 30.0 (1).exe 2014-06-11 23:26 - 2013-07-12 19:34 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-11 23:25 - 2012-01-08 20:09 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-11 23:24 - 2012-04-18 20:48 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-11 13:35 - 2014-06-11 13:33 - 207919021 _____ () C:\Users\Franek\Downloads\lekcja 5.mp4 2014-06-10 21:23 - 2014-06-10 21:23 - 00614912 _____ () C:\Users\Franek\Downloads\pee8.pps 2014-06-10 21:23 - 2014-06-10 21:23 - 00614912 _____ () C:\Users\Franek\Downloads\pee8 (1).pps 2014-06-10 16:51 - 2014-06-10 16:42 - 125352583 _____ () C:\Users\Franek\Downloads\r.różniczkowe sprowadzalne do zm. rozdz. p. podst..mp4 2014-06-10 16:48 - 2014-06-10 16:42 - 68836762 _____ () C:\Users\Franek\Downloads\Równania liniowe I rzędu.mp4 2014-06-10 10:53 - 2014-06-10 10:53 - 00722104 _____ (Elex do Brasil Participações Ltda) C:\Users\Franek\Downloads\yet_another_cleaner_dmga (2).exe 2014-06-05 20:32 - 2012-01-05 20:28 - 00000000 ____D () C:\Users\Franek 2014-06-05 20:31 - 2014-06-05 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2014-06-05 20:31 - 2012-01-05 14:28 - 00000000 ____D () C:\Users\Franek\AppData\Local\Google 2014-06-05 20:30 - 2014-06-05 20:30 - 00918672 _____ (Google Inc.) C:\Users\Franek\Downloads\googledrivesync.exe 2014-06-05 20:30 - 2013-06-13 08:19 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-06-05 20:30 - 2013-06-13 08:19 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-06-04 16:08 - 2014-05-29 16:42 - 00000000 ____D () C:\Program Files (x86)\TERA 2014-06-02 18:18 - 2011-10-10 00:39 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-31 06:22 - 2014-05-31 06:22 - 00000000 ____D () C:\Windows\SysWOW64\NV 2014-05-31 06:22 - 2014-05-31 06:22 - 00000000 ____D () C:\Windows\system32\NV 2014-05-31 06:22 - 2011-10-10 00:40 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-30 12:21 - 2014-06-11 13:37 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-30 12:02 - 2014-06-11 13:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-30 12:02 - 2014-06-11 13:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-30 11:45 - 2014-06-11 13:37 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-30 11:39 - 2014-06-11 13:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-30 11:39 - 2014-06-11 13:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-30 11:38 - 2014-06-11 13:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-30 11:28 - 2014-06-11 13:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-30 11:27 - 2014-06-11 13:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-30 11:24 - 2014-06-11 13:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-30 11:21 - 2014-06-11 13:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-30 11:21 - 2014-06-11 13:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-30 11:20 - 2014-06-11 13:37 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-30 11:18 - 2014-06-11 13:37 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-30 11:11 - 2014-06-11 13:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-30 11:08 - 2014-06-11 13:37 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-30 11:06 - 2014-06-11 13:37 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-30 11:02 - 2014-06-11 13:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-30 10:55 - 2014-06-11 13:37 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 10:49 - 2014-06-11 13:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-30 10:46 - 2014-06-11 13:37 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-30 10:44 - 2014-06-11 13:37 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-05-30 10:44 - 2014-06-11 13:37 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-30 10:43 - 2014-06-11 13:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-05-30 10:42 - 2014-06-11 13:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-30 10:38 - 2014-06-11 13:37 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-05-30 10:35 - 2014-06-11 13:37 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-30 10:34 - 2014-06-11 13:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-30 10:33 - 2014-06-11 13:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-30 10:30 - 2014-06-11 13:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-05-30 10:29 - 2014-06-11 13:37 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-30 10:28 - 2014-06-11 13:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-30 10:27 - 2014-06-11 13:37 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-05-30 10:24 - 2014-06-11 13:37 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-30 10:23 - 2014-06-11 13:37 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-30 10:16 - 2014-06-11 13:37 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-05-30 10:10 - 2014-06-11 13:37 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-30 10:06 - 2014-06-11 13:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-30 10:04 - 2014-06-11 13:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-30 10:02 - 2014-06-11 13:37 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-05-30 09:56 - 2014-06-11 13:37 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-05-30 09:56 - 2014-06-11 13:37 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-30 09:54 - 2014-06-11 13:37 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-05-30 09:50 - 2014-06-11 13:37 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-30 09:49 - 2014-06-11 13:37 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-05-30 09:43 - 2014-06-11 13:37 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-30 09:40 - 2014-06-11 13:37 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-05-30 09:30 - 2014-06-11 13:37 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-30 09:21 - 2014-06-11 13:37 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-05-30 09:15 - 2014-06-11 13:37 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-05-30 09:13 - 2014-06-11 13:37 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-30 09:13 - 2014-06-11 13:37 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-05-30 01:07 - 2014-06-02 18:18 - 01715176 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2014-05-30 01:07 - 2014-06-02 18:18 - 01291232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2014-05-30 01:07 - 2013-11-06 21:37 - 01279480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-05-30 01:07 - 2013-11-06 21:37 - 01122312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-05-29 16:42 - 2014-05-29 16:42 - 15366160 _____ (Gameforge Productions GmbH ) C:\Users\Franek\Downloads\TERASetup.exe 2014-05-29 16:42 - 2014-05-29 16:42 - 00001006 _____ () C:\Users\Franek\Desktop\TERA.lnk 2014-05-29 16:42 - 2014-05-29 16:42 - 00000000 ____D () C:\Users\Franek\AppData\Roaming\TERA 2014-05-29 16:42 - 2014-05-29 16:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA 2014-05-27 16:01 - 2013-12-16 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2014-05-27 16:00 - 2011-10-10 00:42 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-05-26 21:48 - 2012-03-03 21:16 - 00000952 ___SH () C:\Windows\SysWOW64\KGyGaAvL.sys 2014-05-26 21:47 - 2014-05-26 21:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X3 2014-05-26 21:46 - 2012-01-07 11:14 - 00000000 ____D () C:\Program Files (x86)\Corel 2014-05-26 21:35 - 2012-04-09 11:49 - 00000000 ____D () C:\Program Files (x86)\Ubisoft 2014-05-26 21:35 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-05-25 10:26 - 2012-07-15 16:56 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-25 10:26 - 2012-07-15 16:56 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-25 10:26 - 2012-01-05 21:52 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Franek\AppData\Local\Temp\FNP_ACT_InstallerCA.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-18 19:53 ==================== End Of Log ============================