Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01 Ran by zbyszek (administrator) on ZBYSZEK1 on 05-07-2014 16:42:25 Running from C:\Users\zbyszek\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe (Facebook Inc.) C:\Users\zbyszek\AppData\Local\Facebook\Update\FacebookUpdate.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7205592 2013-12-03] (Realtek Semiconductor) HKLM\...\Run: [itype] => C:\Program Files\Microsoft IntelliType Pro\itype.exe [1873256 2011-08-10] (Microsoft Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation) HKLM-x32\...\Run: [ControlCenterCount] => C:\Program Files (x86)\MSI\ControlCenter\ControlCenterCount.exe [872448 2012-03-26] (MSI CO.,LTD.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [37624 2014-05-06] (Panda Security, S.L.) HKU\S-1-5-21-1916381126-655670246-2342073923-1000\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-11-05] (SteelSeries ApS) HKU\S-1-5-21-1916381126-655670246-2342073923-1000\...\Run: [Facebook Update] => C:\Users\zbyszek\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-02-11] (Facebook Inc.) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File ==================== Internet (Whitelisted) ==================== BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\zbyszek\AppData\Roaming\Mozilla\Firefox\Profiles\dh2wfq53.default-1404568378365 FF Homepage: www.google.pl FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\zbyszek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) ==================== Services (Whitelisted) ================= S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed] R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [141560 2014-05-05] (Panda Security, S.L.) R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [61688 2014-05-07] (Panda Security, S.L.) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-25] () R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [38136 2014-05-06] (Panda Security, S.L.) S4 PuranDefrag; C:\Windows\system32\PuranDefragS.exe [292736 2013-08-15] (Puran Software) ==================== Drivers (Whitelisted) ==================== S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-02] () R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [96800 2014-05-02] (Panda Security, S.L.) R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [162336 2014-05-02] (Panda Security, S.L.) R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [112160 2014-05-02] (Panda Security, S.L.) R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [115232 2014-05-02] (Panda Security, S.L.) R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [95776 2014-05-02] (Panda Security, S.L.) R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [70176 2014-05-02] (Panda Security, S.L.) R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [125984 2014-05-02] (Panda Security, S.L.) R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [306720 2014-05-02] (Panda Security, S.L.) R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [169504 2014-05-02] (Panda Security, S.L.) R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [115744 2014-05-02] (Panda Security, S.L.) R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [261152 2014-05-02] (Panda Security, S.L.) R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [109088 2014-05-02] (Panda Security, S.L.) S3 NTIOLib_1_0_2; C:\Program Files (x86)\MSI\ControlCenter\NTIOLib_X64.sys [13328 2012-02-14] (MSI) S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI) S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\ControlCenter\Sleep\NTIOLib_X64.sys [13368 2012-11-09] (MSI) R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [160800 2014-05-05] (Panda Security, S.L.) R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [119840 2014-05-05] (Panda Security, S.L.) R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [195616 2014-05-05] (Panda Security, S.L.) R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [121888 2014-05-05] (Panda Security, S.L.) R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [132128 2014-05-06] (Panda Security, S.L.) R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [106016 2014-05-05] (Panda Security, S.L.) R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [60400 2014-03-25] (Panda Security, S.L.) S3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [38016 2013-05-31] (SteelSeries Corporation) S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X] S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-05 16:42 - 2014-07-05 16:42 - 00009473 _____ () C:\Users\zbyszek\Desktop\FRST.txt 2014-07-05 16:37 - 2014-07-05 16:37 - 00001500 _____ () C:\Users\zbyszek\Desktop\firefox — skrót.lnk 2014-07-05 16:31 - 2014-07-05 16:31 - 00000056 _____ () C:\Windows\setupact.log 2014-07-05 16:31 - 2014-07-05 16:31 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-05 16:24 - 2014-07-05 16:42 - 00000000 ____D () C:\FRST 2014-07-05 16:20 - 2014-07-05 16:20 - 00602112 _____ (OldTimer Tools) C:\Users\zbyszek\Desktop\OTL.exe 2014-07-05 16:20 - 2014-07-05 16:20 - 00380416 _____ () C:\Users\zbyszek\Desktop\4v4noc3g.exe 2014-07-05 16:19 - 2014-07-05 16:19 - 02084352 _____ (Farbar) C:\Users\zbyszek\Desktop\FRST64.exe 2014-07-05 14:35 - 2014-07-05 15:15 - 00000000 ___SD () C:\Users\zbyszek\GG dysk 2014-07-05 14:33 - 2014-07-05 14:33 - 00001143 _____ () C:\Users\zbyszek\Desktop\GG.lnk 2014-07-05 14:33 - 2014-07-05 14:33 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\OpenFM 2014-07-05 14:29 - 2014-07-05 14:29 - 00001190 _____ () C:\Users\zbyszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk 2014-07-05 14:29 - 2014-07-05 14:29 - 00001151 _____ () C:\Users\zbyszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk 2014-07-05 14:08 - 2014-03-25 15:15 - 00060400 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys 2014-07-05 12:03 - 2014-07-05 16:15 - 00000000 ____D () C:\Windows\Minidump 2014-06-29 15:10 - 2014-07-05 15:15 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\GG 2014-06-25 12:55 - 2014-06-25 12:55 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\MAXON 2014-06-24 16:23 - 2014-06-24 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-24 14:32 - 2014-06-24 14:32 - 00000104 _____ () C:\Users\zbyszek\Desktop\Panel sterowania — skrót.lnk 2014-06-24 14:29 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-24 14:29 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-24 14:29 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-24 14:29 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-24 14:29 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-24 14:29 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-24 14:29 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-24 14:29 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-24 14:29 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-24 14:29 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-24 14:29 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-24 14:29 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-24 14:29 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-24 14:29 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-06-24 14:29 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-24 14:29 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-24 14:29 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-24 14:29 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-06-24 14:29 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-24 14:29 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-24 14:29 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-24 14:29 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-06-24 14:29 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-24 14:29 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-06-24 14:29 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-06-24 14:29 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-06-24 14:29 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-24 14:29 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-06-24 14:29 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-06-24 14:29 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-06-24 14:29 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-24 14:29 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-06-24 14:29 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-06-24 14:29 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-24 14:29 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-24 14:29 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-06-24 14:29 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-06-24 14:29 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-06-24 14:29 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-06-24 14:29 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-06-24 14:29 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-06-24 14:29 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-24 14:29 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-06-24 14:29 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-06-24 14:29 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-06-24 14:29 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-24 14:29 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-06-24 14:29 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-24 14:29 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-06-24 14:29 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-06-24 14:29 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-24 14:29 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-06-24 14:28 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-24 14:28 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-24 14:28 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-24 14:28 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-24 14:28 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-24 14:28 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-06-24 14:28 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-24 14:28 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-24 14:28 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-24 14:28 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-24 14:28 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-24 14:28 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-24 14:28 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-06-24 14:28 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-06-24 14:28 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-06-24 14:28 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-06-24 14:26 - 2014-06-24 14:27 - 00000008 _____ () C:\Users\zbyszek\Desktop\Nowy dokument tekstowy (4).txt ==================== One Month Modified Files and Folders ======= 2014-07-05 16:42 - 2014-07-05 16:42 - 00009473 _____ () C:\Users\zbyszek\Desktop\FRST.txt 2014-07-05 16:42 - 2014-07-05 16:24 - 00000000 ____D () C:\FRST 2014-07-05 16:39 - 2014-05-19 15:55 - 00390192 _____ () C:\Windows\WindowsUpdate.log 2014-07-05 16:37 - 2014-07-05 16:37 - 00001500 _____ () C:\Users\zbyszek\Desktop\firefox — skrót.lnk 2014-07-05 16:36 - 2011-04-12 15:21 - 00790120 _____ () C:\Windows\system32\perfh015.dat 2014-07-05 16:36 - 2011-04-12 15:21 - 00172408 _____ () C:\Windows\system32\perfc015.dat 2014-07-05 16:36 - 2009-07-14 07:13 - 00006418 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-05 16:33 - 2014-02-11 14:28 - 00000936 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1916381126-655670246-2342073923-1000UA.job 2014-07-05 16:32 - 2014-04-09 09:51 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-05 16:31 - 2014-07-05 16:31 - 00000056 _____ () C:\Windows\setupact.log 2014-07-05 16:31 - 2014-07-05 16:31 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-05 16:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-05 16:21 - 2013-12-27 15:00 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\Skype 2014-07-05 16:20 - 2014-07-05 16:20 - 00602112 _____ (OldTimer Tools) C:\Users\zbyszek\Desktop\OTL.exe 2014-07-05 16:20 - 2014-07-05 16:20 - 00380416 _____ () C:\Users\zbyszek\Desktop\4v4noc3g.exe 2014-07-05 16:19 - 2014-07-05 16:19 - 02084352 _____ (Farbar) C:\Users\zbyszek\Desktop\FRST64.exe 2014-07-05 16:15 - 2014-07-05 12:03 - 00000000 ____D () C:\Windows\Minidump 2014-07-05 16:15 - 2013-12-24 07:32 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\BitTorrent 2014-07-05 15:15 - 2014-07-05 14:35 - 00000000 ___SD () C:\Users\zbyszek\GG dysk 2014-07-05 15:15 - 2014-06-29 15:10 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\GG 2014-07-05 15:15 - 2009-07-14 06:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-05 15:15 - 2009-07-14 06:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-05 14:35 - 2013-12-24 02:57 - 00000000 ____D () C:\Users\zbyszek 2014-07-05 14:33 - 2014-07-05 14:33 - 00001143 _____ () C:\Users\zbyszek\Desktop\GG.lnk 2014-07-05 14:33 - 2014-07-05 14:33 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\OpenFM 2014-07-05 14:29 - 2014-07-05 14:29 - 00001190 _____ () C:\Users\zbyszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk 2014-07-05 14:29 - 2014-07-05 14:29 - 00001151 _____ () C:\Users\zbyszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk 2014-07-05 14:00 - 2014-04-09 09:51 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-05 14:00 - 2014-04-09 09:51 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-05 14:00 - 2014-04-09 09:51 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-05 13:57 - 2014-05-29 22:36 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\Watch Dogs 2014-07-05 13:57 - 2014-04-28 10:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-05 13:57 - 2014-02-21 15:01 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner 2014-07-05 13:57 - 2014-01-01 22:45 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client 2014-07-05 13:57 - 2013-12-26 18:34 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\Battle.net 2014-07-05 13:57 - 2013-12-24 17:59 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server 2014-07-05 13:57 - 2013-12-24 17:59 - 00000000 ____D () C:\Program Files (x86)\RivaTuner Statistics Server 2014-07-05 13:57 - 2013-12-24 17:59 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner 2014-07-05 13:57 - 2013-12-24 07:31 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\NapiProjekt 2014-07-05 13:57 - 2013-12-24 05:59 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries 2014-07-05 13:57 - 2013-12-24 05:58 - 00000000 ____D () C:\Program Files\SteelSeries 2014-07-05 13:57 - 2013-12-24 05:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-07-05 13:57 - 2013-12-24 04:52 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-07-05 13:57 - 2013-12-24 04:52 - 00000000 ____D () C:\Windows\system32\Macromed 2014-07-05 13:57 - 2013-12-24 04:51 - 00000000 ____D () C:\Program Files (x86)\Java 2014-07-05 13:57 - 2013-12-24 04:46 - 00000000 ___HD () C:\ControlCenterCount 2014-07-05 13:57 - 2013-12-24 04:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-05 13:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-07-05 13:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-07-05 13:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2014-07-02 23:41 - 2013-12-24 05:59 - 00000000 ____D () C:\ProgramData\SteelSeries 2014-06-30 20:51 - 2014-01-01 22:45 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\TS3Client 2014-06-26 12:42 - 2013-12-24 17:59 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-06-25 12:55 - 2014-06-25 12:55 - 00000000 ____D () C:\Users\zbyszek\AppData\Roaming\MAXON 2014-06-24 16:31 - 2013-12-24 04:51 - 00000000 ____D () C:\ProgramData\Oracle 2014-06-24 16:23 - 2014-06-24 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-24 14:32 - 2014-06-24 14:32 - 00000104 _____ () C:\Users\zbyszek\Desktop\Panel sterowania — skrót.lnk 2014-06-24 14:31 - 2014-02-11 14:28 - 00000914 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1916381126-655670246-2342073923-1000Core.job 2014-06-24 14:30 - 2013-12-24 03:14 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-24 14:30 - 2013-12-24 03:14 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-24 14:29 - 2014-05-04 22:17 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-24 14:27 - 2014-06-24 14:26 - 00000008 _____ () C:\Users\zbyszek\Desktop\Nowy dokument tekstowy (4).txt 2014-06-08 11:13 - 2014-06-24 14:28 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-08 11:08 - 2014-06-24 14:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-01 09:34 ==================== End Of Log ============================