Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-11-2014 Ran by Milosz (administrator) on MILOSZ-KOMPUTER on 05-11-2014 07:12:04 Running from C:\Users\Milosz\Desktop Loaded Profile: Milosz (Available profiles: Milosz & Mama) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe () C:\Program Files\EslWire\service\WireHelperSvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe () C:\Windows\System32\PnkBstrA.exe (Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe (Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Valve Corporation) D:\STEAM\Steam.exe (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Company) C:\Program Files (x86)\Popcorn Time\Updater.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Zemana Ltd.) C:\Program Files (x86)\AntiLogger\AntiLogger.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET) HKLM-x32\...\Run: [AntiLogger] => C:\Program Files (x86)\AntiLogger\AntiLogger.exe [19362728 2014-03-26] (Zemana Ltd.) HKU\S-1-5-21-2669467967-2915321183-38771872-1000\...\Run: [Steam] => D:\STEAM\steam.exe [1938624 2014-10-21] (Valve Corporation) HKU\S-1-5-21-2669467967-2915321183-38771872-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3878480 2014-09-13] (Tonec Inc.) HKU\S-1-5-21-2669467967-2915321183-38771872-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-2669467967-2915321183-38771872-1000\...\MountPoints2: {92b76c49-4df4-11e3-b21e-94de807a69c1} - F:\setup.exe ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll (Tonec Inc.) CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.) BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\MICROS~4\Office15\URLREDIR.DLL No File BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 213.241.79.38 192.168.1.252 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1206147.dll (Adobe Systems, Inc.) FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\MICROS~4\Office14\NPAUTHZ.DLL No File FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~4\Office15\NPSPWRAP.DLL No File FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Milosz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-07-01] FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Milosz\AppData\Roaming\IDM\idmmzcc5 FF Extension: IDM CC - C:\Users\Milosz\AppData\Roaming\IDM\idmmzcc5 [2014-09-13] Chrome: ======= CHR HomePage: Default -> chrome://newtab CHR StartupUrls: Default -> "hxxp://www.gry-online.pl/S008.asp", "hxxp://www.google.com" CHR Profile: C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Tłumacz Google) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2014-04-28] CHR Extension: (BetterTTV) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2014-04-28] CHR Extension: (Dokumenty Google) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-28] CHR Extension: (Dysk Google) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-28] CHR Extension: (YouTube) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-14] CHR Extension: (Adblock Plus) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-28] CHR Extension: (Szukaj w Google) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-28] CHR Extension: (Tampermonkey) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-09-23] CHR Extension: (MaskMe) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpkiidbpeijnaaacjlfnijncdlkicejg [2014-04-28] CHR Extension: (Gmail offline) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2014-04-28] CHR Extension: (Facebook Disconnect) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpepffjfmamnambagiibghpglaidiec [2014-06-07] CHR Extension: (Stylish) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2014-04-28] CHR Extension: (AdBlock Premium) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [2014-04-28] CHR Extension: (HTTPS Everywhere) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2014-06-06] CHR Extension: (AdBlock) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-28] CHR Extension: (IDM Integration Module) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2014-01-31] CHR Extension: (Disconnect) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2014-06-06] CHR Extension: (Adblock Super) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd [2014-04-28] CHR Extension: (Facebook AdBlock) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpacabphcagfehdgnigmfnbjdampbaa [2014-04-28] CHR Extension: (Mapy Google) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2014-04-28] CHR Extension: (Strumienie z Ruczaju) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfopjimlhbikohbmjagioiomhmfhodam [2014-04-28] CHR Extension: (Sprawdzanie poczty Google) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-04-28] CHR Extension: (Ghostery) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-04-28] CHR Extension: (Google Wallet) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-12] CHR Extension: (Adblock Pro) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2014-04-28] CHR Extension: (Battlefield 3) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pagmklehiaheilihklokljahmoihkjni [2014-04-28] CHR Extension: (Gmail) - C:\Users\Milosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-14] CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2014-09-12] CHR HKLM-x32\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2014-09-12] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.) [File not signed] S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-08-07] () S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [107040 2014-06-17] (EasyAntiCheat Ltd) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET) R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] () S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-08] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-08] () R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.) R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2013-11-21] (Razer, Inc.) S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH) R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [179200 2014-10-09] (Company) [File not signed] R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-03] (VIA Technologies, Inc.) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 AntiLog32; C:\Windows\system32\drivers\AntiLog64.sys [49752 2014-06-19] (Zemana Ltd.) R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices) R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] () S3 CisUtMonitor; C:\Windows\System32\DRIVERS\CisUtMonitor.sys [33360 2011-10-30] (CrystalIdea Software) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-15] (Disc Soft Ltd) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET) U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET) R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET) R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [110216 2014-09-05] () S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-11-12] () S3 hidusbf; C:\Windows\System32\DRIVERS\hidusbf.sys [7808 2014-04-13] (SweetLow) R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-10-01] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-05] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation) S3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0065.sys [28768 2014-06-29] (SoftEther VPN Project at University of Tsukuba, Japan.) S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2013-11-21] (Razer, Inc.) R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2013-11-21] (Razer, Inc.) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-07-30] (Duplex Secure Ltd.) S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [128000 2009-09-19] (MCCI Corporation) S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net) [File not signed] U3 a2v0zzqv; C:\Windows\System32\Drivers\a2v0zzqv.sys [0 ] (Advanced Micro Devices) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-04 16:58 - 2014-11-04 16:58 - 00217131 _____ () C:\Users\Milosz\Desktop\bookmarks_04.11.2014.html 2014-11-04 16:50 - 2014-11-04 16:50 - 00880272 _____ (Google Inc.) C:\Users\Milosz\Desktop\ChromeSetup.exe 2014-11-04 16:44 - 2014-11-04 16:44 - 00000004 _____ () C:\Users\Milosz\AppData\Roaming\appdataFr2.bin 2014-11-04 14:40 - 2014-11-04 14:41 - 01976320 _____ () C:\Users\Milosz\Desktop\adwcleaner.pl 4.000.exe 2014-11-04 14:30 - 2014-11-04 14:30 - 00000000 ____D () C:\ProgramData\c738455ff494c861 2014-11-03 21:16 - 2014-11-03 21:16 - 00000673 _____ () C:\Users\Milosz\Desktop\Call of Duty Advanced Warfare.lnk 2014-11-03 21:16 - 2014-11-03 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Advanced Warfare 2014-11-03 20:50 - 2014-11-03 20:50 - 00000000 ____D () C:\Users\Milosz\Desktop\CoD.Advanced.Warfare.DLC.Unlocker.incl.Crackfix-CODEX 2014-11-03 20:34 - 2014-11-03 20:35 - 00002468 _____ () C:\Users\Milosz\Desktop\CoD.Advanced.Warfare.DLC.Unlocker.incl.Crackfix-CODEX.rar 2014-11-03 00:30 - 2014-11-04 14:10 - 00000000 ____D () C:\Users\Mama\AppData\Local\CrashDumps 2014-11-03 00:13 - 2014-11-03 00:13 - 00000000 ____D () C:\Users\Mama\Downloads\Video 2014-11-03 00:13 - 2014-11-03 00:13 - 00000000 ____D () C:\Users\Mama\Downloads\Compressed 2014-11-03 00:12 - 2014-11-03 03:57 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\DMCache 2014-11-03 00:12 - 2014-11-03 00:21 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\IDM 2014-11-03 00:06 - 2014-11-03 00:06 - 00023428 _____ () C:\Users\Milosz\Desktop\gmer.txt 2014-11-03 00:05 - 2014-11-03 00:06 - 00023428 _____ () C:\Users\Milosz\Desktop\gmer.log 2014-11-02 19:11 - 2014-11-02 19:12 - 00380416 _____ () C:\Users\Milosz\Desktop\zl91lt9i.exe 2014-11-02 18:53 - 2014-11-02 18:53 - 00127370 _____ () C:\Users\Milosz\Desktop\Extras.Txt 2014-11-02 18:52 - 2014-11-02 18:52 - 00144558 _____ () C:\Users\Milosz\Desktop\OTL.Txt 2014-11-02 18:41 - 2014-11-02 18:41 - 00602112 _____ (OldTimer Tools) C:\Users\Milosz\Desktop\OTL.exe 2014-11-02 18:39 - 2014-11-02 18:39 - 00079100 _____ () C:\Users\Milosz\Desktop\Shortcut.txt 2014-11-02 18:37 - 2014-11-02 18:39 - 00040418 _____ () C:\Users\Milosz\Desktop\Addition.txt 2014-11-02 18:36 - 2014-11-05 07:12 - 00019074 _____ () C:\Users\Milosz\Desktop\FRST.txt 2014-11-02 18:35 - 2014-11-05 07:12 - 00000000 ____D () C:\FRST 2014-11-02 18:35 - 2014-11-02 18:35 - 02114560 _____ (Farbar) C:\Users\Milosz\Desktop\FRST64.exe 2014-11-02 18:12 - 2014-11-05 07:09 - 00412645 _____ () C:\Windows\WindowsUpdate.log 2014-11-02 18:11 - 2014-11-05 07:10 - 00000784 _____ () C:\Windows\setupact.log 2014-11-02 18:11 - 2014-11-02 18:11 - 00000000 _____ () C:\Windows\setuperr.log 2014-11-02 16:32 - 2014-11-02 16:46 - 03244920 _____ () C:\Windows\system32\sfc.txt 2014-11-02 14:55 - 2014-11-02 14:55 - 00000000 ____D () C:\Users\Milosz\AppData\Local\Apps\2.0 2014-11-02 03:25 - 2014-11-02 03:25 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute 2014-11-02 03:11 - 2014-11-05 07:11 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-11-02 03:11 - 2014-11-02 03:11 - 00001112 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-11-02 03:11 - 2014-11-02 03:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-11-02 03:11 - 2014-11-02 03:11 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-02 03:11 - 2014-11-02 03:11 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-11-02 03:11 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-11-02 03:11 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-11-02 03:11 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-11-02 01:21 - 2014-11-02 01:21 - 02571182 _____ () C:\Users\Milosz\Desktop\geek (1).zip 2014-11-02 01:21 - 2014-11-02 01:21 - 00000000 ____D () C:\Users\Milosz\Desktop\geek (1) 2014-11-01 20:02 - 2014-11-01 20:02 - 00000000 ____D () C:\Windows\USB Vibration 2014-11-01 20:01 - 2014-11-01 20:01 - 00000000 ____D () C:\Program Files (x86)\USB Vibration Joystick 2014-11-01 16:10 - 2014-11-04 14:43 - 00000000 ____D () C:\AdwCleaner 2014-11-01 02:17 - 2014-11-01 02:17 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\2K Sports 2014-10-31 15:33 - 2014-11-01 20:17 - 00000000 ____D () C:\Users\Milosz\Desktop\x360ce.App-2.1.2.191 2014-10-31 15:32 - 2014-10-31 15:33 - 00804491 _____ () C:\Users\Milosz\Desktop\x360ce.App-2.1.2.191.zip 2014-10-30 14:18 - 2014-10-30 14:18 - 00001223 _____ () C:\Users\Milosz\Desktop\MM Server Picker.lnk 2014-10-30 14:18 - 2014-10-30 14:18 - 00000000 ____D () C:\Users\Milosz\Desktop\mmserverpicker_1_7 2014-10-30 14:18 - 2014-10-30 14:18 - 00000000 ____D () C:\Program Files (x86)\Matchmaking Server Picker 2014-10-29 17:49 - 2014-10-29 17:49 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESEA 2014-10-29 00:29 - 2014-10-29 00:29 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-10-25 18:11 - 2014-10-25 18:11 - 00003266 _____ () C:\Windows\System32\Tasks\{BE92A05E-B49B-421E-9CAB-5E4F3E5AD797} 2014-10-25 10:25 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-10-25 10:25 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-10-25 10:25 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2014-10-25 10:25 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-10-25 10:25 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-10-25 10:25 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-10-25 10:25 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2014-10-25 10:25 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-10-25 10:25 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-10-25 10:25 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-10-25 10:25 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-10-25 10:25 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-10-25 10:25 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-10-25 10:25 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-10-25 10:25 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-10-25 10:25 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-10-25 10:25 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-10-25 10:25 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-10-25 10:25 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-10-25 10:25 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-10-25 10:25 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-10-25 10:25 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-10-25 10:25 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls 2014-10-25 10:24 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-10-25 10:24 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-10-25 10:24 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-10-25 10:24 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-10-25 10:24 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-10-25 10:24 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-10-25 10:24 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-10-25 10:24 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-10-25 10:24 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-10-25 10:24 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-10-25 10:24 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-10-25 10:24 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-10-25 10:24 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-10-25 10:24 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-10-25 10:24 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-10-25 10:24 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-10-25 10:24 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-10-25 10:24 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-10-25 10:24 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-10-25 10:24 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-10-25 10:24 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-10-25 10:24 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-10-25 10:24 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-10-25 10:24 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-10-25 10:24 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-10-25 10:24 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-10-25 10:24 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-10-25 10:24 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-10-25 10:24 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-10-25 10:24 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-10-25 10:24 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-10-25 10:24 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-10-25 10:24 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-10-25 10:24 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-10-25 10:24 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-10-25 10:24 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-10-25 10:24 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-10-25 10:24 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-10-25 10:24 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-10-25 10:24 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-10-25 10:24 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-10-25 10:24 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-10-25 10:24 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-10-25 10:24 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-10-25 10:24 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-10-25 10:24 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-10-25 10:24 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-10-25 10:24 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-10-25 10:24 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-10-25 10:24 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-10-25 10:24 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-10-25 10:24 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-10-25 10:24 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-10-25 10:24 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-10-25 10:24 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-10-25 10:24 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-10-25 10:24 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-10-25 10:24 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-10-25 10:24 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-10-25 10:24 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-10-25 10:24 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-10-25 10:24 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-10-25 10:24 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2014-10-25 10:24 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-10-25 10:24 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-10-25 10:24 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-10-25 10:24 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2014-10-25 10:24 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2014-10-25 10:24 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2014-10-25 10:24 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2014-10-25 10:20 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-10-25 10:20 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-10-24 23:22 - 2014-10-25 00:06 - 00000000 ____D () C:\Users\Milosz\AppData\Local\Arma 3 Launcher 2014-10-24 23:22 - 2014-10-24 23:22 - 00000000 ____D () C:\Users\Milosz\AppData\Local\Bohemia_Interactive 2014-10-24 21:14 - 2014-10-24 21:14 - 00000000 ____D () C:\Program Files\ESEA 2014-10-24 20:12 - 2014-10-24 20:16 - 00000000 ____D () C:\Users\Milosz\Documents\CARS 2014-10-24 20:12 - 2014-10-24 20:12 - 00000000 ____D () C:\Users\Milosz\Documents\wmd_symbol_cache 2014-10-24 19:42 - 2014-10-24 19:42 - 00000811 _____ () C:\Users\Public\Desktop\Project CARS.lnk 2014-10-24 19:42 - 2014-10-24 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project CARS 2014-10-23 18:56 - 2014-10-16 13:27 - 00614544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-10-23 18:52 - 2014-10-16 17:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-10-23 18:52 - 2014-10-16 17:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00870112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00500880 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00418112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00392008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00348488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-10-23 18:52 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-10-19 17:08 - 2014-10-19 17:10 - 00000000 ____D () C:\Program Files (x86)\SpeedFan 2014-10-19 17:08 - 2014-10-19 17:08 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo 2014-10-18 17:49 - 2014-10-18 17:49 - 00000000 ____D () C:\Users\Milosz\Documents\LSMMO 2014-10-18 17:49 - 2014-10-18 17:49 - 00000000 ____D () C:\Users\Milosz\AppData\Local\LSMMO 2014-10-17 17:44 - 2014-10-17 17:44 - 00000000 ____D () C:\Users\Milosz\Documents\The Alpha MMO 2014-10-17 17:44 - 2014-10-17 17:44 - 00000000 ____D () C:\Users\Milosz\AppData\Local\The Alpha MMO 2014-10-17 17:42 - 2014-10-17 17:42 - 00000000 ____D () C:\Users\Milosz\Documents\SG75 Studios 2014-10-17 17:42 - 2014-10-17 17:42 - 00000000 ____D () C:\Users\Milosz\AppData\Local\SG75 Studios 2014-10-17 07:07 - 2014-10-17 07:07 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Spyshelter 2014-10-16 14:59 - 2014-11-02 18:08 - 00000199 _____ () C:\Users\Milosz\Desktop\kod.txt 2014-10-14 16:07 - 2014-06-18 23:44 - 00042336 _____ () C:\Windows\system32\SpyShelterShellExt.dll 2014-10-14 16:07 - 2014-06-18 23:44 - 00033632 _____ () C:\Windows\SysWOW64\SpyShelterShellExt.dll 2014-10-14 15:46 - 2014-10-14 15:46 - 00000000 ____D () C:\Users\Milosz\AppData\Local\InfectZMMO 2014-10-14 12:59 - 2014-10-14 12:59 - 00000000 ____D () C:\Users\Milosz\Documents\InfectZMMO 2014-10-13 14:40 - 2014-10-13 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sleeping Dogs Definitive Edition 2014-10-13 12:39 - 2014-10-13 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Studios 2014-10-10 15:34 - 2014-10-10 15:34 - 00002145 _____ () C:\Users\Milosz\AppData\Local\recently-used.xbel 2014-10-10 15:30 - 2014-10-10 15:34 - 00000000 ____D () C:\Users\Milosz\AppData\Local\gtk-2.0 2014-10-10 15:29 - 2014-10-10 15:29 - 00000000 ____D () C:\Users\Milosz\.thumbnails 2014-10-10 15:28 - 2014-10-23 19:26 - 00000000 ____D () C:\Users\Milosz\.gimp-2.8 2014-10-10 15:28 - 2014-10-10 15:28 - 00000898 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2014-10-10 15:28 - 2014-10-10 15:28 - 00000000 ____D () C:\Users\Milosz\AppData\Local\gegl-0.2 2014-10-10 15:27 - 2014-10-10 15:27 - 00000000 ____D () C:\Program Files\GIMP 2 2014-10-06 17:16 - 2014-10-06 17:20 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\Dexpot ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-05 07:10 - 2014-01-07 18:48 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-11-05 07:10 - 2013-11-28 23:07 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-11-05 07:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-11-05 07:08 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-11-05 07:08 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-11-04 23:27 - 2014-08-20 02:08 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\Spotify 2014-11-04 22:53 - 2014-05-08 12:33 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf6ab14c1d3311.job 2014-11-04 21:57 - 2013-11-12 22:24 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\TS3Client 2014-11-04 18:44 - 2013-11-13 17:29 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\DMCache 2014-11-04 16:42 - 2014-03-19 18:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-11-04 07:33 - 2013-12-03 21:44 - 00000000 ____D () C:\Users\Milosz\AppData\Local\CrashDumps 2014-11-03 23:09 - 2013-11-12 22:23 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\uTorrent 2014-11-03 20:27 - 2014-08-20 02:08 - 00000000 ____D () C:\Users\Milosz\AppData\Local\Spotify 2014-11-03 20:22 - 2013-11-15 17:54 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\DAEMON Tools Lite 2014-11-03 01:14 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-11-02 21:59 - 2013-12-25 03:52 - 00000000 ____D () C:\Windows\Minidump 2014-11-02 21:59 - 2013-11-12 19:25 - 00303062 ____N () C:\Windows\Minidump\110214-24148-01.dmp 2014-11-02 03:33 - 2013-12-25 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2014-11-02 03:33 - 2013-12-25 00:25 - 00000000 ____D () C:\Program Files\CPUID 2014-11-02 03:30 - 2013-11-13 10:23 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\LolClient 2014-11-02 03:24 - 2013-11-12 22:22 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\Skype 2014-11-02 01:27 - 2014-03-19 18:19 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-11-02 01:21 - 2014-05-22 13:45 - 00005120 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Milosz-Komputer-Milosz Milosz-Komputer 2014-11-02 01:19 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-11-01 20:02 - 2013-11-12 21:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-10-31 11:05 - 2014-05-15 11:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-10-30 14:07 - 2011-04-12 14:21 - 00740422 _____ () C:\Windows\system32\perfh015.dat 2014-10-30 14:07 - 2011-04-12 14:21 - 00155996 _____ () C:\Windows\system32\perfc015.dat 2014-10-30 14:07 - 2009-07-14 06:13 - 01670518 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-10-30 13:48 - 2014-06-29 13:30 - 00003886 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1399165179 2014-10-30 13:48 - 2014-05-04 01:59 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-10-29 16:12 - 2013-11-12 21:47 - 00000000 ____D () C:\ProgramData\Origin 2014-10-29 15:46 - 2013-11-12 21:26 - 00058600 _____ () C:\Users\Milosz\AppData\Local\GDIPFONTCACHEV1.DAT 2014-10-29 15:38 - 2013-11-12 21:47 - 00000000 ____D () C:\Program Files (x86)\Origin 2014-10-29 06:57 - 2009-07-14 05:45 - 00251880 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-10-29 00:33 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-10-28 06:34 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-10-27 18:58 - 2009-07-14 06:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-10-26 18:14 - 2013-11-12 21:28 - 00000000 ____D () C:\Users\Milosz\AppData\Local\Arma 3 2014-10-25 18:10 - 2014-05-16 18:29 - 00001579 _____ () C:\Users\Milosz\AppData\Roaming\BreakingPoint_Options.ini 2014-10-25 18:09 - 2014-05-16 18:30 - 00000295 _____ () C:\Users\Milosz\AppData\Roaming\BreakingPoint_Login.ini 2014-10-25 10:39 - 2013-09-13 09:56 - 00000000 ____D () C:\Windows\system32\MRT 2014-10-25 10:26 - 2013-11-12 23:05 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-10-25 00:02 - 2014-05-16 12:04 - 00000000 ____D () C:\Users\Milosz\Documents\Arma 3 2014-10-24 19:48 - 2014-05-08 12:33 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf6ab14c1d3311 2014-10-24 19:48 - 2013-11-28 23:07 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-10-23 18:57 - 2014-04-07 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-10-23 18:56 - 2013-11-12 23:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-10-23 18:17 - 2013-11-12 22:40 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-10-23 18:17 - 2013-11-12 22:18 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-10-23 18:16 - 2014-02-22 13:18 - 00000000 ____D () C:\Users\Milosz\AppData\Local\PunkBuster 2014-10-20 22:56 - 2014-08-24 14:05 - 00000000 ____D () C:\Users\Milosz\AppData\Roaming\vlc 2014-10-18 15:12 - 2013-11-13 17:29 - 00000000 ____D () C:\Users\Milosz\Downloads\Compressed 2014-10-18 01:02 - 2014-06-20 22:29 - 00000000 ____D () C:\Users\Milosz\AppData\Local\wf-launcher 2014-10-18 00:48 - 2013-12-03 21:00 - 00000000 ____D () C:\ProgramData\GFACE 2014-10-16 19:46 - 2014-09-05 14:02 - 00000000 ____D () C:\Users\Milosz\Documents\FIFA 14 2014-10-16 17:54 - 2014-08-01 18:12 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-10-16 17:54 - 2014-08-01 18:12 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-10-16 17:54 - 2014-07-28 14:40 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-10-16 17:54 - 2014-07-28 14:40 - 00987008 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-10-16 17:54 - 2014-07-28 14:40 - 00027024 _____ () C:\Windows\system32\nvinfo.pb 2014-10-16 17:54 - 2014-06-18 17:16 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-10-16 15:11 - 2014-07-28 14:42 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-10-16 15:11 - 2014-07-28 14:42 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-10-16 15:11 - 2014-07-28 14:42 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-10-16 15:11 - 2014-07-28 14:42 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-10-16 15:11 - 2014-07-28 14:42 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-10-16 15:11 - 2014-07-28 14:42 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-10-16 12:41 - 2014-08-12 03:57 - 00000000 ____D () C:\Users\Milosz\AppData\Local\SKIDROW 2014-10-15 15:44 - 2014-05-22 21:54 - 00000036 _____ () C:\Users\Milosz\Desktop\gra steam.txt 2014-10-15 01:48 - 2014-07-28 14:42 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin 2014-10-11 20:51 - 2014-09-23 22:19 - 00000000 ____D () C:\Users\Milosz\AppData\Local\CSO 2014-10-11 18:37 - 2013-12-01 13:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\State of Decay 2014-10-11 10:16 - 2014-07-15 11:44 - 00000000 ____D () C:\Program Files (x86)\Popcorn Time 2014-10-10 15:29 - 2013-11-12 19:32 - 00000000 ____D () C:\Users\Milosz 2014-10-10 14:26 - 2014-09-10 06:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack 2014-10-10 14:26 - 2014-09-10 06:09 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack 2014-10-10 14:25 - 2014-05-11 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time 2014-10-08 06:03 - 2013-12-25 00:25 - 00000978 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk 2014-10-08 06:03 - 2013-11-29 23:15 - 00000870 _____ () C:\Users\Public\Desktop\CCleaner.lnk ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-27 00:06 ==================== End Of Log ============================