Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-02-2015
Ran by XX (administrator) on MAJLOSZ on 03-02-2015 11:01:11
Running from C:\
Loaded Profiles: XX (Available profiles: XX)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)



==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-3848935919-3367533699-3990728495-1002\...\MountPoints2: {31caccd7-7151-11e2-ab20-6cf0490065fb} - H:\Startme.exe
HKU\S-1-5-21-3848935919-3367533699-3990728495-1002\...\MountPoints2: {a346e428-2dea-11e0-90ee-6cf0490065fb} - H:\Autorun.exe
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll (AVG Secure Search)
Tcpip\Parameters: [DhcpNameServer] 91.218.60.18 91.218.60.19

FireFox:
========
FF ProfilePath: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1215155.dll (Adobe Systems, Inc.)
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll No File
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @esn/voiplaydetector,version=1.0.0 -> C:\Program Files\VOIPlay\npvoiplay.dll No File
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll No File
FF Plugin: @java.com/DTPlugin,version=1.6.0_33 -> C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @real.com/nppl3260;version=12.0.1.669 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=12.0.1.669 -> C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.669 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.669 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=12.0.1.669 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3848935919-3367533699-3990728495-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\XX\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3848935919-3367533699-3990728495-1002: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Extension: Avira Browser Safety - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\abs@avira.com [2015-02-02]
FF Extension: {{EXT_NAME}} - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\nishan.naseer.googimagesearch@gmail.com [2014-09-10]
FF Extension: DownloadHelper - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: {{EXT_NAME}} - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\{e55904c8-769b-4ffe-8d47-48f411f37d22} [2014-09-11]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\adblockpopups@jessehakanen.net.xpi [2013-10-19]
FF Extension: YouTube Video and Audio Downloader - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2013-02-07]
FF Extension: Search Fairy - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\{7CBBC4B3-C5EB-4b7e-99A5-6649B9D257A7}.xpi [2012-08-06]
FF Extension: DigiHelp 1.0.1 - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\{993baf86-643c-42e9-95e5-094f337533f0}.xpi [2014-12-20]
FF Extension: FireFTP - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi [2012-12-14]
FF Extension: Adblock Plus - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\ozo60zrd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-18]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-11-13]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-10-26]
FF HKU\S-1-5-21-3848935919-3367533699-3990728495-1002\...\Firefox\Extensions: [{56900E67-8B27-3793-3C28-26CDFD63B1CA}] - C:\Program Files\ver3BlockAndSurf\182.xpi

Chrome: 
=======
CHR Profile: C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-20]
CHR Extension: (PriceDownloader) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiegkapaipiohdadhdlhokfbjlemifdd [2014-11-03]
CHR Extension: (Avira Browser Safety) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-02-02]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2014-09-07]
CHR Extension: (Avira SafeSearch) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldmiahjidflgnbiadknkmaimfpjkelng [2015-02-02]
CHR Extension: (Google Wallet) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-20]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2014-09-07]
CHR Extension: (Enhanced Steam) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2014-12-20]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3432976 2014-12-18] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [298080 2014-12-18] (AVG Technologies CZ, s.r.o.)
S2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S2 Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.)
S2 dgdersvc; C:\Windows\system32\dgdersvc.exe [95568 2009-12-22] (Devguru Co., Ltd.)
S2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1155072 2009-02-03] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S4 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [217088 2009-12-22] (Teruten) [File not signed]
S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
S2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
S2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] () [File not signed]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [770944 2015-02-02] (Enigma Software Group USA, LLC.)
S4 szserver; C:\Program Files\STOPzilla!\SZServer.exe [57136 2014-08-27] (iS3, Inc.)
S4 vToolbarUpdater18.1.9; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [1820184 2014-08-21] (AVG Secure Search)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [23168 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [27776 2013-06-28] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis.sys [74240 2013-04-23] (LG Electronics Inc.)
S3 AtiDCM; C:\Users\XX\AppData\Local\Temp\atidcmxx.sys [27904 2013-04-30] (Advanced Micro Devices, Inc.)
S1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)
S1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [208152 2014-12-08] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [154904 2014-11-18] (AVG Technologies CZ, s.r.o.)
S1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)
S1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [192792 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [98584 2014-10-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [200984 2014-10-10] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-08-21] (AVG Technologies)
R3 busenum; C:\Windows\System32\DRIVERS\SteelBus.sys [118272 2013-10-30] (SteelSeries Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2015-02-02] ()
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36640 2009-12-22] () [File not signed]
R3 hidusbf; C:\Windows\System32\DRIVERS\hidusbf.sys [4544 2006-11-08] (SweetLow) [File not signed]
S0 is3srv; C:\Windows\System32\drivers\is3srv.sys [61328 2014-08-27] (iS3 Inc.)
S3 LGDDCDevice; C:\Windows\system32\LGI2CDriver.sys [16384 2010-08-04] (LG Soft India) [File not signed]
S3 LGII2CDevice; C:\Windows\system32\LGPII2CDriver.sys [19968 2011-02-11] () [File not signed]
S3 MBAMSwissArmy; C:\Windows\system32\drivers\5BE5457A.sys [114904 2015-02-03] (Malwarebytes Corporation)
S3 msloop; C:\Windows\System32\DRIVERS\loop.sys [5632 2009-07-14] (Microsoft Corporation)
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [39056 2014-11-26] (NetFilterSDK.com)
S1 prodrv06; C:\Windows\System32\drivers\prodrv06.sys [53920 2004-08-09] (Protection Technology) [File not signed]
S0 prohlp02; C:\Windows\System32\drivers\prohlp02.sys [114016 2004-08-09] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\System32\drivers\prosync1.sys [7040 2004-07-19] (Protection Technology) [File not signed]
S0 sfhlp01; C:\Windows\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2009-09-19] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2009-09-19] (MCCI Corporation)
S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [100224 2009-09-19] (MCCI Corporation)
R0 szkg5; C:\Windows\System32\DRIVERS\szkg.sys [61328 2014-08-27] (iS3 Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [17792 2008-12-26] (Avnex) [File not signed]
S3 Xponaut_WBD; C:\Windows\System32\drivers\xpntwbd.sys [13184 2007-01-19] (Xponaut)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 10:35 - 2015-02-03 11:01 - 00000000 ____D () C:\FRST
2015-02-03 10:34 - 2015-02-03 10:34 - 01122304 _____ (Farbar) C:\FRST.exe
2015-02-03 09:31 - 2015-02-03 09:31 - 00021183 _____ () C:\fixlist.txt
2015-02-03 09:22 - 2015-02-03 09:22 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-03 09:22 - 2015-02-03 09:22 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-03 09:19 - 2015-02-03 09:19 - 00000320 _____ () C:\Windows\Tasks\1014avUpdateInfo.job
2015-02-03 09:19 - 2015-02-03 09:19 - 00000000 ____D () C:\ProgramData\Avg_Update_1014av
2015-02-03 08:51 - 2015-02-03 08:51 - 00260270 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2015-02-03 08:51 - 2015-02-03 08:51 - 00000000 ____D () C:\Program Files\MSXML 4.0
2015-02-03 08:49 - 2015-02-03 08:49 - 00229208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMM.sys
2015-02-03 02:28 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-02-03 02:28 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-02-03 02:28 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-02-03 02:28 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2015-02-03 02:28 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-02-03 02:28 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-02-03 02:28 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2015-02-03 02:28 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-02-03 02:28 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-02-03 02:28 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-02-03 02:27 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-02-03 02:27 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-02-03 02:20 - 2015-02-03 02:20 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-02-03 02:20 - 2015-02-03 02:20 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-02-03 02:14 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-02-03 02:14 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-02-02 22:59 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-02-02 22:59 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-02-02 22:54 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-02-02 22:54 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-02 22:54 - 2014-12-04 05:38 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-02 22:54 - 2014-12-04 05:38 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-02 22:54 - 2014-12-04 05:38 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-02 22:54 - 2014-12-04 05:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-02 22:54 - 2014-12-04 05:38 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-02 22:54 - 2014-12-04 05:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-02 22:54 - 2014-12-04 05:34 - 00873984 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-02 22:54 - 2014-12-02 00:28 - 01160872 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-02 22:54 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-02 22:54 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-02-02 22:54 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-02-02 22:54 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-02-02 22:54 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-02-02 22:54 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-02-02 22:54 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-02-02 22:54 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-02-02 22:54 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-02-02 22:54 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-02-02 22:54 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-02-02 22:54 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-02-02 22:54 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-02-02 22:54 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-02-02 22:54 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-02-02 22:54 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-02-02 22:54 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-02-02 22:54 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-02-02 22:54 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-02-02 22:54 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-02-02 22:54 - 2013-03-19 05:48 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-02-02 22:54 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2015-02-02 22:54 - 2013-03-19 03:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-02-02 22:53 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-02-02 22:53 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-02-02 22:53 - 2014-09-19 10:23 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-02 22:53 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-02 22:53 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-02 22:53 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-02 22:53 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-02 22:53 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-02 22:53 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-02 22:53 - 2014-02-04 03:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-02-02 22:53 - 2014-02-04 03:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-02-02 22:53 - 2014-02-04 03:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-02-02 22:53 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-02-02 22:53 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2015-02-02 22:53 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2015-02-02 22:53 - 2012-11-30 00:17 - 00420064 _____ () C:\Windows\system32\locale.nls
2015-02-02 22:53 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-02-02 22:53 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-02-02 22:53 - 2012-10-03 17:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-02-02 22:53 - 2012-10-03 16:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-02-02 22:52 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-02-02 22:52 - 2014-11-24 21:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-02-02 22:52 - 2014-11-24 21:41 - 12369920 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-02 22:52 - 2014-11-24 21:40 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-02 22:52 - 2014-11-24 21:37 - 09740800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-02 22:52 - 2014-11-24 21:35 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-02 22:52 - 2014-11-24 21:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-02 22:52 - 2014-11-24 21:34 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-02 22:52 - 2014-11-24 21:34 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-02-02 22:52 - 2014-11-24 21:33 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-02 22:52 - 2014-11-24 21:33 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-02-02 22:52 - 2014-11-24 21:33 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-02 22:52 - 2014-11-24 21:33 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-02 22:52 - 2014-11-24 21:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-02 22:52 - 2014-11-24 21:33 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-02 22:52 - 2014-11-24 21:33 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-02-02 22:52 - 2014-11-24 21:32 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-02 22:52 - 2014-11-24 21:32 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-02 22:52 - 2014-11-24 21:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-02 22:52 - 2014-11-24 21:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-02 22:52 - 2014-11-24 21:32 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-02 22:52 - 2014-11-24 21:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-02-02 22:52 - 2014-11-24 21:32 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-02-02 22:52 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-02-02 22:52 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-02-02 22:52 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-02-02 22:52 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-02-02 22:52 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-02-02 22:52 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-02-02 22:52 - 2014-06-03 10:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-02-02 22:52 - 2014-06-03 10:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-02-02 22:52 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-02-02 22:52 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-02-02 22:52 - 2014-05-30 07:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-02-02 22:52 - 2014-04-05 03:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-02-02 22:52 - 2014-04-05 03:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-02-02 22:52 - 2014-01-24 03:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-02-02 22:52 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-02-02 22:52 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2015-02-02 22:52 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-02-02 22:52 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-02-02 22:52 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-02-02 22:52 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-02-02 22:52 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-02-02 22:52 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-02-02 22:51 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-02-02 22:51 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-02-02 22:51 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-02-02 22:51 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-02 22:51 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-02-02 22:51 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-02-02 22:51 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-02-02 22:51 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-02-02 22:51 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-02-02 22:51 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-02-02 22:51 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-02-02 22:51 - 2014-03-04 10:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-02-02 22:51 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-02-02 22:51 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-02-02 22:51 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-02-02 22:51 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-02-02 22:51 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-02 22:51 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-02-02 22:51 - 2013-08-02 02:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-02-02 22:51 - 2013-08-02 02:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-02-02 22:51 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-02-02 22:51 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-02-02 22:51 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-02-02 22:51 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2015-02-02 22:51 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-02 22:51 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-02-02 22:51 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-02-02 22:51 - 2012-11-23 03:48 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2015-02-02 22:51 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-02-02 22:51 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-02-02 22:51 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-02-02 22:51 - 2012-10-03 17:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-02-02 22:51 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2015-02-02 22:50 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-02-02 22:50 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-02 22:50 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-02 22:50 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-02-02 22:50 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-02 22:50 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-02 22:50 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-02-02 22:50 - 2014-04-12 03:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-02 22:50 - 2014-04-12 03:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-02 22:50 - 2014-04-12 03:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-02 22:50 - 2014-04-12 03:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-02 22:50 - 2014-04-12 03:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-02 22:50 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-02-02 22:50 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-02-02 22:50 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-02-02 22:50 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-02-02 22:50 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-02-02 22:50 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-02-02 22:50 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-02-02 22:50 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-02-02 22:50 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-02-02 22:50 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-02-02 22:50 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-02-02 22:50 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-02-02 22:50 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-02-02 22:50 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-02-02 22:50 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2015-02-02 22:50 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-02-02 22:50 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-02 22:50 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-02-02 22:50 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2015-02-02 22:50 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2015-02-02 22:50 - 2012-11-28 23:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2015-02-02 22:49 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-02-02 22:46 - 2015-02-02 22:46 - 00000000 ____D () C:\OETemp
2015-02-02 22:27 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-02-02 22:27 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-02-02 22:27 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-02-02 22:27 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-02-02 22:27 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-02-02 17:42 - 2015-02-02 17:42 - 00069774 _____ () C:\Users\XX\Desktop\GMER.txt
2015-02-02 17:36 - 2015-02-02 17:36 - 00637239 _____ () C:\Users\XX\Desktop\FRST.txt
2015-02-02 17:36 - 2015-02-02 17:36 - 00097579 _____ () C:\Users\XX\Desktop\Shortcut.txt
2015-02-02 17:36 - 2015-02-02 17:36 - 00033431 _____ () C:\Users\XX\Desktop\Addition.txt
2015-02-02 17:35 - 2015-02-03 11:00 - 00096396 _____ () C:\Shortcut.txt
2015-02-02 17:35 - 2015-02-02 17:35 - 00108305 _____ () C:\Users\XX\Desktop\KasperskyReport.txt
2015-02-02 17:06 - 2015-02-02 17:06 - 00000000 ____D () C:\TDSSKiller_Quarantine
2015-02-02 17:03 - 2015-02-02 17:03 - 04197016 _____ (Kaspersky Lab ZAO) C:\tdsskiller.exe
2015-02-02 16:30 - 2015-02-02 16:30 - 00370943 _____ () C:\gmer.zip
2015-02-02 16:30 - 2015-02-02 16:30 - 00000000 ____D () C:\gmer
2015-02-02 16:14 - 2015-02-02 17:35 - 00033431 _____ () C:\Addition.txt
2015-02-02 16:07 - 2015-02-03 11:01 - 00017957 _____ () C:\FRST.txt
2015-02-02 15:37 - 2015-02-03 10:35 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\5BE5457A.sys
2015-02-02 15:23 - 2015-02-02 15:23 - 00001204 _____ () C:\Users\XX\Desktop\SpyHunter.lnk
2015-02-02 15:23 - 2015-02-02 15:23 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Enigma Software Group
2015-02-02 15:23 - 2015-02-02 15:23 - 00000000 ____D () C:\sh4ldr
2015-02-02 15:22 - 2015-02-02 15:22 - 00019984 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
2015-02-02 14:54 - 2015-02-03 10:51 - 00000000 ____D () C:\Windows\pss
2015-02-02 12:25 - 2015-02-02 15:36 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\5EFA3319.sys
2015-02-02 11:27 - 2015-02-02 11:27 - 00374738 _____ () C:\Users\XX\Documents\registy_backup.reg
2015-02-02 10:28 - 2015-02-02 12:25 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2F6C59A4.sys
2015-02-02 10:28 - 2015-02-02 10:28 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\1DF1592B.sys
2015-02-02 02:14 - 2015-02-02 02:14 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\61C35F4E.sys
2015-02-02 02:14 - 2015-02-02 02:14 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2F9C5F72.sys
2015-02-02 02:08 - 2015-02-02 02:08 - 06220854 _____ () C:\Users\XX\Documents\Decrypt-All-Files-kcirdgd.bmp
2015-02-02 02:08 - 2015-02-02 02:08 - 00001266 _____ () C:\Users\XX\Documents\Decrypt-All-Files-kcirdgd.txt
2015-02-02 01:45 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-02 01:45 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-01 23:53 - 2015-02-01 23:53 - 00000925 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-02-01 23:53 - 2015-02-01 23:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-02-01 23:40 - 2015-02-01 23:40 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\XX\Downloads\Avira Free Antivirus 2015 14.0.7.468 [1].exe
2015-02-01 23:29 - 2015-02-01 23:29 - 00008554 _____ () C:\Users\XX\HELP_DECRYPT.HTML
2015-02-01 23:29 - 2015-02-01 23:29 - 00008554 _____ () C:\Users\XX\Documents\HELP_DECRYPT.HTML
2015-02-01 23:29 - 2015-02-01 23:29 - 00008554 _____ () C:\Users\HELP_DECRYPT.HTML
2015-02-01 23:29 - 2015-02-01 23:29 - 00001376 _____ () C:\Users\XX\HELP_DECRYPT.TXT.kcirdgd
2015-02-01 23:29 - 2015-02-01 23:29 - 00001376 _____ () C:\Users\XX\Documents\HELP_DECRYPT.TXT.kcirdgd
2015-02-01 23:29 - 2015-02-01 23:29 - 00001376 _____ () C:\Users\HELP_DECRYPT.TXT.kcirdgd
2015-02-01 23:29 - 2015-02-01 23:29 - 00000276 _____ () C:\Users\XX\HELP_DECRYPT.URL
2015-02-01 23:29 - 2015-02-01 23:29 - 00000276 _____ () C:\Users\XX\Documents\HELP_DECRYPT.URL
2015-02-01 23:29 - 2015-02-01 23:29 - 00000276 _____ () C:\Users\HELP_DECRYPT.URL
2015-02-01 22:09 - 2015-02-01 23:55 - 00000000 ____D () C:\ProgramData\AVG2015
2015-02-01 22:04 - 2015-02-02 00:00 - 00000000 ____D () C:\Users\XX\AppData\Local\Avg2015
2015-02-01 22:04 - 2015-02-01 22:04 - 00000000 ____D () C:\Users\XX\AppData\Local\MFAData
2015-02-01 21:47 - 2015-02-02 15:09 - 00007676 _____ () C:\Users\XX\AppData\Local\Resmon.ResmonCfg
2015-02-01 21:34 - 2015-02-01 21:34 - 00008554 _____ () C:\Users\XX\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-01 21:34 - 2015-02-01 21:34 - 00008554 _____ () C:\Users\XX\AppData\HELP_DECRYPT.HTML
2015-02-01 21:34 - 2015-02-01 21:34 - 00001376 _____ () C:\Users\XX\AppData\Roaming\HELP_DECRYPT.TXT.kcirdgd
2015-02-01 21:34 - 2015-02-01 21:34 - 00001376 _____ () C:\Users\XX\AppData\HELP_DECRYPT.TXT.kcirdgd
2015-02-01 21:34 - 2015-02-01 21:34 - 00000276 _____ () C:\Users\XX\AppData\Roaming\HELP_DECRYPT.URL
2015-02-01 21:34 - 2015-02-01 21:34 - 00000276 _____ () C:\Users\XX\AppData\HELP_DECRYPT.URL
2015-02-01 20:33 - 2015-02-01 20:33 - 267946894 _____ () C:\Windows\MEMORY.DMP
2015-02-01 20:33 - 2015-02-01 20:33 - 00143080 _____ () C:\Windows\Minidump\020115-52556-01.dmp
2015-02-01 17:17 - 2015-02-01 17:17 - 00008554 _____ () C:\Users\XX\AppData\Local\HELP_DECRYPT.HTML
2015-02-01 17:17 - 2015-02-01 17:17 - 00001376 _____ () C:\Users\XX\AppData\Local\HELP_DECRYPT.TXT.kcirdgd
2015-02-01 17:17 - 2015-02-01 17:17 - 00000276 _____ () C:\Users\XX\AppData\Local\HELP_DECRYPT.URL
2015-02-01 16:49 - 2015-02-01 16:49 - 00008554 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-01 16:49 - 2015-02-01 16:49 - 00004288 _____ () C:\ProgramData\HELP_DECRYPT.TXT.wxeezfd
2015-02-01 16:49 - 2015-02-01 16:49 - 00000276 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-02-01 16:45 - 2015-02-01 16:47 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Local Store
2015-01-29 23:37 - 2015-02-01 22:09 - 00000000 ____D () C:\Users\XX\Desktop\29szt
2015-01-23 21:05 - 2015-02-01 20:42 - 00000000 ____D () C:\Users\XX\AppData\Local\Blizzard
2015-01-23 20:48 - 2015-01-23 20:49 - 00000678 _____ () C:\Users\Public\Desktop\Hearthstone.lnk
2015-01-23 20:48 - 2015-01-23 20:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-01-23 20:44 - 2015-01-23 20:44 - 00001066 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2015-01-23 20:44 - 2015-01-23 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-01-23 20:44 - 2015-01-23 20:44 - 00000000 ____D () C:\Program Files\Battle.net
2015-01-08 18:48 - 2015-02-01 22:10 - 00000000 ____D () C:\Users\XX\Desktop\najlepsza składanka
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____D () C:\Users\XX\Desktop\magdiet
2015-01-05 00:05 - 2015-01-05 00:07 - 00000000 __SHD () C:\Users\XX\Desktop\Let's GO
2015-01-05 00:04 - 2015-02-01 17:09 - 00000000 ____D () C:\Program Files\LocK-A-FoLdeR
2015-01-05 00:04 - 2015-01-05 00:04 - 00606938 _____ (Gurjit Singh) C:\Users\XX\Desktop\LocK-A-FoLdeR-V3.9.2.exe
2015-01-05 00:04 - 2015-01-05 00:04 - 00000989 _____ () C:\Users\XX\Desktop\LocK-A-FoLdeR.lnk
2015-01-05 00:04 - 2015-01-05 00:04 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LocK-A-FoLdeR
2015-01-05 00:04 - 2015-01-05 00:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LocK-A-FoLdeR
2015-01-04 09:59 - 2015-02-02 02:57 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Adetymwu

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 11:00 - 2013-11-18 18:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-02-03 11:00 - 2010-01-10 13:04 - 00000000 ____D () C:\Users\XX\AppData\Local\Google
2015-02-03 11:00 - 2010-01-09 10:32 - 00000000 ____D () C:\Users\XX
2015-02-03 10:53 - 2010-01-09 10:32 - 01509510 _____ () C:\Windows\WindowsUpdate.log
2015-02-03 10:51 - 2009-07-14 05:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-03 10:51 - 2009-07-14 05:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-03 10:43 - 2014-09-07 16:12 - 00024437 _____ () C:\Windows\setupact.log
2015-02-03 10:43 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-03 10:36 - 2012-09-06 15:12 - 00000000 ____D () C:\ProgramData\MFAData
2015-02-03 10:32 - 2014-09-07 16:11 - 01469998 _____ () C:\Windows\PFRO.log
2015-02-03 10:08 - 2014-12-16 23:52 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-03 09:49 - 2014-03-16 13:37 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo
2015-02-03 09:22 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2015-02-03 09:05 - 2009-11-26 11:41 - 01759710 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-03 09:05 - 2009-07-14 09:07 - 00773776 _____ () C:\Windows\system32\perfh015.dat
2015-02-03 09:05 - 2009-07-14 09:07 - 00172490 _____ () C:\Windows\system32\perfc015.dat
2015-02-03 09:01 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-02-03 08:58 - 2009-07-14 05:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-03 08:47 - 2014-09-07 13:40 - 00138584 _____ () C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-03 08:44 - 2014-09-07 16:11 - 01809016 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-03 08:41 - 2009-07-14 09:07 - 00000000 ____D () C:\Windows\system32\Drivers\pl-PL
2015-02-03 08:41 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Defender
2015-02-03 08:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2015-02-03 02:46 - 2009-11-26 12:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-03 02:21 - 2013-09-06 09:05 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-02-03 02:21 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-03 02:19 - 2009-07-14 03:04 - 00000624 _____ () C:\Windows\win.ini
2015-02-02 22:47 - 2015-01-03 14:38 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-02 22:45 - 2014-11-09 11:50 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-02-02 22:13 - 2009-07-14 03:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-02 22:09 - 2010-02-04 16:35 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Skype
2015-02-02 15:22 - 2014-09-07 13:18 - 00000000 ____D () C:\Program Files\Enigma Software Group
2015-02-02 10:52 - 2010-04-06 21:55 - 00009486 _____ () C:\ProgramData\hpzinstall.log
2015-02-02 10:49 - 2013-11-18 17:42 - 00000000 ____D () C:\Program Files\HP
2015-02-02 10:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\twain_32
2015-02-02 02:57 - 2014-12-28 12:09 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Ubkafo
2015-02-02 02:57 - 2014-12-27 16:14 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Igosonne
2015-02-02 02:57 - 2014-12-20 13:05 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Ynehcaac
2015-02-02 02:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\PLA
2015-02-02 01:45 - 2014-11-09 12:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-02 01:45 - 2014-11-09 12:37 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-02-02 01:29 - 2014-11-04 17:46 - 00000000 ____D () C:\Users\XX\Desktop\siłka FILMIKI
2015-02-02 01:29 - 2014-08-25 14:12 - 00000000 ____D () C:\Users\XX\Documents\dvd
2015-02-02 01:29 - 2014-07-08 13:38 - 00000000 ____D () C:\Users\XX\Documents\MKJogo
2015-02-02 01:29 - 2014-06-26 20:35 - 00000000 ____D () C:\Users\XX\Documents\MKGame
2015-02-02 01:29 - 2014-06-26 11:11 - 00000000 ____D () C:\Users\XX\Desktop\toiowo
2015-02-02 01:29 - 2014-05-19 21:44 - 00000000 ____D () C:\Users\XX\Documents\Anki
2015-02-02 01:29 - 2014-03-16 16:10 - 00000000 ____D () C:\Users\XX\Documents\MK-LOL
2015-02-02 01:29 - 2013-06-23 20:19 - 00000000 ____D () C:\yy
2015-02-02 01:17 - 2010-01-09 11:44 - 00000000 ____D () C:\Program Files\AVG
2015-02-01 22:10 - 2014-12-29 14:31 - 00000000 ____D () C:\Users\XX\Desktop\nm
2015-02-01 22:10 - 2014-12-01 17:42 - 00000000 ____D () C:\Users\XX\Desktop\Nowy folder
2015-02-01 22:10 - 2014-08-29 17:58 - 00000000 ____D () C:\Users\XX\Desktop\mp3
2015-02-01 22:10 - 2014-08-22 12:48 - 00000000 ____D () C:\Users\XX\Desktop\muzyka
2015-02-01 22:09 - 2015-01-03 16:23 - 00000000 ____D () C:\Users\XX\Desktop\Malestia.pl client 20.12.2014
2015-02-01 22:09 - 2014-12-21 13:39 - 00000000 ____D () C:\Users\XX\Desktop\cfg
2015-02-01 22:09 - 2014-11-22 19:00 - 00000000 ____D () C:\Users\XX\AppData\Roaming\SteelSeries
2015-02-01 22:09 - 2014-07-28 23:02 - 00000000 ____D () C:\Users\XX\Desktop\do samochodu
2015-02-01 22:09 - 2012-06-04 13:31 - 00000000 ____D () C:\Users\XX\AppData\Roaming\wargaming.net
2015-02-01 22:09 - 2010-10-23 20:40 - 00000000 ____D () C:\Users\XX\AppData\Roaming\TS3Client
2015-02-01 22:06 - 2014-12-20 23:39 - 00000000 ___HD () C:\Users\XX\AppData\Roaming\GoldenGate
2015-02-01 21:28 - 2013-08-17 16:28 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Nero
2015-02-01 21:28 - 2012-04-16 19:53 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Mozilla
2015-02-01 21:28 - 2011-11-13 02:45 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Real
2015-02-01 21:28 - 2010-12-18 22:09 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Samsung
2015-02-01 21:28 - 2010-05-04 18:09 - 00000000 ____D () C:\Users\XX\AppData\Roaming\OpenFM
2015-02-01 21:28 - 2010-01-09 10:53 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Opera
2015-02-01 21:23 - 2010-01-09 10:57 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Gadu-Gadu 10
2015-02-01 21:22 - 2014-08-25 16:08 - 00000000 ____D () C:\Users\XX\AppData\Roaming\AvitoDvd
2015-02-01 20:50 - 2014-12-21 15:43 - 00000000 ____D () C:\Users\XX\Desktop\config (1)
2015-02-01 20:50 - 2013-07-09 11:10 - 00000000 ____D () C:\Users\XX\AppData\Roaming\WordToPDF
2015-02-01 20:45 - 2014-09-13 20:58 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Battle.net
2015-02-01 20:45 - 2014-08-25 14:10 - 00000000 ____D () C:\Users\XX\AppData\Roaming\DVD Flick
2015-02-01 20:45 - 2014-02-20 18:45 - 00000000 ____D () C:\Users\XX\AppData\Roaming\avidemux
2015-02-01 20:45 - 2014-02-20 18:00 - 00000000 ____D () C:\Users\XX\AppData\Roaming\4Media
2015-02-01 20:45 - 2013-02-14 15:33 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Balmora.pl
2015-02-01 20:45 - 2013-01-15 19:02 - 00000000 ____D () C:\Users\XX\AppData\Roaming\DMCache
2015-02-01 20:45 - 2012-02-06 23:23 - 00000000 ____D () C:\Users\XX\AppData\Roaming\com.w3i.FlipToast
2015-02-01 20:45 - 2010-10-16 13:16 - 00000000 ____D () C:\Users\XX\AppData\Roaming\FileZilla
2015-02-01 20:45 - 2010-02-06 16:41 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Audacity
2015-02-01 20:45 - 2010-01-09 11:00 - 00000000 ____D () C:\Users\XX\AppData\Roaming\Adobe
2015-02-01 20:44 - 2014-02-28 08:19 - 00000000 ____D () C:\Users\XX\AppData\Local\Skype
2015-02-01 20:44 - 2011-09-05 20:06 - 00000000 ____D () C:\Users\XX\AppData\Local\PMB Files
2015-02-01 20:42 - 2014-09-13 20:58 - 00000000 ____D () C:\Users\XX\AppData\Local\Blizzard Entertainment
2015-02-01 20:42 - 2014-09-13 20:58 - 00000000 ____D () C:\Users\XX\AppData\Local\Battle.net
2015-02-01 20:41 - 2014-09-12 21:56 - 00000000 ____D () C:\ProgramData\STOPzilla!
2015-02-01 20:41 - 2014-03-17 17:36 - 00000000 ____D () C:\Users\XX\AppData\Local\AVG Secure Search
2015-02-01 20:41 - 2013-02-07 20:30 - 00000000 ____D () C:\ProgramData\Sony
2015-02-01 20:40 - 2010-02-04 16:35 - 00000000 ____D () C:\ProgramData\Skype
2015-02-01 20:35 - 2010-01-10 14:39 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-01 20:33 - 2013-02-20 16:55 - 00000000 ____D () C:\Windows\Minidump
2015-02-01 20:28 - 2009-11-26 12:26 - 00000000 ____D () C:\ProgramData\Nero
2015-02-01 20:24 - 2014-09-13 20:55 - 00000000 ____D () C:\ProgramData\Battle.net
2015-02-01 20:24 - 2013-11-18 17:41 - 00000000 ____D () C:\ProgramData\HP
2015-02-01 20:24 - 2011-02-04 12:40 - 00000000 ____D () C:\ProgramData\DivX
2015-02-01 20:24 - 2010-04-10 15:32 - 00000000 ____D () C:\ProgramData\MAGIX
2015-02-01 20:23 - 2014-04-29 16:00 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2015-02-01 20:22 - 2012-11-11 14:27 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2015-02-01 20:21 - 2013-02-20 11:00 - 00000000 ___RD () C:\Program Files\Skype
2015-02-01 17:09 - 2013-11-30 11:15 - 00000000 ____D () C:\Program Files\IrfanView
2015-02-01 17:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2015-02-01 16:53 - 2010-12-18 22:08 - 00000000 ____D () C:\Program Files\Common Files\Samsung
2015-02-01 16:50 - 2014-03-17 17:35 - 00000000 ____D () C:\Program Files\AVG Secure Search
2015-02-01 16:49 - 2014-08-25 11:03 - 00000000 ____D () C:\Program Files\AviSynth 2.5
2015-02-01 16:49 - 2013-08-17 16:40 - 00000000 ____D () C:\Program Files\CDBurnerXP
2015-02-01 16:47 - 2009-11-26 12:00 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-02-01 16:43 - 2014-12-21 02:21 - 00000000 ____D () C:\Mouse Rate Checker 1.1b
2015-02-01 16:43 - 2014-12-20 23:51 - 00000000 ____D () C:\AMD
2015-02-01 16:43 - 2010-02-27 17:14 - 00000000 ____D () C:\OutputFolder
2015-02-01 16:43 - 2010-01-09 11:44 - 00000000 ___HD () C:\$AVG
2015-02-01 16:42 - 2014-02-20 17:59 - 00000000 ____D () C:\ProgramData\4Media
2015-01-26 16:08 - 2012-05-26 15:15 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-26 16:08 - 2012-05-26 15:15 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-23 20:49 - 2014-09-13 20:57 - 00000000 ____D () C:\Program Files\Common Files\Blizzard Entertainment

==================== Files in the root of some directories =======

2011-09-05 20:23 - 2011-09-05 20:23 - 8391685 _____ () C:\Program Files\data.ifs
2011-09-05 20:23 - 2011-09-05 20:23 - 0008204 _____ () C:\Program Files\data.ifs.cch
2012-12-19 16:39 - 2012-12-21 16:49 - 0001287 _____ () C:\Program Files\esl.cfg
2012-12-17 16:34 - 2012-12-17 16:34 - 0000305 _____ () C:\Program Files\liblist.gam
2012-12-19 16:40 - 2012-12-19 16:40 - 0005315 _____ () C:\Program Files\live.cfg
2012-12-21 16:43 - 2012-12-21 16:43 - 0000071 _____ () C:\Program Files\plugins.ini
2012-12-19 15:48 - 2012-12-19 15:48 - 0000575 _____ () C:\Program Files\server.cfg
2012-12-20 19:59 - 2012-12-20 19:59 - 0000016 _____ () C:\Program Files\sys_ticrate.cfg
2012-08-30 22:24 - 2012-09-01 10:49 - 0000165 _____ () C:\Users\XX\AppData\Roaming\D2Info0
2012-08-31 11:52 - 2012-09-01 12:12 - 0000008 _____ () C:\Users\XX\AppData\Roaming\DofusAppId0_1
2012-08-30 22:24 - 2012-08-31 15:31 - 0000008 _____ () C:\Users\XX\AppData\Roaming\DofusAppId0_2
2015-02-01 21:34 - 2015-02-01 21:34 - 0008554 _____ () C:\Users\XX\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-01 21:34 - 2015-02-01 21:34 - 0045739 _____ () C:\Users\XX\AppData\Roaming\HELP_DECRYPT.PNG
2015-02-01 21:34 - 2015-02-01 21:34 - 0001376 _____ () C:\Users\XX\AppData\Roaming\HELP_DECRYPT.TXT.kcirdgd
2015-02-01 21:34 - 2015-02-01 21:34 - 0000276 _____ () C:\Users\XX\AppData\Roaming\HELP_DECRYPT.URL
2014-11-05 20:58 - 2014-11-09 11:58 - 0000067 _____ () C:\Users\XX\AppData\Roaming\WB.CFG
2010-01-30 14:18 - 2014-12-02 00:25 - 0018432 _____ () C:\Users\XX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-02-01 17:17 - 2015-02-01 17:17 - 0008554 _____ () C:\Users\XX\AppData\Local\HELP_DECRYPT.HTML
2015-02-01 17:17 - 2015-02-01 17:17 - 0045582 _____ () C:\Users\XX\AppData\Local\HELP_DECRYPT.PNG
2015-02-01 17:17 - 2015-02-01 17:17 - 0001376 _____ () C:\Users\XX\AppData\Local\HELP_DECRYPT.TXT.kcirdgd
2015-02-01 17:17 - 2015-02-01 17:17 - 0000276 _____ () C:\Users\XX\AppData\Local\HELP_DECRYPT.URL
2015-02-01 21:47 - 2015-02-02 15:09 - 0007676 _____ () C:\Users\XX\AppData\Local\Resmon.ResmonCfg
2015-02-01 16:49 - 2015-02-01 16:49 - 0008554 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-01 16:49 - 2015-02-01 16:49 - 0045582 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-02-01 16:49 - 2015-02-01 16:49 - 0004288 _____ () C:\ProgramData\HELP_DECRYPT.TXT.wxeezfd
2015-02-01 16:49 - 2015-02-01 16:49 - 0000276 _____ () C:\ProgramData\HELP_DECRYPT.URL
2010-04-06 21:55 - 2015-02-02 10:52 - 0009486 _____ () C:\ProgramData\hpzinstall.log

Some content of TEMP:
====================
C:\Users\XX\AppData\Local\Temp\13-4_vista_win7_win8_32_dd_ccc_whql.exe
C:\Users\XX\AppData\Local\Temp\13-9-legacy_vista_win7_32_dd_ccc_whql.exe
C:\Users\XX\AppData\Local\Temp\81AE3474-64F3-BC30-39A2-E0051BFD9D72.dll
C:\Users\XX\AppData\Local\Temp\81AE3474-64F3-BC30-39A2-E0051BFD9D72.exe
C:\Users\XX\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\XX\AppData\Local\Temp\avgnt.exe
C:\Users\XX\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
C:\Users\XX\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpggvkel.dll
C:\Users\XX\AppData\Local\Temp\fndwg3yj.dll
C:\Users\XX\AppData\Local\Temp\gg10.upgr.exe
C:\Users\XX\AppData\Local\Temp\KB27576749.exe
C:\Users\XX\AppData\Local\Temp\nsx9A8E.tmp.exe
C:\Users\XX\AppData\Local\Temp\OptimizerPro.exe
C:\Users\XX\AppData\Local\Temp\optprosetup.exe
C:\Users\XX\AppData\Local\Temp\SkypeSetup.exe
C:\Users\XX\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\XX\AppData\Local\Temp\urepair.exe
C:\Users\XX\AppData\Local\Temp\x2blapi.dll
C:\Users\XX\AppData\Local\Temp\{1642037D-0CD4-4E46-9A91-0E4450B90749}.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 00:22

==================== End Of Log ============================