Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02 Ran by Krystian (administrator) on KRYSTIAN-PC on 11-02-2015 20:15:21 Running from K:\ Loaded Profiles: Krystian (Available profiles: Krystian) Platform: Windows 7 Home Premium (X64) OS Language: Polski (Polska) Internet Explorer Version 8 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe () C:\Windows\System32\PnkBstrA.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe (Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (MagicISO, Inc.) C:\Program Files (x86)\MagicDisc\MagicDisc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43608 2014-08-17] () HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [465536 2010-11-08] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-10] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.) HKU\S-1-5-21-73430126-477431288-1595111608-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-73430126-477431288-1595111608-1000\...\Run: [GoogleChromeAutoLaunch_8707353D8563CD44712F8738A461CC95] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-09-23] (Google Inc.) HKU\S-1-5-21-73430126-477431288-1595111608-1000\...\MountPoints2: {a2e36bf5-4fce-11e4-bc3a-10bf4883a50c} - J:\./MTP/LMPC.exe HKU\S-1-5-21-73430126-477431288-1595111608-1000\...\MountPoints2: {a3f6f54a-2fcf-11e4-aa8a-10bf4883a50c} - F:\setup.exe HKU\S-1-5-21-73430126-477431288-1595111608-1000\...\MountPoints2: {c1cf15f2-5041-11e4-83d3-10bf4883a50c} - J:\PCSuite_setup.exe HKU\S-1-5-21-73430126-477431288-1595111608-1000\...\MountPoints2: {c1cf161f-5041-11e4-83d3-10bf4883a50c} - J:\./MTP/LMPC.exe HKU\S-1-5-21-73430126-477431288-1595111608-1000\...\MountPoints2: {d412d29b-8144-11e4-97b6-10bf4883a50c} - J:\Lenovo_Suite.exe HKU\S-1-5-21-73430126-477431288-1595111608-1000\...\MountPoints2: {d412d2af-8144-11e4-97b6-10bf4883a50c} - J:\Lenovo_Suite.exe Startup: C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-73430126-477431288-1595111608-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 62.233.233.233 62.233.233.233 FireFox: ======== FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR Profile: C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Angry Birds) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-02-02] CHR Extension: (YouTube) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-09] CHR Extension: (Szukaj w Google) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-09] CHR Extension: (Dark Vibe) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkckeanhmkjaechlhllmapjaaglgpcbj [2014-02-02] CHR Extension: (Chain Reaction) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gemgfpodpjapjhfohdlibagceiknakpa [2014-02-02] CHR Extension: (AdBlock) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-10-11] CHR Extension: (Poppit!) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi [2014-10-09] CHR Extension: (Marble Hop) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcmlfjpbnfnplhflmkkjelhohpggdelf [2014-10-09] CHR Extension: (Google Wallet) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-02] CHR Extension: (Gmail) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-09] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed] R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [918448 2014-08-17] () [File not signed] R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2014-08-17] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2014-08-17] () S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [175136 2014-10-24] (EasyAntiCheat Ltd) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-12-28] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2014-12-28] () S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X] S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.) R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2014-08-17] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-08-17] () S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2014-08-17] (MCCI Corporation) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-11] (Malwarebytes Corporation) S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation) S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2014-12-23] () S3 cpuz136; \??\C:\Users\Krystian\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X] S3 cpuz137; \??\C:\Users\Krystian\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X] S4 NVHDA; system32\drivers\nvhda64v.sys [X] S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-11 20:12 - 2015-02-11 20:15 - 00000000 ____D () C:\FRST 2015-02-11 20:09 - 2015-02-11 20:09 - 02040877 _____ () C:\Users\Krystian\Desktop\cureit.log 2015-02-11 20:08 - 2015-02-11 20:08 - 00000000 ____D () C:\ProgramData\Doctor Web 2015-02-11 20:01 - 2015-02-11 20:09 - 00000000 ____D () C:\Users\Krystian\Doctor Web 2015-02-09 19:30 - 2015-02-11 19:32 - 00000000 ____D () C:\Users\Krystian\Documents\FIFA 15 2015-02-08 01:57 - 2015-02-08 01:57 - 00028479 _____ () C:\Users\Krystian\Downloads\Carrie_ 2013 __[THEATRiCAL]__[BRRip XviD-GHW]__[Lektor_PL][Torrenty.org].torrent 2015-02-08 01:55 - 2015-02-08 01:55 - 00014701 _____ () C:\Users\Krystian\Downloads\Carrie_ 2013 _[BRRip]_[XviD-GHW]_[Lektor_PL][Torrenty.org].torrent 2015-02-07 09:34 - 2015-02-07 09:36 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Origin 2015-02-07 09:32 - 2015-02-11 19:32 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-02-06 21:54 - 2015-02-06 21:54 - 00016489 _____ () C:\Users\Krystian\Downloads\Dracula Historia Nieznana - Dracula Untold 2014 [480p BRRip XviD AC3-azjatycki] [Lektor PL] [AT-TEAM][Torrenty.org].torrent 2015-02-06 21:36 - 2015-02-06 21:36 - 00012999 _____ () C:\Users\Krystian\Downloads\Uprowadzona 3 - Taken 3 2014 [DVDRip RMVB] [Lektor PL][Torrenty.org].torrent 2015-02-05 18:14 - 2015-02-05 18:14 - 473301938 _____ () C:\Windows\MEMORY.DMP 2015-02-03 09:39 - 2015-02-03 09:40 - 00000000 ____D () C:\Users\Krystian\Desktop\Nowy folder (2) 2015-02-02 19:51 - 2015-02-02 19:51 - 01421621 _____ () C:\Users\Krystian\Downloads\FIFA15.Up.1-4.Fix.Only.v1-3DM.7z 2015-02-02 19:47 - 2015-02-02 19:50 - 36530355 _____ () C:\Users\Krystian\Downloads\FIFA14.v1.2.0.0.Final.Crack.Only.v2-3DM.7z 2015-02-02 19:40 - 2015-02-02 19:40 - 00000679 _____ () C:\Users\Public\Desktop\Titanfall.lnk 2015-02-02 19:33 - 2015-02-11 19:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15 2015-02-02 19:33 - 2015-02-07 09:25 - 00000660 _____ () C:\Users\Public\Desktop\FIFA 15.lnk 2015-02-02 19:26 - 2015-02-02 19:33 - 00000000 ____D () C:\Users\Krystian\Desktop\Nowy folder 2015-02-02 19:24 - 2015-02-02 19:24 - 00000000 ____D () C:\Users\Krystian\Desktop\Update 2015-02-02 19:24 - 2015-02-01 06:19 - 00000000 ____D () C:\Users\Krystian\Desktop\Crack 2015-02-02 19:06 - 2015-02-02 19:21 - 252231560 _____ () C:\Users\Krystian\Downloads\SC-74874U1-4VC1 (1).rar 2015-01-29 18:27 - 2015-01-29 18:27 - 00653824 _____ () C:\Users\Krystian\Downloads\MicrosoftFixit50446.msi 2015-01-28 21:16 - 2015-01-28 21:16 - 00000000 ____D () C:\ProgramData\Codemasters 2015-01-28 20:56 - 2015-01-28 20:56 - 00000593 _____ () C:\Users\Krystian\Desktop\GRID Autosport.lnk 2015-01-28 20:56 - 2015-01-28 20:56 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\GRID Autosport 2015-01-28 20:17 - 2015-01-28 20:17 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Logitech 2015-01-28 19:54 - 2015-01-28 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2015-01-28 19:54 - 2015-01-28 19:54 - 00000000 ____D () C:\Program Files\Logitech 2015-01-28 19:54 - 2015-01-28 19:54 - 00000000 ____D () C:\Program Files\Common Files\Logitech 2015-01-28 19:30 - 2015-01-28 19:35 - 17276616 _____ (Logitech ) C:\Users\Krystian\Downloads\lgs510_x64.exe 2015-01-28 19:01 - 2015-01-28 19:01 - 00013929 _____ () C:\Users\Krystian\Downloads\[kickass.so]grid.autosport.r.g.mechanics.torrent 2015-01-26 21:49 - 2015-01-26 21:49 - 00000505 _____ () C:\Users\Public\Desktop\Saints Row Gat out of Hell.lnk 2015-01-26 19:30 - 2015-01-26 19:30 - 00102627 _____ () C:\Users\Krystian\Downloads\[kickass.so]saints.row.gat.out.of.hell.reloaded.torrent 2015-01-21 16:52 - 2015-01-21 16:52 - 00031232 _____ () C:\Users\Krystian\Downloads\R_II_Rolnictwo_Rolnictwo1 (2).xls 2015-01-20 09:35 - 2015-01-20 09:36 - 08742130 _____ () C:\Users\Krystian\Downloads\Aneta Zając Playboy.rar 2015-01-19 19:51 - 2015-01-19 20:12 - 380335608 _____ () C:\Users\Krystian\Downloads\A850_S123_130814_Lang.7z 2015-01-18 18:28 - 2014-03-07 08:24 - 08873472 _____ () C:\Users\Krystian\Desktop\SouthParkSOT_STEAM_PLUS6_TRN-dEViATED.exe 2015-01-18 13:26 - 2014-02-28 13:48 - 01363140 _____ () C:\Users\Krystian\Desktop\data_localized_en.oaf 2015-01-18 13:25 - 2015-01-18 13:25 - 00000972 _____ () C:\Users\Krystian\Desktop\Play South Park The Stick of Truth.lnk 2015-01-18 13:23 - 2015-01-18 13:23 - 00365063 _____ () C:\Users\Krystian\Downloads\pol.rar 2015-01-18 12:12 - 2015-01-18 12:12 - 00021651 _____ () C:\Users\Krystian\Downloads\South Park The Stick of Truth DLC [ENG] [nosTEAM][Torrenty.org].torrent 2015-01-18 10:27 - 2015-01-18 10:27 - 00056833 _____ () C:\Users\Krystian\Downloads\Wywiad ze Sloncem Narodu - The Interview 2014 [WEB-DL] [Xvid-MORS] [Napisy PL][Torrenty.org].torrent 2015-01-17 18:02 - 2015-01-17 18:02 - 00007682 _____ () C:\graph.log 2015-01-17 18:02 - 2015-01-17 18:02 - 00001152 _____ () C:\Users\Krystian\Desktop\Little Fighter 2.lnk 2015-01-17 18:02 - 2015-01-17 18:02 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Little Fighter 2 2015-01-17 18:02 - 2015-01-17 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Little Fighter 2 2015-01-17 18:02 - 2015-01-17 18:02 - 00000000 ____D () C:\Program Files (x86)\LittleFighter2 2015-01-17 18:01 - 2015-01-17 18:02 - 25103618 _____ (Little Fighter 2) C:\Users\Krystian\Downloads\lf2_v20_Setup.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-07-25 03:24 - 2014-12-23 18:44 - 00000000 ____D () C:\Users\Krystian\Downloads\Guru3D.com 2015-02-11 20:14 - 2014-08-17 08:56 - 01247373 _____ () C:\Windows\WindowsUpdate.log 2015-02-11 20:11 - 2014-08-17 18:44 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-02-11 20:11 - 2014-08-17 18:18 - 00000000 ____D () C:\Users\Krystian 2015-02-11 20:11 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-11 20:11 - 2009-07-14 05:51 - 00100634 _____ () C:\Windows\setupact.log 2015-02-11 20:04 - 2009-07-14 05:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-11 20:04 - 2009-07-14 05:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-11 20:02 - 2014-08-17 19:19 - 00740196 _____ () C:\Windows\system32\perfh015.dat 2015-02-11 20:02 - 2014-08-17 19:19 - 00155770 _____ () C:\Windows\system32\perfc015.dat 2015-02-11 20:02 - 2009-07-14 06:13 - 01669606 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-11 19:56 - 2014-10-11 05:26 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-11 19:44 - 2014-05-18 16:53 - 00000000 ____D () C:\Users\Krystian\AppData\Local\Adobe 2015-02-11 19:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-02-11 19:32 - 2014-10-24 08:52 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-02-11 19:32 - 2014-08-17 22:13 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-11 19:32 - 2014-02-17 20:10 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\vlc 2015-02-11 19:32 - 2014-02-06 21:16 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\uTorrent 2015-02-11 19:32 - 2014-02-03 21:45 - 00000000 ____D () C:\Users\Krystian\Documents\FIFA 14 2015-02-11 19:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-02-11 19:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2015-02-08 15:22 - 2014-08-17 21:26 - 00000000 ____D () C:\ProgramData\Origin 2015-02-07 09:32 - 2014-08-17 21:55 - 00000000 ____D () C:\ProgramData\Electronic Arts 2015-02-07 09:19 - 2014-08-17 18:44 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-02-07 08:49 - 2014-08-17 18:44 - 00001052 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-02-07 01:43 - 2014-02-17 13:56 - 00000000 ____D () C:\Users\Krystian\AppData\Roaming\Skype 2015-02-06 20:38 - 2014-12-28 14:14 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2015-02-05 18:14 - 2014-08-18 00:02 - 00000000 ____D () C:\Windows\Minidump 2015-02-04 20:19 - 2014-08-17 18:44 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-04 20:19 - 2014-08-17 18:44 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-02-04 20:19 - 2014-08-17 18:44 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-02-02 19:39 - 2014-08-17 20:52 - 00358748 _____ () C:\Windows\DirectX.log 2015-02-02 19:33 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-01-28 21:16 - 2013-04-13 22:19 - 00000000 ____D () C:\Users\Krystian\Documents\My Games 2015-01-20 09:36 - 2014-05-15 06:28 - 00000000 ____D () C:\Users\Krystian\Desktop\Dieta 2015-01-19 19:53 - 2014-08-17 20:55 - 00103736 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 ==================== Files in the root of some directories ======= 2014-08-04 20:19 - 2014-08-04 20:19 - 0000132 _____ () C:\Users\Krystian\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe 2014-12-26 19:09 - 2014-12-26 19:09 - 0007602 _____ () C:\Users\Krystian\AppData\Local\Resmon.ResmonCfg Some content of TEMP: ==================== C:\Users\Krystian\AppData\Local\Temp\Bass.dll C:\Users\Krystian\AppData\Local\Temp\Bass.Net.dll C:\Users\Krystian\AppData\Local\Temp\Lng.Dll C:\Users\Krystian\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Krystian\AppData\Local\Temp\nvStInst.exe C:\Users\Krystian\AppData\Local\Temp\Quarantine.exe C:\Users\Krystian\AppData\Local\Temp\raptrpatch.exe C:\Users\Krystian\AppData\Local\Temp\raptr_stub.exe C:\Users\Krystian\AppData\Local\Temp\sonarinst.exe C:\Users\Krystian\AppData\Local\Temp\ubi2A5C.tmp.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-03 20:28 ==================== End Of Log ============================