Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015 Ran by Marcin (administrator) on MARCIN-KOMPUTER on 06-04-2015 12:14:46 Running from C:\Users\Marcin\Downloads Loaded Profiles: Marcin (Available profiles: Marcin) Platform: Windows JG Seven Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser not detected!) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1 HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig] <===== ATTENTION HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5529880 2015-03-13] (Piriform Ltd) HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Policies\Explorer: [DisallowCpl] 1 HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1 HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Policies\Explorer: [NoInternetOpenWith] 1 HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Policies\Explorer: [NoRecentDocsNetHood] 1 HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Policies\Explorer: [NoResolveSearch] 1 HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Policies\Explorer: [NoSMMyPictures] 1 HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\Policies\Explorer: [NoStartMenuMyMusic] 1 HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\...\MountPoints2: {8c314d75-cfab-11e4-9649-4ea832002030} - D:\AutoRun.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl HKU\S-1-5-21-3247744894-4146374122-4188632822-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl SearchScopes: HKLM -> {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\.DEFAULT -> {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3247744894-4146374122-4188632822-1000 -> {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} Tcpip\Parameters: [DhcpNameServer] 192.168.42.129 FireFox: ======== FF ProfilePath: C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\nkx0r2ru.default FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-21] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-21] (Google Inc.) FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] Chrome: ======= CHR Profile: C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-21] CHR Extension: (Google Drive) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-21] CHR Extension: (YouTube) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-21] CHR Extension: (Google Search) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-21] CHR Extension: (Google Wallet) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-21] CHR Extension: (Gmail) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-21] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S4 Huawei E3272; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2013-12-03] () R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation) S4 Themes; C:\Windows\system32\themeservice.dll [37888 2009-08-01] (Microsoft Corporation) [File not signed] S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [73360 2014-07-23] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-04-06] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation) S0 SscRdBus; C:\Windows\System32\DRIVERS\SscRdBus.sys [87856 2011-01-26] (SuperSpeed LLC) U4 AdobeFlashPlayerUpdateSvc; No ImagePath U4 AppMgmt; No ImagePath U4 BDESVC; No ImagePath U4 CertPropSvc; No ImagePath U4 CscService; No ImagePath U4 DPS; No ImagePath U4 ehRecvr; No ImagePath U4 ehSched; No ImagePath U4 Fax; No ImagePath U4 idsvc; No ImagePath U4 JavaQuickStarterService; No ImagePath U4 Mcx2Svc; No ImagePath U4 MozillaMaintenance; No ImagePath U4 nvUpdatusService; No ImagePath U3 PeerDistSvc; No ImagePath U4 SCardSvr; No ImagePath U4 SCPolicySvc; No ImagePath U4 SDRSVC; No ImagePath U4 SensrSvc; No ImagePath U4 SessionEnv; No ImagePath U4 swprv; No ImagePath U4 TabletInputService; No ImagePath U4 TermService; No ImagePath U4 UmRdpService; No ImagePath U4 VSS; No ImagePath U4 WatAdminSvc; No ImagePath U4 WbioSrvc; No ImagePath U4 WdiServiceHost; No ImagePath U4 WdiSystemHost; No ImagePath U4 wercplsupport; No ImagePath U4 WPCSvc; No ImagePath U4 wscsvc; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-06 12:14 - 2015-04-06 12:15 - 00008984 _____ () C:\Users\Marcin\Downloads\FRST.txt 2015-04-06 12:14 - 2015-04-06 12:14 - 00000000 ____D () C:\FRST 2015-04-06 12:13 - 2015-04-06 12:13 - 01135104 _____ (Farbar) C:\Users\Marcin\Downloads\FRST.exe 2015-04-06 12:04 - 2015-04-06 12:04 - 00001499 _____ () C:\Users\Marcin\Desktop\mbam.txt 2015-04-06 11:53 - 2015-04-06 11:54 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-04-06 11:52 - 2015-04-06 11:52 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-04-06 11:52 - 2015-04-06 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-04-06 11:52 - 2015-04-06 11:52 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-04-06 11:52 - 2015-04-06 11:52 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware 2015-04-06 11:52 - 2015-03-17 06:15 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-04-06 11:52 - 2015-03-17 06:15 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-04-06 11:52 - 2015-03-17 06:15 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-04-06 11:50 - 2015-04-06 11:52 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Marcin\Downloads\mbam-setup-2.1.4.1018.exe 2015-04-06 11:39 - 2015-04-06 11:39 - 00000000 ____D () C:\Users\Marcin\Doctor Web 2015-04-06 11:29 - 2015-04-06 11:32 - 165010256 _____ () C:\Users\Marcin\Downloads\7kzz2ub9.exe 2015-04-06 11:23 - 2015-04-06 11:23 - 00000056 _____ () C:\Windows\setupact.log 2015-04-06 11:23 - 2015-04-06 11:23 - 00000000 _____ () C:\Windows\setuperr.log 2015-04-04 16:58 - 2015-04-04 16:59 - 00000000 ____D () C:\AdwCleaner 2015-04-01 15:50 - 2011-01-03 09:38 - 00136680 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadmdm.sys 2015-04-01 15:50 - 2011-01-03 09:38 - 00121192 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadbus.sys 2015-04-01 15:50 - 2011-01-03 09:38 - 00114152 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadserd.sys 2015-04-01 15:50 - 2011-01-03 09:38 - 00012776 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadmdfl.sys 2015-04-01 15:50 - 2011-01-03 09:38 - 00010472 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadcmnt.sys 2015-04-01 15:50 - 2011-01-03 09:38 - 00010472 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadcm.sys 2015-04-01 15:50 - 2011-01-03 09:38 - 00010344 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadwhnt.sys 2015-04-01 15:50 - 2011-01-03 09:38 - 00010344 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadwh.sys 2015-04-01 15:35 - 2015-04-01 15:35 - 00000000 ____D () C:\Program Files\SAMSUNG 2015-04-01 15:34 - 2015-04-01 15:34 - 00000000 ____D () C:\ProgramData\Samsung 2015-04-01 15:31 - 2015-04-01 15:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2015-03-31 18:43 - 2015-03-31 18:43 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\NuGet 2015-03-29 13:30 - 2015-03-29 14:12 - 00000219 _____ () C:\Users\Marcin\Desktop\Nowy Dokument TXT.txt 2015-03-27 13:47 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-03-27 13:47 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-03-27 13:47 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-03-27 12:56 - 2015-03-27 12:56 - 00000000 ____D () C:\Users\Marcin\AppData\Local\Macromedia 2015-03-27 12:54 - 2015-03-27 12:55 - 00000000 ____D () C:\Users\Marcin\AppData\Local\Mozilla 2015-03-27 10:15 - 2015-03-27 13:16 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\LolClient 2015-03-27 10:15 - 2015-03-27 10:15 - 00078136 _____ () C:\Users\Marcin\AppData\Local\GDIPFONTCACHEV1.DAT 2015-03-27 10:06 - 2015-03-27 10:06 - 00000969 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-03-27 10:06 - 2015-03-27 10:06 - 00000000 ____D () C:\Program Files\CCleaner 2015-03-27 09:35 - 2015-03-27 09:35 - 00000000 _____ () C:\Windows\system32\Drivers\etc\hosts.bol 2015-03-25 21:43 - 2015-03-25 21:45 - 00001200 _____ () C:\Users\Marcin\Desktop\plan www.txt 2015-03-25 16:01 - 2015-03-25 16:01 - 00000000 ____D () C:\Windows\system32\Macromed 2015-03-25 15:56 - 2015-03-27 12:24 - 00000000 ____D () C:\ProgramData\Adobe 2015-03-25 15:56 - 2015-03-25 15:56 - 00000000 ____D () C:\ProgramData\Bitstream 2015-03-24 22:40 - 2015-03-24 22:40 - 00000000 ____D () C:\Users\Marcin\Documents\Moje palety 2015-03-24 19:13 - 2015-03-24 19:13 - 00001582 _____ () C:\Users\Marcin\Desktop\ocenianie człowieka u homo sapiens.txt 2015-03-24 19:01 - 2015-03-24 19:01 - 00000000 ____D () C:\Users\Marcin\Documents\Corel 2015-03-24 19:00 - 2015-03-24 19:01 - 00000000 ____D () C:\ProgramData\Protexis 2015-03-24 18:55 - 2015-03-24 18:55 - 00000000 ____D () C:\Program Files\Common Files\Protexis 2015-03-24 18:52 - 2015-03-24 19:00 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X7 2015-03-24 18:22 - 2015-03-27 12:24 - 00000000 ____D () C:\Users\Marcin\AppData\Local\Adobe 2015-03-22 22:21 - 2015-03-22 22:21 - 00000000 ____D () C:\ProgramData\Nimoru 2015-03-22 22:10 - 2015-03-23 15:05 - 00000023 _____ () C:\Users\Marcin\Desktop\lalla.txt 2015-03-22 12:27 - 2015-03-27 11:00 - 00003400 _____ () C:\Users\Marcin\Desktop\zadania roz 2.txt 2015-03-21 17:59 - 2015-03-21 17:59 - 00001269 _____ () C:\Users\Marcin\Desktop\Projects.lnk 2015-03-21 16:20 - 2015-03-21 16:20 - 00001506 _____ () C:\Users\Marcin\Desktop\VS Express 2013 for Desktop.lnk 2015-03-21 16:20 - 2015-03-21 16:20 - 00000849 _____ () C:\Users\Marcin\Desktop\Pobrane.lnk 2015-03-21 16:11 - 2015-03-27 12:54 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Mozilla 2015-03-21 16:11 - 2015-03-21 16:11 - 00002048 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2015-03-21 16:11 - 2015-03-21 16:11 - 00002036 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2015-03-21 16:11 - 2015-03-21 16:11 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Thunderbird 2015-03-21 16:11 - 2015-03-21 16:11 - 00000000 ____D () C:\Users\Marcin\AppData\Local\Thunderbird 2015-03-21 16:11 - 2015-03-21 16:11 - 00000000 ____D () C:\ProgramData\Mozilla 2015-03-21 16:10 - 2015-03-21 16:10 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird 2015-03-21 16:03 - 2015-03-21 16:03 - 00001100 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk 2015-03-21 16:03 - 2015-03-21 16:03 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 2015-03-21 16:03 - 2015-03-21 16:03 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\OpenOffice 2015-03-21 16:02 - 2015-03-21 16:03 - 00000000 ____D () C:\Program Files\OpenOffice 4 2015-03-21 16:00 - 2015-03-21 16:01 - 00000000 ____D () C:\ProgramData\Mailbird 2015-03-21 15:30 - 2015-03-27 12:24 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Adobe 2015-03-21 15:30 - 2015-03-21 15:30 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Macromedia 2015-03-21 11:54 - 2015-03-21 11:54 - 00000000 ____D () C:\ProgramData\Riot Games 2015-03-21 11:52 - 2015-03-21 11:52 - 00000000 ____D () C:\Riot Games 2015-03-21 11:52 - 2015-03-21 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2015-03-21 11:52 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-03-21 11:52 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-03-21 11:52 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-03-21 11:51 - 2015-03-21 11:52 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Riot Games 2015-03-21 11:27 - 2015-03-21 11:46 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\SumatraPDF 2015-03-21 11:27 - 2015-03-21 11:27 - 00001879 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SumatraPDF.lnk 2015-03-21 11:27 - 2015-03-21 11:27 - 00000000 ____D () C:\Program Files\SumatraPDF 2015-03-21 11:23 - 2015-04-04 16:48 - 00000000 ____D () C:\Users\Marcin\Documents\Visual Studio 2013 2015-03-21 11:20 - 2015-03-21 11:20 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 11.0 2015-03-21 11:14 - 2015-03-21 11:14 - 00000000 ____D () C:\ProgramData\NuGet 2015-03-21 11:14 - 2015-03-21 11:14 - 00000000 ____D () C:\Program Files\NuGet 2015-03-21 11:11 - 2015-03-21 11:11 - 00000000 ____D () C:\Program Files\Common Files\Merge Modules 2015-03-21 11:07 - 2015-03-21 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits 2015-03-21 11:07 - 2015-03-21 11:07 - 00000000 ____D () C:\Program Files\Windows Kits 2015-03-21 11:05 - 2015-03-21 11:16 - 00000000 ____D () C:\Program Files\Microsoft SDKs 2015-03-21 11:05 - 2015-03-21 11:05 - 00000000 ____D () C:\Program Files\Microsoft Help Viewer 2015-03-21 11:04 - 2015-03-21 11:21 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2015-03-21 11:04 - 2015-03-21 11:04 - 00000000 ____D () C:\Windows\system32\1033 2015-03-21 11:03 - 2015-03-21 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2013 2015-03-21 11:03 - 2015-03-21 11:03 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2015-03-21 11:02 - 2015-03-21 11:21 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 12.0 2015-03-21 10:56 - 2015-03-21 11:12 - 00000000 ____D () C:\Program Files\Microsoft.NET 2015-03-21 10:54 - 2015-03-27 12:21 - 00000000 ____D () C:\ProgramData\Package Cache 2015-03-21 10:45 - 2015-03-21 10:45 - 00000000 ____D () C:\Windows\rescache 2015-03-21 10:45 - 2015-03-21 10:45 - 00000000 ____D () C:\Windows\pss 2015-03-21 10:45 - 2010-07-07 23:09 - 03948600 _____ (Microsoft Corporation) C:\Windows\system32\ntkrlICE.exe 2015-03-21 10:44 - 2015-03-21 10:44 - 00000000 _____ () C:\Windows\ativpsrm.bin 2015-03-21 10:42 - 2015-03-21 10:42 - 00000000 ____D () C:\Program Files\ATI 2015-03-21 10:41 - 2015-03-21 10:42 - 00000000 ____D () C:\Program Files\ATI Technologies 2015-03-21 10:37 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2015-03-21 10:37 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-03-21 10:37 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2015-03-21 10:37 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2015-03-21 10:37 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2015-03-21 10:37 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-03-21 10:37 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2015-03-21 10:37 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2015-03-21 10:37 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-03-21 10:37 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-03-21 10:37 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-03-21 10:37 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-03-21 10:37 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-03-21 10:37 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-03-21 10:37 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-03-21 10:37 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-03-21 10:37 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-03-21 10:37 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-03-21 10:37 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2015-03-21 10:37 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-03-21 10:37 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-03-21 10:37 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-03-21 10:37 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-03-21 10:37 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-03-21 10:37 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-03-21 10:37 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-03-21 10:37 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-03-21 10:37 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-03-21 10:37 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-03-21 10:37 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-03-21 10:37 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-03-21 10:37 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-03-21 10:37 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-03-21 10:37 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-03-21 10:37 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-03-21 10:37 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-03-21 10:37 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-03-21 10:37 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-03-21 10:37 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-03-21 10:37 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-03-21 10:37 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-03-21 10:37 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-03-21 10:37 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-03-21 10:37 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-03-21 10:37 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-03-21 10:37 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-03-21 10:37 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-03-21 10:37 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-03-21 10:37 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-03-21 10:37 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-03-21 10:37 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-03-21 10:37 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-03-21 10:37 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-03-21 10:37 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-03-21 10:37 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-03-21 10:37 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-03-21 10:37 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-03-21 10:37 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-03-21 10:37 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-03-21 10:37 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-03-21 10:37 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-03-21 10:37 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-03-21 10:37 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-03-21 10:37 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-03-21 10:37 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-03-21 10:37 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-03-21 10:37 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-03-21 10:37 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2015-03-21 10:37 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-03-21 10:37 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-03-21 10:37 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-03-21 10:37 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-03-21 10:37 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-03-21 10:37 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-03-21 10:37 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-03-21 10:37 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-03-21 10:37 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-03-21 10:37 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-03-21 10:37 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-03-21 10:37 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-03-21 10:37 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-03-21 10:37 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-03-21 10:37 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-03-21 10:37 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-03-21 10:37 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-03-21 10:36 - 2015-03-27 13:15 - 00000000 ___HD () C:\Windows\msdownld.tmp 2015-03-21 10:36 - 2015-03-27 13:15 - 00000000 ____D () C:\Windows\system32\directx 2015-03-21 10:35 - 2015-04-06 11:40 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-03-21 10:35 - 2015-04-06 11:23 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-03-21 10:35 - 2015-04-03 15:43 - 00002135 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-03-21 10:35 - 2015-03-21 10:35 - 00000000 ____D () C:\Users\Marcin\AppData\Local\Google 2015-03-21 10:35 - 2015-03-21 10:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-03-21 10:35 - 2015-03-21 10:35 - 00000000 ____D () C:\Program Files\Google 2015-03-21 10:25 - 2015-03-21 10:25 - 00000000 ____D () C:\ProgramData\MobileBrServ 2015-03-21 10:25 - 2015-03-21 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Huawei E3272 2015-03-21 10:24 - 2015-03-21 10:24 - 00000000 ____D () C:\Program Files\7-Zip 2015-03-21 10:19 - 2015-04-06 11:40 - 00000000 ____D () C:\Users\Marcin 2015-03-21 10:19 - 2015-03-21 10:19 - 00002435 _____ () C:\Windows\system32\WinToolkit_RunOnce_Log.log 2015-03-21 10:19 - 2015-03-21 10:19 - 00000020 ___SH () C:\Users\Marcin\ntuser.ini 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Public\Documents\Moje wideo 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Public\Documents\Moje obrazy 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Public\Documents\Moja muzyka 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\Ustawienia lokalne 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\Szablony 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\Moje dokumenty 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\Menu Start 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\Documents\Moje wideo 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\Documents\Moje obrazy 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\Documents\Moja muzyka 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\Dane aplikacji 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\AppData\Local\Historia 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Marcin\AppData\Local\Dane aplikacji 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\Ustawienia lokalne 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\Szablony 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\Moje dokumenty 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\Menu Start 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\Documents\Moje wideo 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\Documents\Moje obrazy 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\Documents\Moja muzyka 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\Dane aplikacji 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Historia 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Dane aplikacji 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Moje wideo 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Moje obrazy 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default User\Documents\Moja muzyka 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Historia 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Dane aplikacji 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\ProgramData\Ulubione 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\ProgramData\Szablony 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\ProgramData\Pulpit 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programy 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\ProgramData\Menu Start 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\ProgramData\Dokumenty 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 _SHDL () C:\ProgramData\Dane aplikacji 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 ____D () C:\Windows\system32\Shellext 2015-03-21 10:19 - 2015-03-21 10:19 - 00000000 ____D () C:\Windows\system32\ru-RU 2015-03-21 10:19 - 2015-03-03 19:25 - 00000000 ___RD () C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-03-21 10:19 - 2009-07-14 02:16 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2015-03-21 10:19 - 2009-07-14 02:16 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\sl2.dll 2015-03-21 10:15 - 2015-03-21 10:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2015-03-21 10:11 - 2015-03-27 11:07 - 00000000 ____D () C:\Windows\Panther 2015-03-21 10:11 - 2015-03-21 10:11 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-06 11:28 - 2011-04-12 06:08 - 00739932 _____ () C:\Windows\system32\perfh015.dat 2015-04-06 11:28 - 2011-04-12 06:08 - 00155474 _____ () C:\Windows\system32\perfc015.dat 2015-04-06 11:28 - 2010-11-20 22:01 - 01669016 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-06 11:23 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-06 11:22 - 2009-07-14 05:34 - 00012912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-06 11:22 - 2009-07-14 05:34 - 00012912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-04 17:16 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-03-27 11:45 - 2009-07-14 05:33 - 00329888 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-03-21 13:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-03-21 11:05 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\MSBuild 2015-03-21 10:45 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2015-03-21 10:19 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default 2015-03-21 10:14 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp 2015-03-21 10:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Msdtc 2015-03-21 10:11 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe [2015-02-08 15:28] - [2011-07-27 01:24] - 3577344 ____A (Microsoft Corporation) 827F6444C183560C6758D2A4B742AB98 C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll [2015-02-08 18:46] - [2011-07-23 16:12] - 0827904 ____A (Microsoft Corporation) 349BB946D52BCE9C4CAE80DAFC040B25 C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed C:\Windows\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION!. testsigning: ==> testsigning is on. Check for possible unsigned rootkit driver <===== ATTENTION! LastRegBack: 2015-04-05 09:14 ==================== End Of Log ============================