Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-04-2015 01 Ran by Tomek (administrator) on TOMEK-KOMPUTER on 18-04-2015 19:37:50 Running from C:\Users\Tomek\Desktop Loaded Profiles: Tomek (Available profiles: Tomek & Mateusz) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe (AMD) C:\Windows\System32\atieclxx.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE () C:\Programy\MSI Afterburner\MSIAfterburner.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe () C:\Programy\RivaTuner Statistics Server\RTSS.exe () C:\Programy\RivaTuner Statistics Server\EncoderServer.exe () C:\Programy\RivaTuner Statistics Server\RTSSHooksLoader64.exe (ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7174728 2013-03-29] (Realtek Semiconductor) HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-11] (Intel Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-03-31] (Advanced Micro Devices, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-606281877-1479866930-3929170589-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{61200EEA-6E50-46B1-A5F0-62EE9D60F0A5}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\su92r3e8.default-1429010629807 FF Homepage: google.com FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] () FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] () FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin HKU\S-1-5-21-606281877-1479866930-3929170589-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tomek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-11-18] (Unity Technologies ApS) FF Extension: DiscountExt - C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\su92r3e8.default-1429010629807\Extensions\onfme__gfkwmkrrtbwj@yvslym_ybsbbzfco.net [2015-04-18] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) S3 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-04-18] (MICRO-STAR INTERNATIONAL CO., LTD.) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-05] (Electronic Arts) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-11-15] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-02-07] () S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-05-15] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2014-12-21] () R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2014-12-20] () R2 mi2c; C:\Windows\system32\drivers\mi2c.sys [20784 2014-09-03] (Nicomsoft Ltd.) R3 RTCore64; C:\Programy\MSI Afterburner\RTCore64.sys [13368 2013-03-11] () S3 xb1usb; C:\Windows\System32\DRIVERS\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-18 19:37 - 2015-04-18 19:38 - 00007906 _____ () C:\Users\Tomek\Desktop\FRST.txt 2015-04-18 19:37 - 2015-04-18 19:37 - 00000000 ____D () C:\FRST 2015-04-18 19:36 - 2015-04-18 19:36 - 02098176 _____ (Farbar) C:\Users\Tomek\Desktop\FRST64.exe 2015-04-18 17:13 - 2015-04-18 17:13 - 00000000 ____D () C:\Nexon 2015-04-18 17:10 - 2015-04-18 19:04 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\NexonLauncher 2015-04-18 17:10 - 2015-04-18 19:04 - 00000000 ____D () C:\Users\Mateusz\AppData\Local\NexonLauncher 2015-04-18 17:08 - 2015-04-18 19:05 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexon 2015-04-18 17:08 - 2015-04-18 17:08 - 00000748 _____ () C:\Users\Mateusz\Desktop\Nexon Launcher.lnk 2015-04-18 17:06 - 2015-04-18 17:06 - 10127392 _____ () C:\Users\Mateusz\Downloads\NexonLauncherSetup.exe 2015-04-17 19:03 - 2015-04-18 19:28 - 00000000 ____D () C:\Users\Tomek\Desktop\LT 2015-04-14 17:06 - 2015-04-18 11:53 - 00000080 _____ () C:\Users\Tomek\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦 2015-04-14 17:06 - 2015-04-14 17:06 - 00000000 ____D () C:\Users\Tomek\AppData\Local\Rockstar Games 2015-04-14 17:05 - 2015-04-17 15:29 - 00000000 ____D () C:\Program Files\Rockstar Games 2015-04-14 17:05 - 2015-04-17 15:29 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games 2015-04-14 17:05 - 2015-04-14 17:08 - 00000000 ____D () C:\Users\Tomek\Documents\Rockstar Games 2015-04-14 17:01 - 2015-04-14 17:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games 2015-04-14 13:59 - 2015-04-14 14:00 - 00000000 ____D () C:\Users\Tomek\Desktop\Programy 2015-04-14 13:59 - 2015-04-14 13:59 - 00000000 ____D () C:\ProgramData\ATI 2015-04-14 13:59 - 2015-04-14 13:59 - 00000000 _____ () C:\Windows\ativpsrm.bin 2015-04-14 13:57 - 2015-04-14 13:57 - 00053682 _____ () C:\Windows\SysWOW64\CCCInstall_201504141357427301.log 2015-04-14 13:57 - 2015-04-14 13:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-04-14 13:57 - 2015-04-14 13:57 - 00000000 ____D () C:\Program Files (x86)\AMD AVT 2015-04-14 13:56 - 2015-04-14 13:56 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2015-04-14 13:56 - 2015-04-14 13:56 - 00000000 ____D () C:\Program Files (x86)\AMD 2015-04-14 13:55 - 2015-04-14 13:55 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2015-04-14 13:54 - 2015-04-14 13:56 - 00000000 ____D () C:\Program Files\AMD 2015-04-12 14:09 - 2015-04-12 14:09 - 00000000 ____D () C:\Users\Tomek\Desktop\BMW 2009 2015-04-09 17:47 - 2015-04-09 17:47 - 00276608 _____ () C:\Windows\Minidump\040915-15834-01.dmp 2015-04-09 16:43 - 2015-04-09 16:43 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-TOMEK-KOMPUTER-Windows-7-Ultimate-(64-bit).dat 2015-04-09 16:26 - 2015-04-10 12:35 - 00000000 ____D () C:\Program Files (x86)\Lego Super Heroes 2015-04-07 11:13 - 2014-10-13 11:40 - 404345282 _____ () C:\Users\Mateusz\Desktop\The Walking Dead [5x01] No Sanctuary [Napisy PL].avi 2015-04-07 11:10 - 2015-01-31 17:01 - 363737088 _____ () C:\Users\Mateusz\Desktop\The Walking Dead S04E16 Lektor.avi 2015-04-06 13:36 - 2015-04-06 13:37 - 00276608 _____ () C:\Windows\Minidump\040615-192817-01.dmp 2015-04-05 16:59 - 2015-04-05 17:13 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\vlc 2015-04-05 09:32 - 2015-04-05 09:33 - 00000000 ____D () C:\Users\Tomek\Desktop\Renault 2009 2015-04-04 22:02 - 2015-04-04 22:02 - 00001024 _____ () C:\Users\Mateusz\Desktop\Moja muzyka.lnk 2015-04-04 15:39 - 2015-04-09 16:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-03-31 22:47 - 2015-03-31 22:47 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll 2015-03-31 22:47 - 2015-03-31 22:47 - 00118096 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll 2015-03-31 22:47 - 2015-03-31 22:47 - 00102128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll 2015-03-31 22:47 - 2015-03-31 22:47 - 00096448 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll 2015-03-31 22:47 - 2015-03-31 22:47 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll 2015-03-31 22:47 - 2015-03-31 22:47 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll 2015-03-31 22:47 - 2015-03-31 22:47 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll 2015-03-31 22:47 - 2015-03-31 22:47 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 11083488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 09406624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 08381280 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 08368872 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 07559840 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 07077264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 01358192 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 01134688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 00144328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 00126848 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 00118096 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll 2015-03-31 22:46 - 2015-03-31 22:46 - 00100032 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll 2015-03-31 22:43 - 2015-03-31 22:43 - 00294600 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys 2015-03-31 22:41 - 2015-03-31 22:41 - 19338752 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys 2015-03-31 22:33 - 2015-03-31 22:33 - 47902208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll 2015-03-31 22:33 - 2015-03-31 22:33 - 00235008 _____ () C:\Windows\system32\clinfo.exe 2015-03-31 22:33 - 2015-03-31 22:33 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll 2015-03-31 22:33 - 2015-03-31 22:33 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll 2015-03-31 22:33 - 2015-03-31 22:33 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll 2015-03-31 22:33 - 2015-03-31 22:33 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll 2015-03-31 22:32 - 2015-03-31 22:32 - 40990208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll 2015-03-31 22:32 - 2015-03-31 22:32 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2015-03-31 22:32 - 2015-03-31 22:32 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2015-03-31 22:26 - 2015-03-31 22:26 - 28354560 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll 2015-03-31 22:20 - 2015-03-31 22:20 - 23626752 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll 2015-03-31 22:20 - 2015-03-31 22:20 - 05837824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll 2015-03-31 22:20 - 2015-03-31 22:20 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll 2015-03-31 22:20 - 2015-03-31 22:20 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll 2015-03-31 22:20 - 2015-03-31 22:20 - 00049664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll 2015-03-31 22:20 - 2015-03-31 22:20 - 00038912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll 2015-03-31 22:18 - 2015-03-31 22:18 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap 2015-03-31 22:17 - 2015-03-31 22:17 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll 2015-03-31 22:17 - 2015-03-31 22:17 - 04590592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll 2015-03-31 22:17 - 2015-03-31 22:17 - 00639392 _____ () C:\Windows\SysWOW64\atiapfxx.blb 2015-03-31 22:17 - 2015-03-31 22:17 - 00639392 _____ () C:\Windows\system32\atiapfxx.blb 2015-03-31 22:17 - 2015-03-31 22:17 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe 2015-03-31 22:17 - 2015-03-31 22:17 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll 2015-03-31 22:17 - 2015-03-31 22:17 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll 2015-03-31 22:17 - 2015-03-31 22:17 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll 2015-03-31 22:17 - 2015-03-31 22:17 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll 2015-03-31 22:16 - 2015-03-31 22:16 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll 2015-03-31 22:14 - 2015-03-31 22:14 - 00091648 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll 2015-03-31 22:14 - 2015-03-31 22:14 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll 2015-03-31 22:13 - 2015-03-31 22:13 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap 2015-03-31 22:13 - 2015-03-31 22:13 - 00776192 _____ (AMD) C:\Windows\system32\atieclxx.exe 2015-03-31 22:13 - 2015-03-31 22:13 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll 2015-03-31 22:13 - 2015-03-31 22:13 - 00246272 _____ (AMD) C:\Windows\system32\atiesrxx.exe 2015-03-31 22:13 - 2015-03-31 22:13 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll 2015-03-31 22:13 - 2015-03-31 22:13 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll 2015-03-31 22:10 - 2015-03-31 22:10 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll 2015-03-31 22:10 - 2015-03-31 22:10 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll 2015-03-31 22:09 - 2015-03-31 22:09 - 01218560 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll 2015-03-31 22:09 - 2015-03-31 22:09 - 00905728 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll 2015-03-31 22:09 - 2015-03-31 22:09 - 00591872 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys 2015-03-31 22:09 - 2015-03-31 22:09 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll 2015-03-31 22:09 - 2015-03-31 22:09 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll 2015-03-31 22:09 - 2015-03-31 22:09 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll 2015-03-31 22:09 - 2015-03-31 22:09 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll 2015-03-31 22:09 - 2015-03-31 22:09 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll 2015-03-31 22:09 - 2015-03-31 22:09 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll 2015-03-31 16:37 - 2015-03-31 16:37 - 00051200 _____ () C:\Windows\system32\kdbsdk64.dll 2015-03-31 16:35 - 2015-03-31 16:35 - 00038912 _____ () C:\Windows\SysWOW64\kdbsdk32.dll 2015-03-20 19:39 - 2015-03-20 19:39 - 00000000 ____D () C:\Users\Tomek\AppData\Roaming\SYSTEMAX Software Development 2015-03-20 17:09 - 2015-03-20 19:40 - 00000000 ____D () C:\PaintToolSAI 2015-03-20 17:09 - 2015-03-20 17:09 - 00000587 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PaintTool SAI Ver.1.lnk 2015-03-20 17:09 - 2015-03-20 17:09 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\SYSTEMAX Software Development 2015-03-20 17:09 - 2015-03-20 17:09 - 00000000 ____D () C:\ProgramData\SYSTEMAX Software Development ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-18 19:31 - 2011-04-12 15:21 - 00739694 _____ () C:\Windows\system32\perfh015.dat 2015-04-18 19:31 - 2011-04-12 15:21 - 00155268 _____ () C:\Windows\system32\perfc015.dat 2015-04-18 19:31 - 2009-07-14 07:13 - 01668226 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-18 19:28 - 2014-08-14 17:46 - 01735352 _____ () C:\Windows\WindowsUpdate.log 2015-04-18 19:25 - 2014-05-16 18:06 - 00123045 _____ () C:\Windows\setupact.log 2015-04-18 19:25 - 2010-11-21 05:47 - 00064906 _____ () C:\Windows\PFRO.log 2015-04-18 19:25 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-18 18:14 - 2014-11-11 23:14 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-04-18 11:53 - 2014-11-05 18:04 - 00003012 _____ () C:\Windows\System32\Tasks\MSIAfterburner 2015-04-17 22:53 - 2014-08-14 18:35 - 00000000 ____D () C:\Users\Mateusz 2015-04-17 15:30 - 2014-09-07 13:43 - 00000000 ____D () C:\Users\Tomek\AppData\Roaming\vlc 2015-04-16 20:44 - 2014-08-15 08:37 - 00000000 ____D () C:\Users\Tomek\AppData\Roaming\Skype 2015-04-15 16:15 - 2014-08-14 19:01 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-04-15 16:15 - 2014-08-14 19:01 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-04-15 16:15 - 2014-08-14 19:01 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-04-15 13:40 - 2009-07-14 06:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-15 13:40 - 2009-07-14 06:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-14 21:54 - 2014-08-15 19:22 - 00000000 ____D () C:\Users\Tomek\Desktop\Formula Corsa Modding 2015-04-14 18:32 - 2009-07-14 07:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-04-14 17:07 - 2014-08-16 13:48 - 00000000 ___RD () C:\Users\Tomek\Desktop\GRY 2015-04-14 17:05 - 2014-05-16 17:16 - 00485024 _____ () C:\Windows\DirectX.log 2015-04-14 15:33 - 2014-08-14 17:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-04-14 13:59 - 2014-08-14 18:04 - 00000000 ____D () C:\Users\Tomek\AppData\Roaming\ATI 2015-04-14 13:59 - 2014-08-14 18:04 - 00000000 ____D () C:\Users\Tomek\AppData\Local\ATI 2015-04-14 13:57 - 2014-08-14 17:58 - 00000000 ____D () C:\ProgramData\AMD 2015-04-12 14:42 - 2014-11-06 23:45 - 00000132 _____ () C:\Users\Tomek\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG 2015-04-10 21:54 - 2015-01-21 11:43 - 00000000 ____D () C:\Users\Tomek\Desktop\Logo 2015-04-09 17:47 - 2014-10-19 10:35 - 00000000 ____D () C:\Windows\Minidump 2015-04-05 12:27 - 2014-08-14 18:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-04-03 15:16 - 2015-01-22 14:21 - 00000000 ____D () C:\Users\Tomek\Desktop\Suits & Gloves F1 2015 Pack 2015-04-01 17:44 - 2015-02-18 16:38 - 00000000 ____D () C:\Windows\SysWOW64\.launcher_log 2015-04-01 13:27 - 2014-08-25 12:48 - 00000000 ____D () C:\Users\Mateusz\AppData\Roaming\Audacity 2015-03-31 22:10 - 2014-12-09 21:15 - 00846848 _____ (AMD) C:\Windows\system32\coinst_14.50.dll 2015-03-30 18:15 - 2011-04-12 15:32 - 00000000 ___RD () C:\Users\Public\Recorded TV 2015-03-25 21:01 - 2014-08-14 18:35 - 00058472 _____ () C:\Users\Mateusz\AppData\Local\GDIPFONTCACHEV1.DAT 2015-03-25 19:25 - 2014-08-14 17:53 - 00058472 _____ () C:\Users\Tomek\AppData\Local\GDIPFONTCACHEV1.DAT 2015-03-25 19:24 - 2009-07-14 06:45 - 04813648 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-03-24 22:12 - 2015-02-04 14:12 - 00000000 ____D () C:\Users\Mateusz\Desktop\Tłumaczenia 2015-03-24 18:59 - 2014-08-14 17:57 - 00000000 ____D () C:\ProgramData\Package Cache 2015-03-20 22:32 - 2014-10-04 15:05 - 00000000 ____D () C:\Users\Mateusz\Desktop\Me musZuwaka_First_Demo ==================== Files in the root of some directories ======= 2014-11-06 23:44 - 2014-11-06 23:44 - 0000132 _____ () C:\Users\Tomek\AppData\Roaming\Preferencje Adobe CS5 dla formatu BMP 2014-11-06 23:45 - 2015-04-12 14:42 - 0000132 _____ () C:\Users\Tomek\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG Some content of TEMP: ==================== C:\Users\Mateusz\AppData\Local\Temp\Quarantine.exe C:\Users\Mateusz\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-07 14:48 ==================== End Of Log ============================