Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-08-2015
Ran by Alex (administrator) on ALEX-KOMPUTER (21-08-2015 06:17:54)
Running from C:\Users\Alex\Desktop
Loaded Profiles: Alex (Available Profiles: Alex)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.28.1\GoogleCrashHandler.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files\Winamp\winampa.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Advanced Micro Devices Inc.) C:\Program Files\AMD\ATI.ACE\Core-Static\MOM.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Tencent) C:\Program Files\Common Files\Tencent\QQDownload\130\Tencentdl.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Raptr, Inc) C:\Program Files\Raptr\raptr.exe
(Advanced Micro Devices Inc.) C:\Program Files\AMD\ATI.ACE\Core-Static\CCC.exe
(Raptr, Inc) C:\Program Files\Raptr\raptr_im.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
(Tencent) C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QQPCRTP.exe
(Tencent) C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QQPCTray.exe
(Tencent) C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\TAOFrame.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(Valve Corporation) C:\Program Files\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files\Steam\bin\steamwebhelper.exe
(Shadiku Izayoi <izayoi@shadiku.com>) C:\Users\Alex\Desktop\idler\idler.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
() C:\Users\Alex\Desktop\idler\idler-game.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11680400 2012-10-26] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5088456 2014-10-01] (ESET)
HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [37888 2009-07-01] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM\...\Run: [Raptr] => C:\Program Files\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc)
HKLM\...\Run: [StartCCC] => C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe [748744 2015-06-22] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [ QQPCTray] => C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QQPCTray.exe [355296 2015-08-04] (Tencent)
HKLM\...\Run: [RavTRAY] => "C:\Program Files\Rising\RAV\RSTRAY.EXE" -system
HKU\S-1-5-21-3050552178-2778190213-2786081387-1000\...\Run: [GoogleChromeAutoLaunch_AD2529C7DB5B63D28C23362385276129] => C:\Program Files\Google\Chrome\Application\chrome.exe [813896 2015-08-08] (Google Inc.)
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QMGCShellExt.dll [2015-08-04] (Tencent)
BootExecute: autocheck autochk *  bsmain

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.hao123.com/?tn=98388105_hao_pg
HKU\S-1-5-21-3050552178-2778190213-2786081387-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.hao123.com/?tn=98388105_hao_pg
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-12-29] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-29] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9F9BC60C-01ED-4CBF-9866-8FC676D45F96}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A6E83768-7E24-4211-AD4C-510A96569F01}: [DhcpNameServer] 8.8.8.8 8.8.4.4

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1215155.dll [2014-12-02] (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-12-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-12-29] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]

Chrome: 
=======
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-20]
CHR Extension: (Steam inventory helper) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-05-29]
CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-20]
CHR Extension: (Lounge Assistant) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\enjonnlehciedbcidabdglnnihcncbml [2015-05-29]
CHR Extension: (LoungeDestroyer) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-05-29]
CHR Extension: (AdBlock) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-29]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-29]
CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-20]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1349576 2014-10-01] (ESET)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 QQPCRTP; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QQPCRTP.exe [297608 2015-08-04] (Tencent)
R3 TAOFrame; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\TAOFrame.exe [293728 2015-08-04] (Tencent)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 RsMgrSvc; "C:\Program Files\Rising\RSD\RsMgrSvc.exe" [X]
S2 RsRavMon; "C:\Program Files\Rising\RAV\ravmond.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R5 ACPI; C:\Windows\System32\drivers\ACPI.sys [274304 2010-11-20] (Microsoft Corporation)
R5 amdxata; C:\Windows\System32\drivers\amdxata.sys [22400 2011-03-11] (Advanced Micro Devices)
R5 atapi; C:\Windows\System32\drivers\atapi.sys [21584 2009-07-14] (Microsoft Corporation)
R5 CLFS; C:\Windows\System32\CLFS.sys [249784 2015-03-04] (Microsoft Corporation)
R5 CNG; C:\Windows\System32\Drivers\cng.sys [370488 2015-01-31] (Microsoft Corporation)
R5 Disk; C:\Windows\System32\drivers\disk.sys [57424 2009-07-14] (Microsoft Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [191928 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [135296 2014-10-10] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [176448 2014-10-10] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37928 2014-10-10] (ESET)
R5 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [51288 2014-10-10] (ESET)
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [50728 2014-12-25] (Eugene V. Muzychenko)
R5 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [58448 2009-07-14] (Microsoft Corporation)
R5 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [198208 2009-07-14] (Microsoft Corporation)
U5 Fs_Rec; C:\Windows\system32\Drivers\Fs_Rec.sys [19824 2012-03-01] (Microsoft Corporation)
R5 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [196328 2013-01-24] (Microsoft Corporation)
R2 giveio; C:\Windows\system32\giveio.sys [5248 1996-04-03] () [File not signed]
S3 GPCIDrv; C:\Program Files\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv.sys [14504 2010-02-04] ()
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R5 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [14208 2010-11-20] (Microsoft Corporation)
R1 HyperVM; C:\Windows\system32\drivers\hvm.sys [32568 2015-08-04] (Beijing Rising Information Technology Co., Ltd.)
R5 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [67520 2015-07-15] (Microsoft Corporation)
R5 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [137664 2015-07-15] (Microsoft Corporation)
R5 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [78784 2015-07-15] (Microsoft Corporation)
R5 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [13888 2009-07-14] (Microsoft Corporation)
R5 Mup; C:\Windows\System32\Drivers\mup.sys [49728 2009-07-14] (Microsoft Corporation)
R5 NDIS; C:\Windows\System32\drivers\ndis.sys [712048 2012-08-22] (Microsoft Corporation)
R5 partmgr; C:\Windows\System32\drivers\partmgr.sys [56176 2012-03-17] (Microsoft Corporation)
R5 pci; C:\Windows\System32\drivers\pci.sys [153984 2010-11-20] (Microsoft Corporation)
R5 pciide; C:\Windows\System32\drivers\pciide.sys [12368 2009-07-14] (Microsoft Corporation)
R5 pcw; C:\Windows\System32\drivers\pcw.sys [43088 2009-07-14] (Microsoft Corporation)
R1 QMIEProtect; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QMIEProtect.sys [49976 2015-08-18] ()
R1 QMUdisk; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QMUdisk.sys [59872 2015-04-17] (Tencent)
R2 QQSysMon; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\QQSysMon.sys [108344 2015-08-04] (电脑管家)
R5 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [173440 2010-11-20] (Microsoft Corporation)
R2 RtNdPt60; C:\Windows\System32\DRIVERS\RtNdPt60.sys [27648 2011-06-15] (Realtek                                            )
S3 RTTEAMPT; C:\Windows\System32\DRIVERS\RtTeam60.sys [50280 2011-06-15] (Realtek Corporation)
S3 RTVLANPT; C:\Windows\System32\DRIVERS\RtVlan620.sys [27752 2011-09-16] (Realtek Corporation)
R2 speedfan; C:\Windows\system32\speedfan.sys [24184 2012-12-29] (Almico Software)
R5 spldr; C:\Windows\system32\Drivers\spldr.sys [17472 2009-07-14] (Microsoft Corporation)
R2 TAOAccelerator; C:\Windows\system32\Drivers\TAOAccelerator.sys [77016 2015-08-04] (Tencent)
R1 TAOKernelDriver; C:\Windows\System32\Drivers\TAOKernel.sys [138552 2015-08-04] (Tencent Technology(Shenzhen) Company Limited)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
R5 Tcpip; C:\Windows\System32\drivers\tcpip.sys [1294272 2014-04-05] (Microsoft Corporation)
S3 TEAM; C:\Windows\System32\DRIVERS\RtTeam60.sys [50280 2011-06-15] (Realtek Corporation)
R3 TFsFlt; C:\Windows\System32\Drivers\TFsFlt.sys [149944 2015-08-04] (电脑管家)
R3 TS888; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\TS888.sys [30392 2015-08-20] (Tencent)
R1 TSCPM; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\tscpm.sys [43448 2015-08-04] (电脑管家)
R1 TSDefenseBt; C:\Windows\System32\DRIVERS\TSDefenseBt.sys [14008 2015-08-04] (Tencent)
R5 TsFltMgr; C:\Windows\System32\drivers\TsFltMgr.sys [128120 2015-08-04] (电脑管家)
R1 TSKSP; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\TSKsp.sys [204312 2015-08-04] (电脑管家)
R1 TSSysKit; C:\Program Files\Tencent\QQPCMgr\10.7.16066.216\TSSysKit.sys [101560 2015-08-04] (电脑管家)
R5 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [32832 2009-07-14] (Microsoft Corporation)
R5 volmgr; C:\Windows\System32\drivers\volmgr.sys [53120 2010-11-20] (Microsoft Corporation)
R5 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [297040 2009-07-14] (Microsoft Corporation)
R5 volsnap; C:\Windows\System32\drivers\volsnap.sys [245632 2010-11-20] (Microsoft Corporation)
R5 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [527064 2013-06-26] (Microsoft Corporation)
S5 sysmon; system32\DRIVERS\sysmon.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-21 06:17 - 2015-08-21 06:17 - 00016061 _____ C:\Users\Alex\Desktop\FRST.txt
2015-08-21 06:17 - 2015-08-21 06:17 - 00000000 ____D C:\Users\Alex\Desktop\FRST-OlderVersion
2015-08-19 13:58 - 2015-08-11 02:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-19 13:58 - 2015-08-11 02:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-18 23:47 - 2015-08-18 23:47 - 00217881 _____ C:\Users\Alex\Desktop\ezfrags_csgo_multi_v6.3_public.zip
2015-08-17 16:03 - 2015-08-17 16:03 - 00000000 ____D C:\Users\Alex\AppData\Roaming\FreeHideIP
2015-08-17 16:03 - 2015-08-17 16:03 - 00000000 ____D C:\ProgramData\FreeHideIP
2015-08-17 15:59 - 2015-08-17 15:59 - 09741888 _____ (CyberGhost S.R.L. ) C:\Users\Alex\Downloads\CG_5.0.15.14.exe
2015-08-16 13:39 - 2015-08-16 13:39 - 00291911 _____ C:\Users\Alex\Desktop\MultiHack 1.6.zip
2015-08-15 14:20 - 2015-08-15 14:20 - 00354320 _____ C:\Users\Alex\Desktop\ezfrags_csgo_multi_v6.2_public.zip
2015-08-14 17:52 - 2015-08-14 17:53 - 00361008 _____ C:\Users\Alex\Desktop\gos.rar
2015-08-13 01:06 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 16:38 - 2015-07-28 22:04 - 00015808 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-12 16:38 - 2015-07-28 22:00 - 00952832 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-12 16:38 - 2015-07-28 22:00 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-12 16:38 - 2015-07-28 22:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-12 16:38 - 2015-07-28 22:00 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-12 16:38 - 2015-07-28 22:00 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-12 16:38 - 2015-07-28 22:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-12 16:38 - 2015-07-28 21:54 - 00934400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-12 16:38 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-12 16:38 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-12 16:38 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 02061312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-12 16:37 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-12 16:37 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-12 16:37 - 2015-07-20 19:56 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-12 16:37 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-08-12 16:37 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-12 16:37 - 2015-07-15 19:59 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-12 16:37 - 2015-07-15 19:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-12 16:37 - 2015-07-15 19:59 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-12 16:37 - 2015-07-15 19:56 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-12 16:37 - 2015-07-15 19:55 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-12 16:37 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-12 16:37 - 2015-07-15 19:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-12 16:37 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-12 16:37 - 2015-07-15 19:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-12 16:37 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-12 16:37 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-12 16:37 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-12 16:37 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-12 16:37 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-12 16:37 - 2015-07-15 18:36 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-12 16:37 - 2015-07-15 18:36 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-12 16:37 - 2015-07-15 18:36 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-12 16:37 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-12 16:37 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-12 16:37 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-12 16:37 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-12 16:36 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-12 16:36 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-12 16:36 - 2015-07-30 19:57 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-12 16:36 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-12 16:36 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-12 16:36 - 2015-07-30 19:57 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-12 16:36 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-12 16:36 - 2015-07-30 18:52 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-12 16:36 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-12 16:35 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-12 16:35 - 2015-07-16 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-12 16:35 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-12 16:35 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-12 16:35 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-12 16:35 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-12 16:35 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-12 16:35 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-12 16:35 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-12 16:35 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-12 16:35 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-12 16:35 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-12 16:35 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-12 16:35 - 2015-07-16 21:39 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-12 16:35 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-12 16:35 - 2015-07-16 21:32 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-12 16:35 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-12 16:35 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-12 16:35 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-12 16:35 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-12 16:35 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-12 16:35 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-12 16:35 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-12 16:35 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-12 16:35 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-12 16:35 - 2015-07-16 21:06 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-12 16:35 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-12 16:35 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-12 16:35 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-12 16:35 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-12 16:35 - 2015-07-15 04:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-12 16:35 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-12 16:35 - 2015-05-09 20:09 - 00715200 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-12 16:34 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-12 16:34 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-12 16:34 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-12 16:34 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-12 12:21 - 2015-08-20 14:48 - 03279798 _____ C:\QQPCMgrInstall_.Log
2015-08-10 14:08 - 2015-08-10 14:08 - 00000000 ____D C:\Users\Alex\Desktop\DivineWorld.eu
2015-08-10 14:04 - 2015-08-10 14:05 - 780468989 _____ C:\Users\Alex\Desktop\DivineWorld.eu.rar
2015-08-09 17:36 - 2015-08-09 17:36 - 00000000 ____D C:\Windows\system32\Tencent
2015-08-08 21:39 - 2015-08-08 21:40 - 00353565 _____ C:\Users\Alex\Desktop\ezfrags_csgo_multi_v6.1.zip
2015-08-06 20:56 - 2015-08-06 20:57 - 00205493 _____ C:\Users\Alex\Desktop\ezfrags_csgo_multi_v5.3.zip
2015-08-06 02:49 - 2015-08-19 18:39 - 00000123 _____ C:\Users\Alex\Desktop\nightbot.txt
2015-08-05 15:13 - 2015-08-05 15:13 - 00000000 ____D C:\Program Files\Rising
2015-08-05 14:55 - 2015-08-05 14:55 - 00000000 ____D C:\Users\Alex\Desktop\7FishBot
2015-08-05 14:51 - 2015-08-05 14:51 - 01018726 _____ C:\Users\Alex\Desktop\7FishBot.zip
2015-08-05 14:44 - 2015-08-05 22:23 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Tencent
2015-08-05 14:44 - 2015-08-04 10:06 - 00138552 _____ (Tencent Technology(Shenzhen) Company Limited) C:\Windows\system32\Drivers\TAOKernel.sys
2015-08-05 14:44 - 2015-08-04 10:06 - 00077016 _____ (Tencent) C:\Windows\system32\Drivers\TAOAccelerator.sys
2015-08-05 14:43 - 2015-08-20 14:48 - 00030392 _____ (Tencent) C:\Windows\system32\Drivers\TS888.sys
2015-08-05 14:43 - 2015-08-05 14:51 - 00000000 ____D C:\Program Files\Common Files\Tencent
2015-08-05 14:43 - 2015-08-05 14:43 - 00000000 ____D C:\Windows\system32\UploadCache
2015-08-05 14:42 - 2015-08-13 14:23 - 00000000 ____D C:\ProgramData\Tencent
2015-08-05 14:41 - 2015-08-05 14:41 - 00000000 ____D C:\ProgramData\TXQMPC
2015-08-05 14:09 - 2015-08-05 14:09 - 00000000 ____D C:\Users\Alex\AppData\Local\SysassistByHotWheel
2015-08-04 19:46 - 2015-08-04 19:46 - 00000000 ____D C:\Program Files\AutoHotkey
2015-08-04 19:45 - 2015-08-04 19:46 - 02869078 _____ C:\Users\Alex\Desktop\AutoHotkey112203_Install.exe
2015-08-04 19:44 - 2015-08-04 19:44 - 00003810 _____ C:\Users\Alex\Desktop\Fishing bot.ahk
2015-08-04 19:35 - 2015-08-01 13:37 - 04214272 _____ C:\Users\Alex\Desktop\Trove Trainer By darkm125 (32bit auto-inject).EXE
2015-08-04 19:33 - 2015-08-04 19:34 - 15183050 _____ C:\Users\Alex\Desktop\Trove Trainer.rar
2015-08-04 15:14 - 2015-08-04 15:09 - 00032568 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\system32\Drivers\hvm.sys
2015-08-04 11:14 - 2015-08-21 06:17 - 00000000 ____D C:\FRST
2015-08-04 11:12 - 2015-08-21 06:17 - 01677312 _____ (Farbar) C:\Users\Alex\Desktop\FRST.exe
2015-08-04 11:07 - 2015-08-04 11:07 - 00000000 ____D C:\ProgramData\LocalStorage
2015-08-04 11:04 - 2015-08-04 11:04 - 00000000 ____D C:\Users\Alex\.android
2015-08-04 11:03 - 2015-08-04 11:03 - 00000000 ____D C:\Users\Alex\AppData\Roaming\ppslog
2015-08-04 10:41 - 2015-08-04 10:41 - 00000000 ____D C:\ProgramData\KingSoft
2015-08-04 10:07 - 2015-08-04 10:06 - 00014008 _____ (Tencent) C:\Windows\system32\Drivers\TSDefenseBt.sys
2015-08-04 10:06 - 2015-08-04 10:06 - 00149944 _____ (电脑管家) C:\Windows\system32\Drivers\TFsFlt.sys
2015-08-04 10:06 - 2015-08-04 10:06 - 00128120 _____ (电脑管家) C:\Windows\system32\Drivers\TsFltMgr.sys
2015-08-04 10:06 - 2015-08-04 10:06 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2015-08-04 10:06 - 2015-08-04 10:06 - 00000000 ____D C:\Program Files\Tencent
2015-08-04 09:10 - 2015-08-04 09:11 - 00000000 ____D C:\Users\Alex\Desktop\idler
2015-08-04 09:10 - 2015-08-04 09:10 - 03735528 _____ C:\Users\Alex\Desktop\cshacked.pl Nabijanie godzin na Steam.rar
2015-08-04 01:36 - 2015-08-04 01:36 - 00205278 _____ C:\Users\Alex\Desktop\ezfrags_csgo_multi_v5.2.zip
2015-08-04 01:32 - 2015-08-04 01:33 - 01881192 _____ C:\Users\Alex\Desktop\Menton's Hook v1.1 updated by Adi2071.rar
2015-08-03 13:42 - 2015-08-03 13:42 - 00000000 ____D C:\ProgramData\aWinManProa
2015-08-02 09:23 - 2015-08-02 09:24 - 00000000 ____D C:\ProgramData\2WinManPro2
2015-08-02 04:26 - 2015-08-02 04:26 - 00000000 _____ C:\Users\Alex\Documents\ts3_clientui-win32-1407159763-2015-08-02 04_26_53.907816.dmp
2015-08-02 00:51 - 2015-07-28 03:27 - 00000000 ____D C:\Users\Alex\Desktop\S2.Laneris ver.1.0.1
2015-08-02 00:13 - 2015-08-02 00:15 - 1288954891 _____ C:\Users\Alex\Desktop\S2.Laneris ver.1.0.1.rar
2015-08-01 22:17 - 2015-08-01 22:17 - 00215632 _____ C:\Users\Alex\Documents\ts3_clientui-win32-1407159763-2015-08-01 22_17_02.896562.dmp
2015-08-01 22:06 - 2015-08-01 22:06 - 00000000 ____D C:\Users\Alex\AppData\Roaming\FishTrove
2015-08-01 22:05 - 2015-08-01 22:06 - 01847808 _____ C:\Users\Alex\Desktop\FishBot.exe
2015-08-01 15:05 - 2015-08-21 00:45 - 00002135 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-01 09:10 - 2015-08-01 09:11 - 00000000 ____D C:\ProgramData\lWinManProl
2015-07-31 14:27 - 2015-07-31 16:03 - 00000000 ____D C:\ProgramData\EpicScale
2015-07-30 15:43 - 2015-07-30 15:43 - 00203627 _____ C:\Users\Alex\Desktop\ezfrags_csgo_multi_v5.1.zip
2015-07-30 14:55 - 2015-07-30 14:55 - 00000000 ____D C:\ProgramData\JWinManProJ
2015-07-28 17:13 - 2015-07-28 17:28 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TeamViewer
2015-07-28 17:12 - 2015-07-28 17:13 - 08053272 _____ (TeamViewer GmbH) C:\Users\Alex\Desktop\TeamViewer_Setup_pl.exe
2015-07-27 11:06 - 2015-07-27 11:06 - 00000000 ____D C:\Users\Alex\AppData\Local\Crossbrowse
2015-07-27 10:54 - 2015-07-27 10:54 - 00000000 ____D C:\Users\Alex\Desktop\SteamAchievementManager63
2015-07-24 09:39 - 2015-07-24 09:40 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Trove
2015-07-24 02:59 - 2015-07-24 02:59 - 00000216 _____ C:\Users\Alex\Desktop\Trove.url
2015-07-23 20:29 - 2015-07-23 20:29 - 00000216 _____ C:\Users\Alex\Desktop\AdVenture Capitalist.url
2015-07-23 01:15 - 2015-07-23 01:15 - 00051639 _____ C:\Windows\system32\CCCInstall_201507230115310459.log
2015-07-23 01:15 - 2015-07-23 01:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-07-23 01:15 - 2015-07-23 01:15 - 00000000 ____D C:\ProgramData\ATI
2015-07-23 01:04 - 2015-07-23 01:06 - 226363176 _____ (AMD Inc.) C:\Users\Alex\Desktop\amd-catalyst-15.7-with-dotnet45-win7-32bit.exe
2015-07-23 00:18 - 2015-07-23 00:18 - 00000213 _____ C:\Users\Alex\Desktop\Counter-Strike Global Offensive.url
2015-07-22 12:12 - 2015-07-22 12:12 - 00000000 ____D C:\Users\Alex\AppData\Local\CEF

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-21 06:17 - 2014-12-20 20:44 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-21 06:10 - 2014-12-20 20:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TS3Client
2015-08-21 05:40 - 2015-05-29 13:29 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-21 04:32 - 2009-07-14 06:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-21 04:32 - 2009-07-14 06:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-21 03:25 - 2014-12-20 18:20 - 01590713 _____ C:\Windows\WindowsUpdate.log
2015-08-21 03:05 - 2014-12-28 00:04 - 00000000 ____D C:\Program Files\Steam
2015-08-20 23:56 - 2015-06-22 22:53 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Raptr
2015-08-20 20:13 - 2009-07-14 06:39 - 00190739 _____ C:\Windows\setupact.log
2015-08-20 12:45 - 2015-05-29 13:29 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-20 11:55 - 2010-11-20 23:48 - 00144590 _____ C:\Windows\PFRO.log
2015-08-20 11:55 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-20 09:59 - 2014-12-20 19:40 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2015-08-19 17:15 - 2014-12-25 20:23 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Winamp
2015-08-19 03:17 - 2014-12-25 15:27 - 00000000 ____D C:\Users\Alex\AppData\Local\screenSHU
2015-08-18 23:49 - 2015-06-29 13:00 - 00000000 ____D C:\Users\Alex\Desktop\CW
2015-08-16 17:25 - 2015-02-25 22:06 - 00000000 ____D C:\Users\Alex\Desktop\XDD
2015-08-15 02:47 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2015-08-14 12:18 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-08-13 22:34 - 2014-12-20 20:22 - 00000000 ____D C:\Program Files\Common Files\Steam
2015-08-13 11:39 - 2009-07-14 06:33 - 00270352 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-13 11:37 - 2015-04-15 15:39 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-13 11:37 - 2015-04-15 15:39 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-13 11:37 - 2011-02-04 16:37 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL
2015-08-13 11:37 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pl-PL
2015-08-13 01:13 - 2014-12-21 04:05 - 00000000 ____D C:\Windows\system32\MRT
2015-08-13 01:08 - 2014-12-21 04:05 - 129304528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-12 12:17 - 2014-12-20 20:44 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-08-12 12:17 - 2014-12-20 20:44 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-08-09 23:19 - 2014-12-23 00:10 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2015-08-05 14:48 - 2014-12-20 20:41 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-05 14:10 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2015-08-05 13:45 - 2015-05-29 13:35 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d09a038b4810b3.job
2015-08-04 11:07 - 2014-12-20 18:19 - 00000000 ____D C:\Users\Alex\AppData\Local\VirtualStore
2015-08-04 11:04 - 2014-12-20 18:18 - 00000000 ____D C:\Users\Alex
2015-08-04 10:09 - 2014-12-20 19:40 - 00059184 _____ C:\Users\Alex\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-04 09:36 - 2014-12-20 18:19 - 00001425 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-02 13:10 - 2015-06-22 22:53 - 00000000 ____D C:\Program Files\Raptr
2015-08-01 15:05 - 2015-05-29 13:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-27 12:06 - 2015-06-01 17:15 - 00000004 _____ C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
2015-07-26 20:55 - 2015-07-06 09:46 - 00000258 _____ C:\Users\Alex\Desktop\IP.txt
2015-07-25 19:46 - 2015-04-04 09:23 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-23 01:15 - 2015-06-22 22:49 - 00000000 ____D C:\Program Files\AMD
2015-07-23 01:06 - 2014-12-20 19:34 - 00000000 ____D C:\AMD
2015-07-23 00:17 - 2015-06-26 14:10 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

==================== Files in the root of some directories =======

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Alex\AppData\Roaming\X82FxyOAlfq82FaPhMv
2015-06-03 22:28 - 2015-06-03 22:28 - 0000839 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel
2015-05-29 13:17 - 2015-05-29 13:17 - 0000000 _____ () C:\Users\Alex\AppData\Local\Temp.dat

Some files in TEMP:
====================
C:\Users\Alex\AppData\Local\Temp\CyberGhost-VPN-19195-dp.exe
C:\Users\Alex\AppData\Local\Temp\Free-Hide-IP-31946-dp.exe
C:\Users\Alex\AppData\Local\Temp\PCMgr_Setup_10_10_16443_223.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-14 15:54

==================== End of log ============================