Logi z FRST:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01
Ran by Kamil (administrator) on KOMP on 22-02-2014 15:40:28
Running from C:\Users\Kamil\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Malwarebytes Corporation) D:\Programy\Malwarebytes' Anti-Malware\mbamscheduler.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(Malwarebytes Corporation) D:\Programy\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) D:\Programy\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUS) C:\Windows\AsScrPro.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10144288 2010-04-13] (Realtek Semiconductor)
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
HKLM\...\Run: [home] - wscript.exe //B " C:\Users\Kamil\AppData\Local\Temp\home.vbe " & lt; ===== ATTENTION
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-03-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ASUS Screen Saver Protector] - C:\Windows\AsScrPro.exe [3054136 2014-01-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-23] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKU\S-1-5-21-2773732609-2441911179-595238108-1001\...\Run: [home] - wscript.exe //B " C:\Users\Kamil\AppData\Local\Temp\home.vbe " & lt; ===== ATTENTION
Startup: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\home.vbe ()
Startup: C:\Users\Przemek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\home.vbe ()
GroupPolicy: Group Policy on Chrome detected & lt; ======= ATTENTION
==================== Internet (Whitelisted) ====================
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR HomePage: hxxp://searchfunmoods.com/?f=1 & a=iron2 & ir=iron2 & cd=2XzuyEtN2Y1L1QzutDtDtCzy0D0B0CyCtDyB0E0EzzyC0EyBtN0D0Tzu0CtAyEyBtN1L2XzutBtFtBtFtCtFyEtDyB & cr=1067762159
CHR Extension: (Dokumenty Google) - C:\Users\Kamil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-18]
CHR Extension: (Dysk Google) - C:\Users\Kamil\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-18]
CHR Extension: (YouTube) - C:\Users\Kamil\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-18]
CHR Extension: (Szukaj w Google) - C:\Users\Kamil\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-18]
CHR Extension: (Google Wallet) - C:\Users\Kamil\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-18]
CHR Extension: (Gmail) - C:\Users\Kamil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-18]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction & lt; ======= ATTENTION
==================== Services (Whitelisted) =================
R2 MBAMScheduler; D:\Programy\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; D:\Programy\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 Update FindRight; " C:\Program Files (x86)\FindRight\updateFindRight.exe " [X]
S2 Util FindRight; " C:\Program Files (x86)\FindRight\bin\utilFindRight.exe " [X]
==================== Drivers (Whitelisted) ====================
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-18] (Disc Soft Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-22 15:40 - 2014-02-22 15:40 - 00007275 _____ () C:\Users\Kamil\Downloads\FRST.txt
2014-02-22 15:39 - 2014-02-22 15:40 - 00000000 ____D () C:\FRST
2014-02-22 15:38 - 2014-02-22 15:38 - 02154496 _____ (Farbar) C:\Users\Kamil\Downloads\FRST64.exe
2014-02-22 15:02 - 2014-02-22 15:07 - 00000000 ____D () C:\Users\Kamil\Downloads\OTL
2014-02-22 14:43 - 2014-02-22 14:43 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\Opera Software
2014-02-22 14:43 - 2014-02-22 14:43 - 00000000 ____D () C:\Users\Kamil\AppData\Local\Opera Software
2014-02-22 14:42 - 2014-02-22 14:42 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-22 14:42 - 2014-02-22 14:42 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D7
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D6
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D5
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D4
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D3
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D2
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D1
2014-02-22 14:41 - 2014-02-22 14:41 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-22 14:40 - 2014-02-22 14:40 - 04721920 _____ (Piriform Ltd) C:\Users\Kamil\Downloads\ccsetup410.exe
2014-02-22 14:25 - 2014-02-22 14:31 - 00000000 ____D () C:\AdwCleaner
2014-02-22 14:23 - 2014-02-22 14:45 - 00000000 ____D () C:\Users\Kamil\Desktop\Skany
2014-02-22 14:23 - 2014-02-22 14:23 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\Malwarebytes
2014-02-22 14:23 - 2014-02-22 14:23 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-22 14:23 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-22 14:22 - 2014-02-22 14:23 - 01241888 _____ () C:\Users\Kamil\Downloads\AdwCleaner.exe
2014-02-22 14:22 - 2014-02-22 14:21 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Kamil\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-22 14:16 - 2014-02-22 14:16 - 00000000 ____D () C:\_OTL
2014-02-22 14:13 - 2014-02-22 14:13 - 00003116 _____ () C:\Users\Kamil\Desktop\UsbFix [Listing 1] KOMP.txt
2014-02-22 14:10 - 2014-02-22 14:10 - 02203889 _____ (El Desaparecido - SosVirus.net - UsbFix.net) C:\Users\Kamil\Downloads\usbfix0.exe
2014-02-22 14:10 - 2014-02-22 14:10 - 00003116 _____ () C:\UsbFix [Listing 1] KOMP.txt
2014-02-22 14:10 - 2014-02-22 14:10 - 00001448 _____ () C:\Users\Kamil\Desktop\UsbFix.lnk
2014-02-22 14:10 - 2014-02-22 14:10 - 00000000 ____D () C:\UsbFix
2014-02-21 21:13 - 2014-02-21 21:21 - 541848028 _____ () C:\Users\Kamil\Downloads\Żywe trupy - The Walking Dead.S04E10.PL.480p.WEB-DL.AC3.2.0.XviD.avi
2014-02-21 21:08 - 2014-02-21 21:20 - 00000000 ____D () C:\Users\Kamil\Desktop\Pen
2014-02-21 20:08 - 2014-02-21 20:08 - 00000185 _____ () C:\Users\Kamil\Desktop\TWD.txt
2014-02-21 20:00 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-21 20:00 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-21 20:00 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-21 20:00 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-21 20:00 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-21 20:00 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-21 20:00 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-21 20:00 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-21 20:00 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-21 20:00 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-21 20:00 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-21 20:00 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-21 20:00 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-21 20:00 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-21 20:00 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-21 20:00 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-21 20:00 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-21 20:00 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-21 19:58 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-02-21 19:58 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-02-21 19:58 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-02-21 19:58 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-21 19:58 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-02-21 19:58 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-02-21 19:58 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-21 19:55 - 2013-01-13 22:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 22:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 22:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-21 19:55 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-21 19:55 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-21 19:55 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-21 19:55 - 2013-01-13 21:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-21 19:55 - 2013-01-13 21:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-21 19:55 - 2013-01-13 21:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-21 19:55 - 2013-01-13 21:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-21 19:55 - 2013-01-13 20:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-21 19:55 - 2013-01-13 20:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-21 19:55 - 2013-01-13 20:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-21 19:55 - 2013-01-13 20:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-21 19:55 - 2013-01-13 20:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-21 19:55 - 2013-01-13 20:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-21 19:55 - 2013-01-13 20:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-21 19:55 - 2013-01-13 20:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-21 19:55 - 2013-01-13 20:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-21 19:55 - 2013-01-13 20:43 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-02-21 19:55 - 2013-01-13 20:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-21 19:55 - 2013-01-13 20:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-21 19:55 - 2013-01-13 20:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-21 19:55 - 2013-01-13 20:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-21 19:55 - 2013-01-13 20:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-21 19:55 - 2013-01-13 20:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-21 19:55 - 2013-01-13 20:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-21 19:55 - 2013-01-13 20:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-21 19:55 - 2013-01-13 20:15 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-02-21 19:55 - 2013-01-13 20:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-21 19:55 - 2013-01-13 20:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-02-21 19:55 - 2013-01-13 19:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-21 19:55 - 2013-01-13 19:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-21 19:55 - 2013-01-13 19:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-21 19:55 - 2013-01-13 18:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-21 19:55 - 2013-01-13 18:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-21 19:55 - 2013-01-04 07:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-21 19:55 - 2013-01-04 07:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-21 19:54 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-21 19:54 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-21 19:54 - 2013-12-10 03:28 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-21 19:54 - 2013-12-10 03:02 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-21 19:54 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-21 19:54 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-21 19:54 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-21 19:54 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-21 19:54 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-21 19:54 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-21 19:54 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-21 19:54 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-21 19:54 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-21 19:54 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-21 19:54 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-21 19:54 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-21 19:54 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-21 19:54 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-21 19:54 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-21 19:54 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-21 19:54 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-21 19:54 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-21 19:54 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-21 19:54 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-21 19:54 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-21 19:54 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-21 19:54 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-21 19:54 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-21 19:54 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-02-21 19:54 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-02-20 16:47 - 2014-02-20 16:53 - 00000000 ____D () C:\Users\Kamil\Desktop\Tapety
2014-02-19 18:41 - 2014-02-19 18:41 - 00004505 _____ () C:\Users\Kamil\Downloads\linki.txt
2014-02-18 17:02 - 2014-02-18 17:02 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\WinRAR
2014-02-07 18:08 - 2014-02-07 18:08 - 00000000 ____D () C:\Users\Kamil\AppData\Local\Adobe
2014-02-07 15:37 - 2014-02-07 15:37 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-05 13:23 - 2014-02-05 13:23 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\Wargaming.net
2014-02-05 13:22 - 2014-02-07 18:08 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\Adobe
2014-01-31 20:34 - 2014-01-31 20:34 - 00000000 ____D () C:\Users\Kamil\AppData\Local\DOSBox
2014-01-29 22:06 - 2014-01-30 23:01 - 00000000 ____D () C:\Program Files (x86)\DOSBox-0.74
2014-01-29 22:06 - 2014-01-29 22:06 - 00001918 _____ () C:\Users\Public\Desktop\DOSBox 0.74.lnk
2014-01-29 22:06 - 2014-01-29 22:06 - 00000000 ____D () C:\Users\Przemek\AppData\Local\DOSBox
2014-01-29 12:08 - 2014-02-21 20:21 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-01-29 12:08 - 2014-01-29 12:08 - 00001007 _____ () C:\Users\Kamil\Desktop\SpeedFan.lnk
2014-01-29 12:08 - 2014-01-29 12:08 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-01-29 12:08 - 2014-01-29 12:08 - 00000000 ____D () C:\Users\Przemek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2014-01-29 11:47 - 2014-01-29 11:50 - 00000000 ____D () C:\Users\Przemek\AppData\Roaming\Winamp
2014-01-29 11:45 - 2014-01-29 11:45 - 00000000 ____D () C:\Users\Przemek\AppData\Roaming\vlc
2014-01-28 19:50 - 2014-01-28 19:50 - 00001963 _____ () C:\Users\Przemek\Desktop\Projekt.cpp
2014-01-27 13:25 - 2014-01-27 22:53 - 00000000 ____D () C:\Users\Przemek\Desktop\Nowy folder
2014-01-26 22:09 - 2014-01-26 22:09 - 00000000 ____D () C:\Users\Przemek\Desktop\Gmail
2014-01-24 20:42 - 2014-01-24 20:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-01-24 20:39 - 2014-01-24 20:39 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\vlc
2014-01-23 15:00 - 2014-01-23 15:00 - 00000795 _____ () C:\Users\Przemek\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-01-23 14:59 - 2014-01-29 14:01 - 00000000 ____D () C:\Users\Przemek\AppData\Roaming\uTorrent
==================== One Month Modified Files and Folders =======
2014-02-22 15:40 - 2014-02-22 15:40 - 00007275 _____ () C:\Users\Kamil\Downloads\FRST.txt
2014-02-22 15:40 - 2014-02-22 15:39 - 00000000 ____D () C:\FRST
2014-02-22 15:38 - 2014-02-22 15:38 - 02154496 _____ (Farbar) C:\Users\Kamil\Downloads\FRST64.exe
2014-02-22 15:19 - 2014-01-18 12:58 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-22 15:07 - 2014-02-22 15:02 - 00000000 ____D () C:\Users\Kamil\Downloads\OTL
2014-02-22 14:47 - 2014-01-17 18:37 - 00000000 ____D () C:\Windows\Panther
2014-02-22 14:45 - 2014-02-22 14:23 - 00000000 ____D () C:\Users\Kamil\Desktop\Skany
2014-02-22 14:45 - 2014-01-18 17:47 - 00000000 ___RD () C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-22 14:43 - 2014-02-22 14:43 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\Opera Software
2014-02-22 14:43 - 2014-02-22 14:43 - 00000000 ____D () C:\Users\Kamil\AppData\Local\Opera Software
2014-02-22 14:42 - 2014-02-22 14:42 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-22 14:42 - 2014-02-22 14:42 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D7
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D6
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D5
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D4
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D3
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D2
2014-02-22 14:41 - 2014-02-22 14:41 - 00003246 _____ () C:\Windows\System32\Tasks\Opera D1
2014-02-22 14:41 - 2014-02-22 14:41 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-22 14:40 - 2014-02-22 14:40 - 04721920 _____ (Piriform Ltd) C:\Users\Kamil\Downloads\ccsetup410.exe
2014-02-22 14:37 - 2014-01-17 18:41 - 01648506 ____N () C:\Windows\WindowsUpdate.log
2014-02-22 14:37 - 2011-04-12 14:21 - 00687828 _____ () C:\Windows\system32\perfh015.dat
2014-02-22 14:37 - 2011-04-12 14:21 - 00131382 _____ () C:\Windows\system32\perfc015.dat
2014-02-22 14:37 - 2009-07-14 06:13 - 01523412 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-22 14:32 - 2014-01-18 12:58 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-22 14:32 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-22 14:31 - 2014-02-22 14:25 - 00000000 ____D () C:\AdwCleaner
2014-02-22 14:23 - 2014-02-22 14:23 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\Malwarebytes
2014-02-22 14:23 - 2014-02-22 14:23 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-22 14:23 - 2014-02-22 14:22 - 01241888 _____ () C:\Users\Kamil\Downloads\AdwCleaner.exe
2014-02-22 14:21 - 2014-02-22 14:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Kamil\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-22 14:16 - 2014-02-22 14:16 - 00000000 ____D () C:\_OTL
2014-02-22 14:13 - 2014-02-22 14:13 - 00003116 _____ () C:\Users\Kamil\Desktop\UsbFix [Listing 1] KOMP.txt
2014-02-22 14:10 - 2014-02-22 14:10 - 02203889 _____ (El Desaparecido - SosVirus.net - UsbFix.net) C:\Users\Kamil\Downloads\usbfix0.exe
2014-02-22 14:10 - 2014-02-22 14:10 - 00003116 _____ () C:\UsbFix [Listing 1] KOMP.txt
2014-02-22 14:10 - 2014-02-22 14:10 - 00001448 _____ () C:\Users\Kamil\Desktop\UsbFix.lnk
2014-02-22 14:10 - 2014-02-22 14:10 - 00000000 ____D () C:\UsbFix
2014-02-21 21:21 - 2014-02-21 21:13 - 541848028 _____ () C:\Users\Kamil\Downloads\Żywe trupy - The Walking Dead.S04E10.PL.480p.WEB-DL.AC3.2.0.XviD.avi
2014-02-21 21:20 - 2014-02-21 21:08 - 00000000 ____D () C:\Users\Kamil\Desktop\Pen
2014-02-21 21:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-21 21:00 - 2014-01-18 13:35 - 00000404 __RSH () C:\ProgramData\ntuser.pol
2014-02-21 20:58 - 2009-07-14 05:45 - 00016848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-21 20:58 - 2009-07-14 05:45 - 00016848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-21 20:21 - 2014-01-29 12:08 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-02-21 20:08 - 2014-02-21 20:08 - 00000185 _____ () C:\Users\Kamil\Desktop\TWD.txt
2014-02-21 20:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-02-21 20:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-02-21 20:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-21 20:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-21 20:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-21 20:03 - 2014-01-17 20:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-21 20:01 - 2014-01-17 20:29 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-21 19:48 - 2014-01-17 19:32 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-20 17:10 - 2010-11-21 04:24 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-02-20 17:10 - 2010-11-21 04:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-02-20 17:10 - 2010-11-21 04:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2014-02-20 17:10 - 2010-11-21 04:24 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2014-02-20 17:10 - 2010-11-21 04:23 - 00013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2014-02-20 16:53 - 2014-02-20 16:47 - 00000000 ____D () C:\Users\Kamil\Desktop\Tapety
2014-02-19 18:41 - 2014-02-19 18:41 - 00004505 _____ () C:\Users\Kamil\Downloads\linki.txt
2014-02-18 17:02 - 2014-02-18 17:02 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\WinRAR
2014-02-14 11:14 - 2014-01-18 12:58 - 00004046 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-14 11:14 - 2014-01-18 12:58 - 00003794 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-07 18:08 - 2014-02-07 18:08 - 00000000 ____D () C:\Users\Kamil\AppData\Local\Adobe
2014-02-07 18:08 - 2014-02-05 13:22 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\Adobe
2014-02-07 15:37 - 2014-02-07 15:37 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-05 13:23 - 2014-02-05 13:23 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\Wargaming.net
2014-02-05 10:54 - 2014-01-18 18:07 - 00000000 ____D () C:\Users\Kamil\AppData\Local\Google
2014-01-31 20:34 - 2014-01-31 20:34 - 00000000 ____D () C:\Users\Kamil\AppData\Local\DOSBox
2014-01-30 23:01 - 2014-01-29 22:06 - 00000000 ____D () C:\Program Files (x86)\DOSBox-0.74
2014-01-29 22:06 - 2014-01-29 22:06 - 00001918 _____ () C:\Users\Public\Desktop\DOSBox 0.74.lnk
2014-01-29 22:06 - 2014-01-29 22:06 - 00000000 ____D () C:\Users\Przemek\AppData\Local\DOSBox
2014-01-29 14:01 - 2014-01-23 14:59 - 00000000 ____D () C:\Users\Przemek\AppData\Roaming\uTorrent
2014-01-29 12:08 - 2014-01-29 12:08 - 00001007 _____ () C:\Users\Kamil\Desktop\SpeedFan.lnk
2014-01-29 12:08 - 2014-01-29 12:08 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-01-29 12:08 - 2014-01-29 12:08 - 00000000 ____D () C:\Users\Przemek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2014-01-29 12:08 - 2014-01-18 13:32 - 00000000 ____D () C:\Users\Przemek\Desktop\Programy
2014-01-29 11:50 - 2014-01-29 11:47 - 00000000 ____D () C:\Users\Przemek\AppData\Roaming\Winamp
2014-01-29 11:45 - 2014-01-29 11:45 - 00000000 ____D () C:\Users\Przemek\AppData\Roaming\vlc
2014-01-28 19:50 - 2014-01-28 19:50 - 00001963 _____ () C:\Users\Przemek\Desktop\Projekt.cpp
2014-01-27 22:53 - 2014-01-27 13:25 - 00000000 ____D () C:\Users\Przemek\Desktop\Nowy folder
2014-01-27 12:37 - 2014-01-19 20:45 - 00005021 _____ () C:\Windows\MC9.INI
2014-01-26 22:09 - 2014-01-26 22:09 - 00000000 ____D () C:\Users\Przemek\Desktop\Gmail
2014-01-26 22:09 - 2014-01-19 20:43 - 00000000 ____D () C:\Program Files\WinRar
2014-01-25 13:10 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-24 20:42 - 2014-01-24 20:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-01-24 20:41 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-24 20:39 - 2014-01-24 20:39 - 00000000 ____D () C:\Users\Kamil\AppData\Roaming\vlc
2014-01-23 15:00 - 2014-01-23 15:00 - 00000795 _____ () C:\Users\Przemek\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
Some content of TEMP:
====================
C:\Users\Kamil\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe = & gt; MD5 is legit
C:\Windows\System32\wininit.exe = & gt; MD5 is legit
C:\Windows\SysWOW64\wininit.exe = & gt; MD5 is legit
C:\Windows\explorer.exe = & gt; MD5 is legit
C:\Windows\SysWOW64\explorer.exe = & gt; MD5 is legit
C:\Windows\System32\svchost.exe = & gt; MD5 is legit
C:\Windows\SysWOW64\svchost.exe = & gt; MD5 is legit
C:\Windows\System32\services.exe = & gt; MD5 is legit
C:\Windows\System32\User32.dll = & gt; MD5 is legit
C:\Windows\SysWOW64\User32.dll = & gt; MD5 is legit
C:\Windows\System32\userinit.exe = & gt; MD5 is legit
C:\Windows\SysWOW64\userinit.exe = & gt; MD5 is legit
C:\Windows\System32\rpcss.dll = & gt; MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys = & gt; MD5 is legit
LastRegBack: 2014-02-21 17:09
==================== End Of Log ============================