niestety mam poważny problem z komputerem nie da się na nim nic zrobić wiadomość próbuję zamieścić od 17.00... załączam pliki
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by MAGIC MEDIA (administrator) on MAGICMEDIA on 20-09-2014 17:16:05
Running from C:\Users\MAGIC MEDIA\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
() C:\Program Files (x86)\SupTab\HpUI.exe
(brother Industries Ltd) C:\Windows\SysWOW64\BRSVC01A.EXE
(brother Industries Ltd) C:\Windows\SysWOW64\BRSS01A.EXE
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
() C:\Program Files (x86)\SupTab\Loader64.exe
() C:\Program Files (x86)\SupTab\Loader32.exe
(ABBYY) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
() C:\Users\MAGIC MEDIA\AppData\Local\Genesis_09200842\Genesis_09200842.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Dell) C:\Users\MAGIC MEDIA\AppData\Local\Apps\2.0\3PC13ZTQ.CJX\0J4GC8KX.TWO\dell..tion_0f612f649c4a10af_0005.0004_3ddfe37344028d2c\DellSystemDetect.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\sqlservr.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] = & gt; C:\Program Files\DellTPad\Apoint.exe [609144 2011-04-12] (Alps Electric Co., Ltd.)
HKLM\...\Run: [QuickSet] = & gt; C:\Program Files\Dell\QuickSet\QuickSet.exe [3668336 2011-03-24] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] = & gt; wscript.exe //b //nologo " C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs "
HKLM\...\Run: [IntelWireless] = & gt; C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-12-17] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] = & gt; rundll32.exe " C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll " ,TrayApp
HKLM\...\Run: [MSC] = & gt; C:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SysTrayApp] = & gt; C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] = & gt; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] = & gt; C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [] = & gt; [X]
HKLM-x32\...\Run: [RoxWatchTray] = & gt; c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Bonus.SSR.FR11] = & gt; C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [934152 2011-11-01] (ABBYY.)
HKLM-x32\...\Run: [WinampAgent] = & gt; C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] = & gt; C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] = & gt; C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM-x32\...\Run: [iTunesHelper] = & gt; C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] = & gt; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [LinkMagic for magicolor 1680MF] = & gt; [X]
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [ISUSPM] = & gt; C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [213936 2006-03-20] (Macrovision Corporation)
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [ALLUpdate] = & gt; C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [1379840 2011-08-16] ()
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [Badoo Desktop] = & gt; C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [Facebook Update] = & gt; C:\Users\MAGIC MEDIA\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-01-05] (Facebook Inc.)
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [DellSystemDetect] = & gt; C:\Users\MAGIC MEDIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [RESTART_STICKY_NOTES] = & gt; C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [DAEMON Tools Lite] = & gt; C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\Run: [genesis_09200842] = & gt; c:\users\magic media\appdata\local\genesis_09200842\genesis_09200842.exe [1540096 2014-09-20] ()
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\MountPoints2: {024109a2-9892-11e2-9fd9-bc77375ee169} - F:\autorun.exe
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\MountPoints2: {25879479-7f50-11e3-83dc-bc77375ec108} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-198922920-1116790170-2632451023-1000\...\MountPoints2: {3ed8ca91-9bf3-11e3-b9e5-bc77375ec10c} - H:\HTC_Sync_Manager_PC.exe
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - & gt; C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\MAGIC MEDIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\genesis_09200842.lnk
ShortcutTarget: genesis_09200842.lnk - & gt; C:\Users\MAGIC MEDIA\AppData\Local\Genesis_09200842\Genesis_09200842.exe ()
Startup: C:\Users\MAGIC MEDIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk - & gt; C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN & q={searchTerms}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com/Results.aspx?gd= & ctid=CT3321459 & octid=EB_ORIGINAL_CTID & ISID=M0F3AD10E-699A-4361-BE66-345DCD308638 & SearchSource=58 & CUI= & UM=6 & UP=SP2CEDCD2D-AB90-486B-9F38-21805BDBA217 & q={searchTerms} & SSPV=SP2170TB_sp_ie
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com/Results.aspx?gd= & ctid=CT3321459 & octid=EB_ORIGINAL_CTID & ISID=M0F3AD10E-699A-4361-BE66-345DCD308638 & SearchSource=58 & CUI= & UM=6 & UP=SP2CEDCD2D-AB90-486B-9F38-21805BDBA217 & q={searchTerms} & SSPV=SP2170TB_sp_ie
SearchScopes: HKCU - {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {szukaj.gazeta.pl} URL = http://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms}
BHO: realdeal - & gt; {48F8A322-B4B6-6AEA-BA73-F2DC838834BB} - & gt; C:\ProgramData\realdeal\lF.x64.dll ()
BHO: Windows Live ID Sign-in Helper - & gt; {9030D464-4C02-4ABF-8ECC-5164760863C6} - & gt; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - & gt; {B4F3A835-0E21-4959-BA22-42B3008E02FF} - & gt; C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: MSS+ Identifier - & gt; {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - & gt; C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: DivX Plus Web Player HTML5 & lt; video & gt; - & gt; {326E768D-4182-46FD-9C16-1449A49795F4} - & gt; C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: IETabPage Class - & gt; {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - & gt; C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: realdeal - & gt; {48F8A322-B4B6-6AEA-BA73-F2DC838834BB} - & gt; C:\ProgramData\realdeal\lF.dll ()
BHO-x32: No Name - & gt; {8984B388-A5BB-4DF7-B274-77B879E179DB} - & gt; No File
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - & gt; {9030D464-4C02-4ABF-8ECC-5164760863C6} - & gt; C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - & gt; {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - & gt; C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - & gt; {B4F3A835-0E21-4959-BA22-42B3008E02FF} - & gt; C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: IplexToALLPlayer - & gt; {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - & gt; C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Tcpip\Parameters: [DhcpNameServer] 62.179.1.60 62.179.1.61
FireFox:
========
FF ProfilePath: C:\Users\MAGIC MEDIA\AppData\Roaming\Mozilla\Firefox\Profiles\bd2ib171.default
FF Homepage: hxxp://www.gazeta.pl/0,0.html?p=128
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: ?????@Mail.Ru
FF Keyword.URL: hxxp://go.mail.ru/search?fr=fftb & q=
FF Homepage: hxxp://www.gazeta.pl/0,0.html?p=156
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - & gt; C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/JavaPlugin - & gt; C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - & gt; disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - & gt; C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - & gt; C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - & gt; C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - & gt; C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @microsoft.com/GENUINE - & gt; disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - & gt; C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - & gt; C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - & gt; C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - & gt; C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - & gt; C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - & gt; C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - & gt; C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - & gt; C:\Users\MAGIC MEDIA\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\MAGIC MEDIA\AppData\Roaming\Mozilla\Firefox\Profiles\bd2ib171.default\searchplugins\badoo.xml
FF SearchPlugin: C:\Users\MAGIC MEDIA\AppData\Roaming\Mozilla\Firefox\Profiles\bd2ib171.default\searchplugins\szukaj-gazeta-pl.xml
FF Extension: No Name - C:\Users\MAGIC MEDIA\AppData\Roaming\Mozilla\Firefox\Profiles\bd2ib171.default\Extensions\staged [2014-09-17]
FF Extension: Iplex to ALLPlayer - C:\Users\MAGIC MEDIA\AppData\Roaming\Mozilla\Firefox\Profiles\bd2ib171.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2012-06-26]
FF Extension: Screengrab - C:\Users\MAGIC MEDIA\AppData\Roaming\Mozilla\Firefox\Profiles\bd2ib171.default\Extensions\{02450954-cdd9-410f-b1da-db804e18c671}.xpi [2011-08-02]
FF Extension: Adblock Plus - C:\Users\MAGIC MEDIA\AppData\Roaming\Mozilla\Firefox\Profiles\bd2ib171.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-06-22]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt [2011-05-20]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 & lt;video & gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-06-05]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
Chrome:
=======
CHR Profile: C:\Users\MAGIC MEDIA\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (9GAG Mini) - C:\Users\MAGIC MEDIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmkmihphgjhmeabggdcokmkjhbnmdml [2014-09-17]
CHR Extension: (Google Wallet) - C:\Users\MAGIC MEDIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-18]
CHR Extension: (DivX Plus Web Player HTML5 & lt; video & gt; ) - C:\Users\MAGIC MEDIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-06-05]
CHR Extension: (Quick start) - C:\Users\MAGIC MEDIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-09-20]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-05-06]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\MAGIC MEDIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-09-20]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.istartsurf.com/?type=sc & ts=1411202670 & from=smt & uid=ST9500423AS_5WR04NMNXXXX5WR04NMN
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction & lt; ======= ATTENTION
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-10-12] (ABBYY)
R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [897088 2010-11-03] (Intel Corporation) [File not signed]
R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-11-03] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed]
R2 Brother XP spl Service; C:\windows\SysWOW64\brsvc01a.exe [57344 2004-06-14] (brother Industries Ltd)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG)
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [715656 2014-09-20] (Cherished Technololgy LIMITED)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R2 MSSQL$INSERTGT; c:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-12-17] ()
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [633856 2011-06-08] (Nokia) [File not signed]
S4 SQLAgent$INSERTGT; c:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [528896 2014-09-20] (Fuyu LIMITED) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 ASPI; C:\windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec) [File not signed]
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-20] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-09-20] (Duplex Secure Ltd.)
U3 aqpfdins; C:\Windows\System32\Drivers\aqpfdins.sys [0 ] (Microsoft Corporation)
S3 HTCAND64; System32\Drivers\ANDROIDUSB.sys [X]
S1 jdznqaoi; \??\C:\windows\system32\drivers\jdznqaoi.sys [X]
S1 pnqivhlb; \??\C:\windows\system32\drivers\pnqivhlb.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 17:16 - 2014-09-20 17:16 - 00027465 _____ () C:\Users\MAGIC MEDIA\Downloads\FRST.txt
2014-09-20 17:16 - 2014-09-20 17:16 - 00000000 ____D () C:\FRST
2014-09-20 17:15 - 2014-09-20 17:15 - 02105856 _____ (Farbar) C:\Users\MAGIC MEDIA\Downloads\FRST64.exe
2014-09-20 16:41 - 2014-09-20 16:41 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\muzyka
2014-09-20 12:18 - 2014-09-20 12:18 - 00000000 ____D () C:\ProgramData\374311380
2014-09-20 11:53 - 2014-09-20 12:00 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\profesor pierre
2014-09-20 11:38 - 2014-09-20 11:38 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\francuski zajęcia
2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\NapiProjekt
2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\EurekaLog
2014-09-20 11:19 - 2014-09-20 11:19 - 00386680 _____ (Duplex Secure Ltd.) C:\windows\system32\Drivers\sptd.sys
2014-09-20 10:45 - 2014-09-20 10:45 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\istartsurf
2014-09-20 10:45 - 2014-09-20 10:45 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-09-20 10:45 - 2014-09-20 10:45 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-09-20 10:45 - 2014-09-20 10:45 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-09-20 10:42 - 2014-09-20 17:00 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Genesis_09200842
2014-09-20 10:41 - 2014-09-20 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-09-20 10:41 - 2014-09-20 10:41 - 00283064 _____ (Disc Soft Ltd) C:\windows\system32\Drivers\dtsoftbus01.sys
2014-09-20 10:41 - 2014-09-20 10:41 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-09-20 10:36 - 2014-09-20 10:44 - 150988534 _____ (COMODO) C:\Users\MAGIC MEDIA\Downloads\Niepotwierdzony 519665.crdownload
2014-09-20 10:16 - 2014-09-20 10:16 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Avg2015
2014-09-20 10:11 - 2014-09-20 10:48 - 00000000 ____D () C:\ProgramData\MFAData
2014-09-20 10:11 - 2014-09-20 10:11 - 04927224 _____ (AVG Technologies) C:\Users\MAGIC MEDIA\Downloads\avg_isc_stb_all_2014_4765.exe
2014-09-20 10:11 - 2014-09-20 10:11 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\MFAData
2014-09-20 10:11 - 2014-09-20 10:11 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Avg2014
2014-09-18 22:51 - 2014-09-20 16:56 - 00001058 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-18 22:51 - 2014-09-18 22:51 - 00004054 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-09-18 22:51 - 2014-09-18 22:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-18 22:50 - 2014-09-20 16:51 - 00001054 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-18 22:50 - 2014-09-18 22:50 - 00003802 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-09-18 22:38 - 2014-09-18 22:40 - 00266728 _____ () C:\windows\Minidump\091814-32651-01.dmp
2014-09-18 22:36 - 2014-09-18 22:36 - 06010880 _____ () C:\Program Files (x86)\GUTEC87.tmp
2014-09-18 22:36 - 2014-09-18 22:36 - 00000000 ____D () C:\Program Files (x86)\GUMEC86.tmp
2014-09-17 21:50 - 2014-09-17 21:50 - 00000000 __SHD () C:\Users\MAGIC MEDIA\AppData\Local\EmieUserList
2014-09-17 21:50 - 2014-09-17 21:50 - 00000000 __SHD () C:\Users\MAGIC MEDIA\AppData\Local\EmieSiteList
2014-09-17 21:50 - 2014-09-17 21:50 - 00000000 ____D () C:\ProgramData\realdeal
2014-09-17 21:29 - 2014-09-17 21:29 - 00000000 ____D () C:\ProgramData\ChampionDeals
2014-09-16 21:44 - 2014-09-17 21:50 - 00000000 ____D () C:\ProgramData\4d09ce8d5400296d
2014-09-11 10:04 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-09-11 10:04 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-09-11 10:04 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-09-11 10:04 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-09-11 10:04 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-09-11 10:04 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-09-11 10:04 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-09-11 10:04 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-09-11 10:04 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-09-11 10:04 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-09-11 10:04 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-09-11 10:04 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-09-11 10:04 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-09-11 10:04 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-09-11 10:04 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-09-11 10:04 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-09-11 10:04 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-09-11 10:04 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-09-11 10:04 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-09-11 10:04 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-09-11 10:04 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-09-11 10:04 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-09-11 10:04 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-09-11 10:04 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 10:04 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-09-11 10:04 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-09-11 10:04 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-09-11 10:04 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-09-11 10:04 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-09-11 10:04 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-09-11 10:04 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-09-11 10:04 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-09-11 10:04 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-09-11 10:04 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-09-11 10:04 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-09-11 10:04 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-09-11 10:04 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-09-11 10:04 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-09-11 10:04 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-09-11 10:04 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-09-11 10:04 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-09-11 10:04 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-11 10:04 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-09-11 10:04 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-09-11 10:04 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-09-11 10:04 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-09-11 10:04 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-09-11 10:04 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-09-11 10:04 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-09-11 10:04 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-09-11 10:04 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-09-11 10:04 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-09-11 10:04 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-09-11 10:04 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-09-11 10:04 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-09-11 10:04 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-09-11 09:16 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2014-09-11 09:16 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 16:09 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2014-09-10 16:09 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll
2014-09-10 16:08 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-09-10 16:08 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-09-10 16:08 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-09-10 16:08 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-09-10 16:08 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-09-10 16:08 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-09-10 16:08 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-09-06 08:37 - 2014-09-06 08:41 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\FRANCUSKI
2014-08-30 11:09 - 2014-08-30 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Profesor Henry - FCE & CAE Course
2014-08-29 20:57 - 2014-08-30 11:08 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\Profesor Henry 6.0 FCE & CAE Course (zybi06)
2014-08-29 20:19 - 2014-08-29 20:19 - 00000000 __SHD () C:\found.000
2014-08-28 21:05 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-08-28 21:05 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-08-28 21:05 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-08-27 23:55 - 2014-08-27 23:55 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Profesor Henry 5.0 DEMO - poziom 3 & 4
2014-08-27 23:50 - 2014-08-27 23:50 - 00000000 ____D () C:\Users\MAGIC MEDIA\Documents\Optimizer Pro
2014-08-27 22:31 - 2014-08-27 22:31 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\PowerISO
2014-08-27 22:30 - 2014-08-27 22:30 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\OpenCandy
2014-08-27 22:21 - 2014-08-27 22:21 - 02209792 _____ () C:\Users\MAGIC MEDIA\Downloads\PowerISO_Sciagnij.pl.exe
2014-08-26 21:40 - 2014-08-26 21:41 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\{B215723E-9BDF-4B45-B684-CF08CDEFA416}
2014-08-21 21:04 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\windows\system32\icardres.dll
2014-08-21 21:04 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardres.dll
2014-08-21 21:04 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2014-08-21 21:04 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2014-08-21 21:04 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\windows\system32\icardagt.exe
2014-08-21 21:04 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\windows\system32\infocardapi.dll
2014-08-21 21:04 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardagt.exe
2014-08-21 21:04 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\windows\SysWOW64\infocardapi.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 17:16 - 2014-09-20 17:16 - 00027465 _____ () C:\Users\MAGIC MEDIA\Downloads\FRST.txt
2014-09-20 17:16 - 2014-09-20 17:16 - 00000000 ____D () C:\FRST
2014-09-20 17:15 - 2014-09-20 17:15 - 02105856 _____ (Farbar) C:\Users\MAGIC MEDIA\Downloads\FRST64.exe
2014-09-20 17:00 - 2014-09-20 10:42 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Genesis_09200842
2014-09-20 17:00 - 2009-07-14 06:45 - 00013872 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-20 17:00 - 2009-07-14 06:45 - 00013872 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-20 16:57 - 2011-05-20 10:50 - 01403566 _____ () C:\windows\WindowsUpdate.log
2014-09-20 16:56 - 2014-09-18 22:51 - 00001058 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-20 16:55 - 2013-02-25 13:51 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-09-20 16:52 - 2014-01-26 13:40 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\HTC MediaHub
2014-09-20 16:52 - 2011-06-14 09:19 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Deployment
2014-09-20 16:51 - 2014-09-18 22:50 - 00001054 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-20 16:51 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-09-20 16:51 - 2009-07-14 06:51 - 00161011 _____ () C:\windows\setupact.log
2014-09-20 16:41 - 2014-09-20 16:41 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\muzyka
2014-09-20 16:40 - 2011-06-28 11:35 - 07452160 ___SH () C:\Users\MAGIC MEDIA\Desktop\Thumbs.db
2014-09-20 16:28 - 2014-03-04 21:40 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\TOEIC (marasa)
2014-09-20 16:07 - 2011-05-20 13:42 - 14733500 _____ () C:\windows\system32\perfh015.dat
2014-09-20 16:07 - 2011-05-20 13:42 - 05122738 _____ () C:\windows\system32\perfc015.dat
2014-09-20 16:07 - 2009-07-14 07:13 - 00006994 _____ () C:\windows\system32\PerfStringBackup.INI
2014-09-20 15:26 - 2011-05-20 11:15 - 00000000 ____D () C:\ProgramData\Sonic
2014-09-20 14:32 - 2013-02-13 00:18 - 00000952 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-198922920-1116790170-2632451023-1000UA.job
2014-09-20 12:32 - 2013-05-28 19:37 - 00003440 _____ () C:\windows\System32\Tasks\PCDEventLauncherTask
2014-09-20 12:18 - 2014-09-20 12:18 - 00000000 ____D () C:\ProgramData\374311380
2014-09-20 12:00 - 2014-09-20 11:53 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\profesor pierre
2014-09-20 11:38 - 2014-09-20 11:38 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\francuski zajęcia
2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\NapiProjekt
2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\EurekaLog
2014-09-20 11:30 - 2014-08-10 23:16 - 00000859 _____ () C:\Users\MAGIC MEDIA\Desktop\Profesor Pierre 6.0 Słownictwo.lnk
2014-09-20 11:30 - 2014-08-10 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Profesor Pierre 6.0 Słownictwo
2014-09-20 11:19 - 2014-09-20 11:19 - 00386680 _____ (Duplex Secure Ltd.) C:\windows\system32\Drivers\sptd.sys
2014-09-20 11:07 - 2011-12-14 18:28 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\CrashDumps
2014-09-20 11:04 - 2014-04-29 20:37 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-20 11:04 - 2013-11-01 20:10 - 00004016 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{F1776419-BFD0-4E02-AA4B-B1A065A4158F}
2014-09-20 10:58 - 2011-05-20 10:58 - 00845168 _____ () C:\windows\PFRO.log
2014-09-20 10:48 - 2014-09-20 10:11 - 00000000 ____D () C:\ProgramData\MFAData
2014-09-20 10:45 - 2014-09-20 10:45 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\istartsurf
2014-09-20 10:45 - 2014-09-20 10:45 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-09-20 10:45 - 2014-09-20 10:45 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-09-20 10:45 - 2014-09-20 10:45 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-09-20 10:44 - 2014-09-20 10:36 - 150988534 _____ (COMODO) C:\Users\MAGIC MEDIA\Downloads\Niepotwierdzony 519665.crdownload
2014-09-20 10:44 - 2011-06-10 15:31 - 00001625 _____ () C:\Users\MAGIC MEDIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-20 10:42 - 2014-09-20 10:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-09-20 10:41 - 2014-09-20 10:41 - 00283064 _____ (Disc Soft Ltd) C:\windows\system32\Drivers\dtsoftbus01.sys
2014-09-20 10:41 - 2014-09-20 10:41 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-09-20 10:16 - 2014-09-20 10:16 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Avg2015
2014-09-20 10:11 - 2014-09-20 10:11 - 04927224 _____ (AVG Technologies) C:\Users\MAGIC MEDIA\Downloads\avg_isc_stb_all_2014_4765.exe
2014-09-20 10:11 - 2014-09-20 10:11 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\MFAData
2014-09-20 10:11 - 2014-09-20 10:11 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Avg2014
2014-09-20 09:18 - 2011-05-20 11:06 - 00106516 _____ () C:\windows\DPINST.LOG
2014-09-20 09:17 - 2014-01-26 13:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-09-20 09:17 - 2012-06-21 21:01 - 00000000 ____D () C:\Temp
2014-09-20 00:02 - 2013-02-13 00:18 - 00000930 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-198922920-1116790170-2632451023-1000Core.job
2014-09-18 22:51 - 2014-09-18 22:51 - 00004054 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-09-18 22:51 - 2014-09-18 22:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-18 22:50 - 2014-09-18 22:50 - 00003802 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-09-18 22:50 - 2012-05-29 17:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-18 22:40 - 2014-09-18 22:38 - 00266728 _____ () C:\windows\Minidump\091814-32651-01.dmp
2014-09-18 22:38 - 2012-06-26 19:07 - 899373730 _____ () C:\windows\MEMORY.DMP
2014-09-18 22:38 - 2012-06-26 19:07 - 00000000 ____D () C:\windows\Minidump
2014-09-18 22:36 - 2014-09-18 22:36 - 06010880 _____ () C:\Program Files (x86)\GUTEC87.tmp
2014-09-18 22:36 - 2014-09-18 22:36 - 00000000 ____D () C:\Program Files (x86)\GUMEC86.tmp
2014-09-17 21:54 - 2011-06-19 15:38 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Windows Live
2014-09-17 21:50 - 2014-09-17 21:50 - 00000000 __SHD () C:\Users\MAGIC MEDIA\AppData\Local\EmieUserList
2014-09-17 21:50 - 2014-09-17 21:50 - 00000000 __SHD () C:\Users\MAGIC MEDIA\AppData\Local\EmieSiteList
2014-09-17 21:50 - 2014-09-17 21:50 - 00000000 ____D () C:\ProgramData\realdeal
2014-09-17 21:50 - 2014-09-16 21:44 - 00000000 ____D () C:\ProgramData\4d09ce8d5400296d
2014-09-17 21:29 - 2014-09-17 21:29 - 00000000 ____D () C:\ProgramData\ChampionDeals
2014-09-16 21:49 - 2013-07-16 09:03 - 00000000 ____D () C:\windows\system32\MRT
2014-09-13 05:41 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-09-11 10:03 - 2011-06-21 11:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-11 10:01 - 2011-06-14 09:23 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-11 10:01 - 2011-06-14 09:23 - 00001912 _____ () C:\windows\epplauncher.mif
2014-09-11 10:01 - 2011-06-14 09:23 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-11 10:01 - 2011-06-14 09:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-11 09:17 - 2011-12-17 14:58 - 101694776 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-09-10 15:55 - 2013-02-25 13:51 - 00701104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 15:55 - 2013-02-25 13:51 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-10 15:55 - 2013-02-25 13:51 - 00003868 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-09-07 22:49 - 2011-09-06 18:55 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\OpenOffice.org2
2014-09-06 18:55 - 2014-04-13 02:32 - 00000000 ____D () C:\PIT Format 2013
2014-09-06 18:55 - 2011-06-14 09:19 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\Google
2014-09-06 18:53 - 2011-05-20 11:22 - 00000000 ____D () C:\ProgramData\Skype
2014-09-06 18:52 - 2011-06-25 19:46 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\Skype
2014-09-06 08:41 - 2014-09-06 08:37 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\FRANCUSKI
2014-09-05 22:25 - 2012-07-21 10:50 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\ChomikBox
2014-09-05 21:52 - 2012-07-21 10:50 - 00000000 ____D () C:\Users\MAGIC MEDIA\.gstreamer-0.10
2014-08-30 11:09 - 2014-08-30 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Profesor Henry - FCE & CAE Course
2014-08-30 11:09 - 2011-10-16 21:38 - 00000000 ____D () C:\Program Files (x86)\Edgard
2014-08-30 11:08 - 2014-08-29 20:57 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\Profesor Henry 6.0 FCE & CAE Course (zybi06)
2014-08-30 10:33 - 2009-07-14 06:45 - 00503320 _____ () C:\windows\system32\FNTCACHE.DAT
2014-08-29 20:19 - 2014-08-29 20:19 - 00000000 __SHD () C:\found.000
2014-08-27 23:55 - 2014-08-27 23:55 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Profesor Henry 5.0 DEMO - poziom 3 & 4
2014-08-27 23:50 - 2014-08-27 23:50 - 00000000 ____D () C:\Users\MAGIC MEDIA\Documents\Optimizer Pro
2014-08-27 22:31 - 2014-08-27 22:31 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\PowerISO
2014-08-27 22:30 - 2014-08-27 22:30 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Roaming\OpenCandy
2014-08-27 22:21 - 2014-08-27 22:21 - 02209792 _____ () C:\Users\MAGIC MEDIA\Downloads\PowerISO_Sciagnij.pl.exe
2014-08-26 21:41 - 2014-08-26 21:40 - 00000000 ____D () C:\Users\MAGIC MEDIA\AppData\Local\{B215723E-9BDF-4B45-B684-CF08CDEFA416}
2014-08-23 04:07 - 2014-08-28 21:05 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-28 21:05 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-28 21:05 - 03163648 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-08-21 21:34 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-08-21 21:15 - 2014-08-20 21:04 - 00000000 ____D () C:\Users\MAGIC MEDIA\Desktop\Profesor Henry 6.0 FCE & CAE Course (slonkoiwonko)
Some content of TEMP:
====================
C:\Users\MAGIC MEDIA\AppData\Local\Temp\bitool.dll
C:\Users\MAGIC MEDIA\AppData\Local\Temp\DTLite4491-0356.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\hp_343D.tmp.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\hp_3DB0.tmp.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\hp_46C5.tmp.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\ICReinstall_DTLite_Downloader.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\ICReinstall_VideoConverterSetup.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\MailRuUpdater.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\MsgPlusUninstall.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\MSN9BE6.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\MSNDD37.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\Opera_NI_stable.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\optprosetup.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\PowerISO6.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\Quarantine.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\SkypeSetup.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\smt_istartsurf.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\sp-downloader.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\uninst.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\uninst1.exe
C:\Users\MAGIC MEDIA\AppData\Local\Temp\wmpfirefoxplugin.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe = & gt; File is digitally signed
C:\Windows\System32\wininit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\wininit.exe = & gt; File is digitally signed
C:\Windows\explorer.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\explorer.exe = & gt; File is digitally signed
C:\Windows\System32\svchost.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\svchost.exe = & gt; File is digitally signed
C:\Windows\System32\services.exe = & gt; File is digitally signed
C:\Windows\System32\User32.dll = & gt; File is digitally signed
C:\Windows\SysWOW64\User32.dll = & gt; File is digitally signed
C:\Windows\System32\userinit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\userinit.exe = & gt; File is digitally signed
C:\Windows\System32\rpcss.dll = & gt; File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys = & gt; File is digitally signed
LastRegBack: 2014-09-20 15:49
==================== End Of Log ============================