Witam serdecznie. Od wczoraj/dwóch dni przeglądając różne strony czy to Facebook czy to radio jakieś słucham, dostaje notorycznie od avasta powiadomienia "URL:MALL", i że zostały zablokowane a w "adresie" wpisane sa rozne strony, od ruskich po kubańskie, a po adresie jest /sync= i długi ciąg liter. Najpewniej jest to jakieś cholerstwo ściągniete z masą programów na komputerze, no ale nei mogę zlokalizować tego, ponadto dość uciążliwe jest słuchanie pięknej pani z Avasta "Wykryto zagrożenie" średnio 10 razy albo i więcej/dziennie. Logi w załącznikach, dodatkowo log z malware bo sam na własną rękę dałem wczoraj chyba scan i naprawę.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Dominik (administrator) on DOMVNVK on 04-04-2015 05:43:16
Running from C:\Users\Dominik\Desktop
Loaded Profiles: Dominik (Available profiles: Dominik)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) D:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\ProgramData\Internet w Cyfrowym Polsacie\OnlineUpdate\ouc.exe
( ) C:\Windows\System32\lxbccoms.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Avast Software) D:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
() C:\Program Files (x86)\screenSHU\screenSHU.exe
(Turtle Entertainment GmbH) C:\Program Files\EslWire\wire.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(AVAST Software) D:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avast Software s.r.o.) D:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [BCSSync] = & gt; C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] = & gt; C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] = & gt; C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] = & gt; C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [SwitchBoard] = & gt; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] = & gt; C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] = & gt; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] = & gt; C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] = & gt; D:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-03-31] (Avast Software s.r.o.)
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [Steam] = & gt; C:\Program Files (x86)\Steam\steam.exe [2888896 2015-03-24] (Valve Corporation)
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [AdobeBridge] = & gt; [X]
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [screenSHU] = & gt; C:\Program Files (x86)\screenSHU\screenSHU.exe [2112000 2013-09-04] ()
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [ALLUpdate] = & gt; C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2765256 2015-01-24] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [ALLPlayer WiFi Remote] = & gt; C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [DAEMON Tools Lite] = & gt; C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [Napisy24Update] = & gt; " C:\Program Files (x86)\Napisy24\Napisy24Update.exe " " sleep "
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [ESL Wire] = & gt; C:\Program Files\EslWire\wire.exe [3771904 2014-12-09] (Turtle Entertainment GmbH)
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\Run: [Skype] = & gt; C:\Program Files (x86)\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.)
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\MountPoints2: {1d8a23e7-d785-11e4-b4e1-001e101f57d0} - J:\setup.exe
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\MountPoints2: {5b7752e5-c4d8-11e4-a942-001e101f2500} - I:\setup.exe
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\MountPoints2: {e117e8ce-c8ac-11e4-9ae8-001e101f4e71} - G:\AutoRun.exe
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\MountPoints2: {e411b264-bd39-11e4-8d7e-4061864e3efd} - G:\AutoRun.exe
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\MountPoints2: {e411b26d-bd39-11e4-8d7e-4061864e3efd} - G:\AutoRun.exe
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\MountPoints2: {e4724fdf-bf49-11e4-8772-001e101f1838} - G:\AutoRun.exe
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\MountPoints2: {f184e9c9-be7a-11e4-b8e4-001e101f8924} - G:\AutoRun.exe
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\...\MountPoints2: {f184e9d2-be7a-11e4-b8e4-001e101f8924} - I:\LGAutoRun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] = & gt; C:\Windows\System32\SPReview\SPReview.exe [301568 2015-02-28] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk - & gt; C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Download.lnk
ShortcutTarget: Download.lnk - & gt; C:\ProgramData\{095f601e-c4dc-21dd-095f-f601ec4d807b}\Download.exe (No File)
ShellIconOverlayIdentifiers: [ " DropboxExt1 " ] - & gt; {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt2 " ] - & gt; {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt3 " ] - & gt; {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt4 " ] - & gt; {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt5 " ] - & gt; {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt6 " ] - & gt; {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt7 " ] - & gt; {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt8 " ] - & gt; {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; D:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)
ShellIconOverlayIdentifiers-x32: [ " DropboxExt1 " ] - & gt; {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ " DropboxExt2 " ] - & gt; {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ " DropboxExt3 " ] - & gt; {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ " DropboxExt4 " ] - & gt; {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ " DropboxExt5 " ] - & gt; {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ " DropboxExt6 " ] - & gt; {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ " DropboxExt7 " ] - & gt; {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ " DropboxExt8 " ] - & gt; {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Dominik\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction & lt; ======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=173
HKU\S-1-5-21-217352604-1638088537-1044836751-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
URLSearchHook: HKU\S-1-5-21-217352604-1638088537-1044836751-1000 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll ()
URLSearchHook: HKU\S-1-5-21-217352604-1638088537-1044836751-1000 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll ()
SearchScopes: HKU\.DEFAULT - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper - & gt; {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - & gt; C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security - & gt; {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - & gt; D:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-31] (Avast Software s.r.o.)
BHO: Skype Click to Call for Internet Explorer - & gt; {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - & gt; C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Office Document Cache Handler - & gt; {B4F3A835-0E21-4959-BA22-42B3008E02FF} - & gt; C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Panda Security Toolbar - & gt; {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - & gt; C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2015-02-10] ()
BHO-x32: Groove GFS Browser Helper - & gt; {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - & gt; C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - & gt; {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - & gt; C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-30] (Oracle Corporation)
BHO-x32: avast! Online Security - & gt; {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - & gt; D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-31] (Avast Software s.r.o.)
BHO-x32: Skype Click to Call for Internet Explorer - & gt; {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - & gt; C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - & gt; {B4F3A835-0E21-4959-BA22-42B3008E02FF} - & gt; C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Panda Security Toolbar - & gt; {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - & gt; C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2015-02-10] ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-30] (Oracle Corporation)
Toolbar: HKLM - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2015-02-10] ()
Toolbar: HKLM-x32 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2015-02-10] ()
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{2EAA44BC-9FDC-4A21-BBD2-2B2542D78F66}: [NameServer] 212.2.96.53 212.2.96.54
Tcpip\..\Interfaces\{38FD1835-505C-46FE-93F7-F3753CB4874C}: [NameServer] 212.2.96.53 212.2.96.54
Tcpip\..\Interfaces\{E985C016-D533-401F-8048-5D06B1FF647C}: [NameServer] 212.2.96.53 212.2.96.54
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-26] ()
FF Plugin: @microsoft.com/GENUINE - & gt; disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - & gt; C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-26] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - & gt; C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 - & gt; C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 - & gt; C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-30] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - & gt; disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - & gt; C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - & gt; C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-26] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-26] (Google Inc.)
FF Plugin-x32: Adobe Reader - & gt; C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - D:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-31]
Chrome:
=======
CHR HomePage: Default - & gt;
CHR StartupUrls: Default - & gt; " https://www.facebook.com/ " , " hxxp://www.mystartsearch.com/?type=hp & ts=1423161013 & from=smt & uid=395049983_1052514_80465F7D " , " hxxp://www.mystartsearch.com/?type=hppp & ts=1423161099 & from=smt & uid=395049983_1052514_80465F7D "
CHR Profile: C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-26]
CHR Extension: (Google Search) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-26]
CHR Extension: (Facebook Unseen) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmdhkalcecemojegheiohcghkamlipof [2015-02-26]
CHR Extension: (Block site) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2015-03-26]
CHR Extension: (AdBlock) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-26]
CHR Extension: (Avast Online Security) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-31]
CHR Extension: (Into The Mist) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgihmkgobaljfehcadcckdggpeojaadh [2015-02-26]
CHR Extension: (Google Wallet) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-26]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-31]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-30] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-31] (Avast Software s.r.o.)
R3 AvastVBoxSvc; D:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-31] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 celavimushost; C:\Program Files (x86)\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [124632 2015-03-18] (altPUG LLC)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174112 2014-12-03] (EasyAntiCheat Ltd)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-28] ()
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 Internet w Cyfrowym Polsacie. RunOuc; C:\Program Files (x86)\Internet w Cyfrowym Polsacie\UpdateDog\ouc.exe [246112 2015-02-26] ()
R2 lxbc_device; C:\Windows\system32\lxbccoms.exe [566704 2007-03-16] ( )
R2 lxbc_device; C:\Windows\SysWOW64\lxbccoms.exe [537520 2007-03-16] ( )
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [237424 2014-03-31] () [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [30720 2014-10-10] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [37376 2014-10-10] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93696 2014-10-09] (LG Electronics Inc.)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-31] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-31] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-31] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-31] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-31] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-03-31] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-31] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-03-31] ()
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-03-07] (Disc Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-04-04] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
R2 VBoxAswDrv; D:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-31] (Avast Software)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-04 05:43 - 2015-04-04 05:44 - 00024401 _____ () C:\Users\Dominik\Desktop\FRST.txt
2015-04-04 05:43 - 2015-04-04 05:43 - 00000000 ____D () C:\FRST
2015-04-04 05:42 - 2015-04-04 05:42 - 02095616 _____ (Farbar) C:\Users\Dominik\Desktop\FRST64.exe
2015-04-04 05:42 - 2015-04-04 05:42 - 00001089 _____ () C:\Users\Dominik\Desktop\Malwarebytes Anti-Malware scan.txt
2015-04-04 05:41 - 2015-04-04 05:41 - 00000000 ____D () C:\Users\Dominik\Desktop\fix
2015-04-04 05:40 - 2015-04-04 05:40 - 00002024 _____ () C:\Users\Dominik\Desktop\ADWCleanerDEL.txt
2015-04-04 05:36 - 2015-04-04 05:36 - 00001936 _____ () C:\Users\Dominik\Desktop\ADWCleanerScan.txt
2015-04-04 05:33 - 2015-04-04 05:36 - 00000000 ____D () C:\AdwCleaner
2015-04-04 05:32 - 2015-04-04 05:32 - 02208768 _____ () C:\Users\Dominik\Desktop\adwcleaner_4.200.exe
2015-04-04 04:29 - 2015-04-04 05:39 - 00002896 _____ () C:\Windows\System32\Tasks\AutoKMS
2015-04-03 19:59 - 2015-04-03 20:01 - 00000000 ____D () C:\Users\Dominik\Documents\Heroes of the Storm
2015-04-03 19:33 - 2015-04-03 19:33 - 00001207 _____ () C:\Users\Public\Desktop\Heroes of the Storm.lnk
2015-04-03 19:33 - 2015-04-03 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm
2015-04-03 19:14 - 2015-04-04 01:58 - 00000000 ____D () C:\Program Files (x86)\Heroes of the Storm
2015-04-03 19:04 - 2015-04-03 19:04 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Blizzard Entertainment
2015-04-03 19:03 - 2015-04-04 01:58 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Battle.net
2015-04-03 19:03 - 2015-04-03 20:01 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2015-04-03 19:03 - 2015-04-03 19:14 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Battle.net
2015-04-03 19:03 - 2015-04-03 19:03 - 00001144 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2015-04-03 19:03 - 2015-04-03 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-04-03 19:03 - 2015-04-03 19:03 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2015-04-03 19:00 - 2015-04-03 19:00 - 00000000 ____D () C:\ProgramData\Battle.net
2015-04-03 18:08 - 2015-04-03 18:08 - 02865208 _____ (Blizzard Entertainment) C:\Users\Dominik\Desktop\Battle.net-Setup-plPL.exe
2015-04-02 22:59 - 2015-04-02 22:59 - 00602112 _____ (OldTimer Tools) C:\Users\Dominik\Desktop\OTL.exe
2015-04-02 22:53 - 2015-04-02 22:53 - 01222144 _____ () C:\Users\Dominik\Desktop\RSITx64.exe
2015-04-02 22:53 - 2015-04-02 22:53 - 01135104 _____ (Farbar) C:\Users\Dominik\Desktop\FRST.exe
2015-04-01 22:45 - 2015-04-01 22:45 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Arktos Entertainment
2015-04-01 22:43 - 2015-04-01 22:43 - 00000000 ____D () C:\Users\Dominik\Documents\Arktos
2015-04-01 22:43 - 2015-04-01 22:43 - 00000000 ____D () C:\Users\Dominik\AppData\Local\CrashRpt
2015-04-01 22:43 - 2015-04-01 22:43 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Arktos
2015-04-01 22:35 - 2015-04-01 22:35 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronics Extreme
2015-04-01 22:35 - 2014-12-03 12:24 - 00174112 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2015-04-01 22:33 - 2015-04-01 22:33 - 00000000 ____D () C:\Program Files (x86)\Electronics Extreme
2015-03-31 14:37 - 2015-03-31 20:15 - 00000000 ___RD () C:\Users\Dominik\Dropbox
2015-03-31 14:36 - 2015-03-31 14:36 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-31 14:35 - 2015-03-31 14:35 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2015-03-31 14:35 - 2015-03-31 14:35 - 00000000 ____D () C:\Windows\system32\vbox
2015-03-31 14:34 - 2015-03-31 14:38 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Dropbox
2015-03-31 14:33 - 2015-03-31 14:33 - 00000739 _____ () C:\Users\Dominik\Desktop\Cities Skylines.lnk
2015-03-31 14:33 - 2015-03-31 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cities Skyliness
2015-03-31 14:31 - 2015-03-31 14:31 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\AVAST Software
2015-03-31 14:30 - 2015-03-31 14:30 - 00000982 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-03-31 14:30 - 2015-03-31 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-03-31 14:29 - 2015-04-02 20:29 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-03-31 14:27 - 2015-03-31 14:26 - 00136752 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-03-31 14:26 - 2015-03-31 14:26 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-03-31 14:26 - 2015-03-31 14:26 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-03-31 14:26 - 2015-03-31 14:26 - 00271200 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-03-31 14:26 - 2015-03-31 14:26 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-03-31 14:26 - 2015-03-31 14:26 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-03-31 14:26 - 2015-03-31 14:26 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-03-31 14:26 - 2015-03-31 14:26 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-03-31 14:26 - 2015-03-31 14:25 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-03-31 14:25 - 2015-03-31 14:25 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-03-31 14:23 - 2015-03-31 14:23 - 03299472 ____N (Avast Software s.r.o.) C:\Users\Public\Documents\aswOfferTool.exe
2015-03-31 14:23 - 2015-03-31 14:23 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-03-30 23:37 - 2015-03-30 23:37 - 00000000 ____D () C:\ProgramData\Sun
2015-03-30 23:36 - 2015-03-30 23:36 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-03-30 23:36 - 2015-03-30 23:36 - 00000000 ____D () C:\Windows\Sun
2015-03-30 23:36 - 2015-03-30 23:36 - 00000000 ____D () C:\ProgramData\Oracle
2015-03-30 23:36 - 2015-03-30 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-03-30 23:36 - 2015-03-30 23:36 - 00000000 ____D () C:\Program Files (x86)\Java
2015-03-26 18:07 - 2015-03-26 18:07 - 00000000 ____D () C:\Users\Dominik\Documents\KONAMI
2015-03-26 18:07 - 2015-03-26 18:07 - 00000000 ____D () C:\ProgramData\KONAMI
2015-03-26 17:54 - 2015-03-26 17:54 - 00000615 _____ () C:\Users\Public\Desktop\Pro Evolution Soccer 2015.lnk
2015-03-26 17:54 - 2015-03-26 17:54 - 00000615 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pro Evolution Soccer 2015.lnk
2015-03-26 17:23 - 2015-03-26 17:23 - 00000000 _____ () C:\Windows\system32\Drivers\etc\hosts.txt
2015-03-26 17:12 - 2015-03-26 17:12 - 00000000 ____D () C:\ProgramData\Origin
2015-03-25 21:55 - 2015-03-25 22:02 - 00000000 ____D () C:\Users\Dominik\Documents\Euro Truck Simulator 2
2015-03-25 21:55 - 2015-03-25 21:55 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 v1.15.0.3s (19 DLC)(Public Beta)
2015-03-25 21:55 - 2015-03-25 21:55 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
2015-03-25 21:47 - 2015-03-25 21:47 - 00000000 ____D () C:\2-click run
2015-03-25 16:27 - 2015-03-30 23:19 - 357905310 _____ () C:\Windows\MEMORY.DMP
2015-03-25 16:27 - 2015-03-30 23:19 - 00000000 ____D () C:\Windows\Minidump
2015-03-25 16:27 - 2015-03-25 16:27 - 00275232 _____ () C:\Windows\Minidump\032515-21450-01.dmp
2015-03-24 22:23 - 2015-03-24 22:23 - 00031720 _____ () C:\Users\Dominik\AppData\Local\recently-used.xbel
2015-03-24 20:12 - 2015-03-31 14:44 - 00000000 ____D () C:\Users\Dominik\Desktop\miniatura
2015-03-24 19:10 - 2015-03-24 19:10 - 00001075 _____ () C:\Users\Dominik\Desktop\AMF.lnk
2015-03-24 19:04 - 2015-03-24 22:23 - 00000000 ____D () C:\Users\Dominik\AppData\Local\gtk-2.0
2015-03-24 19:00 - 2015-03-24 19:00 - 00000000 ____D () C:\Users\Dominik\.thumbnails
2015-03-24 18:58 - 2015-03-24 22:37 - 00000000 ____D () C:\Users\Dominik\.gimp-2.8
2015-03-24 18:58 - 2015-03-24 18:58 - 00000000 ____D () C:\Users\Dominik\AppData\Local\gegl-0.2
2015-03-24 18:57 - 2015-03-24 18:57 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-03-24 18:56 - 2015-03-24 18:57 - 00000000 ____D () C:\Program Files\GIMP 2
2015-03-24 17:45 - 2015-03-24 18:13 - 129254315 _____ () C:\Users\Dominik\Documents\Untitled1.wmv
2015-03-24 03:47 - 2015-03-24 03:47 - 00001031 _____ () C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\CDRoller.lnk
2015-03-24 03:47 - 2015-03-24 03:47 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\CDROLLER
2015-03-24 03:47 - 2015-03-24 03:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDRoller 10.1
2015-03-24 03:47 - 2015-03-24 03:47 - 00000000 ____D () C:\Program Files (x86)\CDRoller
2015-03-24 02:47 - 2015-03-24 02:47 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BadCopy Pro
2015-03-24 02:47 - 2015-03-24 02:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BadCopy Pro
2015-03-24 02:47 - 2015-03-24 02:47 - 00000000 ____D () C:\Program Files (x86)\Jufsoft
2015-03-24 02:42 - 2015-03-24 02:42 - 00001192 _____ () C:\111111-profile.csv
2015-03-24 02:40 - 2015-03-24 02:41 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\UBot Studio
2015-03-24 02:20 - 2015-03-24 02:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
2015-03-24 02:20 - 2015-03-24 02:20 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2015-03-24 02:09 - 2015-03-24 02:23 - 64621985 _____ () C:\Users\Dominik\Documents\Untitled.wmv
2015-03-23 02:46 - 2015-03-23 02:46 - 00000000 ____D () C:\Users\Dominik\Desktop\Album_1
2015-03-22 01:23 - 2015-03-22 01:35 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Tropico 5
2015-03-22 01:22 - 2015-03-22 01:22 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Kalypso Media
2015-03-21 17:36 - 2015-03-21 17:36 - 00000000 ____D () C:\Users\Dominik\Tracing
2015-03-21 02:57 - 2015-03-21 02:57 - 00000220 _____ () C:\Users\Dominik\Desktop\Sid Meier's Civilization V.url
2015-03-21 02:57 - 2015-03-21 02:57 - 00000219 _____ () C:\Users\Dominik\Desktop\Counter-Strike Source.url
2015-03-21 02:57 - 2015-03-21 02:57 - 00000219 _____ () C:\Users\Dominik\Desktop\Counter-Strike Global Offensive.url
2015-03-21 02:57 - 2015-03-21 02:57 - 00000218 _____ () C:\Users\Dominik\Desktop\Counter-Strike.url
2015-03-20 18:50 - 2015-04-04 05:39 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-20 18:50 - 2015-04-02 23:04 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-03-20 18:50 - 2015-04-02 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-03-20 18:50 - 2015-04-02 23:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-20 18:50 - 2015-03-20 18:50 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-20 18:50 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-20 18:50 - 2015-03-17 06:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-20 18:50 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-20 17:36 - 2015-04-02 20:23 - 00000020 _____ () C:\Users\Dominik\AppData\Roaming\appdataFr3.bin
2015-03-19 19:57 - 2015-03-19 20:03 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\TP-LINK
2015-03-19 19:57 - 2015-03-19 19:57 - 00002267 _____ () C:\Users\Public\Desktop\TP-LINK Wireless Configuration Utility.lnk
2015-03-19 19:57 - 2015-03-19 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2015-03-19 19:57 - 2015-03-19 19:57 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2015-03-19 19:56 - 2015-03-19 19:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-19 19:56 - 2013-06-28 15:49 - 01930240 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athurx.sys
2015-03-19 19:56 - 2013-06-28 15:49 - 01930240 _____ (Atheros Communications, Inc.) C:\Windows\system32\athurx.sys
2015-03-19 19:56 - 2013-06-28 15:49 - 00007518 _____ () C:\Windows\system32\athurextx.cat
2015-03-19 19:55 - 2015-03-19 19:57 - 00000000 ____D () C:\ProgramData\TP-LINK
2015-03-19 17:36 - 2015-03-20 02:00 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-03-19 17:31 - 2015-03-19 17:31 - 00000923 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-Deklaracje.lnk
2015-03-19 17:31 - 2015-03-19 17:31 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
2015-03-19 17:31 - 2015-03-19 17:31 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\e-Deklaracje
2015-03-19 17:31 - 2015-03-19 17:31 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-03-19 17:31 - 2015-03-19 17:31 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-03-19 17:31 - 2015-03-19 17:31 - 00000000 ____D () C:\Program Files (x86)\e-Deklaracje
2015-03-16 21:15 - 2015-03-16 21:15 - 00000000 ____D () C:\ProgramData\Celavimus
2015-03-16 21:13 - 2015-04-04 05:38 - 00000000 ____D () C:\Users\Dominik\AppData\Local\ESL Wire Game Client
2015-03-16 21:13 - 2015-03-16 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESL Wire
2015-03-16 21:12 - 2015-03-16 21:13 - 00000000 ____D () C:\Program Files\EslWire
2015-03-16 21:12 - 2015-03-16 21:12 - 00000000 ____D () C:\ProgramData\ESL Wire
2015-03-16 21:10 - 2015-03-26 17:12 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-16 21:09 - 2015-03-16 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEVO Client
2015-03-16 21:09 - 2015-03-16 21:09 - 00000000 ____D () C:\Program Files (x86)\CEVO
2015-03-16 19:46 - 2015-03-16 19:46 - 00000725 _____ () C:\Users\Dominik\Desktop\Cities XXL.lnk
2015-03-16 19:46 - 2015-03-16 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cities XXL
2015-03-16 17:38 - 2015-03-24 18:46 - 00000000 ____D () C:\Users\Dominik\Desktop\f0ldr
2015-03-16 06:13 - 2015-03-16 06:13 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Focus Home Interactive
2015-03-16 06:13 - 2015-03-16 06:13 - 00000000 ____D () C:\ProgramData\Steam
2015-03-15 20:40 - 2015-03-15 20:40 - 00000000 ____D () C:\Users\Dominik\Documents\Colossal Order
2015-03-15 20:40 - 2015-03-15 20:40 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Colossal Order
2015-03-15 20:40 - 2015-03-15 20:40 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\.mono
2015-03-15 20:40 - 2015-03-15 20:40 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Colossal Order
2015-03-15 20:40 - 2015-03-15 20:40 - 00000000 ____D () C:\ProgramData\.mono
2015-03-15 20:39 - 2015-03-15 20:39 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Steam
2015-03-15 20:34 - 2015-03-15 20:34 - 00000837 _____ () C:\Users\Public\Desktop\Cities Skylines.lnk
2015-03-15 20:34 - 2015-03-15 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cities Skylines
2015-03-13 02:55 - 2015-03-13 02:55 - 00000000 ____D () C:\Program Files (x86)\PlayReady
2015-03-13 02:52 - 2015-03-14 04:05 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\ipla
2015-03-13 02:52 - 2015-03-13 02:56 - 00000000 ____D () C:\ProgramData\ipla
2015-03-13 02:51 - 2015-03-13 02:52 - 00000000 ____D () C:\ProgramData\RDRM
2015-03-13 02:51 - 2015-03-13 02:52 - 00000000 ____D () C:\Program Files (x86)\ipla
2015-03-13 02:51 - 2015-03-13 02:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2015-03-13 02:51 - 2015-03-13 02:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ipla
2015-03-13 02:51 - 2015-03-13 02:51 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2015-03-13 02:51 - 2013-12-01 14:10 - 00257624 _____ () C:\Windows\system32\unrar64.dll
2015-03-13 02:51 - 2013-12-01 14:10 - 00218200 _____ () C:\Windows\SysWOW64\unrar.dll
2015-03-13 02:50 - 2015-03-13 02:50 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2015-03-13 02:50 - 2015-03-13 02:50 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2015-03-12 18:10 - 2015-03-12 18:10 - 00000000 ____D () C:\ProgramData\MobileBrServ
2015-03-11 21:36 - 2015-03-11 21:36 - 00986992 _____ () C:\Users\Dominik\ts3_recording_15_03_11_20_36_25.wav
2015-03-11 10:32 - 2015-03-24 17:43 - 00000000 ____D () C:\Users\Dominik\Documents\OFX Presets
2015-03-11 10:01 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 10:01 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 10:01 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 10:01 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 10:01 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 10:01 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 10:01 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 10:01 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 10:01 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 10:01 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 10:01 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 10:01 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 10:01 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 10:01 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 10:01 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 10:01 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 10:01 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 10:01 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 10:01 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 10:01 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 10:01 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 10:01 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 10:01 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 10:01 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 10:01 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 10:01 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 10:01 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 10:01 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 10:01 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 10:01 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 10:01 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 10:01 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 10:01 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 10:01 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 10:01 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 10:01 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 10:01 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 10:01 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 10:01 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 10:01 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 10:01 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 10:01 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 10:01 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 10:01 - 2014-06-28 02:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 10:01 - 2014-06-28 02:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 10:00 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 10:00 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 10:00 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 10:00 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 10:00 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 10:00 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 10:00 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 10:00 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 10:00 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 10:00 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 10:00 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 10:00 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 10:00 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 10:00 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 10:00 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 10:00 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 10:00 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 10:00 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 10:00 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 10:00 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 10:00 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 10:00 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 10:00 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 10:00 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 10:00 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 10:00 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 10:00 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 10:00 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 10:00 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 10:00 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 10:00 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 10:00 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 10:00 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 10:00 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 10:00 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 10:00 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 10:00 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 10:00 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 10:00 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 10:00 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 10:00 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 10:00 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 10:00 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 10:00 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 10:00 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 10:00 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 10:00 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 10:00 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 10:00 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 10:00 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 10:00 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 10:00 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 10:00 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 10:00 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 10:00 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 10:00 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 10:00 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 10:00 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 10:00 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 10:00 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 10:00 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 10:00 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 10:00 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 10:00 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 10:00 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 10:00 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 10:00 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 10:00 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 10:00 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 10:00 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 10:00 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 10:00 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 10:00 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 10:00 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 10:00 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 10:00 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 10:00 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 10:00 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 10:00 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 10:00 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 10:00 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 10:00 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 10:00 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-11 10:00 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 10:00 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 10:00 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 10:00 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 10:00 - 2015-01-31 05:48 - 01113088 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-11 10:00 - 2015-01-31 05:05 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 10:00 - 2015-01-31 05:04 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-03-11 10:00 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 10:00 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 10:00 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-09 23:22 - 2015-03-09 23:22 - 00000000 ____D () C:\Users\Dominik\AppData\Local\LG Electronics
2015-03-09 23:22 - 2015-03-09 23:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite
2015-03-09 23:20 - 2015-03-09 23:22 - 00000000 ____D () C:\Program Files (x86)\LG Electronics
2015-03-09 01:46 - 2015-04-04 05:38 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2015-03-07 20:36 - 2015-03-07 20:36 - 00000000 ____D () C:\Users\Dominik\Documents\My Cheat Tables
2015-03-07 20:33 - 2015-03-07 20:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2015-03-07 17:59 - 2015-03-20 17:15 - 00000000 ____D () C:\ProgramData\{095f601e-c4dc-21dd-095f-f601ec4d807b}
2015-03-07 17:59 - 2015-03-07 17:59 - 00000000 __SHD () C:\Users\Dominik\AppData\Local\EmieUserList
2015-03-07 17:59 - 2015-03-07 17:59 - 00000000 __SHD () C:\Users\Dominik\AppData\Local\EmieSiteList
2015-03-07 17:59 - 2015-03-07 17:59 - 00000000 __SHD () C:\Users\Dominik\AppData\Local\EmieBrowserModeList
2015-03-07 17:35 - 2015-03-07 17:35 - 00000000 ____D () C:\Users\Public\Documents\Sports Interactive
2015-03-07 17:35 - 2015-03-07 17:35 - 00000000 ____D () C:\Users\Dominik\Documents\Sports Interactive
2015-03-07 17:35 - 2015-03-07 17:35 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Sports Interactive
2015-03-07 17:31 - 2015-03-07 17:31 - 00001062 _____ () C:\Users\Public\Desktop\Football Manager 2015.lnk
2015-03-07 17:31 - 2015-03-07 17:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Football Manager 2015
2015-03-07 17:28 - 2015-03-22 04:06 - 00000000 ____D () C:\Program Files (x86)\Football Manager 2015
2015-03-07 17:27 - 2015-03-07 17:27 - 00000000 ____D () C:\Windows\Downloaded Installations
2015-03-07 17:27 - 2015-03-07 17:27 - 00000000 ____D () C:\Program Files (x86)\Disc Soft
2015-03-07 17:25 - 2015-04-01 22:28 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\DAEMON Tools Lite
2015-03-07 17:25 - 2015-03-07 17:27 - 00000000 ____D () C:\Program Files\DAEMON Tools Lite
2015-03-07 17:25 - 2015-03-07 17:25 - 00030352 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2015-03-07 17:25 - 2015-03-07 17:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-03-07 17:25 - 2015-03-07 17:25 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-04 05:42 - 2015-02-25 23:58 - 01263767 _____ () C:\Windows\WindowsUpdate.log
2015-04-04 05:41 - 2015-02-26 00:40 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-04 05:40 - 2015-02-27 21:22 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Skype
2015-04-04 05:39 - 2015-02-28 03:26 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2015-04-04 05:39 - 2015-02-26 00:34 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-04 05:38 - 2015-02-26 00:52 - 00000000 ____D () C:\Users\Dominik\AppData\Local\screenSHU
2015-04-04 05:38 - 2015-02-26 00:34 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-04 05:37 - 2015-02-26 16:39 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-04 05:37 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-04 05:37 - 2009-07-14 06:51 - 00047246 _____ () C:\Windows\setupact.log
2015-04-04 05:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2015-04-04 05:26 - 2015-03-01 18:20 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\foobar2000
2015-04-04 04:33 - 2009-07-14 06:45 - 00017072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-04 04:33 - 2009-07-14 06:45 - 00017072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-04 04:29 - 2015-02-26 16:03 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\TS3Client
2015-04-04 00:31 - 2015-02-26 00:30 - 00741100 _____ () C:\Windows\system32\perfh015.dat
2015-04-04 00:31 - 2015-02-26 00:30 - 00155696 _____ () C:\Windows\system32\perfc015.dat
2015-04-04 00:31 - 2009-07-14 07:13 - 01671400 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-03 03:46 - 2015-02-26 00:34 - 00002189 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-02 06:05 - 2015-02-28 02:22 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\uTorrent
2015-04-01 13:40 - 2015-02-26 00:27 - 00019796 _____ () C:\Windows\PFRO.log
2015-03-31 23:11 - 2015-03-01 17:35 - 00000313 _____ () C:\Windows\Lexstat.ini
2015-03-31 21:35 - 2015-02-28 03:50 - 00000020 _____ () C:\Windows\capsys184523.log
2015-03-31 14:44 - 2015-02-28 00:43 - 00000000 ____D () C:\Users\Dominik\Desktop\Muzyka
2015-03-31 14:37 - 2015-02-26 00:01 - 00000000 ____D () C:\Users\Dominik
2015-03-28 03:57 - 2015-02-26 00:49 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-03-26 17:13 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-25 16:27 - 2009-07-14 06:45 - 05025272 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-24 22:41 - 2015-03-04 17:26 - 00000132 _____ () C:\Users\Dominik\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2015-03-24 18:35 - 2015-02-26 00:07 - 00127800 _____ () C:\Users\Dominik\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-21 17:36 - 2015-02-27 21:21 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-03-21 17:36 - 2015-02-27 21:21 - 00000000 ____D () C:\ProgramData\Skype
2015-03-21 02:51 - 2015-03-01 16:49 - 00000000 ____D () C:\PIT Format 2014
2015-03-20 19:10 - 2015-02-26 08:55 - 00000000 ____D () C:\Windows\Panther
2015-03-19 23:55 - 2015-02-28 14:44 - 00000000 ____D () C:\ProgramData\Adobe
2015-03-19 23:54 - 2015-02-26 18:34 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Adobe
2015-03-19 23:54 - 2015-02-26 16:37 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Adobe
2015-03-19 17:36 - 2015-02-28 14:49 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-03-19 13:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-03-14 04:52 - 2015-02-28 19:58 - 00000000 ____D () C:\Users\Dominik\Documents\My Games
2015-03-13 19:36 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-13 16:16 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-03-12 13:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 13:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-12 00:46 - 2015-02-28 03:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-12 00:41 - 2015-02-26 00:13 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-12 00:38 - 2015-02-26 00:13 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-12 00:36 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini
2015-03-09 23:39 - 2015-02-26 01:20 - 00062852 _____ () C:\Windows\DirectX.log
2015-03-09 23:27 - 2015-02-28 02:56 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2015-03-09 23:25 - 2015-02-28 02:56 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Panda Security
2015-03-09 23:25 - 2015-02-28 02:55 - 00000000 ____D () C:\ProgramData\Panda Security
2015-03-09 21:47 - 2015-02-26 16:02 - 00001011 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2015-03-09 18:03 - 2015-02-28 02:56 - 00000000 ____D () C:\ProgramData\panda_url_filtering
==================== Files in the root of some directories =======
2015-03-20 17:36 - 2015-04-02 20:23 - 0000020 _____ () C:\Users\Dominik\AppData\Roaming\appdataFr3.bin
2015-03-04 17:26 - 2015-03-24 22:41 - 0000132 _____ () C:\Users\Dominik\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2015-03-24 22:23 - 2015-03-24 22:23 - 0031720 _____ () C:\Users\Dominik\AppData\Local\recently-used.xbel
Some content of TEMP:
====================
C:\Users\Dominik\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpovorof.dll
C:\Users\Dominik\AppData\Local\Temp\EslWireSetup-1.18.0.8101-x64.exe
C:\Users\Dominik\AppData\Local\Temp\Quarantine.exe
C:\Users\Dominik\AppData\Local\Temp\SETUP.EXE
C:\Users\Dominik\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Dominik\AppData\Local\Temp\sqlite3.dll
C:\Users\Dominik\AppData\Local\Temp\{E1376B11-5014-4449-BCF7-2C697DC69B89}.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe = & gt; File is digitally signed
C:\Windows\System32\wininit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\wininit.exe = & gt; File is digitally signed
C:\Windows\explorer.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\explorer.exe = & gt; File is digitally signed
C:\Windows\System32\svchost.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\svchost.exe = & gt; File is digitally signed
C:\Windows\System32\services.exe = & gt; File is digitally signed
C:\Windows\System32\User32.dll = & gt; File is digitally signed
C:\Windows\SysWOW64\User32.dll = & gt; File is digitally signed
C:\Windows\System32\userinit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\userinit.exe = & gt; File is digitally signed
C:\Windows\System32\rpcss.dll = & gt; File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys = & gt; File is digitally signed
LastRegBack: 2015-03-19 13:02
==================== End Of Log ============================