prosze o pomoc
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-07-2014 01
Ran by ACER (administrator) on ACER-COMP on 18-07-2014 11:27:04
Running from C:\Users\ACER\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgam.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgnsa.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgchsva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgtray.exe
() C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70_0\opera.exe
() C:\Program Files (x86)\Opera\22.0.1471.70_0\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70_0\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70_0\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70_0\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70_0\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70_0\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70_0\opera.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [AVG_TRAY] = & gt; C:\Program Files (x86)\AVG\AVG10\avgtray.exe [2345592 2012-08-01] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2885548269-2767924885-4212688080-1000\...\Run: [SpybotSD TeaTimer] = & gt; C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-2885548269-2767924885-4212688080-1000\...\Run: [CMD] = & gt; cmd.exe /c start http://extendedunlimited.org & & exit & lt; ===== ATTENTION
HKU\S-1-5-21-2885548269-2767924885-4212688080-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\Users\ACER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk
ShortcutTarget: AdFender.lnk - & gt; C:\Program Files (x86)\AdFender\AdFender.exe (AdFender, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk
ShortcutTarget: AdFender.lnk - & gt; C:\Program Files (x86)\AdFender\AdFender.exe (AdFender, Inc.)
ShellIconOverlayIdentifiers: GGDriveOverlay1 - & gt; {E68D0A50-3C40-4712-B90D-DCFA93FF2534} = & gt; C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 - & gt; {E68D0A51-3C40-4712-B90D-DCFA93FF2534} = & gt; C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 - & gt; {E68D0A52-3C40-4712-B90D-DCFA93FF2534} = & gt; C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 - & gt; {E68D0A53-3C40-4712-B90D-DCFA93FF2534} = & gt; C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
BootExecute: autocheck autochk * sdnclean64.exeC:\Program Files (x86)\AVG\AVG10\avgchsva.exe /syncC:\Program Files (x86)\AVG\AVG10\avgrsa.exe /sync /restart
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://interia.pl
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie & ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
BHO-x32: Spybot-S & D IE Protection - & gt; {53707962-6F74-2D53-2644-206D7942484F} - & gt; C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll ( )
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG10\Firefox4
FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG10\Firefox4 [2014-06-29]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
==================== Services (Whitelisted) =================
R2 avgfws; C:\Program Files (x86)\AVG\AVG10\avgfws.exe [2708024 2011-03-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [7391072 2012-01-31] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe [269520 2011-02-08] (AVG Technologies CZ, s.r.o.)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-12-18] (AVG)
==================== Drivers (Whitelisted) ====================
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57696 2010-07-12] (AVG Technologies CZ, s.r.o.)
R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\AVGIDSDriver.Sys [118864 2011-05-27] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSEH; C:\Windows\System32\DRIVERS\AVGIDSEH.Sys [26704 2011-02-22] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\AVGIDSFilter.Sys [29264 2011-02-10] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [312160 2012-11-12] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [41552 2011-03-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [37456 2011-03-16] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [377936 2011-04-05] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-06-29] (AVG Technologies)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2014-05-02] (Duplex Secure Ltd.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
U3 alscywzx; C:\Windows\System32\Drivers\alscywzx.sys [0 ] (Advanced Micro Devices)
S3 cleanhlp; \??\C:\Users\ACER\Downloads\EmsisoftEmergencyKit\Run\cleanhlp64.sys [X]
S1 iSafeKrnlR3; \??\C:\Program Files (x86)\iSafe\iSafeKrnlR3.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-18 11:26 - 2014-07-18 11:27 - 00010519 _____ () C:\Users\ACER\Desktop\FRST.txt
2014-07-18 11:22 - 2014-07-18 11:22 - 02086912 _____ (Farbar) C:\Users\ACER\Desktop\FRST64.exe
2014-07-18 11:14 - 2014-07-18 11:14 - 00448512 _____ (OldTimer Tools) C:\Users\ACER\Desktop\TFC.exe
2014-07-18 11:03 - 2014-07-18 11:03 - 00000000 ____D () C:\AdwCleaner
2014-07-18 10:14 - 2014-07-18 10:14 - 00000210 _____ () C:\Users\ACER\Documents\fixlist.txt
2014-07-18 09:57 - 2014-07-18 11:27 - 00000000 ____D () C:\FRST
2014-07-17 12:01 - 2014-07-17 12:01 - 00003860 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1405591069
2014-07-17 11:57 - 2014-07-17 11:57 - 00001143 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-07-17 11:57 - 2014-07-17 11:57 - 00001143 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-07-17 11:48 - 2014-07-18 11:04 - 00001944 _____ () C:\Windows\PFRO.log
2014-07-17 11:48 - 2014-07-18 11:04 - 00000560 _____ () C:\Windows\setupact.log
2014-07-17 11:48 - 2014-07-17 11:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-15 16:38 - 2014-07-15 16:38 - 00003322 _____ () C:\Windows\System32\Tasks\{7F493243-AAD0-4981-A5FF-5E81B6ADAD37}
2014-07-12 10:14 - 2014-07-12 10:14 - 00003052 _____ () C:\Windows\System32\Tasks\Steam-S-1-8-22-9865GUI
2014-07-12 10:14 - 2014-07-12 10:14 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\Steam
2014-07-09 16:24 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 16:24 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 16:24 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 16:24 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 16:24 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 16:24 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 16:24 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 16:24 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 16:24 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 16:24 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 16:24 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 16:24 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 16:24 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 16:24 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 16:24 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 16:24 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 16:24 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 16:24 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 16:24 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 16:24 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 16:24 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 16:24 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 16:24 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 16:24 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 16:24 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 16:24 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 16:24 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 16:24 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 16:24 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 16:24 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-09 16:24 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-09 16:24 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-09 16:24 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 16:24 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 16:24 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 16:24 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-09 16:24 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 16:24 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 16:24 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 16:24 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 16:24 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-09 16:24 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 16:24 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 16:24 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-09 16:24 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 16:24 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 16:24 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 16:24 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 16:24 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 16:24 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 16:24 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-09 16:24 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 16:24 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 16:24 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 16:24 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 16:24 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 16:24 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 16:24 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 16:24 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 16:24 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 16:24 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 16:24 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 16:24 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 16:24 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 16:24 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-09 16:24 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 16:24 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 16:24 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 16:24 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 16:24 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 16:24 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 16:24 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 16:24 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 16:24 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-09 16:24 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-09 16:24 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-09 16:24 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-09 16:24 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-09 16:24 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-09 16:24 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-09 16:24 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-03 13:42 - 2014-07-03 13:42 - 27992636 _____ ( ) C:\Users\ACER\Downloads\K-Lite_Codec_Pack_Full.exe
2014-07-03 13:42 - 2014-07-03 13:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-07-03 13:42 - 2014-07-03 13:42 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-07-03 13:42 - 2014-06-14 16:03 - 00260696 _____ () C:\Windows\system32\unrar64.dll
2014-07-01 19:17 - 2014-07-01 19:17 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-06-29 19:19 - 2014-06-29 19:19 - 00000000 ____D () C:\Users\ACER\AppData\Local\Sniper3
2014-06-29 15:02 - 2014-06-29 20:06 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-06-29 15:02 - 2014-06-29 15:02 - 00001272 _____ () C:\Users\ACER\Desktop\Spybot - Search & Destroy.lnk
2014-06-29 15:02 - 2014-06-29 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
2014-06-29 13:56 - 2014-06-29 13:55 - 00449906 ____R () C:\Windows\system32\Drivers\etc\hosts.20140629-135632.backup
2014-06-29 13:55 - 2014-06-29 10:14 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts.20140629-135542.backup
2014-06-29 13:09 - 2014-06-29 13:09 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-06-29 13:04 - 2014-07-01 19:29 - 00099448 _____ () C:\Users\ACER\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-29 12:29 - 2014-06-29 12:29 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\AVG10
2014-06-29 12:28 - 2014-06-29 12:27 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-06-29 12:26 - 2014-06-29 12:26 - 00000993 _____ () C:\Users\Public\Desktop\AVG 2011.lnk
2014-06-29 12:26 - 2014-06-29 12:26 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\AVG
2014-06-29 12:26 - 2014-06-29 12:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2011
2014-06-29 12:25 - 2014-07-18 09:14 - 00000000 ____D () C:\Windows\system32\Drivers\AVG
2014-06-29 12:25 - 2014-06-29 12:28 - 00000000 ____D () C:\ProgramData\AVG10
2014-06-29 12:20 - 2014-06-29 12:29 - 00000000 ____D () C:\ProgramData\MFAData
2014-06-29 12:07 - 2014-06-29 12:07 - 00000000 ____D () C:\Windows\system32\log
2014-06-29 12:07 - 2014-06-27 11:54 - 00044544 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys
2014-06-29 11:38 - 2014-06-29 11:55 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-29 10:42 - 2014-06-29 10:42 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-06-29 10:42 - 2014-06-29 10:42 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-06-29 10:29 - 2014-06-29 10:29 - 00000000 ____D () C:\ProgramData\Grisoft
2014-06-29 10:28 - 2014-06-29 13:59 - 00000085 _____ () C:\Windows\wininit.ini
2014-06-29 10:05 - 2014-06-29 10:15 - 00000000 ____D () C:\Windows\erdnt
2014-06-29 09:58 - 2014-06-29 09:58 - 00000000 ____D () C:\Program Files (x86)\PC Tools
2014-06-29 09:55 - 2014-06-29 10:21 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-29 09:55 - 2014-06-29 10:20 - 00000000 ____D () C:\ProgramData\PC Tools
2014-06-29 09:55 - 2014-06-29 09:56 - 02119683 _____ () C:\Windows\system32\Drivers\Cat.DB
2014-06-29 09:55 - 2014-06-29 09:55 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\TestApp
2014-06-29 09:55 - 2012-11-01 15:35 - 00253256 _____ (PC Tools) C:\Windows\system32\Drivers\PCTSD64.sys
2014-06-29 09:41 - 2014-06-29 09:41 - 00000000 ____D () C:\Program Files (x86)\Enigma Software Group
2014-06-29 09:37 - 2014-06-01 17:18 - 92708840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe
2014-06-29 09:28 - 2014-06-29 09:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-29 09:21 - 2014-06-29 09:38 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-06-29 09:13 - 2014-07-17 11:46 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-29 09:13 - 2014-06-29 20:06 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-06-29 09:13 - 2014-06-29 09:13 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-06-29 08:32 - 2014-06-29 08:32 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-06-29 08:32 - 2014-06-29 08:32 - 00000000 _____ () C:\autoexec.bat
2014-06-28 11:32 - 2014-06-29 11:27 - 00000000 _RSHD () C:\ProgramData\soundmng
2014-06-28 11:32 - 2014-06-29 10:13 - 00000000 _RSHD () C:\Users\ACER\AppData\Roaming\soundmng
2014-06-28 11:32 - 2014-06-28 11:32 - 00073728 _____ () C:\Users\ACER\AppData\Local\Web Data
2014-06-27 19:40 - 2014-06-27 19:40 - 00000000 ____D () C:\Users\ACER\AppData\Local\Avg2014
2014-06-25 17:52 - 2014-06-25 17:52 - 00000000 ____D () C:\Users\ACER\Documents\My Cheat Tables
2014-06-24 19:23 - 2014-06-24 19:23 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-06-24 19:23 - 2014-06-24 19:23 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-06-24 19:23 - 2014-06-24 19:23 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-06-24 19:23 - 2014-06-24 19:23 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-06-24 19:23 - 2014-06-24 19:23 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-06-23 11:16 - 2014-06-23 11:35 - 00000000 ____D () C:\Users\ACER\Documents\Remedy
==================== One Month Modified Files and Folders =======
2014-07-18 11:27 - 2014-07-18 11:26 - 00010519 _____ () C:\Users\ACER\Desktop\FRST.txt
2014-07-18 11:27 - 2014-07-18 09:57 - 00000000 ____D () C:\FRST
2014-07-18 11:22 - 2014-07-18 11:22 - 02086912 _____ (Farbar) C:\Users\ACER\Desktop\FRST64.exe
2014-07-18 11:19 - 2014-04-24 22:34 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-18 11:17 - 2014-04-24 11:44 - 01095307 _____ () C:\Windows\WindowsUpdate.log
2014-07-18 11:14 - 2014-07-18 11:14 - 00448512 _____ (OldTimer Tools) C:\Users\ACER\Desktop\TFC.exe
2014-07-18 11:12 - 2009-07-14 06:45 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-18 11:12 - 2009-07-14 06:45 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-18 11:09 - 2014-04-25 14:04 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\GG
2014-07-18 11:05 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-18 11:04 - 2014-07-17 11:48 - 00001944 _____ () C:\Windows\PFRO.log
2014-07-18 11:04 - 2014-07-17 11:48 - 00000560 _____ () C:\Windows\setupact.log
2014-07-18 11:03 - 2014-07-18 11:03 - 00000000 ____D () C:\AdwCleaner
2014-07-18 10:14 - 2014-07-18 10:14 - 00000210 _____ () C:\Users\ACER\Documents\fixlist.txt
2014-07-18 09:14 - 2014-06-29 12:25 - 00000000 ____D () C:\Windows\system32\Drivers\AVG
2014-07-17 21:08 - 2014-06-16 12:09 - 00003984 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7A35D1AF-7091-491B-A0A7-5A6DD2070200}
2014-07-17 13:43 - 2014-04-26 12:56 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\Skype
2014-07-17 12:01 - 2014-07-17 12:01 - 00003860 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1405591069
2014-07-17 12:01 - 2014-04-26 22:49 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-07-17 11:57 - 2014-07-17 11:57 - 00001143 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-07-17 11:57 - 2014-07-17 11:57 - 00001143 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-07-17 11:57 - 2014-04-26 22:49 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\Opera Software
2014-07-17 11:57 - 2014-04-26 22:49 - 00000000 ____D () C:\Users\ACER\AppData\Local\Opera Software
2014-07-17 11:55 - 2014-04-24 11:48 - 00001437 _____ () C:\Users\ACER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 11:48 - 2014-07-17 11:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-17 11:46 - 2014-06-29 09:13 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-07-17 11:46 - 2014-05-02 19:47 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\DAEMON Tools Pro
2014-07-17 11:46 - 2014-04-26 08:55 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\uTorrent
2014-07-17 11:46 - 2013-09-13 16:42 - 00000000 ____D () C:\Windows\Panther
2014-07-15 18:13 - 2014-05-16 09:36 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\GanymedeNet
2014-07-15 16:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Speech
2014-07-15 16:38 - 2014-07-15 16:38 - 00003322 _____ () C:\Windows\System32\Tasks\{7F493243-AAD0-4981-A5FF-5E81B6ADAD37}
2014-07-15 16:26 - 2014-06-07 10:11 - 00000000 ____D () C:\Users\ACER\AppData\Local\SKIDROW
2014-07-12 18:48 - 2014-04-25 14:04 - 00000000 ____D () C:\Users\ACER\AppData\Local\GG
2014-07-12 10:14 - 2014-07-12 10:14 - 00003052 _____ () C:\Windows\System32\Tasks\Steam-S-1-8-22-9865GUI
2014-07-12 10:14 - 2014-07-12 10:14 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\Steam
2014-07-10 15:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-10 11:24 - 2009-07-14 06:45 - 00370488 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-09 23:15 - 2014-04-25 04:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-09 23:15 - 2011-04-12 15:32 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 23:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-09 23:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-09 16:59 - 2013-09-13 17:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 16:58 - 2014-04-24 20:57 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 16:57 - 2014-04-27 12:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-08 20:19 - 2014-04-24 22:34 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-08 20:19 - 2014-04-24 22:34 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-08 20:19 - 2014-04-24 22:34 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-03 19:15 - 2014-05-05 16:00 - 00000000 ____D () C:\Users\ACER\Documents\My Games
2014-07-03 13:42 - 2014-07-03 13:42 - 27992636 _____ ( ) C:\Users\ACER\Downloads\K-Lite_Codec_Pack_Full.exe
2014-07-03 13:42 - 2014-07-03 13:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-07-03 13:42 - 2014-07-03 13:42 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-07-01 19:29 - 2014-06-29 13:04 - 00099448 _____ () C:\Users\ACER\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-01 19:19 - 2014-05-02 20:27 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-07-01 19:17 - 2014-07-01 19:17 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-07-01 19:06 - 2013-09-13 19:51 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-07-01 18:41 - 2011-04-12 15:21 - 00740460 _____ () C:\Windows\system32\perfh015.dat
2014-07-01 18:41 - 2011-04-12 15:21 - 00156002 _____ () C:\Windows\system32\perfc015.dat
2014-07-01 18:41 - 2009-07-14 07:13 - 01669666 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-30 04:09 - 2014-07-09 16:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-09 16:24 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-29 20:06 - 2014-06-29 15:02 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-06-29 20:06 - 2014-06-29 09:13 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-06-29 19:19 - 2014-06-29 19:19 - 00000000 ____D () C:\Users\ACER\AppData\Local\Sniper3
2014-06-29 15:02 - 2014-06-29 15:02 - 00001272 _____ () C:\Users\ACER\Desktop\Spybot - Search & Destroy.lnk
2014-06-29 15:02 - 2014-06-29 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
2014-06-29 13:59 - 2014-06-29 10:28 - 00000085 _____ () C:\Windows\wininit.ini
2014-06-29 13:56 - 2009-07-14 04:34 - 00449906 ____R () C:\Windows\system32\Drivers\etc\hosts.20140629-150441.backup
2014-06-29 13:55 - 2014-06-29 13:56 - 00449906 ____R () C:\Windows\system32\Drivers\etc\hosts.20140629-135632.backup
2014-06-29 13:09 - 2014-06-29 13:09 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-06-29 12:56 - 2014-04-27 19:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-06-29 12:47 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini
2014-06-29 12:29 - 2014-06-29 12:29 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\AVG10
2014-06-29 12:29 - 2014-06-29 12:20 - 00000000 ____D () C:\ProgramData\MFAData
2014-06-29 12:28 - 2014-06-29 12:25 - 00000000 ____D () C:\ProgramData\AVG10
2014-06-29 12:27 - 2014-06-29 12:28 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-06-29 12:26 - 2014-06-29 12:26 - 00000993 _____ () C:\Users\Public\Desktop\AVG 2011.lnk
2014-06-29 12:26 - 2014-06-29 12:26 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\AVG
2014-06-29 12:26 - 2014-06-29 12:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2011
2014-06-29 12:26 - 2014-04-26 09:38 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\TuneUp Software
2014-06-29 12:25 - 2014-04-26 09:19 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-06-29 12:07 - 2014-06-29 12:07 - 00000000 ____D () C:\Windows\system32\log
2014-06-29 11:55 - 2014-06-29 11:38 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-29 11:27 - 2014-06-28 11:32 - 00000000 _RSHD () C:\ProgramData\soundmng
2014-06-29 10:42 - 2014-06-29 10:42 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-06-29 10:42 - 2014-06-29 10:42 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-06-29 10:40 - 2014-04-27 19:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-06-29 10:29 - 2014-06-29 10:29 - 00000000 ____D () C:\ProgramData\Grisoft
2014-06-29 10:21 - 2014-06-29 09:55 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-29 10:20 - 2014-06-29 09:55 - 00000000 ____D () C:\ProgramData\PC Tools
2014-06-29 10:15 - 2014-06-29 10:05 - 00000000 ____D () C:\Windows\erdnt
2014-06-29 10:14 - 2014-06-29 13:55 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts.20140629-135542.backup
2014-06-29 10:14 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-06-29 10:13 - 2014-06-28 11:32 - 00000000 _RSHD () C:\Users\ACER\AppData\Roaming\soundmng
2014-06-29 09:58 - 2014-06-29 09:58 - 00000000 ____D () C:\Program Files (x86)\PC Tools
2014-06-29 09:56 - 2014-06-29 09:55 - 02119683 _____ () C:\Windows\system32\Drivers\Cat.DB
2014-06-29 09:55 - 2014-06-29 09:55 - 00000000 ____D () C:\Users\ACER\AppData\Roaming\TestApp
2014-06-29 09:41 - 2014-06-29 09:41 - 00000000 ____D () C:\Program Files (x86)\Enigma Software Group
2014-06-29 09:38 - 2014-06-29 09:21 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-06-29 09:28 - 2014-06-29 09:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-29 09:13 - 2014-06-29 09:13 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-06-29 09:00 - 2014-04-28 13:03 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-06-29 08:32 - 2014-06-29 08:32 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-06-29 08:32 - 2014-06-29 08:32 - 00000000 _____ () C:\autoexec.bat
2014-06-28 11:32 - 2014-06-28 11:32 - 00073728 _____ () C:\Users\ACER\AppData\Local\Web Data
2014-06-27 19:40 - 2014-06-27 19:40 - 00000000 ____D () C:\Users\ACER\AppData\Local\Avg2014
2014-06-27 11:54 - 2014-06-29 12:07 - 00044544 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys
2014-06-25 17:57 - 2014-05-14 20:41 - 00000000 ____D () C:\Users\ACER\Documents\FLiNGTrainer
2014-06-25 17:52 - 2014-06-25 17:52 - 00000000 ____D () C:\Users\ACER\Documents\My Cheat Tables
2014-06-24 19:23 - 2014-06-24 19:23 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-06-24 19:23 - 2014-06-24 19:23 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-06-24 19:23 - 2014-06-24 19:23 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-06-24 19:23 - 2014-06-24 19:23 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-06-24 19:23 - 2014-06-24 19:23 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-06-23 11:35 - 2014-06-23 11:16 - 00000000 ____D () C:\Users\ACER\Documents\Remedy
2014-06-23 11:34 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-20 22:14 - 2014-07-09 16:24 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-20 21:39 - 2014-07-09 16:24 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-19 03:39 - 2014-07-09 16:24 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-19 03:06 - 2014-07-09 16:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-19 03:06 - 2014-07-09 16:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-19 02:48 - 2014-07-09 16:24 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-19 02:42 - 2014-07-09 16:24 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-19 02:42 - 2014-07-09 16:24 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-19 02:41 - 2014-07-09 16:24 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-19 02:41 - 2014-07-09 16:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-19 02:32 - 2014-07-09 16:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-19 02:31 - 2014-07-09 16:24 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-19 02:26 - 2014-07-09 16:24 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-19 02:24 - 2014-07-09 16:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-19 02:24 - 2014-07-09 16:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-19 02:23 - 2014-07-09 16:24 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-19 02:16 - 2014-07-09 16:24 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-19 02:14 - 2014-07-09 16:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-19 02:09 - 2014-07-09 16:24 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-19 01:59 - 2014-07-09 16:24 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-19 01:56 - 2014-07-09 16:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-19 01:53 - 2014-07-09 16:24 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-19 01:51 - 2014-07-09 16:24 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-09 16:24 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-09 16:24 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-19 01:39 - 2014-07-09 16:24 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-19 01:38 - 2014-07-09 16:24 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-19 01:37 - 2014-07-09 16:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-19 01:36 - 2014-07-09 16:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-19 01:35 - 2014-07-09 16:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-06-19 01:33 - 2014-07-09 16:24 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-09 16:24 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-19 01:28 - 2014-07-09 16:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-19 01:28 - 2014-07-09 16:24 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-19 01:27 - 2014-07-09 16:24 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-19 01:27 - 2014-07-09 16:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-19 01:25 - 2014-07-09 16:24 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-19 01:23 - 2014-07-09 16:24 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-19 01:22 - 2014-07-09 16:24 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-19 01:12 - 2014-07-09 16:24 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-19 01:06 - 2014-07-09 16:24 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-19 01:01 - 2014-07-09 16:24 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-19 00:59 - 2014-07-09 16:24 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 16:24 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-19 00:58 - 2014-07-09 16:24 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-19 00:52 - 2014-07-09 16:24 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-09 16:24 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-09 16:24 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-19 00:46 - 2014-07-09 16:24 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-19 00:45 - 2014-07-09 16:24 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 16:24 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-09 16:24 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-09 16:24 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-09 16:24 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-09 16:24 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-09 16:24 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-18 04:18 - 2014-07-09 16:24 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-18 03:51 - 2014-07-09 16:24 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-06-18 03:10 - 2014-07-09 16:24 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe = & gt; File is digitally signed
C:\Windows\System32\wininit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\wininit.exe = & gt; File is digitally signed
C:\Windows\explorer.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\explorer.exe = & gt; File is digitally signed
C:\Windows\System32\svchost.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\svchost.exe = & gt; File is digitally signed
C:\Windows\System32\services.exe = & gt; File is digitally signed
C:\Windows\System32\User32.dll = & gt; File is digitally signed
C:\Windows\SysWOW64\User32.dll = & gt; File is digitally signed
C:\Windows\System32\userinit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\userinit.exe = & gt; File is digitally signed
C:\Windows\System32\rpcss.dll = & gt; File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys = & gt; File is digitally signed
LastRegBack: 2014-07-08 09:32
==================== End Of Log ============================