Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2014
Ran by h4pple99 (administrator) on H4PPLE on 06-02-2014 20:21:59
Running from H:\
Windows 8.1 (X64) OS Language: 041B
Internet Explorer Version 11
Boot Mode: Safe Mode (minimal)
The only official download link for FRST:
Download link for 32-Bit version:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\System32\cmd.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2864016 2012-08-08] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-08-12] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-08-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-26] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Smart Update] - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe [1706576 2012-08-02] (Lenovo)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-03] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-30] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3547628435-3712409865-1790832751-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-3547628435-3712409865-1790832751-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKU\S-1-5-21-3547628435-3712409865-1790832751-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)
HKU\S-1-5-21-3547628435-3712409865-1790832751-1002\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-03] (Samsung)
HKU\S-1-5-21-3547628435-3712409865-1790832751-1002\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)
HKU\S-1-5-21-3547628435-3712409865-1790832751-1002\...\Run: [uTorrent] - C:\Users\h4pple99\AppData\Roaming\uTorrent\uTorrent.exe [905296 2014-01-28] (BitTorrent Inc.)
AppInit_DLLs: C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
Startup: C:\Users\h4pple99\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://lenovo13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://lenovo13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages =
http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
http://www.lenovo.com
SearchScopes: HKLM - DefaultScope {8DBF706B-58B0-444B-BDE3-20A901A30AFD} URL =
http://www.bing.com/search?q={searchTer ... &pc=MALNJS
SearchScopes: HKLM - {8DBF706B-58B0-444B-BDE3-20A901A30AFD} URL =
http://www.bing.com/search?q={searchTer ... &pc=MALNJS
SearchScopes: HKLM-x32 - DefaultScope {8DBF706B-58B0-444B-BDE3-20A901A30AFD} URL =
http://www.bing.com/search?q={searchTer ... &pc=MALNJS
SearchScopes: HKLM-x32 - {8DBF706B-58B0-444B-BDE3-20A901A30AFD} URL =
http://www.bing.com/search?q={searchTer ... &pc=MALNJS
SearchScopes: HKCU - DefaultScope {8DBF706B-58B0-444B-BDE3-20A901A30AFD} URL =
SearchScopes: HKCU - {8DBF706B-58B0-444B-BDE3-20A901A30AFD} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Chrome:
=======
CHR HomePage: hxxp://start.icq.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Nitro PDF Plug-In) - C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll ( )
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Extension: (Dokumenty Google) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-16]
CHR Extension: (Disk Google) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-16]
CHR Extension: (YouTube) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-16]
CHR Extension: (Hľadať v Google) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-16]
CHR Extension: (AdBlock) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-08-16]
CHR Extension: (Skype Click to Call) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-12-14]
CHR Extension: (Glossy Blue) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\nheaocaplknjkpcnbadlgfpdfjaabiml [2013-08-16]
CHR Extension: (Peňaženka Google) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR Extension: (Gmail) - C:\Users\h4pple99\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-16]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
==================== Services (Whitelisted) =================
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-30] (AVAST Software)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.)
S4 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [953720 2012-08-26] (Broadcom Corporation.)
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S4 Lenovo Smart Update Service; C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [66640 2012-07-18] (Lenovo)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
S4 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-07-16] (Nitro PDF Software)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-08-30] (AVAST Software)
S2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [78648 2014-02-06] (AVAST Software)
S1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-11-30] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-30] ()
S1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1038072 2014-02-06] (AVAST Software)
S1 aswSP; C:\windows\system32\drivers\aswSP.sys [421704 2014-02-06] (AVAST Software)
S3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [80184 2014-02-06] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-02-06] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-12-25] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-12-13] (Disc Soft Ltd)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
R0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-13] (Microsoft Corporation)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-12-25] ()
R0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19032 2013-07-01] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12384 2013-07-01] ()
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8222736 2012-06-15] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-12-13] (Microsoft Corporation)
R0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2013-08-22] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-06 20:21 - 2014-02-06 20:21 - 00000000 ____D () C:\FRST
2014-02-06 17:34 - 2014-02-06 17:34 - 00000000 ____D () C:\Users\h4pple99\Desktop\PCHunter_free
2014-02-06 17:32 - 2014-02-06 17:33 - 06705279 _____ () C:\Users\h4pple99\Desktop\PCHunter_free.zip
2014-02-06 17:19 - 2014-02-06 17:19 - 00935175 _____ () C:\Users\h4pple99\Desktop\RSITx64.exe
2014-02-06 14:57 - 2014-02-06 14:57 - 00002033 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-02-06 14:56 - 2013-08-21 05:31 - 00188232 _____ (MCCI Corporation) C:\WINDOWS\system32\Drivers\ssadmdm.sys
2014-02-06 14:56 - 2013-08-21 05:31 - 00169288 _____ (MCCI Corporation) C:\WINDOWS\system32\Drivers\ssadbus.sys
2014-02-06 14:56 - 2013-08-21 05:31 - 00158024 _____ (MCCI Corporation) C:\WINDOWS\system32\Drivers\ssadserd.sys
2014-02-06 14:56 - 2013-08-21 05:31 - 00021320 _____ (MCCI Corporation) C:\WINDOWS\system32\Drivers\ssadmdfl.sys
2014-02-06 14:56 - 2013-08-21 05:31 - 00017736 _____ (MCCI Corporation) C:\WINDOWS\system32\Drivers\ssadwhnt.sys
2014-02-06 14:56 - 2013-08-21 05:31 - 00017736 _____ (MCCI Corporation) C:\WINDOWS\system32\Drivers\ssadwh.sys
2014-02-06 14:56 - 2013-08-21 05:31 - 00017224 _____ (MCCI Corporation) C:\WINDOWS\system32\Drivers\ssadcmnt.sys
2014-02-06 14:56 - 2013-08-21 05:31 - 00017224 _____ (MCCI Corporation) C:\WINDOWS\system32\Drivers\ssadcm.sys
2014-02-06 14:53 - 2014-02-06 14:53 - 00000000 ____D () C:\Program Files (x86)\MarkAny
2014-02-06 13:03 - 2014-02-06 13:18 - 00000000 ____D () C:\Users\h4pple99\Downloads\Assassins Creed IV Black Flag Freedom Cry [MULTI][PCDVD][DLC][RELOADED][
WwW.GamesTorrents.CoM]
2014-02-06 12:58 - 2014-02-06 15:23 - 00000000 ____D () C:\Users\h4pple99\Documents\Assassin's Creed Liberation HD
2014-02-06 12:56 - 2014-02-06 12:56 - 00001186 _____ () C:\Users\Public\Desktop\Assassins Creed Liberation HD.lnk
2014-02-06 12:50 - 2014-02-06 15:23 - 00000000 ____D () C:\Program Files (x86)\Assassins Creed Liberation HD
2014-02-06 12:40 - 2014-02-06 12:40 - 00080184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-02-06 12:37 - 2014-02-06 12:48 - 00000000 ____D () C:\Users\h4pple99\Downloads\Assassin's Creed Liberation HD
2014-02-06 12:26 - 2014-02-06 12:26 - 00016397 _____ () C:\Users\h4pple99\Desktop\Assassin's_Creed.Liberation_HD_+_1_DLC.(Ubisoft_Entertainment).(2014).Repack.torrent
2014-02-06 11:55 - 2014-02-06 12:15 - 00000000 ____D () C:\Users\h4pple99\Downloads\Assassins Creed Liberation HD [MULTI8][PCDVD][Incl Bonus DLC][P2P][
WwW.GamesTorrents.CoM]
2014-02-04 16:40 - 2014-02-04 16:40 - 00014553 _____ () C:\Users\h4pple99\Desktop\[CzT]Ostrov_The_Island.torrent
2014-02-04 16:27 - 2014-02-04 16:27 - 00011838 _____ () C:\Users\h4pple99\Desktop\[CzT]Hra_The_Game_1997_.torrent
2014-02-02 11:51 - 2014-02-02 11:51 - 00024042 _____ () C:\Users\h4pple99\Desktop\[DC-Tracker.cz]Jak-jsem-poznal-vaši-matku-6-série-CZ.torrent
2014-02-02 11:32 - 2014-02-02 11:32 - 00015416 _____ () C:\Users\h4pple99\Desktop\[CzT]Na_srot_21_Over_2013_CZ_.torrent
2014-02-02 11:29 - 2014-02-02 11:29 - 00015545 _____ () C:\Users\h4pple99\Desktop\[CzT]Na_srot_21_Over_2013_.torrent
2014-02-01 21:01 - 2014-02-01 21:01 - 00011438 _____ () C:\Users\h4pple99\Desktop\Rozvrh LS.xlsx
2014-02-01 10:46 - 2014-02-01 11:00 - 00000000 ____D () C:\Users\h4pple99\AppData\Roaming\TeamViewer
2014-02-01 10:45 - 2014-02-01 10:45 - 05854872 _____ (TeamViewer GmbH) C:\Users\h4pple99\Desktop\TeamViewer_Setup_sk.exe
2014-01-30 17:59 - 2014-01-30 18:00 - 36958420 _____ () C:\Users\h4pple99\Desktop\MOV04970.AVI
2014-01-28 19:33 - 2014-02-06 16:42 - 00004092 _____ () C:\WINDOWS\PFRO.log
2014-01-27 20:24 - 2014-01-27 20:24 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-27 20:24 - 2014-01-27 20:24 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-27 20:13 - 2014-01-27 20:13 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-01-27 20:13 - 2014-01-27 20:13 - 00000000 _____ () C:\WINDOWS\setupact.log
2014-01-27 20:13 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-01-27 20:13 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-01-27 20:13 - 2013-12-19 21:33 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-01-27 20:13 - 2013-12-19 21:33 - 00023754 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\NVIDIA
2014-01-17 19:59 - 2014-01-17 20:06 - 166469358 _____ () C:\Users\h4pple99\Desktop\FI-XIV-MWM150.rar
2014-01-13 17:48 - 2014-01-13 17:48 - 00604047 _____ () C:\Users\h4pple99\Desktop\48648916.mp4
2014-01-11 22:38 - 2014-01-11 22:38 - 00000000 ____D () C:\Users\h4pple99\Desktop\FI-XIV-MWM130
2014-01-11 21:47 - 2014-01-11 21:53 - 141899819 _____ () C:\Users\h4pple99\Desktop\FI-XIV-MWM130.rar
2014-01-08 11:09 - 2014-01-08 11:09 - 00011589 _____ () C:\Users\h4pple99\Desktop\HumkyDumky.rar
2014-01-08 10:38 - 2014-01-08 10:48 - 00012024 _____ () C:\Users\h4pple99\Desktop\Humky-Dumky.rar
2014-01-08 10:32 - 2014-01-08 10:33 - 00000000 ____D () C:\Users\h4pple99\Desktop\Mozno to bude
2014-01-07 23:46 - 2014-01-07 23:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
==================== One Month Modified Files and Folders =======
2014-02-06 20:21 - 2014-02-06 20:21 - 00000000 ____D () C:\FRST
2014-02-06 19:59 - 2013-12-13 22:54 - 00047512 _____ () C:\WINDOWS\system32\perfh01B.dat
2014-02-06 19:59 - 2013-12-13 22:54 - 00011800 _____ () C:\WINDOWS\system32\perfc01B.dat
2014-02-06 19:59 - 2013-11-14 08:28 - 00907186 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-06 18:49 - 2013-12-29 00:07 - 01338971 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-06 18:49 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-06 18:49 - 2013-08-15 16:33 - 00000000 ____D () C:\Users\h4pple99\AppData\Roaming\uTorrent
2014-02-06 18:47 - 2013-09-01 14:11 - 00005028 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for h4pple-h4pple99 h4pple
2014-02-06 18:46 - 2013-08-16 00:35 - 00002226 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-06 18:46 - 2013-08-16 00:35 - 00000950 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-06 18:11 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-06 18:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-06 17:51 - 2013-08-16 00:35 - 00000954 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-06 17:34 - 2014-02-06 17:34 - 00000000 ____D () C:\Users\h4pple99\Desktop\PCHunter_free
2014-02-06 17:33 - 2014-02-06 17:32 - 06705279 _____ () C:\Users\h4pple99\Desktop\PCHunter_free.zip
2014-02-06 17:19 - 2014-02-06 17:19 - 00935175 _____ () C:\Users\h4pple99\Desktop\RSITx64.exe
2014-02-06 16:42 - 2014-01-28 19:33 - 00004092 _____ () C:\WINDOWS\PFRO.log
2014-02-06 16:25 - 2013-08-15 17:02 - 00000000 ____D () C:\Users\h4pple99\AppData\Roaming\Skype
2014-02-06 16:17 - 2013-12-20 13:26 - 00000000 ____D () C:\Users\h4pple99\AppData\Local\Deployment
2014-02-06 15:23 - 2014-02-06 12:58 - 00000000 ____D () C:\Users\h4pple99\Documents\Assassin's Creed Liberation HD
2014-02-06 15:23 - 2014-02-06 12:50 - 00000000 ____D () C:\Program Files (x86)\Assassins Creed Liberation HD
2014-02-06 14:59 - 2013-12-14 08:27 - 00000000 ____D () C:\WINDOWS\LastGood
2014-02-06 14:57 - 2014-02-06 14:57 - 00002033 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-02-06 14:53 - 2014-02-06 14:53 - 00000000 ____D () C:\Program Files (x86)\MarkAny
2014-02-06 14:51 - 2013-09-26 14:08 - 00000000 ____D () C:\Users\h4pple99\AppData\Roaming\Samsung
2014-02-06 13:41 - 2013-08-16 00:07 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3547628435-3712409865-1790832751-1002
2014-02-06 13:18 - 2014-02-06 13:03 - 00000000 ____D () C:\Users\h4pple99\Downloads\Assassins Creed IV Black Flag Freedom Cry [MULTI][PCDVD][DLC][RELOADED][
WwW.GamesTorrents.CoM]
2014-02-06 12:57 - 2013-09-14 08:20 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-06 12:56 - 2014-02-06 12:56 - 00001186 _____ () C:\Users\Public\Desktop\Assassins Creed Liberation HD.lnk
2014-02-06 12:48 - 2014-02-06 12:37 - 00000000 ____D () C:\Users\h4pple99\Downloads\Assassin's Creed Liberation HD
2014-02-06 12:41 - 2013-10-04 14:09 - 00001993 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-06 12:40 - 2014-02-06 12:40 - 00080184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-02-06 12:40 - 2013-08-15 16:14 - 01038072 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-02-06 12:40 - 2013-08-15 16:14 - 00421704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-02-06 12:40 - 2013-08-15 16:14 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-02-06 12:40 - 2013-08-15 16:14 - 00207904 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-02-06 12:40 - 2013-08-15 16:14 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-02-06 12:40 - 2013-08-15 16:14 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-02-06 12:40 - 2013-08-15 16:14 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-02-06 12:26 - 2014-02-06 12:26 - 00016397 _____ () C:\Users\h4pple99\Desktop\Assassin's_Creed.Liberation_HD_+_1_DLC.(Ubisoft_Entertainment).(2014).Repack.torrent
2014-02-06 12:15 - 2014-02-06 11:55 - 00000000 ____D () C:\Users\h4pple99\Downloads\Assassins Creed Liberation HD [MULTI8][PCDVD][Incl Bonus DLC][P2P][
WwW.GamesTorrents.CoM]
2014-02-06 11:21 - 2013-09-25 17:46 - 00000000 ____D () C:\Users\h4pple99\Documents\FIFA 14
2014-02-06 11:02 - 2013-09-10 18:40 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-02-06 09:43 - 2013-08-16 00:00 - 00000000 ____D () C:\Users\h4pple99\AppData\Local\Packages
2014-02-05 23:07 - 2013-08-26 10:42 - 00000000 ____D () C:\Users\h4pple99\AppData\Roaming\vlc
2014-02-04 16:40 - 2014-02-04 16:40 - 00014553 _____ () C:\Users\h4pple99\Desktop\[CzT]Ostrov_The_Island.torrent
2014-02-04 16:27 - 2014-02-04 16:27 - 00011838 _____ () C:\Users\h4pple99\Desktop\[CzT]Hra_The_Game_1997_.torrent
2014-02-02 18:30 - 2013-09-10 20:52 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-02 11:51 - 2014-02-02 11:51 - 00024042 _____ () C:\Users\h4pple99\Desktop\[DC-Tracker.cz]Jak-jsem-poznal-vaši-matku-6-série-CZ.torrent
2014-02-02 11:32 - 2014-02-02 11:32 - 00015416 _____ () C:\Users\h4pple99\Desktop\[CzT]Na_srot_21_Over_2013_CZ_.torrent
2014-02-02 11:29 - 2014-02-02 11:29 - 00015545 _____ () C:\Users\h4pple99\Desktop\[CzT]Na_srot_21_Over_2013_.torrent
2014-02-01 21:01 - 2014-02-01 21:01 - 00011438 _____ () C:\Users\h4pple99\Desktop\Rozvrh LS.xlsx
2014-02-01 12:16 - 2013-08-15 18:09 - 00000000 ____D () C:\Users\h4pple99\Desktop\Torrents
2014-02-01 11:00 - 2014-02-01 10:46 - 00000000 ____D () C:\Users\h4pple99\AppData\Roaming\TeamViewer
2014-02-01 10:45 - 2014-02-01 10:45 - 05854872 _____ (TeamViewer GmbH) C:\Users\h4pple99\Desktop\TeamViewer_Setup_sk.exe
2014-01-30 18:00 - 2014-01-30 17:59 - 36958420 _____ () C:\Users\h4pple99\Desktop\MOV04970.AVI
2014-01-29 11:08 - 2013-09-10 18:40 - 00000000 ____D () C:\ProgramData\Origin
2014-01-29 00:42 - 2013-12-13 21:57 - 00000000 ____D () C:\Users\h4pple99
2014-01-27 20:24 - 2014-01-27 20:24 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-27 20:24 - 2014-01-27 20:24 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-27 20:23 - 2013-12-13 21:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-27 20:13 - 2014-01-27 20:13 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-01-27 20:13 - 2014-01-27 20:13 - 00000000 _____ () C:\WINDOWS\setupact.log
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\NVIDIA
2014-01-21 15:09 - 2013-09-15 18:10 - 00000000 ____D () C:\Users\h4pple99\Documents\Dokumenty
2014-01-18 15:14 - 2013-08-16 12:04 - 00000000 ____D () C:\Users\h4pple99\AppData\Roaming\DAEMON Tools Lite
2014-01-17 20:06 - 2014-01-17 19:59 - 166469358 _____ () C:\Users\h4pple99\Desktop\FI-XIV-MWM150.rar
2014-01-14 15:12 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-01-13 17:48 - 2014-01-13 17:48 - 00604047 _____ () C:\Users\h4pple99\Desktop\48648916.mp4
2014-01-11 22:38 - 2014-01-11 22:38 - 00000000 ____D () C:\Users\h4pple99\Desktop\FI-XIV-MWM130
2014-01-11 21:53 - 2014-01-11 21:47 - 141899819 _____ () C:\Users\h4pple99\Desktop\FI-XIV-MWM130.rar
2014-01-08 11:09 - 2014-01-08 11:09 - 00011589 _____ () C:\Users\h4pple99\Desktop\HumkyDumky.rar
2014-01-08 10:48 - 2014-01-08 10:38 - 00012024 _____ () C:\Users\h4pple99\Desktop\Humky-Dumky.rar
2014-01-08 10:33 - 2014-01-08 10:32 - 00000000 ____D () C:\Users\h4pple99\Desktop\Mozno to bude
2014-01-07 23:46 - 2014-01-07 23:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-30 09:54
==================== End Of Log ============================