This topic is locked
Hi,
Here are all 3 logs, (FSRT, then Addition, then FSS):
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-07-2014
Ran by Marushka (administrator) on MARUSHKA-PC on 22-07-2014 21:54:52
Running from C:\Users\Marushka\Downloads
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Dropbox, Inc.) C:\Users\Marushka\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Program Files\Adobe\Adobe InDesign CS6\Utilities\adb.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
(Nitro PDF) C:\Program Files\Nitro\Pro 8\NitroPDF.exe
(Nitro PDF) C:\Program Files\Nitro\Pro 8\Nitro_PIPAssistant.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(KMP Media co.,Ltd) C:\Program Files\The KMPlayer\KMPlayer.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKU\S-1-5-21-3240352030-749572926-2809846025-1000\...\Run: [uTorrent] => C:\Users\Marushka\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-18] (BitTorrent Inc.)
HKU\S-1-5-21-3240352030-749572926-2809846025-1000\...\Run: [GoogleChromeAutoLaunch_2FDB120A6B021B1DC7D20904EC7F9A01] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-07-15] (Google Inc.)
HKU\S-1-5-21-3240352030-749572926-2809846025-1000\...\Run: [AdobeBridge] => [X]
Startup: C:\Users\Marushka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Marushka\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: AccExtIco1 -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x86.dll ()
ShellIconOverlayIdentifiers: AccExtIco2 -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x86.dll ()
ShellIconOverlayIdentifiers: AccExtIco3 -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x86.dll ()
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF0B6528CF92DCE01
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.202.213 192.168.202.222
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nitropdf.com/NitroPDF - C:\Program Files\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll No File
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Marushka\AppData\Local\Citrix\Plugins\97\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Marushka\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Marushka\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marushka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marushka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Marushka\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Marushka\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11]
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-03-26]
Chrome:
=======
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Marushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-24]
CHR Extension: (Taskforce) - C:\Users\Marushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdbfnafnalfjconpgenohfidcaeibkoc [2014-07-16]
CHR Extension: (Tokonda Messenger) - C:\Users\Marushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghonobjagekcnpkhcpjekbbejnjdlomg [2014-07-16]
CHR Extension: (AdBlock) - C:\Users\Marushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-07-16]
CHR Extension: (WhatFont) - C:\Users\Marushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2014-07-16]
CHR Extension: (Streamus™ (Beta!)) - C:\Users\Marushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbnkffmindojffecdhbbmekbmkkfpmjd [2014-07-16]
CHR Extension: (Skype Click to Call) - C:\Users\Marushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-02-14]
CHR Extension: (Google Wallet) - C:\Users\Marushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
========================== Services (Whitelisted) =================
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1341664 2013-03-04] (ESET)
S4 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1045840 2014-05-05] (Flexera Software LLC.)
S4 NitroDriverReadSpool8; C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe [196616 2012-11-29] (Nitro PDF Software)
S4 PanService; C:\Program Files\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S4 SynoDrService; C:\Program Files\Synology Data Replicator 3\SynoDrService.exe [245760 2013-03-26] () [File not signed]
S4 UsbClientService; C:\Program Files\Synology\Assistant\UsbClientService.exe [248704 2013-01-25] () [File not signed]
S4 AdobeARMservice; "C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]
==================== Drivers (Whitelisted) ====================
R3 busenum; C:\Windows\System32\DRIVERS\busenum.sys [45792 2012-08-03] (Windows ® Win 7 DDK provider)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-03-26] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [171680 2013-02-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [122240 2013-01-10] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [105760 2013-01-10] (ESET)
S3 Leadtek; C:\Windows\System32\DRIVERS\Leadtek.sys [64512 2010-11-12] (Leadtek Research Inc.)
S3 catchme; \??\C:\Users\Marushka\AppData\Local\Temp\catchme.sys [X]
========================== Drivers MD5 =======================
C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys D0B388DA1D111A34366E04EB4A5DD156
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\djsvs.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdagp.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D320BF87125326F996D4904FE24300FC
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 46387FB17B086D16DEA267D5BE23A2F2
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\athr.sys C8BB2E935A5D195692140E795EA9AC14
C:\Windows\system32\DRIVERS\bxvbdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60x.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bridge.sys 77361D72A04F18809D0EFB6CCEB74D4B
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\drivers\BthEnum.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bthpan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BTHport.sys 1153DE2E4F5941E10C399CB5592F78A1
C:\Windows\System32\Drivers\BTHUSB.sys C81E9413A25A439F436B1D4B6A0CF9E9
C:\Windows\System32\DRIVERS\busenum.sys C4A3AF25CA352B22046033A0088C1563
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\cdrom.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys 85449EEBE8F8EBD6481EFBF0F352B4EB
C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\csc.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit
C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\dtsoftbus01.sys 687AF6BB383885FF6A64071B189A7F3E
C:\Windows\System32\drivers\dxgkrnl.sys 71BC35067CABC02C9453AEAA42B2E43E
C:\Windows\System32\DRIVERS\eamonm.sys 16FF05BE2BD95824B487B1476862A84B
C:\Windows\system32\DRIVERS\evbdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ehdrv.sys 366369746D1818FDD8589D1F2C8A6D03
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\epfwwfpr.sys E38CABC8881DBE278BDA5E131CFF74AC
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\system32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\system32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legitB
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Fs_Rec.sys 7DAE5EBCC80E45D3253F4923DC424D05
C:\Windows\System32\DRIVERS\fvevol.sys E306A24D9694C724FA2491278BF50FDB
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\GEARAspiWDM.sys 185ADA973B5020655CEE342059A86CBB
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\system32\drivers\HdAudio.sys A5EF29D5315111C80A5C1ABAD14C8972
C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys 934AF4D7C5F457B9F0743F4299B77B67
C:\Windows\System32\DRIVERS\igdkmd32.sys AD626F6964F4D364D226C39E06872DD3
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys EB34CE31FABD4DC4343FD2AD16D2CAF9
C:\Windows\system32\drivers\kbdclass.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 4120DA10AA42A9996F4575DB9E3E6E6E
C:\Windows\System32\Drivers\ksecpkg.sys D3964885F0A11ACF51DA3AAA776973B2
C:\Windows\System32\DRIVERS\Leadtek.sys 0F7F7D0EC659DBA128C83E1CF2EBB8A8
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 21F4B24ACFC79A483515BD986DD9043F
C:\Windows\System32\DRIVERS\mrxsmb.sys 5D16C921E3671636C0EBA3BBAAC5FD25
C:\Windows\System32\DRIVERS\mrxsmb10.sys 6D17A4791ACA19328C685D256349FEFC
C:\Windows\System32\DRIVERS\mrxsmb20.sys B81F204D146000BE76651A50670A5E9E
C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\system32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 8C9C922D71F1CD4DEF73F186416B7896
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\system32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netaapl.sys 9213AA35BCA94EB79D366DA254E4BDF5
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Ntfs.sys C8DFF8D07755A66C7A4A738930F0FEAC
C:\Windows\system32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\system32\drivers\nvraid.sys B3E25EE28883877076E0E1FF877D02E0
C:\Windows\system32\drivers\nvstor.sys 4380E59A170D88C4F1022EFF6719A8A4
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys 3F34A1B4C5F6475F320C275E63AFCE9B
C:\Windows\system32\DRIVERS\parvdm.sys ==> MD5 is legit
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\system32\Drivers\RDPWD.sys F031683E6D1FEA157ABB2FF260B51E61
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rfcomm.sys CB928D9E6DAF51879DD6BA8D02F01321
C:\Windows\System32\DRIVERS\rimspe86.sys AF213955C4D952C914620E8DB0CD0CF7
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Rt86win7.sys 7DFD48E24479B68B258D8770121155A0
C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\system32\drivers\sdbus.sys 0328BE1C7F1CBA23848179F8762E391C
C:\Windows\system32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisagp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\system32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys E4C2764065D66EA1D2D3EBC28FE99C46
C:\Windows\System32\DRIVERS\srv2.sys 03F0545BD8D4C77FA0AE1CEEDFCC71AB
C:\Windows\System32\DRIVERS\VSTAZL3.SYS E00FDFAFF025E94F9821153750C35A6D
C:\Windows\System32\DRIVERS\VSTDPV3.SYS CEB4E3B6890E1E42DCA6694D9E59E1A0
C:\Windows\System32\DRIVERS\VSTCNXT3.SYS BC0C7EA89194C299F051C24119000E17
C:\Windows\System32\DRIVERS\srvnet.sys BE6BD660CAA6F291AE06A718A4FA8ABC
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serscan.sys EDB05BD63148796F23EA78506404A538
C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys 5579DD18546999F5D0EC39D018726C6B
C:\Windows\System32\DRIVERS\tcpip.sys 5579DD18546999F5D0EC39D018726C6B
C:\Windows\System32\drivers\tcpipreg.sys 3EEBD3BD93DA46A26E89893C7AB2FF3B
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 2C2C5AFE7EE4F620D69C23C0617651A8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys B37B08F2E5EEB1A37E448E09BACE1101
C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\Drivers\usbaapl.sys 6E421CCC57059B0186C6259CA3B6DFC9
C:\Windows\System32\drivers\usbaudio.sys A1977C315BF5691DA99235AA4A6907AF
C:\Windows\System32\DRIVERS\usbccgp.sys 0803FBA9FE829D61AE26EC0BCC910C46
C:\Windows\system32\drivers\usbcir.sys 2352AB5F9F8F097BF9D41D5A4718A041
C:\Windows\System32\DRIVERS\usbehci.sys D40855F89B69305140BBD7E9A3BA2DA6
C:\Windows\System32\DRIVERS\usbhub.sys EDF2DF71C4F1E13A6AC75F5224DE655A
C:\Windows\system32\drivers\usbohci.sys 9828C8D14CC2676421778F0DE638CF97
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS F991AB9CC6B908DB552166768176896A
C:\Windows\System32\DRIVERS\usbuhci.sys 800AABFD625EEFF899F7E5496BDE37AB
C:\Windows\System32\Drivers\usbvideo.sys DE014425522610BEDCA3821BB8C0F1D5
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaagp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\viac7.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\vmbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys 7090D3436EEB4E7DA3373090A23448F7
C:\Windows\System32\DRIVERS\vwifimp.sys A3F04CBEA6C2A10E6CB01F8B47611882
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys A67E5F9A400F3BD1BE3D80613B45F708
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070
C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-22 21:54 - 2014-07-22 21:56 - 00028599 _____ () C:\Users\Marushka\Downloads\FRST.txt
2014-07-22 21:50 - 2014-07-22 21:51 - 00002132 _____ () C:\Users\Marushka\Downloads\FSS.txt
2014-07-22 21:46 - 2014-07-22 21:49 - 01080320 _____ (Farbar) C:\Users\Marushka\Downloads\FRST.exe
2014-07-22 21:46 - 2014-07-22 21:49 - 00415232 _____ (Farbar) C:\Users\Marushka\Downloads\FSS.exe
2014-07-22 15:04 - 2014-07-22 15:06 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-22 11:58 - 2014-07-22 12:05 - 20208552 _____ (Polenter - Software Solutions ) C:\Users\Marushka\Downloads\DesktopReminderSetup.exe
2014-07-22 10:05 - 2014-07-22 10:05 - 00067505 _____ () C:\Users\Marushka\Downloads\Calling database_Lubka Profantova.xlsx
2014-07-21 10:43 - 2014-07-21 10:43 - 00345045 _____ () C:\Users\Marushka\Downloads\UK Tier statistics.xlsx
2014-07-21 10:42 - 2014-07-21 10:42 - 00040160 _____ () C:\Users\Marushka\Downloads\Database of sources.xlsx
2014-07-20 22:26 - 2014-07-20 22:59 - 00000000 ____D () C:\Users\Marushka\Downloads\Brooklyn Nine Nine Season 1 Complete 720p.Web.Dl.Sujaidr
2014-07-19 12:56 - 2014-07-19 13:17 - 00000000 ____D () C:\Users\Marushka\Downloads\The Angriest Man in Brooklyn (2014)
2014-07-19 12:26 - 2014-07-19 12:34 - 304063200 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Angriest.Man.in.Brooklyn.2014.1080p (3).rar
2014-07-19 12:26 - 2014-07-19 12:26 - 00289800 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Angriest.Man.in.Brooklyn.2014.1080p (2).rar
2014-07-19 12:24 - 2014-07-19 12:26 - 00673320 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Angriest.Man.in.Brooklyn.2014.1080p (1).rar
2014-07-19 12:19 - 2014-07-19 12:20 - 01349600 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Angriest.Man.in.Brooklyn.2014.1080p.rar
2014-07-18 20:56 - 2014-07-18 21:41 - 734354123 _____ () C:\Users\Marushka\Downloads\Best-Movies.info_21.Jump.Street.2012.720p.BluRay.x264.YIFY.mp4
2014-07-18 16:28 - 2014-07-18 16:28 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\PDAppFlex
2014-07-18 11:40 - 2010-12-08 10:18 - 00000000 ____D () C:\Users\Marushka\Downloads\Adobe Clean Install & Error Toolkit V4
2014-07-18 11:37 - 2014-07-18 11:40 - 74936505 _____ () C:\Users\Marushka\Downloads\Adobe Clean Install & Error Toolkit V4.exe
2014-07-18 11:35 - 2014-07-18 11:35 - 00000241 _____ () C:\Users\Marushka\Downloads\Adobe Error Toolkit.url
2014-07-18 11:34 - 2014-07-18 11:34 - 00000282 _____ () C:\Users\Marushka\Downloads\IMPORTANT.txt
2014-07-18 11:31 - 2014-07-18 11:34 - 02214048 _____ (Adobe Systems Incorporated) C:\Users\Marushka\Downloads\Set-up.exe
2014-07-18 11:30 - 2014-07-18 11:30 - 00001122 _____ () C:\Users\Marushka\Downloads\INSTALLING INSTRUCTIONS.txt
2014-07-18 10:07 - 2014-07-18 10:37 - 1007691940 _____ () C:\Users\Marushka\Downloads\Adobe Indesign CS6.exe
2014-07-18 10:05 - 2014-07-18 10:06 - 00000000 ____D () C:\Users\Marushka\Downloads\Virtual
2014-07-17 15:34 - 2014-07-22 15:57 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\Adobe
2014-07-17 15:34 - 2014-07-22 15:56 - 00000000 ____D () C:\Users\Marushka\AppData\Local\Adobe
2014-07-17 15:34 - 2014-07-18 16:19 - 00000000 ____D () C:\ProgramData\Adobe-BackupByPhotoshopPortable
2014-07-16 20:54 - 2014-07-16 20:54 - 260543862 _____ () C:\Windows\MEMORY.DMP
2014-07-16 20:54 - 2014-07-16 20:54 - 01510600 _____ () C:\Windows\Minidump\071614-48703-01.dmp
2014-07-16 14:03 - 2014-07-16 14:03 - 00792576 _____ () C:\Users\Marushka\Downloads\delegateExport_Agents_16JUL2014.xls
2014-07-16 11:05 - 2014-07-16 11:05 - 00001113 _____ () C:\Users\Marushka\Downloads\[kickass.to]the.personal.workbook.for.breaking.the.chain.of.low.self.esteem.torrent
2014-07-15 17:59 - 2014-07-15 18:00 - 01332936 _____ () C:\Users\Marushka\Downloads\best_movies.info_Gladiator.EXTENDED.2000.1080.BrRip.264.YIFY
2014-07-14 22:40 - 2014-07-18 16:25 - 00111472 _____ () C:\Users\Marushka\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-14 22:37 - 2014-07-22 10:42 - 00004570 _____ () C:\Windows\setupact.log
2014-07-14 22:37 - 2014-07-14 22:37 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-14 22:36 - 2014-07-18 16:18 - 03815296 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 09:26 - 2014-07-18 11:37 - 00000000 ____D () C:\Users\Marushka\Downloads\World Cup 2014
2014-07-09 12:39 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 12:39 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 12:39 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 12:39 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 12:39 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 12:39 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 12:39 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 12:39 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 12:38 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 12:38 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 12:38 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 12:38 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 12:38 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 12:38 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 12:38 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 12:38 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 12:38 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 12:38 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 12:38 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 12:38 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 12:38 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 12:38 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 12:38 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 12:38 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 12:38 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 12:38 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 12:38 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 12:38 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 12:38 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 12:38 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 12:38 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 12:38 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 12:38 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 12:38 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 12:38 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 12:38 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 12:38 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 12:38 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 12:38 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 12:38 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 12:36 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 12:35 - 2014-07-09 12:41 - 623939531 _____ () C:\Users\Marushka\Downloads\IM52_tprstg72yfy.rar
2014-07-09 12:35 - 2014-06-30 03:40 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 12:35 - 2014-06-30 03:36 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 12:14 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-08 11:32 - 2014-07-08 11:39 - 792149312 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Departed.2006.720p.BrRip.x264.YIFY.mp4
2014-07-07 11:42 - 2014-07-07 11:42 - 02289664 _____ () C:\Users\Marushka\Downloads\Call for Partners - NOT USED (1).indd
2014-07-07 08:44 - 2014-07-07 08:44 - 02289664 _____ () C:\Users\Marushka\Downloads\Call for Partners - NOT USED.indd
2014-07-07 08:44 - 2014-07-07 08:44 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2014-07-07 08:44 - 2014-07-07 08:44 - 00000000 ____D () C:\Users\Marushka\.android
2014-07-07 08:41 - 2014-07-07 08:41 - 01908736 _____ () C:\Users\Marushka\Downloads\Call for Sponsors - NOT USED.indd
2014-07-06 13:20 - 2014-07-06 13:20 - 14324706 _____ () C:\Users\Marushka\Downloads\book246_pdf.zip
2014-07-05 16:17 - 2014-07-05 16:36 - 629697501 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_Funny.People.2009.rar
2014-07-05 12:29 - 2014-07-05 12:35 - 838946742 _____ () C:\Users\Marushka\Downloads\Neighbors.720p.webrip.mkv.rar
2014-07-05 12:25 - 2014-07-05 12:27 - 234795660 _____ () C:\Users\Marushka\Downloads\led.ngbh72 (1).rar
2014-07-04 16:47 - 2014-07-04 17:03 - 628079526 _____ () C:\Users\Marushka\Downloads\LOCKE13.HD720p.PR0LiNK.rar
2014-07-04 11:27 - 2014-07-04 11:42 - 374858348 _____ () C:\Users\Marushka\Downloads\led.ngbh72.rar
2014-07-03 15:13 - 2014-07-03 15:21 - 59741928 _____ () C:\Users\Marushka\Downloads\Cam James x Remot - No Applause EP.zip
2014-07-01 11:51 - 2014-07-01 11:51 - 00000000 ___SD () C:\Users\Marushka\Documents\My Data Sources
2014-06-29 12:15 - 2014-06-29 14:44 - 00000000 ____D () C:\Users\Marushka\Downloads\Seven Samurai 1954 Restored 720p BRRip x264 AAC-BeLLBoY (Kingdom-Release)
2014-06-27 12:50 - 2014-06-30 13:06 - 00014517 ____H () C:\Users\Marushka\Desktop\~WRL0715.tmp
2014-06-27 09:23 - 2014-06-27 09:23 - 00000165 ____H () C:\Users\Marushka\Downloads\~$EduCo Brochure print & ship_JUN2014.xlsx
2014-06-25 15:35 - 2014-06-25 15:35 - 00000000 ____D () C:\_OTL
2014-06-25 11:14 - 2014-07-17 11:03 - 00063560 _____ () C:\Users\Marushka\Downloads\Extras.Txt
2014-06-24 13:54 - 2014-06-25 14:00 - 00049962 _____ () C:\Users\Marushka\Downloads\EduCo Brochure print & ship_JUN2014.xlsx
2014-06-24 13:53 - 2014-06-24 13:53 - 00022587 _____ () C:\Users\Marushka\Downloads\2013_EduCO brochure shipping_2.xlsx
2014-06-23 19:07 - 2014-06-23 19:15 - 182446389 _____ () C:\Users\Marushka\Downloads\These Days...(iT)-atrilli.net.zip
2014-06-23 12:57 - 2014-06-23 13:09 - 94720259 _____ () C:\Users\Marushka\Downloads\Long_Term_2-(DatPiff.com).zip
2014-06-23 12:56 - 2014-06-23 13:08 - 64084157 _____ () C:\Users\Marushka\Downloads\Long_Term-(DatPiff.com).zip
2014-06-23 11:50 - 2014-06-23 11:51 - 04198277 _____ () C:\Users\Marushka\Downloads\How to Stop Worrying and Start Living By Dale Carnegie (pdf).rar
2014-06-23 11:50 - 2014-06-23 11:51 - 00000000 ____D () C:\Users\Marushka\Downloads\The Magic Of Thinking Big By David Schwart (Pdf,Epub) Gooner
2014-06-23 11:50 - 2014-06-23 11:50 - 00035328 _____ () C:\Users\Marushka\Downloads\drucker_eff.ppt
2014-06-23 11:49 - 2014-06-23 11:49 - 00011249 _____ () C:\Users\Marushka\Downloads\[kickass.to]the.magic.of.thinking.big.by.david.schwart.pdf.epub.gooner.torrent
==================== One Month Modified Files and Folders =======
2014-07-22 21:56 - 2014-07-22 21:54 - 00028599 _____ () C:\Users\Marushka\Downloads\FRST.txt
2014-07-22 21:55 - 2013-10-25 08:38 - 00000000 ____D () C:\FRST
2014-07-22 21:51 - 2014-07-22 21:50 - 00002132 _____ () C:\Users\Marushka\Downloads\FSS.txt
2014-07-22 21:49 - 2014-07-22 21:46 - 01080320 _____ (Farbar) C:\Users\Marushka\Downloads\FRST.exe
2014-07-22 21:49 - 2014-07-22 21:46 - 00415232 _____ (Farbar) C:\Users\Marushka\Downloads\FSS.exe
2014-07-22 21:31 - 2013-03-26 12:21 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\Skype
2014-07-22 21:22 - 2014-02-03 23:21 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3240352030-749572926-2809846025-1000UA.job
2014-07-22 21:11 - 2013-08-12 15:32 - 00000000 ____D () C:\Users\Marushka\Desktop\EAC
2014-07-22 21:08 - 2014-06-18 10:03 - 00000924 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8acbbe7d0d47.job
2014-07-22 21:05 - 2014-04-24 13:20 - 00000000 ____D () C:\Users\Marushka\Desktop\IC-Center
2014-07-22 18:48 - 2013-08-12 17:14 - 00000000 ____D () C:\Program Files\The KMPlayer
2014-07-22 15:57 - 2014-07-17 15:34 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\Adobe
2014-07-22 15:56 - 2014-07-17 15:34 - 00000000 ____D () C:\Users\Marushka\AppData\Local\Adobe
2014-07-22 15:54 - 2013-11-07 15:41 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-07-22 15:06 - 2014-07-22 15:04 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-22 13:22 - 2014-06-20 13:17 - 00000906 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3240352030-749572926-2809846025-1000Core1cf8c793cf9e004.job
2014-07-22 12:05 - 2014-07-22 11:58 - 20208552 _____ (Polenter - Software Solutions ) C:\Users\Marushka\Downloads\DesktopReminderSetup.exe
2014-07-22 10:42 - 2014-07-14 22:37 - 00004570 _____ () C:\Windows\setupact.log
2014-07-22 10:12 - 2013-10-20 18:56 - 01241924 _____ () C:\Windows\WindowsUpdate.log
2014-07-22 10:08 - 2013-07-29 09:28 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce8c2d48f3ea4f.job
2014-07-22 10:05 - 2014-07-22 10:05 - 00067505 _____ () C:\Users\Marushka\Downloads\Calling database_Lubka Profantova.xlsx
2014-07-22 09:19 - 2009-07-14 06:34 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-22 09:19 - 2009-07-14 06:34 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-22 09:11 - 2014-02-05 16:48 - 00000000 ___RD () C:\Users\Marushka\Dropbox
2014-07-22 09:11 - 2014-02-05 16:47 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\DropboxMaster
2014-07-22 09:11 - 2013-12-17 10:07 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\Dropbox
2014-07-22 09:11 - 2013-08-05 10:24 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\uTorrent
2014-07-22 09:10 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-21 10:43 - 2014-07-21 10:43 - 00345045 _____ () C:\Users\Marushka\Downloads\UK Tier statistics.xlsx
2014-07-21 10:42 - 2014-07-21 10:42 - 00040160 _____ () C:\Users\Marushka\Downloads\Database of sources.xlsx
2014-07-20 22:59 - 2014-07-20 22:26 - 00000000 ____D () C:\Users\Marushka\Downloads\Brooklyn Nine Nine Season 1 Complete 720p.Web.Dl.Sujaidr
2014-07-20 20:28 - 2014-06-19 14:34 - 00000000 ____D () C:\Users\Marushka\Downloads\The Boondocks
2014-07-20 11:03 - 2013-03-26 00:24 - 00781726 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-19 13:17 - 2014-07-19 12:56 - 00000000 ____D () C:\Users\Marushka\Downloads\The Angriest Man in Brooklyn (2014)
2014-07-19 12:34 - 2014-07-19 12:26 - 304063200 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Angriest.Man.in.Brooklyn.2014.1080p (3).rar
2014-07-19 12:26 - 2014-07-19 12:26 - 00289800 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Angriest.Man.in.Brooklyn.2014.1080p (2).rar
2014-07-19 12:26 - 2014-07-19 12:24 - 00673320 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Angriest.Man.in.Brooklyn.2014.1080p (1).rar
2014-07-19 12:20 - 2014-07-19 12:19 - 01349600 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Angriest.Man.in.Brooklyn.2014.1080p.rar
2014-07-19 11:12 - 2013-03-26 09:16 - 00002141 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-18 21:41 - 2014-07-18 20:56 - 734354123 _____ () C:\Users\Marushka\Downloads\Best-Movies.info_21.Jump.Street.2012.720p.BluRay.x264.YIFY.mp4
2014-07-18 16:28 - 2014-07-18 16:28 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\PDAppFlex
2014-07-18 16:25 - 2014-07-14 22:40 - 00111472 _____ () C:\Users\Marushka\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-18 16:19 - 2014-07-17 15:34 - 00000000 ____D () C:\ProgramData\Adobe-BackupByPhotoshopPortable
2014-07-18 16:18 - 2014-07-14 22:36 - 03815296 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-18 14:44 - 2014-05-09 16:16 - 00001153 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CS6.lnk
2014-07-18 14:14 - 2014-05-09 15:52 - 00001127 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2014-07-18 14:06 - 2014-05-09 15:47 - 00001243 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CS6.lnk
2014-07-18 13:58 - 2014-05-09 15:12 - 00001311 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2014-07-18 13:56 - 2014-05-09 15:04 - 00001477 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2014-07-18 11:40 - 2014-07-18 11:37 - 74936505 _____ () C:\Users\Marushka\Downloads\Adobe Clean Install & Error Toolkit V4.exe
2014-07-18 11:37 - 2014-07-10 09:26 - 00000000 ____D () C:\Users\Marushka\Downloads\World Cup 2014
2014-07-18 11:35 - 2014-07-18 11:35 - 00000241 _____ () C:\Users\Marushka\Downloads\Adobe Error Toolkit.url
2014-07-18 11:34 - 2014-07-18 11:34 - 00000282 _____ () C:\Users\Marushka\Downloads\IMPORTANT.txt
2014-07-18 11:34 - 2014-07-18 11:31 - 02214048 _____ (Adobe Systems Incorporated) C:\Users\Marushka\Downloads\Set-up.exe
2014-07-18 11:30 - 2014-07-18 11:30 - 00001122 _____ () C:\Users\Marushka\Downloads\INSTALLING INSTRUCTIONS.txt
2014-07-18 10:37 - 2014-07-18 10:07 - 1007691940 _____ () C:\Users\Marushka\Downloads\Adobe Indesign CS6.exe
2014-07-18 10:06 - 2014-07-18 10:05 - 00000000 ____D () C:\Users\Marushka\Downloads\Virtual
2014-07-17 18:46 - 2014-03-21 11:56 - 00000000 ____D () C:\Users\Marushka\Desktop\SM - Matej
2014-07-17 11:03 - 2014-06-25 11:14 - 00063560 _____ () C:\Users\Marushka\Downloads\Extras.Txt
2014-07-17 11:02 - 2014-06-19 17:06 - 00070318 _____ () C:\Users\Marushka\Downloads\OTL.Txt
2014-07-16 20:54 - 2014-07-16 20:54 - 260543862 _____ () C:\Windows\MEMORY.DMP
2014-07-16 20:54 - 2014-07-16 20:54 - 01510600 _____ () C:\Windows\Minidump\071614-48703-01.dmp
2014-07-16 20:54 - 2013-08-10 14:23 - 00000000 ____D () C:\Windows\Minidump
2014-07-16 20:54 - 2009-07-14 06:53 - 00032606 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-16 14:03 - 2014-07-16 14:03 - 00792576 _____ () C:\Users\Marushka\Downloads\delegateExport_Agents_16JUL2014.xls
2014-07-16 11:05 - 2014-07-16 11:05 - 00001113 _____ () C:\Users\Marushka\Downloads\[kickass.to]the.personal.workbook.for.breaking.the.chain.of.low.self.esteem.torrent
2014-07-15 18:00 - 2014-07-15 17:59 - 01332936 _____ () C:\Users\Marushka\Downloads\best_movies.info_Gladiator.EXTENDED.2000.1080.BrRip.264.YIFY
2014-07-14 22:37 - 2014-07-14 22:37 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-14 22:25 - 2014-03-21 12:06 - 00000000 ____D () C:\Users\Marushka\Desktop\Personal
2014-07-14 22:24 - 2014-03-20 13:21 - 00000000 ____D () C:\Users\Marushka\Desktop\Francuzstina
2014-07-11 13:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-07-10 10:44 - 2009-07-14 09:50 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 10:43 - 2014-05-07 00:39 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-09 12:41 - 2014-07-09 12:35 - 623939531 _____ () C:\Users\Marushka\Downloads\IM52_tprstg72yfy.rar
2014-07-09 12:14 - 2013-08-05 21:50 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 11:47 - 2013-04-29 10:45 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-08 11:39 - 2014-07-08 11:32 - 792149312 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_The.Departed.2006.720p.BrRip.x264.YIFY.mp4
2014-07-07 18:45 - 2014-01-30 17:44 - 00000000 ____D () C:\Windows\pss
2014-07-07 11:42 - 2014-07-07 11:42 - 02289664 _____ () C:\Users\Marushka\Downloads\Call for Partners - NOT USED (1).indd
2014-07-07 08:44 - 2014-07-07 08:44 - 02289664 _____ () C:\Users\Marushka\Downloads\Call for Partners - NOT USED.indd
2014-07-07 08:44 - 2014-07-07 08:44 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2014-07-07 08:44 - 2014-07-07 08:44 - 00000000 ____D () C:\Users\Marushka\.android
2014-07-07 08:44 - 2013-03-26 00:23 - 00000000 ____D () C:\Users\Marushka
2014-07-07 08:41 - 2014-07-07 08:41 - 01908736 _____ () C:\Users\Marushka\Downloads\Call for Sponsors - NOT USED.indd
2014-07-06 13:20 - 2014-07-06 13:20 - 14324706 _____ () C:\Users\Marushka\Downloads\book246_pdf.zip
2014-07-05 16:36 - 2014-07-05 16:17 - 629697501 _____ () C:\Users\Marushka\Downloads\YIFY.info_-_Funny.People.2009.rar
2014-07-05 12:35 - 2014-07-05 12:29 - 838946742 _____ () C:\Users\Marushka\Downloads\Neighbors.720p.webrip.mkv.rar
2014-07-05 12:27 - 2014-07-05 12:25 - 234795660 _____ () C:\Users\Marushka\Downloads\led.ngbh72 (1).rar
2014-07-04 17:03 - 2014-07-04 16:47 - 628079526 _____ () C:\Users\Marushka\Downloads\LOCKE13.HD720p.PR0LiNK.rar
2014-07-04 11:48 - 2013-11-06 19:31 - 00015872 ___SH () C:\Users\Marushka\Thumbs.db
2014-07-04 11:42 - 2014-07-04 11:27 - 374858348 _____ () C:\Users\Marushka\Downloads\led.ngbh72.rar
2014-07-03 15:21 - 2014-07-03 15:13 - 59741928 _____ () C:\Users\Marushka\Downloads\Cam James x Remot - No Applause EP.zip
2014-07-01 11:51 - 2014-07-01 11:51 - 00000000 ___SD () C:\Users\Marushka\Documents\My Data Sources
2014-06-30 13:06 - 2014-06-27 12:50 - 00014517 ____H () C:\Users\Marushka\Desktop\~WRL0715.tmp
2014-06-30 03:40 - 2014-07-09 12:35 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 03:36 - 2014-07-09 12:35 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-29 14:44 - 2014-06-29 12:15 - 00000000 ____D () C:\Users\Marushka\Downloads\Seven Samurai 1954 Restored 720p BRRip x264 AAC-BeLLBoY (Kingdom-Release)
2014-06-27 09:23 - 2014-06-27 09:23 - 00000165 ____H () C:\Users\Marushka\Downloads\~$EduCo Brochure print & ship_JUN2014.xlsx
2014-06-25 17:57 - 2013-03-26 13:18 - 00000000 ____D () C:\Users\Marushka\AppData\Roaming\Mozilla
2014-06-25 15:35 - 2014-06-25 15:35 - 00000000 ____D () C:\_OTL
2014-06-25 14:08 - 2014-01-21 13:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-25 14:00 - 2014-06-24 13:54 - 00049962 _____ () C:\Users\Marushka\Downloads\EduCo Brochure print & ship_JUN2014.xlsx
2014-06-24 13:53 - 2014-06-24 13:53 - 00022587 _____ () C:\Users\Marushka\Downloads\2013_EduCO brochure shipping_2.xlsx
2014-06-23 19:15 - 2014-06-23 19:07 - 182446389 _____ () C:\Users\Marushka\Downloads\These Days...(iT)-atrilli.net.zip
2014-06-23 13:09 - 2014-06-23 12:57 - 94720259 _____ () C:\Users\Marushka\Downloads\Long_Term_2-(DatPiff.com).zip
2014-06-23 13:08 - 2014-06-23 12:56 - 64084157 _____ () C:\Users\Marushka\Downloads\Long_Term-(DatPiff.com).zip
2014-06-23 11:51 - 2014-06-23 11:50 - 04198277 _____ () C:\Users\Marushka\Downloads\How to Stop Worrying and Start Living By Dale Carnegie (pdf).rar
2014-06-23 11:51 - 2014-06-23 11:50 - 00000000 ____D () C:\Users\Marushka\Downloads\The Magic Of Thinking Big By David Schwart (Pdf,Epub) Gooner
2014-06-23 11:50 - 2014-06-23 11:50 - 00035328 _____ () C:\Users\Marushka\Downloads\drucker_eff.ppt
2014-06-23 11:49 - 2014-06-23 11:49 - 00011249 _____ () C:\Users\Marushka\Downloads\[kickass.to]the.magic.of.thinking.big.by.david.schwart.pdf.epub.gooner.torrent
Some content of TEMP:
====================
C:\Users\Marushka\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpj733my.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
==================== BCD ================================
Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume2
description Windows Boot Manager
locale en-US
inherit {globalsettings}
default {current}
resumeobject {388f8ff9-95e4-11e2-8190-c733c1bffeae}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale en-US
inherit {bootloadersettings}
recoverysequence {388f8ffb-95e4-11e2-8190-c733c1bffeae}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {388f8ff9-95e4-11e2-8190-c733c1bffeae}
nx OptIn
Windows Boot Loader
-------------------
identifier {388f8ffb-95e4-11e2-8190-c733c1bffeae}
device ramdisk=[C:]\Recovery\388f8ffb-95e4-11e2-8190-c733c1bffeae\Winre.wim,{388f8ffc-95e4-11e2-8190-c733c1bffeae}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\388f8ffb-95e4-11e2-8190-c733c1bffeae\Winre.wim,{388f8ffc-95e4-11e2-8190-c733c1bffeae}
systemroot \windows
nx OptIn
winpe Yes
Windows Boot Loader
-------------------
identifier {f757518f-1ed3-11e0-8507-f04da265dd5f}
device ramdisk=[\Device\HarddiskVolume2]\Recovery\WindowsRE\Winre.wim,{f7575190-1ed3-11e0-8507-f04da265dd5f}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[\Device\HarddiskVolume2]\Recovery\WindowsRE\Winre.wim,{f7575190-1ed3-11e0-8507-f04da265dd5f}
systemroot \windows
nx OptIn
winpe Yes
Resume from Hibernate
---------------------
identifier {388f8ff9-95e4-11e2-8190-c733c1bffeae}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale en-US
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
pae Yes
debugoptionenabled No
Windows Memory Tester
---------------------
identifier {memdiag}
device partition=\Device\HarddiskVolume2
path \boot\memtest.exe
description Windows Memory Diagnostic
locale en-US
inherit {globalsettings}
badmemoryaccess Yes
EMS Settings
------------
identifier {emssettings}
bootems Yes
Debugger Settings
-----------------
identifier {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
RAM Defects
-----------
identifier {badmemory}
Global Settings
---------------
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Boot Loader Settings
--------------------
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Hypervisor Settings
-------------------
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Resume Loader Settings
----------------------
identifier {resumeloadersettings}
inherit {globalsettings}
Device options
--------------
identifier {388f8ffc-95e4-11e2-8190-c733c1bffeae}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\388f8ffb-95e4-11e2-8190-c733c1bffeae\boot.sdi
Device options
--------------
identifier {f7575190-1ed3-11e0-8507-f04da265dd5f}
description Ramdisk Options
ramdisksdidevice partition=\Device\HarddiskVolume2
ramdisksdipath \Recovery\WindowsRE\boot.sdi
LastRegBack: 2014-07-18 19:21
==================== End Of Log ============================
Here's Addition:
Additional scan result of Farbar Recovery Scan Tool (x86) Version:21-07-2014
Ran by Marushka at 2014-07-22 21:56:36
Running from C:\Users\Marushka\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: ESET NOD32 Antivirus 6.0 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET NOD32 Antivirus 6.0 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.32126 - BitTorrent Inc.)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 2.1.0.213 - Adobe Systems Incorporated)
Adobe Digital Editions 2.0 (HKLM\...\Adobe Digital Editions 2.0) (Version: 2.0 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.9.900.117 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS6 (HKLM\...\{CFB770D7-8D43-1014-922B-CC2715FADE3F}) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Muse (HKLM\...\AdobeMuse) (Version: 6.0.751 - Adobe Systems Incorporated)
Adobe Muse (Version: 6.0.751 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Canon MF Toolbox 4.9.1.1.mf12 (HKLM\...\{6767DFEE-8909-453A-B553-C7693912B2EB}) (Version: 4.9.1.1.mf12 - CANON INC.)
Canon MF8000C Series (HKLM\...\{A7581B61-C9F9-4fea-B845-E7733C17EC19}) (Version: 3.9.0.0 - CANON INC.)
CCleaner (HKLM\...\CCleaner) (Version: 4.04 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Dell System Detect (HKCU\...\9204f5692a8faf3b) (Version: 5.4.0.4 - Dell)
DjVuLibre DjView 3.5.25.4+4.9.2 (HKLM\...\DjVuLibre+DjView) (Version: 3.5.25.4+4.9.2 - DjVuZone)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
ESET NOD32 Antivirus (HKLM\...\{64E4CDDD-F778-42C9-81C9-1BFB87DE517E}) (Version: 6.0.314.1 - ESET, spol s r. o.)
f.lux (HKCU\...\Flux) (Version: - )
Final Draft (HKLM\...\{E8FDC52C-83F4-4A0F-AA65-D0E8C0F3302F}) (Version: 9.0.0.163 - Final Draft, Inc.)
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.125 - Spoločnosť Google Inc.)
Google Talk Plugin (HKLM\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
GoToMeeting 5.5.0.1133 (HKCU\...\GoToMeeting) (Version: 5.5.0.1133 - CitrixOnline)
Heroes of Newerth (HKLM\...\hon) (Version: 2.3.0 - S2 Games)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{DF9C119C-7F26-45B9-93D4-7C372CBBBA11}) (Version: 11.1.0.126 - Apple Inc.)
Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden
KMP Service (HKLM\...\4F6D5E84-5826-4394-9F40-3A9A19165651_is1) (Version: - KMP)
Lingea Lexicon 5 (HKLM\...\Lexicon5) (Version: - )
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (Version: 1.00.0000 - Adobe) Hidden
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 en-US) (HKLM\...\Mozilla Thunderbird 24.6.0 (x86 en-US)) (Version: 24.6.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nitro Pro 8 (HKLM\...\{F70D8C2A-9320-4DDC-8693-6E7DEAA5B096}) (Version: 8.0.9.8 - Nitro)
Notepad++ (HKLM\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
PandoraRecovery (Remove Only) (HKLM\...\PandoraRecovery) (Version: - )
PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden
RICOH R5U8xx Media Driver ver.3.62.02 (HKLM\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.62.02 - RICOH)
simplitec simplicheck (HKLM\...\{1F52F36E-895D-4E01-B4D4-E23C4FA4193B}) (Version: 1.3.10.0 - simplitec GmbH)
Skype Click to Call (HKLM\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.16 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SWF Opener (HKLM\...\{01386D1F-ADE7-43B4-A4E9-312FC5BC726F}_is1) (Version: 1.3 - UnH Solutions)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synology Assistant (remove only) (HKLM\...\Synology Assistant) (Version: - )
Synology Data Replicator 3 (HKLM\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
The KMPlayer (remove only) (HKLM\...\The KMPlayer) (Version: 3.6.0.87 - KMP Media co., Ltd)
VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)
Webcam Video Capture 7.0 (HKLM\...\WVCSetup7.0.0_is1) (Version: 7.0.0 - Webcam Simulator)
WinHTTrack Website Copier 3.48-9 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.9 - HTTrack)
WinRAR 4.20 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Xara Web Designer 9 Premium (HKLM\...\MX.{D4D14FC9-2815-43EB-935B-482DB7C9526C}) (Version: 9.0.2.27772 - Xara Group Ltd)
Xara Web Designer 9 Premium (Version: 9.0.2.27772 - Xara Group Ltd) Hidden
Yodot RAR Repair (HKLM\...\{C7B07044-15B9-4894-9A88-C86761CF4B12}_is1) (Version: 1.0.0.12 - Yodot Software)
==================== Restore Points =========================
08-07-2014 06:16:40 Windows Update
09-07-2014 09:42:23 Windows Update
10-07-2014 06:03:30 Windows Update
15-07-2014 10:38:18 Windows Update
22-07-2014 07:15:30 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0E48E386-6C16-419A-BB70-262824BA8E81} - System32\Tasks\GoogleUpdateTaskMachineCore1ce8c2d48f3ea4f => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-26] (Google Inc.)
Task: {49FEC991-263A-4474-9868-664DD2A6EAC2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3240352030-749572926-2809846025-1000Core1cf8c793cf9e004 => C:\Users\Marushka\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-05] (Google Inc.)
Task: {6E599559-3743-479F-8500-0CDF19EE61C2} - System32\Tasks\GoogleUpdateTaskMachineUA1cf8acbbe7d0d47 => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-26] (Google Inc.)
Task: {72120360-B084-4628-BF18-F3F9CF8103BF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3240352030-749572926-2809846025-1000UA => C:\Users\Marushka\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-05] (Google Inc.)
Task: {915C96CF-2770-4DF8-9A7E-1E57A4E1B7E2} - System32\Tasks\Shutdown => C:\Windows\System32\shutdown.exe [2009-07-14] (Microsoft Corporation)
Task: {97FE11BE-2ED5-4587-A805-898219971016} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {BB2AD5B1-EA45-4634-8947-71197490C7DF} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-05-07] (Oracle Corporation)
Task: {D3A7B279-FCDA-45A4-8CD6-797BF9707633} - System32\Tasks\AdobeAAMUpdater-1.0-Marushka-PC-Marushka => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {DBA5AF9D-9492-474C-BB94-BFB739E98FC2} - System32\Tasks\Google Updater and Installer => C:\Users\Marushka\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-05] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce8c2d48f3ea4f.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8acbbe7d0d47.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3240352030-749572926-2809846025-1000Core1cf8c793cf9e004.job => C:\Users\Marushka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3240352030-749572926-2809846025-1000UA.job => C:\Users\Marushka\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-03-26 13:13 - 2012-08-31 16:01 - 00151552 _____ () C:\Windows\System32\HP1100LM.DLL
2013-04-05 16:15 - 2012-09-18 15:26 - 00169472 _____ () C:\Windows\System32\zlhp1020.dll
2013-04-05 16:15 - 2012-09-18 15:26 - 00059904 _____ () C:\Windows\system32\spool\PRTPROCS\W32X86\pphp1020.dll
2013-03-26 13:15 - 2012-08-31 16:01 - 00069632 _____ () C:\Windows\system32\spool\PRTPROCS\W32X86\HP1100PP.DLL
2013-03-26 13:13 - 2012-08-31 16:01 - 00794624 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\HP1100GC.dll
2013-03-26 13:13 - 2012-08-31 16:02 - 02306048 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\hp1100su.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-07-31 22:36 - 2013-07-31 22:36 - 02601328 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x86.dll
2010-01-09 21:18 - 2010-01-09 21:18 - 04254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 02:34 - 2010-01-21 02:34 - 08793952 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2012-06-18 17:24 - 2012-06-18 17:24 - 00260096 _____ () C:\Program Files\Notepad++\NppShell_05.dll
2014-07-22 09:11 - 2014-07-22 09:11 - 00043008 _____ () c:\users\marushka\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpj733my.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Marushka\AppData\Roaming\Dropbox\bin\libcef.dll
2010-01-09 21:18 - 2010-01-09 21:18 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2014-03-19 15:34 - 2014-03-19 15:34 - 00815104 _____ () C:\Program Files\Adobe\Adobe InDesign CS6\Utilities\adb.exe
2012-11-29 13:56 - 2012-11-29 13:56 - 00823816 _____ () C:\Program Files\Nitro\Pro 8\idrskrn14.dll
2014-07-19 11:12 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-19 11:12 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-19 11:12 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2013-12-12 14:28 - 2014-06-11 13:06 - 03022960 _____ () C:\Program Files\Mozilla Thunderbird\mozjs.dll
2013-12-12 14:28 - 2014-06-11 13:05 - 00158832 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAP32V60.dll
2013-12-12 14:28 - 2014-06-11 13:05 - 00023152 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-01-18 09:47 - 2013-01-18 09:47 - 04548096 _____ () C:\Program Files\The KMPlayer\libcodec.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: FlexNet Licensing Service => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NitroDriverReadSpool8 => 2
MSCONFIG\Services: PanService => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\Services: SynoDrService => 2
MSCONFIG\Services: TuneUp.Defrag => 3
MSCONFIG\Services: TuneUp.UtilitiesSvc => 2
MSCONFIG\Services: UsbClientService => 2
MSCONFIG\startupfolder: C:^Users^Marushka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marushka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Lingea Update Center.lnk => C:\Windows\pss\Lingea Update Center.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: f.lux => "C:\Users\Marushka\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: MFNetworkScanUtility => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT.EXE
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: uTorrent => "C:\Users\Marushka\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
==================== Faulty Device Manager Devices =============
Name: Generic Bluetooth Adapter
Description: Generic Bluetooth Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: GenericAdapter
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/22/2014 09:35:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: InDesign.exe, version: 8.0.0.370, time stamp: 0x4f72c3ee
Faulting module name: AdobePSL.dll, version: 13.0.0.19655, time stamp: 0x4f44dad4
Exception code: 0xc0000005
Fault offset: 0x0055112d
Faulting process id: 0x1614
Faulting application start time: 0xInDesign.exe0
Faulting application path: InDesign.exe1
Faulting module path: InDesign.exe2
Report Id: InDesign.exe3
Error: (07/20/2014 11:43:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 848
Start Time: 01cfa45886e503db
Termination Time: 1372
Application Path: C:\Windows\Explorer.EXE
Report Id: 5cd8fef4-1056-11e4-a7b3-f04da265dd5f
Error: (07/18/2014 04:27:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: InDesign.exe, version: 8.0.0.370, time stamp: 0x4f72c3ee
Faulting module name: AdobePSL.dll, version: 13.0.0.19655, time stamp: 0x4f44dad4
Exception code: 0xc0000005
Fault offset: 0x0055112d
Faulting process id: 0x15e0
Faulting application start time: 0xInDesign.exe0
Faulting application path: InDesign.exe1
Faulting module path: InDesign.exe2
Report Id: InDesign.exe3
Error: (07/18/2014 10:44:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: InDesign.exe, version: 8.0.0.370, time stamp: 0x4f72c3ee
Faulting module name: Public.dll, version: 8.0.0.370, time stamp: 0x4f72c345
Exception code: 0xc0000005
Fault offset: 0x00258338
Faulting process id: 0x1294
Faulting application start time: 0xInDesign.exe0
Faulting application path: InDesign.exe1
Faulting module path: InDesign.exe2
Report Id: InDesign.exe3
Error: (07/18/2014 10:42:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: InDesign.exe, version: 8.0.0.370, time stamp: 0x4f72c3ee
Faulting module name: Public.dll, version: 8.0.0.370, time stamp: 0x4f72c345
Exception code: 0xc0000005
Fault offset: 0x00258338
Faulting process id: 0x80c
Faulting application start time: 0xInDesign.exe0
Faulting application path: InDesign.exe1
Faulting module path: InDesign.exe2
Report Id: InDesign.exe3
Error: (07/18/2014 10:06:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: InDesign.exe, version: 0.0.0.0, time stamp: 0x4de8570b
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea91c
Exception code: 0xc0000005
Fault offset: 0x00056b0d
Faulting process id: 0x1530
Faulting application start time: 0xInDesign.exe0
Faulting application path: InDesign.exe1
Faulting module path: InDesign.exe2
Report Id: InDesign.exe3
Error: (07/18/2014 09:55:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: InDesign.exe, version: 8.0.0.370, time stamp: 0x4f72c3ee
Faulting module name: Public.dll, version: 8.0.0.370, time stamp: 0x4f72c345
Exception code: 0xc0000005
Fault offset: 0x00258338
Faulting process id: 0x11b0
Faulting application start time: 0xInDesign.exe0
Faulting application path: InDesign.exe1
Faulting module path: InDesign.exe2
Report Id: InDesign.exe3
Error: (07/18/2014 09:55:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: InDesign.exe, version: 8.0.0.370, time stamp: 0x4f72c3ee
Faulting module name: Public.dll, version: 8.0.0.370, time stamp: 0x4f72c345
Exception code: 0xc0000005
Fault offset: 0x00258338
Faulting process id: 0x17b0
Faulting application start time: 0xInDesign.exe0
Faulting application path: InDesign.exe1
Faulting module path: InDesign.exe2
Report Id: InDesign.exe3
Error: (07/07/2014 06:47:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: KMPProcess.exe, version: 1.0.1.2, time stamp: 0x51d50ca2
Faulting module name: PanStreamer.dll, version: 2.0.7.38, time stamp: 0x509c8e1f
Exception code: 0xc0000005
Fault offset: 0x0001dc74
Faulting process id: 0xefc
Faulting application start time: 0xKMPProcess.exe0
Faulting application path: KMPProcess.exe1
Faulting module path: KMPProcess.exe2
Report Id: KMPProcess.exe3
Error: (07/06/2014 01:21:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5476
System errors:
=============
Error: (07/22/2014 09:10:02 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 20:04:06 on 21. 7. 2014 was unexpected.
Error: (07/20/2014 11:50:25 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (07/20/2014 11:48:21 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053TrustedInstaller{752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (07/20/2014 11:48:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Windows Modules Installer service failed to start due to the following error:
%%1053
Error: (07/20/2014 11:48:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Modules Installer service to connect.
Error: (07/20/2014 08:34:47 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: The system detected an address conflict for IP address 192.168.123.52 with the system
having network hardware address BC-EE-7B-D7-50-02. Network operations on this system may
be disrupted as a result.
Error: (07/18/2014 08:58:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.
Error: (07/18/2014 08:58:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.
Error: (07/18/2014 08:58:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.
Error: (07/18/2014 08:58:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.
Microsoft Office Sessions:
=========================
Error: (07/22/2014 09:35:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: InDesign.exe8.0.0.3704f72c3eeAdobePSL.dll13.0.0.196554f44dad4c00000050055112d161401cfa57f410f44e1C:\Program Files\Adobe\Adobe InDesign CS6\InDesign.exeC:\Program Files\Adobe\Adobe InDesign CS6\AdobePSL.dllce6a5f63-1172-11e4-87d8-f04da265dd5f
Error: (07/20/2014 11:43:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.1.7601.1756784801cfa45886e503db1372C:\Windows\Explorer.EXE5cd8fef4-1056-11e4-a7b3-f04da265dd5f
Error: (07/18/2014 04:27:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: InDesign.exe8.0.0.3704f72c3eeAdobePSL.dll13.0.0.196554f44dad4c00000050055112d15e001cfa293dc26d632C:\Program Files\Adobe\Adobe InDesign CS6\InDesign.exeC:\Program Files\Adobe\Adobe InDesign CS6\AdobePSL.dll998ffaeb-0e87-11e4-8937-f04da265dd5f
Error: (07/18/2014 10:44:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: InDesign.exe8.0.0.3704f72c3eePublic.dll8.0.0.3704f72c345c000000500258338129401cfa2643fba6f8fC:\Program Files\Adobe\Adobe InDesign CS6\InDesign.exeC:\Program Files\Adobe\Adobe InDesign CS6\Public.dllae4f978d-0e57-11e4-8e37-f04da265dd5f
Error: (07/18/2014 10:42:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: InDesign.exe8.0.0.3704f72c3eePublic.dll8.0.0.3704f72c345c00000050025833880c01cfa2642e7b82aaC:\Program Files\Adobe\Adobe InDesign CS6\InDesign.exeC:\Program Files\Adobe\Adobe InDesign CS6\Public.dll74247372-0e57-11e4-8e37-f04da265dd5f
Error: (07/18/2014 10:06:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: InDesign.exe0.0.0.04de8570bntdll.dll6.1.7601.18247521ea91cc000000500056b0d153001cfa25f0c812b9aC:\Program Files\Adobe\Adobe InDesign CS5.5\InDesign.exeC:\Windows\SYSTEM32\ntdll.dll606756c2-0e52-11e4-8e37-f04da265dd5f
Error: (07/18/2014 09:55:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: InDesign.exe8.0.0.3704f72c3eePublic.dll8.0.0.3704f72c345c00000050025833811b001cfa25da23455caC:\Program Files\Adobe\Adobe InDesign CS6\InDesign.exeC:\Program Files\Adobe\Adobe InDesign CS6\Public.dlle12f954a-0e50-11e4-8e37-f04da265dd5f
Error: (07/18/2014 09:55:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: InDesign.exe8.0.0.3704f72c3eePublic.dll8.0.0.3704f72c345c00000050025833817b001cfa25d9b1bd331C:\Program Files\Adobe\Adobe InDesign CS6\InDesign.exeC:\Program Files\Adobe\Adobe InDesign CS6\Public.dlldf00510a-0e50-11e4-8e37-f04da265dd5f
Error: (07/07/2014 06:47:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: KMPProcess.exe1.0.1.251d50ca2PanStreamer.dll2.0.7.38509c8e1fc00000050001dc74efc01cf99c59ffdab55C:\Program Files\PANDORA.TV\PanService\KMPProcess.exeC:\Program Files\PANDORA.TV\PanService\PanStreamer.dll5fec4c38-05f6-11e4-a822-f04da265dd5f
Error: (07/06/2014 01:21:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5476
==================== Memory info ===========================
Percentage of memory in use: 57%
Total physical RAM: 3036.36 MB
Available physical RAM: 1304.47 MB
Total Pagefile: 6071.02 MB
Available Pagefile: 3624.77 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.49 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:283.4 GB) (Free:143.1 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 823CB020)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=283 GB) - (Type=07 NTFS)
==================== End Of Log ============================
And last, but not least, FSS:
Farbar Service Scanner Version: 21-07-2014
Ran by Marushka (administrator) on 22-07-2014 at 21:50:36
Running from "C:\Users\Marushka\Downloads"
Microsoft Windows 7 Professional Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Disabled Policy:
========================
Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Other Services:
==============
File Check:
========
C:\Windows\system32\nsisvc.dll => File is digitally signed
C:\Windows\system32\Drivers\nsiproxy.sys => File is digitally signed
C:\Windows\system32\dhcpcore.dll => File is digitally signed
C:\Windows\system32\Drivers\afd.sys => File is digitally signed
C:\Windows\system32\Drivers\tdx.sys => File is digitally signed
C:\Windows\system32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\system32\dnsrslvr.dll => File is digitally signed
C:\Windows\system32\mpssvc.dll => File is digitally signed
C:\Windows\system32\bfe.dll => File is digitally signed
C:\Windows\system32\Drivers\mpsdrv.sys => File is digitally signed
C:\Windows\system32\SDRSVC.dll => File is digitally signed
C:\Windows\system32\vssvc.exe => File is digitally signed
C:\Windows\system32\wscsvc.dll => File is digitally signed
C:\Windows\system32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\system32\wuaueng.dll => File is digitally signed
C:\Windows\system32\qmgr.dll => File is digitally signed
C:\Windows\system32\es.dll => File is digitally signed
C:\Windows\system32\cryptsvc.dll => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
**** End of log ****
Sign In
Create Account
