Skocz do zawartości
  • 👋 Witaj na MPCForum!

    Przeglądasz forum jako gość, co oznacza, że wiele świetnych funkcji jest jeszcze przed Tobą! 😎

    • Pełny dostęp do działów i ukrytych treści
    • Możliwość pisania i odpowiadania w tematach
    • System prywatnych wiadomości
    • Zbieranie reputacji i rozwijanie swojego profilu
    • Członkostwo w jednej z największych społeczności graczy

    👉 Dołączenie zajmie Ci mniej niż minutę – a zyskasz znacznie więcej!

    Zarejestruj się teraz
  • 0

Bluescreen przy wyłączaniu systemu


Fx Padrino

Pytanie

Opublikowano

Witam, od jakiegoś czasu za każdym razem kiedy próbuje wyłączyć komputer wyskakuje mi blue screen :X

Po ponownym włączeniu posiadam komunikat Windows o tym problemie z czymś takim:

Problem signature:
  Problem Event Name:	BlueScreen
  OS Version:	6.1.7601.2.1.0.256.48
  Locale ID:	1045

Additional information about the problem:
  BCCode:	f4
  BCP1:	0000000000000003
  BCP2:	FFFFFA80068BD740
  BCP3:	FFFFFA80068BDA20
  BCP4:	FFFFF800035D1270
  OS Version:	6_1_7601
  Service Pack:	1_0
  Product:	256_1

Jest ktoś w stanie mi pomóc?

@DnaloPub Kappa

15 odpowiedzi na to pytanie

Rekomendowane odpowiedzi

Opublikowano

Nadal przez Bol.exe

 

Wykonaj ten fix w trybie awaryjnym. Tak samo jak poprzednio:

 

http://speedy.sh/TF7AG/fixlist.txt

 

Jeśli to nie pomoże (czyli jeśli nie zadziała wyłączenie komputera w normalnym trybie) to pomyślimy dalej. Chciałem od razu napisać co dalej, ale nie mogę sobie przypomnieć (zresztą jak zawsze) nazwy jednego programu. To jak nie zadziała to poszukam potem.

Opublikowano

Wstaw logi FRST. Pewnie siedzi w autostarcie. Nie chce mi się tłumaczyć jak można wywalić, a tak to się załatwi :P

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-08-2014
Ran by Piotr (administrator) on PIOTR-PC on 28-08-2014 22:58:00
Running from D:\Users\Piotr\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) D:\Windows\System32\atiesrxx.exe
(AMD) D:\Windows\System32\atieclxx.exe
() D:\Program Files (x86)\Acrylic DNS Proxy\AcrylicService.exe
(Microsoft Corporation) D:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Realtek Semiconductor) D:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) D:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Skillbrains) D:\Users\Piotr\AppData\Local\Skillbrains\lightshot\5.1.0.15\Lightshot.exe
(Skype Technologies S.A.) D:\Program Files (x86)\Skype\Phone\Skype.exe
(GG Network S.A.) D:\Users\Piotr\AppData\Local\GG\Application\gghub.exe
(Spotify Ltd) D:\Users\Piotr\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() D:\Users\Piotr\gRq12Xw\BoL.exe
() D:\Users\Piotr\gRq12Xw\BoL.exe
(Advanced Micro Devices Inc.) D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) D:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(GG Network S.A.) D:\Users\Piotr\AppData\Local\GG\Application\ggapp.exe
(GG Network S.A.) D:\Users\Piotr\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(GG Network S.A.) D:\Users\Piotr\AppData\Local\GG\Application\xulrunner\gghub.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\RADS\projects\lol_patcher\releases\0.0.0.1\deploy\rClient.exe
() C:\RADS\projects\lol_air_client\releases\0.0.1.105\deploy\LolClient.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => D:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => D:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => D:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] => D:\Windows\System32\SPReview\SPReview.exe [301568 2014-01-03] (Microsoft Corporation)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [EADM] => D:\Program Files (x86)\Origin\Origin.exe [3600216 2014-08-26] (Electronic Arts)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [LightShot] => D:\Users\Piotr\AppData\Local\Skillbrains\lightshot\Lightshot.exe [226592 2014-03-06] ()
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [IVONA Reader] => "D:\Program Files (x86)\IVONA\IVONA Reader\IVONA Reader.exe" -t -nosplash
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [IVONA ControlCenter] => "D:\Program Files (x86)\IVONA\IVONA ControlCenter\IVONA ControlCenter.exe" --action=run-silent
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [Skype] => D:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [GG] => D:\Users\Piotr\AppData\Local\GG\Application\gghub.exe [4023360 2014-07-09] (GG Network S.A.)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [Spotify Web Helper] => D:\Users\Piotr\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-08-24] (Spotify Ltd)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\RunOnce: [gLx83Pc] => D:\Users\Piotr\gRq12Xw\BoL.exe [1075598 2014-04-19] ()
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\MountPoints2: {75509bf6-fded-11e3-be7a-82d385c448fe} - K:\setup.exe
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\MountPoints2: {efb67724-71d5-11e3-8c2f-806e6f6e6963} - E:\Run.exe
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\MountPoints2: {efb67734-71d5-11e3-8c2f-806e6f6e6963} - M:\LaunchU3.exe -a
AppInit_DLLs: D:\Program Files (x86)\SupTab\SearchProtect64.dll => D:\Program Files (x86)\SupTab\SearchProtect64.dll File Not Found
AppInit_DLLs-x32: D:\Program Files (x86)\SupTab\SearchProtect32.dll => "D:\Program Files (x86)\SupTab\SearchProtect32.dll" File Not Found

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - D:\Program Files\Internet Explorer\iexplore.exe http://isearch.omiga-plus.com/?type=sc&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C
BHO: IVONA Reader -> {8664889D-ED18-4713-918F-E2BB69D8452B} -> D:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: IVONA Reader -> {8664889D-ED18-4713-918F-E2BB69D8452B} -> D:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} - D:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll No File
Toolbar: HKLM-x32 - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} - D:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{6CFEDA04-07F7-4021-8C92-407B33C8383E}: [NameServer] 8.8.8.8,192.168.2.1

FireFox:
========
FF ProfilePath: D:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\h7xyndkv.default
FF Plugin: @adobe.com/FlashPlayer -> D:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> D:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> D:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> D:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> D:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> D:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> D:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> D:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> D:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: D:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-it.xml
FF SearchPlugin: D:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-it.xml
FF SearchPlugin: D:\Program Files (x86)\mozilla firefox\browser\searchplugins\hoepli.xml
FF SearchPlugin: D:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-it.xml
FF Extension: Adblock Plus - D:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\h7xyndkv.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-01]
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - D:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - D:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
CHR Profile: D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Documenti Google) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-02]
CHR Extension: (Google Drive) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-02]
CHR Extension: (YouTube) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-02]
CHR Extension: (Ricerca Google) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-02]
CHR Extension: (Twitch Stream) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole [2014-07-03]
CHR Extension: (AdBlock) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-07-05]
CHR Extension: (Google Wallet) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-02]
CHR Extension: (Gmail) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AcrylicController; D:\Program Files (x86)\Acrylic DNS Proxy\AcrylicService.exe [518656 2014-01-04] () [File not signed]
S2 IePluginServices; D:\ProgramData\IePluginServices\PluginService.exe -service [X]
S2 WindowsProtectManger; D:\ProgramData\WindowsProtectManger\wprotectmanager.exe -service [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 EagleX64; \??\D:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\D:\Windows\gdrv.sys [X]
S3 X6va015; \??\D:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 X6va017; \??\D:\Windows\SysWOW64\Drivers\X6va017 [X]
S3 X6va021; \??\D:\Windows\SysWOW64\Drivers\X6va021 [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-28 22:58 - 2014-08-28 22:58 - 00013697 _____ () D:\Users\Piotr\Downloads\FRST.txt
2014-08-28 22:57 - 2014-08-28 22:58 - 00000000 ____D () D:\FRST
2014-08-28 22:57 - 2014-08-28 22:57 - 02103296 _____ (Farbar) D:\Users\Piotr\Downloads\FRST64.exe
2014-08-28 22:56 - 2014-08-28 22:56 - 01095168 _____ (Farbar) D:\Users\Piotr\Downloads\FRST.exe
2014-08-28 13:28 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) D:\Windows\system32\wuaueng.dll
2014-08-28 13:28 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) D:\Windows\system32\wuauclt.exe
2014-08-28 13:28 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) D:\Windows\system32\wups2.dll
2014-08-28 13:28 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) D:\Windows\system32\wucltux.dll
2014-08-28 13:28 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) D:\Windows\system32\wuwebv.dll
2014-08-28 13:28 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) D:\Windows\SysWOW64\wuwebv.dll
2014-08-28 13:28 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) D:\Windows\system32\wuapp.exe
2014-08-28 13:28 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) D:\Windows\SysWOW64\wuapp.exe
2014-08-28 13:24 - 2014-08-28 13:24 - 00262144 _____ () D:\Windows\Minidump\082814-17378-01.dmp
2014-08-27 09:28 - 2014-08-27 09:28 - 08318578 _____ () D:\Users\Piotr\Downloads\All In One 1st Download.rar
2014-08-27 09:10 - 2014-08-27 09:11 - 00407002 _____ () D:\Users\Piotr\Downloads\LibUpdater.rar
2014-08-26 18:29 - 2014-08-26 18:29 - 00000000 ____D () D:\Windows\Sun
2014-08-25 19:32 - 2014-08-25 19:32 - 00276256 _____ () D:\Windows\Minidump\082514-17487-01.dmp
2014-08-25 14:16 - 2014-08-25 14:16 - 00276256 _____ () D:\Windows\Minidump\082514-16442-01.dmp
2014-08-24 13:53 - 2014-08-24 13:53 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (2).rar
2014-08-24 13:51 - 2014-08-24 13:52 - 07466794 _____ () D:\Users\Piotr\Downloads\bl_.exe_.dll.zip
2014-08-24 13:48 - 2014-08-27 18:44 - 00000000 ____D () D:\Users\Piotr\Desktop\BOL
2014-08-24 13:48 - 2014-08-24 13:48 - 10339653 _____ () D:\Users\Piotr\Downloads\BoL+Studio.rar
2014-08-24 11:47 - 2014-08-24 11:47 - 17503652 _____ () D:\Users\Piotr\Downloads\BoL Studio (2).rar
2014-08-24 07:58 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) D:\Windows\system32\icardres.dll
2014-08-24 07:58 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) D:\Windows\SysWOW64\icardres.dll
2014-08-24 07:58 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) D:\Windows\system32\icardagt.exe
2014-08-24 07:58 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) D:\Windows\system32\infocardapi.dll
2014-08-24 07:58 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) D:\Windows\SysWOW64\icardagt.exe
2014-08-24 07:58 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) D:\Windows\SysWOW64\infocardapi.dll
2014-08-24 07:57 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) D:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-24 07:57 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) D:\Windows\system32\TsWpfWrp.exe
2014-08-24 01:53 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) D:\Windows\system32\iedkcs32.dll
2014-08-24 01:53 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iedkcs32.dll
2014-08-24 01:53 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) D:\Windows\system32\mshtml.dll
2014-08-24 01:53 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) D:\Windows\system32\mshtml.tlb
2014-08-24 01:53 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) D:\Windows\system32\ieetwcollectorres.dll
2014-08-24 01:53 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) D:\Windows\SysWOW64\mshtml.dll
2014-08-24 01:53 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) D:\Windows\system32\iesetup.dll
2014-08-24 01:53 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) D:\Windows\system32\vbscript.dll
2014-08-24 01:53 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) D:\Windows\system32\ieetwproxystub.dll
2014-08-24 01:53 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) D:\Windows\system32\iertutil.dll
2014-08-24 01:53 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) D:\Windows\system32\MshtmlDac.dll
2014-08-24 01:53 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) D:\Windows\system32\jsproxy.dll
2014-08-24 01:53 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) D:\Windows\system32\iernonce.dll
2014-08-24 01:53 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) D:\Windows\SysWOW64\mshtml.tlb
2014-08-24 01:53 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) D:\Windows\system32\ieui.dll
2014-08-24 01:53 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) D:\Windows\system32\ieUnatt.exe
2014-08-24 01:53 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) D:\Windows\system32\ieetwcollector.exe
2014-08-24 01:53 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) D:\Windows\system32\jscript9diag.dll
2014-08-24 01:53 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) D:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-24 01:53 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) D:\Windows\system32\dxtmsft.dll
2014-08-24 01:53 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) D:\Windows\SysWOW64\vbscript.dll
2014-08-24 01:53 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iesetup.dll
2014-08-24 01:53 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-24 01:53 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) D:\Windows\SysWOW64\MshtmlDac.dll
2014-08-24 01:53 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) D:\Windows\system32\jscript9.dll
2014-08-24 01:53 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) D:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-24 01:53 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iertutil.dll
2014-08-24 01:53 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) D:\Windows\system32\msrating.dll
2014-08-24 01:53 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) D:\Windows\SysWOW64\jsproxy.dll
2014-08-24 01:53 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) D:\Windows\system32\mshtmled.dll
2014-08-24 01:53 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iernonce.dll
2014-08-24 01:53 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieui.dll
2014-08-24 01:53 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) D:\Windows\system32\dxtrans.dll
2014-08-24 01:53 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieUnatt.exe
2014-08-24 01:53 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) D:\Windows\SysWOW64\jscript9diag.dll
2014-08-24 01:53 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) D:\Windows\SysWOW64\jscript9.dll
2014-08-24 01:53 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) D:\Windows\SysWOW64\dxtmsft.dll
2014-08-24 01:53 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) D:\Windows\system32\msfeeds.dll
2014-08-24 01:53 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) D:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-24 01:53 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) D:\Windows\system32\ie4uinit.exe
2014-08-24 01:53 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) D:\Windows\system32\inetcpl.cpl
2014-08-24 01:53 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) D:\Windows\system32\mshtmlmedia.dll
2014-08-24 01:53 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msrating.dll
2014-08-24 01:53 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) D:\Windows\SysWOW64\mshtmled.dll
2014-08-24 01:53 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) D:\Windows\SysWOW64\dxtrans.dll
2014-08-24 01:53 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) D:\Windows\system32\ieframe.dll
2014-08-24 01:53 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msfeeds.dll
2014-08-24 01:53 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) D:\Windows\SysWOW64\inetcpl.cpl
2014-08-24 01:53 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) D:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-24 01:53 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieframe.dll
2014-08-24 01:53 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) D:\Windows\system32\wininet.dll
2014-08-24 01:53 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) D:\Windows\system32\urlmon.dll
2014-08-24 01:53 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) D:\Windows\system32\ieapfltr.dll
2014-08-24 01:53 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieapfltr.dll
2014-08-24 01:53 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) D:\Windows\SysWOW64\wininet.dll
2014-08-24 01:53 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) D:\Windows\SysWOW64\urlmon.dll
2014-08-24 01:53 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) D:\Windows\system32\tzres.dll
2014-08-24 01:53 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) D:\Windows\SysWOW64\tzres.dll
2014-08-24 01:53 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) D:\Windows\system32\shell32.dll
2014-08-24 01:53 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) D:\Windows\SysWOW64\shell32.dll
2014-08-24 01:53 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) D:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-24 01:53 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) D:\Windows\system32\msi.dll
2014-08-24 01:53 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) D:\Windows\system32\authui.dll
2014-08-24 01:53 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) D:\Windows\system32\msihnd.dll
2014-08-24 01:53 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) D:\Windows\system32\consent.exe
2014-08-24 01:53 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msi.dll
2014-08-24 01:53 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) D:\Windows\SysWOW64\authui.dll
2014-08-24 01:53 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msihnd.dll
2014-08-24 01:52 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) D:\Windows\system32\aepdu.dll
2014-08-24 01:52 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) D:\Windows\system32\aeinv.dll
2014-08-24 01:52 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) D:\Windows\system32\rpcrt4.dll
2014-08-24 01:52 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) D:\Windows\SysWOW64\rpcrt4.dll
2014-08-24 01:46 - 2014-08-24 01:46 - 00276256 _____ () D:\Windows\Minidump\082414-16286-01.dmp
2014-08-09 00:11 - 2014-08-09 00:11 - 00276256 _____ () D:\Windows\Minidump\080914-15787-01.dmp
2014-08-08 13:00 - 2014-08-27 09:41 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Spotify
2014-08-08 13:00 - 2014-08-08 13:00 - 00001805 _____ () D:\Users\Piotr\Desktop\Spotify.lnk
2014-08-08 13:00 - 2014-08-08 13:00 - 00001791 _____ () D:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-08-08 12:59 - 2014-08-27 22:58 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Spotify
2014-08-08 12:59 - 2014-08-08 12:59 - 00127136 _____ (Spotify Ltd) D:\Users\Piotr\Downloads\SpotifySetup.exe
2014-08-07 18:47 - 2014-08-07 18:47 - 00040893 _____ () D:\Users\Piotr\Desktop\Untitled.wma
2014-08-07 12:03 - 2014-08-07 12:03 - 00000649 _____ () D:\Users\Piotr\Desktop\TERA.lnk
2014-08-07 12:03 - 2014-08-07 12:03 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\TERA
2014-08-07 12:03 - 2014-08-07 12:03 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA
2014-08-07 12:01 - 2014-08-07 12:01 - 15575488 _____ (Gameforge Productions GmbH ) D:\Users\Piotr\Downloads\TERASetup.exe
2014-08-06 12:13 - 2014-08-06 12:13 - 00276312 _____ () D:\Windows\Minidump\080614-15709-01.dmp
2014-08-03 22:22 - 2014-08-03 22:22 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Blizzard
2014-08-03 22:10 - 2014-08-03 22:10 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2014-08-03 22:09 - 2014-08-07 00:48 - 00000000 ____D () D:\Program Files (x86)\Hearthstone
2014-08-03 22:09 - 2014-08-03 22:10 - 00001213 _____ () D:\Users\Public\Desktop\Hearthstone.lnk
2014-08-03 22:09 - 2014-08-03 22:09 - 00001227 _____ () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\HearthstoneHearthstone.lnk
2014-08-03 22:07 - 2014-08-07 00:46 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Battle.net
2014-08-03 22:07 - 2014-08-07 00:46 - 00000000 ____D () D:\Program Files (x86)\Battle.net
2014-08-03 22:07 - 2014-08-03 22:09 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Battle.net
2014-08-03 22:07 - 2014-08-03 22:07 - 00001182 _____ () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
2014-08-03 22:07 - 2014-08-03 22:07 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Blizzard Entertainment
2014-08-03 22:07 - 2014-08-03 22:07 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-03 22:07 - 2014-08-03 22:07 - 00000000 ____D () D:\ProgramData\Blizzard Entertainment
2014-08-03 22:05 - 2014-08-03 22:05 - 03099552 _____ (Blizzard Entertainment) D:\Users\Piotr\Downloads\Hearthstone-Setup-plPL.exe
2014-08-03 22:05 - 2014-08-03 22:05 - 00000000 ____D () D:\ProgramData\Battle.net
2014-08-03 19:30 - 2014-08-03 19:32 - 00000000 ____D () D:\Users\Piotr\Desktop\Common
2014-08-03 19:30 - 2014-08-03 19:30 - 00478848 _____ () D:\Users\Piotr\Downloads\Common (1).rar
2014-07-31 10:25 - 2014-07-31 10:25 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-31 10:25 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) D:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-31 10:25 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) D:\Windows\SysWOW64\javaws.exe
2014-07-31 10:25 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) D:\Windows\SysWOW64\javaw.exe
2014-07-31 10:25 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) D:\Windows\SysWOW64\java.exe
2014-07-31 10:24 - 2014-07-31 10:25 - 00005658 _____ () D:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-30 23:13 - 2014-07-30 23:13 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (1).rar
2014-07-29 22:13 - 2014-07-29 22:13 - 00283865 _____ () D:\Users\Piotr\Downloads\Cracked 6 - Pro Series.rar
2014-07-29 21:59 - 2014-07-29 22:00 - 11570166 _____ () D:\Users\Piotr\Downloads\bol_studio.rar
2014-07-29 09:52 - 2014-07-29 09:52 - 00000000 ____H () D:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-28 22:58 - 2014-08-28 22:58 - 00013697 _____ () D:\Users\Piotr\Downloads\FRST.txt
2014-08-28 22:58 - 2014-08-28 22:57 - 00000000 ____D () D:\FRST
2014-08-28 22:57 - 2014-08-28 22:57 - 02103296 _____ (Farbar) D:\Users\Piotr\Downloads\FRST64.exe
2014-08-28 22:56 - 2014-08-28 22:56 - 01095168 _____ (Farbar) D:\Users\Piotr\Downloads\FRST.exe
2014-08-28 22:55 - 2014-07-05 17:09 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Skype
2014-08-28 22:47 - 2013-12-30 21:52 - 00000830 _____ () D:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-28 22:44 - 2014-07-02 12:39 - 00001148 _____ () D:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-28 21:15 - 2013-12-31 14:49 - 00000388 _____ () D:\Windows\Tasks\update-S-1-5-21-2676357988-3184012240-3673849284-1000.job
2014-08-28 19:54 - 2013-12-31 14:49 - 00000388 _____ () D:\Windows\Tasks\update-sys.job
2014-08-28 16:37 - 2014-07-02 16:54 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Notepad++
2014-08-28 15:06 - 2013-12-30 21:59 - 00000000 ____D () D:\ProgramData\Origin
2014-08-28 13:54 - 2009-07-14 05:20 - 00000000 ____D () D:\Windows\rescache
2014-08-28 13:32 - 2009-07-14 06:45 - 00025424 ____H () D:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-28 13:32 - 2009-07-14 06:45 - 00025424 ____H () D:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-28 13:29 - 2013-12-31 06:47 - 01765780 _____ () D:\Windows\WindowsUpdate.log
2014-08-28 13:25 - 2014-07-25 17:06 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\GG
2014-08-28 13:25 - 2014-07-02 12:39 - 00001144 _____ () D:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-28 13:25 - 2013-12-31 00:35 - 00000000 ____D () D:\Program Files (x86)\Origin
2014-08-28 13:24 - 2014-08-28 13:24 - 00262144 _____ () D:\Windows\Minidump\082814-17378-01.dmp
2014-08-28 13:24 - 2014-03-20 22:31 - 00000000 ____D () D:\Windows\Minidump
2014-08-28 13:24 - 2014-03-20 22:30 - 296560547 _____ () D:\Windows\MEMORY.DMP
2014-08-28 13:24 - 2009-07-14 07:08 - 00000006 ____H () D:\Windows\Tasks\SA.DAT
2014-08-28 13:24 - 2009-07-14 06:51 - 00042484 _____ () D:\Windows\setupact.log
2014-08-27 22:58 - 2014-08-08 12:59 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Spotify
2014-08-27 20:47 - 2014-07-01 14:19 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\BoL
2014-08-27 18:44 - 2014-08-24 13:48 - 00000000 ____D () D:\Users\Piotr\Desktop\BOL
2014-08-27 12:51 - 2009-07-14 07:13 - 00781790 _____ () D:\Windows\system32\PerfStringBackup.INI
2014-08-27 09:41 - 2014-08-08 13:00 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Spotify
2014-08-27 09:28 - 2014-08-27 09:28 - 08318578 _____ () D:\Users\Piotr\Downloads\All In One 1st Download.rar
2014-08-27 09:11 - 2014-08-27 09:10 - 00407002 _____ () D:\Users\Piotr\Downloads\LibUpdater.rar
2014-08-27 08:52 - 2013-12-30 21:52 - 00699568 _____ (Adobe Systems Incorporated) D:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-27 08:52 - 2013-12-30 21:52 - 00071344 _____ (Adobe Systems Incorporated) D:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-27 08:52 - 2013-12-30 21:52 - 00003768 _____ () D:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-26 18:29 - 2014-08-26 18:29 - 00000000 ____D () D:\Windows\Sun
2014-08-25 19:32 - 2014-08-25 19:32 - 00276256 _____ () D:\Windows\Minidump\082514-17487-01.dmp
2014-08-25 14:16 - 2014-08-25 14:16 - 00276256 _____ () D:\Windows\Minidump\082514-16442-01.dmp
2014-08-24 16:23 - 2009-07-14 05:20 - 00000000 ____D () D:\Windows\PolicyDefinitions
2014-08-24 13:53 - 2014-08-24 13:53 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (2).rar
2014-08-24 13:52 - 2014-08-24 13:51 - 07466794 _____ () D:\Users\Piotr\Downloads\bl_.exe_.dll.zip
2014-08-24 13:48 - 2014-08-24 13:48 - 10339653 _____ () D:\Users\Piotr\Downloads\BoL+Studio.rar
2014-08-24 11:47 - 2014-08-24 11:47 - 17503652 _____ () D:\Users\Piotr\Downloads\BoL Studio (2).rar
2014-08-24 08:03 - 2014-01-03 01:23 - 00000000 ____D () D:\Windows\system32\MRT
2014-08-24 08:00 - 2014-01-03 01:23 - 99218768 _____ (Microsoft Corporation) D:\Windows\system32\MRT.exe
2014-08-24 07:57 - 2014-06-27 16:19 - 00000000 ___SD () D:\Windows\system32\CompatTel
2014-08-24 01:46 - 2014-08-24 01:46 - 00276256 _____ () D:\Windows\Minidump\082414-16286-01.dmp
2014-08-09 00:11 - 2014-08-09 00:11 - 00276256 _____ () D:\Windows\Minidump\080914-15787-01.dmp
2014-08-08 13:00 - 2014-08-08 13:00 - 00001805 _____ () D:\Users\Piotr\Desktop\Spotify.lnk
2014-08-08 13:00 - 2014-08-08 13:00 - 00001791 _____ () D:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-08-08 12:59 - 2014-08-08 12:59 - 00127136 _____ (Spotify Ltd) D:\Users\Piotr\Downloads\SpotifySetup.exe
2014-08-07 18:47 - 2014-08-07 18:47 - 00040893 _____ () D:\Users\Piotr\Desktop\Untitled.wma
2014-08-07 12:03 - 2014-08-07 12:03 - 00000649 _____ () D:\Users\Piotr\Desktop\TERA.lnk
2014-08-07 12:03 - 2014-08-07 12:03 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\TERA
2014-08-07 12:03 - 2014-08-07 12:03 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA
2014-08-07 12:01 - 2014-08-07 12:01 - 15575488 _____ (Gameforge Productions GmbH ) D:\Users\Piotr\Downloads\TERASetup.exe
2014-08-07 04:06 - 2014-08-24 01:52 - 00529920 _____ (Microsoft Corporation) D:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-24 01:52 - 00424448 _____ (Microsoft Corporation) D:\Windows\system32\aeinv.dll
2014-08-07 00:48 - 2014-08-03 22:09 - 00000000 ____D () D:\Program Files (x86)\Hearthstone
2014-08-07 00:46 - 2014-08-03 22:07 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Battle.net
2014-08-07 00:46 - 2014-08-03 22:07 - 00000000 ____D () D:\Program Files (x86)\Battle.net
2014-08-06 18:01 - 2013-12-31 17:12 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\TS3Client
2014-08-06 17:33 - 2013-12-31 16:45 - 00000000 ____D () D:\Program Files\TeamSpeak 3 Client
2014-08-06 12:13 - 2014-08-06 12:13 - 00276312 _____ () D:\Windows\Minidump\080614-15709-01.dmp
2014-08-03 22:22 - 2014-08-03 22:22 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Blizzard
2014-08-03 22:10 - 2014-08-03 22:10 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2014-08-03 22:10 - 2014-08-03 22:09 - 00001213 _____ () D:\Users\Public\Desktop\Hearthstone.lnk
2014-08-03 22:09 - 2014-08-03 22:09 - 00001227 _____ () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\HearthstoneHearthstone.lnk
2014-08-03 22:09 - 2014-08-03 22:07 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Battle.net
2014-08-03 22:07 - 2014-08-03 22:07 - 00001182 _____ () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
2014-08-03 22:07 - 2014-08-03 22:07 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Blizzard Entertainment
2014-08-03 22:07 - 2014-08-03 22:07 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-08-03 22:07 - 2014-08-03 22:07 - 00000000 ____D () D:\ProgramData\Blizzard Entertainment
2014-08-03 22:05 - 2014-08-03 22:05 - 03099552 _____ (Blizzard Entertainment) D:\Users\Piotr\Downloads\Hearthstone-Setup-plPL.exe
2014-08-03 22:05 - 2014-08-03 22:05 - 00000000 ____D () D:\ProgramData\Battle.net
2014-08-03 19:32 - 2014-08-03 19:30 - 00000000 ____D () D:\Users\Piotr\Desktop\Common
2014-08-03 19:30 - 2014-08-03 19:30 - 00478848 _____ () D:\Users\Piotr\Downloads\Common (1).rar
2014-08-02 11:55 - 2009-07-14 07:08 - 00032616 _____ () D:\Windows\Tasks\SCHEDLGU.TXT
2014-08-01 01:41 - 2014-08-24 01:53 - 00348856 _____ (Microsoft Corporation) D:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-24 01:53 - 00307384 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iedkcs32.dll
2014-07-31 18:22 - 2014-07-25 14:49 - 00000019 _____ () D:\Users\Piotr\Desktop\52.72.txt
2014-07-31 10:25 - 2014-07-31 10:25 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-31 10:25 - 2014-07-31 10:24 - 00005658 _____ () D:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-31 10:25 - 2013-12-31 00:53 - 00000000 ____D () D:\ProgramData\Oracle
2014-07-31 10:25 - 2013-12-31 00:52 - 00000000 ____D () D:\Program Files (x86)\Java
2014-07-30 23:13 - 2014-07-30 23:13 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (1).rar
2014-07-29 22:13 - 2014-07-29 22:13 - 00283865 _____ () D:\Users\Piotr\Downloads\Cracked 6 - Pro Series.rar
2014-07-29 22:00 - 2014-07-29 21:59 - 11570166 _____ () D:\Users\Piotr\Downloads\bol_studio.rar
2014-07-29 09:52 - 2014-07-29 09:52 - 00000000 ____H () D:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

Some content of TEMP:
====================
D:\Users\Piotr\AppData\Local\Temp\13-12_win7_win8_64_dd_ccc_whql.exe
D:\Users\Piotr\AppData\Local\Temp\bitool.dll
D:\Users\Piotr\AppData\Local\Temp\el_inst.exe
D:\Users\Piotr\AppData\Local\Temp\fp_pl_pfs_installer.exe
D:\Users\Piotr\AppData\Local\Temp\InstHelper.exe
D:\Users\Piotr\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
D:\Users\Piotr\AppData\Local\Temp\MouseKeyboardCenterx64_1033.exe
D:\Users\Piotr\AppData\Local\Temp\npp.6.6.8.Installer.exe
D:\Users\Piotr\AppData\Local\Temp\smt_omiga-plus_new.exe
D:\Users\Piotr\AppData\Local\Temp\SRLDetectionLibrary3113859399979865366.dll
D:\Users\Piotr\AppData\Local\Temp\swt-win32-3349.dll
D:\Users\Piotr\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

D:\Windows\System32\winlogon.exe => File is digitally signed
D:\Windows\System32\wininit.exe => File is digitally signed
D:\Windows\SysWOW64\wininit.exe => File is digitally signed
D:\Windows\explorer.exe => File is digitally signed
D:\Windows\SysWOW64\explorer.exe => File is digitally signed
D:\Windows\System32\svchost.exe => File is digitally signed
D:\Windows\SysWOW64\svchost.exe => File is digitally signed
D:\Windows\System32\services.exe => File is digitally signed
D:\Windows\System32\User32.dll => File is digitally signed
D:\Windows\SysWOW64\User32.dll => File is digitally signed
D:\Windows\System32\userinit.exe => File is digitally signed
D:\Windows\SysWOW64\userinit.exe => File is digitally signed
D:\Windows\System32\rpcss.dll => File is digitally signed
D:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-27 13:11

==================== End Of Log ============================
Opublikowano
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Piotr (administrator) on PIOTR-PC on 22-09-2014 13:39:29
Running from D:\Users\Piotr\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) D:\Windows\System32\atiesrxx.exe
(AMD) D:\Windows\System32\atieclxx.exe
() D:\Program Files (x86)\Acrylic DNS Proxy\AcrylicService.exe
(Microsoft Corporation) D:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) D:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Realtek Semiconductor) D:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Electronic Arts) D:\Program Files (x86)\Origin\Origin.exe
(Skillbrains) D:\Users\Piotr\AppData\Local\Skillbrains\lightshot\5.1.0.15\Lightshot.exe
(Skype Technologies S.A.) D:\Program Files (x86)\Skype\Phone\Skype.exe
(GG Network S.A.) D:\Users\Piotr\AppData\Local\GG\Application\gghub.exe
(Spotify Ltd) D:\Users\Piotr\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() D:\Users\Piotr\gRq12Xw\BoL.exe
(Advanced Micro Devices Inc.) D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() D:\Users\Piotr\gRq12Xw\BoL.exe
(ATI Technologies Inc.) D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(GG Network S.A.) D:\Users\Piotr\AppData\Local\GG\Application\ggapp.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(GG Network S.A.) D:\Users\Piotr\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(GG Network S.A.) D:\Users\Piotr\AppData\Local\GG\Application\xulrunner\gghub.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) D:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) D:\Users\Piotr\Downloads\FRST64 (1).exe
(Microsoft Corporation) D:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => D:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => D:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => D:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\runonceex: [Flags] => 
HKU\.DEFAULT\...\RunOnce: [SPReview] => D:\Windows\System32\SPReview\SPReview.exe [301568 2014-01-03] (Microsoft Corporation)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [EADM] => D:\Program Files (x86)\Origin\Origin.exe [3600216 2014-09-16] (Electronic Arts)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [LightShot] => D:\Users\Piotr\AppData\Local\Skillbrains\lightshot\Lightshot.exe [226592 2014-03-06] ()
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [IVONA Reader] => "D:\Program Files (x86)\IVONA\IVONA Reader\IVONA Reader.exe" -t -nosplash
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [IVONA ControlCenter] => "D:\Program Files (x86)\IVONA\IVONA ControlCenter\IVONA ControlCenter.exe" --action=run-silent
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [Skype] => D:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [GG] => D:\Users\Piotr\AppData\Local\GG\Application\gghub.exe [4023360 2014-09-05] (GG Network S.A.)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [Spotify Web Helper] => D:\Users\Piotr\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-09-20] (Spotify Ltd)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\Run: [DAEMON Tools Lite] => D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\RunOnce: [gLx83Pc] => D:\Users\Piotr\gRq12Xw\BoL.exe [1075598 2014-04-19] ()
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\MountPoints2: {92cc4731-3996-11e4-9fcb-af0ebebca588} - K:\setup.exe
AppInit_DLLs: D:\Program Files (x86)\SupTab\SearchProtect64.dll => D:\Program Files (x86)\SupTab\SearchProtect64.dll File Not Found
AppInit_DLLs-x32: D:\Program Files (x86)\SupTab\SearchProtect32.dll => "D:\Program Files (x86)\SupTab\SearchProtect32.dll" File Not Found
ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => D:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => D:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => D:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => D:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: 111.111.111.111:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: No Name -> {8664889D-ED18-4713-918F-E2BB69D8452B} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name -> {8664889D-ED18-4713-918F-E2BB69D8452B} ->  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{6CFEDA04-07F7-4021-8C92-407B33C8383E}: [NameServer] 8.8.8.8,192.168.2.1

FireFox:
========
FF ProfilePath: D:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\h7xyndkv.default
FF Plugin: @adobe.com/FlashPlayer -> D:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> D:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> D:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> D:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> D:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> D:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> D:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> D:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> D:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: Adblock Plus - D:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\h7xyndkv.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-01]
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - D:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - D:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
CHR Profile: D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-02]
CHR Extension: (Google Drive) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-02]
CHR Extension: (YouTube) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-02]
CHR Extension: (Google Search) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-02]
CHR Extension: (Twitch Stream) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole [2014-07-03]
CHR Extension: (AdBlock) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-07-05]
CHR Extension: (Google Wallet) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-02]
CHR Extension: (Gmail) - D:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AcrylicController; D:\Program Files (x86)\Acrylic DNS Proxy\AcrylicService.exe [518656 2014-01-04] () [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 dtsoftbus01; D:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-11] (Disc Soft Ltd)
S3 Serial; D:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-21 12:34 - 2014-09-21 12:34 - 00010404 _____ () D:\Users\Piotr\Downloads\LSharp (2).rar
2014-09-19 16:40 - 2014-09-19 16:40 - 00000000 ____D () D:\Windows\System32\Tasks\Nero
2014-09-19 16:37 - 2014-09-19 16:37 - 00367472 _____ () D:\Users\Piotr\Downloads\SoftonicDownloader_per_nero-burning-rom.exe
2014-09-19 16:14 - 2014-09-19 17:07 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Nero
2014-09-19 16:06 - 2014-09-19 16:06 - 00003820 _____ () D:\Windows\System32\Tasks\Opera scheduled Autoupdate 1411135572
2014-09-19 16:06 - 2014-09-19 16:06 - 00001149 _____ () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-09-19 16:06 - 2014-09-19 16:06 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Opera Software
2014-09-19 16:06 - 2014-09-19 16:06 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Opera Software
2014-09-19 16:06 - 2014-09-19 16:06 - 00000000 ____D () D:\Program Files (x86)\Opera
2014-09-19 16:05 - 2014-09-19 16:05 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\OpenCandy
2014-09-19 16:04 - 2014-09-19 16:40 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-09-19 16:04 - 2014-09-19 16:40 - 00000000 ____D () D:\Program Files (x86)\Nero
2014-09-19 16:04 - 2014-09-19 16:05 - 00000000 ____D () D:\ProgramData\Nero
2014-09-19 15:50 - 2014-09-19 16:02 - 104940820 _____ () D:\Users\Piotr\Downloads\Nero.Burning.ROM.2014.PL.rar
2014-09-18 13:50 - 2014-09-18 13:50 - 00000000 ____D () D:\Users\Piotr\AppData\Local\LeagueSharp
2014-09-18 13:39 - 2014-09-18 13:39 - 03768718 _____ () D:\Users\Piotr\Downloads\HeheheM L#.rar
2014-09-17 13:30 - 2014-09-22 13:39 - 00000000 ____D () D:\FRST
2014-09-17 13:30 - 2014-09-17 13:30 - 02105856 _____ (Farbar) D:\Users\Piotr\Downloads\FRST64 (1).exe
2014-09-16 13:56 - 2014-09-16 13:57 - 04848976 _____ () D:\Users\Piotr\Downloads\League of Legends.rar
2014-09-15 19:33 - 2014-09-15 19:33 - 18374303 _____ () D:\Users\Piotr\Downloads\BoL+Studio (3).rar
2014-09-15 19:33 - 2014-09-15 19:33 - 00000000 ____D () D:\Users\Piotr\Desktop\BoL+Studio
2014-09-14 21:49 - 2014-09-15 20:33 - 00000000 ____D () D:\Users\Piotr\AbiSuite
2014-09-14 21:47 - 2014-09-14 21:47 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor
2014-09-14 21:47 - 2014-09-14 21:47 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor
2014-09-14 21:47 - 2014-09-14 21:47 - 00000000 ____D () D:\Program Files (x86)\AbiWord
2014-09-14 21:46 - 2014-09-14 21:46 - 08335349 _____ (AbiSource Developers) D:\Users\Piotr\Downloads\abiword-setup-2.8.6.exe
2014-09-13 14:50 - 2014-09-13 14:50 - 00000000 _____ () D:\Users\Piotr\Desktop\SPOTIFY 12.10 !!!!!!!!!!!!!!!!!!!!!!!!!!!.txt
2014-09-12 23:10 - 2014-02-07 08:24 - 00000000 ____D () D:\Users\Piotr\Desktop\Captain Claw v1.3
2014-09-12 13:07 - 2014-09-12 13:27 - 68938023 _____ () D:\Users\Piotr\Downloads\Captain+Claw+v1.3.rar
2014-09-12 12:22 - 2014-09-12 12:25 - 05720750 _____ () D:\Users\Piotr\Downloads\LSharp (1).rar
2014-09-12 11:02 - 2014-09-12 11:03 - 04875866 _____ () D:\Users\Piotr\Downloads\League Sharp By Skypciorek dla MPC Forum 4.16.rar
2014-09-11 21:26 - 2014-09-11 21:26 - 00862377 _____ () D:\Users\Piotr\Downloads\lsharp (1).zip
2014-09-11 20:58 - 2014-09-11 20:59 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (4).rar
2014-09-11 20:51 - 2014-09-11 20:51 - 00286412 _____ () D:\Users\Piotr\Downloads\sac - reborn (1).lua
2014-09-11 20:41 - 2014-09-11 20:42 - 00286412 _____ () D:\Users\Piotr\Downloads\sac - reborn.lua
2014-09-11 16:47 - 2014-09-11 17:21 - 00001908 _____ () D:\Windows\diagwrn.xml
2014-09-11 16:47 - 2014-09-11 17:21 - 00001908 _____ () D:\Windows\diagerr.xml
2014-09-11 16:46 - 2014-09-11 16:46 - 00283064 _____ (Disc Soft Ltd) D:\Windows\system32\Drivers\dtsoftbus01.sys
2014-09-11 16:46 - 2014-09-11 16:46 - 00001972 _____ () D:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-09-11 16:46 - 2014-09-11 16:46 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-09-11 16:45 - 2014-09-11 16:47 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\DAEMON Tools Lite
2014-09-11 16:45 - 2014-09-11 16:47 - 00000000 ____D () D:\ProgramData\DAEMON Tools Lite
2014-09-11 16:45 - 2014-09-11 16:46 - 00000000 ____D () D:\Program Files (x86)\DAEMON Tools Lite
2014-09-11 16:45 - 2014-09-11 16:45 - 13429504 _____ (Disc Soft Ltd) D:\Users\Piotr\Downloads\DTLite4491-0356.exe
2014-09-11 15:51 - 2014-09-11 16:39 - 3224686592 _____ () D:\Users\Piotr\Downloads\X15-65805.iso
2014-09-11 15:21 - 2014-09-11 15:43 - 50076440 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\windows6.1-kb972813-x64-it-it_3f0f5d78202e074e17a495beec821e1d326a8e2a.exe
2014-09-11 15:04 - 2014-09-11 15:04 - 05073240 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\vcredist_x86 (4).exe
2014-09-11 13:59 - 2014-09-11 14:16 - 31274426 _____ () D:\Users\Piotr\Downloads\KAPPA.rar
2014-09-11 12:52 - 2014-09-11 12:52 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (3).rar
2014-09-11 12:51 - 2014-09-11 12:51 - 10339653 _____ () D:\Users\Piotr\Downloads\BoL+Studio (2).rar
2014-09-11 12:47 - 2014-09-11 12:47 - 00120850 _____ () D:\Users\Piotr\Downloads\Marksman-Temp.rar
2014-09-10 21:23 - 2014-09-10 21:23 - 00865279 _____ () D:\Users\Piotr\Downloads\lsharp.zip
2014-09-10 03:05 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) D:\Windows\system32\iedkcs32.dll
2014-09-10 03:05 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iedkcs32.dll
2014-09-10 03:05 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) D:\Windows\system32\mshtml.dll
2014-09-10 03:05 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) D:\Windows\system32\mshtml.tlb
2014-09-10 03:05 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) D:\Windows\system32\ieetwcollectorres.dll
2014-09-10 03:05 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) D:\Windows\SysWOW64\mshtml.dll
2014-09-10 03:05 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) D:\Windows\system32\iertutil.dll
2014-09-10 03:05 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) D:\Windows\system32\jscript9.dll
2014-09-10 03:05 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) D:\Windows\system32\vbscript.dll
2014-09-10 03:05 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) D:\Windows\system32\iesetup.dll
2014-09-10 03:05 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) D:\Windows\system32\MshtmlDac.dll
2014-09-10 03:05 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) D:\Windows\system32\ieetwproxystub.dll
2014-09-10 03:05 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) D:\Windows\SysWOW64\jscript9.dll
2014-09-10 03:05 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) D:\Windows\system32\jsproxy.dll
2014-09-10 03:05 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) D:\Windows\system32\iernonce.dll
2014-09-10 03:05 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) D:\Windows\system32\ieui.dll
2014-09-10 03:05 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) D:\Windows\system32\jscript9diag.dll
2014-09-10 03:05 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) D:\Windows\system32\ieUnatt.exe
2014-09-10 03:05 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) D:\Windows\system32\ieetwcollector.exe
2014-09-10 03:05 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) D:\Windows\SysWOW64\mshtml.tlb
2014-09-10 03:05 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) D:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-10 03:05 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) D:\Windows\system32\dxtmsft.dll
2014-09-10 03:05 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) D:\Windows\SysWOW64\vbscript.dll
2014-09-10 03:05 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) D:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-10 03:05 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iesetup.dll
2014-09-10 03:05 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) D:\Windows\SysWOW64\MshtmlDac.dll
2014-09-10 03:05 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-10 03:05 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iertutil.dll
2014-09-10 03:05 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) D:\Windows\system32\msrating.dll
2014-09-10 03:05 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) D:\Windows\system32\mshtmled.dll
2014-09-10 03:05 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) D:\Windows\SysWOW64\jsproxy.dll
2014-09-10 03:05 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) D:\Windows\SysWOW64\iernonce.dll
2014-09-10 03:05 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) D:\Windows\system32\dxtrans.dll
2014-09-10 03:05 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieui.dll
2014-09-10 03:05 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieUnatt.exe
2014-09-10 03:05 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) D:\Windows\SysWOW64\jscript9diag.dll
2014-09-10 03:05 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) D:\Windows\SysWOW64\dxtmsft.dll
2014-09-10 03:05 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) D:\Windows\system32\msfeeds.dll
2014-09-10 03:05 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) D:\Windows\system32\ie4uinit.exe
2014-09-10 03:05 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) D:\Windows\system32\inetcpl.cpl
2014-09-10 03:05 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) D:\Windows\system32\mshtmlmedia.dll
2014-09-10 03:05 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) D:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-10 03:05 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msrating.dll
2014-09-10 03:05 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) D:\Windows\SysWOW64\dxtrans.dll
2014-09-10 03:05 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) D:\Windows\SysWOW64\mshtmled.dll
2014-09-10 03:05 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) D:\Windows\system32\ieframe.dll
2014-09-10 03:05 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieframe.dll
2014-09-10 03:05 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) D:\Windows\system32\wininet.dll
2014-09-10 03:05 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msfeeds.dll
2014-09-10 03:05 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) D:\Windows\SysWOW64\inetcpl.cpl
2014-09-10 03:05 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) D:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-10 03:05 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) D:\Windows\system32\urlmon.dll
2014-09-10 03:05 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) D:\Windows\SysWOW64\wininet.dll
2014-09-10 03:05 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) D:\Windows\SysWOW64\urlmon.dll
2014-09-10 03:05 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) D:\Windows\system32\ieapfltr.dll
2014-09-10 03:05 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) D:\Windows\SysWOW64\ieapfltr.dll
2014-09-10 03:01 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) D:\Windows\system32\msmpeg2vdec.dll
2014-09-10 03:01 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 00:42 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) D:\Windows\system32\TSWorkspace.dll
2014-09-10 00:42 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) D:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 00:42 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) D:\Windows\system32\lsasrv.dll
2014-09-10 00:42 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) D:\Windows\system32\kerberos.dll
2014-09-10 00:42 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) D:\Windows\SysWOW64\kerberos.dll
2014-09-10 00:42 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) D:\Windows\SysWOW64\secur32.dll
2014-09-10 00:42 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) D:\Windows\SysWOW64\sspicli.dll
2014-09-10 00:42 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) D:\Windows\system32\d3d10warp.dll
2014-09-10 00:42 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) D:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 00:41 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) D:\Windows\system32\aepdu.dll
2014-09-10 00:41 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) D:\Windows\system32\aeinv.dll
2014-09-09 21:27 - 2013-04-18 21:14 - 00000000 ____D () D:\Users\Piotr\Desktop\DisgustingAccCreator
2014-09-09 21:21 - 2014-09-09 21:24 - 13168773 _____ () D:\Users\Piotr\Downloads\DisgustingAccCreator(2) (1).rar
2014-09-09 14:11 - 2014-09-09 14:11 - 00002001 _____ () D:\Users\Piotr\Desktop\teams.txt
2014-09-09 14:10 - 2014-09-09 14:10 - 05890560 _____ () D:\Users\Piotr\Downloads\LSI v2.3 Installer.exe
2014-09-09 14:09 - 2014-09-21 18:03 - 00000000 ____D () D:\Users\Piotr\Desktop\LSharp
2014-09-09 14:06 - 2014-09-09 14:08 - 04688402 _____ () D:\Users\Piotr\Downloads\LSharp.rar
2014-09-09 13:03 - 2014-09-09 13:03 - 00372758 _____ () D:\Users\Piotr\Downloads\Enigma_Settings_Modifier_1.0.0.zip
2014-09-05 10:03 - 2014-09-05 10:04 - 00946512 _____ () D:\Users\Piotr\Downloads\VoliBot (1).rar
2014-09-05 10:01 - 2014-09-05 10:01 - 00553296 _____ () D:\Users\Piotr\Downloads\VoliBot.rar
2014-09-05 09:43 - 2014-09-05 09:44 - 07466794 _____ () D:\Users\Piotr\Downloads\bl_.exe_.dll (1).zip
2014-09-05 09:39 - 2014-09-05 09:40 - 10339653 _____ () D:\Users\Piotr\Downloads\BoL+Studio (1).rar
2014-09-05 09:37 - 2014-09-05 09:37 - 00000000 ____D () D:\ProgramData\GG
2014-09-04 20:45 - 2014-09-04 20:45 - 00001241 _____ () D:\Users\Public\Desktop\Play League of Legends.lnk
2014-09-04 20:45 - 2014-09-04 20:45 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-09-04 20:42 - 2014-09-04 20:43 - 35411496 _____ (Riot Games) D:\Users\Piotr\Downloads\LeagueofLegends_EUNE_Installer_04_21_14 (1).exe
2014-09-04 19:43 - 2014-09-04 19:43 - 01387710 _____ () D:\Users\Piotr\Downloads\GhostLoL - Beta v1.4.9.rar
2014-09-04 19:29 - 2014-09-04 19:29 - 04239442 _____ () D:\Users\Piotr\Downloads\Bot.rar
2014-09-03 13:32 - 2014-09-03 13:34 - 03981122 _____ () D:\Users\Piotr\Downloads\LeagueSharp UPDATE 30.08.2014 8 40.rar
2014-09-01 08:25 - 2014-09-01 08:25 - 00000000 __SHD () D:\Users\Piotr\AppData\Local\EmieUserList
2014-09-01 08:25 - 2014-09-01 08:25 - 00000000 __SHD () D:\Users\Piotr\AppData\Local\EmieSiteList
2014-08-31 15:49 - 2014-08-31 15:49 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2 Ravia.eu
2014-08-31 15:46 - 2014-08-31 15:47 - 531379938 _____ () D:\Users\Piotr\Downloads\Ravia_GameClient_2014-08-19.exe
2014-08-29 17:34 - 2014-08-29 17:34 - 00272808 _____ (Oracle Corporation) D:\Windows\SysWOW64\javaws.exe
2014-08-29 17:34 - 2014-08-29 17:34 - 00175528 _____ (Oracle Corporation) D:\Windows\SysWOW64\javaw.exe
2014-08-29 17:34 - 2014-08-29 17:34 - 00175528 _____ (Oracle Corporation) D:\Windows\SysWOW64\java.exe
2014-08-29 17:34 - 2014-08-29 17:34 - 00098216 _____ (Oracle Corporation) D:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-29 17:34 - 2014-08-29 17:34 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-29 17:34 - 2014-08-29 17:34 - 00000000 ____D () D:\Program Files (x86)\Java
2014-08-29 15:52 - 2014-08-29 15:52 - 01021432 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\NDP451-KB2859818-Web.exe
2014-08-29 15:51 - 2014-08-29 15:51 - 06498200 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\vcredist_x86 (3).exe
2014-08-29 15:51 - 2014-08-29 15:51 - 06498200 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\vcredist_x86 (2).exe
2014-08-29 15:50 - 2014-08-29 15:54 - 10846199 _____ () D:\Users\Piotr\Downloads\LeagueSharp (1).rar
2014-08-29 15:46 - 2014-08-29 15:47 - 01685006 _____ () D:\Users\Piotr\Downloads\LeagueSharp.rar
2014-08-28 22:58 - 2014-09-22 13:39 - 00011311 _____ () D:\Users\Piotr\Downloads\FRST.txt
2014-08-28 22:58 - 2014-08-28 22:59 - 00031853 _____ () D:\Users\Piotr\Downloads\Addition.txt
2014-08-28 22:57 - 2014-08-28 22:57 - 02103296 _____ (Farbar) D:\Users\Piotr\Downloads\FRST64.exe
2014-08-28 22:56 - 2014-08-28 22:56 - 01095168 _____ (Farbar) D:\Users\Piotr\Downloads\FRST.exe
2014-08-28 13:33 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) D:\Windows\system32\gdi32.dll
2014-08-28 13:33 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) D:\Windows\SysWOW64\gdi32.dll
2014-08-28 13:33 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) D:\Windows\system32\win32k.sys
2014-08-28 13:28 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) D:\Windows\system32\wuaueng.dll
2014-08-28 13:28 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) D:\Windows\system32\wuauclt.exe
2014-08-28 13:28 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) D:\Windows\system32\wups2.dll
2014-08-28 13:28 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) D:\Windows\system32\wucltux.dll
2014-08-28 13:28 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) D:\Windows\system32\wuwebv.dll
2014-08-28 13:28 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) D:\Windows\SysWOW64\wuwebv.dll
2014-08-28 13:28 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) D:\Windows\system32\wuapp.exe
2014-08-28 13:28 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) D:\Windows\SysWOW64\wuapp.exe
2014-08-28 13:24 - 2014-08-28 13:24 - 00262144 _____ () D:\Windows\Minidump\082814-17378-01.dmp
2014-08-27 09:28 - 2014-08-27 09:28 - 08318578 _____ () D:\Users\Piotr\Downloads\All In One 1st Download.rar
2014-08-27 09:10 - 2014-08-27 09:11 - 00407002 _____ () D:\Users\Piotr\Downloads\LibUpdater.rar
2014-08-26 18:29 - 2014-08-26 18:29 - 00000000 ____D () D:\Windows\Sun
2014-08-25 19:32 - 2014-08-25 19:32 - 00276256 _____ () D:\Windows\Minidump\082514-17487-01.dmp
2014-08-25 14:16 - 2014-08-25 14:16 - 00276256 _____ () D:\Windows\Minidump\082514-16442-01.dmp
2014-08-24 07:58 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) D:\Windows\system32\icardres.dll
2014-08-24 07:58 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) D:\Windows\SysWOW64\icardres.dll
2014-08-24 07:58 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) D:\Windows\system32\icardagt.exe
2014-08-24 07:58 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) D:\Windows\system32\infocardapi.dll
2014-08-24 07:58 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) D:\Windows\SysWOW64\icardagt.exe
2014-08-24 07:58 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) D:\Windows\SysWOW64\infocardapi.dll
2014-08-24 07:57 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) D:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-24 07:57 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) D:\Windows\system32\TsWpfWrp.exe
2014-08-24 01:53 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) D:\Windows\system32\tzres.dll
2014-08-24 01:53 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) D:\Windows\SysWOW64\tzres.dll
2014-08-24 01:53 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) D:\Windows\system32\shell32.dll
2014-08-24 01:53 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) D:\Windows\SysWOW64\shell32.dll
2014-08-24 01:53 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) D:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-24 01:53 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) D:\Windows\system32\msi.dll
2014-08-24 01:53 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) D:\Windows\system32\authui.dll
2014-08-24 01:53 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) D:\Windows\system32\msihnd.dll
2014-08-24 01:53 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) D:\Windows\system32\consent.exe
2014-08-24 01:53 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msi.dll
2014-08-24 01:53 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) D:\Windows\SysWOW64\authui.dll
2014-08-24 01:53 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) D:\Windows\SysWOW64\msihnd.dll
2014-08-24 01:52 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) D:\Windows\system32\rpcrt4.dll
2014-08-24 01:52 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) D:\Windows\SysWOW64\rpcrt4.dll
2014-08-24 01:46 - 2014-08-24 01:46 - 00276256 _____ () D:\Windows\Minidump\082414-16286-01.dmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-22 13:39 - 2014-09-17 13:30 - 00000000 ____D () D:\FRST
2014-09-22 13:39 - 2014-08-28 22:58 - 00011311 _____ () D:\Users\Piotr\Downloads\FRST.txt
2014-09-22 13:38 - 2014-07-05 17:09 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Skype
2014-09-22 13:37 - 2014-07-25 17:06 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\GG
2014-09-22 13:37 - 2014-07-02 12:39 - 00001144 _____ () D:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-22 13:37 - 2014-03-20 22:31 - 00000000 ____D () D:\Windows\Minidump
2014-09-22 13:37 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\092214-16863-01.dmp
2014-09-22 13:37 - 2013-12-31 00:35 - 00000000 ____D () D:\Program Files (x86)\Origin
2014-09-22 13:37 - 2009-07-14 07:08 - 00000006 ____H () D:\Windows\Tasks\SA.DAT
2014-09-22 13:37 - 2009-07-14 06:51 - 00001843 _____ () D:\Windows\setupact.log
2014-09-21 20:47 - 2013-12-30 21:52 - 00000830 _____ () D:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-21 20:44 - 2014-07-02 12:39 - 00001148 _____ () D:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-21 20:30 - 2009-07-14 06:45 - 00025760 ____H () D:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-21 20:30 - 2009-07-14 06:45 - 00025760 ____H () D:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-21 20:15 - 2013-12-31 06:47 - 01550196 _____ () D:\Windows\WindowsUpdate.log
2014-09-21 18:33 - 2014-06-27 15:45 - 00000000 ____D () D:\Users\Piotr\AppData\Local\PMB Files
2014-09-21 18:19 - 2014-08-08 12:59 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Spotify
2014-09-21 18:03 - 2014-09-09 14:09 - 00000000 ____D () D:\Users\Piotr\Desktop\LSharp
2014-09-21 15:37 - 2014-06-27 15:45 - 00000000 ____D () D:\ProgramData\PMB Files
2014-09-21 13:34 - 2014-03-17 17:26 - 00000000 ____D () D:\Users\Piotr\AppData\Local\CrashDumps
2014-09-21 12:34 - 2014-09-21 12:34 - 00010404 _____ () D:\Users\Piotr\Downloads\LSharp (2).rar
2014-09-21 07:03 - 2009-07-14 07:13 - 00006182 _____ () D:\Windows\system32\PerfStringBackup.INI
2014-09-21 07:01 - 2013-12-30 21:59 - 00000000 ____D () D:\ProgramData\Origin
2014-09-21 06:57 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\092114-16754-01.dmp
2014-09-20 12:39 - 2014-08-08 13:00 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Spotify
2014-09-20 12:19 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\092014-16879-01.dmp
2014-09-19 21:51 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091914-17643-01.dmp
2014-09-19 21:34 - 2013-12-30 22:52 - 00015302 _____ () D:\Windows\PFRO.log
2014-09-19 17:07 - 2014-09-19 16:14 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Nero
2014-09-19 16:40 - 2014-09-19 16:40 - 00000000 ____D () D:\Windows\System32\Tasks\Nero
2014-09-19 16:40 - 2014-09-19 16:04 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-09-19 16:40 - 2014-09-19 16:04 - 00000000 ____D () D:\Program Files (x86)\Nero
2014-09-19 16:39 - 2013-12-31 01:01 - 00000000 ____D () D:\ProgramData\Package Cache
2014-09-19 16:37 - 2014-09-19 16:37 - 00367472 _____ () D:\Users\Piotr\Downloads\SoftonicDownloader_per_nero-burning-rom.exe
2014-09-19 16:06 - 2014-09-19 16:06 - 00003820 _____ () D:\Windows\System32\Tasks\Opera scheduled Autoupdate 1411135572
2014-09-19 16:06 - 2014-09-19 16:06 - 00001149 _____ () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-09-19 16:06 - 2014-09-19 16:06 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Opera Software
2014-09-19 16:06 - 2014-09-19 16:06 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Opera Software
2014-09-19 16:06 - 2014-09-19 16:06 - 00000000 ____D () D:\Program Files (x86)\Opera
2014-09-19 16:05 - 2014-09-19 16:05 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\OpenCandy
2014-09-19 16:05 - 2014-09-19 16:04 - 00000000 ____D () D:\ProgramData\Nero
2014-09-19 16:02 - 2014-09-19 15:50 - 104940820 _____ () D:\Users\Piotr\Downloads\Nero.Burning.ROM.2014.PL.rar
2014-09-19 14:16 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091914-16582-01.dmp
2014-09-18 13:50 - 2014-09-18 13:50 - 00000000 ____D () D:\Users\Piotr\AppData\Local\LeagueSharp
2014-09-18 13:41 - 2014-07-16 18:33 - 00000000 ____D () D:\Users\Piotr\Desktop\dane
2014-09-18 13:39 - 2014-09-18 13:39 - 03768718 _____ () D:\Users\Piotr\Downloads\HeheheM L#.rar
2014-09-18 12:44 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091814-16005-01.dmp
2014-09-17 19:34 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091714-16988-01.dmp
2014-09-17 13:34 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091714-22495-01.dmp
2014-09-17 13:31 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091714-20514-01.dmp
2014-09-17 13:30 - 2014-09-17 13:30 - 02105856 _____ (Farbar) D:\Users\Piotr\Downloads\FRST64 (1).exe
2014-09-17 13:01 - 2014-02-17 21:47 - 00002471 _____ () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-17 12:58 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091714-15834-01.dmp
2014-09-16 13:57 - 2014-09-16 13:56 - 04848976 _____ () D:\Users\Piotr\Downloads\League of Legends.rar
2014-09-15 20:33 - 2014-09-14 21:49 - 00000000 ____D () D:\Users\Piotr\AbiSuite
2014-09-15 19:33 - 2014-09-15 19:33 - 18374303 _____ () D:\Users\Piotr\Downloads\BoL+Studio (3).rar
2014-09-15 19:33 - 2014-09-15 19:33 - 00000000 ____D () D:\Users\Piotr\Desktop\BoL+Studio
2014-09-15 14:44 - 2013-12-31 06:42 - 00329327 ____N () D:\Windows\Minidump\091514-19203-01.dmp
2014-09-14 21:49 - 2013-12-31 06:48 - 00000000 ____D () D:\Users\Piotr
2014-09-14 21:47 - 2014-09-14 21:47 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor
2014-09-14 21:47 - 2014-09-14 21:47 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor
2014-09-14 21:47 - 2014-09-14 21:47 - 00000000 ____D () D:\Program Files (x86)\AbiWord
2014-09-14 21:46 - 2014-09-14 21:46 - 08335349 _____ (AbiSource Developers) D:\Users\Piotr\Downloads\abiword-setup-2.8.6.exe
2014-09-14 11:41 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091414-18938-01.dmp
2014-09-13 14:50 - 2014-09-13 14:50 - 00000000 _____ () D:\Users\Piotr\Desktop\SPOTIFY 12.10 !!!!!!!!!!!!!!!!!!!!!!!!!!!.txt
2014-09-12 23:06 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091214-17534-01.dmp
2014-09-12 13:27 - 2014-09-12 13:07 - 68938023 _____ () D:\Users\Piotr\Downloads\Captain+Claw+v1.3.rar
2014-09-12 12:25 - 2014-09-12 12:22 - 05720750 _____ () D:\Users\Piotr\Downloads\LSharp (1).rar
2014-09-12 11:03 - 2014-09-12 11:02 - 04875866 _____ () D:\Users\Piotr\Downloads\League Sharp By Skypciorek dla MPC Forum 4.16.rar
2014-09-11 21:26 - 2014-09-11 21:26 - 00862377 _____ () D:\Users\Piotr\Downloads\lsharp (1).zip
2014-09-11 20:59 - 2014-09-11 20:58 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (4).rar
2014-09-11 20:51 - 2014-09-11 20:51 - 00286412 _____ () D:\Users\Piotr\Downloads\sac - reborn (1).lua
2014-09-11 20:42 - 2014-09-11 20:41 - 00286412 _____ () D:\Users\Piotr\Downloads\sac - reborn.lua
2014-09-11 17:21 - 2014-09-11 16:47 - 00001908 _____ () D:\Windows\diagwrn.xml
2014-09-11 17:21 - 2014-09-11 16:47 - 00001908 _____ () D:\Windows\diagerr.xml
2014-09-11 17:19 - 2009-07-14 06:51 - 00000000 _____ () D:\Windows\setuperr.log
2014-09-11 17:09 - 2013-12-31 06:42 - 00288575 ____N () D:\Windows\Minidump\091114-16317-01.dmp
2014-09-11 17:01 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\091114-15865-01.dmp
2014-09-11 16:47 - 2014-09-11 16:45 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\DAEMON Tools Lite
2014-09-11 16:47 - 2014-09-11 16:45 - 00000000 ____D () D:\ProgramData\DAEMON Tools Lite
2014-09-11 16:46 - 2014-09-11 16:46 - 00283064 _____ (Disc Soft Ltd) D:\Windows\system32\Drivers\dtsoftbus01.sys
2014-09-11 16:46 - 2014-09-11 16:46 - 00001972 _____ () D:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-09-11 16:46 - 2014-09-11 16:46 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-09-11 16:46 - 2014-09-11 16:45 - 00000000 ____D () D:\Program Files (x86)\DAEMON Tools Lite
2014-09-11 16:45 - 2014-09-11 16:45 - 13429504 _____ (Disc Soft Ltd) D:\Users\Piotr\Downloads\DTLite4491-0356.exe
2014-09-11 16:44 - 2009-07-14 05:20 - 00000000 ____D () D:\Windows\rescache
2014-09-11 16:39 - 2014-09-11 15:51 - 3224686592 _____ () D:\Users\Piotr\Downloads\X15-65805.iso
2014-09-11 15:43 - 2014-09-11 15:21 - 50076440 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\windows6.1-kb972813-x64-it-it_3f0f5d78202e074e17a495beec821e1d326a8e2a.exe
2014-09-11 15:04 - 2014-09-11 15:04 - 05073240 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\vcredist_x86 (4).exe
2014-09-11 14:16 - 2014-09-11 13:59 - 31274426 _____ () D:\Users\Piotr\Downloads\KAPPA.rar
2014-09-11 12:52 - 2014-09-11 12:52 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (3).rar
2014-09-11 12:51 - 2014-09-11 12:51 - 10339653 _____ () D:\Users\Piotr\Downloads\BoL+Studio (2).rar
2014-09-11 12:47 - 2014-09-11 12:47 - 00120850 _____ () D:\Users\Piotr\Downloads\Marksman-Temp.rar
2014-09-10 23:24 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\091014-20280-01.dmp
2014-09-10 21:23 - 2014-09-10 21:23 - 00865279 _____ () D:\Users\Piotr\Downloads\lsharp.zip
2014-09-10 13:47 - 2013-12-30 21:52 - 00701104 _____ (Adobe Systems Incorporated) D:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 13:47 - 2013-12-30 21:52 - 00071344 _____ (Adobe Systems Incorporated) D:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-10 13:47 - 2013-12-30 21:52 - 00003768 _____ () D:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-10 10:58 - 2013-12-31 06:42 - 00288635 _____ () D:\DUMP2be0.tmp
2014-09-10 03:05 - 2013-12-31 01:03 - 00765656 _____ () D:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-10 03:04 - 2014-01-03 01:23 - 00000000 ____D () D:\Windows\system32\MRT
2014-09-10 03:01 - 2014-01-03 01:23 - 101694776 _____ (Microsoft Corporation) D:\Windows\system32\MRT.exe
2014-09-10 03:00 - 2014-06-27 16:19 - 00000000 ___SD () D:\Windows\system32\CompatTel
2014-09-09 21:24 - 2014-09-09 21:21 - 13168773 _____ () D:\Users\Piotr\Downloads\DisgustingAccCreator(2) (1).rar
2014-09-09 14:11 - 2014-09-09 14:11 - 00002001 _____ () D:\Users\Piotr\Desktop\teams.txt
2014-09-09 14:10 - 2014-09-09 14:10 - 05890560 _____ () D:\Users\Piotr\Downloads\LSI v2.3 Installer.exe
2014-09-09 14:08 - 2014-09-09 14:06 - 04688402 _____ () D:\Users\Piotr\Downloads\LSharp.rar
2014-09-09 13:03 - 2014-09-09 13:03 - 00372758 _____ () D:\Users\Piotr\Downloads\Enigma_Settings_Modifier_1.0.0.zip
2014-09-08 10:14 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\090814-19234-01.dmp
2014-09-05 11:43 - 2014-08-03 22:07 - 00000000 ____D () D:\Users\Piotr\AppData\Local\Battle.net
2014-09-05 11:03 - 2014-08-03 22:09 - 00000000 ____D () D:\Program Files (x86)\Hearthstone
2014-09-05 11:01 - 2014-08-03 22:07 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Battle.net
2014-09-05 10:59 - 2014-08-03 22:07 - 00000000 ____D () D:\Program Files (x86)\Battle.net
2014-09-05 10:04 - 2014-09-05 10:03 - 00946512 _____ () D:\Users\Piotr\Downloads\VoliBot (1).rar
2014-09-05 10:01 - 2014-09-05 10:01 - 00553296 _____ () D:\Users\Piotr\Downloads\VoliBot.rar
2014-09-05 09:44 - 2014-09-05 09:43 - 07466794 _____ () D:\Users\Piotr\Downloads\bl_.exe_.dll (1).zip
2014-09-05 09:40 - 2014-09-05 09:39 - 10339653 _____ () D:\Users\Piotr\Downloads\BoL+Studio (1).rar
2014-09-05 09:38 - 2014-07-25 17:06 - 00000000 ____D () D:\Users\Piotr\AppData\Local\GG
2014-09-05 09:37 - 2014-09-05 09:37 - 00000000 ____D () D:\ProgramData\GG
2014-09-05 04:10 - 2014-09-10 00:41 - 00578048 _____ (Microsoft Corporation) D:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-10 00:41 - 00424448 _____ (Microsoft Corporation) D:\Windows\system32\aeinv.dll
2014-09-04 20:45 - 2014-09-04 20:45 - 00001241 _____ () D:\Users\Public\Desktop\Play League of Legends.lnk
2014-09-04 20:45 - 2014-09-04 20:45 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-09-04 20:45 - 2014-06-27 15:47 - 00000000 __SHD () D:\Windows\SysWOW64\AI_RecycleBin
2014-09-04 20:43 - 2014-09-04 20:42 - 35411496 _____ (Riot Games) D:\Users\Piotr\Downloads\LeagueofLegends_EUNE_Installer_04_21_14 (1).exe
2014-09-04 19:43 - 2014-09-04 19:43 - 01387710 _____ () D:\Users\Piotr\Downloads\GhostLoL - Beta v1.4.9.rar
2014-09-04 19:29 - 2014-09-04 19:29 - 04239442 _____ () D:\Users\Piotr\Downloads\Bot.rar
2014-09-03 13:34 - 2014-09-03 13:32 - 03981122 _____ () D:\Users\Piotr\Downloads\LeagueSharp UPDATE 30.08.2014 8 40.rar
2014-09-03 08:55 - 2014-07-05 17:09 - 00000000 ____D () D:\ProgramData\Skype
2014-09-02 10:55 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\090214-16551-01.dmp
2014-09-01 08:25 - 2014-09-01 08:25 - 00000000 __SHD () D:\Users\Piotr\AppData\Local\EmieUserList
2014-09-01 08:25 - 2014-09-01 08:25 - 00000000 __SHD () D:\Users\Piotr\AppData\Local\EmieSiteList
2014-09-01 08:07 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\090114-16879-01.dmp
2014-08-31 15:49 - 2014-08-31 15:49 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2 Ravia.eu
2014-08-31 15:47 - 2014-08-31 15:46 - 531379938 _____ () D:\Users\Piotr\Downloads\Ravia_GameClient_2014-08-19.exe
2014-08-30 18:29 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\083014-17815-01.dmp
2014-08-30 12:26 - 2013-12-31 00:39 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Origin
2014-08-30 12:16 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\083014-21746-01.dmp
2014-08-29 17:34 - 2014-08-29 17:34 - 00272808 _____ (Oracle Corporation) D:\Windows\SysWOW64\javaws.exe
2014-08-29 17:34 - 2014-08-29 17:34 - 00175528 _____ (Oracle Corporation) D:\Windows\SysWOW64\javaw.exe
2014-08-29 17:34 - 2014-08-29 17:34 - 00175528 _____ (Oracle Corporation) D:\Windows\SysWOW64\java.exe
2014-08-29 17:34 - 2014-08-29 17:34 - 00098216 _____ (Oracle Corporation) D:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-29 17:34 - 2014-08-29 17:34 - 00000000 ____D () D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-29 17:34 - 2014-08-29 17:34 - 00000000 ____D () D:\Program Files (x86)\Java
2014-08-29 17:34 - 2013-12-31 00:53 - 00000000 ____D () D:\ProgramData\Oracle
2014-08-29 17:25 - 2009-07-14 06:45 - 00268832 _____ () D:\Windows\system32\FNTCACHE.DAT
2014-08-29 17:24 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\082914-59046-01.dmp
2014-08-29 15:54 - 2014-08-29 15:50 - 10846199 _____ () D:\Users\Piotr\Downloads\LeagueSharp (1).rar
2014-08-29 15:52 - 2014-08-29 15:52 - 01021432 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\NDP451-KB2859818-Web.exe
2014-08-29 15:51 - 2014-08-29 15:51 - 06498200 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\vcredist_x86 (3).exe
2014-08-29 15:51 - 2014-08-29 15:51 - 06498200 _____ (Microsoft Corporation) D:\Users\Piotr\Downloads\vcredist_x86 (2).exe
2014-08-29 15:47 - 2014-08-29 15:46 - 01685006 _____ () D:\Users\Piotr\Downloads\LeagueSharp.rar
2014-08-29 12:30 - 2013-12-31 06:42 - 00288635 ____N () D:\Windows\Minidump\082914-17799-01.dmp
2014-08-28 22:59 - 2014-08-28 22:58 - 00031853 _____ () D:\Users\Piotr\Downloads\Addition.txt
2014-08-28 22:57 - 2014-08-28 22:57 - 02103296 _____ (Farbar) D:\Users\Piotr\Downloads\FRST64.exe
2014-08-28 22:56 - 2014-08-28 22:56 - 01095168 _____ (Farbar) D:\Users\Piotr\Downloads\FRST.exe
2014-08-28 16:37 - 2014-07-02 16:54 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\Notepad++
2014-08-28 13:24 - 2014-08-28 13:24 - 00262144 _____ () D:\Windows\Minidump\082814-17378-01.dmp
2014-08-28 13:24 - 2014-03-20 22:30 - 296560547 _____ () D:\Windows\MEMORY.DMP
2014-08-27 09:28 - 2014-08-27 09:28 - 08318578 _____ () D:\Users\Piotr\Downloads\All In One 1st Download.rar
2014-08-27 09:11 - 2014-08-27 09:10 - 00407002 _____ () D:\Users\Piotr\Downloads\LibUpdater.rar
2014-08-26 18:29 - 2014-08-26 18:29 - 00000000 ____D () D:\Windows\Sun
2014-08-25 19:32 - 2014-08-25 19:32 - 00276256 _____ () D:\Windows\Minidump\082514-17487-01.dmp
2014-08-25 14:16 - 2014-08-25 14:16 - 00276256 _____ () D:\Windows\Minidump\082514-16442-01.dmp
2014-08-24 16:23 - 2009-07-14 05:20 - 00000000 ____D () D:\Windows\PolicyDefinitions
2014-08-24 01:46 - 2014-08-24 01:46 - 00276256 _____ () D:\Windows\Minidump\082414-16286-01.dmp
2014-08-23 04:07 - 2014-08-28 13:33 - 00404480 _____ (Microsoft Corporation) D:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-28 13:33 - 00311808 _____ (Microsoft Corporation) D:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-28 13:33 - 03163648 _____ (Microsoft Corporation) D:\Windows\system32\win32k.sys

Some content of TEMP:
====================
D:\Users\Piotr\AppData\Local\Temp\ggdrive-menu.exe
D:\Users\Piotr\AppData\Local\Temp\ggdrive-overlay.exe
D:\Users\Piotr\AppData\Local\Temp\installstats.exe
D:\Users\Piotr\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
D:\Users\Piotr\AppData\Local\Temp\MD5Hash.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

D:\Windows\System32\winlogon.exe => File is digitally signed
D:\Windows\System32\wininit.exe => File is digitally signed
D:\Windows\SysWOW64\wininit.exe => File is digitally signed
D:\Windows\explorer.exe => File is digitally signed
D:\Windows\SysWOW64\explorer.exe => File is digitally signed
D:\Windows\System32\svchost.exe => File is digitally signed
D:\Windows\SysWOW64\svchost.exe => File is digitally signed
D:\Windows\System32\services.exe => File is digitally signed
D:\Windows\System32\User32.dll => File is digitally signed
D:\Windows\SysWOW64\User32.dll => File is digitally signed
D:\Windows\System32\userinit.exe => File is digitally signed
D:\Windows\SysWOW64\userinit.exe => File is digitally signed
D:\Windows\System32\rpcss.dll => File is digitally signed
D:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-18 14:54

==================== End Of Log ============================

@rafor4

A to .dmp

http://www.speedyshare.com/MCrT9/092214-16863-01.dmp
Opublikowano

Probably caused by : BoL.exe

 

I masz winowajce. Nie używaj Bola :P

No właśnie, mam tak odkąd zainstalowałem bola.

Jednak kiedy chce wyłączyć ten proces komputer mi sie resetuje :x

Opublikowano

Dzięki, pomogło <3

Fail, nie pomogło, niby wszystko sie udało na trybie awatyjnym, lecz na normalnym systemie dalej blue screen ;_;

A o to logi patch fixa:

@rafor4

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-08-2014
Ran by Piotr at 2014-09-19 21:35:54 Run:1
Running from D:\Users\Piotr\Downloads
Boot Mode: Safe Mode (minimal)
==============================================

Content of fixlist:
*****************
() D:\Users\Piotr\gRq12Xw\BoL.exe
() D:\Users\Piotr\gRq12Xw\BoL.exe
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\RunOnce: [gLx83Pc] => D:\Users\Piotr\gRq12Xw\BoL.exe [1075598 2014-04-19] ()
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\MountPoints2: {75509bf6-fded-11e3-be7a-82d385c448fe} - K:\setup.exe
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\MountPoints2: {efb67724-71d5-11e3-8c2f-806e6f6e6963} - E:\Run.exe
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\MountPoints2: {efb67734-71d5-11e3-8c2f-806e6f6e6963} - M:\LaunchU3.exe -a
AppInit_DLLs: D:\Program Files (x86)\SupTab\SearchProtect64.dll => D:\Program Files (x86)\SupTab\SearchProtect64.dll File Not Found
AppInit_DLLs-x32: D:\Program Files (x86)\SupTab\SearchProtect32.dll => "D:\Program Files (x86)\SupTab\SearchProtect32.dll" File Not Found
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - D:\Program Files\Internet Explorer\iexplore.exe http://isearch.omiga-plus.com/?type=sc&ts=1403872430&from=smt&uid=MAXTORXSTM3250820AS_6QE08V8CXXXX6QE08V8C
Toolbar: HKLM - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} - D:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll No File
Toolbar: HKLM-x32 - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} - D:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll No File
FF SearchPlugin: D:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-it.xml
FF SearchPlugin: D:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-it.xml
FF SearchPlugin: D:\Program Files (x86)\mozilla firefox\browser\searchplugins\hoepli.xml
FF SearchPlugin: D:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-it.xml
S2 IePluginServices; D:\ProgramData\IePluginServices\PluginService.exe -service [X]
S2 WindowsProtectManger; D:\ProgramData\WindowsProtectManger\wprotectmanager.exe -service [X]
S3 EagleX64; \??\D:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\D:\Windows\gdrv.sys [X]
S3 X6va015; \??\D:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 X6va017; \??\D:\Windows\SysWOW64\Drivers\X6va017 [X]
S3 X6va021; \??\D:\Windows\SysWOW64\Drivers\X6va021 [X]
2014-08-24 13:53 - 2014-08-24 13:53 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (2).rar
2014-08-24 13:51 - 2014-08-24 13:52 - 07466794 _____ () D:\Users\Piotr\Downloads\bl_.exe_.dll.zip
2014-08-24 13:48 - 2014-08-27 18:44 - 00000000 ____D () D:\Users\Piotr\Desktop\BOL
2014-08-24 13:48 - 2014-08-24 13:48 - 10339653 _____ () D:\Users\Piotr\Downloads\BoL+Studio.rar
2014-08-24 11:47 - 2014-08-24 11:47 - 17503652 _____ () D:\Users\Piotr\Downloads\BoL Studio (2).rar
2014-07-29 21:59 - 2014-07-29 22:00 - 11570166 _____ () D:\Users\Piotr\Downloads\bol_studio.rar
2014-08-28 21:15 - 2013-12-31 14:49 - 00000388 _____ () D:\Windows\Tasks\update-S-1-5-21-2676357988-3184012240-3673849284-1000.job
2014-08-28 19:54 - 2013-12-31 14:49 - 00000388 _____ () D:\Windows\Tasks\update-sys.job
2014-08-27 20:47 - 2014-07-01 14:19 - 00000000 ____D () D:\Users\Piotr\AppData\Roaming\BoL
2014-08-27 18:44 - 2014-08-24 13:48 - 00000000 ____D () D:\Users\Piotr\Desktop\BOL
2014-08-24 13:53 - 2014-08-24 13:53 - 05941880 _____ () D:\Users\Piotr\Downloads\Library Updater (2).rar
2014-08-24 13:52 - 2014-08-24 13:51 - 07466794 _____ () D:\Users\Piotr\Downloads\bl_.exe_.dll.zip
2014-08-24 13:48 - 2014-08-24 13:48 - 10339653 _____ () D:\Users\Piotr\Downloads\BoL+Studio.rar
2014-08-24 11:47 - 2014-08-24 11:47 - 17503652 _____ () D:\Users\Piotr\Downloads\BoL Studio (2).rar
2014-07-29 22:00 - 2014-07-29 21:59 - 11570166 _____ () D:\Users\Piotr\Downloads\bol_studio.rar
D:\Users\Piotr\AppData\Local\Temp\13-12_win7_win8_64_dd_ccc_whql.exe
D:\Users\Piotr\AppData\Local\Temp\bitool.dll
D:\Users\Piotr\AppData\Local\Temp\el_inst.exe
D:\Users\Piotr\AppData\Local\Temp\fp_pl_pfs_installer.exe
D:\Users\Piotr\AppData\Local\Temp\InstHelper.exe
D:\Users\Piotr\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
D:\Users\Piotr\AppData\Local\Temp\MouseKeyboardCenterx64_1033.exe
D:\Users\Piotr\AppData\Local\Temp\npp.6.6.8.Installer.exe
D:\Users\Piotr\AppData\Local\Temp\smt_omiga-plus_new.exe
D:\Users\Piotr\AppData\Local\Temp\SRLDetectionLibrary3113859399979865366.dll
D:\Users\Piotr\AppData\Local\Temp\swt-win32-3349.dll
D:\Users\Piotr\AppData\Local\Temp\xmlUpdater.exe
*****************

D:\Users\Piotr\gRq12Xw\BoL.exe => No running process found
D:\Users\Piotr\gRq12Xw\BoL.exe => No running process found
HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\...\RunOnce: [gLx83Pc] => D:\Users\Piotr\gRq12Xw\BoL.exe [1075598 2014-04-19] () => Value not found.
"HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{75509bf6-fded-11e3-be7a-82d385c448fe}" => Key deleted successfully.
"HKCR\CLSID\{75509bf6-fded-11e3-be7a-82d385c448fe}" => Key not found.
"HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{efb67724-71d5-11e3-8c2f-806e6f6e6963}" => Key deleted successfully.
"HKCR\CLSID\{efb67724-71d5-11e3-8c2f-806e6f6e6963}" => Key not found.
"HKU\S-1-5-21-2676357988-3184012240-3673849284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{efb67734-71d5-11e3-8c2f-806e6f6e6963}" => Key deleted successfully.
"HKCR\CLSID\{efb67734-71d5-11e3-8c2f-806e6f6e6963}" => Key not found.
"D:\Program Files (x86)\SupTab\SearchProtect64.dll" => Value Data not found.
"D:\Program Files (x86)\SupTab\SearchProtect32.dll" => Value Data not found.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{8664889D-ED18-4713-918F-E2BB69D8452B} => value deleted successfully.
"HKCR\CLSID\{8664889D-ED18-4713-918F-E2BB69D8452B}" => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{8664889D-ED18-4713-918F-E2BB69D8452B} => value deleted successfully.
"HKCR\Wow6432Node\CLSID\{8664889D-ED18-4713-918F-E2BB69D8452B}" => Key deleted successfully.
D:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-it.xml => Moved successfully.
D:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-it.xml => Moved successfully.
D:\Program Files (x86)\mozilla firefox\browser\searchplugins\hoepli.xml => Moved successfully.
D:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-it.xml => Moved successfully.
IePluginServices => Service deleted successfully.
WindowsProtectManger => Service deleted successfully.
EagleX64 => Service deleted successfully.
gdrv => Service deleted successfully.
X6va015 => Service deleted successfully.
X6va017 => Service deleted successfully.
X6va021 => Service deleted successfully.
D:\Users\Piotr\Downloads\Library Updater (2).rar => Moved successfully.
D:\Users\Piotr\Downloads\bl_.exe_.dll.zip => Moved successfully.
D:\Users\Piotr\Desktop\BOL => Moved successfully.
D:\Users\Piotr\Downloads\BoL+Studio.rar => Moved successfully.
D:\Users\Piotr\Downloads\BoL Studio (2).rar => Moved successfully.
D:\Users\Piotr\Downloads\bol_studio.rar => Moved successfully.
D:\Windows\Tasks\update-S-1-5-21-2676357988-3184012240-3673849284-1000.job => Moved successfully.
D:\Windows\Tasks\update-sys.job => Moved successfully.
D:\Users\Piotr\AppData\Roaming\BoL => Moved successfully.
"D:\Users\Piotr\Desktop\BOL" => File/Directory not found.
"D:\Users\Piotr\Downloads\Library Updater (2).rar" => File/Directory not found.
"D:\Users\Piotr\Downloads\bl_.exe_.dll.zip" => File/Directory not found.
"D:\Users\Piotr\Downloads\BoL+Studio.rar" => File/Directory not found.
"D:\Users\Piotr\Downloads\BoL Studio (2).rar" => File/Directory not found.
"D:\Users\Piotr\Downloads\bol_studio.rar" => File/Directory not found.
D:\Users\Piotr\AppData\Local\Temp\13-12_win7_win8_64_dd_ccc_whql.exe => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\bitool.dll => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\el_inst.exe => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\fp_pl_pfs_installer.exe => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\InstHelper.exe => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\MouseKeyboardCenterx64_1033.exe => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\npp.6.6.8.Installer.exe => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\smt_omiga-plus_new.exe => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\SRLDetectionLibrary3113859399979865366.dll => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\swt-win32-3349.dll => Moved successfully.
D:\Users\Piotr\AppData\Local\Temp\xmlUpdater.exe => Moved successfully.

==== End of Fixlog ====
Opublikowano

Odinstaluj Bola. Nie wiem gdzie leży problem, ale jest to na 100% wina tej aplikacji.

Właśnie problem w tym że musiałbym jakoś wewnętrznie odinstalować to, ponieważ zwykłe usunięcie folderu nic nie daje :X

Zarchiwizowany

Ten temat przebywa obecnie w archiwum. Dodawanie nowych odpowiedzi zostało zablokowane.

×
×
  • Dodaj nową pozycję...