Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2013
Ran by Shogi (administrator) on PP1 on 30-10-2013 20:26:56
Running from D:\skanery
Windows 8 Enterprise (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
() C:\Program Files (x86)\IR\shutTask.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Usługa Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [404408 2012-09-24] (Acronis)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MountPoints2: F - "F:\autorun.exe" 
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [606208 2009-12-09] ()
HKLM-x32\...\Run: [gemstrmw] - C:\Windows\system32\gemstrmw.exe /r
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.)
HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207360 2010-03-18] (ArcSoft Inc.)
HKLM-x32\...\Run: [shutTask] - C:\Program Files (x86)\IR\shutTask.exe [110592 2010-01-05] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6045696 2012-09-24] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [944032 2012-07-24] (Acronis)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/?type=hp&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.qone8.com/?type=hp&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://start.qone8.com/?type=sc&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564&q={searchTerms}
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default
FF user.js: detected! => C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\user.js
FF NewTab: hxxp://start.qone8.com/newtab/?type=nt&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564
FF DefaultSearchEngine: qone8
FF SelectedSearchEngine: qone8
FF Homepage: https://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\searchplugins\morelenet.xml
FF SearchPlugin: C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\searchplugins\search-results.xml
FF SearchPlugin: C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qone8.xml
FF Extension: Add Bookmark Here ² - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\abhere2@moztw.org
FF Extension: No Name - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\staged
FF Extension: FEBE - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
FF Extension: DealPly  Shopping - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\{e53a26f5-7199-4a5b-86f5-d2e86854b979}
FF Extension: BonanzaDeals - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}
FF Extension: abhere2 - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\abhere2@moztw.org.xpi
FF Extension: firebug - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: savedpasswordeditor - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\savedpasswordeditor@daniel.dawson.xpi
FF Extension: defaults - C:\Users\Shogi\AppData\Roaming\Mozilla\Firefox\Profiles\qe8mwl0o.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFF
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://start.qone8.com/?type=sc&ts=1383153559&from=amt&uid=WDCXWD10EURX-63FH1Y0_WD-WMC1U690856408564

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-07] ()
S2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [5087584 2013-10-01] (TeamViewer GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2365792 2012-10-15] (TuneUp Software)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20131022.001\BHDrvx64.sys [1524824 2013-10-23] (Symantec Corporation)
S3 bthav; C:\Windows\system32\drivers\bthav.sys [40448 2008-07-10] (CSR, plc)
R3 cbfs3; C:\Windows\System32\drivers\cbfs3.sys [352456 2012-08-15] (EldoS Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows (R) Win 7 DDK provider)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
S3 FARMNTIO; c:\windows\system32\drivers\farmntio.sys [24664 2012-01-11] ()
S3 GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [129792 2013-04-24] (Gemalto)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20131029.002\IDSvia64.sys [521816 2013-10-29] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20131030.001\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20131030.001\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2012-11-29] (CACE Technologies, Inc.)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2012-06-18] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2012-06-18] ()
S3 RTL8192cu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1576080 2012-09-17] (Realtek Semiconductor Corporation                           )
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1576080 2012-09-17] (Realtek Semiconductor Corporation                           )
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R1 SymIM; C:\Windows\system32\DRIVERS\SymIMv.sys [43680 2013-03-05] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-06-03] (Acronis)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-30 20:26 - 2013-10-30 20:26 - 00000000 ____D C:\FRST
2013-10-30 18:19 - 2013-10-30 20:19 - 00000306 _____ C:\Windows\Tasks\Dealply.job
2013-10-30 18:19 - 2013-10-30 20:07 - 00001961 _____ C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2013-10-30 18:19 - 2013-10-30 18:19 - 00002644 _____ C:\Windows\System32\Tasks\Dealply
2013-10-30 18:19 - 2013-10-30 18:19 - 00001131 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-30 18:19 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-30 17:43 - 2013-10-30 17:43 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\Malwarebytes
2013-10-30 17:42 - 2013-10-30 18:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-30 17:42 - 2013-10-30 17:42 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 15:31 - 2013-10-30 15:31 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-10-30 13:20 - 2013-10-30 13:20 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-20 11:47 - 2013-10-20 11:47 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-20 11:47 - 2013-10-20 11:47 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-20 11:47 - 2013-10-20 11:47 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-20 11:47 - 2013-10-20 11:47 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-20 11:47 - 2013-10-20 11:47 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-20 07:19 - 2013-10-30 18:19 - 00002463 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-19 08:45 - 2013-10-19 10:54 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\FileZilla
2013-10-19 08:45 - 2013-10-19 08:46 - 00000000 ____D C:\Program Files (x86)\WinZip Driver Updater
2013-10-19 08:45 - 2013-10-19 08:45 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2013-10-19 07:03 - 2013-10-20 11:47 - 00000000 ____D C:\ProgramData\Oracle
2013-10-19 07:03 - 2013-10-19 07:03 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-19 07:03 - 2013-10-19 07:03 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-19 07:03 - 2013-10-19 07:03 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-19 07:03 - 2013-10-19 07:03 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-10-19 07:03 - 2013-10-19 07:03 - 00000000 ____D C:\Program Files\Java
2013-10-17 09:47 - 2013-10-19 13:20 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\TeamViewer
2013-10-17 09:47 - 2013-10-17 09:47 - 00000861 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-10-17 09:47 - 2013-06-06 07:24 - 00035112 _____ (TeamViewer GmbH) C:\Windows\system32\Drivers\teamviewervpn.sys
2013-10-16 06:17 - 2013-10-17 12:37 - 00422936 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-15 16:23 - 2013-10-02 02:38 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-15 16:23 - 2013-10-02 02:38 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-15 15:31 - 2013-10-15 15:31 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-10-15 13:57 - 2013-08-10 06:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2013-10-15 13:57 - 2013-08-10 06:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2013-10-15 13:57 - 2013-08-10 04:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-10-15 13:57 - 2013-08-03 07:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-10-15 13:57 - 2013-08-03 07:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-10-15 13:57 - 2013-08-03 07:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-10-15 13:57 - 2013-08-03 06:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2013-10-15 13:57 - 2013-08-03 06:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2013-10-15 13:57 - 2013-08-03 06:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2013-10-15 13:57 - 2013-08-02 07:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-15 13:57 - 2013-08-02 07:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-10-15 13:57 - 2013-08-02 07:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-15 13:57 - 2013-08-02 07:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-10-15 13:57 - 2013-08-02 06:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-15 13:57 - 2013-08-02 06:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-10-15 13:57 - 2013-08-02 06:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-15 13:57 - 2013-08-02 06:06 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-10-15 13:57 - 2013-08-01 11:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-15 13:57 - 2013-07-31 00:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml
2013-10-15 13:57 - 2013-07-25 00:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-10-15 13:57 - 2013-07-25 00:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2013-10-15 13:57 - 2013-07-13 07:15 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2013-10-15 13:57 - 2013-07-13 05:23 - 00366592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appmgr.dll
2013-10-15 13:57 - 2013-04-10 00:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2013-10-15 13:57 - 2013-04-09 23:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-10-15 13:54 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-15 13:54 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-15 13:54 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-15 13:54 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-15 13:54 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-15 13:54 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-15 13:54 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-15 13:54 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-15 13:54 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-15 13:54 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-15 13:54 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-15 13:54 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-15 13:54 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-15 13:54 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-15 13:54 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-15 13:54 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-15 13:54 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-15 13:54 - 2013-07-06 01:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-15 13:54 - 2013-07-04 03:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-15 13:54 - 2013-05-15 23:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-10-15 13:54 - 2013-05-15 23:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-10-15 13:54 - 2013-05-14 14:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-15 13:54 - 2013-05-14 10:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-15 13:54 - 2013-04-28 23:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-10-15 13:54 - 2013-02-21 11:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-15 13:54 - 2013-02-21 11:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-15 13:54 - 2013-02-21 11:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-15 13:54 - 2013-02-21 11:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-15 13:54 - 2013-02-21 11:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-15 13:54 - 2013-02-21 11:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-15 13:54 - 2013-02-19 10:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-10-15 13:54 - 2012-11-08 05:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-15 13:54 - 2012-11-08 05:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-15 13:53 - 2013-08-23 06:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-15 13:53 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-15 13:53 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-15 13:53 - 2013-07-05 23:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-15 13:53 - 2013-07-02 02:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-10-15 13:53 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-10-15 13:53 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-10-15 13:53 - 2013-07-01 23:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-10-15 13:53 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-15 13:53 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-15 13:53 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-15 13:53 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-15 13:53 - 2013-06-29 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-15 13:53 - 2013-06-29 04:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-15 13:53 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-15 13:53 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-15 13:53 - 2013-06-22 06:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-15 13:53 - 2013-06-22 06:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-15 13:53 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-15 13:53 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-15 13:53 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-15 13:53 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 16:08 - 2013-10-09 16:08 - 00000000 ____D C:\Users\Shogi\AppData\Local\Apps\2.0
2013-10-08 17:14 - 2013-10-08 17:14 - 00001925 _____ C:\Users\Public\Desktop\MyKeyFinder.lnk
2013-10-08 17:14 - 2013-10-08 17:14 - 00000000 ____D C:\Program Files (x86)\MyKeyFinder
2013-10-07 17:33 - 2013-10-07 17:33 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-07 09:24 - 2013-10-07 09:24 - 00001073 _____ C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\notepad+.lnk
2013-10-07 09:24 - 2001-03-15 01:40 - 00033280 _____ C:\Windows\system32\notepad+.exe

==================== One Month Modified Files and Folders =======

2013-10-30 20:26 - 2013-10-30 20:26 - 00000000 ____D C:\FRST
2013-10-30 20:24 - 2013-03-07 18:21 - 00000000 ____D C:\Program Files (x86)\PowerISO
2013-10-30 20:19 - 2013-10-30 18:19 - 00000306 _____ C:\Windows\Tasks\Dealply.job
2013-10-30 20:19 - 2013-08-11 10:28 - 00005040 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for PP1-Shogi PP1
2013-10-30 20:13 - 2012-07-26 10:50 - 00825988 _____ C:\Windows\system32\perfh015.dat
2013-10-30 20:13 - 2012-07-26 10:50 - 00169650 _____ C:\Windows\system32\perfc015.dat
2013-10-30 20:13 - 2012-07-26 08:28 - 01872456 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-30 20:08 - 2013-06-28 19:16 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-30 20:08 - 2013-04-21 19:41 - 00090270 _____ C:\Windows\PFRO.log
2013-10-30 20:08 - 2013-04-21 05:23 - 02082206 _____ C:\Windows\WindowsUpdate.log
2013-10-30 20:08 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-30 20:07 - 2013-10-30 18:19 - 00001961 _____ C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2013-10-30 20:07 - 2013-09-17 12:53 - 00000000 ____D C:\ProgramData\DSearchLink
2013-10-30 20:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-10-30 19:59 - 2013-03-07 19:59 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-30 19:53 - 2013-06-28 19:16 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-30 18:19 - 2013-10-30 18:19 - 00002644 _____ C:\Windows\System32\Tasks\Dealply
2013-10-30 18:19 - 2013-10-30 18:19 - 00001131 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-30 18:19 - 2013-10-30 17:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-30 18:19 - 2013-10-20 07:19 - 00002463 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-30 18:19 - 2013-03-07 15:21 - 00001656 _____ C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-30 17:43 - 2013-10-30 17:43 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\Malwarebytes
2013-10-30 17:42 - 2013-10-30 17:42 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 15:31 - 2013-10-30 15:31 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-10-30 15:31 - 2013-03-09 15:51 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-10-30 14:17 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-10-30 13:20 - 2013-10-30 13:20 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-29 07:13 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-10-20 11:47 - 2013-10-20 11:47 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-20 11:47 - 2013-10-20 11:47 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-20 11:47 - 2013-10-20 11:47 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-20 11:47 - 2013-10-20 11:47 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-20 11:47 - 2013-10-20 11:47 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-20 11:47 - 2013-10-19 07:03 - 00000000 ____D C:\ProgramData\Oracle
2013-10-20 11:47 - 2013-03-07 17:47 - 00000000 ____D C:\java
2013-10-20 07:19 - 2013-03-27 06:51 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-19 13:20 - 2013-10-17 09:47 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\TeamViewer
2013-10-19 10:54 - 2013-10-19 08:45 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\FileZilla
2013-10-19 08:46 - 2013-10-19 08:45 - 00000000 ____D C:\Program Files (x86)\WinZip Driver Updater
2013-10-19 08:45 - 2013-10-19 08:45 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2013-10-19 07:03 - 2013-10-19 07:03 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-19 07:03 - 2013-10-19 07:03 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-19 07:03 - 2013-10-19 07:03 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-19 07:03 - 2013-10-19 07:03 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-10-19 07:03 - 2013-10-19 07:03 - 00000000 ____D C:\Program Files\Java
2013-10-17 12:37 - 2013-10-16 06:17 - 00422936 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-17 10:00 - 2013-03-07 15:26 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3978686291-2099738226-2851485640-1001
2013-10-17 09:47 - 2013-10-17 09:47 - 00000861 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-10-17 06:50 - 2013-03-07 17:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-16 21:18 - 2013-08-18 16:25 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\Origin
2013-10-16 21:18 - 2013-08-18 16:25 - 00000000 ____D C:\ProgramData\Origin
2013-10-16 21:18 - 2013-08-18 16:25 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-15 17:25 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2013-10-15 16:23 - 2013-03-07 15:21 - 00000000 ___RD C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-15 16:23 - 2013-03-07 15:21 - 00000000 ___RD C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-15 16:19 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ToastData
2013-10-15 15:31 - 2013-10-15 15:31 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-10-15 15:31 - 2013-07-27 22:13 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-10-15 15:30 - 2013-08-15 12:35 - 00000000 ____D C:\Windows\system32\MRT
2013-10-15 15:30 - 2013-03-07 18:27 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-15 15:29 - 2013-03-07 17:45 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-15 13:59 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-10-11 20:34 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-10-11 10:12 - 2013-05-10 07:37 - 00010539 _____ C:\Windows\setupact.log
2013-10-09 16:08 - 2013-10-09 16:08 - 00000000 ____D C:\Users\Shogi\AppData\Local\Apps\2.0
2013-10-08 18:59 - 2013-03-07 19:59 - 00003818 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 17:14 - 2013-10-08 17:14 - 00001925 _____ C:\Users\Public\Desktop\MyKeyFinder.lnk
2013-10-08 17:14 - 2013-10-08 17:14 - 00000000 ____D C:\Program Files (x86)\MyKeyFinder
2013-10-07 19:38 - 2013-08-18 19:55 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-10-07 17:33 - 2013-10-07 17:33 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-07 17:33 - 2013-08-18 16:47 - 00052341 _____ C:\Windows\DirectX.log
2013-10-07 17:33 - 2013-03-08 23:15 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-10-07 16:37 - 2013-08-18 16:25 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-10-07 09:24 - 2013-10-07 09:24 - 00001073 _____ C:\Users\Shogi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\notepad+.lnk
2013-10-06 12:03 - 2013-09-27 20:59 - 00000000 ____D C:\Users\Shogi\AppData\Roaming\vlc
2013-10-05 17:27 - 2013-08-25 20:57 - 00000000 ____D C:\Program Files (x86)\Your Uninstaller! 7
2013-10-05 14:48 - 2013-06-28 19:16 - 00004026 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-05 14:48 - 2013-06-28 19:16 - 00003790 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-02 02:38 - 2013-10-15 16:23 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 02:38 - 2013-10-15 16:23 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 12:15 - 2013-03-08 10:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-29 07:42

==================== End Of Log ============================