Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-06-2014
Ran by Krzysiek (administrator) on KRZYSZTOF on 20-06-2014 19:32:26
Running from C:\Users\Krzysiek\Desktop\skaner F
Platform: Windows 8 (X64) OS Language: Polski (Polska)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccsvchst.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(AMD) C:\Windows\System32\atieclxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(GG Network S.A.) C:\Users\Krzysiek\AppData\Local\GG\Application\gghub.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(GG Network S.A.) C:\Users\Krzysiek\AppData\Local\GG\Application\ggapp.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(GG Network S.A.) C:\Users\Krzysiek\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(GG Network S.A.) C:\Users\Krzysiek\AppData\Local\GG\Application\xulrunner\gghub.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70\opera.exe
() C:\Program Files (x86)\Opera\22.0.1471.70\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.70\opera.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-08-20] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3053808 2013-08-11] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491632 2012-09-10] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Plugin Install] => C:\Program Files (x86)\QuickTime\Plugins\DeleteMe1.exe [86016 2013-10-06] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [379904 2013-01-10] (IVT Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-06-10] (Hewlett-Packard)
HKU\S-1-5-21-1657043038-3288557173-2309702434-1002\...\Run: [GG] => C:\Users\Krzysiek\AppData\Local\GG\Application\gghub.exe [4023360 2014-06-11] (GG Network S.A.)
HKU\S-1-5-21-1657043038-3288557173-2309702434-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21445248 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-1657043038-3288557173-2309702434-1002\...\MountPoints2: {e5b64839-2c4b-11e3-be85-38eaa7ebf462} - "F:\AutoRun.exe" 
HKU\S-1-5-21-1657043038-3288557173-2309702434-1002\...\MountPoints2: {e5b64a25-2c4b-11e3-be85-38eaa7ebf462} - "F:\AutoRun.exe" 
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NIS&pvid=20.4.0.40
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NIS&pvid=20.4.0.40
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {90EC94BD-C139-4B72-ADD0-FBFC3876C3A7} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {90EC94BD-C139-4B72-ADD0-FBFC3876C3A7} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKCU - {90EC94BD-C139-4B72-ADD0-FBFC3876C3A7} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Krzysiek\AppData\Roaming\Mozilla\Firefox\Profiles\616yodz2.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin-x32: @ganymede/BOARDS,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\BOARDS\NPBOARDS.dll (Ganymede Technologies)
FF Plugin-x32: @ganymede/CARDS,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\CARDS\NPCARDS.dll (Ganymede Technologies)
FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )
FF Plugin-x32: @ganymede/SUDOKU,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\SUDOKU\NPSUDOKU.dll (Ganymede Technologies)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar-Player - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPSUDOKU.dll (Ganymede Technologies)
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFF [2014-06-17]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx [2014-06-18]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-09-18] (Advanced Micro Devices, Inc.) [File not signed]
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1619704 2013-03-26] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2013-01-10] (IVT Corporation) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [File not signed]
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-09] ()
S2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [215416 2013-10-09] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36520 2012-09-14] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-08-21] (Advanced Micro Devices)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [1530160 2014-06-06] (Symantec Corporation)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 bthav; 
U4 BthAvrcpTg; 
U4 BthHFEnum; 
U4 bthhfhid; 
S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49584 2013-03-25] (Ralink Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-17] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-17] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20140619.001\IDSvia64.sys [525016 2014-06-16] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20140620.002\ENG64.SYS [126040 2014-06-17] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20140620.002\EX64.SYS [2099288 2014-06-17] (Symantec Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2013-12-02] (Ralink Technology, Corp.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-25] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-25] (Synaptics Incorporated)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2014-06-18] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation)
S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-20 15:58 - 2014-06-20 15:58 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-06-20 15:55 - 2014-06-20 15:56 - 00001944 _____ () C:\{A78E82E0-409D-47CB-91C0-D720A2DA8AD0}
2014-06-20 11:48 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-20 11:47 - 2014-06-20 15:49 - 00000000 ____D () C:\AdwCleaner
2014-06-20 11:44 - 2014-06-20 11:45 - 00000000 ____D () C:\Users\Krzysiek\Desktop\skaner adw
2014-06-19 09:23 - 2014-06-19 09:23 - 01058200 _____ (Adobe) C:\Users\Krzysiek\Downloads\install_flashplayer14x32au_chrd_dn_aaa_aih.exe
2014-06-19 08:35 - 2014-06-19 08:35 - 00025802 _____ () C:\Users\Krzysiek\Downloads\FRST.txt
2014-06-18 20:38 - 2014-06-18 20:38 - 00142535 _____ () C:\Users\Krzysiek\Downloads\Shortcut.txt
2014-06-18 18:56 - 2014-06-18 18:56 - 00000000 ____D () C:\Users\Krzysiek\Desktop\skaner g
2014-06-18 18:52 - 2014-06-18 18:52 - 00623224 _____ (Duplex Secure Ltd.) C:\Users\Krzysiek\Downloads\SPTDinst-v186-x64.exe
2014-06-18 09:51 - 2014-06-18 09:51 - 00039960 _____ () C:\Users\Krzysiek\Downloads\Addition.txt
2014-06-18 06:39 - 2014-06-18 06:55 - 00000000 ____D () C:\Users\Krzysiek\Desktop\skaner OTL
2014-06-18 06:33 - 2014-06-18 06:34 - 02081280 _____ (Farbar) C:\Users\Krzysiek\Downloads\FRST64.exe
2014-06-17 21:20 - 2014-06-20 19:32 - 00000000 ____D () C:\FRST
2014-06-17 21:19 - 2014-06-20 19:32 - 00000000 ____D () C:\Users\Krzysiek\Desktop\skaner F
2014-06-17 18:17 - 2014-06-17 18:17 - 00000000 ____D () C:\Users\Krzysiek\Documents\Symantec
2014-06-17 18:15 - 2014-06-20 15:53 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-06-17 18:15 - 2014-06-18 18:46 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-06-17 18:15 - 2014-06-18 18:46 - 00007631 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-06-17 18:15 - 2014-06-17 18:15 - 00000000 ____D () C:\Program Files\Symantec
2014-06-17 18:15 - 2014-06-17 18:15 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-06-17 18:12 - 2014-06-20 15:53 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-06-17 18:12 - 2014-06-20 15:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-06-17 18:12 - 2014-06-17 18:12 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-06-17 18:04 - 2014-06-17 18:06 - 153633520 _____ (Symantec Corporation) C:\Users\Krzysiek\Downloads\NIS_20.1.0.24_SYMTB_PROMO_13_MRFTT_417_7999-STDIO.exe
2014-06-17 11:26 - 2014-06-17 11:26 - 00001306 _____ () C:\Users\Krzysiek\Desktop\CDex — skrót.lnk
2014-06-13 10:58 - 2014-06-13 10:58 - 00000000 ____D () C:\Users\Krzysiek\Desktop\chip
2014-06-12 08:07 - 2014-06-12 08:08 - 00017902 _____ () C:\Users\Krzysiek\Documents\cc_20140612_080722.reg
2014-06-11 20:27 - 2014-06-11 20:27 - 00000000 ____D () C:\Users\Krzysiek\Desktop\Wielki_Gatsby_-_64kbits (1)
2014-06-11 10:23 - 2014-06-11 10:23 - 00023929 _____ () C:\Users\Krzysiek\Downloads\6092076.htm
2014-06-09 11:55 - 2014-06-09 11:55 - 02048829 _____ () C:\Users\Krzysiek\Desktop\chip plakat b.xcf
2014-06-09 11:55 - 2014-06-09 11:55 - 00026966 _____ () C:\Users\Krzysiek\AppData\Local\recently-used.xbel
2014-06-09 09:12 - 2014-06-09 09:12 - 00721631 _____ () C:\Users\Krzysiek\Desktop\chip2.xcf
2014-06-08 14:48 - 2014-06-08 14:49 - 04748896 _____ (Piriform Ltd) C:\Users\Krzysiek\Downloads\ccsetup414.exe
2014-06-08 14:42 - 2014-06-19 16:06 - 00003862 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1374698744
2014-06-06 22:23 - 2014-06-06 22:23 - 00000000 ____D () C:\Users\Krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp
2014-06-06 22:22 - 2014-06-06 22:23 - 00000095 _____ () C:\Windows\winamp.ini
2014-06-06 22:08 - 2014-06-07 20:30 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-06-06 15:27 - 2014-06-06 16:53 - 00000011 _____ () C:\Users\Krzysiek\Desktop\tel.txt
2014-06-05 12:02 - 2014-06-07 20:31 - 00000000 ____D () C:\Program Files (x86)\Opera12
2014-06-02 13:54 - 2014-06-02 13:54 - 00000000 _____ () C:\Users\Krzysiek\Desktop\projekty.txt
2014-05-31 18:06 - 2014-05-31 18:06 - 06412288 _____ () C:\Windows\SysWOW64\Świąteczny kominek - wygaszacz ekranu.scr
2014-05-30 19:56 - 2014-05-30 20:17 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-29 11:04 - 2014-06-20 15:52 - 00000364 _____ () C:\Windows\Tasks\HPCeeScheduleForKrzysiek.job
2014-05-29 11:04 - 2014-06-20 11:03 - 00003184 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForKrzysiek
2014-05-27 07:45 - 2014-05-27 07:45 - 00002532 _____ () C:\Users\Krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jupiter 2013 Standard.lnk
2014-05-26 11:30 - 2014-05-27 08:01 - 00000000 ____D () C:\Users\Krzysiek\Documents\auto
2014-05-23 20:08 - 2014-05-23 20:08 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-23 20:08 - 2014-05-23 20:08 - 00000000 _____ () C:\Windows\setupact.log

==================== One Month Modified Files and Folders =======

2014-06-20 19:32 - 2014-06-17 21:20 - 00000000 ____D () C:\FRST
2014-06-20 19:32 - 2014-06-17 21:19 - 00000000 ____D () C:\Users\Krzysiek\Desktop\skaner F
2014-06-20 19:24 - 2013-07-01 20:35 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1657043038-3288557173-2309702434-1002
2014-06-20 19:22 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2014-06-20 19:21 - 2014-02-21 23:08 - 00000000 ____D () C:\Users\Krzysiek\AppData\Roaming\Skype
2014-06-20 19:20 - 2013-10-06 12:28 - 00000000 ____D () C:\Users\Krzysiek\AppData\Roaming\GG
2014-06-20 16:31 - 2013-03-22 11:00 - 00000965 _____ () C:\Windows\SysWOW64\bscs.ini
2014-06-20 16:31 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-20 16:30 - 2012-07-26 10:12 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-06-20 16:29 - 2013-09-15 23:59 - 00000603 _____ () C:\Users\Krzysiek\Desktop\Search.lnk
2014-06-20 16:29 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-06-20 16:14 - 2013-07-25 19:31 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-20 15:58 - 2014-06-20 15:58 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-06-20 15:56 - 2014-06-20 15:55 - 00001944 _____ () C:\{A78E82E0-409D-47CB-91C0-D720A2DA8AD0}
2014-06-20 15:53 - 2014-06-17 18:15 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-06-20 15:53 - 2014-06-17 18:12 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-06-20 15:53 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-06-20 15:52 - 2014-06-17 18:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-06-20 15:52 - 2014-05-29 11:04 - 00000364 _____ () C:\Windows\Tasks\HPCeeScheduleForKrzysiek.job
2014-06-20 15:50 - 2014-04-05 13:59 - 00331396 _____ () C:\Windows\PFRO.log
2014-06-20 15:49 - 2014-06-20 11:47 - 00000000 ____D () C:\AdwCleaner
2014-06-20 11:49 - 2014-03-20 20:40 - 00000000 ____D () C:\Users\Krzysiek\AppData\Local\FirestormOS_x64
2014-06-20 11:45 - 2014-06-20 11:44 - 00000000 ____D () C:\Users\Krzysiek\Desktop\skaner adw
2014-06-20 11:03 - 2014-05-29 11:04 - 00003184 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForKrzysiek
2014-06-20 11:03 - 2013-07-01 20:26 - 00000000 ____D () C:\Users\Krzysiek
2014-06-19 16:06 - 2014-06-08 14:42 - 00003862 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1374698744
2014-06-19 16:06 - 2013-07-24 22:45 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-19 09:23 - 2014-06-19 09:23 - 01058200 _____ (Adobe) C:\Users\Krzysiek\Downloads\install_flashplayer14x32au_chrd_dn_aaa_aih.exe
2014-06-19 08:35 - 2014-06-19 08:35 - 00025802 _____ () C:\Users\Krzysiek\Downloads\FRST.txt
2014-06-18 20:38 - 2014-06-18 20:38 - 00142535 _____ () C:\Users\Krzysiek\Downloads\Shortcut.txt
2014-06-18 18:56 - 2014-06-18 18:56 - 00000000 ____D () C:\Users\Krzysiek\Desktop\skaner g
2014-06-18 18:52 - 2014-06-18 18:52 - 00623224 _____ (Duplex Secure Ltd.) C:\Users\Krzysiek\Downloads\SPTDinst-v186-x64.exe
2014-06-18 18:46 - 2014-06-17 18:15 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-06-18 18:46 - 2014-06-17 18:15 - 00007631 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-06-18 09:51 - 2014-06-18 09:51 - 00039960 _____ () C:\Users\Krzysiek\Downloads\Addition.txt
2014-06-18 06:55 - 2014-06-18 06:39 - 00000000 ____D () C:\Users\Krzysiek\Desktop\skaner OTL
2014-06-18 06:34 - 2014-06-18 06:33 - 02081280 _____ (Farbar) C:\Users\Krzysiek\Downloads\FRST64.exe
2014-06-17 21:34 - 2013-08-16 11:58 - 00899584 ___SH () C:\Users\Krzysiek\Desktop\Thumbs.db
2014-06-17 18:52 - 2013-08-09 19:12 - 00000000 ____D () C:\Users\Krzysiek\AppData\Roaming\uTorrent
2014-06-17 18:21 - 2013-09-14 14:19 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-06-17 18:17 - 2014-06-17 18:17 - 00000000 ____D () C:\Users\Krzysiek\Documents\Symantec
2014-06-17 18:15 - 2014-06-17 18:15 - 00000000 ____D () C:\Program Files\Symantec
2014-06-17 18:15 - 2014-06-17 18:15 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-06-17 18:12 - 2014-06-17 18:12 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-06-17 18:12 - 2013-01-16 02:35 - 00000000 ____D () C:\ProgramData\Norton
2014-06-17 18:06 - 2014-06-17 18:04 - 153633520 _____ (Symantec Corporation) C:\Users\Krzysiek\Downloads\NIS_20.1.0.24_SYMTB_PROMO_13_MRFTT_417_7999-STDIO.exe
2014-06-17 11:27 - 2012-10-27 05:56 - 00827626 _____ () C:\Windows\system32\perfh015.dat
2014-06-17 11:27 - 2012-10-27 05:56 - 00176034 _____ () C:\Windows\system32\perfc015.dat
2014-06-17 11:27 - 2012-07-26 09:28 - 01936226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-17 11:26 - 2014-06-17 11:26 - 00001306 _____ () C:\Users\Krzysiek\Desktop\CDex — skrót.lnk
2014-06-13 10:58 - 2014-06-13 10:58 - 00000000 ____D () C:\Users\Krzysiek\Desktop\chip
2014-06-13 10:58 - 2013-08-19 08:44 - 00205312 ___SH () C:\Users\Krzysiek\Documents\Thumbs.db
2014-06-13 10:22 - 2013-12-03 00:18 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-06-13 10:22 - 2012-10-26 20:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-12 08:28 - 2013-10-06 12:43 - 00000000 ___SD () C:\Users\Krzysiek\GG dysk
2014-06-12 08:08 - 2014-06-12 08:07 - 00017902 _____ () C:\Users\Krzysiek\Documents\cc_20140612_080722.reg
2014-06-12 08:02 - 2013-07-30 18:06 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-06-12 08:02 - 2013-07-30 18:06 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-06-12 07:58 - 2013-07-23 20:53 - 00000000 ____D () C:\Users\Krzysiek\AppData\Local\SecondLife
2014-06-11 20:27 - 2014-06-11 20:27 - 00000000 ____D () C:\Users\Krzysiek\Desktop\Wielki_Gatsby_-_64kbits (1)
2014-06-11 10:23 - 2014-06-11 10:23 - 00023929 _____ () C:\Users\Krzysiek\Downloads\6092076.htm
2014-06-11 10:18 - 2013-10-06 12:28 - 00000000 ____D () C:\Users\Krzysiek\AppData\Local\GG
2014-06-09 12:05 - 2013-08-03 22:00 - 00000000 ____D () C:\Users\Krzysiek\.gimp-2.8
2014-06-09 11:55 - 2014-06-09 11:55 - 02048829 _____ () C:\Users\Krzysiek\Desktop\chip plakat b.xcf
2014-06-09 11:55 - 2014-06-09 11:55 - 00026966 _____ () C:\Users\Krzysiek\AppData\Local\recently-used.xbel
2014-06-09 09:12 - 2014-06-09 09:12 - 00721631 _____ () C:\Users\Krzysiek\Desktop\chip2.xcf
2014-06-09 08:48 - 2013-11-24 14:32 - 00371776 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-08 15:45 - 2014-03-14 23:03 - 00000000 ____D () C:\Users\Krzysiek\Desktop\fotki
2014-06-08 14:55 - 2014-03-03 10:03 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-08 14:55 - 2014-03-03 10:03 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-08 14:49 - 2014-06-08 14:48 - 04748896 _____ (Piriform Ltd) C:\Users\Krzysiek\Downloads\ccsetup414.exe
2014-06-08 08:41 - 2013-10-09 19:25 - 00000000 ____D () C:\Users\Krzysiek\AppData\Roaming\Origin
2014-06-08 08:41 - 2013-10-09 18:52 - 00000000 ____D () C:\ProgramData\Origin
2014-06-07 20:31 - 2014-06-05 12:02 - 00000000 ____D () C:\Program Files (x86)\Opera12
2014-06-07 20:30 - 2014-06-06 22:08 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-06-07 19:46 - 2012-07-26 07:26 - 00000194 _____ () C:\Windows\win.ini
2014-06-06 22:23 - 2014-06-06 22:23 - 00000000 ____D () C:\Users\Krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp
2014-06-06 22:23 - 2014-06-06 22:22 - 00000095 _____ () C:\Windows\winamp.ini
2014-06-06 21:44 - 2014-03-26 20:55 - 01610943 _____ () C:\Windows\WindowsUpdate.log
2014-06-06 16:57 - 2014-01-19 19:00 - 00000000 ____D () C:\Users\Krzysiek\Desktop\Zdjecia
2014-06-06 16:53 - 2014-06-06 15:27 - 00000011 _____ () C:\Users\Krzysiek\Desktop\tel.txt
2014-06-06 15:30 - 2014-02-21 23:08 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-06 15:30 - 2014-02-21 23:07 - 00000000 ____D () C:\ProgramData\Skype
2014-06-06 09:56 - 2013-11-18 20:07 - 00000000 ____D () C:\Users\Krzysiek\Desktop\PWZ
2014-06-05 12:02 - 2013-09-15 23:47 - 00000000 ____D () C:\Users\Krzysiek\AppData\Roaming\Opera
2014-06-05 12:02 - 2013-09-15 23:47 - 00000000 ____D () C:\Users\Krzysiek\AppData\Local\Opera
2014-06-02 13:54 - 2014-06-02 13:54 - 00000000 _____ () C:\Users\Krzysiek\Desktop\projekty.txt
2014-06-02 13:50 - 2014-01-10 12:35 - 00000000 ____D () C:\Users\Krzysiek\AppData\Local\CrashDumps
2014-06-01 11:06 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-05-31 18:06 - 2014-05-31 18:06 - 06412288 _____ () C:\Windows\SysWOW64\Świąteczny kominek - wygaszacz ekranu.scr
2014-05-30 20:17 - 2014-05-30 19:56 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-30 15:56 - 2013-12-19 14:53 - 00000000 ____D () C:\Users\Krzysiek\Desktop\STAŻ
2014-05-27 08:01 - 2014-05-26 11:30 - 00000000 ____D () C:\Users\Krzysiek\Documents\auto
2014-05-27 07:57 - 2013-09-15 23:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-27 07:53 - 2012-10-26 20:54 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-05-27 07:52 - 2012-08-04 02:02 - 00000000 ____D () C:\SWSetup
2014-05-27 07:45 - 2014-05-27 07:45 - 00002532 _____ () C:\Users\Krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jupiter 2013 Standard.lnk
2014-05-26 21:18 - 2014-01-17 17:27 - 00000000 ____D () C:\Users\Krzysiek\Desktop\CV Moje E
2014-05-26 17:37 - 2014-02-20 13:49 - 00000000 ____D () C:\Users\Krzysiek\Desktop\oferty
2014-05-26 11:09 - 2013-08-06 17:32 - 00000000 ____D () C:\Program Files (x86)\Ganymede
2014-05-26 11:07 - 2013-08-15 19:03 - 00000000 ____D () C:\Users\Krzysiek\AppData\Local\Unity
2014-05-26 11:06 - 2014-01-08 22:40 - 00000000 ____D () C:\Users\Krzysiek\AppData\Roaming\Zoner
2014-05-23 20:08 - 2014-05-23 20:08 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-23 20:08 - 2014-05-23 20:08 - 00000000 _____ () C:\Windows\setupact.log

Some content of TEMP:
====================
C:\Users\Krzysiek\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-16 13:45

==================== End Of Log ============================