Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2014 01
Ran by Bartek (administrator) on BARTEK-KOMPUTER on 21-09-2014 20:41:25
Running from C:\Users\Bartek\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Windows\SysWOW64\wbem\msds.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [Google Update] => C:\Users\Bartek\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2010-12-24] (Google Inc.)
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\MountPoints2: {1c28fd68-698d-11e3-b9d0-c19d8d30ff1f} - H:\Startme.exe
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\MountPoints2: {55bd4d43-ab56-11e1-aa7b-81613403471d} - H:\MicroLauncher.exe
HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\MountPoints2: {5ea3fd9c-5330-11e0-89b3-97279892001d} - H:\LGAutoRun.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x22E5720DADD5CE01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622
URLSearchHook: HKCU - (No Name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://websearch.search-guide.info/?l=1&q={searchTerms}&pid=233&r=2013/11/12&hid=1136661776475716838&lg=EN&cc=PL&unqvl=40
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Blog This in Windows Live v2 -> {3adefb8e-b923-35e6-86e2-2b7841f5d2a7} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> F:\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKCU - No Name - {687578B9-7132-4A7A-80E4-30EE31099E03} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878
FF DefaultSearchEngine: Mysearchdial
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> F:\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @Webzen.com/NPGameWebStarter -> C:\Program Files (x86)\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll (WEBZEN)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Bartek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Bartek\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Bartek\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF user.js: detected! => C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\2ewe0d1k.default\user.js
FF user.js: detected! => C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\user.js
FF SearchPlugin: C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\2ewe0d1k.default\searchplugins\Mysearchdial.xml
FF Extension: No Name - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\2ewe0d1k.default\Extensions\staged [2013-11-12]
FF Extension: SearchNewTab - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\8jumzva@jacdzdv.org [2014-01-16]
FF Extension: YoutubeAdblocker - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\gxvvoa@adyy.edu [2014-01-16]
FF Extension: SUrof andd, keep - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\lgw-xh@e-uu.org [2014-01-16]
FF Extension: surfe anD kiEeep - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\oeo7c@xssto.edu [2014-01-16]
FF Extension: MySearchDial NewTab - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\ffqn5ls6.default-1363862506878\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-16]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - F:\Kaspersky antywirus\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - F:\Kaspersky antywirus\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - F:\Kaspersky antywirus\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-12-01]
FF HKLM-x32\...\Firefox\Extensions: [hotfix@mozilla.org] - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix
FF Extension: Mozilla hotfix - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix [2013-03-04]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - F:\NOD\Mozilla Thunderbird
FF HKCU\...\Firefox\Extensions: [hotfix@mozilla.org] - C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix
FF StartMenuInternet: FIREFOX.EXE - f:\mozilla\firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\Bartek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Wallet) - C:\Users\Bartek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-26]
CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Bartek\AppData\Local\mysearchdial-speeddial.crx [2013-12-18]
CHR HKCU\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Bartek\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-07-15]
CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Bartek\AppData\Local\mysearchdial-speeddial.crx [2013-12-18]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-12-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Bartek\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-07-15]
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Bartek\AppData\Local\mysearchdial-speeddial.crx [2013-12-18]
CHR StartMenuInternet: Google Chrome - C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 .EsetTrialReset; C:\Windows\system32\regedt32.exe [10240 2009-07-14] (Microsoft Corporation)
S4 .EsetTrialReset; C:\Windows\SysWOW64\regedt32.exe [9216 2009-07-14] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2010-12-26] () [File not signed]
S4 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)
U2 McxSvc; C:\Windows\SysWOW64\wbem\msds.exe [3846241 2013-11-23] () [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4045688 2011-05-01] (INCA Internet Co., Ltd.) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2012-12-23] ()
S4 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [173616 2007-02-07] ()
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [628736 2010-12-08] (Nokia) [File not signed]
S4 SPDFToolsReadSpool; F:\solid\SPDFT\SolidPdfToolsServicex64.exe [320512 2009-09-10] (Solid Documents, LLC) [File not signed]
R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [5088256 2010-02-03] (Dell Inc.) [File not signed]
S2 MBAMService; "F:\Malwarebytes' Anti-Malware\mbamservice.exe" [X]
S2 StarWindServiceAE; f:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2011-06-13] ()
S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [117248 2010-11-15] (Huawei Technologies Co., Ltd.) [File not signed]
S3 GT680x; C:\Windows\System32\Drivers\Gt680x.sys [22528 2007-02-06] (         )
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [91136 2010-11-15] (Huawei Technologies Co., Ltd.) [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2011-06-13] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24904 2012-04-04] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-04] (INCA Internet Co., Ltd.) [File not signed]
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B}; F:\PowerDVD\000.fcl [13560 2006-11-02] (Cyberlink Corp.)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 dump_wmimmc; \??\E:\GRY\MU online global\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 LgBttPort; system32\DRIVERS\lgbtpt64.sys [X]
S3 lgbusenum; system32\DRIVERS\lgbtbs64.sys [X]
S3 LGVMODEM; system32\DRIVERS\lgvmdm64.sys [X]
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
U4 WMCoreService; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-21 20:42 - 2014-09-21 20:42 - 00380416 _____ () C:\Users\Bartek\Downloads\938mzrcx.exe
2014-09-21 20:41 - 2014-09-21 20:42 - 00018693 _____ () C:\Users\Bartek\Downloads\FRST.txt
2014-09-21 20:40 - 2014-09-21 20:40 - 02105856 _____ (Farbar) C:\Users\Bartek\Downloads\FRST64.exe
2014-09-12 02:31 - 2014-09-12 02:31 - 00000000 _____ () C:\Windows\SysWOW64\sho88A4.tmp
2014-09-12 02:26 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-12 02:26 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-12 02:26 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-12 02:26 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-12 02:26 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-12 02:26 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-12 02:26 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-12 02:26 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-12 02:26 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-12 02:26 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-12 02:26 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-12 02:26 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-12 02:26 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-12 02:26 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-12 02:26 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-12 02:26 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-12 02:26 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-12 02:26 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-12 02:26 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-12 02:26 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-12 02:26 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-12 02:26 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-12 02:26 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-12 02:26 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-12 02:26 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-12 02:26 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-12 02:26 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-12 02:26 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-12 02:26 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-12 02:26 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-12 02:26 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-12 02:26 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-12 02:26 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-12 02:26 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-12 02:26 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-12 02:26 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-12 02:26 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-12 02:26 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-12 02:26 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-12 02:26 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-12 02:26 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-12 02:26 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-12 02:26 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-12 02:26 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-12 02:26 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-12 02:26 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-12 02:26 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-12 02:26 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-12 02:26 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-12 02:26 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-12 02:26 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-12 02:26 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-12 02:26 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-12 02:26 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-12 02:26 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-12 02:26 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-12 02:01 - 2014-09-12 02:03 - 04172825 _____ () C:\Users\Bartek\Downloads\Latency.rar
2014-09-11 22:18 - 2014-09-11 22:18 - 00001243 _____ () C:\Users\Bartek\Desktop\Paint.lnk
2014-09-11 03:13 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 03:13 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-11 03:01 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 03:01 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-11 03:01 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 03:01 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-11 01:40 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 01:40 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 01:40 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 01:40 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 01:40 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-11 01:40 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-11 01:40 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-06 20:18 - 2014-09-06 20:18 - 00275632 _____ () C:\Windows\Minidump\090614-31449-01.dmp
2014-09-06 00:08 - 2014-09-06 00:08 - 00000000 _____ () C:\Users\Bartek\Downloads\Pozdrowienia_z_Chorwacji.zip
2014-09-04 07:25 - 2014-09-04 07:25 - 237237153 _____ () C:\Users\Bartek\Downloads\korf.rar
2014-09-03 22:19 - 2014-09-04 00:32 - 2631899706 _____ () C:\Users\Bartek\Desktop\Korfu.rar
2014-09-01 20:57 - 2014-09-02 15:02 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\BoL
2014-09-01 20:53 - 2014-09-01 20:54 - 00000000 ____D () C:\Users\Bartek\Desktop\bol
2014-09-01 20:16 - 2014-09-01 20:17 - 10339653 _____ () C:\Users\Bartek\Downloads\BoL+Studio.rar
2014-08-31 15:24 - 2014-08-31 15:56 - 00043411 _____ () C:\Users\Bartek\Desktop\Bartek Pietrzyk tabelka Sierpień 2014.xlsx
2014-08-28 21:07 - 2014-08-28 21:21 - 00000000 ____D () C:\Users\Bartek\Desktop\Korfu
2014-08-27 19:24 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 19:24 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 19:24 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-26 18:24 - 2014-08-26 18:24 - 00000000 _____ () C:\Windows\SysWOW64\shoE088.tmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-21 20:42 - 2014-09-21 20:42 - 00380416 _____ () C:\Users\Bartek\Downloads\938mzrcx.exe
2014-09-21 20:42 - 2014-09-21 20:41 - 00018693 _____ () C:\Users\Bartek\Downloads\FRST.txt
2014-09-21 20:41 - 2014-04-20 19:03 - 00000000 ____D () C:\FRST
2014-09-21 20:40 - 2014-09-21 20:40 - 02105856 _____ (Farbar) C:\Users\Bartek\Downloads\FRST64.exe
2014-09-21 20:39 - 2010-09-14 03:03 - 01250594 _____ () C:\Windows\WindowsUpdate.log
2014-09-21 20:34 - 2014-06-12 18:52 - 00003356 _____ () C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1813054588-749713010-1817662991-1000
2014-09-21 20:34 - 2014-06-12 18:52 - 00003224 _____ () C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1813054588-749713010-1817662991-1000
2014-09-21 20:34 - 2010-09-14 03:52 - 00329976 _____ () C:\Windows\PFRO.log
2014-09-21 20:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-21 20:34 - 2009-07-14 06:51 - 00159449 _____ () C:\Windows\setupact.log
2014-09-21 20:02 - 2010-12-24 17:26 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000UA.job
2014-09-21 20:01 - 2012-04-29 16:43 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-21 18:56 - 2009-07-14 06:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-21 18:56 - 2009-07-14 06:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-21 18:01 - 2013-10-30 21:56 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000UA.job
2014-09-21 15:52 - 2010-12-24 16:30 - 00003998 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{FC9BF907-DD13-4969-8723-85E6F8A9C577}
2014-09-21 12:02 - 2010-12-24 17:26 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000Core.job
2014-09-19 21:54 - 2013-10-30 21:56 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000Core.job
2014-09-14 22:51 - 2011-12-23 22:49 - 00000000 ____D () C:\ProgramData\TEMP
2014-09-12 10:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-12 02:31 - 2014-09-12 02:31 - 00000000 _____ () C:\Windows\SysWOW64\sho88A4.tmp
2014-09-12 02:24 - 2010-12-24 21:36 - 01653520 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-12 02:24 - 2010-09-14 05:54 - 00744510 _____ () C:\Windows\system32\perfh015.dat
2014-09-12 02:24 - 2010-09-14 05:54 - 00157702 _____ () C:\Windows\system32\perfc015.dat
2014-09-12 02:24 - 2009-07-14 07:13 - 01653520 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-12 02:23 - 2013-09-26 03:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-12 02:07 - 2010-12-27 21:50 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-12 02:03 - 2014-09-12 02:01 - 04172825 _____ () C:\Users\Bartek\Downloads\Latency.rar
2014-09-11 22:18 - 2014-09-11 22:18 - 00001243 _____ () C:\Users\Bartek\Desktop\Paint.lnk
2014-09-11 03:01 - 2014-05-07 03:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-07 09:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-06 20:18 - 2014-09-06 20:18 - 00275632 _____ () C:\Windows\Minidump\090614-31449-01.dmp
2014-09-06 20:18 - 2011-04-25 11:15 - 520946989 _____ () C:\Windows\MEMORY.DMP
2014-09-06 20:18 - 2011-04-25 11:15 - 00000000 ____D () C:\Windows\Minidump
2014-09-06 00:08 - 2014-09-06 00:08 - 00000000 _____ () C:\Users\Bartek\Downloads\Pozdrowienia_z_Chorwacji.zip
2014-09-05 04:10 - 2014-09-11 01:40 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-11 01:40 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-04 07:25 - 2014-09-04 07:25 - 237237153 _____ () C:\Users\Bartek\Downloads\korf.rar
2014-09-04 00:32 - 2014-09-03 22:19 - 2631899706 _____ () C:\Users\Bartek\Desktop\Korfu.rar
2014-09-02 15:02 - 2014-09-01 20:57 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\BoL
2014-09-01 20:54 - 2014-09-01 20:53 - 00000000 ____D () C:\Users\Bartek\Desktop\bol
2014-09-01 20:17 - 2014-09-01 20:16 - 10339653 _____ () C:\Users\Bartek\Downloads\BoL+Studio.rar
2014-08-31 22:56 - 2011-02-04 23:56 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\TS3Client
2014-08-31 15:56 - 2014-08-31 15:24 - 00043411 _____ () C:\Users\Bartek\Desktop\Bartek Pietrzyk tabelka Sierpień 2014.xlsx
2014-08-31 10:53 - 2010-12-25 10:40 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\Skype
2014-08-28 22:01 - 2014-08-20 13:14 - 00000000 ____D () C:\Users\Bartek\Desktop\Grecja 2014
2014-08-28 21:21 - 2014-08-28 21:07 - 00000000 ____D () C:\Users\Bartek\Desktop\Korfu
2014-08-28 20:17 - 2009-07-14 07:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-28 20:16 - 2009-07-14 06:45 - 00416208 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-26 18:24 - 2014-08-26 18:24 - 00000000 _____ () C:\Windows\SysWOW64\shoE088.tmp
2014-08-25 06:53 - 2011-06-15 13:47 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 04:07 - 2014-08-27 19:24 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-27 19:24 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-27 19:24 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

Files to move or delete:
====================
C:\Users\AIM\ATG.exe
C:\Users\AIM\Intro.exe
C:\Users\AIM\Lfbmp70n.dll
C:\Users\AIM\Lfcmp70n.dll
C:\Users\AIM\Ltfil70n.dll
C:\Users\AIM\Ltkrn70n.dll
C:\Users\AIM\ShapeSaver.exe
C:\Users\AIM\Step1-Deskew.exe
C:\Users\AIM\Step2-Crop.exe
C:\Users\AIM\Step3-Redeye.exe
C:\Users\AIM\Step4-Deco.exe
C:\Users\Driver\Ap.exe
C:\Users\Driver\BkRemoveDll.dll
C:\Users\Driver\BPEnhan.dll
C:\Users\Driver\ColorMatch.dll
C:\Users\Driver\exec.exe
C:\Users\Driver\filter.dll
C:\Users\Driver\Free_EXE.dll
C:\Users\Driver\Lead52.dll
C:\Users\Driver\Ltimg70n.dll
C:\Users\Driver\NegImgTrans.dll
C:\Users\Driver\Scanobj.dll
C:\Users\Driver\TxfJP2.exe
C:\Users\Driver\UI.EXE
C:\Users\Driver\WATCH.exe
C:\Users\Panel\BkRemoveDll.dll
C:\Users\Panel\BPEnhan.dll
C:\Users\Panel\ColorMatch.dll
C:\Users\Panel\Con2Tif.dll
C:\Users\Panel\DoFax.dll
C:\Users\Panel\DoScan.dll
C:\Users\Panel\FaxFixer.exe
C:\Users\Panel\FFixer_de.dll
C:\Users\Panel\FFixer_dk.dll
C:\Users\Panel\FFixer_es.dll
C:\Users\Panel\FFixer_f.dll
C:\Users\Panel\FFixer_fi.dll
C:\Users\Panel\FFixer_it.dll
C:\Users\Panel\FFixer_nl.dll
C:\Users\Panel\FFixer_no.dll
C:\Users\Panel\FFixer_pt.dll
C:\Users\Panel\FFixer_sw.dll
C:\Users\Panel\IrrShape.dll
C:\Users\Panel\JP2View.exe
C:\Users\Panel\MergerDoc.dll
C:\Users\Panel\msvbvm60.dll
C:\Users\Panel\MultiPage.dll
C:\Users\Panel\MustISDNfax.dll
C:\Users\Panel\notes46.exe
C:\Users\Panel\Panel.exe
C:\Users\Panel\Panel_de.dll
C:\Users\Panel\Panel_dk.dll
C:\Users\Panel\Panel_es.dll
C:\Users\Panel\Panel_f.dll
C:\Users\Panel\Panel_it.dll
C:\Users\Panel\Panel_nl.dll
C:\Users\Panel\Panel_pt.dll
C:\Users\Panel\Panel_sw.dll
C:\Users\Panel\ParaFax.dll
C:\Users\Panel\PhoneBook.exe
C:\Users\Panel\Settings.exe
C:\Users\Panel\TrigDrv.exe
C:\Users\Panel\TxfJP2.exe
C:\Users\Public\AdobeAIRInstaller.exe
C:\Users\Public\AutoGordianKnot_2.40.exe
C:\Users\Public\AutoGordianKnot_PL.exe
C:\Users\Public\DVDShrink_3.2.exe
C:\Users\Public\RipIt4Me.exe
C:\Users\Public\RivChat2-setup.exe
C:\Users\Public\River Raid.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-17 23:27

==================== End Of Log ============================