Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-09-2014
Ran by pc (administrator) on KOMP on 01-10-2014 12:10:39
Running from C:\Users\pc\Downloads
Loaded Profile: pc (Available profiles: pc)
Platform: Windows 8 (X64) OS Language: Polish (Poland)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(GG Network S.A.) C:\Users\pc\AppData\Local\GG\Application\gghub.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(GG Network S.A.) C:\Users\pc\AppData\Local\GG\Application\ggapp.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(BitTorrent Inc.) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
() C:\Program Files\putty.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13196432 2012-09-25] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-20] (SRS Labs, Inc.)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2611112 2012-09-05] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-28] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [7148032 2012-10-31] (Pegatron Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [uTorrent] => C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe [1385808 2014-10-01] (BitTorrent Inc.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Facebook Update] => C:\Users\pc\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-02-15] (Facebook Inc.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [GG] => C:\Users\pc\AppData\Local\GG\Application\gghub.exe [4023360 2014-09-26] (GG Network S.A.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600216 2014-10-01] (Electronic Arts)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\MountPoints2: {269f02e9-86c8-11e3-beb3-c0d962382821} - "E:\autorun.exe" 
ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
BootExecute: autocheck autochk /m /f \Device\HarddiskVolume6autocheck autochk * 

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKLM - {84E73978-A84D-4AEF-950F-E305680E5C46} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {84E73978-A84D-4AEF-950F-E305680E5C46} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 158.75.88.5

FireFox:
========
FF ProfilePath: C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\iw4wca7a.default-1412155935203
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\pc\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

Chrome: 
=======
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.5.671\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll ()
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.600.19) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U60) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\pc\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-29]
CHR Extension: (Google Drive) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-29]
CHR Extension: (YouTube) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-29]
CHR Extension: (Last updated at $time$ on $date$) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-11]
CHR Extension: (Google Search) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-29]
CHR Extension: (WasteNoTime) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\enebomhlllfaccbelnjhfgblnalofhch [2014-09-26]
CHR Extension: (Related Content by Zemanta) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\fejeknoakjeblidffkajbioncodnmhge [2014-08-11]
CHR Extension: (Yoono  Twitter Facebook LinkedIn YouTube) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli [2014-06-11]
CHR Extension: (dict cc) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknonnojlmhnmjhpeokdbeineeajcemh [2014-06-05]
CHR Extension: (Google Wallet) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-29]
CHR Extension: (Gmail) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-29]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-14] () [File not signed]
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [43520 2012-07-26] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [634368 2012-07-26] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18432 2012-07-26] (Microsoft Corporation)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-29] (TuneUp Software)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-01-25] ()
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\drivers\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-01-25] ()
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-10-01] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-08-02] (Realtek Microelectronics)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1498256 2012-08-29] (Realtek Semiconductor Corporation                           )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2014-01-26] (Duplex Secure Ltd.)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-01 12:10 - 2014-10-01 12:10 - 00018501 _____ () C:\Users\pc\Downloads\FRST.txt
2014-10-01 12:00 - 2014-10-01 12:00 - 00281168 _____ () C:\windows\Minidump\100114-25708-01.dmp
2014-10-01 11:55 - 2010-08-30 08:34 - 00004601 _____ () C:\windows\SysWOW64\sqlite3.dll
2014-10-01 11:48 - 2014-10-01 12:07 - 00000000 ____D () C:\AdwCleaner
2014-10-01 11:47 - 2014-10-01 11:48 - 01375089 _____ () C:\Users\pc\Downloads\adwcleaner_3.311.exe
2014-10-01 11:32 - 2014-10-01 11:32 - 00000000 ____D () C:\Users\pc\Desktop\Stare dane programu Firefox
2014-10-01 11:08 - 2014-09-02 21:32 - 00705480 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-10-01 11:08 - 2014-09-02 21:32 - 00104904 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-01 11:02 - 2014-10-01 11:02 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-09-30 23:21 - 2014-09-30 23:21 - 00013429 _____ () C:\Users\pc\Desktop\GMER.txt
2014-09-30 23:04 - 2014-09-30 23:04 - 00960892 _____ () C:\Users\pc\Desktop\OTL.Txt
2014-09-30 22:36 - 2014-09-30 22:36 - 00380416 _____ () C:\Users\pc\Downloads\mtd4qw46.exe
2014-09-30 22:34 - 2014-09-30 22:34 - 00054541 _____ () C:\Users\pc\Desktop\malware scan1.txt
2014-09-30 22:31 - 2014-09-30 22:31 - 00006597 _____ () C:\Users\pc\Desktop\malware scan2.txt
2014-09-30 18:25 - 2014-09-30 18:25 - 00099606 _____ () C:\Users\pc\Downloads\Shortcut.txt
2014-09-30 18:16 - 2014-09-30 18:25 - 00050908 _____ () C:\Users\pc\Downloads\Addition.txt
2014-09-30 17:57 - 2014-09-30 17:57 - 00007605 _____ () C:\Users\pc\AppData\Local\Resmon.ResmonCfg
2014-09-29 08:37 - 2014-07-16 00:51 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2014-09-29 08:31 - 2014-08-16 11:34 - 02239488 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-09-29 08:31 - 2014-08-16 11:34 - 01407488 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-09-29 08:31 - 2014-08-16 11:34 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2014-09-29 08:31 - 2014-08-16 11:34 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-09-29 08:31 - 2014-08-16 11:33 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-09-29 08:31 - 2014-08-16 11:33 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-09-29 08:31 - 2014-08-16 11:32 - 15399424 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-09-29 08:31 - 2014-08-16 11:32 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-09-29 08:31 - 2014-08-16 11:32 - 02655232 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-09-29 08:31 - 2014-08-16 11:32 - 01508864 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-09-29 08:31 - 2014-08-16 11:32 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-09-29 08:31 - 2014-08-16 11:32 - 00451584 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-09-29 08:31 - 2014-08-16 11:32 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-09-29 08:31 - 2014-08-16 11:32 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-09-29 08:31 - 2014-08-16 09:37 - 01766400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-09-29 08:31 - 2014-08-16 09:37 - 01180672 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 13757440 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 02861568 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 02055168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-09-29 08:31 - 2014-08-16 09:36 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-09-29 08:31 - 2014-08-16 09:35 - 01440768 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-09-29 08:31 - 2014-03-07 02:47 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-09-29 08:31 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-09-29 08:31 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-09-29 08:31 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-09-29 08:31 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-09-29 08:31 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-09-29 08:31 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-09-29 08:31 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-09-29 08:31 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-09-29 08:31 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-09-29 08:31 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-09-29 08:31 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2014-09-29 08:31 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-09-29 08:31 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-09-29 08:31 - 2012-07-26 05:06 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-09-29 08:30 - 2014-08-16 11:33 - 19280384 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-09-29 08:29 - 2014-08-16 09:36 - 14369280 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-09-29 08:05 - 2014-09-29 08:05 - 00000000 ____D () C:\Users\pc\AppData\Roaming\VST3 Presets
2014-09-29 07:59 - 2014-09-29 07:59 - 00281112 _____ () C:\windows\Minidump\092914-23509-01.dmp
2014-09-29 07:57 - 2014-09-29 07:58 - 00281112 _____ () C:\windows\Minidump\092914-21996-01.dmp
2014-09-29 07:54 - 2014-09-29 07:54 - 00000000 _____ () C:\windows\Minidump\092914-25459-01.dmp
2014-09-29 07:53 - 2014-09-29 07:53 - 00281168 _____ () C:\windows\Minidump\092914-28626-01.dmp
2014-09-28 21:24 - 2014-09-28 21:24 - 00101925 _____ () C:\Users\pc\Desktop\little melody.cpr
2014-09-28 19:36 - 2014-09-28 19:36 - 00281112 _____ () C:\windows\Minidump\092814-33072-01.dmp
2014-09-28 19:09 - 2014-09-28 19:12 - 00000000 ____D () C:\01c55114928e25286f2d
2014-09-27 14:40 - 2014-06-11 00:44 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2014-09-27 14:40 - 2014-06-11 00:43 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2014-09-27 14:36 - 2014-09-28 21:12 - 00101453 _____ () C:\Users\pc\Desktop\little melody.bak
2014-09-27 14:36 - 2014-09-28 20:10 - 00079894 _____ () C:\Users\pc\Desktop\little melody-02.bak
2014-09-27 14:36 - 2014-09-28 19:55 - 00051685 _____ () C:\Users\pc\Desktop\little melody-03.bak
2014-09-27 14:36 - 2014-09-27 18:54 - 00051557 _____ () C:\Users\pc\Desktop\little melody-04.bak
2014-09-27 14:36 - 2014-09-27 18:39 - 00051557 _____ () C:\Users\pc\Desktop\little melody-05.bak
2014-09-27 14:36 - 2014-09-27 18:09 - 00051685 _____ () C:\Users\pc\Desktop\little melody-06.bak
2014-09-27 14:36 - 2014-09-27 14:36 - 00051685 _____ () C:\Users\pc\Desktop\little melody-07.bak
2014-09-26 21:18 - 2014-09-26 21:18 - 00281112 _____ () C:\windows\Minidump\092614-33009-01.dmp
2014-09-26 20:33 - 2014-10-01 12:10 - 00000000 ____D () C:\FRST
2014-09-26 20:33 - 2014-09-26 20:33 - 02108928 _____ (Farbar) C:\Users\pc\Downloads\FRST64.exe
2014-09-26 19:37 - 2014-09-05 00:36 - 00755712 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-09-26 19:37 - 2014-09-03 03:49 - 00556544 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-09-26 19:37 - 2014-07-01 00:42 - 00394240 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2014-09-26 19:37 - 2014-07-01 00:42 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2014-09-26 19:36 - 2014-09-26 19:36 - 00602112 _____ (OldTimer Tools) C:\Users\pc\Desktop\OTL.exe
2014-09-26 19:35 - 2014-07-24 05:33 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2014-09-26 19:35 - 2014-07-24 05:33 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2014-09-26 19:33 - 2014-08-28 13:34 - 00059400 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-09-26 19:33 - 2014-08-28 08:05 - 00630272 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-09-26 19:33 - 2014-08-28 08:05 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-09-26 19:33 - 2014-08-28 08:05 - 00086528 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-09-26 19:33 - 2014-08-28 08:05 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2014-09-26 19:33 - 2014-08-28 08:02 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-09-26 19:33 - 2014-08-28 08:01 - 03285504 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-09-26 19:33 - 2014-08-28 08:01 - 01623552 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-09-26 19:33 - 2014-08-28 08:01 - 00775168 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-09-26 19:33 - 2014-08-28 08:01 - 00253440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2014-09-26 19:33 - 2014-08-28 08:01 - 00176640 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2014-09-26 19:33 - 2014-08-28 08:01 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-09-26 19:33 - 2014-08-28 08:01 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-09-26 19:33 - 2014-08-28 08:01 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll
2014-09-26 19:33 - 2014-08-01 01:40 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-09-26 19:33 - 2014-06-13 03:57 - 01453400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2014-09-26 19:33 - 2014-06-13 03:55 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll
2014-09-26 19:33 - 2014-06-05 03:12 - 00678600 _____ (Microsoft Corporation) C:\windows\system32\msvcp120_clr0400.dll
2014-09-26 19:33 - 2014-06-04 01:12 - 00536776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcp120_clr0400.dll
2014-09-26 19:06 - 2014-08-23 08:47 - 04036096 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-09-26 19:06 - 2014-07-16 01:03 - 01300992 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-09-26 19:06 - 2014-07-12 04:36 - 01023488 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-09-26 19:06 - 2014-06-20 01:35 - 01312768 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2014-09-26 19:06 - 2014-06-20 00:24 - 00694272 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2014-09-26 19:06 - 2014-05-03 08:34 - 06974808 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-09-26 19:06 - 2014-05-03 08:33 - 01824808 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2014-09-26 19:06 - 2014-05-03 06:51 - 01408976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2014-09-26 19:06 - 2014-05-02 00:37 - 01023488 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2014-09-26 19:06 - 2014-04-30 00:32 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
2014-09-26 19:06 - 2014-04-30 00:32 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
2014-09-26 19:06 - 2014-04-24 01:51 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-09-26 19:06 - 2014-04-24 01:51 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-26 19:06 - 2014-04-24 01:38 - 00693760 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-09-26 19:06 - 2014-04-24 01:38 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-26 19:05 - 2014-06-05 19:56 - 00112984 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2014-09-26 19:05 - 2014-06-05 19:30 - 10116608 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2014-09-26 19:05 - 2014-06-05 19:29 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-09-26 19:05 - 2014-06-05 19:29 - 00393216 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2014-09-26 19:05 - 2014-06-05 19:28 - 02306560 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2014-09-26 19:05 - 2014-06-05 19:28 - 02146304 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2014-09-26 19:05 - 2014-06-05 15:12 - 08857600 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2014-09-26 19:05 - 2014-06-05 15:11 - 02416128 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2014-09-26 19:05 - 2014-06-05 15:11 - 00295424 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2014-09-26 19:05 - 2014-06-05 15:10 - 02037760 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2014-09-26 19:05 - 2014-06-05 15:10 - 00754176 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2014-09-26 19:04 - 2014-08-09 10:30 - 00148480 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2014-09-26 19:04 - 2014-08-09 10:29 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll
2014-09-26 19:01 - 2014-05-29 06:04 - 00094552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys
2014-09-26 19:01 - 2014-05-08 03:34 - 00328024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2014-09-26 14:53 - 2014-10-01 12:00 - 411120079 _____ () C:\windows\MEMORY.DMP
2014-09-26 14:53 - 2014-09-26 14:53 - 00281168 _____ () C:\windows\Minidump\092614-32167-01.dmp
2014-09-26 14:51 - 2014-10-01 11:06 - 00431368 _____ () C:\windows\system32\FNTCACHE.DAT
2014-09-26 14:50 - 2014-10-01 12:00 - 00185156 _____ () C:\windows\PFRO.log
2014-09-26 14:49 - 2014-10-01 11:00 - 02063167 _____ () C:\windows\WindowsUpdate.log
2014-09-26 13:53 - 2014-09-26 13:53 - 00000833 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-09-26 12:58 - 2014-10-01 12:04 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-26 12:58 - 2014-09-26 12:58 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-26 12:58 - 2014-09-26 12:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-26 12:57 - 2014-09-26 12:58 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-26 12:57 - 2014-09-26 12:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-26 12:57 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-09-26 12:57 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-09-26 12:57 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-09-20 09:11 - 2014-09-20 09:11 - 00000000 ____D () C:\Users\pc\AppData\Roaming\WinAVI
2014-09-20 09:11 - 2014-09-20 09:11 - 00000000 ____D () C:\Users\pc\AppData\Local\WinAVI
2014-09-20 09:10 - 2014-09-20 09:10 - 00001299 _____ () C:\Users\pc\Desktop\WinAVI Video Converter.lnk
2014-09-20 09:10 - 2014-09-20 09:10 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinAVI Video Converter
2014-09-20 09:10 - 2014-09-20 09:10 - 00000000 ____D () C:\Program Files (x86)\WinAVI
2014-09-20 09:03 - 2014-09-20 09:04 - 00000000 ____D () C:\Users\pc\Desktop\Pastucha

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-01 12:11 - 2013-09-29 17:42 - 00000000 ____D () C:\Users\pc\AppData\Roaming\uTorrent
2014-10-01 12:08 - 2014-05-06 11:20 - 00000000 ____D () C:\ProgramData\Origin
2014-10-01 12:08 - 2013-10-03 13:05 - 00843776 ___SH () C:\Users\pc\Downloads\Thumbs.db
2014-10-01 12:06 - 2013-10-26 00:38 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-10-01 12:04 - 2013-09-29 18:20 - 00001046 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-01 12:01 - 2013-12-10 18:47 - 00001042 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-10-01 12:00 - 2013-10-28 22:11 - 00000000 ____D () C:\windows\Minidump
2014-10-01 12:00 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-10-01 11:57 - 2013-08-30 19:54 - 00000000 ____D () C:\Users\pc
2014-10-01 11:33 - 2013-09-29 18:20 - 00001050 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-01 11:27 - 2013-09-29 17:36 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-10-01 11:20 - 2014-02-15 15:15 - 00000926 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-846750890-3381048881-3130427261-1001UA.job
2014-10-01 11:15 - 2012-08-02 09:05 - 00794946 _____ () C:\windows\system32\perfh015.dat
2014-10-01 11:15 - 2012-08-02 09:05 - 00159530 _____ () C:\windows\system32\perfc015.dat
2014-10-01 11:15 - 2012-07-26 09:28 - 01793398 _____ () C:\windows\system32\PerfStringBackup.INI
2014-10-01 11:13 - 2014-05-06 11:20 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-10-01 11:11 - 2014-03-26 18:55 - 00000000 ____D () C:\Users\pc\AppData\Roaming\GG
2014-10-01 11:11 - 2013-10-02 20:54 - 01078784 ___SH () C:\Users\pc\Desktop\Thumbs.db
2014-10-01 11:11 - 2013-09-29 19:22 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Skype
2014-10-01 11:02 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-10-01 11:01 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\WinStore
2014-10-01 11:00 - 2012-07-26 10:12 - 00000000 ___RD () C:\windows\ToastData
2014-10-01 10:59 - 2014-02-14 11:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-30 22:57 - 2014-03-26 14:15 - 00000770 _____ () C:\Users\pc\Desktop\notes.txt
2014-09-30 18:42 - 2013-12-02 17:41 - 00000600 _____ () C:\Users\pc\PUTTY.RND
2014-09-30 18:03 - 2012-07-26 09:59 - 00000000 ____D () C:\windows\CbsTemp
2014-09-30 14:20 - 2014-02-15 15:15 - 00000904 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-846750890-3381048881-3130427261-1001Core.job
2014-09-28 19:27 - 2013-10-24 22:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-09-28 19:26 - 2013-10-24 22:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-28 19:11 - 2014-02-15 12:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-28 19:09 - 2014-02-15 12:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-28 19:09 - 2014-02-15 12:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-09-28 19:07 - 2013-10-01 18:10 - 00000000 ____D () C:\windows\system32\MRT
2014-09-28 18:51 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\SysWOW64\en-GB
2014-09-28 18:51 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\en-GB
2014-09-26 21:38 - 2014-08-03 16:57 - 00000000 ____D () C:\Users\pc\Desktop\Images
2014-09-26 21:38 - 2014-04-14 15:35 - 00000000 ____D () C:\Users\pc\Desktop\Audio
2014-09-26 21:28 - 2013-09-29 18:20 - 00004022 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-09-26 21:28 - 2013-09-29 18:20 - 00003786 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-09-26 19:40 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-09-26 17:41 - 2013-08-30 20:02 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-846750890-3381048881-3130427261-1001
2014-09-26 14:50 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\Performance
2014-09-26 14:50 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-09-26 14:02 - 2014-01-26 22:21 - 00000000 ____D () C:\Users\pc\AppData\Roaming\DAEMON Tools Pro
2014-09-26 13:59 - 2013-10-10 10:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-09-26 13:55 - 2014-02-04 15:21 - 00000000 ____D () C:\Program Files\CCleaner
2014-09-26 13:53 - 2014-02-04 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-09-26 13:52 - 2014-05-15 15:38 - 00000000 ____D () C:\Users\pc\Downloads\ChomikBox
2014-09-26 13:45 - 2014-03-26 18:54 - 00000000 ____D () C:\Users\pc\AppData\Local\GG
2014-09-26 12:55 - 2012-07-26 07:26 - 00000301 _____ () C:\windows\win.ini
2014-09-26 12:36 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-09-26 12:27 - 2013-09-29 17:36 - 00003818 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-09-22 08:42 - 2014-02-03 22:15 - 00278152 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-09-20 09:07 - 2014-03-25 11:37 - 00000000 ____D () C:\ProgramData\TuneUp Software

Some content of TEMP:
====================
C:\Users\pc\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-27 14:38

==================== End Of Log ============================