Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-10-2014
Ran by Wojtek (administrator) on WOJTEK_FISHPOIN on 20-10-2014 13:08:05
Running from C:\htw
Loaded Profile: Wojtek (Available profiles: Wojtek)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Privacyware/PWI, Inc.) C:\Program Files (x86)\Privacyware\Privatefirewall 7.0\pfsvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Macheen) C:\Program Files (x86)\Dell\NetReady\MacheenService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Ritlabs, SRL) C:\Program Files (x86)\The Bat!\TheBat.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Privacyware/PWI, Inc.) C:\Program Files (x86)\Privacyware\Privatefirewall 7.0\PFGUI.exe
(Dell) C:\Users\Wojtek\AppData\Local\Apps\2.0\3EZV3TYJ.AAT\0YOOP19A.YNX\dell..tion_0f612f649c4a10af_0005.0004_3ddfe37344028d2c\DellSystemDetect.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Farbar) C:\htw\FRST64 (4).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [609144 2011-04-12] (Alps Electric Co., Ltd.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2000-01-01] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Privatefirewall] => C:\Program Files (x86)\Privacyware\Privatefirewall 7.0\PFGUI.exe [3048480 2013-12-17] (Privacyware/PWI, Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4094745809-975373488-2947739042-1000\...\Run: [DellSystemDetect] => C:\Users\Wojtek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
HKU\S-1-5-21-4094745809-975373488-2947739042-1000\...\Run: [thebat_startup] => C:\Program Files (x86)\The Bat!\thebat.exe [22809096 2014-08-28] (Ritlabs, SRL)
HKU\S-1-5-21-4094745809-975373488-2947739042-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-4094745809-975373488-2947739042-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-4094745809-975373488-2947739042-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll (Tonec Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: HKLM {362C56AA-6E4F-40C7-A0B5-85501DBDAD77} http://i.dell.com/images/global/js/scanner/SysProExe.cab
DPF: HKLM-x32 {108D3206-846A-4A93-BACB-F0572D043ED7} http://212.59.252.117:5202/webrec.cab
DPF: HKLM-x32 {8CFCF42C-1C64-47D6-AEEC-F9D001832ED3} http://xserv.dell.com/DellDriverScanner/DellSystem.CAB
DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://support.dell.com/systemprofiler/DellSystemLite.CAB
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.13.0.cab
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2000-01-01] (Realsil Microelectronics Inc.) [File not signed]
S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2012-09-29] () [File not signed]
R2 MacheenService; C:\Program Files (x86)\Dell\NetReady\MacheenService.exe [29440 2012-04-13] (Macheen)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2013-01-28] ()
R2 PFNet; C:\Program Files (x86)\Privacyware\Privatefirewall 7.0\pfsvc.exe [374600 2013-12-17] (Privacyware/PWI, Inc.)
S4 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [131968 2012-10-30] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1345920 2012-11-06] (Motorola Solutions, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-10-16] (Duplex Secure Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2013-09-29] ()
R2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-20 10:44 - 2014-10-20 10:45 - 02111488 _____ (Farbar) C:\Users\Wojtek\Downloads\FRST64 (5).exe
2014-10-20 10:37 - 2014-10-20 10:37 - 02111488 _____ (Farbar) C:\Users\Wojtek\Downloads\FRST64 (3).exe
2014-10-20 10:32 - 2014-10-20 10:32 - 14151873 _____ () C:\Users\Wojtek\Desktop\Desktop.7z
2014-10-20 10:30 - 2014-10-20 13:08 - 00000000 ____D () C:\htw
2014-10-19 21:39 - 2014-10-19 21:39 - 00244368 _____ () C:\Users\Wojtek\Downloads\Firefox Setup Stub 33.0.exe
2014-10-18 13:26 - 2014-10-20 12:32 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-18 13:26 - 2014-10-18 13:26 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-18 13:26 - 2014-10-18 13:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-18 13:26 - 2014-10-18 13:26 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-18 11:40 - 2014-10-18 11:40 - 00039968 _____ () C:\Users\Wojtek\Downloads\aaaaa.7z
2014-10-18 11:37 - 2014-10-18 11:37 - 00061765 _____ () C:\Users\Wojtek\Downloads\Shortcut.txt
2014-10-18 11:36 - 2014-10-18 11:37 - 00051519 _____ () C:\Users\Wojtek\Downloads\Addition.txt
2014-10-18 11:34 - 2014-10-18 11:37 - 00036134 _____ () C:\Users\Wojtek\Downloads\FRST.txt
2014-10-18 11:33 - 2014-10-10 04:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-18 11:33 - 2014-10-10 04:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-18 11:33 - 2014-10-10 04:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-18 11:33 - 2014-10-07 04:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-18 11:33 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-18 11:33 - 2014-09-29 02:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-18 11:33 - 2014-09-26 00:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-18 11:33 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-18 11:33 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-18 11:33 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-18 11:33 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-18 11:33 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-18 11:33 - 2014-09-26 00:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-18 11:33 - 2014-09-19 04:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-18 11:33 - 2014-09-19 03:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-18 11:33 - 2014-09-19 03:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-18 11:33 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-18 11:33 - 2014-09-19 03:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-18 11:33 - 2014-09-19 03:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-18 11:33 - 2014-09-19 03:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-18 11:33 - 2014-09-19 03:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-18 11:33 - 2014-09-19 03:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-18 11:33 - 2014-09-19 03:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-18 11:33 - 2014-09-19 03:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-18 11:33 - 2014-09-19 03:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-18 11:33 - 2014-09-19 03:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-18 11:33 - 2014-09-19 03:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-18 11:33 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-18 11:33 - 2014-09-19 03:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-18 11:33 - 2014-09-19 03:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-18 11:33 - 2014-09-19 03:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-18 11:33 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-18 11:33 - 2014-09-19 03:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-18 11:33 - 2014-09-19 03:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-18 11:33 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-18 11:33 - 2014-09-19 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-18 11:33 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-18 11:33 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-18 11:33 - 2014-09-19 03:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-18 11:33 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-18 11:33 - 2014-09-19 02:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-18 11:33 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-18 11:33 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-18 11:33 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-18 11:33 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-18 11:33 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-18 11:33 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-18 11:33 - 2014-09-19 02:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-18 11:33 - 2014-09-19 02:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-18 11:33 - 2014-09-19 02:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-18 11:33 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-18 11:33 - 2014-09-19 02:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-18 11:33 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-18 11:33 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-18 11:33 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-18 11:33 - 2014-09-19 02:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-18 11:33 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-18 11:33 - 2014-09-19 01:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-18 11:33 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-18 11:33 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-18 11:33 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-18 11:33 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-18 11:33 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-18 11:33 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-18 11:33 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-18 11:33 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-10-18 11:33 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-10-18 11:33 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-10-18 11:33 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-10-18 11:33 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-10-18 11:33 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-10-18 11:33 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-18 11:33 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-18 11:33 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-18 11:33 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-18 11:33 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-18 11:31 - 2014-09-18 04:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-18 11:31 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-18 11:30 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-18 11:30 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-18 11:30 - 2014-08-29 04:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-18 11:29 - 2014-07-17 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-18 11:29 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-18 11:29 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-18 11:29 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-18 11:29 - 2014-07-17 04:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-18 11:29 - 2014-07-17 04:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-18 11:29 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-18 11:29 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-18 11:29 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-18 10:39 - 2014-10-18 10:40 - 13053212 _____ () C:\Users\Wojtek\Desktop\ewentualnie firefox.7z
2014-10-18 10:31 - 2014-10-18 10:31 - 00793549 _____ () C:\Users\Wojtek\Downloads\MozBackup-1.5.2-beta1-EN.zip
2014-10-18 10:31 - 2014-10-18 10:31 - 00000000 ____D () C:\Users\Wojtek\Downloads\MozBackup-1.5.2-beta1-EN
2014-10-17 23:57 - 2014-10-17 23:57 - 00048395 _____ () C:\Users\Wojtek\Downloads\Downloads.7z
2014-10-17 23:57 - 2014-10-17 23:57 - 00048395 _____ () C:\Users\Wojtek\Downloads\Downloads (1).7z
2014-10-17 14:44 - 2014-10-17 14:44 - 00000165 ____H () C:\Users\Wojtek\Desktop\~$oferta_2015.xlsx
2014-10-16 23:56 - 2014-10-16 23:56 - 00602112 _____ (OldTimer Tools) C:\Users\Wojtek\Downloads\OTL.exe
2014-10-16 23:47 - 2014-10-16 23:47 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2014-10-16 23:46 - 2014-10-16 23:46 - 00623224 _____ (Duplex Secure Ltd.) C:\Users\Wojtek\Downloads\SPTDinst-v186-x64.exe
2014-10-16 23:45 - 2014-10-16 23:45 - 00602112 _____ (OldTimer Tools) C:\Users\Wojtek\Downloads\OTL.scr
2014-10-16 23:35 - 2014-10-16 23:35 - 00003011 _____ () C:\Users\Wojtek\Desktop\gmer.log
2014-10-16 22:20 - 2014-10-16 22:20 - 00040287 _____ () C:\Users\Wojtek\Desktop\FRST.txt
2014-10-16 22:19 - 2014-10-16 22:19 - 00054124 _____ () C:\Users\Wojtek\Desktop\Addition_frst.txt
2014-10-16 21:58 - 2014-10-16 21:58 - 00368705 _____ () C:\Users\Wojtek\Downloads\gm.zip
2014-10-16 21:57 - 2014-10-16 21:59 - 02112000 _____ (Farbar) C:\Users\Wojtek\Downloads\FRST64 (2).exe
2014-10-16 21:57 - 2014-10-16 21:59 - 02112000 _____ (Farbar) C:\Users\Wojtek\Downloads\FRST64 (1).exe
2014-10-16 21:56 - 2014-10-16 21:59 - 02112000 _____ (Farbar) C:\Users\Wojtek\Downloads\FRST64.exe
2014-10-16 08:51 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-10-16 08:51 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-16 08:49 - 2014-09-05 04:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 08:49 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-16 08:49 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 08:48 - 2014-09-13 03:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-16 08:48 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-16 08:48 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-15 15:05 - 2014-10-15 15:05 - 00001045 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 25.lnk
2014-10-15 14:59 - 2014-10-20 12:58 - 00000560 _____ () C:\Windows\setupact.log
2014-10-15 14:59 - 2014-10-15 14:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-15 14:58 - 2014-10-20 10:39 - 00030078 _____ () C:\Windows\PFRO.log
2014-10-15 10:07 - 2014-10-15 10:07 - 00064019 _____ () C:\Users\Wojtek\Downloads\statistics_2014-10-15_10-06-46.csv
2014-10-09 09:51 - 2014-10-09 09:51 - 00279878 _____ () C:\Users\Wojtek\Desktop\potw.pełnomocnictwo
2014-10-08 13:06 - 2014-10-08 13:06 - 00003617 _____ () C:\Users\Wojtek\Desktop\pellet_tce.ods
2014-10-08 13:03 - 2014-10-08 13:05 - 00009789 _____ () C:\Users\Wojtek\Desktop\pellet_tce.xlsx
2014-10-07 16:07 - 2014-10-07 16:07 - 01375089 _____ () C:\Users\Wojtek\Downloads\adwcleaner_3.311.exe
2014-10-06 12:32 - 2014-10-06 12:32 - 00000000 ____D () C:\Users\Wojtek\Desktop\FOTKI_DREWNO
2014-10-06 12:01 - 2014-10-06 12:07 - 38742875 _____ () C:\Users\Wojtek\Downloads\Camera.zip
2014-10-05 22:04 - 2014-10-05 22:04 - 00016269 _____ () C:\Users\Wojtek\Desktop\Zakupy TCE.xlsx
2014-10-02 09:52 - 2014-10-17 15:44 - 00013611 _____ () C:\Users\Wojtek\Desktop\oferta_2015.xlsx
2014-10-01 14:10 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 14:10 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-30 21:23 - 2014-09-30 21:23 - 00000000 ____D () C:\Users\Wojtek\Desktop\Strona_tce
2014-09-30 15:48 - 2014-09-30 15:48 - 00033344 _____ (LogMeIn, Inc.) C:\Windows\system32\Drivers\hamachi.sys
2014-09-29 14:37 - 2014-09-29 15:04 - 00010767 _____ () C:\Users\Wojtek\Desktop\gaz.xlsx
2014-09-26 23:34 - 2014-09-26 23:34 - 00006704 _____ () C:\Users\Wojtek\Desktop\AdwCleaner[S3].txt
2014-09-25 14:22 - 2014-09-25 14:22 - 1376070912 _____ () C:\Users\Wojtek\Documents\rejestr.reg
2014-09-25 14:12 - 2014-10-20 13:06 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4094745809-975373488-2947739042-1000
2014-09-24 12:03 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-24 12:03 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-23 16:43 - 2014-09-23 16:43 - 00003160 _____ () C:\Windows\System32\Tasks\{D5409C9A-60EA-408D-BA9B-7A76E670E6F0}
2014-09-22 15:07 - 2014-09-22 15:07 - 00025700 _____ () C:\Users\Wojtek\Desktop\FISHPOINT.rar
2014-09-21 14:06 - 2014-10-20 13:06 - 00003224 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4094745809-975373488-2947739042-1000

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-20 13:08 - 2013-10-28 00:48 - 00000000 ____D () C:\FRST
2014-10-20 13:06 - 2009-07-14 06:45 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-20 13:06 - 2009-07-14 06:45 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-20 13:05 - 2013-11-03 12:21 - 00000000 ____D () C:\Users\Wojtek\AppData\Local\Deployment
2014-10-20 13:05 - 2012-10-26 21:45 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-20 13:02 - 2012-09-19 13:29 - 01367237 _____ () C:\Windows\WindowsUpdate.log
2014-10-20 12:58 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-20 12:56 - 2012-10-26 21:45 - 00000000 ____D () C:\Users\Wojtek\AppData\Local\Google
2014-10-20 12:46 - 2012-12-21 14:57 - 07632896 ___SH () C:\Users\Wojtek\Desktop\Thumbs.db
2014-10-20 12:21 - 2012-10-26 21:45 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-20 11:59 - 2014-07-14 21:10 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-20 10:40 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-20 06:36 - 2012-09-20 22:57 - 00000000 ____D () C:\Users\Wojtek\AppData\Local\Adobe
2014-10-19 22:06 - 2012-10-15 09:12 - 00015207 _____ () C:\Windows\wininit.ini
2014-10-19 17:16 - 2013-05-13 20:37 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-19 17:15 - 2013-05-13 20:37 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-19 16:10 - 2009-07-14 06:45 - 05021456 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-19 11:03 - 2014-05-07 07:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-19 06:57 - 2012-09-29 14:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-18 23:32 - 2014-01-12 23:39 - 00000000 ____D () C:\Users\Wojtek\Desktop\CV
2014-10-18 13:21 - 2013-06-26 16:15 - 00000000 ____D () C:\Users\Wojtek\AppData\Roaming\Dropbox
2014-10-18 12:11 - 2014-01-19 18:07 - 00000000 ____D () C:\Users\Mcx1-WOJTEK_FISHPOIN
2014-10-18 12:11 - 2012-09-20 08:28 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-10-18 12:11 - 2012-09-20 08:28 - 00000000 ____D () C:\Windows\system32\Macromed
2014-10-18 12:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-10-18 12:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-10-18 12:08 - 2012-11-05 00:06 - 00000000 ____D () C:\ProgramData\Real
2014-10-18 12:08 - 2011-04-12 15:21 - 22472536 _____ () C:\Windows\system32\perfh015.dat
2014-10-18 12:08 - 2011-04-12 15:21 - 07948868 _____ () C:\Windows\system32\perfc015.dat
2014-10-18 12:08 - 2009-07-14 07:13 - 00006552 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-18 12:07 - 2012-09-20 17:04 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-18 11:28 - 2012-10-26 21:45 - 00000000 ____D () C:\Program Files (x86)\Google
2014-10-18 11:21 - 2012-09-19 13:29 - 00000000 ____D () C:\Users\Wojtek
2014-10-17 12:27 - 2013-07-17 10:19 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 08:09 - 2012-09-19 23:50 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-17 01:02 - 2014-01-11 12:08 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-10-17 00:52 - 2013-06-26 16:19 - 00000000 ___RD () C:\Users\Wojtek\Dropbox
2014-10-17 00:50 - 2013-06-26 20:57 - 00000000 ____D () C:\Program Files (x86)\PowerISO
2014-10-16 22:47 - 2012-12-14 21:32 - 00000000 ____D () C:\Windows\Minidump
2014-10-16 22:46 - 2012-09-19 11:49 - 00322980 _____ () C:\Windows\Minidump\101614-22011-01.dmp
2014-10-16 22:10 - 2012-09-19 11:49 - 00325706 _____ () C:\Windows\Minidump\101614-37830-01.dmp
2014-10-15 15:05 - 2014-06-07 21:47 - 00003880 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1389648749
2014-10-15 15:05 - 2014-01-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-10-15 11:39 - 2014-09-06 21:20 - 00000000 ____D () C:\Users\Wojtek\Desktop\email_fp
2014-10-15 10:15 - 2014-07-28 15:44 - 00091136 _____ () C:\Users\Wojtek\Desktop\założenia_czarek.xls
2014-10-15 09:54 - 2014-06-12 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-10-15 09:54 - 2014-01-16 20:05 - 00000000 ____D () C:\Users\Wojtek\AppData\Roaming\IDM
2014-10-15 09:54 - 2013-12-15 11:48 - 00000000 ____D () C:\Users\Wojtek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-15 09:54 - 2013-10-26 15:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-10-15 09:54 - 2013-10-26 11:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-10-15 09:54 - 2013-10-16 21:32 - 00000000 ____D () C:\Users\Wojtek\AppData\Roaming\vlc
2014-10-15 09:54 - 2013-05-02 17:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVIGenerator
2014-10-15 09:54 - 2013-01-08 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cennik 2013
2014-10-15 09:54 - 2012-09-19 12:48 - 00000000 ____D () C:\Windows\Panther
2014-10-15 09:42 - 2012-11-07 14:54 - 00000000 ____D () C:\Users\Wojtek\AppData\Roaming\Hamachi
2014-10-13 12:48 - 2013-04-06 13:47 - 00000000 ____D () C:\Users\Wojtek\Desktop\Skany
2014-10-12 10:01 - 2014-07-14 21:53 - 00000000 ____D () C:\AdwCleaner
2014-10-09 16:55 - 2014-07-07 16:34 - 00165888 _____ () C:\Users\Wojtek\Desktop\spółka.xls
2014-10-09 10:14 - 2014-04-18 22:34 - 00000000 ____D () C:\Users\Wojtek\Desktop\Baza klintów
2014-10-08 10:53 - 2013-12-16 16:44 - 00000000 ____D () C:\Users\Wojtek\Desktop\Spółka
2014-10-06 21:45 - 2012-11-30 17:40 - 00000132 _____ () C:\Users\Wojtek\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-10-05 21:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-04 10:28 - 2013-08-08 13:10 - 00036864 _____ () C:\Users\Wojtek\Desktop\harmonogram_soboty.xls
2014-09-29 16:50 - 2014-09-19 19:50 - 00000000 ____D () C:\HERO3
2014-09-27 12:43 - 2014-01-11 22:48 - 00000000 ____D () C:\Users\Wojtek\AppData\Roaming\TeamViewer
2014-09-26 23:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PLA
2014-09-26 23:27 - 2012-09-28 23:07 - 00000000 ____D () C:\Users\Wojtek\AppData\Roaming\Skype
2014-09-26 22:01 - 2013-03-22 17:19 - 00000000 ____D () C:\Users\Wojtek\AppData\Roaming\DMCache
2014-09-26 13:04 - 2013-05-04 18:33 - 00000000 ____D () C:\Users\Wojtek\Downloads\Video
2014-09-25 14:48 - 2014-02-11 11:08 - 00000000 ____D () C:\Program Files (x86)\Vector Magic
2014-09-21 01:25 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

Files to move or delete:
====================
C:\Users\Wojtek\privatefirewall.exe


Some content of TEMP:
====================
C:\Users\Wojtek\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxnqt1b.dll
C:\Users\Wojtek\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-21 01:17

==================== End Of Log ============================