Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-11-2014
Ran by Asus (administrator) on ASUS-KOMPUTER on 04-11-2014 19:23:39
Running from C:\Users\Asus\Downloads
Loaded Profile: Asus (Available profiles: Asus)
Platform: Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe
() C:\Program Files\T-Mobile\InternetManager_H\Internet Manager.exe
() C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8\maintainer.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {1618f30a-de92-11e3-b54f-10bf489a8d3b} - G:\Startme.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {1618f33c-de92-11e3-b54f-10bf489a8d3b} - E:\AutoRun.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {1618f34a-de92-11e3-b54f-10bf489a8d3b} - E:\AutoRun.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {277c053a-e138-11e3-b73e-aeb3223b5bbe} - E:\AutoRun.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {277c0556-e138-11e3-b73e-10bf489a8d3b} - E:\AutoRun.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {277c0594-e138-11e3-b73e-10bf489a8d3b} - E:\windows\Install\Install.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {277c05b3-e138-11e3-b73e-10bf489a8d3b} - E:\AutoRun.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {9bf34857-56c4-11e4-b516-10bf489a8d3b} - E:\AutoRun.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {9bf34889-56c4-11e4-b516-10bf489a8d3b} - E:\AutoRun.exe
HKU\S-1-5-21-3886030683-2889538507-278638460-1000\...\MountPoints2: {c138974a-f27d-11e3-99f7-10bf489a8d3b} - F:\.\StartModem.exe
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9ho0X2xYDGc_QKYgplvE5AaQJzeB2jLGE-NmAMe2pSqyMGjluaNMH2Lwui4h00BhpjYKICu2Pnpv-lsq1y9QEQ5ND3aP10UZdhn9oleyYVod4v05SvQQ_TEYpag8GxERTDYS_NHRY0Y1w4w2KPvEauee6zxqPpc6yLbww,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rts.dsrlte.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9ho0X2xYDGc_QKYgplvE5AaQJzeB2jLGE-NmAMe2pSqyMGjluaNMH2Lwui4h00BhpjYKICu2Pnpv-lsq1y9QEQ5ND3aP10UZdhn9oleyYVod4v05SvQQ_TEYpag8GxERTDYS_NHRY0Y1w4w2KPvEauee6zxqPpc6yLbww,,&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_ir_14_30_ch&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EtCtD0Czz0CyB0BtA0BtAtN0D0Tzu0SzytAzztN1L2XzutAtFtDtFtBtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0ByCyC0DyCyCyDtG0AyDyB0CtGyCtCzyzytGtBtBzy0BtGyBtDzyzzyB0ByDtAzy0AyCtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0D0A0E0EyEyDtAtGtDzyzz0BtG0CyD0DtBtGtB0CtAzytGyByB0CtC0D0DyCtCzz0F0F0F2Q&cr=34284458&ir=
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_ir_14_30_ch&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EtCtD0Czz0CyB0BtA0BtAtN0D0Tzu0SzytAzztN1L2XzutAtFtDtFtBtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0ByCyC0DyCyCyDtG0AyDyB0CtGyCtCzyzytGtBtBzy0BtGyBtDzyzzyB0ByDtAzy0AyCtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0D0A0E0EyEyDtAtGtDzyzz0BtG0CyD0DtBtGtB0CtAzytGyByB0CtC0D0DyCtCzz0F0F0F2Q&cr=34284458&ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://speedial.com/results.php?f=4&q={searchTerms}&a=spd_ir_14_25_ff&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EtCtD0Czz0CyB0BtA0BtAtN0D0Tzu0SzytDtBtN1L2XzutBtFtBtCtFyEtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CyEyC0CtD0D0AtGtB0FyDyDtGyC0E0E0CtGzztB0D0FtGtAyCtAyB0FtB0FzzzytDyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0D0A0E0EyEyDtAtGtDzyzz0BtG0CyD0DtBtGtB0CtAzytGyByB0CtC0D0DyCtCzz0F0F0F2Q&cr=745011580&ir=
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://feed.helperbar.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9hoxUv82Ac0l78Z5HzGso_TVx83Je_T_BzMLRIWufTx2Q_wNtRzzyCUETChR6PtXKymOTNCsIJaq9GTUIA2kFiHjYtwzpuW0XgZC2U2bwL1UuZDksHE8Xtk2OIVbg5kqWU6p4gVmMR5BRbXSu9iIEEhwIjhv8cZ7_bB-Q,,&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9ho0X2xYDGc_QKYgplvE5AaQJzeB2jLGE-NmAMe2pSqyMGjluaNMH2Lwui4h00BhpjYKICu2Pnpv-lsq1y9QEQ5ND3aP10UZdhn9oleyYVod4v05SvQQ_TEYpag8GxERTDYS_NHRY0Y1w4w2KPvEauee6zxqPpc6yLbww,,&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9ho0X2xYDGc_QKYgplvE5AaQJzeB2jLGE-NmAMe2pSqyMGjluaNMH2Lwui4h00BhpjYKICu2Pnpv-lsq1y9QEQ5ND3aP10UZdhn9oleyYVod4v05SvQQ_TEYpag8GxERTDYS_NHRY0Y1w4w2KPvEauee6zxqPpc6yLbww,,&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://speedial.com/results.php?f=4&q={searchTerms}&a=spd_ir_14_25_ff&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EtCtD0Czz0CyB0BtA0BtAtN0D0Tzu0SzytDtBtN1L2XzutBtFtBtCtFyEtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CyEyC0CtD0D0AtGtB0FyDyDtGyC0E0E0CtGzztB0D0FtGtAyCtAyB0FtB0FzzzytDyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0D0A0E0EyEyDtAtGtDzyzz0BtG0CyD0DtBtGtB0CtAzytGyByB0CtC0D0DyCtCzz0F0F0F2Q&cr=745011580&ir=
SearchScopes: HKCU - {67B8B507-6308-4F8C-9088-BB9F905A8E16} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://feed.helperbar.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9hoxUv82Ac0l78Z5HzGso_TVx83Je_T_BzMLRIWufTx2Q_wNtRzzyCUETChR6PtXKymOTNCsIJaq9GTUIA2kFiHjYtwzpuW0XgZC2U2bwL1UuZDksHE8Xtk2OIVbg5kqWU6p4gVmMR5BRbXSu9iIEEhwIjhv8cZ7_bB-Q,,&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: SafeFinder SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - SafeFinder Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\..\Interfaces\{FB5A0F07-9F23-40C8-B5BF-BDBF1F132107}: [NameServer] 212.113.0.3 66.28.0.61

FireFox:
========
FF ProfilePath: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\52afl2u5.default
FF DefaultSearchEngine: Search The Web (SearchTape)
FF Keyword.URL: user_pref("keyword.URL","");
FF NewTab: user_pref("browser.newtab.url","");
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Asus\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF user.js: detected! => C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\52afl2u5.default\user.js
FF SearchPlugin: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\52afl2u5.default\searchplugins\dsrlte.xml
FF SearchPlugin: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\52afl2u5.default\searchplugins\SafeFinder Search.xml
FF SearchPlugin: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\52afl2u5.default\searchplugins\WSE Rocket.xml
FF Extension: Deal Keeper - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\52afl2u5.default\Extensions\{7e4355b8-96cd-43eb-b59a-82af29f01b16}.xpi [2014-10-30]
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_Z\Bin\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files\T-Mobile\InternetManager_Z\Bin\addon [2014-06-12]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.pl/"
CHR Profile: C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dysk Google) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-22]
CHR Extension: (YouTube) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-22]
CHR Extension: (Szukaj w Google) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-22]
CHR Extension: (Google Wallet) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-22]
CHR Extension: (Gmail) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-22]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 AsusService; C:\Windows\system32\AsusService.exe [224680 2012-01-11] ()
S4 Atheros Bt&Wlan Coex Agent; C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-08-02] (Atheros) [File not signed]
S4 AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [82592 2011-08-02] (Atheros Commnucations) [File not signed]
S2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
S2 Internet Manager. RunOuc; C:\Program Files\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] ()
R2 MaintainerSvc2.02.5636706; C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8\maintainer.exe [123680 2014-11-04] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [25248 2011-08-02] (Atheros)
R3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [96000 2012-08-20] (Huawei Technologies Co., Ltd.)
R3 huawei_ext_ctrl; C:\Windows\System32\DRIVERS\ew_juextctrl.sys [27520 2012-08-20] (Huawei Technologies Co., Ltd.)
R3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [203264 2012-09-18] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [13880 2014-05-08] ( )
R3 L1C; C:\Windows\System32\DRIVERS\L1C60x86.sys [87152 2014-05-08] (Atheros Communications, Inc.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-13] (Malwarebytes Corporation)
S3 mtkmbim; C:\Windows\System32\DRIVERS\mtkmbim7.sys [172544 2012-12-13] (MediaTek Inc.)
S3 wdf_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [68480 2013-02-21] (MediaTek Inc.)
S3 zte_cdc_acm; C:\Windows\System32\DRIVERS\zte_cdc_acm.sys [67968 2011-08-10] (ZTE)
S3 zte_cpo; C:\Windows\System32\DRIVERS\zte_cpo.sys [9984 2011-08-10] (ZTE)
R1 {7e4355b8-96cd-43eb-b59a-82af29f01b16}w; C:\Windows\System32\drivers\{7e4355b8-96cd-43eb-b59a-82af29f01b16}w.sys [43200 2014-10-29] (StdLib)
S0 BMLoad; system32\drivers\BMLoad.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S1 tcpipBM; \??\C:\Windows\system32\drivers\tcpipBM.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-04 19:23 - 2014-11-04 19:24 - 00014806 _____ () C:\Users\Asus\Downloads\FRST.txt
2014-11-04 19:21 - 2014-11-04 19:23 - 00000000 ____D () C:\FRST
2014-11-04 19:19 - 2014-11-04 19:19 - 00380416 _____ () C:\Users\Asus\Downloads\wm2sj8i0.exe
2014-11-04 19:17 - 2014-11-04 19:18 - 00602112 _____ (OldTimer Tools) C:\Users\Asus\Downloads\OTL.exe
2014-11-04 19:15 - 2014-11-04 19:16 - 01106432 _____ (Farbar) C:\Users\Asus\Downloads\FRST.exe
2014-11-04 17:01 - 2014-11-04 17:01 - 00000266 __RSH () C:\ProgramData\ntuser.pol
2014-11-04 15:41 - 2014-11-04 15:41 - 00000000 ____D () C:\Users\Asus\AppData\Local\Pay-By-Ads
2014-10-30 03:16 - 2014-11-04 17:32 - 00000000 ____D () C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8
2014-10-30 02:46 - 2014-10-29 14:50 - 00043200 _____ (StdLib) C:\Windows\system32\Drivers\{7e4355b8-96cd-43eb-b59a-82af29f01b16}w.sys
2014-10-30 02:29 - 2014-10-30 02:29 - 00000000 ____D () C:\Windows\pss
2014-10-30 02:23 - 2014-10-30 02:23 - 164604988 _____ () C:\Windows\MEMORY.DMP
2014-10-30 02:23 - 2014-10-30 02:23 - 00183360 _____ () C:\Windows\Minidump\103014-67439-01.dmp
2014-10-30 02:23 - 2014-10-30 02:23 - 00000000 ____D () C:\Windows\Minidump
2014-10-30 00:03 - 2014-10-30 00:03 - 00001159 _____ () C:\Users\Public\Desktop\Internet Manager.lnk
2014-10-30 00:03 - 2014-10-30 00:03 - 00000000 ____D () C:\ProgramData\Internet Manager
2014-10-30 00:02 - 2012-09-18 09:20 - 00203264 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2014-10-30 00:02 - 2012-09-14 02:26 - 00378880 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2014-10-30 00:02 - 2012-08-20 01:54 - 00096000 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2014-10-30 00:02 - 2012-08-20 01:54 - 00076544 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2014-10-30 00:02 - 2012-08-20 01:54 - 00069760 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2014-10-30 00:02 - 2012-08-20 01:54 - 00027520 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2014-10-30 00:02 - 2011-12-31 02:20 - 00199168 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2014-10-30 00:02 - 2010-10-08 09:55 - 00025856 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2014-10-30 00:02 - 2010-09-26 11:09 - 00019200 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2014-10-30 00:02 - 2010-08-06 00:42 - 00861696 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2014-10-30 00:02 - 2010-07-27 02:52 - 00102784 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2014-10-30 00:02 - 2010-03-20 05:06 - 00011136 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2014-10-14 22:00 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-14 22:00 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-14 22:00 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-14 22:00 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-14 22:00 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-14 22:00 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-14 22:00 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-14 22:00 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-14 22:00 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-14 22:00 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-14 22:00 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-14 22:00 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-14 22:00 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-14 22:00 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-14 22:00 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-14 22:00 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-14 22:00 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-14 22:00 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-14 22:00 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-14 22:00 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-14 22:00 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-14 22:00 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-14 22:00 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-14 22:00 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-14 22:00 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-14 22:00 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-14 22:00 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-14 22:00 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-14 22:00 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-14 22:00 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-14 21:57 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-14 21:56 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-14 21:55 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-14 21:55 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-14 21:55 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-14 21:54 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-14 21:54 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-14 21:54 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-14 21:54 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-14 21:54 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-14 21:54 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-14 21:54 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-14 21:54 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-14 21:54 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-14 21:54 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-14 21:54 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-14 21:54 - 2014-05-30 08:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-10-14 21:54 - 2014-05-30 08:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-10-14 21:54 - 2014-05-30 08:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-10-14 21:54 - 2014-05-30 08:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-10-14 21:53 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-14 21:52 - 2014-08-19 03:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-10-14 21:52 - 2014-08-19 03:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-10-14 21:52 - 2014-08-19 03:41 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-10-14 21:52 - 2014-08-19 03:40 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-10-14 21:52 - 2014-08-19 03:40 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-10-14 21:52 - 2014-08-19 02:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-10-14 21:52 - 2014-07-07 02:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-14 21:52 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-14 21:52 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-14 21:52 - 2014-07-07 02:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-14 21:52 - 2014-07-07 02:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-10-14 21:52 - 2014-07-07 02:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-14 21:52 - 2014-07-07 02:39 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-14 21:52 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-14 21:52 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-14 21:52 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-14 21:52 - 2014-07-07 02:28 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-10-14 21:52 - 2014-06-28 01:21 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-14 21:52 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-14 21:52 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-04 19:18 - 2014-05-08 10:35 - 01669062 _____ () C:\Windows\WindowsUpdate.log
2014-11-04 19:18 - 2009-07-14 05:34 - 00020720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-04 19:18 - 2009-07-14 05:34 - 00020720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-04 19:09 - 2014-05-08 11:57 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-04 19:07 - 2014-07-27 09:07 - 00000288 _____ () C:\Windows\Tasks\Rocket Updater.job
2014-11-04 18:30 - 2014-07-22 19:19 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-04 18:00 - 2014-07-27 09:07 - 00000000 ____D () C:\Program Files\Deal Keeper
2014-11-04 17:19 - 2014-06-23 19:13 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3886030683-2889538507-278638460-1000UA.job
2014-11-04 17:13 - 2011-04-12 06:08 - 00687828 _____ () C:\Windows\system32\perfh015.dat
2014-11-04 17:13 - 2011-04-12 06:08 - 00131382 _____ () C:\Windows\system32\perfc015.dat
2014-11-04 17:13 - 2010-11-20 22:01 - 01523412 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-04 17:12 - 2009-07-14 03:04 - 00000505 _____ () C:\Windows\win.ini
2014-11-04 17:09 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing
2014-11-04 17:01 - 2014-07-22 19:19 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-04 17:01 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-04 17:01 - 2009-07-14 05:39 - 00062870 _____ () C:\Windows\setupact.log
2014-11-04 16:45 - 2014-07-22 19:15 - 00000244 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-11-04 16:44 - 2014-07-29 17:25 - 00001338 _____ () C:\Users\Asus\Desktop\Wyczyść rejestr za darmo!.lnk
2014-11-04 00:07 - 2014-08-03 21:02 - 00000099 _____ () C:\Users\Asus\AppData\Roaming\WB.CFG
2014-11-03 22:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-10-30 22:58 - 2014-06-23 19:13 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3886030683-2889538507-278638460-1000Core.job
2014-10-30 05:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-30 02:26 - 2014-07-09 20:54 - 00000000 ____D () C:\Users\Asus\AppData\Roaming\GG
2014-10-30 00:59 - 2014-07-22 19:20 - 00002095 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-30 00:04 - 2014-05-21 21:09 - 00000000 ____D () C:\ProgramData\DataCardService
2014-10-30 00:03 - 2014-06-05 13:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Manager
2014-10-28 06:35 - 2014-05-08 11:22 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-18 13:46 - 2009-07-14 05:33 - 00266064 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 13:45 - 2014-05-08 11:59 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-10-18 13:43 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-10-18 09:15 - 2014-05-08 15:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-18 09:00 - 2014-05-08 15:29 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-18 08:55 - 2014-07-22 19:15 - 00000252 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-10-14 12:37 - 2014-05-08 11:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-10-14 12:36 - 2014-06-21 08:22 - 00000000 ____D () C:\Users\Asus\AppData\Local\CrashDumps

Some content of TEMP:
====================
C:\Users\Asus\AppData\Local\Temp\dsrsetup.exe
C:\Users\Asus\AppData\Local\Temp\res.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 12:15

==================== End Of Log ============================