Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014
Ran by pc (administrator) on KOMP on 12-11-2014 15:06:41
Running from C:\Users\pc\Downloads
Loaded Profile: pc (Available profiles: pc)
Platform: Windows 8 (X64) OS Language: Polish (Poland)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(PC Utilities Software Limited) C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\putty.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13196432 2012-09-25] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-20] (SRS Labs, Inc.)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2611112 2012-09-04] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-28] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [7148032 2012-10-31] (Pegatron Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Facebook Update] => C:\Users\pc\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-02-15] (Facebook Inc.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [GG] => C:\Users\pc\AppData\Local\GG\Application\gghub.exe [4023360 2014-09-26] (GG Network S.A.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600216 2014-10-01] (Electronic Arts)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [148048 2014-10-28] (PC Utilities Software Limited)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [uTorrent] => C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe [1689168 2014-11-07] (BitTorrent Inc.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\MountPoints2: {269f02e9-86c8-11e3-beb3-c0d962382821} - "E:\autorun.exe" 
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\MountPoints2: {7caec902-5c5b-11e4-bf13-c0d962382821} - "F:\LaunchEAWG.exe" 
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default
SearchScopes: HKLM - {84E73978-A84D-4AEF-950F-E305680E5C46} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {84E73978-A84D-4AEF-950F-E305680E5C46} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 158.75.88.5

FireFox:
========
FF ProfilePath: C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\iw4wca7a.default-1412155935203
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin HKU\S-1-5-21-846750890-3381048881-3130427261-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\pc\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-846750890-3381048881-3130427261-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF user.js: detected! => C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\iw4wca7a.default-1412155935203\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Extension: Download videos and MP3s from YouTube - C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\iw4wca7a.default-1412155935203\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-10-22]
FF Extension: PodoWeb - C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\iw4wca7a.default-1412155935203\Extensions\{972b8ad0-9d6f-4688-9227-759df6914df4}.xpi [2014-10-25]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome: 
=======
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-29]
CHR Extension: (Dysk Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-29]
CHR Extension: (YouTube) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-29]
CHR Extension: (Adblock Plus) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-11]
CHR Extension: (Szukaj w Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-29]
CHR Extension: (WasteNoTime) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\enebomhlllfaccbelnjhfgblnalofhch [2014-09-26]
CHR Extension: (Related Content by Zemanta) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\fejeknoakjeblidffkajbioncodnmhge [2014-08-11]
CHR Extension: (PodoWeb) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpgojppkmfhfkieofaghalikkaaheiig [2014-10-25]
CHR Extension: (Yoono  Twitter Facebook LinkedIn YouTube) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli [2014-06-11]
CHR Extension: (dict cc) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknonnojlmhnmjhpeokdbeineeajcemh [2014-06-05]
CHR Extension: (Google Wallet) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-29]
CHR Extension: (Gmail) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-29]
CHR Extension: (Sticky Notes  Just popped up) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\plpdjbappofmfbgdmhoaabefbobddchk [2014-11-07]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 70e6ca8c; c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [3113040 2014-11-07] ()
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [43520 2012-07-26] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [634368 2012-07-26] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18432 2012-07-26] (Microsoft Corporation)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-29] (TuneUp Software)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-01-25] ()
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-10-25] (Disc Soft Ltd)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\drivers\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-01-25] ()
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-12] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)
R1 MpKsl30283990; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C3C8744C-066F-41B3-9270-FD1CC8A37BB7}\MpKsl30283990.sys [45352 2014-11-11] (Microsoft Corporation)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-08-02] (Realtek Microelectronics)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1498256 2012-08-29] (Realtek Semiconductor Corporation                           )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-10-25] (Duplex Secure Ltd.)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
U3 abs6w96f; C:\Windows\System32\Drivers\abs6w96f.sys [0 ] (Microsoft Corporation)
U3 uxdoqpoc; \??\C:\Users\pc\AppData\Local\Temp\uxdoqpoc.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-12 15:06 - 2014-11-12 15:08 - 00018779 _____ () C:\Users\pc\Downloads\FRST.txt
2014-11-12 15:04 - 2014-11-12 15:04 - 00380416 _____ () C:\Users\pc\Downloads\hibxpypi.exe
2014-11-12 15:02 - 2014-11-12 15:02 - 02116096 _____ (Farbar) C:\Users\pc\Downloads\FRST64.exe
2014-11-08 14:11 - 2014-11-09 17:29 - 00013172 _____ () C:\windows\PFRO.log
2014-11-08 14:11 - 2014-11-08 14:12 - 00431320 _____ () C:\windows\system32\FNTCACHE.DAT
2014-11-08 14:11 - 2014-11-08 14:11 - 649079071 _____ () C:\windows\MEMORY.DMP
2014-11-07 16:42 - 2014-11-07 16:42 - 00000000 ____D () C:\Users\pc\Desktop\Audio
2014-11-07 16:39 - 2014-11-09 17:27 - 00000000 ____D () C:\ProgramData\DiscountLocator
2014-11-07 16:38 - 2014-11-07 16:41 - 00000000 ____D () C:\ProgramData\26a8f481a0ac6502
2014-11-07 16:01 - 2014-11-07 16:01 - 00003224 _____ () C:\windows\System32\Tasks\Optimizer Pro Schedule
2014-11-07 16:01 - 2014-11-07 16:01 - 00000000 ____D () C:\Users\pc\Documents\Optimizer Pro
2014-11-07 16:01 - 2014-11-07 16:01 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Optimizer Pro
2014-11-07 15:59 - 2014-11-07 15:59 - 00000856 _____ () C:\Users\pc\Desktop\µTorrent.lnk
2014-11-07 15:59 - 2014-11-07 15:59 - 00000836 _____ () C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-11-07 15:56 - 2014-11-09 17:27 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-11-07 15:56 - 2014-11-07 15:56 - 00001073 _____ () C:\Users\pc\Desktop\Optimizer Pro.lnk
2014-11-07 15:56 - 2014-11-07 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
2014-11-07 15:55 - 2014-11-07 15:55 - 01689168 _____ (BitTorrent Inc.) C:\Users\pc\Downloads\utorrent.exe
2014-11-05 16:07 - 2014-11-12 15:05 - 00717834 _____ () C:\windows\WindowsUpdate.log
2014-11-05 16:05 - 2014-11-05 16:06 - 00000000 ____D () C:\Users\pc\AppData\Local\Deployment
2014-11-05 16:05 - 2014-11-05 16:05 - 00000000 ____D () C:\Users\pc\AppData\Local\Apps\2.0
2014-11-03 11:04 - 2014-11-03 14:31 - 00009423 _____ () C:\Users\pc\Desktop\takbylo.eaf
2014-11-03 10:08 - 2014-11-03 10:31 - 44080568 _____ () C:\Users\pc\Desktop\ADAM JENSEN (DEUS EX) and VAAS (FAR CRY 3) Behind The Scenes interview.mp4
2014-10-29 20:24 - 2014-11-03 09:25 - 00000000 ____D () C:\windows\system32\AutoUpdateLicense
2014-10-29 19:27 - 2014-10-22 04:34 - 00010777 _____ () C:\windows\system32\AutoconfigV2.cab
2014-10-29 19:27 - 2014-10-22 04:33 - 00581016 _____ (Microsoft Corporation) C:\windows\system32\AutoUpdate.exe
2014-10-29 19:27 - 2014-10-22 04:33 - 00462760 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2014-10-29 19:27 - 2014-10-22 02:08 - 00568832 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-10-29 19:27 - 2014-10-22 02:08 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-29 19:27 - 2014-10-22 02:01 - 00695808 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-10-29 19:27 - 2014-10-22 02:01 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2014-10-29 19:27 - 2014-10-22 02:01 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-29 19:27 - 2014-10-22 02:00 - 00125952 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2014-10-29 18:34 - 2014-10-29 18:34 - 00000000 ____D () C:\Users\pc\AppData\Local\Ndemic Creations
2014-10-27 18:57 - 2014-10-27 18:57 - 00001703 _____ () C:\Users\pc\Desktop\PlagueInc.lnk
2014-10-27 18:57 - 2014-10-27 18:57 - 00001678 _____ () C:\Users\pc\Desktop\PlagueInc Scenario Creator.lnk
2014-10-26 20:57 - 2014-10-26 20:57 - 00000266 __RSH () C:\ProgramData\ntuser.pol
2014-10-25 18:11 - 2014-10-25 21:47 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Petroglyph
2014-10-25 17:16 - 2014-10-25 17:16 - 00002382 _____ () C:\Users\Public\Desktop\Star Wars Empire at War Forces of Corruption.lnk
2014-10-25 17:16 - 2005-12-05 17:07 - 00081616 _____ (Microsoft Corporation) C:\windows\system32\SET5DE8.tmp
2014-10-25 17:16 - 2005-12-05 17:07 - 00061136 _____ (Microsoft Corporation) C:\windows\SysWOW64\SET5A8E.tmp
2014-10-25 16:34 - 2014-10-25 16:34 - 00000000 ____D () C:\Users\pc\AppData\Roaming\InstallShield
2014-10-25 16:31 - 2014-10-25 16:31 - 00283064 _____ (Disc Soft Ltd) C:\windows\system32\Drivers\dtsoftbus01.sys
2014-10-25 16:07 - 2014-10-25 16:31 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-10-25 16:07 - 2014-10-25 16:23 - 00001961 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-10-25 16:07 - 2014-10-25 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-10-25 16:07 - 2014-10-25 16:07 - 00000000 ____D () C:\Users\pc\AppData\Roaming\DAEMON Tools
2014-10-22 21:33 - 2014-10-22 21:34 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-10-22 21:33 - 2014-10-22 21:33 - 00001447 _____ () C:\Users\Public\Desktop\Free YouTube Download.lnk
2014-10-22 21:33 - 2014-10-22 21:33 - 00001250 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-10-22 21:33 - 2014-10-22 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-10-22 21:32 - 2014-10-22 21:34 - 00000000 ____D () C:\Users\pc\AppData\Roaming\DVDVideoSoft
2014-10-22 14:08 - 2014-09-29 23:49 - 00705480 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-10-22 14:08 - 2014-09-29 23:49 - 00104904 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-21 22:08 - 2014-10-21 22:08 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Sony Creative Software Inc
2014-10-21 21:31 - 2014-10-21 21:31 - 00002114 _____ () C:\Users\pc\AppData\Local\recently-used.xbel
2014-10-16 11:37 - 2014-07-12 05:41 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2014-10-16 11:37 - 2014-07-12 05:15 - 00006144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2014-10-16 11:37 - 2014-07-12 01:02 - 00478352 _____ () C:\windows\SysWOW64\locale.nls
2014-10-16 11:37 - 2014-07-12 01:00 - 00478352 _____ () C:\windows\system32\locale.nls
2014-10-16 11:37 - 2014-07-08 23:33 - 00181248 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2014-10-16 11:37 - 2014-07-08 23:32 - 01539584 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2014-10-16 11:37 - 2014-07-08 23:32 - 00340480 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2014-10-16 11:37 - 2014-07-08 23:30 - 01220608 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2014-10-16 11:37 - 2014-07-07 06:52 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\wcmsvc.dll
2014-10-16 11:37 - 2014-07-07 06:52 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2014-10-16 11:37 - 2014-07-04 11:52 - 00328000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2014-10-16 11:37 - 2014-07-03 02:59 - 01824784 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2014-10-16 11:37 - 2014-07-03 01:30 - 01408952 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2014-10-16 11:37 - 2014-06-28 08:01 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2014-10-16 11:37 - 2014-06-28 07:57 - 00209920 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2014-10-16 11:37 - 2014-06-28 07:56 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2014-10-16 11:37 - 2014-06-25 08:09 - 00733184 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2014-10-16 11:37 - 2014-06-25 08:07 - 01023488 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2014-10-16 11:37 - 2014-06-18 00:27 - 02032640 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-10-16 11:37 - 2014-06-18 00:23 - 02238464 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-10-16 11:37 - 2014-06-11 15:47 - 02842112 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2014-10-16 11:37 - 2014-06-11 05:40 - 02620928 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2014-10-16 11:37 - 2014-06-10 23:44 - 01403896 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2014-10-16 11:37 - 2014-05-30 00:31 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-10-16 11:37 - 2014-05-30 00:03 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-10-16 11:37 - 2014-02-04 11:57 - 01271664 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2014-10-16 11:36 - 2014-09-13 06:29 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2014-10-16 11:36 - 2014-09-13 05:02 - 00068096 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2014-10-16 11:36 - 2014-07-07 06:52 - 03248128 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-10-16 11:36 - 2014-07-07 06:52 - 00724992 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2014-10-16 11:36 - 2014-07-07 06:51 - 05982208 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-10-16 11:36 - 2014-07-07 05:00 - 05095424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-10-16 11:35 - 2014-07-07 06:53 - 01125376 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2014-10-16 11:35 - 2014-07-07 06:52 - 00300544 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2014-10-16 11:35 - 2014-07-07 05:01 - 01049600 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2014-10-16 11:35 - 2014-07-07 05:01 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll
2014-10-16 11:35 - 2014-07-07 04:59 - 00269312 _____ (Microsoft Corporation) C:\windows\SysWOW64\aaclient.dll
2014-10-16 11:33 - 2014-09-20 06:16 - 19280896 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-10-16 10:31 - 2014-09-20 06:18 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-10-16 10:31 - 2014-09-20 06:17 - 02236928 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-10-16 10:31 - 2014-09-20 06:17 - 01407488 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-10-16 10:31 - 2014-09-20 06:17 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 15399424 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 02655232 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-10-16 10:31 - 2014-09-20 06:16 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-10-16 10:31 - 2014-09-20 06:15 - 01508864 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-10-16 10:31 - 2014-09-20 06:15 - 00451584 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-10-16 10:31 - 2014-09-20 06:15 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 14368768 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 13757952 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 02861568 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 02055168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 01762816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 01180672 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-10-16 10:31 - 2014-09-20 04:57 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-10-16 10:31 - 2014-09-20 04:56 - 01440768 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-10-16 10:31 - 2014-09-20 04:56 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-10-16 10:31 - 2014-09-20 04:56 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-10-16 10:30 - 2014-10-10 05:47 - 00693248 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-10-16 10:30 - 2014-10-10 05:47 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2014-10-16 10:30 - 2014-10-08 05:26 - 00556544 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-10-16 10:30 - 2014-09-20 06:17 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-10-16 10:30 - 2014-09-20 06:16 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-10-16 10:30 - 2014-09-20 06:16 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-10-16 10:30 - 2014-09-20 04:57 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-10-16 10:30 - 2014-09-20 04:57 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-10-16 10:30 - 2014-09-20 04:57 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-10-16 10:30 - 2014-09-20 04:57 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-10-16 10:30 - 2014-09-20 04:38 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-10-16 10:30 - 2014-09-20 04:33 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-10-16 10:30 - 2014-09-20 02:06 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2014-10-16 10:30 - 2014-09-03 03:48 - 00510464 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2014-10-16 10:30 - 2014-09-03 03:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2014-10-16 10:30 - 2014-08-01 23:08 - 00388729 _____ () C:\windows\system32\ApnDatabase.xml
2014-10-16 10:30 - 2014-07-24 14:50 - 00447296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2014-10-16 10:30 - 2014-07-17 00:28 - 00027648 _____ (Microsoft Corporation) C:\windows\SysWOW64\sscore.dll
2014-10-16 10:30 - 2014-07-16 23:59 - 00305664 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
2014-10-16 10:30 - 2014-07-16 23:59 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\sscore.dll
2014-10-16 10:30 - 2014-07-12 07:45 - 01549824 _____ (Microsoft Corporation) C:\windows\system32\msdtctm.dll
2014-10-16 10:30 - 2014-07-12 05:36 - 00674304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-10-16 10:30 - 2014-07-12 05:36 - 00211456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-10-16 10:30 - 2014-07-12 05:34 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-10-16 10:30 - 2014-07-12 05:34 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-10-16 10:30 - 2014-06-28 07:57 - 01341952 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2014-10-16 10:30 - 2014-06-28 03:23 - 01126400 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2014-10-16 10:29 - 2014-09-28 05:18 - 04068352 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-10-16 10:29 - 2014-09-18 00:24 - 02416128 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2014-10-16 10:29 - 2014-09-17 23:56 - 02885120 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-10-16 10:29 - 2014-08-30 06:48 - 10115072 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2014-10-16 10:29 - 2014-08-30 06:46 - 02306560 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2014-10-16 10:29 - 2014-08-30 05:05 - 08858112 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2014-10-16 10:29 - 2014-08-30 05:03 - 02037760 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2014-10-16 10:29 - 2014-06-13 00:34 - 00754176 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2014-10-16 10:29 - 2014-06-13 00:29 - 02146304 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2014-10-15 17:44 - 2014-10-15 17:47 - 00000000 ____D () C:\Users\pc\Desktop\materialss
2014-10-15 12:28 - 2014-10-15 12:28 - 00000000 _____ () C:\Users\pc\AppData\Local\{144C5F02-AC48-4BED-81B7-3247948CDD5B}
2014-10-13 12:47 - 2014-10-20 12:21 - 00000000 ____D () C:\Users\pc\.elan_data
2014-10-13 12:42 - 2014-10-13 12:47 - 00000000 ____D () C:\Program Files (x86)\ELAN 4.7.3
2014-10-13 12:42 - 2014-10-13 12:42 - 00001886 _____ () C:\Users\pc\Desktop\ELAN 4.7.3.lnk
2014-10-13 12:42 - 2014-10-13 12:42 - 00000000 ___HD () C:\Program Files (x86)\Zero G Registry
2014-10-13 12:41 - 2014-10-13 12:41 - 00000000 ___HD () C:\Users\pc\InstallAnywhere

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-12 15:07 - 2014-09-26 19:33 - 00000000 ____D () C:\FRST
2014-11-12 15:03 - 2014-09-26 11:58 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-12 15:00 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\sru
2014-11-12 14:54 - 2013-09-29 17:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-12 14:35 - 2013-09-29 16:42 - 00000000 ____D () C:\Users\pc\AppData\Roaming\uTorrent
2014-11-12 14:32 - 2013-09-29 16:36 - 00003818 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-11-12 14:32 - 2013-09-29 16:36 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-11-12 14:23 - 2014-05-06 10:20 - 00000000 ____D () C:\ProgramData\Origin
2014-11-12 14:20 - 2014-02-15 14:15 - 00000926 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-846750890-3381048881-3130427261-1001UA.job
2014-11-12 14:20 - 2014-02-15 14:15 - 00000904 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-846750890-3381048881-3130427261-1001Core.job
2014-11-12 14:13 - 2014-05-06 10:20 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-11-12 14:12 - 2014-03-26 17:55 - 00000000 ____D () C:\Users\pc\AppData\Roaming\GG
2014-11-12 14:11 - 2013-10-25 23:38 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-11 16:09 - 2012-08-02 08:05 - 00794946 _____ () C:\windows\system32\perfh015.dat
2014-11-11 16:09 - 2012-08-02 08:05 - 00159530 _____ () C:\windows\system32\perfc015.dat
2014-11-11 16:09 - 2012-07-26 08:28 - 01793398 _____ () C:\windows\system32\PerfStringBackup.INI
2014-11-09 17:30 - 2013-12-10 17:47 - 00001042 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-11-09 17:30 - 2012-07-26 08:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-11-09 17:29 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\WinStore
2014-11-09 17:29 - 2012-07-26 06:26 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-11-08 14:15 - 2013-09-29 18:22 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Skype
2014-11-08 14:13 - 2013-10-28 21:11 - 00000000 ____D () C:\windows\Minidump
2014-11-07 17:02 - 2012-07-26 06:26 - 00000301 _____ () C:\windows\win.ini
2014-11-05 18:51 - 2013-08-30 19:02 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-846750890-3381048881-3130427261-1001
2014-11-05 17:19 - 2013-10-02 19:54 - 01261568 ___SH () C:\Users\pc\Desktop\Thumbs.db
2014-11-05 16:04 - 2014-02-14 10:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-05 16:04 - 2013-09-29 16:19 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-11-05 16:04 - 2013-08-30 18:54 - 00000000 ____D () C:\Users\pc
2014-11-05 16:02 - 2013-10-17 14:27 - 00000000 ____D () C:\Users\pc\AppData\Roaming\DAEMON Tools Lite
2014-11-05 16:00 - 2014-02-04 14:21 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-05 15:10 - 2013-12-02 16:41 - 00000600 _____ () C:\Users\pc\PUTTY.RND
2014-11-04 09:10 - 2013-08-30 18:54 - 00000000 ____D () C:\Users\pc\AppData\Local\Packages
2014-11-03 12:07 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\NDF
2014-10-30 12:25 - 2014-02-03 21:15 - 00275080 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-10-29 23:32 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\rescache
2014-10-29 20:24 - 2012-07-26 08:59 - 00000000 ____D () C:\windows\CbsTemp
2014-10-27 22:12 - 2014-09-26 11:58 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-27 22:12 - 2014-09-26 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-27 22:12 - 2014-09-26 11:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-27 18:55 - 2014-03-25 10:32 - 00000000 ____D () C:\Games
2014-10-25 22:57 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\GroupPolicy
2014-10-25 17:14 - 2014-01-28 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LucasArts
2014-10-25 17:14 - 2014-01-28 23:51 - 00000000 ____D () C:\Program Files (x86)\LucasArts
2014-10-25 17:14 - 2012-11-15 00:33 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-25 16:23 - 2014-01-26 21:24 - 00386680 _____ (Duplex Secure Ltd.) C:\windows\system32\Drivers\sptd.sys
2014-10-25 11:56 - 2014-10-09 21:45 - 00000000 ____D () C:\Users\pc\Documents\Legacy of Kain - Defiance
2014-10-22 14:01 - 2014-10-01 10:02 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-10-22 14:01 - 2012-07-26 09:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-22 14:01 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\SysWOW64\en-GB
2014-10-22 14:01 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\en-GB
2014-10-22 14:00 - 2012-07-26 09:12 - 00000000 ___RD () C:\windows\ToastData
2014-10-21 21:35 - 2014-01-11 13:04 - 00000000 ____D () C:\Users\pc\.gimp-2.8
2014-10-21 10:37 - 2013-10-24 21:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-21 10:35 - 2013-10-24 21:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-20 12:26 - 2013-10-01 17:10 - 00000000 ____D () C:\windows\system32\MRT
2014-10-20 09:47 - 2013-10-01 17:10 - 103265616 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-09 17:42

==================== End Of Log ============================