Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014
Ran by pc (administrator) on KOMP on 13-11-2014 17:22:38
Running from C:\Users\pc\Downloads
Loaded Profile: pc (Available profiles: pc)
Platform: Windows 8 (X64) OS Language: Polish (Poland)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(BitTorrent Inc.) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.17074_none_6233bc1f5106b696\TiWorker.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files\putty.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13196432 2012-09-25] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-20] (SRS Labs, Inc.)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2611112 2012-09-04] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-28] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [7148032 2012-10-31] (Pegatron Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Facebook Update] => C:\Users\pc\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-02-15] (Facebook Inc.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [GG] => C:\Users\pc\AppData\Local\GG\Application\gghub.exe [4023360 2014-09-26] (GG Network S.A.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600216 2014-10-01] (Electronic Arts)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Run: [uTorrent] => C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe [1689168 2014-11-07] (BitTorrent Inc.)
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\MountPoints2: {269f02e9-86c8-11e3-beb3-c0d962382821} - "E:\autorun.exe" 
HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\MountPoints2: {7caec902-5c5b-11e4-bf13-c0d962382821} - "F:\LaunchEAWG.exe" 
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKLM - {84E73978-A84D-4AEF-950F-E305680E5C46} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {84E73978-A84D-4AEF-950F-E305680E5C46} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 158.75.88.5

FireFox:
========

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [43520 2012-07-26] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [634368 2012-07-26] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18432 2012-07-26] (Microsoft Corporation)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-09-25] (Toshiba Europe GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-29] (TuneUp Software)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16032 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-01-25] ()
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-10-25] (Disc Soft Ltd)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\drivers\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-01-25] ()
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-08-02] (Realtek Microelectronics)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1498256 2012-08-29] (Realtek Semiconductor Corporation                           )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-10-25] (Duplex Secure Ltd.)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
U3 aps14k4i; C:\Windows\System32\Drivers\aps14k4i.sys [0 ] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-13 17:22 - 2014-11-13 17:23 - 00012708 _____ () C:\Users\pc\Downloads\FRST.txt
2014-11-13 17:20 - 2014-11-13 17:20 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Mozilla
2014-11-13 17:14 - 2014-11-13 17:14 - 00000000 ____D () C:\ProgramData\374311380
2014-11-13 17:13 - 2014-11-13 17:13 - 00000000 ____D () C:\Program Files (x86)\DiscountLocator
2014-11-13 17:05 - 2014-10-30 01:53 - 00713672 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-11-13 17:05 - 2014-10-30 01:53 - 00106432 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-12 18:03 - 2014-10-26 02:56 - 02237952 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-11-12 18:03 - 2014-10-26 02:56 - 01409536 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-11-12 18:03 - 2014-10-26 02:56 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2014-11-12 18:03 - 2014-10-26 02:56 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-11-12 18:03 - 2014-10-26 02:56 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-11-12 18:03 - 2014-10-26 02:55 - 19284480 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-11-12 18:03 - 2014-10-26 02:55 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-11-12 18:03 - 2014-10-26 02:55 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-11-12 18:03 - 2014-10-26 02:55 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 15399424 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 02655232 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 00451584 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-11-12 18:03 - 2014-10-26 02:54 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-11-12 18:03 - 2014-10-26 02:53 - 01509376 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-11-12 18:03 - 2014-10-26 01:36 - 01762816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-11-12 18:03 - 2014-10-26 01:35 - 14368768 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-11-12 18:03 - 2014-10-26 01:35 - 01181696 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-11-12 18:03 - 2014-10-26 01:35 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-11-12 18:03 - 2014-10-26 01:35 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-11-12 18:03 - 2014-10-26 01:35 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-11-12 18:03 - 2014-10-26 01:35 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 13758464 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 02861568 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 02055168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 01441280 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-11-12 18:03 - 2014-10-26 01:34 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-11-12 18:03 - 2014-10-26 01:34 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-11-12 18:03 - 2014-10-26 01:19 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-11-12 18:03 - 2014-10-26 01:13 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-11-12 18:03 - 2014-10-25 22:48 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2014-11-12 18:02 - 2014-09-03 03:21 - 00623104 _____ (Microsoft Corporation) C:\windows\system32\dnsapi.dll
2014-11-12 18:01 - 2014-10-18 09:44 - 00778240 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2014-11-12 18:01 - 2014-10-18 08:05 - 00567808 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2014-11-12 18:01 - 2014-10-11 09:35 - 00171840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-11-12 18:01 - 2014-10-11 08:44 - 03248640 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-11-12 18:01 - 2014-10-11 08:44 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-11-12 18:01 - 2014-10-11 08:43 - 01281536 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-11-12 18:01 - 2014-10-03 02:21 - 00522728 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2014-11-12 18:01 - 2014-10-02 23:29 - 00783872 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2014-11-12 18:01 - 2014-10-02 23:29 - 00267264 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2014-11-12 18:01 - 2014-10-02 23:29 - 00169472 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2014-11-12 18:01 - 2014-10-02 00:05 - 04068864 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-11-12 18:01 - 2014-09-22 06:53 - 00035320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-11-12 18:01 - 2014-09-13 07:24 - 02233152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-11-12 18:01 - 2014-09-06 01:46 - 00389176 _____ () C:\windows\system32\ApnDatabase.xml
2014-11-12 18:01 - 2014-09-03 03:48 - 00457728 _____ (Microsoft Corporation) C:\windows\SysWOW64\dnsapi.dll
2014-11-12 18:01 - 2014-09-03 03:48 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll
2014-11-12 18:01 - 2014-09-03 03:22 - 00188928 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2014-11-12 18:01 - 2014-09-03 03:21 - 00212992 _____ (Microsoft Corporation) C:\windows\system32\dnsrslvr.dll
2014-11-12 18:01 - 2014-08-29 05:17 - 02043392 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2014-11-12 18:01 - 2014-08-29 05:17 - 00227328 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll
2014-11-12 18:01 - 2014-08-29 05:04 - 02837504 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2014-11-12 18:01 - 2014-08-29 05:04 - 00309248 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll
2014-11-12 18:01 - 2014-08-28 07:04 - 00499712 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSCOMEX.dll
2014-11-12 18:01 - 2014-08-28 07:04 - 00227840 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
2014-11-12 18:01 - 2014-08-28 06:59 - 00616448 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
2014-11-12 18:01 - 2014-08-28 06:59 - 00609280 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
2014-11-12 18:01 - 2014-08-28 06:59 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\FXSTIFF.dll
2014-11-12 18:01 - 2014-08-28 06:59 - 00254976 _____ (Microsoft Corporation) C:\windows\system32\FXST30.dll
2014-11-12 18:01 - 2014-08-26 23:08 - 00270024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-11-12 18:01 - 2014-07-24 14:12 - 00328512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2014-11-12 18:00 - 2014-11-05 07:40 - 00304128 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2014-11-12 18:00 - 2014-11-05 07:38 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-11-12 18:00 - 2014-11-05 04:16 - 00556544 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-11-12 18:00 - 2014-10-11 08:45 - 10115072 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2014-11-12 18:00 - 2014-10-11 08:44 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-11-12 18:00 - 2014-10-11 08:44 - 00393216 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2014-11-12 18:00 - 2014-10-11 08:43 - 02307072 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2014-11-12 18:00 - 2014-10-11 06:58 - 08858624 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2014-11-12 18:00 - 2014-10-11 06:57 - 02416640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2014-11-12 18:00 - 2014-10-11 06:57 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-11-12 18:00 - 2014-10-11 06:57 - 00295424 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2014-11-12 18:00 - 2014-10-11 06:56 - 02037760 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2014-11-12 18:00 - 2014-10-11 06:41 - 00713728 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2014-11-12 18:00 - 2014-10-11 06:41 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2014-11-12 18:00 - 2014-10-11 06:05 - 00146944 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2014-11-12 18:00 - 2014-10-11 06:04 - 00713728 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2014-11-12 18:00 - 2014-08-22 00:56 - 01418752 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-11-12 18:00 - 2014-08-22 00:27 - 01845760 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-11-12 17:59 - 2014-10-23 13:47 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2014-11-12 17:59 - 2014-10-23 12:04 - 00068096 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2014-11-12 17:59 - 2014-09-25 00:29 - 00318976 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-11-12 17:59 - 2014-09-25 00:29 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
2014-11-12 17:59 - 2014-09-25 00:01 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-11-12 17:59 - 2014-09-25 00:01 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
2014-11-12 17:41 - 2014-11-12 17:42 - 00018568 _____ () C:\Users\pc\Desktop\GMER.txt
2014-11-12 16:27 - 2014-11-12 16:27 - 00138722 _____ () C:\Users\pc\Desktop\OTL.Txt
2014-11-12 15:04 - 2014-11-12 15:04 - 00380416 _____ () C:\Users\pc\Downloads\hibxpypi.exe
2014-11-12 15:02 - 2014-11-12 15:02 - 02116096 _____ (Farbar) C:\Users\pc\Downloads\FRST64.exe
2014-11-08 14:11 - 2014-11-13 17:18 - 00017018 _____ () C:\windows\PFRO.log
2014-11-08 14:11 - 2014-11-13 17:04 - 00431320 _____ () C:\windows\system32\FNTCACHE.DAT
2014-11-08 14:11 - 2014-11-08 14:11 - 649079071 _____ () C:\windows\MEMORY.DMP
2014-11-07 16:42 - 2014-11-07 16:42 - 00000000 ____D () C:\Users\pc\Desktop\Audio
2014-11-07 16:39 - 2014-11-13 17:18 - 00000000 ____D () C:\ProgramData\DiscountLocator
2014-11-07 15:59 - 2014-11-07 15:59 - 00000856 _____ () C:\Users\pc\Desktop\µTorrent.lnk
2014-11-07 15:59 - 2014-11-07 15:59 - 00000836 _____ () C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-11-05 16:07 - 2014-11-13 17:18 - 01237264 _____ () C:\windows\WindowsUpdate.log
2014-11-05 16:05 - 2014-11-05 16:06 - 00000000 ____D () C:\Users\pc\AppData\Local\Deployment
2014-11-05 16:05 - 2014-11-05 16:05 - 00000000 ____D () C:\Users\pc\AppData\Local\Apps\2.0
2014-11-03 11:04 - 2014-11-03 14:31 - 00009423 _____ () C:\Users\pc\Desktop\takbylo.eaf
2014-11-03 10:08 - 2014-11-03 10:31 - 44080568 _____ () C:\Users\pc\Desktop\ADAM JENSEN (DEUS EX) and VAAS (FAR CRY 3) Behind The Scenes interview.mp4
2014-10-29 20:24 - 2014-11-03 09:25 - 00000000 ____D () C:\windows\system32\AutoUpdateLicense
2014-10-29 19:27 - 2014-10-22 04:34 - 00010777 _____ () C:\windows\system32\AutoconfigV2.cab
2014-10-29 19:27 - 2014-10-22 04:33 - 00581016 _____ (Microsoft Corporation) C:\windows\system32\AutoUpdate.exe
2014-10-29 19:27 - 2014-10-22 04:33 - 00462760 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2014-10-29 19:27 - 2014-10-22 02:08 - 00568832 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-10-29 19:27 - 2014-10-22 02:08 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-29 19:27 - 2014-10-22 02:01 - 00695808 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-10-29 19:27 - 2014-10-22 02:01 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2014-10-29 19:27 - 2014-10-22 02:01 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-29 19:27 - 2014-10-22 02:00 - 00125952 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2014-10-29 18:34 - 2014-10-29 18:34 - 00000000 ____D () C:\Users\pc\AppData\Local\Ndemic Creations
2014-10-27 18:57 - 2014-10-27 18:57 - 00001703 _____ () C:\Users\pc\Desktop\PlagueInc.lnk
2014-10-27 18:57 - 2014-10-27 18:57 - 00001678 _____ () C:\Users\pc\Desktop\PlagueInc Scenario Creator.lnk
2014-10-26 20:57 - 2014-11-13 17:19 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-10-25 18:11 - 2014-10-25 21:47 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Petroglyph
2014-10-25 17:16 - 2014-10-25 17:16 - 00002382 _____ () C:\Users\Public\Desktop\Star Wars Empire at War Forces of Corruption.lnk
2014-10-25 17:16 - 2005-12-05 17:07 - 00061136 _____ (Microsoft Corporation) C:\windows\SysWOW64\SET5A8E.tmp
2014-10-25 16:34 - 2014-10-25 16:34 - 00000000 ____D () C:\Users\pc\AppData\Roaming\InstallShield
2014-10-25 16:31 - 2014-10-25 16:31 - 00283064 _____ (Disc Soft Ltd) C:\windows\system32\Drivers\dtsoftbus01.sys
2014-10-25 16:07 - 2014-10-25 16:31 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-10-25 16:07 - 2014-10-25 16:23 - 00001961 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-10-25 16:07 - 2014-10-25 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-10-25 16:07 - 2014-10-25 16:07 - 00000000 ____D () C:\Users\pc\AppData\Roaming\DAEMON Tools
2014-10-22 21:33 - 2014-10-22 21:34 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-10-22 21:33 - 2014-10-22 21:33 - 00001447 _____ () C:\Users\Public\Desktop\Free YouTube Download.lnk
2014-10-22 21:33 - 2014-10-22 21:33 - 00001250 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-10-22 21:33 - 2014-10-22 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-10-22 21:32 - 2014-10-22 21:34 - 00000000 ____D () C:\Users\pc\AppData\Roaming\DVDVideoSoft
2014-10-21 22:08 - 2014-10-21 22:08 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Sony Creative Software Inc
2014-10-21 21:31 - 2014-10-21 21:31 - 00002114 _____ () C:\Users\pc\AppData\Local\recently-used.xbel
2014-10-16 11:37 - 2014-07-12 05:41 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2014-10-16 11:37 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2014-10-16 11:37 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2014-10-16 11:37 - 2014-07-12 05:15 - 00006144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2014-10-16 11:37 - 2014-07-12 01:02 - 00478352 _____ () C:\windows\SysWOW64\locale.nls
2014-10-16 11:37 - 2014-07-12 01:00 - 00478352 _____ () C:\windows\system32\locale.nls
2014-10-16 11:37 - 2014-07-08 23:33 - 00181248 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2014-10-16 11:37 - 2014-07-08 23:32 - 01539584 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2014-10-16 11:37 - 2014-07-08 23:32 - 00340480 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2014-10-16 11:37 - 2014-07-08 23:30 - 01220608 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2014-10-16 11:37 - 2014-07-07 06:52 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\wcmsvc.dll
2014-10-16 11:37 - 2014-07-07 06:52 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2014-10-16 11:37 - 2014-07-04 11:52 - 00328000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2014-10-16 11:37 - 2014-07-03 02:59 - 01824784 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2014-10-16 11:37 - 2014-07-03 01:30 - 01408952 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2014-10-16 11:37 - 2014-06-28 08:01 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2014-10-16 11:37 - 2014-06-28 07:57 - 00209920 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2014-10-16 11:37 - 2014-06-28 07:56 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2014-10-16 11:37 - 2014-06-25 08:09 - 00733184 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2014-10-16 11:37 - 2014-06-25 08:07 - 01023488 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2014-10-16 11:37 - 2014-06-18 00:27 - 02032640 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-10-16 11:37 - 2014-06-18 00:23 - 02238464 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-10-16 11:37 - 2014-06-11 15:47 - 02842112 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2014-10-16 11:37 - 2014-06-11 05:40 - 02620928 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2014-10-16 11:37 - 2014-06-10 23:44 - 01403896 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2014-10-16 11:37 - 2014-02-04 11:57 - 01271664 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2014-10-16 11:36 - 2014-07-07 06:52 - 00724992 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2014-10-16 11:36 - 2014-07-07 06:51 - 05982208 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-10-16 11:36 - 2014-07-07 05:00 - 05095424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-10-16 11:35 - 2014-07-07 06:53 - 01125376 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2014-10-16 11:35 - 2014-07-07 06:52 - 00300544 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2014-10-16 11:35 - 2014-07-07 05:01 - 01049600 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2014-10-16 11:35 - 2014-07-07 05:01 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll
2014-10-16 11:35 - 2014-07-07 04:59 - 00269312 _____ (Microsoft Corporation) C:\windows\SysWOW64\aaclient.dll
2014-10-16 10:30 - 2014-09-03 03:48 - 00510464 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2014-10-16 10:30 - 2014-09-03 03:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2014-10-16 10:30 - 2014-07-24 14:50 - 00447296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2014-10-16 10:30 - 2014-07-17 00:28 - 00027648 _____ (Microsoft Corporation) C:\windows\SysWOW64\sscore.dll
2014-10-16 10:30 - 2014-07-16 23:59 - 00305664 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
2014-10-16 10:30 - 2014-07-16 23:59 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\sscore.dll
2014-10-16 10:30 - 2014-07-12 07:45 - 01549824 _____ (Microsoft Corporation) C:\windows\system32\msdtctm.dll
2014-10-16 10:30 - 2014-07-12 05:36 - 00674304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-10-16 10:30 - 2014-07-12 05:36 - 00211456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-10-16 10:30 - 2014-07-12 05:34 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-10-16 10:30 - 2014-07-12 05:34 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-10-16 10:30 - 2014-06-28 07:57 - 01341952 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2014-10-16 10:30 - 2014-06-28 03:23 - 01126400 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2014-10-16 10:29 - 2014-06-13 00:34 - 00754176 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2014-10-16 10:29 - 2014-06-13 00:29 - 02146304 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2014-10-15 17:44 - 2014-10-15 17:47 - 00000000 ____D () C:\Users\pc\Desktop\materialss

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-13 17:24 - 2012-08-02 08:05 - 00794946 _____ () C:\windows\system32\perfh015.dat
2014-11-13 17:24 - 2012-08-02 08:05 - 00159530 _____ () C:\windows\system32\perfc015.dat
2014-11-13 17:24 - 2012-07-26 08:28 - 01793398 _____ () C:\windows\system32\PerfStringBackup.INI
2014-11-13 17:22 - 2014-09-26 19:33 - 00000000 ____D () C:\FRST
2014-11-13 17:21 - 2014-05-06 10:20 - 00000000 ____D () C:\ProgramData\Origin
2014-11-13 17:21 - 2014-05-06 10:20 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-11-13 17:21 - 2014-03-26 17:55 - 00000000 ____D () C:\Users\pc\AppData\Roaming\GG
2014-11-13 17:21 - 2013-10-25 23:38 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-13 17:20 - 2014-09-26 11:58 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-13 17:20 - 2014-02-15 14:15 - 00000926 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-846750890-3381048881-3130427261-1001UA.job
2014-11-13 17:20 - 2013-09-29 16:42 - 00000000 ____D () C:\Users\pc\AppData\Roaming\uTorrent
2014-11-13 17:19 - 2013-12-10 17:47 - 00001042 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-11-13 17:19 - 2013-10-02 19:54 - 01261568 ___SH () C:\Users\pc\Desktop\Thumbs.db
2014-11-13 17:19 - 2012-07-26 08:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-11-13 17:17 - 2013-12-02 16:41 - 00000600 _____ () C:\Users\pc\PUTTY.RND
2014-11-13 17:16 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\GroupPolicy
2014-11-13 17:09 - 2013-09-29 18:22 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Skype
2014-11-13 17:02 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\sru
2014-11-13 16:59 - 2014-10-01 10:02 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-11-13 16:59 - 2012-07-26 09:12 - 00000000 ___RD () C:\windows\ToastData
2014-11-13 16:59 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 16:59 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 16:59 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 16:59 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-12 22:27 - 2013-09-29 16:36 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-11-12 19:05 - 2012-07-26 08:59 - 00000000 ____D () C:\windows\CbsTemp
2014-11-12 19:04 - 2013-10-24 21:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-12 19:03 - 2013-10-24 21:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 18:59 - 2012-07-26 06:26 - 00000301 _____ () C:\windows\win.ini
2014-11-12 18:39 - 2013-10-01 17:10 - 00000000 ____D () C:\windows\system32\MRT
2014-11-12 18:33 - 2013-10-01 17:10 - 103374192 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-11-12 15:15 - 2013-09-29 17:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-12 14:32 - 2013-09-29 16:36 - 00003818 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-11-12 14:20 - 2014-02-15 14:15 - 00000904 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-846750890-3381048881-3130427261-1001Core.job
2014-11-09 17:29 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\WinStore
2014-11-09 17:29 - 2012-07-26 06:26 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-11-08 14:13 - 2013-10-28 21:11 - 00000000 ____D () C:\windows\Minidump
2014-11-05 18:51 - 2013-08-30 19:02 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-846750890-3381048881-3130427261-1001
2014-11-05 16:04 - 2013-08-30 18:54 - 00000000 ____D () C:\Users\pc
2014-11-05 16:02 - 2013-10-17 14:27 - 00000000 ____D () C:\Users\pc\AppData\Roaming\DAEMON Tools Lite
2014-11-05 16:00 - 2014-02-04 14:21 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-04 09:10 - 2013-08-30 18:54 - 00000000 ____D () C:\Users\pc\AppData\Local\Packages
2014-11-03 12:07 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\NDF
2014-10-30 12:25 - 2014-02-03 21:15 - 00275080 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-10-29 23:32 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\rescache
2014-10-27 22:12 - 2014-09-26 11:58 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-27 22:12 - 2014-09-26 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-27 22:12 - 2014-09-26 11:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-27 18:55 - 2014-03-25 10:32 - 00000000 ____D () C:\Games
2014-10-25 17:14 - 2014-01-28 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LucasArts
2014-10-25 17:14 - 2014-01-28 23:51 - 00000000 ____D () C:\Program Files (x86)\LucasArts
2014-10-25 17:14 - 2012-11-15 00:33 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-25 16:23 - 2014-01-26 21:24 - 00386680 _____ (Duplex Secure Ltd.) C:\windows\system32\Drivers\sptd.sys
2014-10-25 11:56 - 2014-10-09 21:45 - 00000000 ____D () C:\Users\pc\Documents\Legacy of Kain - Defiance
2014-10-22 14:01 - 2012-07-26 09:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-22 14:01 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\SysWOW64\en-GB
2014-10-22 14:01 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\en-GB
2014-10-21 21:35 - 2014-01-11 13:04 - 00000000 ____D () C:\Users\pc\.gimp-2.8
2014-10-20 12:21 - 2014-10-13 12:47 - 00000000 ____D () C:\Users\pc\.elan_data

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-09 17:42

==================== End Of Log ============================