Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-12-2014
Ran by Agnese (administrator) on AGNESE-PC on 04-12-2014 10:31:50
Running from C:\Users\Agnese\Downloads
Loaded Profile: Agnese (Available profiles: Agnese)
Platform: Microsoft Windows 7 Ultimate  (X86) OS Language: Italiano (Italia)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Fuyu LIMITED) C:\ProgramData\WindowsProtectManger\wprotectmanager.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Google Inc.) C:\Users\Agnese\AppData\Local\Google\Update\GoogleUpdate.exe
() C:\Windows\System32\PnkBstrA.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
() C:\Program Files\SGC\ExtensionUpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(PService) C:\Users\Public\Documents\AppData\PoApp\PService.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Users\Agnese\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Agnese\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Agnese\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Agnese\AppData\Local\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\realplay.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realonemessagecenter.exe
(Google Inc.) C:\Users\Agnese\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Agnese\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [] => [X]
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2008-12-04] (Intel Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [Raildcall] => C:\Program Files\raidcall\raidcall.exe
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\Update\realsched.exe [296056 2012-03-20] (RealNetworks, Inc.)
HKLM\...\Run: [PosService] => C:\Users\Public\Documents\AppData\PoApp\PLauncher.exe [218624 2011-12-16] (PLauncher)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [252296 2012-01-17] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-01-28] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-02-20] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [323640 2009-11-24] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [Google Update] => C:\Users\Agnese\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-07-07] (Google Inc.)
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [Gadu-Gadu 10] => C:\Program Files\Gadu-Gadu 10\gg.exe [13374048 2011-07-04] (GG Network S.A.)
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [PoService] => [X]
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [Pando Media Booster] => C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-03] ()
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\MountPoints2: {98589ab1-4daf-11e2-8615-00218600ddd9} - E:\Install.exe
AppInit_DLLs: c:\progra~1\suptab\search~1.dll => c:\progra~1\suptab\search~1.dll File Not Found
AppInit_DLLs:  c:\progra~2\fastan~1\fastan~1.dll => c:\progra~2\fastan~1\fastan~1.dll File Not Found
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ritaglio schermata e avvio di OneNote 2007.lnk
ShortcutTarget: Ritaglio schermata e avvio di OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VDownloader.lnk
ShortcutTarget: VDownloader.lnk -> C:\Program Files\VDownloader\VDownloader.exe (No File)
HKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\systemk\x64\sysapcrt.dll
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-3345188048-2503292345-2761132505-1000] => 127.0.0.1:3128
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://it.msn.com/?ocid=iehp
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xEFF1268F9D3CCC01
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = it
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&q={searchTerms}
URLSearchHook: [S-1-5-21-3345188048-2503292345-2761132505-1000] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 - (No Name) - {CA3EB689-8F09-4026-AA10-B9534C691CE0} -  No File
URLSearchHook: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 - (No Name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-page.com/?type=sc&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} URL = http://dts.search-results.com/sr?src=ieb&appid=0&systemid=2&sr=0&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=169&itype=n&ver=12791&tm=366&src=ds&p={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} URL = http://search.imesh.com/web?src=ieb&systemid=1&q={searchTerms}
SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2304157
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> URL http://www.trovigo.com/Results.aspx?gd=&ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP00BD660C-9943-41C6-B501-F505211C4974&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&AF=119998&babsrc=SP_ss&mntrId=14c6f9300000000000000021001d7d94
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://isearch.avg.com/search?cid={02A8832A-EE1C-410D-81BA-5FDAD58BC8E2}&mid=e2592f55c8cd47d08a0dd168c0e4342a-966b0eeb361f725dfd5dac6960d91786b40c212e&lang=en&ds=pp011&pr=sa&d=2012-07-26 02:13:58&v=12.1.0.21&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} URL = 
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = 
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} URL = 
SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
BHO: Wincore Mediabar -> {28387537-e3f9-4ed7-860c-11e69af4a8a0} -> C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll No File
BHO: AppPitooU -> {286D8163-AD91-FE69-0708-40FE6924F251} -> C:\ProgramData\AppPitooU\zQ7lwWT8ur.dll ()
BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll No File
BHO: SGC -> {43E57D32-0C22-4E90-8332-AA3B445E4CEC} -> C:\Program Files\SGC\Extension32.dll ()
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: siaver Box -> {943B4541-3FCE-0927-8470-323D42E914D8} -> C:\ProgramData\siaver Box\J5zm.dll ()
BHO: SGC -> {A6629839-6636-4998-95D6-2B0F52141861} -> C:\Program Files\Social Grammar Checker\Extension32.dll ()
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Wincore Mediabar -> {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} -> C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
BHO: SMTTB2009 Class -> {FCBCCB87-9224-4B8D-B117-F56D924BEB18} -> C:\Program Files\Hyperionics DB Toolbar\tbcore3.dll ()
Toolbar: HKLM - Hyperionics DB Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Hyperionics DB Toolbar\tbcore3.dll ()
Toolbar: HKLM - Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll No File
Toolbar: HKLM - Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> Hyperionics DB Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Hyperionics DB Toolbar\tbcore3.dll ()
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{07AEEA78-586E-4644-97D6-FE3D2311F9F8}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{58589F1F-6A70-4BC3-973F-753237173D2A}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{AB3375B0-F469-482F-9A89-BD34CE0F990F}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{C9C17CD0-40B3-4C4A-AF47-7FD7615E0ABD}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{EF52DC3D-5744-43E2-B2B2-2EAEBCDD32AD}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: delta-homes
FF SearchEngineOrder.1: default-search.net
FF SelectedSearchEngine: delta-homes
FF Homepage: hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247
FF Keyword.URL: hxxp://www.default-search.net/search?sid=476&aid=169&itype=n&ver=12791&tm=366&src=ds&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.5.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.1 -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nppl3260;version=15.0.2.72 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.2.72 -> C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.2.72 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.2.72 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.2.72 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3345188048-2503292345-2761132505-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3345188048-2503292345-2761132505-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3345188048-2503292345-2761132505-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agnese\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3345188048-2503292345-2761132505-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\default-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\delta-homes.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\whitesmoke.xml
FF Extension: ApptooUU - C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default\Extensions\djplatwxx@bvs-yaayu.org [2014-11-24]
FF Extension: saver uboxx - C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default\Extensions\djwt-yayu@y-up.net [2014-11-24]
FF Extension: Fast Start - C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default\Extensions\faststartff@gmail.com [2014-11-24]
FF Extension: shortcut - C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default\Extensions\shortcutff@gmail.com [2014-11-24]
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-11-29]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM\...\Firefox\Extensions: [{A6629839-6636-4998-95D6-2B0F52141861}] - C:\Program Files\Social Grammar Checker\Firefox
FF Extension: SGC - C:\Program Files\Social Grammar Checker\Firefox [2011-09-02]
FF HKLM\...\Firefox\Extensions: [{43E57D32-0C22-4E90-8332-AA3B445E4CEC}] - C:\Program Files\SGC\Firefox
FF Extension: SGC - C:\Program Files\SGC\Firefox [2011-12-07]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-03-20]
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default\extensions\faststartff@gmail.com
FF HKLM\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\qhwbywu9.default\extensions\shortcutff@gmail.com

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Documenti Google) - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-02]
CHR Extension: (SGC) - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdmjeclekijlogbipdlifcmgoanoemm [2014-06-02]
CHR Extension: (AdBlock) - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-06]
CHR Extension: (elenco radio) - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\hopnlbagdjigdkefahajdfgiaapilbpp [2014-06-02]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2014-06-02]
CHR Extension: (Google Wallet) - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Extended Protection) - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo [2014-06-13]
CHR HKLM\...\Chrome\Extension: [ainbkicbloikcngphmjfpjdemblcojdd] - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\slidebar.crx [2014-06-12]
CHR HKLM\...\Chrome\Extension: [bmbpbcpokffodhpcdjaoopolhdlbconi] - C:\Users\Agnese\AppData\Local\Temp\tbch.crx [2012-05-23]
CHR HKLM\...\Chrome\Extension: [dhdmjeclekijlogbipdlifcmgoanoemm] - C:\Program Files\Social Grammar Checker\source.crx [2011-09-02]
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [hopnlbagdjigdkefahajdfgiaapilbpp] - C:\Users\Agnese\AppData\Local\CRE\hopnlbagdjigdkefahajdfgiaapilbpp.crx [2012-04-29]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-03-20]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - No Path
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\mjcm\SweetNT.crx [2014-07-16]
CHR HKLM\...\Chrome\Extension: [ogfjmhfnldnajmfaofeiaepghjenbgjo] - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\ep.crx [2014-06-12]
CHR HKLM\...\Chrome\Extension: [oipohjcgiehbfdjjeifbcgjiemffgcgn] - C:\Program Files\SGC\source.crx [2011-12-07]
CHR HKLM\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Agnese\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-06-12]
CHR StartMenuInternet: Google Chrome - C:\Users\Agnese\AppData\Local\Google\Chrome\Application\chrome.exe http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2012-05-23] ()
S2 PowerOffer Service; C:\Users\Agnese\AppData\Local\PosService\Pos.exe [169472 2012-04-03] (PowerOfferService) [File not signed]
S2 ServUpdater; C:\Users\Agnese\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd) [File not signed]
R2 SGC Updater; C:\Program Files\SGC\ExtensionUpdaterService.exe [183296 2011-12-07] () [File not signed]
S2 SoftwareUpd; C:\Users\Agnese\AppData\Local\SoftwareUpdater\SoftwareUpdService.exe [161280 2012-04-23] (SoftwareUpdService) [File not signed]
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1343400 2011-07-10] () [File not signed]
R2 WindowsProtectManger; C:\ProgramData\WindowsProtectManger\wprotectmanager.exe [591776 2014-06-11] (Fuyu LIMITED) <==== ATTENTION
S2 Akamai; c:\program files\common files\akamai\netsession_win_b31de1e.dll [X]
S2 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
S2 rimmptsk; C:\Windows\System32\DRIVERS\rimmptsk.sys [45568 2007-08-08] (REDC) [File not signed]
S2 rimsptsk; C:\Windows\System32\DRIVERS\rimsptsk.sys [43008 2007-07-30] (REDC) [File not signed]
S3 RTL8187B; C:\Windows\System32\DRIVERS\rtl8187B.sys [379904 2010-03-31] (Realtek Semiconductor Corporation                           )
S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC)
U4 eabfiltr; No ImagePath
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 XDva389; \??\C:\Windows\system32\XDva389.sys [X]
S3 XDva390; \??\C:\Windows\system32\XDva390.sys [X]
S3 XDva391; \??\C:\Windows\system32\XDva391.sys [X]
S3 XDva392; \??\C:\Windows\system32\XDva392.sys [X]
S3 XDva393; \??\C:\Windows\system32\XDva393.sys [X]
S3 XDva396; \??\C:\Windows\system32\XDva396.sys [X]
S3 XDva397; \??\C:\Windows\system32\XDva397.sys [X]
S3 XDva398; \??\C:\Windows\system32\XDva398.sys [X]
S3 XDva399; \??\C:\Windows\system32\XDva399.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-04 10:23 - 2014-12-04 10:24 - 00039724 _____ () C:\Users\Agnese\Downloads\Addition.txt
2014-12-04 10:21 - 2014-12-04 10:32 - 00033105 _____ () C:\Users\Agnese\Downloads\FRST.txt
2014-12-04 10:21 - 2014-12-04 10:31 - 00000000 ____D () C:\FRST
2014-12-04 10:21 - 2014-12-04 10:21 - 01110016 _____ (Farbar) C:\Users\Agnese\Downloads\FRST.exe
2014-12-03 11:02 - 2014-12-03 17:37 - 00000380 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Agnese.job
2014-12-03 08:51 - 2014-12-03 17:36 - 00000374 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Agnese.job
2014-12-03 08:49 - 2014-12-03 11:02 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Agnese.job
2014-11-24 22:25 - 2014-11-24 22:25 - 01058136 _____ () C:\Users\Agnese\Downloads\Setup(1).exe
2014-11-24 08:33 - 2014-11-24 08:33 - 00001448 _____ () C:\Users\Agnese\Desktop\Mozilla Firefox.lnk
2014-11-23 16:41 - 2014-11-23 16:45 - 00000000 ____D () C:\Users\Agnese\AppData\Roaming\Malwarebytes
2014-11-23 16:41 - 2014-11-23 16:45 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-23 16:41 - 2014-11-23 16:45 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-11-23 16:39 - 2014-11-23 16:39 - 00000000 ____D () C:\Users\Agnese\Downloads\madlax-Malwarebytes_Anti-Malware_v._2.49.0.1600_PL_Full
2014-11-23 16:37 - 2014-11-23 16:39 - 12320632 _____ () C:\Users\Agnese\Downloads\madlax-Malwarebytes_Anti-Malware_v._2.49.0.1600_PL_Full.rar
2014-11-14 18:22 - 2014-11-14 18:22 - 00000000 ____D () C:\Users\Agnese\AppData\Roaming\MPC-HC
2014-11-07 16:37 - 2014-11-07 16:37 - 00000000 __SHD () C:\found.007
2014-11-07 10:08 - 2014-11-07 10:08 - 00000000 ____D () C:\Users\Agnese\AppData\Local\{29FC83E7-08A8-4760-B93F-F70D1D0DE4E5}
2014-11-06 12:50 - 2014-11-06 12:50 - 00000000 ____D () C:\Users\Agnese\AppData\Local\{D410ECF7-9A57-4885-A6E8-D5CE9B5B9A42}
2014-11-04 18:36 - 2014-11-04 18:37 - 01526712 _____ (Koyote-Lab Inc) C:\Users\Agnese\Downloads\FreeVideoConverterSetup-r129-n-bc (1).exe
2014-11-04 18:35 - 2014-11-04 18:36 - 01526712 _____ (Koyote-Lab Inc) C:\Users\Agnese\Downloads\FreeVideoConverterSetup-r129-n-bc.exe
2014-11-04 07:53 - 2014-11-05 07:53 - 00000000 ____D () C:\Users\Agnese\AppData\Local\{BFE51362-5C27-4586-BAB5-3DC4DA361146}

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-04 10:29 - 2011-07-07 19:25 - 00000000 ____D () C:\Users\Agnese\AppData\Roaming\Skype
2014-12-04 10:23 - 2012-07-08 16:12 - 00000978 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-04 10:09 - 2011-07-07 10:57 - 01175712 _____ () C:\Windows\WindowsUpdate.log
2014-12-04 09:55 - 2012-03-20 18:57 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-04 09:45 - 2011-07-07 13:53 - 00001164 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3345188048-2503292345-2761132505-1000UA.job
2014-12-04 02:35 - 2009-07-14 05:34 - 00016352 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-04 02:35 - 2009-07-14 05:34 - 00016352 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-04 02:00 - 2011-10-12 07:08 - 00000000 ____D () C:\Users\Agnese\AppData\Local\Adobe
2014-12-03 18:49 - 2012-11-03 17:22 - 00000000 ____D () C:\Users\Agnese\AppData\Local\PMB Files
2014-12-03 17:42 - 2011-07-07 11:08 - 00005618 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-03 17:42 - 2009-07-14 09:21 - 15831534 _____ () C:\Windows\system32\perfh010.dat
2014-12-03 17:42 - 2009-07-14 09:21 - 05507866 _____ () C:\Windows\system32\perfc010.dat
2014-12-03 17:36 - 2012-03-20 18:57 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-03 17:36 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-03 17:36 - 2009-07-14 05:39 - 00287464 _____ () C:\Windows\setupact.log
2014-12-03 17:35 - 2012-07-08 16:10 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-12-03 17:35 - 2011-09-02 00:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-12-03 17:35 - 2011-07-07 11:39 - 00099160 _____ () C:\Windows\PFRO.log
2014-12-03 16:46 - 2011-07-07 13:53 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3345188048-2503292345-2761132505-1000Core.job
2014-12-03 13:06 - 2012-07-08 16:10 - 00000000 ____D () C:\Users\Agnese\AppData\Local\Mozilla
2014-11-26 12:23 - 2012-07-08 16:12 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-26 12:23 - 2011-08-14 14:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-24 22:46 - 2011-07-07 13:53 - 00000000 ____D () C:\Users\Agnese\AppData\Local\Google
2014-11-24 08:31 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\L2Schemas
2014-11-24 08:30 - 2011-07-08 09:11 - 00000000 ____D () C:\Program Files\Hyperionics DB Toolbar
2014-11-23 17:16 - 2014-06-02 09:00 - 00000000 ____D () C:\Program Files\SupTab
2014-11-23 16:53 - 2012-08-29 01:00 - 00000000 ____D () C:\Windows\system32\ARFC
2014-11-18 10:06 - 2014-08-26 08:59 - 00000000 ____D () C:\Users\Agnese\AppData\Local\SWDS
2014-11-18 10:06 - 2011-07-07 11:04 - 00000000 ____D () C:\Users\Agnese
2014-11-18 10:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-11-18 10:05 - 2012-11-03 17:22 - 00000000 ____D () C:\ProgramData\PMB Files
2014-11-18 10:05 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-11-18 10:05 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2014-11-18 10:04 - 2012-03-20 18:56 - 00000000 ____D () C:\ProgramData\Real
2014-11-13 03:04 - 2011-07-07 12:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-08 00:06 - 2013-09-04 12:01 - 00000000 ____D () C:\Users\Agnese\Documents\Galeria użytkownika Agnieszka Taras (Turek) - nk.pl_files
2014-11-05 23:48 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-05 10:08 - 2011-07-07 12:19 - 00000000 ____D () C:\Users\Agnese\AppData\Local\Windows Live
2014-11-04 14:30 - 2011-07-07 11:18 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Some content of TEMP:
====================
C:\Users\Agnese\AppData\Local\Temp\306_sof_www-sweet-page-com-05-05-14.exe
C:\Users\Agnese\AppData\Local\Temp\ahq8mkca.dll
C:\Users\Agnese\AppData\Local\Temp\avguidx.dll
C:\Users\Agnese\AppData\Local\Temp\AVG_Toolbar.exe
C:\Users\Agnese\AppData\Local\Temp\BearShare_setup.exe
C:\Users\Agnese\AppData\Local\Temp\cci.exe
C:\Users\Agnese\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Agnese\AppData\Local\Temp\DivXWebPlayerInstaller.exe
C:\Users\Agnese\AppData\Local\Temp\Execute2App.exe
C:\Users\Agnese\AppData\Local\Temp\ffunzip.exe
C:\Users\Agnese\AppData\Local\Temp\GUR6B30.exe
C:\Users\Agnese\AppData\Local\Temp\GUR80C3.exe
C:\Users\Agnese\AppData\Local\Temp\HyperCam.exe
C:\Users\Agnese\AppData\Local\Temp\i4jdel1.exe
C:\Users\Agnese\AppData\Local\Temp\IBot_4.45_setup.exe
C:\Users\Agnese\AppData\Local\Temp\IBot_4.47_setup.exe
C:\Users\Agnese\AppData\Local\Temp\IBot_4.53_setup.exe
C:\Users\Agnese\AppData\Local\Temp\IBot_4.85_setup.exe
C:\Users\Agnese\AppData\Local\Temp\iMesh_setup.exe
C:\Users\Agnese\AppData\Local\Temp\Installhelper.dll
C:\Users\Agnese\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Agnese\AppData\Local\Temp\msvcp90.dll
C:\Users\Agnese\AppData\Local\Temp\msvcr90.dll
C:\Users\Agnese\AppData\Local\Temp\MyBabylonTB.exe
C:\Users\Agnese\AppData\Local\Temp\MyPcCleanerSetup.exe
C:\Users\Agnese\AppData\Local\Temp\nsdB969.exe
C:\Users\Agnese\AppData\Local\Temp\nsn3036.exe
C:\Users\Agnese\AppData\Local\Temp\nsnB5B0.exe
C:\Users\Agnese\AppData\Local\Temp\nss29EE.exe
C:\Users\Agnese\AppData\Local\Temp\nssB1D8.exe
C:\Users\Agnese\AppData\Local\Temp\nsx33CF.exe
C:\Users\Agnese\AppData\Local\Temp\oi_{434777AF-EFE1-401E-9989-9DF3F1407E24}.exe
C:\Users\Agnese\AppData\Local\Temp\OpenStealth_1.69_setup.exe
C:\Users\Agnese\AppData\Local\Temp\OpenStealth_1.70_setup.exe
C:\Users\Agnese\AppData\Local\Temp\optprosetup.exe
C:\Users\Agnese\AppData\Local\Temp\p7ziug8m.dll
C:\Users\Agnese\AppData\Local\Temp\Quarantine.exe
C:\Users\Agnese\AppData\Local\Temp\scs.exe
C:\Users\Agnese\AppData\Local\Temp\SettingsManagerSetup.exe
C:\Users\Agnese\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Agnese\AppData\Local\Temp\sonarinst.exe
C:\Users\Agnese\AppData\Local\Temp\SPSetup.exe
C:\Users\Agnese\AppData\Local\Temp\SRAssetsHelper.dll
C:\Users\Agnese\AppData\Local\Temp\stubhelper.dll
C:\Users\Agnese\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Agnese\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\Agnese\AppData\Local\Temp\tbXfir.dll
C:\Users\Agnese\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Agnese\AppData\Local\Temp\UNINSTALL.exe
C:\Users\Agnese\AppData\Local\Temp\wmpfirefoxplugin.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-25 00:57

==================== End Of Log ============================