Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-12-2014 01 ([color=red]ATTENTION: ====> FRST version is 11 days old and could be outdated[/color])
Ran by Agnese (administrator) on AGNESE-PC on 18-12-2014 08:58:39
Running from C:\Users\Agnese\Downloads\FRST
Loaded Profile: Agnese (Available profiles: Agnese)
Platform: Microsoft Windows 7 Ultimate  (X86) OS Language: Italiano (Italia)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2008-12-04] (Intel Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\Update\realsched.exe [296056 2012-03-20] (RealNetworks, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-01-28] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-02-20] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [323640 2009-11-24] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [Gadu-Gadu 10] => C:\Program Files\Gadu-Gadu 10\gg.exe [13374048 2011-07-04] (GG Network S.A.)
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [Pando Media Booster] => C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-03] ()
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
Startup: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ritaglio schermata e avvio di OneNote 2007.lnk
ShortcutTarget: Ritaglio schermata e avvio di OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/it-it/?ocid=iehp
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x19ADD9BAC012D001
HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = it
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{07AEEA78-586E-4644-97D6-FE3D2311F9F8}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{58589F1F-6A70-4BC3-973F-753237173D2A}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{AB3375B0-F469-482F-9A89-BD34CE0F990F}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{C9C17CD0-40B3-4C4A-AF47-7FD7615E0ABD}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{EF52DC3D-5744-43E2-B2B2-2EAEBCDD32AD}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\Agnese\AppData\Roaming\Mozilla\Firefox\Profiles\2zjdu3cp.default-1417980445115
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nppl3260;version=15.0.2.72 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.2.72 -> C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.2.72 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.2.72 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.2.72 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin HKU\S-1-5-21-3345188048-2503292345-2761132505-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agnese\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3345188048-2503292345-2761132505-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2012-05-23] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1343400 2011-07-10] () [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
S2 rimmptsk; C:\Windows\System32\DRIVERS\rimmptsk.sys [45568 2007-08-08] (REDC) [File not signed]
S2 rimsptsk; C:\Windows\System32\DRIVERS\rimsptsk.sys [43008 2007-07-30] (REDC) [File not signed]
S3 RTL8187B; C:\Windows\System32\DRIVERS\rtl8187B.sys [379904 2010-03-31] (Realtek Semiconductor Corporation                           )
S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC)
S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [5120 2012-12-19] ()

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-16 19:58 - 2014-12-16 19:58 - 00000000 ____D () C:\Users\Agnese\Downloads\ADWcleaner
2014-12-16 19:57 - 2014-12-16 20:04 - 00000000 ____D () C:\AdwCleaner
2014-12-16 19:36 - 2014-12-16 19:36 - 00000000 ____D () C:\Users\Agnese\AppData\Local\{FE195F3D-BC79-40DF-9DDD-47D62F760F7B}
2014-12-15 22:43 - 2014-12-15 22:45 - 00000000 ____D () C:\Users\Agnese\AppData\Roaming\.technic
2014-12-15 22:42 - 2014-12-15 22:42 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-12-15 22:42 - 2014-12-15 22:42 - 00000000 ____D () C:\ProgramData\Sun
2014-12-15 22:42 - 2014-12-15 22:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-15 22:42 - 2014-12-15 22:42 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-12-15 22:41 - 2014-12-15 22:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-12-15 22:41 - 2014-12-15 22:41 - 00000000 ____D () C:\Program Files\Java
2014-12-15 22:33 - 2014-12-15 22:33 - 00638888 _____ (Oracle Corporation) C:\Users\Agnese\Downloads\jxpiinstall.exe
2014-12-15 22:31 - 2014-12-15 22:32 - 02940635 _____ (www.dropcrack.com) C:\Users\Agnese\Desktop\u wot m8.exe
2014-12-15 22:30 - 2014-12-15 22:31 - 02940635 _____ (www.dropcrack.com) C:\Users\Agnese\Downloads\Technic sp.exe
2014-12-13 19:19 - 2014-12-13 19:19 - 00000000 ____D () C:\Users\Agnese\AppData\Local\{33F0FACA-35B6-4F94-AB1B-D4806A7DE891}
2014-12-13 09:14 - 2014-12-13 09:14 - 00000000 ____D () C:\Users\Agnese\AppData\Roaming\CoSoSys
2014-12-10 08:58 - 2014-12-10 08:58 - 00000000 _____ () C:\Users\Agnese\AppData\Local\QSwitch.txt
2014-12-10 08:58 - 2014-12-10 08:58 - 00000000 _____ () C:\Users\Agnese\AppData\Local\DSwitch.txt
2014-12-10 08:58 - 2014-12-10 08:58 - 00000000 _____ () C:\Users\Agnese\AppData\Local\AtStart.txt
2014-12-07 20:32 - 2014-12-07 20:32 - 00000000 ____D () C:\MATS
2014-12-07 20:27 - 2014-12-07 20:27 - 00000000 ____D () C:\Users\Agnese\Desktop\Dati precedenti di Firefox
2014-12-07 20:26 - 2014-12-13 09:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-12-06 11:07 - 2014-12-18 08:58 - 00000000 ____D () C:\Users\Agnese\Downloads\FRST
2014-12-04 10:55 - 2014-12-07 12:18 - 00000000 ____D () C:\Users\Agnese\Downloads\Gmer
2014-12-04 10:36 - 2014-12-04 10:49 - 00000000 ____D () C:\Users\Agnese\Downloads\OTL
2014-12-04 10:33 - 2014-12-04 10:33 - 00061871 _____ () C:\Users\Agnese\Downloads\Shortcut.txt
2014-12-04 10:21 - 2014-12-18 08:58 - 00000000 ____D () C:\FRST
2014-12-04 10:21 - 2014-12-04 10:34 - 00043013 _____ () C:\Users\Agnese\Downloads\FRST.txt
2014-11-24 08:33 - 2014-12-08 09:15 - 00001450 _____ () C:\Users\Agnese\Desktop\Mozilla Firefox.lnk
2014-11-23 16:39 - 2014-11-23 16:39 - 00000000 ____D () C:\Users\Agnese\Downloads\madlax-Malwarebytes_Anti-Malware_v._2.49.0.1600_PL_Full
2014-11-23 16:37 - 2014-11-23 16:39 - 12320632 _____ () C:\Users\Agnese\Downloads\madlax-Malwarebytes_Anti-Malware_v._2.49.0.1600_PL_Full.rar
2014-11-18 14:56 - 2014-11-18 14:56 - 01202848 _____ (Microsoft Corporation) C:\Windows\system32\FM20.DLL

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-18 08:48 - 2011-07-07 19:25 - 00000000 ____D () C:\Users\Agnese\AppData\Roaming\Skype
2014-12-18 08:23 - 2012-07-08 16:12 - 00000978 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-18 06:06 - 2011-07-07 10:57 - 01051457 _____ () C:\Windows\WindowsUpdate.log
2014-12-18 02:14 - 2009-07-14 05:34 - 00016352 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-18 02:14 - 2009-07-14 05:34 - 00016352 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-18 02:00 - 2011-10-12 07:08 - 00000000 ____D () C:\Users\Agnese\AppData\Local\Adobe
2014-12-17 13:18 - 2012-11-03 17:22 - 00000000 ____D () C:\Users\Agnese\AppData\Local\PMB Files
2014-12-17 12:52 - 2011-07-07 11:08 - 00005618 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-17 12:52 - 2009-07-14 09:21 - 15958470 _____ () C:\Windows\system32\perfh010.dat
2014-12-17 12:52 - 2009-07-14 09:21 - 05553496 _____ () C:\Windows\system32\perfc010.dat
2014-12-17 12:47 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-17 12:47 - 2009-07-14 05:39 - 00288282 _____ () C:\Windows\setupact.log
2014-12-16 12:46 - 2011-07-20 01:39 - 00000000 ____D () C:\Users\Agnese\AppData\Roaming\TS3Client
2014-12-13 09:50 - 2011-07-07 11:39 - 00108284 _____ () C:\Windows\PFRO.log
2014-12-13 09:38 - 2011-07-07 19:24 - 00000000 ___RD () C:\Program Files\Skype
2014-12-11 03:04 - 2011-07-07 12:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-10 18:23 - 2012-07-08 16:12 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-10 18:23 - 2011-08-14 14:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-12-08 09:25 - 2012-07-08 16:10 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-12-08 09:15 - 2012-07-08 16:10 - 00001450 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-08 09:15 - 2011-07-07 11:05 - 00001743 _____ () C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-06 11:45 - 2012-04-10 09:57 - 00000000 ____D () C:\Users\Agnese\AppData\Roaming\Google
2014-12-06 11:03 - 2011-07-07 13:53 - 00000000 ____D () C:\Users\Agnese\AppData\Local\Google
2014-12-06 10:33 - 2012-07-27 12:57 - 00000000 ____D () C:\Program Files\Adobe
2014-12-06 10:33 - 2011-07-07 12:15 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-12-06 10:33 - 2011-07-07 12:13 - 00000000 ____D () C:\ProgramData\Adobe
2014-12-03 13:06 - 2012-07-08 16:10 - 00000000 ____D () C:\Users\Agnese\AppData\Local\Mozilla
2014-11-24 14:04 - 2011-07-07 11:18 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-24 08:31 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\L2Schemas
2014-11-18 10:06 - 2011-07-07 11:04 - 00000000 ____D () C:\Users\Agnese
2014-11-18 10:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-11-18 10:05 - 2012-11-03 17:22 - 00000000 ____D () C:\ProgramData\PMB Files
2014-11-18 10:05 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-11-18 10:05 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2014-11-18 10:04 - 2012-03-20 18:56 - 00000000 ____D () C:\ProgramData\Real

Some content of TEMP:
====================
C:\Users\Agnese\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-15 09:03

==================== End Of Log ============================