Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2015
Ran by Ruter (administrator) on RUTER on 23-02-2015 09:17:00
Running from C:\Users\Paweł\Downloads
Loaded Profiles: Ruter (Available profiles: Ruter)
Platform: Windows 8.1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2894664 2013-08-13] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2014-01-21] (Realtek semiconductor)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17111056 2014-06-26] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2014-06-26] (Lenovo(beijing) Limited)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [TP-LINK USB Printer Controller] => C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe [4226048 2012-09-21] ()
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-31] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2403673481-2920685079-3644729116-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-2403673481-2920685079-3644729116-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2403673481-2920685079-3644729116-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2403673481-2920685079-3644729116-1002\...\MountPoints2: {7db05b18-9dc0-11e4-8268-00c2c660957c} - "G:\Startme.exe" 
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-2403673481-2920685079-3644729116-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKU\S-1-5-21-2403673481-2920685079-3644729116-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2403673481-2920685079-3644729116-1002 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2403673481-2920685079-3644729116-1002 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
Filter-x32: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} -  No File
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} -  No File
Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-31]

Chrome: 
=======
CHR HomePage: Default -> hxxp://isearch.omiga-plus.com/?type=hp&ts=1420721377&from=cor&uid=ST1000LM014-SSHD-8GB_W3822FDQXXXXW3822FDQ
CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://www.google.com"
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSuggestURL: Default -> 
CHR Profile: C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-07]
CHR Extension: (Google Docs) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-07]
CHR Extension: (Google Drive) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-07]
CHR Extension: (YouTube) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-07]
CHR Extension: (Google Search) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-07]
CHR Extension: (Google Sheets) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-07]
CHR Extension: (Avast Online Security) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-31]
CHR Extension: (Google Wallet) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-07]
CHR Extension: (Gmail) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-07]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-31]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-31] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2015-01-31] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2015-01-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2015-01-11] (Microsoft Corporation)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [92160 2013-07-28] (ELAN Microelectronics Corp.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-08] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-01] (Intel Corporation)
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [120128 2015-01-19] (Elex do Brasil Participações Ltda)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-25] ()
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-06-26] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-31] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2015-01-31] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-01-31] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2015-01-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-31] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-31] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-31] ()
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1385784 2013-06-26] (Motorola Solutions, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-01-24] (Disc Soft Ltd)
R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [22280 2013-08-04] (ELAN Microelectronic Corp.)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [107208 2014-01-17] (GenesysLogic)
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [249000 2015-01-19] (Elex do Brasil Participações Ltda)
S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [45224 2015-01-19] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2015-01-19] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [42152 2015-01-19] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [93352 2015-01-19] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2015-01-03] (Elex do Brasil Participações Ltda)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9105624 2014-01-21] (Realtek Semiconductor Corp.)
R3 TPLINKUDSMBus; C:\Windows\system32\drivers\TplinkUDSMBus.sys [102688 2012-09-21] (Windows (R) Codename Longhorn DDK provider)
S3 TplinkUDSTcpBus; C:\Windows\System32\drivers\TplinkUDSTcpBus.sys [181024 2012-09-21] (Windows (R) Codename Longhorn DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-23 09:17 - 2015-02-23 09:17 - 00020824 _____ () C:\Users\Paweł\Downloads\FRST.txt
2015-02-23 09:16 - 2015-02-23 09:17 - 00000000 ____D () C:\FRST
2015-02-23 09:14 - 2015-02-23 09:14 - 02087424 _____ (Farbar) C:\Users\Paweł\Downloads\FRST64.exe
2015-02-23 09:14 - 2015-02-23 09:14 - 00380416 _____ () C:\Users\Paweł\Downloads\6p8dxiqo.exe
2015-02-23 09:01 - 2015-02-23 09:01 - 00000348 _____ () C:\WINDOWS\setupact.log
2015-02-23 09:01 - 2015-02-23 09:01 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-02-23 08:59 - 2015-02-23 08:59 - 00000566 _____ () C:\WINDOWS\PFRO.log
2015-02-23 08:55 - 2015-02-23 08:58 - 00076341 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-23 00:24 - 2015-02-23 08:54 - 00009216 ___SH () C:\Users\Paweł\Desktop\Thumbs.db
2015-02-22 21:01 - 2015-02-22 21:03 - 01854075 _____ () C:\Users\Paweł\Documents\main.exe
2015-02-22 19:54 - 2015-02-22 23:41 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-22 19:53 - 2015-02-22 19:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-22 19:53 - 2015-02-22 19:53 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-22 19:53 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-02-22 19:53 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-02-22 19:49 - 2015-02-22 19:53 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2015-02-22 19:49 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-02-22 19:05 - 2015-02-22 19:05 - 00000093 _____ () C:\Users\Paweł\Documents\Projekt2.layout
2015-02-22 19:03 - 2015-02-22 19:04 - 01286295 _____ () C:\Users\Paweł\Desktop\Analiza algorytmu sprawdzania liczb pierwszych.pptx
2015-02-22 18:33 - 2015-02-22 18:35 - 01854075 _____ () C:\Users\Paweł\Documents\Projekt2.exe
2015-02-22 18:33 - 2015-02-22 18:35 - 00002510 _____ () C:\Users\Paweł\Documents\main.o
2015-02-22 18:05 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-22 18:04 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-22 18:02 - 2015-02-22 18:02 - 00000773 _____ () C:\Users\Paweł\Documents\Projekt2.dev
2015-02-20 22:19 - 2015-02-20 22:19 - 00001939 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\YAC.lnk
2015-02-20 22:19 - 2015-02-20 22:19 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Elex-tech
2015-02-20 22:19 - 2015-02-20 22:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
2015-02-20 22:19 - 2015-02-20 22:19 - 00000000 ____D () C:\Program Files (x86)\Elex-tech
2015-02-20 22:19 - 2015-01-19 12:04 - 00045224 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeKrnlBoot.sys
2015-02-20 22:19 - 2015-01-03 09:57 - 00052392 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeNetFilter.sys
2015-02-20 22:18 - 2015-02-20 22:18 - 01167400 _____ (Elex do Brasil Participações Ltda) C:\Users\Paweł\Downloads\yet_another_cleaner_sk_6023153.exe
2015-02-20 22:18 - 2015-02-20 22:18 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\eCyber
2015-02-20 07:13 - 2015-02-20 07:13 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\MPC-HC
2015-02-20 07:13 - 2015-02-20 07:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2015-02-20 07:13 - 2015-02-20 07:13 - 00000000 ____D () C:\Program Files\MPC-HC
2015-02-20 07:12 - 2015-02-20 07:12 - 12240456 _____ (MPC-HC Team ) C:\Users\Paweł\Downloads\MPC-HC.1.7.8.x64.exe
2015-02-20 07:03 - 2015-02-20 07:03 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\WebApp
2015-02-20 06:57 - 2015-02-20 06:57 - 00000000 ____D () C:\Users\Paweł\Documents\Lenovo
2015-02-20 06:57 - 2015-02-20 06:57 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Lenovo
2015-02-17 20:01 - 2015-02-17 20:01 - 00983613 _____ () C:\Users\Paweł\Downloads\EFRCSetup.exe
2015-02-17 20:01 - 2015-02-17 20:01 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner
2015-02-17 20:01 - 2015-02-17 20:01 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Eusing
2015-02-17 20:01 - 2015-02-17 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner
2015-02-17 20:01 - 2015-02-17 20:01 - 00000000 ____D () C:\Program Files (x86)\Eusing Free Registry Cleaner
2015-02-09 10:37 - 2015-02-09 10:36 - 00093552 _____ () C:\Users\Paweł\Downloads\WinKeyFinder 1.75.zip
2015-02-09 10:32 - 2015-02-09 10:32 - 00000000 __SHD () C:\Users\Paweł\AppData\Local\EmieBrowserModeList
2015-02-09 10:30 - 2015-02-09 10:30 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Opera Software
2015-02-09 10:30 - 2015-02-09 10:30 - 00000000 ____D () C:\Users\Paweł\AppData\Local\Opera Software
2015-02-09 10:29 - 2015-02-09 10:33 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-09 10:29 - 2015-02-09 10:29 - 00700904 _____ (komputerswiat.pl) C:\Users\Paweł\Downloads\WinKeyFinder 1.75.exe
2015-02-07 12:09 - 2015-02-07 12:10 - 00000000 ____D () C:\Users\Paweł\Documents\Notepad++
2015-02-05 14:13 - 2015-02-05 14:13 - 00001082 _____ () C:\Users\Paweł\Desktop\SQLiteStudio.lnk
2015-02-05 13:44 - 2015-02-05 13:44 - 00000000 ____D () C:\Program Files (x86)\SQLiteStudio
2015-02-05 13:40 - 2015-02-23 09:09 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\sqlitestudio
2015-02-04 17:40 - 2015-02-04 17:40 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Notepad++
2015-02-04 17:40 - 2015-02-04 17:40 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-02-04 17:40 - 2015-02-04 17:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-02-04 17:40 - 2015-02-04 17:40 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2015-02-01 22:35 - 2015-02-01 22:56 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-02-01 22:35 - 2015-02-01 22:39 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-01 22:35 - 2015-02-01 22:35 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-02-01 22:34 - 2015-02-01 22:37 - 00000000 ____D () C:\Users\Paweł\AppData\Local\Adobe
2015-01-31 13:17 - 2015-01-31 13:17 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\AVAST Software
2015-01-31 13:16 - 2015-01-31 13:17 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-01-31 13:16 - 2015-01-31 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-01-31 13:15 - 2015-01-31 13:16 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2015-01-31 13:15 - 2015-01-31 13:16 - 00087912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2015-01-31 13:15 - 2015-01-31 13:15 - 00449936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2015-01-31 13:15 - 2015-01-31 13:15 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-01-31 13:15 - 2015-01-31 13:15 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-01-31 13:15 - 2015-01-31 13:15 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-01-31 13:15 - 2015-01-31 13:15 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-01-31 13:15 - 2015-01-31 13:15 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-01-31 13:15 - 2015-01-31 13:15 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-01-31 13:15 - 2015-01-31 13:15 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-01-31 13:15 - 2015-01-31 13:15 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-01-31 13:15 - 2015-01-31 13:15 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-01-31 13:14 - 2015-01-31 13:14 - 00000000 ____D () C:\Program Files\AVAST Software
2015-01-31 13:11 - 2014-12-31 12:14 - 00298120 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-01-29 23:16 - 2015-01-30 00:02 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\1by1
2015-01-29 23:16 - 2015-01-29 23:16 - 00000000 ____D () C:\Users\Paweł\Documents\Settings
2015-01-29 23:15 - 2015-01-29 23:15 - 00000978 _____ () C:\Users\Paweł\Desktop\1by1.lnk
2015-01-29 23:15 - 2015-01-29 23:15 - 00000000 ____D () C:\Program Files (x86)\1by1
2015-01-29 23:03 - 2015-01-29 23:03 - 00000000 ____D () C:\Users\Paweł\Documents\Open Song
2015-01-29 22:59 - 2015-01-29 23:03 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\OpenSong
2015-01-29 22:59 - 2015-01-29 22:59 - 00001034 _____ () C:\Users\Public\Desktop\OpenSong.lnk
2015-01-29 22:59 - 2015-01-29 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenSong
2015-01-29 22:59 - 2015-01-29 22:59 - 00000000 ____D () C:\Program Files (x86)\OpenSong
2015-01-29 22:00 - 2015-01-29 22:00 - 00128352 _____ () C:\Users\Paweł\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-29 15:43 - 2015-01-29 15:43 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-01-24 21:48 - 2015-01-25 16:59 - 00824360 _____ () C:\Users\Paweł\Downloads\Satelity Ziemi.pptx
2015-01-24 19:19 - 2015-01-24 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-01-24 19:18 - 2015-01-24 19:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2015-01-24 19:17 - 2015-01-24 19:17 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2015-01-24 19:17 - 2015-01-24 19:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2015-01-24 19:14 - 2015-01-24 19:14 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-24 19:14 - 2015-01-24 19:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2015-01-24 19:13 - 2015-01-24 19:19 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-24 19:13 - 2015-01-24 19:13 - 00000000 __RHD () C:\MSOCache
2015-01-24 19:13 - 2015-01-24 19:13 - 00000000 ____D () C:\Users\Paweł\AppData\Local\Microsoft Help
2015-01-24 19:07 - 2015-01-28 21:50 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\DAEMON Tools Lite
2015-01-24 19:07 - 2015-01-24 19:07 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2015-01-24 19:07 - 2015-01-24 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-01-24 19:06 - 2015-01-24 19:07 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2015-01-24 19:05 - 2015-01-24 19:09 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-01-24 12:12 - 2015-01-24 12:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2015-01-24 12:12 - 2015-01-24 12:12 - 00000000 ____D () C:\WINDOWS\system32\NV
2015-01-24 12:08 - 2015-01-10 09:07 - 32102544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 25459856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 24765584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 20465296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 18566296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 17250776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 16009120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 13295552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 13210248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 10774544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 10714488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 10274448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-01-24 12:08 - 2015-01-10 09:07 - 03607184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 03245712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 02902456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434725.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434725.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00969360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00942736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00929424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00906384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00496456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00399688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00390472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00353040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00345744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00305320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-01-24 12:08 - 2015-01-10 09:07 - 00031376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-23 09:18 - 2015-01-07 17:08 - 00001064 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-23 09:08 - 2015-01-07 17:09 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2403673481-2920685079-3644729116-1002
2015-02-23 09:07 - 2014-06-27 04:59 - 01050346 _____ () C:\WINDOWS\system32\perfh015.dat
2015-02-23 09:07 - 2014-06-27 04:59 - 00247014 _____ () C:\WINDOWS\system32\perfc015.dat
2015-02-23 09:07 - 2013-10-07 19:27 - 02157604 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-23 09:03 - 2015-01-12 16:45 - 00000370 _____ () C:\WINDOWS\Tasks\DriverToolkit Autorun.job
2015-02-23 09:03 - 2015-01-07 17:08 - 00001060 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-23 09:01 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-23 09:01 - 2013-08-22 15:44 - 00498432 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-23 08:59 - 2014-06-26 20:53 - 00004608 _____ () C:\WINDOWS\system32\VfService.trf
2015-02-23 08:58 - 2015-01-08 16:50 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-23 08:56 - 2015-01-08 16:50 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-23 08:56 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-23 08:56 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-02-23 07:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-22 21:07 - 2015-01-07 20:46 - 00000000 ____D () C:\Users\Paweł\Desktop\Ochrona Komputera
2015-02-22 21:03 - 2015-01-13 16:46 - 00000459 _____ () C:\Users\Paweł\Documents\main.cpp
2015-02-22 19:53 - 2015-01-10 11:31 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Malwarebytes
2015-02-22 19:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-02-22 19:06 - 2015-01-07 20:45 - 00000000 ____D () C:\Users\Paweł\Desktop\Narzędzia
2015-02-22 18:35 - 2015-01-13 16:46 - 00001171 _____ () C:\Users\Paweł\Documents\Makefile.win
2015-02-22 18:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-21 22:43 - 2015-01-11 21:27 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Skype
2015-02-21 18:34 - 2015-01-11 21:27 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-02-21 18:34 - 2015-01-11 21:27 - 00000000 ____D () C:\ProgramData\Skype
2015-02-20 22:33 - 2015-01-09 20:43 - 00000000 ____D () C:\Users\Paweł\Desktop\Internet
2015-02-20 22:30 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-20 06:57 - 2015-01-07 22:14 - 00000000 ____D () C:\Users\Paweł\Documents\CyberLink
2015-02-20 06:57 - 2015-01-07 22:14 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\CyberLink
2015-02-20 06:57 - 2014-06-26 20:51 - 00000000 ____D () C:\ProgramData\Lenovo
2015-02-20 06:57 - 2014-06-26 20:42 - 00000000 ____D () C:\ProgramData\CyberLink
2015-02-05 20:13 - 2015-01-07 17:08 - 00004036 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-05 20:13 - 2015-01-07 17:08 - 00003800 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-01 22:37 - 2015-01-07 17:03 - 00000000 ____D () C:\Users\Paweł\AppData\Roaming\Adobe
2015-01-31 15:28 - 2015-01-07 20:54 - 00000000 ____D () C:\Program Files (x86)\e-Sword
2015-01-25 22:18 - 2015-01-07 20:42 - 00152576 ___SH () C:\Users\Paweł\Downloads\Thumbs.db
2015-01-24 19:23 - 2015-01-07 20:53 - 00000000 ____D () C:\Users\Paweł\AppData\Local\Downloaded Installations
2015-01-24 19:17 - 2014-06-26 20:44 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-24 19:17 - 2013-10-07 19:29 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-01-24 19:17 - 2013-08-22 20:12 - 00000000 ____D () C:\WINDOWS\ShellNew
2015-01-24 19:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-01-24 19:14 - 2013-08-22 14:25 - 00000269 _____ () C:\WINDOWS\win.ini
2015-01-24 19:04 - 2015-01-07 22:12 - 00000000 ____D () C:\Users\Public\CyberLink
2015-01-24 12:12 - 2014-06-26 20:00 - 00000000 ____D () C:\ProgramData\NVIDIA

==================== Files in the root of some directories =======

2014-06-26 20:11 - 2014-06-26 20:11 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-10-07 19:23

==================== End Of Log ============================