Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01
Ran by User (administrator) on ASUS on 28-02-2015 19:34:46
Running from C:\Users\User\Downloads
Loaded Profiles: User & UpdatusUser (Available profiles: User & UpdatusUser)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe
(Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(MySQL AB) C:\xampp\mysql\bin\mysqld.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Windows (R) Win 7 DDK provider) C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
() C:\ExpressGateUtil\VAWinAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\5\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\3\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\2\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\3\Plugin.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-08-11] (Alcor Micro Corp.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2010-11-30] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-25] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-25] (Atheros Commnucations)
HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM-x32\...\Run: [FLxHCIm] => C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe [37888 2010-11-19] (Windows (R) Win 7 DDK provider)
HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-09] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-23] ()
HKLM-x32\...\Run: [VAWinAgent] => C:\ExpressGateUtil\VAWinAgent.exe [21504 2010-08-12] ()
HKLM-x32\...\Run: [NeroFilterCheck] => C:\Windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-27] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1637351539-915756313-3180054859-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2765256 2014-11-03] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-1637351539-915756313-3180054859-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
HKU\S-1-5-21-1637351539-915756313-3180054859-1000\...\MountPoints2: {6e141962-7b3c-11e0-b3ce-806e6f6e6963} - H:\InstAll.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [266448 2013-06-21] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [214448 2013-06-21] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1637351539-915756313-3180054859-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.live.com/1rewlive4startup/home
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 84.205.31.5

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\j28mmurj.default-1425148103611
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-12]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apache2.2; C:\xampp\apache\bin\httpd.exe [29416 2009-12-19] (Apache Software Foundation)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-25] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-26] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-26] (Avast Software)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-05-15] (Macrovision Europe Ltd.) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R2 MySQL; C:\xampp\mysql\bin\mysqld.exe [6095504 2009-12-19] (MySQL AB)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [581368 2015-02-28] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [388856 2015-02-28] ()
S4 VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [77312 2010-08-20] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-26] ()
R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [49664 2010-11-19] (Fresco Logic)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-16] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-26] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-28 19:28 - 2015-02-28 19:28 - 00000000 ____D () C:\Users\User\Desktop\Stare dane programu Firefox
2015-02-28 17:50 - 2015-02-28 17:50 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-02-28 17:30 - 2015-02-28 17:30 - 02087936 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2015-02-28 16:34 - 2015-02-28 16:34 - 00347816 _____ (Microsoft Corporation) C:\Users\User\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.Run.exe
2015-02-27 21:38 - 2015-02-27 21:38 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-27 21:38 - 2015-02-27 21:38 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-27 21:35 - 2015-02-27 21:35 - 00243496 _____ () C:\Users\User\Downloads\Firefox Setup Stub 36.0.exe
2015-02-27 21:34 - 2015-02-27 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-02-27 21:33 - 2015-02-27 21:33 - 00000000 ____D () C:\Program Files (x86)\Strong Signal
2015-02-27 21:33 - 2014-12-26 12:37 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-02-26 22:56 - 2015-02-26 22:56 - 00061782 _____ () C:\Users\User\Downloads\Shortcut.txt
2015-02-26 22:54 - 2015-02-28 19:34 - 00015272 _____ () C:\Users\User\Downloads\FRST.txt
2015-02-26 22:54 - 2015-02-26 22:56 - 00034018 _____ () C:\Users\User\Downloads\Addition.txt
2015-02-26 22:52 - 2015-02-28 19:34 - 00000000 ____D () C:\FRST
2015-02-26 18:37 - 2015-02-26 18:37 - 00000000 ___RD () C:\Users\User\Documents\Notes
2015-02-25 22:11 - 2015-02-25 22:11 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieBrowserModeList
2015-02-25 22:00 - 2015-02-28 16:27 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-02-25 20:23 - 2015-02-25 20:23 - 00000000 ____D () C:\Users\User\AppData\Local\Nokia
2015-02-25 11:39 - 2015-02-25 21:58 - 00000000 ____D () C:\ProgramData\Nokia
2015-02-25 11:38 - 2015-02-27 21:28 - 00000000 ____D () C:\Program Files (x86)\PC Connectivity Solution
2015-02-25 11:38 - 2015-02-25 11:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
2015-02-25 11:38 - 2012-10-17 14:53 - 00026112 _____ (Nokia) C:\Windows\system32\Drivers\pccsmcfdx64.sys
2015-02-25 11:36 - 2015-02-25 11:36 - 106320648 _____ () C:\Users\User\Downloads\Nokia_Suite_webinstaller_ALL.exe
2015-02-25 11:36 - 2015-02-25 11:36 - 00000000 ____D () C:\ProgramData\NokiaInstallerCache
2015-02-25 11:34 - 2015-02-28 15:52 - 00000000 ____D () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
2015-02-25 11:32 - 2015-02-25 11:32 - 00710792 _____ (App Web ) C:\Users\User\Downloads\Nokia-Suite(15744)-dp.exe
2015-02-22 20:03 - 2015-02-22 20:04 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-02-22 20:03 - 2015-02-22 20:03 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-02-10 17:36 - 2015-02-10 17:36 - 809300320 _____ () C:\Windows\MEMORY.DMP
2015-02-10 17:36 - 2015-02-10 17:36 - 00286704 _____ () C:\Windows\Minidump\021015-30217-01.dmp
2015-02-10 17:36 - 2015-02-10 17:36 - 00000000 ____D () C:\Windows\Minidump
2015-02-07 16:05 - 2015-02-07 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone
2015-02-07 16:05 - 2015-02-07 16:05 - 00000000 ____D () C:\Program Files (x86)\Windows Phone
2015-02-07 16:03 - 2015-02-07 16:03 - 00000000 ____D () C:\ProgramData\Applications
2015-02-07 16:02 - 2015-02-07 16:02 - 06745792 _____ (Microsoft Corporation) C:\Users\User\Downloads\WindowsPhone.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-28 19:22 - 2012-12-14 22:14 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-28 19:15 - 2011-05-11 07:09 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2015-02-28 17:58 - 2009-07-14 05:45 - 00015360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-28 17:58 - 2009-07-14 05:45 - 00015360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-28 17:56 - 2011-05-10 20:46 - 02017375 _____ () C:\Windows\WindowsUpdate.log
2015-02-28 17:51 - 2014-07-11 15:02 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-02-28 17:50 - 2011-05-11 07:10 - 00000000 ___HD () C:\ASUS.DAT
2015-02-28 17:49 - 2011-05-15 14:08 - 00194840 _____ () C:\Windows\PFRO.log
2015-02-28 17:49 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-28 17:49 - 2009-07-14 05:51 - 00155169 _____ () C:\Windows\setupact.log
2015-02-28 17:47 - 2015-01-27 08:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-28 15:59 - 2009-07-14 18:55 - 00156230 _____ () C:\Windows\system32\perfc015.dat
2015-02-28 15:59 - 2009-07-14 18:55 - 00058826 _____ () C:\Windows\system32\perfh015.dat
2015-02-28 15:59 - 2009-07-14 06:13 - 00985160 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-28 15:53 - 2014-08-12 14:38 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-28 15:49 - 2014-12-26 22:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-02-27 21:34 - 2014-12-26 12:37 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-27 21:29 - 2011-05-13 21:53 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2015-02-27 21:28 - 2014-05-04 15:52 - 00000000 ____D () C:\ProgramData\MiniApp
2015-02-27 21:28 - 2011-05-15 13:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\IrfanView
2015-02-27 21:28 - 2011-05-15 13:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMule
2015-02-27 21:28 - 2011-05-15 11:48 - 00000000 ____D () C:\Users\User\AppData\Roaming\GHISLER
2015-02-27 21:28 - 2011-05-11 07:10 - 00000000 ____D () C:\ProgramData\P4G
2015-02-27 21:27 - 2014-06-01 20:01 - 00000000 ____D () C:\AdwCleaner
2015-02-27 21:27 - 2011-05-15 15:37 - 00000000 ____D () C:\Program Files (x86)\ALLPlayer
2015-02-27 21:27 - 2011-05-15 13:30 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2015-02-27 21:27 - 2010-10-11 05:50 - 00000000 ___HD () C:\ExpressGateUtil
2015-02-27 21:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-26 18:46 - 2011-05-15 14:36 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2015-02-25 11:41 - 2011-05-11 07:10 - 00001442 _____ () C:\Windows\system32\ServiceFilter.ini
2015-02-25 11:38 - 2012-05-09 19:36 - 00033380 _____ () C:\Windows\DPINST.LOG
2015-02-22 20:03 - 2011-05-15 13:03 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-22 20:03 - 2011-05-15 13:03 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-02-22 20:01 - 2011-05-11 07:06 - 00000000 ____D () C:\Users\User\Documents\Bluetooth Folder
2015-02-19 22:19 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-19 22:19 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU(37).TXT
2015-02-17 18:57 - 2011-05-15 11:40 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-02-17 18:46 - 2014-05-03 19:52 - 00000000 ____D () C:\Users\User\AppData\Local\Windows Live
2015-02-17 18:43 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-17 18:37 - 2013-11-13 19:38 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-04 23:22 - 2012-12-14 22:14 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 23:22 - 2012-10-19 09:05 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 23:22 - 2011-05-15 14:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2012-07-14 13:42 - 2012-07-14 13:42 - 0000015 _____ () C:\Users\User\AppData\Roaming\config.tcf
2011-05-15 14:46 - 2011-05-15 14:46 - 0099384 _____ () C:\Users\User\AppData\Roaming\inst.exe
2011-05-15 14:46 - 2011-05-15 14:46 - 0007859 _____ () C:\Users\User\AppData\Roaming\pcouffin.cat
2011-05-15 14:46 - 2011-05-15 14:46 - 0001167 _____ () C:\Users\User\AppData\Roaming\pcouffin.inf
2011-05-15 14:47 - 2011-05-15 14:47 - 0000034 _____ () C:\Users\User\AppData\Roaming\pcouffin.log
2011-05-15 14:46 - 2011-05-15 14:46 - 0082816 _____ (VSO Software) C:\Users\User\AppData\Roaming\pcouffin.sys
2011-05-26 09:17 - 2011-05-26 09:17 - 0000017 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg
2011-05-17 07:58 - 2014-08-12 14:21 - 0000000 _____ () C:\ProgramData\CLDShowX.ini

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-02 10:49

==================== End Of Log ============================