Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-03-2015 01 Ran by xx (administrator) on X on 05-03-2015 17:20:29 Running from C:\Users\xx\Desktop Loaded Profiles: UpdatusUser & xx (Available profiles: UpdatusUser & xx) Platform: Windows 8.1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Opera) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Program Files (x86)\BringStar\updateBringStar.exe () C:\Program Files (x86)\BringStar\bin\utilBringStar.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Intel Corporation) C:\Windows\System32\igfxext.exe () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoggingDaemon.exe () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\Cyfrowy Polsat MF821.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Farbar) C:\Users\xx\Desktop\FRST64 (1).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191312 2012-08-07] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2862448 2012-08-06] (ELAN Microelectronics Corp.) HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764032 2012-08-10] (Qualcomm Atheros) HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-08-10] (Atheros Communications) HKLM\...\Run: [zLoader.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoader.exe [25872 2012-03-26] () HKLM\...\Run: [CancelAutoPlay.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe [73488 2012-03-26] () HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation) HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-04] (AVAST Software) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2568246086-2447926606-4193830083-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-11-21] (Microsoft Corporation) HKU\S-1-5-21-2568246086-2447926606-4193830083-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-2568246086-2447926606-4193830083-1002\...\MountPoints2: {c7fe46d7-0c57-11e4-beee-20689d4b41cf} - "E:\AutoRun.exe" /s AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-2568246086-2447926606-4193830083-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 -> DefaultScope value is missing. SearchScopes: HKU\S-1-5-21-2568246086-2447926606-4193830083-1002 -> {51BCC7B1-3642-4753-9589-1AB5C0C58671} URL = BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: BringStar -> {6f0d3dec-9246-4b6f-a5e3-c1c169493eef} -> C:\Program Files (x86)\BringStar\BringStarBHO.dll (BringStar) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 212.2.96.53 212.2.96.54 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll No File FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-26] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-17] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations) [File not signed] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-17] (AVAST Software) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation) R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-08-24] (Samsung Electronics CO., LTD.) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation) S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation) R2 Update BringStar; C:\Program Files (x86)\BringStar\updateBringStar.exe [317728 2014-06-11] () R2 Util BringStar; C:\Program Files (x86)\BringStar\bin\utilBringStar.exe [317728 2014-06-11] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-11-21] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-11-21] (Microsoft Corporation) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-17] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2015-01-17] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-17] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-17] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-26] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-17] (AVAST Software) S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-17] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-17] () S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 massfilter_LTE; C:\Windows\System32\drivers\massfilter_LTE.sys [18456 2011-12-14] (HandSet Incorporated) R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider) S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-09-13] (Windows (R) 2003 DDK 3790 provider) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-03-05] (Duplex Secure Ltd.) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-11-21] (Microsoft Corporation) S3 zgdcat; C:\Windows\system32\DRIVERS\zgdcat.sys [130200 2011-12-14] (ZTE Incorporated) S3 zgdcdiag; C:\Windows\system32\DRIVERS\zgdcdiag.sys [130200 2011-12-14] (ZTE Incorporated) S3 zgdcmdm; C:\Windows\system32\DRIVERS\zgdcmdm.sys [130200 2011-12-14] (ZTE Incorporated) S3 zgdcnet; C:\Windows\system32\DRIVERS\zgdcnet.sys [169496 2011-12-14] (ZTE Incorporated) S3 zgdcnmea; C:\Windows\system32\DRIVERS\zgdcnmea.sys [130200 2011-12-14] (ZTE Incorporated) R1 {55685567-4840-4a91-962b-49a412e9485a}Gw64; C:\Windows\System32\drivers\{55685567-4840-4a91-962b-49a412e9485a}Gw64.sys [61112 2014-06-10] (StdLib) R1 {55685567-4840-4a91-962b-49a412e9485a}w64; C:\Windows\System32\drivers\{55685567-4840-4a91-962b-49a412e9485a}w64.sys [61112 2014-06-12] (StdLib) R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64; C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys [61112 2014-05-22] (StdLib) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-05 17:20 - 2015-03-05 17:21 - 00014388 _____ () C:\Users\xx\Desktop\FRST.txt 2015-03-05 17:08 - 2015-03-05 17:20 - 00000000 ____D () C:\FRST 2015-03-05 17:00 - 2015-03-05 17:00 - 00381608 _____ (Duplex Secure Ltd.) C:\WINDOWS\system32\Drivers\sptd.sys 2015-03-05 16:58 - 2015-03-05 16:56 - 00619688 _____ (Duplex Secure Ltd) C:\Users\xx\Desktop\SPTDinst-v187-x64 (3).exe 2015-03-05 16:58 - 2015-03-05 14:04 - 00380416 _____ () C:\Users\xx\Desktop\ymf0bl2b.exe 2015-03-05 16:58 - 2015-03-05 14:01 - 02092544 _____ (Farbar) C:\Users\xx\Desktop\FRST64 (1).exe 2015-02-09 23:37 - 2015-02-09 23:37 - 00000000 ____D () C:\Program Files\Common Files\Atheros 2015-02-09 23:22 - 2015-02-09 23:22 - 00003944 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3EB7BEBE-AC54-45A5-8303-2C7EF6109031} 2015-02-09 23:22 - 2015-02-09 23:22 - 00000000 __SHD () C:\Users\xx\AppData\Local\EmieUserList 2015-02-09 23:22 - 2015-02-09 23:22 - 00000000 __SHD () C:\Users\xx\AppData\Local\EmieSiteList 2015-02-09 23:22 - 2015-02-09 23:22 - 00000000 __SHD () C:\Users\xx\AppData\Local\EmieBrowserModeList 2015-02-09 23:13 - 2015-02-09 23:13 - 00000020 ___SH () C:\Users\xx\ntuser.ini 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Public\Documents\Moje wideo 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Public\Documents\Moje obrazy 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Public\Documents\Moja muzyka 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\Ustawienia lokalne 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\Szablony 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\Moje dokumenty 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\Menu Start 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\Documents\Moje wideo 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\Documents\Moje obrazy 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\Documents\Moja muzyka 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\Dane aplikacji 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Historia 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Dane aplikacji 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Moje wideo 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Moje obrazy 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default User\Documents\Moja muzyka 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Historia 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Dane aplikacji 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\ProgramData\Szablony 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\ProgramData\Pulpit 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programy 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\ProgramData\Menu Start 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\ProgramData\Dokumenty 2015-02-09 23:11 - 2015-02-09 23:11 - 00000000 _SHDL () C:\ProgramData\Dane aplikacji 2015-02-09 23:07 - 2015-02-09 23:07 - 00023044 _____ () C:\WINDOWS\system32\emptyregdb.dat 2015-02-09 22:51 - 2015-02-09 22:51 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2015-02-09 22:40 - 2015-02-09 22:40 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-02-09 22:35 - 2015-02-09 22:35 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2015-02-09 22:33 - 2015-02-10 20:08 - 00000000 ____D () C:\Users\xx 2015-02-09 22:33 - 2015-02-09 23:08 - 00028578 _____ () C:\WINDOWS\diagwrn.xml 2015-02-09 22:33 - 2015-02-09 23:08 - 00028578 _____ () C:\WINDOWS\diagerr.xml 2015-02-09 22:33 - 2015-02-09 22:35 - 00000000 ___RD () C:\Users\xx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-09 22:33 - 2015-02-09 22:35 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\Ustawienia lokalne 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\Szablony 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\Moje dokumenty 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\Menu Start 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\Documents\Moje wideo 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\Documents\Moje obrazy 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\Documents\Moja muzyka 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\Dane aplikacji 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\AppData\Local\Historia 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\xx\AppData\Local\Dane aplikacji 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\Ustawienia lokalne 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\Szablony 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\Moje dokumenty 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\Menu Start 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Moje wideo 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Moje obrazy 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Moja muzyka 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\Dane aplikacji 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Historia 2015-02-09 22:33 - 2015-02-09 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Dane aplikacji 2015-02-09 22:33 - 2014-11-21 10:03 - 00000000 ___RD () C:\Users\xx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-09 22:33 - 2014-11-21 10:03 - 00000000 ___RD () C:\Users\xx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-09 22:33 - 2014-11-21 10:03 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-09 22:33 - 2014-11-21 10:03 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-02-09 22:33 - 2014-11-21 05:47 - 00000369 _____ () C:\Users\xx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-02-09 22:33 - 2014-11-21 05:47 - 00000369 _____ () C:\Users\xx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-02-09 22:33 - 2014-11-21 05:47 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-02-09 22:33 - 2014-11-21 05:47 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-02-09 22:33 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\xx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-02-09 22:33 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-02-09 22:21 - 2015-02-09 22:38 - 00000000 ____D () C:\Program Files\Elantech 2015-02-09 22:21 - 2015-02-09 22:38 - 00000000 ____D () C:\Program Files (x86)\Intel 2015-02-09 22:21 - 2015-02-09 22:21 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2015-02-09 22:21 - 2015-02-09 22:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2015-02-09 22:21 - 2015-02-09 22:21 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs 2015-02-09 22:21 - 2015-02-09 22:21 - 00000000 ____D () C:\Program Files\Realtek 2015-02-09 22:20 - 2015-03-05 16:58 - 00876312 _____ () C:\WINDOWS\WindowsUpdate.log 2015-02-09 22:19 - 2015-02-09 22:38 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-02-09 22:19 - 2015-02-09 22:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2015-02-09 22:19 - 2015-02-09 22:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2015-02-09 22:15 - 2015-02-09 23:15 - 00000000 ___DC () C:\WINDOWS\Panther 2015-02-09 22:14 - 2015-02-09 22:14 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2015-02-09 22:14 - 2015-02-09 22:14 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2015-02-09 22:14 - 2015-02-09 22:14 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2015-02-09 22:14 - 2015-02-09 22:14 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2015-02-09 22:14 - 2015-02-09 22:14 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2015-02-09 22:14 - 2015-02-09 22:14 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-02-09 22:14 - 2015-02-09 22:14 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2015-02-09 22:14 - 2015-02-09 22:14 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2015-02-09 22:14 - 2015-02-09 22:14 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2015-02-09 22:14 - 2015-02-09 22:14 - 00000000 ____D () C:\Windows.old 2015-02-09 22:13 - 2015-02-09 22:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-02-09 22:13 - 2015-02-09 22:13 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-02-09 22:13 - 2015-02-09 22:13 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2015-02-09 22:13 - 2015-02-09 22:13 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2015-02-09 22:13 - 2015-02-09 22:13 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec 2015-02-09 22:13 - 2015-02-09 22:13 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2015-02-09 22:13 - 2015-02-09 22:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2015-02-09 22:12 - 2015-02-09 22:12 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2015-02-09 22:12 - 2015-02-09 22:12 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2015-02-09 22:12 - 2015-02-09 22:12 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2015-02-09 22:12 - 2015-02-09 22:12 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2015-02-09 22:12 - 2015-02-09 22:12 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2015-02-09 22:12 - 2015-02-09 22:12 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2015-02-09 22:12 - 2015-02-09 22:12 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2015-02-09 22:12 - 2015-02-09 22:12 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2015-02-09 22:01 - 2015-02-09 22:01 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe 2015-02-09 22:01 - 2015-02-09 22:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll 2015-02-09 22:01 - 2015-02-09 22:01 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll 2015-02-09 22:00 - 2015-02-09 22:00 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2015-02-09 22:00 - 2015-02-09 22:00 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2015-02-09 22:00 - 2015-02-09 22:00 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2015-02-09 22:00 - 2015-02-09 22:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2015-02-09 21:57 - 2015-02-09 21:57 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2015-02-09 21:57 - 2015-02-09 21:57 - 00000000 ____D () C:\Program Files\Reference Assemblies 2015-02-09 21:57 - 2015-02-09 21:57 - 00000000 ____D () C:\Program Files\MSBuild 2015-02-09 21:57 - 2015-02-09 21:57 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2015-02-09 21:57 - 2015-02-09 21:57 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2015-02-09 21:56 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2015-02-09 21:56 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-02-09 21:56 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2015-02-09 21:56 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2015-02-09 21:56 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-02-09 21:56 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2015-02-06 21:04 - 2015-02-10 20:07 - 00002912 _____ () C:\WINDOWS\System32\Tasks\ReclaimerUpdateFiles_xx 2015-02-06 21:04 - 2015-02-10 20:07 - 00000362 _____ () C:\WINDOWS\Tasks\ReclaimerUpdateFiles_xx.job 2015-02-06 21:04 - 2015-02-09 21:06 - 00002908 _____ () C:\WINDOWS\System32\Tasks\ReclaimerUpdateXML_xx 2015-02-06 21:04 - 2015-02-09 21:06 - 00000358 _____ () C:\WINDOWS\Tasks\ReclaimerUpdateXML_xx.job ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-05 17:14 - 2012-11-20 15:54 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2568246086-2447926606-4193830083-1002 2015-03-05 17:08 - 2014-11-21 05:46 - 01825074 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2015-03-05 17:08 - 2014-11-21 05:07 - 00807160 _____ () C:\WINDOWS\system32\perfh015.dat 2015-03-05 17:08 - 2014-11-21 05:07 - 00163478 _____ () C:\WINDOWS\system32\perfc015.dat 2015-03-05 17:08 - 2012-08-22 09:45 - 00000000 ____D () C:\ProgramData\WinClon 2015-03-05 17:05 - 2014-02-20 18:21 - 00000924 _____ () C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineCore.job 2015-03-05 17:03 - 2013-08-22 15:46 - 00330007 _____ () C:\WINDOWS\setupact.log 2015-03-05 17:03 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-03-05 17:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2015-03-05 17:02 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2015-03-05 16:53 - 2012-11-20 15:46 - 00000000 ____D () C:\Users\xx\AppData\Local\VirtualStore 2015-03-04 17:05 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2015-03-04 16:59 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2015-03-04 16:37 - 2012-12-11 14:31 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-03-04 16:33 - 2014-07-25 18:59 - 00006437 _____ () C:\WINDOWS\5A5445_Autorun.log 2015-03-04 16:26 - 2014-02-20 18:21 - 00000928 _____ () C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineUA.job 2015-03-04 16:00 - 2014-05-22 09:57 - 00000000 ____D () C:\Users\xx\AppData\Roaming\Real 2015-03-04 15:59 - 2014-05-22 09:57 - 00000000 ____D () C:\Program Files (x86)\Real 2015-03-04 15:59 - 2014-05-22 09:54 - 00000000 ____D () C:\ProgramData\Real 2015-03-04 15:52 - 2014-05-22 09:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlvPlayer 2015-02-10 19:21 - 2014-11-20 20:36 - 00005506 _____ () C:\WINDOWS\PFRO.log 2015-02-10 19:21 - 2014-11-20 19:54 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense 2015-02-09 23:37 - 2013-08-22 15:46 - 00000278 _____ () C:\WINDOWS\setuperr.log 2015-02-09 23:37 - 2012-11-20 15:49 - 00000000 ____D () C:\Users\xx\Documents\Bluetooth Folder 2015-02-09 23:37 - 2012-08-22 09:35 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2015-02-09 23:23 - 2014-08-22 19:14 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2015-02-09 23:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2015-02-09 23:21 - 2013-05-18 17:16 - 00000000 ____D () C:\Users\xx\AppData\Roaming\Skype 2015-02-09 23:21 - 2012-11-20 15:46 - 00000000 ____D () C:\Users\xx\AppData\Local\Packages 2015-02-09 23:20 - 2014-11-21 22:48 - 00000000 ___HD () C:\$Windows.~BT 2015-02-09 23:16 - 2012-11-20 15:48 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2015-02-09 23:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2015-02-09 23:11 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2015-02-09 23:11 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2015-02-09 23:08 - 2015-01-04 20:20 - 00008170 _____ () C:\WINDOWS\comsetup.log 2015-02-09 23:08 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2015-02-09 22:59 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2015-02-09 22:59 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2015-02-09 22:48 - 2012-08-22 10:06 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2015-02-09 22:48 - 2012-08-22 10:06 - 00000000 ____D () C:\WINDOWS\system32\NV 2015-02-09 22:45 - 2013-08-22 15:44 - 00361728 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2015-02-09 22:44 - 2013-08-22 14:25 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM 2015-02-09 22:41 - 2013-08-22 16:37 - 00005217 _____ () C:\WINDOWS\DtcInstall.log 2015-02-09 22:41 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2015-02-09 22:40 - 2014-11-21 10:02 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel 2015-02-09 22:40 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2015-02-09 22:40 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2015-02-09 22:40 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\system32\WCN 2015-02-09 22:40 - 2014-09-01 21:16 - 00000000 ____D () C:\WINDOWS\SysWOW64\SupportAppXL 2015-02-09 22:40 - 2014-07-25 19:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\SupportAppZXH 2015-02-09 22:40 - 2014-01-08 15:16 - 00000000 ____D () C:\WINDOWS\SysWOW64\log 2015-02-09 22:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2015-02-09 22:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2015-02-09 22:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2015-02-09 22:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2015-02-09 22:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2015-02-09 22:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2015-02-09 22:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2015-02-09 22:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2015-02-09 22:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2015-02-09 22:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2015-02-09 22:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2015-02-09 22:38 - 2014-12-18 10:55 - 00000000 ____D () C:\WINDOWS\system32\appraiser 2015-02-09 22:38 - 2014-10-24 10:37 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 2015-02-09 22:38 - 2014-09-01 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Globe Visibility Connection Manager 2015-02-09 22:38 - 2014-08-01 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-02-09 22:38 - 2014-07-25 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyfrowy Polsat MF821 2015-02-09 22:38 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2015-02-09 22:38 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2015-02-09 22:38 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2015-02-09 22:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions 2015-02-09 22:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2015-02-09 22:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2015-02-09 22:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppCompat 2015-02-09 22:38 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2015-02-09 22:38 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-09 22:38 - 2013-05-18 17:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-02-09 22:38 - 2012-12-17 18:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-02-09 22:38 - 2012-08-22 10:02 - 00000000 ____D () C:\WINDOWS\fr 2015-02-09 22:38 - 2012-08-22 10:02 - 00000000 ____D () C:\WINDOWS\en 2015-02-09 22:38 - 2012-08-22 10:01 - 00000000 ____D () C:\WINDOWS\pl 2015-02-09 22:38 - 2012-08-22 10:01 - 00000000 ____D () C:\WINDOWS\nl 2015-02-09 22:38 - 2012-08-22 09:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 10 2015-02-09 22:38 - 2012-08-22 09:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8 2015-02-09 22:38 - 2012-08-22 09:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center 2015-02-09 22:38 - 2012-08-22 09:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program 2015-02-09 22:38 - 2012-08-22 08:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2015-02-09 22:38 - 2012-08-05 22:11 - 00000000 ____D () C:\ProgramData\PRICache 2015-02-09 22:35 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2015-02-09 22:15 - 2015-01-10 14:13 - 00000000 ____D () C:\Recovery 2015-02-09 22:14 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2015-02-09 22:12 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2015-02-09 22:11 - 2014-11-21 05:29 - 00000000 ____D () C:\Program Files\Windows Journal 2015-02-09 22:11 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm 2015-02-09 22:11 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr 2015-02-09 22:11 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2015-02-09 22:11 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\system32\winrm 2015-02-09 22:11 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\system32\slmgr 2015-02-09 22:11 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts 2015-02-09 22:11 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2015-02-09 22:11 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform 2015-02-09 22:11 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\migwiz 2015-02-09 22:11 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2015-02-09 22:11 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-09 22:11 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2015-02-09 22:11 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2015-02-09 22:11 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\servicing 2015-02-09 21:45 - 2012-08-22 08:55 - 01155674 _____ () C:\WINDOWS\WindowsUpdate (1).log 2015-02-09 20:40 - 2013-02-19 20:43 - 00000000 ____D () C:\Users\xx\AppData\Local\CrashDumps 2015-02-06 21:18 - 2014-02-20 18:17 - 00000000 ____D () C:\Program Files (x86)\Opera 2015-02-04 19:37 - 2012-12-11 14:31 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2015-02-03 21:08 - 2014-12-24 23:34 - 00003858 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1403625265 2015-02-03 21:08 - 2014-12-24 23:34 - 00001055 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk ==================== Files in the root of some directories ======= 2014-02-20 18:21 - 2014-03-28 20:21 - 0000085 _____ () C:\Users\xx\AppData\Roaming\WB.CFG 2012-08-22 10:02 - 2012-08-08 05:07 - 2258432 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe 2012-08-22 10:02 - 2012-08-07 11:11 - 0003196 _____ () C:\ProgramData\MakeMarkerFile.xml Files to move or delete: ==================== C:\ProgramData\MakeMarkerFile.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-03-05 16:47 ==================== End Of Log ============================