Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-04-2015 01
Ran by Konrad (administrator) on ASUS on 05-05-2015 22:31:57
Running from C:\Users\Konrad\Downloads
Loaded Profiles: Konrad (Available profiles: Konrad)
Platform: Microsoft Windows 8.1 (X86) OS Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\officeclicktorun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer INC.) C:\ProgramData\AsTouchPanel\AsPatchTouchPanel.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPCenter.exe
(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\RuntimeBroker.exe
(Intel Corporation) C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17499_x86__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS Live Update\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x86__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkNGUI] => C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe [2904064 2013-10-30] (Realtek Semiconductor)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [81360 2014-01-22] (Intel Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2656408151-2057117993-761135209-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-2656408151-2057117993-761135209-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2014-10-29] (Microsoft Corporation)
Startup: C:\Users\Konrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RT-Automatyczne aktualizacje-AKP.lnk [2014-06-23]
ShortcutTarget: RT-Automatyczne aktualizacje-AKP.lnk -> C:\ADAKO\VCDS\VCDS.exe (Ross-Tech, LLC)
Startup: C:\Users\Konrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-04-03]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2656408151-2057117993-761135209-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKU\S-1-5-21-2656408151-2057117993-761135209-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01
HKU\S-1-5-21-2656408151-2057117993-761135209-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2656408151-2057117993-761135209-1001 -> {5CB7ABC7-DDE5-4AF1-83D3-321D97815986} URL = http://www.google.com/search?hl=pl&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2656408151-2057117993-761135209-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-27] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-27] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.137.1

FireFox:
========
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2013-07-12] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2013-07-12] (Intel Corporation)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-06-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-05-03] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-05-03] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.pl/"
CHR Profile: C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-03]
CHR Extension: (Google Docs) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-03]
CHR Extension: (Google Drive) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-03]
CHR Extension: (YouTube) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-03]
CHR Extension: (Adblock Plus) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-03]
CHR Extension: (Google Search) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-03]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2015-05-03]
CHR Extension: (Google Calendar) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2015-05-03]
CHR Extension: (Google Sheets) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-03]
CHR Extension: (Save to Google Drive) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2015-05-03]
CHR Extension: (Bookmark Manager) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-03]
CHR Extension: (Google Maps) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-05-03]
CHR Extension: (Kolorowanki dla dzieci) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\lobjimlbkjgdimipdboiglikfkmljadl [2015-05-03]
CHR Extension: (Google Wallet) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-03]
CHR Extension: (Gmail) - C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-03]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AsHidService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [103224 2013-09-09] (ASUSTek Computer Inc.)
R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [111416 2013-09-09] (ASUSTek Computer Inc.)
R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2011-11-21] (ASUS)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [1677016 2014-03-26] (Broadcom Corporation.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [250880 2014-10-29] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1843896 2015-02-10] (Microsoft Corporation)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [277304 2014-02-11] (Intel Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [83920 2014-01-22] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [96720 2014-01-22] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [90576 2014-01-22] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [586752 2013-07-02] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [637912 2013-07-02] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe [168216 2013-08-25] (Intel Corporation)
S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [103936 2014-10-29] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [284488 2015-02-04] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [20992 2014-10-29] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22200 2015-02-04] (Microsoft Corporation)
S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1269248 2014-10-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-03] (ASUS)
R3 AsusHID; C:\Windows\System32\drivers\AsusHID.sys [64792 2013-12-12] (ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [17720 2013-07-03] (ASUSTek Computer Inc.)
S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [97896 2013-07-18] (ASIX Electronics Corp.)
R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [25600 2014-02-22] (Microsoft Corporation)
R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [304344 2014-07-11] (Broadcom Corp)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [186880 2013-12-04] (Microsoft Corporation)
R3 BthMini; C:\Windows\System32\Drivers\BTHMINI.sys [23552 2014-10-29] (Microsoft Corporation)
S3 btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [144600 2014-03-26] (Broadcom Corporation.)
R3 BtwSerialBus; C:\Windows\system32\DRIVERS\BtwSerialBus.sys [130776 2014-03-26] (Broadcom Corporation.)
R3 camera; C:\Windows\system32\DRIVERS\camera.sys [345088 2013-12-02] (Intel Corporation)
R3 CM3218x; C:\Windows\system32\DRIVERS\WUDFRd.sys [190976 2014-10-29] (Microsoft Corporation)
R3 CPLMACPI; C:\Windows\system32\DRIVERS\CPLMACPI.sys [16488 2013-09-06] (Capella Microsystems, Inc.)
S2 DirectNT; C:\Windows\system32\Drivers\DirectNT.sys [3424 1996-12-05] (c't) [File not signed]
R3 DptfDevDBPT; C:\Windows\system32\DRIVERS\DptfDevPower.sys [25552 2014-01-22] (Intel Corporation)
R3 DptfDevDisplay; C:\Windows\system32\DRIVERS\DptfDevDisplay.sys [28112 2014-01-22] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [36304 2014-01-22] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [80848 2014-01-22] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [181712 2014-01-22] (Intel Corporation)
S3 FTDIBUS; C:\Windows\system32\drivers\ftdibus.sys [60104 2010-08-24] (FTDI Ltd.)
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [23552 2013-12-30] (Intel Corporation)
R3 GpioVirtual; C:\Windows\System32\drivers\iaiogpiovirtual.sys [16896 2013-12-30] (Intel Corporation)
R3 HIDSwitch; C:\Windows\System32\drivers\AsHIDSwitch.sys [17720 2013-10-08] (ASUS)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [58368 2013-11-15] (Intel Corporation)
R3 iaiouart; C:\Windows\System32\drivers\iaiouart.sys [87552 2013-12-30] (Intel Corporation)
S0 iaStorA; C:\Windows\System32\drivers\iaStorA.sys [505192 2013-08-09] (Intel Corporation)
S3 intaud_WaveExtensible; C:\Windows\system32\drivers\intelaud.sys [32664 2014-01-22] (Intel Corporation)
R3 IntelSST; C:\Windows\system32\drivers\isstrtc.sys [254464 2013-12-30] (Intel(R) Corporation)
R3 INVN_MotionApps; C:\Windows\system32\DRIVERS\WUDFRd.sys [190976 2014-10-29] (Microsoft Corporation)
R3 iwdbus; C:\Windows\System32\drivers\iwdbus.sys [23448 2014-01-22] (Intel Corporation)
R0 MBI; C:\Windows\System32\drivers\MBI.sys [21456 2013-11-02] (Intel Corporation)
R3 MT9M114; C:\Windows\System32\drivers\MT9M114.sys [38912 2013-12-02] (Intel Corporation)
S3 NETwNs32; C:\Windows\system32\DRIVERS\Netwsn00.sys [10372096 2013-06-18] (Intel Corporation)
R3 PMIC; C:\Windows\System32\drivers\PMIC.sys [48128 2013-11-02] (Intel Corporation)
S3 RT-USB; C:\Windows\system32\drivers\RT-USB.SYS [80256 2014-05-12] (Ross-Tech LLC)
R3 rtii2sac; C:\Windows\system32\DRIVERS\rtii2sac.sys [149720 2013-12-05] (Realtek Semiconductor Corp.)
R3 SensorsServiceDriver; C:\Windows\System32\drivers\WUDFRd.sys [190976 2014-10-29] (Microsoft Corporation)
R3 TXEI; C:\Windows\System32\drivers\TXEI.sys [75792 2014-02-26] (Intel Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [84800 2015-02-04] (Microsoft Corporation)
R0 Wof; C:\Windows\system32\Drivers\Wof.sys [138584 2014-03-13] (Microsoft Corporation)
R3 WUDFSensorLP; C:\Windows\System32\drivers\WUDFRd.sys [190976 2014-10-29] (Microsoft Corporation)
U0 msahci; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-05 22:31 - 2015-05-05 22:32 - 00018592 _____ () C:\Users\Konrad\Downloads\FRST.txt
2015-05-03 23:20 - 2015-05-03 23:20 - 00002229 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-03 23:20 - 2015-05-03 23:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-03 23:18 - 2015-05-05 22:23 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-03 23:18 - 2015-05-04 23:24 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-03 20:00 - 2015-05-05 22:24 - 01311024 _____ () C:\Windows\WindowsUpdate.log
2015-05-03 10:22 - 2015-05-03 10:23 - 00000000 ____D () C:\Program Files\Defraggler
2015-05-03 10:22 - 2015-05-03 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2015-05-02 23:28 - 2015-05-05 22:27 - 00000000 ____D () C:\AdwCleaner
2015-05-01 15:36 - 2015-05-05 22:32 - 00000000 ____D () C:\FRST
2015-05-01 15:32 - 2015-05-01 15:32 - 00380416 _____ () C:\Users\Konrad\Downloads\y607iryj.exe
2015-05-01 15:30 - 2015-05-01 15:30 - 02204160 _____ () C:\Users\Konrad\Downloads\adwcleaner_4.203.exe
2015-05-01 15:29 - 2015-05-01 15:29 - 01140736 _____ (Farbar) C:\Users\Konrad\Downloads\FRST.exe
2015-04-24 07:20 - 2015-03-23 00:44 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-24 07:20 - 2015-03-23 00:07 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-24 07:20 - 2015-03-23 00:07 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-24 07:20 - 2015-03-23 00:07 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-24 07:20 - 2015-03-23 00:07 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-24 07:20 - 2015-03-23 00:07 - 00330752 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-24 07:20 - 2015-03-23 00:07 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-24 05:52 - 2015-04-24 05:53 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-23 11:25 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-16 12:27 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 12:27 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 12:27 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 12:27 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-16 12:27 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-16 12:27 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 12:27 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 12:27 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 12:27 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 12:27 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 12:27 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 12:27 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 12:26 - 2015-03-23 23:45 - 05782848 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 12:26 - 2015-03-23 23:45 - 01468920 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 12:26 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-16 12:26 - 2015-03-20 05:25 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-16 12:26 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-16 12:26 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-16 12:26 - 2015-03-14 10:40 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-16 12:26 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-16 12:26 - 2015-03-14 03:14 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-16 12:26 - 2015-03-14 03:11 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-16 12:26 - 2015-03-14 02:59 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-16 12:26 - 2015-03-14 02:03 - 03040768 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-16 12:26 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-16 12:26 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-16 12:26 - 2015-03-14 02:00 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-16 12:26 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-16 12:26 - 2015-03-14 01:59 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-16 12:26 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-16 12:26 - 2015-03-14 01:55 - 02309120 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-16 12:26 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-16 12:26 - 2015-02-24 10:20 - 00738112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-16 12:26 - 2015-02-21 01:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-16 12:25 - 2015-03-04 12:05 - 00279360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-16 12:25 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-07 18:53 - 2015-04-07 18:53 - 00000000 ____D () C:\Users\Konrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BMW Diagnostic
2015-04-07 18:53 - 2015-04-07 18:53 - 00000000 ____D () C:\Program Files\BMW Diagnostic Head Emulator

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-05 22:31 - 2014-05-21 21:15 - 00808682 _____ () C:\Windows\system32\perfh015.dat
2015-05-05 22:31 - 2014-05-21 21:15 - 00164328 _____ () C:\Windows\system32\perfc015.dat
2015-05-05 22:31 - 2013-12-17 01:05 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-05 22:31 - 2013-08-22 10:17 - 00000000 ____D () C:\Windows\system32\sru
2015-05-05 22:29 - 2013-08-22 10:17 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-05 22:21 - 2013-08-22 10:17 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-05 22:13 - 2014-06-17 23:07 - 00000000 ____D () C:\Users\Konrad\AppData\Roaming\Skype
2015-05-05 22:02 - 2014-08-26 00:17 - 00000000 ____D () C:\Users\Konrad\AppData\Local\Deployment
2015-05-03 23:20 - 2014-08-26 00:17 - 00000000 ____D () C:\Users\Konrad\AppData\Local\Google
2015-05-03 23:19 - 2014-08-26 00:17 - 00000000 ____D () C:\Program Files\Google
2015-05-03 20:33 - 2013-08-22 10:17 - 00000000 ____D () C:\Windows\AppCompat
2015-05-03 20:32 - 2014-07-27 16:35 - 00049664 ___SH () C:\Users\Konrad\Downloads\Thumbs.db
2015-05-03 20:27 - 2014-05-21 19:47 - 00000000 ___DO () C:\Users\Konrad\SkyDrive
2015-05-03 20:25 - 2013-08-22 09:23 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-03 20:06 - 2013-08-22 08:13 - 00524288 ___SH () C:\Windows\system32\config\BBI
2015-05-03 11:13 - 2014-06-17 23:07 - 00000000 ____D () C:\ProgramData\Skype
2015-05-03 10:12 - 2014-06-28 17:39 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-03 10:08 - 2014-06-17 22:57 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-03 06:26 - 2015-01-27 16:51 - 00000000 ____D () C:\Windows\system32\appraiser
2015-05-03 06:26 - 2014-07-10 08:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-05-03 06:26 - 2013-08-22 10:05 - 00000000 ____D () C:\Windows\CbsTemp
2015-05-02 23:43 - 2013-08-22 10:17 - 00000000 ____D () C:\Windows\AppReadiness
2015-05-01 15:34 - 2014-09-03 11:27 - 00000000 ____D () C:\Windows\Minidump
2015-04-23 02:27 - 2013-08-22 10:17 - 00000000 ____D () C:\Windows\rescache
2015-04-19 14:02 - 2013-08-22 10:17 - 00000000 ____D () C:\Windows\system32\pl-PL
2015-04-17 22:55 - 2015-03-12 00:20 - 00000000 ____D () C:\Users\Konrad\Downloads\studium-stargard
2015-04-14 01:24 - 2013-08-22 10:18 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-14 01:24 - 2013-08-22 10:18 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-13 23:04 - 2014-06-21 14:23 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-04-11 23:11 - 2014-05-21 19:40 - 00000000 ____D () C:\Users\Konrad
2015-04-07 19:01 - 2014-11-13 00:49 - 00000000 __SHD () C:\Users\Konrad\wc
2015-04-07 16:56 - 2014-10-23 08:30 - 00000680 _____ () C:\Users\Public\Desktop\BMW INPA.lnk
2015-04-07 16:56 - 2014-10-23 08:28 - 00000000 ____D () C:\inpa
2015-04-07 16:54 - 2014-10-23 08:29 - 00000000 ____D () C:\ediabas

==================== Files in the root of some directories =======

2014-07-19 14:11 - 2014-07-26 22:48 - 0007619 _____ () C:\Users\Konrad\AppData\Local\Resmon.ResmonCfg
2015-01-21 13:04 - 2015-01-21 13:04 - 0000000 _____ () C:\Users\Konrad\AppData\Local\{2B45C9B7-6412-4B12-B6D8-7C0A916EA1EF}
2015-01-22 13:04 - 2015-01-22 13:04 - 0000000 _____ () C:\Users\Konrad\AppData\Local\{C1B14A84-8906-4D9F-BC68-5E2042A82253}
2015-01-13 01:44 - 2015-01-13 01:44 - 0000000 _____ () C:\Users\Konrad\AppData\Local\{FA24BE11-2B75-401C-8464-23C4B7EA8F56}
2014-11-13 00:40 - 2014-11-13 00:40 - 0000118 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2013-12-17 00:57 - 2012-07-30 08:03 - 0000217 _____ () C:\ProgramData\SetStretch.cmd
2013-12-17 00:57 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2013-12-17 00:57 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-22 23:49

==================== End Of Log ============================