Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-05-2015
Ran by Pawel (administrator) on ACER on 06-05-2015 16:14:32
Running from C:\Users\Pawel\Desktop\logi
Loaded Profiles: Pawel (Available profiles: Pawel)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(BitTorrent Inc.) C:\Users\Pawel\AppData\Roaming\uTorrent\uTorrent.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Tonec Inc.) C:\Users\Pawel\AppData\Roaming\Adobe\Flash Player\Cache\IDMGrHlp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1426136 2015-04-21] (COMODO)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-06-09] (Intel Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-04-01] (LogMeIn Inc.)
HKU\S-1-5-21-1842237910-1240745531-855619827-1000\...\Run: [AdobeFlashPlayer] => wscript "C:\Users\Pawel\AppData\Roaming\Adobe\Flash Player\Cache\IDMcache.vbs" "C:\Users\Pawel\AppData\Roaming\Adobe\Flash Player\Cache\IDMcache.bat"
HKU\S-1-5-21-1842237910-1240745531-855619827-1000\...\Run: [uTorrent] => C:\Users\Pawel\AppData\Roaming\uTorrent\uTorrent.exe [1694560 2015-05-06] (BitTorrent Inc.)
HKU\S-1-5-21-1842237910-1240745531-855619827-1000\...\MountPoints2: G - G:\SETUP.EXE
HKU\S-1-5-21-1842237910-1240745531-855619827-1000\...\MountPoints2: {2a7eda88-ec9b-11e4-9d6c-f8a96374dee4} - G:\LGAutoRun.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1842237910-1240745531-855619827-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-12] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-08] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-08] (Oracle Corporation)
Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{32159699-467E-4006-A0FC-40632A655A30}: [NameServer] 156.154.70.25,156.154.71.25
Tcpip\..\Interfaces\{9E57A482-564F-4207-9EA7-FCF94B04265F}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\Pawel\AppData\Roaming\Mozilla\Firefox\Profiles\dyyjxyj7.default
FF Homepage: google.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-08] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\Pawel\AppData\Roaming\Mozilla\Firefox\Profiles\dyyjxyj7.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-01-16]
FF Extension: MEGA - C:\Users\Pawel\AppData\Roaming\Mozilla\Firefox\Profiles\dyyjxyj7.default\Extensions\firefox@mega.co.nz.xpi [2015-02-19]
FF Extension: Google Translator for Firefox - C:\Users\Pawel\AppData\Roaming\Mozilla\Firefox\Profiles\dyyjxyj7.default\Extensions\translator@zoli.bod.xpi [2015-01-06]
FF Extension: Adblock Plus - C:\Users\Pawel\AppData\Roaming\Mozilla\Firefox\Profiles\dyyjxyj7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-06]

Chrome: 
=======
CHR StartupUrls: Default -> "https://www.google.pl/"
CHR Profile: C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-29]
CHR Extension: (Google Docs) - C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-29]
CHR Extension: (Google Drive) - C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-29]
CHR Extension: (YouTube) - C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-29]
CHR Extension: (Google Search) - C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-29]
CHR Extension: (Google Sheets) - C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-29]
CHR Extension: (Google Wallet) - C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-29]
CHR Extension: (Gmail) - C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5540424 2015-04-21] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265816 2015-04-21] (COMODO)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2015-01-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2015-01-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-04-01] (LogMeIn, Inc.)
S3 MatSvc; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [343856 2015-01-15] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20696 2015-04-01] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [797280 2015-04-01] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [45880 2015-04-01] (COMODO)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-01-06] (Disc Soft Ltd)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2015-01-11] (Sony Mobile Communications)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [104608 2015-04-01] (COMODO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2015-01-17] (OpenLibSys.org)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-03 19:18 - 2015-05-06 16:06 - 00001176 _____ () C:\Windows\setupact.log
2015-05-03 19:18 - 2015-05-03 19:18 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-01 14:17 - 2015-05-01 14:14 - 00196610 _____ () C:\Users\Pawel\Desktop\WER-45318-0.sysdata.xml
2015-05-01 14:15 - 2015-05-01 14:13 - 00281104 _____ () C:\Users\Pawel\Desktop\050115-14726-01.dmp
2015-05-01 14:13 - 2015-05-03 19:09 - 00000000 ____D () C:\Windows\Minidump
2015-05-01 14:03 - 2015-05-06 16:14 - 00000000 ____D () C:\FRST
2015-04-27 14:43 - 2015-04-27 14:43 - 00000000 ____D () C:\rsit
2015-04-27 14:43 - 2015-04-27 14:43 - 00000000 ____D () C:\Program Files\trend micro
2015-04-27 14:17 - 2015-05-06 16:14 - 00000000 ___RD () C:\Users\Pawel\Desktop\logi
2015-04-26 22:14 - 2015-04-26 22:14 - 02224640 _____ () C:\Users\Pawel\Downloads\adwcleaner_4.202.exe
2015-04-23 15:59 - 2015-04-23 15:59 - 00001039 _____ () C:\Users\Pawel\Downloads\vold.fstab(1).zip
2015-04-23 15:20 - 2015-04-29 20:06 - 00000000 ____D () C:\Users\Pawel\Documents\Outlook Files
2015-04-22 15:18 - 2015-04-22 15:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 21:16 - 2015-04-20 21:16 - 00000000 _____ () C:\Users\Pawel\AppData\Local\{D12F92A0-D7CB-4C5A-A0DA-E734620B7C2A}
2015-04-19 13:23 - 2015-04-23 16:00 - 00001798 _____ () C:\Users\Pawel\Desktop\vold.fstab
2015-04-19 13:23 - 2015-04-19 13:23 - 00001039 _____ () C:\Users\Pawel\Downloads\vold.fstab.zip
2015-04-19 13:19 - 2015-04-19 13:19 - 00000000 ____D () C:\Users\Pawel\.android
2015-04-19 13:15 - 2015-04-19 13:15 - 00001074 _____ () C:\Users\Pawel\Desktop\UnlockRoot Pro.lnk
2015-04-19 13:15 - 2015-04-19 13:15 - 00000000 ____D () C:\Users\Pawel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnlockRoot Pro
2015-04-19 13:12 - 2015-04-19 13:15 - 00000000 ____D () C:\Program Files (x86)\Unlockroot Pro
2015-04-19 12:56 - 2015-04-19 12:59 - 40975350 _____ () C:\Users\Pawel\Downloads\Unlock.Root.Pro.v4.1.2.Incl.Serial-P2P.zip
2015-04-14 19:49 - 2015-04-14 19:49 - 05344528 _____ (Piriform Ltd) C:\Users\Pawel\Downloads\ccsetup504.exe
2015-04-13 17:05 - 2015-04-13 17:07 - 00000000 ____D () C:\Users\Pawel\Desktop\Nowy folder (2)
2015-04-12 11:47 - 2015-04-12 11:47 - 00000000 ____D () C:\Users\Pawel\Desktop\Nowy folder

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-06 16:18 - 2015-01-07 17:34 - 00000000 ____D () C:\Users\Pawel\AppData\Roaming\uTorrent
2015-05-06 16:16 - 2015-01-14 23:09 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2015-05-06 16:14 - 2015-01-17 15:26 - 06056942 _____ () C:\Windows\system32\Drivers\fvstore.dat
2015-05-06 16:14 - 2009-07-14 06:45 - 00021264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-06 16:14 - 2009-07-14 06:45 - 00021264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-06 16:10 - 2015-02-07 14:30 - 01628641 _____ () C:\Windows\WindowsUpdate.log
2015-05-06 16:07 - 2015-03-29 13:28 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-06 16:07 - 2015-01-07 18:16 - 00000000 ____D () C:\Users\Pawel\AppData\Local\LogMeIn Hamachi
2015-05-06 16:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-06 15:36 - 2011-02-04 19:20 - 00859468 _____ () C:\Windows\system32\perfh015.dat
2015-05-06 15:36 - 2011-02-04 19:20 - 00213434 _____ () C:\Windows\system32\perfc015.dat
2015-05-06 15:36 - 2009-07-14 07:13 - 01845740 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-06 15:33 - 2015-03-29 13:28 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-06 15:04 - 2015-01-20 22:47 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-05 17:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-05 17:16 - 2015-01-07 18:04 - 00000000 ____D () C:\Users\Pawel\AppData\Roaming\AIMP3
2015-05-03 19:56 - 2015-03-13 18:38 - 00007625 _____ () C:\Users\Pawel\AppData\Local\resmon.resmoncfg
2015-04-30 19:35 - 2015-03-29 13:29 - 00002189 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-29 20:52 - 2015-01-07 21:50 - 00000000 ____D () C:\Users\Pawel\AppData\Roaming\.minecraft
2015-04-28 16:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-04-27 21:16 - 2015-01-09 19:07 - 00000000 ____D () C:\AdwCleaner
2015-04-25 21:25 - 2015-01-06 22:47 - 00000000 ___HD () C:\Users\Pawel\Documents\Dokumenty tekstowe
2015-04-22 17:59 - 2015-01-06 18:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-21 16:00 - 2015-01-14 23:09 - 00001985 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2015-04-19 18:52 - 2015-01-10 16:28 - 00000000 ____D () C:\Users\Pawel\Documents\FIFA 12
2015-04-19 13:59 - 2015-01-11 22:21 - 00000000 ____D () C:\Program Files (x86)\Sony Mobile
2015-04-19 13:54 - 2015-01-11 22:18 - 00002026 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-04-19 13:54 - 2015-01-11 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-04-19 13:54 - 2015-01-06 18:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-19 13:19 - 2015-01-06 16:57 - 00000000 ____D () C:\Users\Pawel
2015-04-19 13:12 - 2014-02-16 22:04 - 39816729 _____ () C:\Users\Pawel\AppData\Roaming\unlockrootpro4setup.exe
2015-04-15 19:05 - 2015-01-20 22:47 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 19:05 - 2015-01-06 19:06 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 19:05 - 2015-01-06 19:06 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 12:47 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-14 19:49 - 2015-01-06 23:02 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-04-14 19:49 - 2015-01-06 23:02 - 00000000 ____D () C:\Program Files\CCleaner
2015-04-13 20:23 - 2015-01-10 11:04 - 00000000 ____D () C:\Users\Pawel\Desktop\audio

==================== Files in the root of some directories =======

2014-02-16 22:04 - 2015-04-19 13:12 - 39816729 _____ () C:\Users\Pawel\AppData\Roaming\unlockrootpro4setup.exe
2015-01-20 23:00 - 2015-03-06 22:48 - 0000346 ___SH () C:\Users\Pawel\AppData\Local\70149b02515b3bb20dd492.47983420
2015-03-16 21:56 - 2015-03-16 22:07 - 0115252 _____ () C:\Users\Pawel\AppData\Local\HWVendorDetection.log
2015-03-13 18:38 - 2015-05-03 19:56 - 0007625 _____ () C:\Users\Pawel\AppData\Local\resmon.resmoncfg
2015-04-20 21:16 - 2015-04-20 21:16 - 0000000 _____ () C:\Users\Pawel\AppData\Local\{D12F92A0-D7CB-4C5A-A0DA-E734620B7C2A}
2015-01-06 18:14 - 2015-01-06 18:14 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-04 10:32

==================== End Of Log ============================