Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015
Ran by ADEX (administrator) on ADEX-WIN7 on 30-05-2015 18:57:51
Running from F:\Users\ADEX\Downloads\Programs
Loaded Profiles: ADEX (Available Profiles: ADEX)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) F:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) F:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) F:\Windows\System32\atieclxx.exe
(Kaspersky Lab ZAO) F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(cFos Software GmbH) F:\Program Files\ASRock\XFast LAN\spd.exe
(Infowatch) F:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Intel(R) Corporation) F:\Program Files\Intel\iCLS Client\HeciServer.exe
() F:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) F:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() F:\ProgramData\MobileBrServ\mbbService.exe
(Realtek Semiconductor) F:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) F:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(cFos Software GmbH) F:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(Microsoft Corporation) F:\Windows\System32\rundll32.exe
(Microsoft Corporation) F:\Windows\System32\rundll32.exe
(Kaspersky Lab ZAO) F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Creative Technology Ltd) F:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe
(Creative Technology Ltd) F:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
(Hewlett-Packard) F:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Advanced Micro Devices Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) F:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Macrovision Europe Ltd.) F:\Users\ADEX\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001
(Creative Labs) F:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
(ATI Technologies Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) F:\Program Files\CCleaner\CCleaner64.exe
() F:\Program Files\Wippien\Wippien.exe
(Mozilla Corporation) F:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) F:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => F:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [Wippien] => F:\Program Files\Wippien\Wippien.exe [3022632 2011-08-19] ()
HKLM\...\Run: [XFast LAN] => F:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [RunDLLEntry] => F:\Windows\system32\RunDLL32.exe F:\Windows\system32\AmbRunE.dll,RunDLLEntry
HKLM-x32\...\Run: [AVP] => F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-11-12] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [StartCCC] => F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => F:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CTSyncService] => F:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)
HKLM-x32\...\Run: [VolPanel] => F:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => F:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [GrooveMonitor] => F:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => F:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => F:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [TrayServer] => F:\Program Files (x86)\MAGIX\Movie_Edit_Pro_15_Plus_Download_version\TrayServer.exe
HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-15] (Valve Corporation)
HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\...\Run: [CCleaner Monitoring] => F:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\...\Run: [IDMan] => F:\Program Files (x86)\Internet Download Manager\IDMan.exe [3898960 2015-05-14] (Tonec Inc.)
HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\...\MountPoints2: {a6543df8-aa25-11e4-bab9-0c5b8f279a64} - E:\AutoRun.exe
HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> F:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [SPReview] => F:\Windows\System32\SPReview\SPReview.exe [301568 2015-02-02] (Microsoft Corporation)
Startup: F:\Users\ADEX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet Ink Adv 2060 K110.lnk [2015-03-16]
ShortcutTarget: Powiadomienia monitorowania tuszu - HP Deskjet Ink Adv 2060 K110.lnk -> F:\Program Files\HP\HP Deskjet Ink Adv 2060 K110\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => F:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2014-04-21] (Tonec Inc.)
ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll [2015-02-01] (Kaspersky Lab ZAO)
ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll [2015-02-01] (Kaspersky Lab ZAO)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> F:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-02-21] (Internet Download Manager, Tonec Inc.)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2015-02-01] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-01] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2015-02-01] (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2015-02-01] (Kaspersky Lab ZAO)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> F:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-02-21] (Internet Download Manager, Tonec Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> F:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2015-02-01] (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> F:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-01] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> F:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-18] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll [2015-02-01] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> F:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-18] (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll [2015-02-01] (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1

FireFox:
========
FF ProfilePath: F:\Users\ADEX\AppData\Roaming\Mozilla\Firefox\Profiles\j6canktk.default-1431684421509
FF Plugin: @adobe.com/FlashPlayer -> F:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-18] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> F:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-18] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> F:\Windows\SysWOW64\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> F:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> F:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> F:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> F:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com [2015-02-01]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com [2015-02-01]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com [2015-02-01]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com [2015-02-01]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com [2015-02-01]
FF HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - F:\Users\ADEX\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - F:\Users\ADEX\AppData\Roaming\IDM\idmmzcc5 [2015-05-30]
FF HKU\S-1-5-21-4209662531-3502238934-3140455397-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - F:\Users\ADEX\AppData\Roaming\IDM\idmmzcc5

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - F:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-04-02]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - F:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-04-02]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2013-11-12]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; F:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-11-12] (Kaspersky Lab ZAO)
R2 cFosSpeedS; F:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
S3 Creative ALchemy AL6 Licensing Service; F:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-02-02] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; F:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-02-02] (Creative Labs) [File not signed]
R2 CSObjectsSrv; F:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [818888 2013-09-25] (Infowatch)
R2 CTAudSvcService; F:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]
R2 ISCTAgent; F:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] ()
R2 jhi_service; F:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
R2 Mobile Broadband HL Service; F:\ProgramData\MobileBrServ\mbbservice.exe [237424 2014-03-31] () [File not signed]
R3 Sound Blaster X-Fi MB Licensing Service; F:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2015-02-02] (Creative Labs) [File not signed]
S3 TunngleService; F:\Program Files (x86)\Tunngle\TnglCtrl.exe [792016 2015-02-09] (Tunngle.net GmbH)
R2 WinDefend; F:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 CSCrySec; F:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; F:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R3 ISCT; F:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
R0 kl1; F:\Windows\System32\DRIVERS\kl1.sys [458336 2015-02-01] (Kaspersky Lab ZAO)
U5 klflt; F:\Windows\System32\Drivers\klflt.sys [92768 2015-02-01] (Kaspersky Lab ZAO)
R1 KLIF; F:\Windows\System32\DRIVERS\klif.sys [628288 2015-02-01] (Kaspersky Lab ZAO)
R1 KLIM6; F:\Windows\System32\DRIVERS\klim6.sys [29792 2015-02-01] (Kaspersky Lab ZAO)
R3 klkbdflt; F:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-11-12] (Kaspersky Lab ZAO)
R3 klmouflt; F:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-11-12] (Kaspersky Lab ZAO)
R1 kltdi; F:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-11-12] (Kaspersky Lab ZAO)
R1 kneps; F:\Windows\System32\DRIVERS\kneps.sys [177864 2015-02-19] (Kaspersky Lab ZAO)
R3 tap0901t; F:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 wod0205; F:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software)
R3 WPRO_41_2001; F:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2015-05-30] ()
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-30 18:40 - 2015-05-30 18:48 - 3866165248 _____ () F:\Users\ADEX\Downloads\WINDOWS 7 PL ALL RTM.iso
2015-05-30 13:37 - 2015-05-30 18:57 - 00000000 ____D () F:\FRST
2015-05-28 18:08 - 2015-05-30 15:27 - 00000000 ____D () F:\Users\ADEX\Desktop\mapa
2015-05-27 07:00 - 2015-05-30 16:17 - 00094656 _____ (CACE Technologies) F:\Windows\system32\WPRO_41_2001woem.tmp
2015-05-26 23:01 - 2015-05-26 23:01 - 00001026 _____ () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\CWK.lnk
2015-05-26 23:01 - 2015-05-26 23:01 - 00001014 _____ () F:\Users\Public\Desktop\CWK.lnk
2015-05-26 23:01 - 2015-05-26 23:01 - 00000000 ____D () F:\Program Files (x86)\CWK
2015-05-26 12:17 - 2015-05-26 12:17 - 00002138 _____ () F:\Users\Public\Desktop\Path of Exile.lnk
2015-05-26 12:17 - 2015-05-26 12:17 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grinding Gear Games
2015-05-26 12:17 - 2015-05-26 12:17 - 00000000 ____D () F:\Program Files (x86)\Grinding Gear Games
2015-05-25 17:03 - 2015-05-25 17:03 - 00000841 _____ () F:\Users\ADEX\Desktop\MediaCoder x64.lnk
2015-05-25 17:03 - 2015-05-25 17:03 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64
2015-05-25 17:03 - 2015-05-25 17:03 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\Mediatronic
2015-05-25 17:03 - 2015-05-25 17:03 - 00000000 ____D () F:\Program Files\MediaCoder
2015-05-25 12:49 - 2015-05-25 12:57 - 00000439 _____ () F:\Windows\system32\Drivers\etc\hosts.ics
2015-05-25 10:29 - 2015-05-25 10:30 - 00000000 ____D () F:\KVRT_Data
2015-05-25 10:29 - 2015-05-25 10:29 - 00457824 _____ (Kaspersky Lab ZAO) F:\Windows\system32\Drivers\EBC84D71.sys
2015-05-25 10:29 - 2015-05-25 00:47 - 111726752 _____ (Kaspersky Lab ZAO) F:\Users\ADEX\Desktop\KVRT.exe
2015-05-24 18:19 - 2015-05-24 18:19 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\MAGIX
2015-05-24 18:19 - 2015-05-24 18:19 - 00000000 ____D () F:\Users\ADEX\AppData\Local\Xara
2015-05-24 18:17 - 2015-05-24 18:17 - 00000000 ____D () F:\Users\ADEX\Documents\MAGIX_Speed2_burnR_mxcdr
2015-05-24 18:16 - 2015-05-24 18:34 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2015-05-24 18:16 - 2008-10-18 14:56 - 00643072 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLAV32.dll
2015-05-24 18:16 - 2008-10-18 14:56 - 00167936 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLDEV32.dll
2015-05-24 18:16 - 2008-10-18 14:56 - 00163840 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLDRV32.dll
2015-05-24 18:16 - 2008-10-18 14:56 - 00106496 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLCPY32.dll
2015-05-24 18:16 - 2008-10-18 14:56 - 00053248 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLIO32.dll
2015-05-24 18:16 - 2008-10-18 14:56 - 00049152 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLPRF32.dll
2015-05-24 18:16 - 2008-10-18 14:56 - 00040960 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLPNT32.dll
2015-05-24 18:16 - 2008-10-18 14:55 - 00233472 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLRES32.dll
2015-05-24 18:16 - 2008-10-18 14:55 - 00032768 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\STRING32.dll
2015-05-24 18:16 - 2008-04-08 18:48 - 00913408 _____ (MAGIX AG) F:\Windows\SysWOW64\MXRestore.exe
2015-05-24 18:16 - 2005-04-09 21:05 - 00027807 _____ () F:\Windows\SysWOW64\mgxcdr.txt
2015-05-24 18:16 - 2004-03-11 15:49 - 00014182 _____ () F:\Windows\SysWOW64\DLLAV32.lib
2015-05-24 18:16 - 2003-04-18 15:46 - 01233920 _____ (Microsoft Corporation) F:\Windows\SysWOW64\msxml4.dll
2015-05-24 18:16 - 2003-04-18 15:29 - 00082432 _____ (Microsoft Corporation) F:\Windows\SysWOW64\msxml4r.dll
2015-05-24 18:16 - 2003-04-18 15:29 - 00044544 _____ (Microsoft Corporation) F:\Windows\SysWOW64\msxml4a.dll
2015-05-24 18:16 - 2003-03-14 10:35 - 00040960 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLRD32.dll
2015-05-24 18:16 - 2003-03-14 10:33 - 00114688 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLCDA32.dll
2015-05-24 18:16 - 2003-03-14 10:33 - 00061440 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLCDF32.dll
2015-05-24 18:16 - 2003-03-14 10:33 - 00053248 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLPRJ32.dll
2015-05-24 18:16 - 2003-03-14 10:33 - 00045056 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLIMG32.dll
2015-05-24 18:16 - 2003-03-14 10:32 - 00065536 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLPTL32.dll
2015-05-24 18:16 - 2003-03-14 10:32 - 00057344 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLTPO32.dll
2015-05-24 18:16 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLMSC32.dll
2015-05-24 18:16 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLISO32.dll
2015-05-24 18:16 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLDIR32.dll
2015-05-24 18:16 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\TTIC32.dll
2015-05-24 18:16 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\TTI32.dll
2015-05-24 18:16 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) F:\Windows\SysWOW64\DLLIX.dll
2015-05-24 18:14 - 2015-05-24 18:19 - 00000000 ____D () F:\Users\ADEX\Documents\MAGIX_Movie_Edit_Pro_15_Plus_Download_version
2015-05-24 18:10 - 2007-04-27 09:43 - 00120200 _____ () F:\Windows\SysWOW64\DLLDEV32i.dll
2015-05-24 18:09 - 2015-05-24 19:29 - 00000000 ____D () F:\Windows\SysWOW64\MAGIX
2015-05-24 18:09 - 2015-05-24 18:19 - 00006211 _____ () F:\Windows\mgxoschk.ini
2015-05-24 18:09 - 2008-04-15 15:14 - 00700416 _____ (MAGIX AG) F:\Windows\SysWOW64\mgxoschk.dll
2015-05-24 18:07 - 2015-05-24 18:07 - 00000000 ____D () F:\Users\ADEX\AppData\Local\WinAVI
2015-05-24 17:28 - 2015-05-24 17:31 - 00000000 ____D () F:\Fraps
2015-05-24 17:28 - 2015-05-24 17:28 - 00000567 _____ () F:\Users\Public\Desktop\Fraps.lnk
2015-05-24 17:28 - 2015-05-24 17:28 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-05-22 19:23 - 2015-05-22 19:23 - 00000000 ____D () F:\Users\Public\Documents\DAEMON Tools Images
2015-05-20 22:25 - 2015-05-20 22:25 - 00001168 _____ () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-20 22:25 - 2015-05-20 22:25 - 00001156 _____ () F:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-20 22:25 - 2015-05-20 22:25 - 00000000 ____D () F:\Program Files (x86)\Mozilla Maintenance Service
2015-05-19 00:06 - 2015-05-20 22:25 - 00000000 ____D () F:\Program Files (x86)\Mozilla Firefox
2015-05-18 19:51 - 2015-05-18 19:51 - 00000000 ____D () F:\ProgramData\Sun
2015-05-18 19:50 - 2015-05-18 19:49 - 00097888 _____ (Oracle Corporation) F:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-05-18 19:49 - 2015-05-18 19:51 - 00000000 ____D () F:\ProgramData\Oracle
2015-05-18 19:49 - 2015-05-18 19:49 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-05-18 19:48 - 2015-05-18 19:48 - 00000000 ____D () F:\Program Files (x86)\Java
2015-05-18 19:21 - 2015-05-18 19:29 - 05009736 _____ (Adobe Systems Inc.) F:\Users\ADEX\Downloads\Shockwave_Installer_Slim.exe
2015-05-18 11:12 - 2015-05-18 23:07 - 701901509 _____ () F:\Users\ADEX\Downloads\tables_xp_free_fast.zip
2015-05-17 17:00 - 2015-05-17 17:00 - 00000692 _____ () F:\Users\ADEX\Desktop\Space Hulk Ascension.lnk
2015-05-17 17:00 - 2015-05-17 17:00 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\Full Control
2015-05-17 17:00 - 2015-05-17 17:00 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Space Hulk Ascension
2015-05-17 15:33 - 2015-05-25 12:38 - 00000000 ____D () F:\ProgramData\Tunngle
2015-05-15 12:51 - 2015-05-17 17:52 - 445644800 _____ () F:\Users\ADEX\Downloads\ophcrack-xp2-livecd-3.6.0.iso
2015-05-15 01:34 - 2015-05-30 18:49 - 00000000 ____D () F:\Program Files (x86)\UltraISO
2015-05-14 23:02 - 2015-05-14 23:02 - 00049854 _____ () F:\Users\ADEX\Downloads\download.htm
2015-05-14 13:21 - 2015-05-30 18:51 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\IDM
2015-05-14 13:21 - 2015-05-14 13:21 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-05-14 13:21 - 2015-05-14 13:21 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-05-14 13:21 - 2015-05-14 13:21 - 00000000 ____D () F:\Program Files (x86)\Internet Download Manager
2015-05-14 12:59 - 2015-05-14 13:07 - 00000000 ____D () F:\Users\ADEX\Downloads\Internet Download Manager (IDM) v6.23 build 10 Incl Crack [TorDigger]
2015-05-14 12:10 - 2015-05-14 12:10 - 00003324 _____ () F:\Windows\System32\Tasks\{DDC7BD04-A479-498D-96B8-0FDEF88ED3ED}
2015-05-14 12:10 - 2015-05-14 12:10 - 00003324 _____ () F:\Windows\System32\Tasks\{C127DA8E-AE6B-40FE-9BBA-456CCA65DF4B}
2015-05-13 22:08 - 2015-05-13 22:08 - 00000000 ____D () F:\Users\ADEX\AppData\Local\CrashRpt
2015-05-13 21:47 - 2015-05-13 21:47 - 00068580 _____ () F:\Users\ADEX\Documents\cc_20150513_214740.reg
2015-05-13 15:46 - 2015-05-13 15:46 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\MPC-HC
2015-05-13 15:45 - 2015-05-13 15:45 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack
2015-05-13 15:45 - 2015-05-13 15:45 - 00000000 ____D () F:\Program Files (x86)\Combined Community Codec Pack
2015-05-13 15:29 - 2015-05-13 15:37 - 28628688 _____ (Lazesoft ) F:\Users\ADEX\Downloads\lsrshsetup.exe
2015-05-13 15:28 - 2015-05-13 15:28 - 00000085 _____ () F:\Windows\wininit.ini
2015-05-13 15:26 - 2015-05-13 15:26 - 00000000 __SHD () F:\Users\ADEX\AppData\Local\EmieUserList
2015-05-13 15:26 - 2015-05-13 15:26 - 00000000 __SHD () F:\Users\ADEX\AppData\Local\EmieSiteList
2015-05-13 15:26 - 2015-05-13 15:26 - 00000000 __SHD () F:\Users\ADEX\AppData\Local\EmieBrowserModeList
2015-05-12 15:42 - 2015-05-12 18:09 - 00000000 ____D () F:\Users\ADEX\AppData\Local\Ori and the Blind Forest
2015-05-11 23:32 - 2015-05-26 20:39 - 00000000 ____D () F:\Users\ADEX\AppData\Local\GrowHome
2015-05-11 23:30 - 2015-05-11 23:30 - 00001420 _____ () F:\Users\ADEX\Desktop\GrowHome — skrót.lnk
2015-05-11 23:28 - 2015-05-11 23:28 - 00000812 _____ () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grow Home.lnk
2015-05-11 23:28 - 2015-05-11 23:28 - 00000000 ____D () F:\Program Files (x86)\Grow Home
2015-05-11 23:00 - 2015-05-26 13:52 - 00000000 ____D () F:\Users\ADEX\Desktop\nowe gry
2015-05-10 10:04 - 2015-05-10 10:04 - 00001169 _____ () F:\Users\ADEX\Desktop\Pobrane — skrót.lnk
2015-05-10 01:21 - 2014-08-04 22:05 - 40345268 _____ () F:\Users\ADEX\Desktop\Noragami Full Opening HD With Download Link Goya no Machiawase By Hello Sleepwalkers.mp4
2015-05-09 22:39 - 2015-05-09 22:39 - 00000000 ____D () F:\Windows\System32\Tasks\Safer-Networking
2015-05-09 22:10 - 2015-05-09 22:12 - 46525608 _____ (Safer-Networking Ltd. ) F:\Users\ADEX\Downloads\spybot-2.4.exe
2015-05-08 15:13 - 2015-05-08 15:13 - 00000000 ____D () F:\Users\ADEX\Tracing
2015-05-08 14:36 - 2015-05-16 11:25 - 00007622 _____ () F:\Users\ADEX\AppData\Local\Resmon.ResmonCfg

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-30 18:54 - 2015-02-01 15:42 - 01547140 _____ () F:\Windows\WindowsUpdate.log
2015-05-30 18:51 - 2015-02-05 19:08 - 00000000 ____D () F:\Program Files (x86)\Steam
2015-05-30 18:50 - 2015-02-08 18:36 - 00000000 ____D () F:\Users\ADEX\AppData\Local\CrashDumps
2015-05-30 18:12 - 2015-02-05 18:49 - 00000930 _____ () F:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-30 17:02 - 2015-02-01 16:08 - 00000000 ____D () F:\ProgramData\Kaspersky Lab
2015-05-30 16:24 - 2009-07-14 06:45 - 00017168 ____H () F:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-30 16:24 - 2009-07-14 06:45 - 00017168 ____H () F:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-30 16:17 - 2015-02-02 17:00 - 00034752 _____ () F:\Windows\system32\Drivers\WPRO_41_2001.sys
2015-05-30 16:17 - 2009-07-14 07:08 - 00000006 ____H () F:\Windows\Tasks\SA.DAT
2015-05-30 15:14 - 2015-03-03 21:56 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\DMCache
2015-05-29 22:01 - 2015-03-03 21:56 - 00000000 ____D () F:\Users\ADEX\Downloads\Video
2015-05-29 19:57 - 2015-02-01 22:20 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\TS3Client
2015-05-28 20:08 - 2009-07-14 19:55 - 00740098 _____ () F:\Windows\system32\perfh015.dat
2015-05-28 20:08 - 2009-07-14 19:55 - 00155672 _____ () F:\Windows\system32\perfc015.dat
2015-05-28 20:08 - 2009-07-14 07:13 - 01669190 _____ () F:\Windows\system32\PerfStringBackup.INI
2015-05-27 23:00 - 2015-02-04 18:05 - 00000000 ____D () F:\WOT
2015-05-27 17:04 - 2015-02-02 18:05 - 00000000 ____D () F:\Program Files (x86)\HEX
2015-05-27 07:04 - 2015-03-16 16:52 - 00000000 ____D () F:\Users\ADEX\Desktop\Drukarka i skany
2015-05-26 12:26 - 2015-03-09 13:06 - 00000000 ____D () F:\Users\ADEX\Documents\My Games
2015-05-25 12:53 - 2009-07-14 05:20 - 00000000 ____D () F:\Windows\system32\NDF
2015-05-25 12:25 - 2015-02-01 17:23 - 00000000 ____D () F:\ProgramData\MobileBrServ
2015-05-25 10:24 - 2015-02-01 16:08 - 00124576 _____ () F:\Users\ADEX\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-25 10:23 - 2009-07-14 06:45 - 00440360 _____ () F:\Windows\system32\FNTCACHE.DAT
2015-05-24 18:05 - 2009-07-14 20:09 - 00000000 ___RD () F:\Users\Public\Recorded TV
2015-05-22 19:28 - 2015-02-01 23:06 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-05-20 23:06 - 2015-03-03 21:56 - 00000000 ____D () F:\Users\ADEX\Downloads\Compressed
2015-05-20 21:56 - 2009-07-14 07:08 - 00032592 _____ () F:\Windows\Tasks\SCHEDLGU.TXT
2015-05-20 21:24 - 2015-02-05 21:11 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\uTorrent
2015-05-20 21:24 - 2015-02-01 23:03 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\DAEMON Tools Lite
2015-05-18 19:33 - 2015-02-05 18:49 - 00003868 _____ () F:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-05-18 19:33 - 2015-02-03 22:32 - 00000000 ____D () F:\Users\ADEX\AppData\Local\Adobe
2015-05-18 19:32 - 2015-02-05 18:49 - 00778416 _____ (Adobe Systems Incorporated) F:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-18 19:32 - 2015-02-05 18:49 - 00142512 _____ (Adobe Systems Incorporated) F:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-17 15:33 - 2015-02-06 21:47 - 00001000 _____ () F:\Users\Public\Desktop\Tunngle.lnk
2015-05-17 15:33 - 2015-02-06 21:47 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\Tunngle
2015-05-17 15:33 - 2015-02-06 21:47 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle
2015-05-17 15:33 - 2015-02-06 21:47 - 00000000 ____D () F:\Program Files (x86)\Tunngle
2015-05-17 15:28 - 2015-02-01 16:05 - 00000000 ____D () F:\Users\ADEX\AppData\Local\VirtualStore
2015-05-15 12:13 - 2015-03-16 16:13 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\HpUpdate
2015-05-14 13:21 - 2015-03-03 21:56 - 00001018 _____ () F:\Users\ADEX\Desktop\Internet Download Manager.lnk
2015-05-10 10:04 - 2015-02-01 16:05 - 00000000 ____D () F:\Users\ADEX
2015-05-08 22:39 - 2015-02-03 20:17 - 00000000 ____D () F:\Users\ADEX\AppData\Roaming\Skype
2015-05-08 15:13 - 2015-02-03 20:17 - 00000000 ___RD () F:\Program Files (x86)\Skype
2015-05-08 15:12 - 2015-02-03 20:17 - 00000000 ____D () F:\ProgramData\Skype
2015-05-08 11:40 - 2015-03-17 14:26 - 00000542 _____ () F:\Users\ADEX\Desktop\Graciarnia (D).lnk

==================== Files in the root of some directories =======

2015-05-08 14:36 - 2015-05-16 11:25 - 0007622 _____ () F:\Users\ADEX\AppData\Local\Resmon.ResmonCfg
2015-02-02 17:02 - 2015-02-02 17:02 - 0000003 _____ () F:\Users\ADEX\AppData\Local\user_data.ini
2015-03-16 16:13 - 2015-03-16 16:13 - 0000057 _____ () F:\ProgramData\Ament.ini

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

F:\Windows\System32\winlogon.exe => File is digitally signed
F:\Windows\System32\wininit.exe => File is digitally signed
F:\Windows\SysWOW64\wininit.exe => File is digitally signed
F:\Windows\explorer.exe => File is digitally signed
F:\Windows\SysWOW64\explorer.exe => File is digitally signed
F:\Windows\System32\svchost.exe => File is digitally signed
F:\Windows\SysWOW64\svchost.exe => File is digitally signed
F:\Windows\System32\services.exe => File is digitally signed
F:\Windows\System32\User32.dll => File is digitally signed
F:\Windows\SysWOW64\User32.dll => File is digitally signed
F:\Windows\System32\userinit.exe => File is digitally signed
F:\Windows\SysWOW64\userinit.exe => File is digitally signed
F:\Windows\System32\rpcss.dll => File is digitally signed
F:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-30 11:50

==================== End of log ============================