Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:11-07-2015
Ran by vardum (administrator) on RADEK on 12-07-2015 10:36:34
Running from C:\Users\vardum
Loaded Profiles: vardum (Available Profiles: vardum & Gość Abdul & Gość)
Platform: Windows 8.1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\MyPublicWiFi\PublicWiFiService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}] => "C:\ProgramData\cisDBA0.exe" --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82}
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998088 2015-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => "D:\AvastUI.exe" /nogui
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3730344 2015-06-30] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] (Atheros Communications)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-243523140-4293928431-1894977795-1001\...\Run: [uTorrent] => C:\Users\Gość\AppData\Roaming\uTorrent\uTorrent.exe [1994592 2015-06-30] (BitTorrent Inc.)
HKU\S-1-5-21-243523140-4293928431-1894977795-1001\...\MountPoints2: {032a2531-6b0a-11e4-bed4-ac220b0e057e} - "F:\AutoRun.exe" 
HKU\S-1-5-21-243523140-4293928431-1894977795-1001\...\MountPoints2: {d928f5f9-5b8a-11e4-becd-240a6425b364} - "F:\HTC_Sync_Manager_PC.exe" 
Startup: C:\Users\vardum\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2014-08-25]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\ashShA64.dll [2013-11-17] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
BHO: avast! Online Security -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> D:\aswWebRepIE64.dll [2013-11-17] (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-10] (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-03-27] (Qualcomm Atheros Commnucations)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-04] (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-10] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-10] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\aswWebRepIE.dll [2013-11-17] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-04] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-10] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\aswWebRepIE64.dll [2013-11-17] (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-04] (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\aswWebRepIE.dll [2013-11-17] (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-04] (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{3B6E1E22-3C54-46BC-9833-531C2B37BE5A}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{6F0576CE-2100-4FB2-BAA0-5EE01A5970A5}: [DhcpNameServer] 8.8.8.8

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-10] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-10] (Oracle Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-10] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-13] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-16]
CHR Extension: (Google Drive) - C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-16]
CHR Extension: (YouTube) - C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-16]
CHR Extension: (Google Search) - C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-16]
CHR Extension: (AdBlock) - C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-26]
CHR Extension: (Avast Online Security) - C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-11-21]
CHR Extension: (Google Wallet) - C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-16]
CHR Extension: (Gmail) - C:\Users\vardum\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-16]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\WebRep\Chrome\aswWebRepChrome.crx [2013-11-17]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R3 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed]
R3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations) [File not signed]
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3518376 2015-06-30] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [314304 2015-06-30] (AVG Technologies CZ, s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2014\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
R3 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MyPublicWiFiService; C:\Program Files (x86)\MyPublicWiFi\PublicWiFiService.exe [756224 2013-04-03] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-03-06] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2253112 2015-06-25] (AVG)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2015-06-25] (AVG)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [35640 2015-06-25] (AVG)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R3 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-03-27] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-17] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-17] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-17] ()
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21152 2015-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [293296 2015-06-26] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253408 2015-05-12] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [259040 2015-06-16] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [226784 2015-06-10] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [295400 2015-06-15] (AVG Technologies CZ, s.r.o.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R1 ndiskhaz; C:\Windows\system32\DRIVERS\ndiskhaz.sys [30536 2012-12-07] (Khalil Azzouzi)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [31144 2015-06-04] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
U4 CmdAgent; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-12 10:36 - 2015-07-12 10:36 - 00020186 _____ C:\Users\vardum\FRST.txt
2015-07-12 10:34 - 2015-07-12 10:34 - 02130944 _____ (Farbar) C:\Users\vardum\FRST64.exe
2015-07-12 10:29 - 2015-07-12 10:33 - 00000000 ____D C:\Users\vardum\Desktop\Nowy folder
2015-07-11 23:15 - 2015-07-11 23:15 - 00066995 _____ C:\Users\vardum\Downloads\Shortcut.txt
2015-07-11 22:58 - 2015-07-11 22:58 - 00000000 ____D C:\Users\vardum\Downloads\FRST-OlderVersion
2015-07-11 22:52 - 2015-07-11 22:52 - 00012660 _____ C:\Users\vardum\Desktop\AdwCleaner[S0].txt
2015-07-11 14:20 - 2015-07-11 14:20 - 00000046 _____ C:\WINDOWS\wininit.ini
2015-07-11 14:12 - 2015-07-11 14:12 - 00000416 _____ C:\WINDOWS\Tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}.job
2015-07-11 14:08 - 2015-07-11 14:08 - 00000000 ____D C:\ProgramData\Comodo Downloader
2015-07-10 22:21 - 2015-07-10 22:26 - 00055708 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2015-07-10 22:21 - 2015-07-10 22:21 - 00000000 ___HD C:\VTRoot
2015-07-10 22:18 - 2015-07-10 22:18 - 00000000 ____D C:\ProgramData\Shared Space
2015-07-10 22:14 - 2015-07-11 14:22 - 00000000 ____D C:\Users\vardum\AppData\Local\Comodo
2015-07-10 22:14 - 2015-07-11 14:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2015-07-10 22:14 - 2015-07-11 14:21 - 00000000 ____D C:\Program Files\COMODO
2015-07-10 22:11 - 2015-07-10 22:19 - 00000000 ____D C:\ProgramData\Comodo
2015-07-10 21:44 - 2015-07-10 21:43 - 226607624 _____ (COMODO) C:\Users\vardum\Downloads\cfw_installer.exe
2015-07-10 21:32 - 2015-07-10 21:32 - 00380416 _____ C:\Users\vardum\Downloads\i8k9svef.exe
2015-07-10 21:16 - 2015-07-10 21:16 - 01122679 _____ C:\Users\vardum\Downloads\Comodo-Personal-Firewall(20399)-dp.jse
2015-07-10 20:45 - 2015-07-10 20:45 - 00177728 _____ C:\Users\vardum\Downloads\OTL.Txt
2015-07-10 20:01 - 2015-07-11 23:10 - 00036206 _____ C:\Users\vardum\Downloads\FRST.txt
2015-07-10 20:00 - 2015-07-12 10:36 - 00000000 ____D C:\FRST
2015-07-10 19:51 - 2015-07-10 19:51 - 00602112 _____ (OldTimer Tools) C:\Users\vardum\Downloads\OTL.exe
2015-07-10 19:36 - 2015-07-10 20:56 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-07-10 19:36 - 2015-07-10 19:36 - 00001116 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-07-10 19:36 - 2015-07-10 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-07-10 19:36 - 2015-07-10 19:36 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-10 19:36 - 2015-07-10 19:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-07-10 19:36 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-07-10 19:36 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-07-10 19:36 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-07-10 19:31 - 2015-07-10 19:34 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\vardum\Downloads\mbam-setup-2.1.8.1057.exe
2015-07-10 19:30 - 2015-07-11 22:42 - 00000000 ____D C:\AdwCleaner
2015-07-10 19:28 - 2015-07-10 19:28 - 02248704 _____ C:\Users\vardum\Downloads\AdwCleaner_www.INSTALKI.pl.exe
2015-07-10 12:59 - 2015-07-10 12:59 - 00450287 _____ C:\Users\Gość\Downloads\Kosiarz - PRACHETT TERRY.txt
2015-07-07 22:54 - 2015-07-07 22:58 - 52986677 _____ C:\Users\Gość Abdul\Downloads\Pratchett Terry - Swiat Dysku.rar
2015-07-07 21:01 - 2015-07-07 21:01 - 00000000 ____D C:\Users\Gość Abdul\Documents\Bluetooth Folder
2015-07-07 21:01 - 2015-07-07 21:01 - 00000000 ____D C:\Users\Gość Abdul\AppData\Local\BMExplorer
2015-07-05 22:15 - 2015-07-05 22:48 - 155834672 _____ (Apple Inc.) C:\Users\Gość\Downloads\itunes6464setup.exe
2015-07-05 18:12 - 2015-07-05 18:12 - 01996112 _____ (BitTorrent Inc.) C:\Users\vardum\Downloads\uTorrent.exe
2015-07-04 12:28 - 2015-07-12 10:35 - 01080519 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-04 12:27 - 2015-07-11 23:01 - 00001325 _____ C:\WINDOWS\setupact.log
2015-07-04 12:27 - 2015-07-11 22:44 - 00011780 _____ C:\WINDOWS\PFRO.log
2015-07-04 12:27 - 2015-07-04 12:27 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-03 13:42 - 2015-06-25 08:05 - 00042808 _____ (AVG) C:\WINDOWS\system32\uxtuneup.dll
2015-07-03 13:42 - 2015-06-25 08:05 - 00035640 _____ (AVG) C:\WINDOWS\SysWOW64\uxtuneup.dll
2015-07-03 13:42 - 2015-06-25 08:05 - 00029496 _____ (AVG) C:\WINDOWS\system32\authuitu.dll
2015-07-03 13:42 - 2015-06-25 08:05 - 00025400 _____ (AVG) C:\WINDOWS\SysWOW64\authuitu.dll
2015-06-30 21:31 - 2015-06-30 21:31 - 00000997 _____ C:\Users\Public\Desktop\MyPublicWiFi.lnk
2015-06-30 21:31 - 2015-06-30 21:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPublicWiFi
2015-06-30 21:31 - 2015-06-30 21:31 - 00000000 ____D C:\Program Files (x86)\MyPublicWiFi
2015-06-30 21:31 - 2012-12-07 10:28 - 00030536 _____ (Khalil Azzouzi) C:\WINDOWS\system32\Drivers\ndiskhaz.sys
2015-06-30 21:04 - 2015-06-30 21:04 - 00001227 _____ C:\Users\vardum\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-06-26 09:49 - 2015-06-26 09:49 - 00293296 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsdrivera.sys
2015-06-25 14:54 - 2015-06-25 14:55 - 01143096 _____ (TRUE Software ) C:\Users\Gość\Downloads\MyPublicWiFi.exe
2015-06-17 15:08 - 2015-06-24 09:39 - 00000000 ____D C:\Users\Gość Abdul\AppData\Local\AVG
2015-06-17 15:08 - 2015-06-17 15:08 - 00000000 ____D C:\Users\Gość Abdul\AppData\Roaming\AVG
2015-06-17 14:29 - 2015-07-08 07:47 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-243523140-4293928431-1894977795-1005
2015-06-17 14:25 - 2015-06-17 14:25 - 00000000 ____D C:\Users\Gość Abdul\AppData\Roaming\AVG2015
2015-06-17 14:24 - 2015-07-08 07:43 - 00000000 ____D C:\Users\Gość Abdul\AppData\Local\Google
2015-06-17 14:24 - 2015-07-07 14:05 - 00000000 ____D C:\Users\Gość Abdul\AppData\Local\VirtualStore
2015-06-17 14:24 - 2015-07-07 13:48 - 00002283 _____ C:\Users\Gość Abdul\Desktop\Google Chrome.lnk
2015-06-17 14:24 - 2015-06-17 14:26 - 00000000 ____D C:\Users\Gość Abdul\AppData\Local\Packages
2015-06-17 14:24 - 2015-06-17 14:24 - 00001452 _____ C:\Users\Gość Abdul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-17 14:24 - 2015-06-17 14:24 - 00000020 ___SH C:\Users\Gość Abdul\ntuser.ini
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\Ustawienia lokalne
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\Szablony
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\Moje dokumenty
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\Menu Start
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\Documents\Moje wideo
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\Documents\Moje obrazy
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\Documents\Moja muzyka
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\Dane aplikacji
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\AppData\Local\Historia
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 _SHDL C:\Users\Gość Abdul\AppData\Local\Dane aplikacji
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 ____D C:\Users\Gość Abdul\AppData\Roaming\Atheros
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 ____D C:\Users\Gość Abdul\AppData\Roaming\Adobe
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 ____D C:\Users\Gość Abdul\AppData\Local\Avg2015
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 ____D C:\Users\Gość Abdul\AppData\Local\ASUS
2015-06-17 14:24 - 2015-06-17 14:24 - 00000000 ____D C:\Users\Gość Abdul
2015-06-17 14:24 - 2015-05-13 16:23 - 00000000 ___RD C:\Users\Gość Abdul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-17 14:24 - 2015-05-13 16:23 - 00000000 ___RD C:\Users\Gość Abdul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-17 14:24 - 2015-05-13 16:23 - 00000000 ___RD C:\Users\Gość Abdul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-17 14:24 - 2014-05-11 20:06 - 00000000 ____D C:\Users\Gość Abdul\AppData\Roaming\TuneUp Software
2015-06-17 14:24 - 2014-05-11 20:06 - 00000000 ____D C:\Users\Gość Abdul\AppData\Roaming\ASUS WebStorage
2015-06-17 14:24 - 2014-03-18 11:58 - 00000369 _____ C:\Users\Gość Abdul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-06-17 14:24 - 2014-03-18 11:58 - 00000369 _____ C:\Users\Gość Abdul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-06-17 14:24 - 2013-08-22 17:36 - 00000000 ____D C:\Users\Gość Abdul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-06-17 12:28 - 2015-06-17 12:28 - 00000000 ____D C:\Program Files\Common Files\AV
2015-06-17 12:19 - 2015-06-17 12:19 - 00000000 ____D C:\Users\vardum\AppData\Local\GWX
2015-06-16 16:57 - 2015-06-16 16:57 - 00000000 ____D C:\Users\Gość\AppData\Local\GWX
2015-06-16 15:55 - 2015-06-16 15:55 - 00259040 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgldx64.sys
2015-06-15 23:58 - 2015-06-15 23:58 - 00295400 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgwfpa.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-12 10:36 - 2014-05-11 19:58 - 00000000 ____D C:\Users\vardum
2015-07-12 10:36 - 2013-09-16 22:40 - 00001068 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-12 10:35 - 2013-10-20 19:17 - 00000330 _____ C:\WINDOWS\Tasks\WpsUpdateTask_vardum.job
2015-07-12 10:30 - 2013-11-25 09:05 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-243523140-4293928431-1894977795-1001
2015-07-12 10:28 - 2013-12-14 15:04 - 00000000 ____D C:\ProgramData\MFAData
2015-07-12 10:28 - 2013-09-14 00:57 - 00000074 _____ C:\Users\vardum\AppData\Roaming\sp_data.sys
2015-07-12 10:27 - 2013-06-25 06:42 - 00003268 _____ C:\WINDOWS\System32\Tasks\AsusVibeSchedule
2015-07-12 10:27 - 2013-06-25 06:41 - 00003004 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ColorU
2015-07-12 10:27 - 2013-06-25 06:41 - 00002988 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
2015-07-12 10:27 - 2013-06-25 06:39 - 00003114 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update
2015-07-12 10:27 - 2013-06-25 06:39 - 00003052 _____ C:\WINDOWS\System32\Tasks\ASUS P4G
2015-07-12 10:27 - 2013-06-25 06:39 - 00003024 _____ C:\WINDOWS\System32\Tasks\ASUS USB Charger Plus
2015-07-12 10:27 - 2013-06-25 06:28 - 00003542 _____ C:\WINDOWS\System32\Tasks\ASUS Touchpad Launcher (x64)
2015-07-12 10:26 - 2014-05-11 20:41 - 00000000 __RDO C:\Users\vardum\OneDrive
2015-07-12 10:25 - 2013-09-16 22:40 - 00001064 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-12 08:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-07-11 23:01 - 2013-09-14 18:59 - 00000786 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2015-07-11 23:01 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-11 23:00 - 2013-08-22 15:25 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2015-07-11 22:54 - 2014-05-11 20:45 - 00003976 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FFA667A4-CF45-47CB-A588-E2884058AF18}
2015-07-11 22:42 - 2014-05-11 20:35 - 00001013 _____ C:\Users\vardum\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-11 22:42 - 2013-09-16 23:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-11 14:24 - 2014-03-18 11:57 - 02154586 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-11 14:24 - 2014-03-18 11:28 - 01049582 _____ C:\WINDOWS\system32\perfh015.dat
2015-07-11 14:24 - 2014-03-18 11:28 - 00246600 _____ C:\WINDOWS\system32\perfc015.dat
2015-07-11 14:22 - 2013-10-20 18:53 - 00000000 ____D C:\ProgramData\Ashampoo
2015-07-10 22:37 - 2013-11-17 22:27 - 00004112 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-07-10 22:23 - 2015-02-10 15:23 - 00001401 _____ C:\Users\vardum\Desktop\OpenFM.lnk
2015-07-10 14:09 - 2014-08-21 10:38 - 00000000 ____D C:\Users\Gość\AppData\Roaming\uTorrent
2015-07-10 12:22 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-07-09 12:46 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-07-07 21:01 - 2013-06-25 06:37 - 00000000 ____D C:\ProgramData\Atheros
2015-07-06 23:24 - 2015-05-13 20:42 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-07-06 23:24 - 2015-05-13 20:42 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-06 10:57 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-07-05 13:44 - 2014-06-17 15:35 - 00000062 _____ C:\Users\Gość\AppData\Roaming\sp_data.sys
2015-07-04 12:24 - 2014-07-16 21:30 - 00000000 ____D C:\Users\vardum\AppData\Roaming\uTorrent
2015-07-04 11:26 - 2015-02-01 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-07-04 11:26 - 2014-11-12 20:18 - 00001013 _____ C:\Users\Public\Desktop\AVG 2015.lnk
2015-06-30 23:09 - 2014-11-27 21:28 - 00000000 __SHD C:\Users\vardum\AppData\Local\EmieBrowserModeList
2015-06-30 23:09 - 2014-05-11 20:45 - 00000000 __SHD C:\Users\vardum\AppData\Local\EmieUserList
2015-06-30 23:09 - 2014-05-11 20:45 - 00000000 __SHD C:\Users\vardum\AppData\Local\EmieSiteList
2015-06-30 22:27 - 2015-01-05 15:21 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-06-26 23:11 - 2014-05-04 16:12 - 00000000 ____D C:\Users\vardum\Desktop\Muzyka
2015-06-25 08:05 - 2014-01-17 11:17 - 00040248 _____ (AVG) C:\WINDOWS\system32\TURegOpt.exe
2015-06-21 17:17 - 2015-01-28 13:20 - 00000000 ____D C:\Users\Gość\Documents\Anki
2015-06-18 22:32 - 2014-02-26 00:02 - 00000000 ____D C:\Users\vardum\Desktop\Szkoła
2015-06-17 19:08 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-06-15 20:07 - 2015-04-04 17:34 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-06-15 20:07 - 2015-04-04 17:34 - 00000000 ___SD C:\WINDOWS\system32\GWX

==================== Files in the root of some directories =======

2013-09-14 00:57 - 2015-07-12 10:28 - 0000074 _____ () C:\Users\vardum\AppData\Roaming\sp_data.sys
2014-01-17 11:49 - 2014-01-17 11:49 - 0000094 _____ () C:\Users\vardum\AppData\Local\fusioncache.dat
2013-05-01 13:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-05-01 13:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe

Files to move or delete:
====================
C:\Users\vardum\FRST64.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed