Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
Ran by zbi1 (administrator) on ZBI (29-07-2015 20:31:00)
Running from D:\DOWNLOADS
Loaded Profiles: zbi1 (Available Profiles: zbi1 & zbi)
Platform: Windows 8 (X64) Language: Polski (Polska)
Internet Explorer Version 10 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(iS3, Inc.) C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SZServer.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(ThreatTrack Security, Inc.) C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SBAMSvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(iS3, Inc.) C:\Program Files (x86)\iS3\STOPzilla AntiVirus\STOPzilla.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Eugene Roshal & FAR Group) C:\Program Files\FAR3\Far.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [NPSStartup] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-570336105-3435802217-2858435366-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)
HKU\S-1-5-18\...\Run: [Samsung.PCSync] => C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe [1294336 2009-06-04] (Nokia)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-05] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-05] (IvoSoft)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-570336105-3435802217-2858435366-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-570336105-3435802217-2858435366-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=pl-PL&Src=WD8&Tid=80033373&OHP=about%3Ablank&OSP=
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-05] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-11-20] (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-08-10] (Qualcomm Atheros Commnucations)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-11-20] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-05] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-05] (IvoSoft)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2014-11-30] (Sun Microsystems, Inc.)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-05] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-05] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-05] (IvoSoft)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\..\Interfaces\{A0ABF8C4-5E10-40CF-AC94-87DC34370A2D}: [DhcpNameServer] 192.168.43.1

FireFox:
========
FF ProfilePath: C:\Users\zbi1\AppData\Roaming\Mozilla\Firefox\Profiles\v0odqc13.default-1437835576827
FF Plugin: @java.com/DTPlugin,version=10.72.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-11-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.72.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-11-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2014-11-30] (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Extension: Ghostery - C:\Users\zbi1\AppData\Roaming\Mozilla\Firefox\Profiles\v0odqc13.default-1437835576827\Extensions\firefox@ghostery.com.xpi [2015-07-25]
FF Extension: Netcraft Anti-Phishing Toolbar - C:\Users\zbi1\AppData\Roaming\Mozilla\Firefox\Profiles\v0odqc13.default-1437835576827\Extensions\{0e10f3d7-07f6-4f12-97b9-9b27e07139a5}.xpi [2015-07-25]
FF Extension: ImTranslator - C:\Users\zbi1\AppData\Roaming\Mozilla\Firefox\Profiles\v0odqc13.default-1437835576827\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2015-07-25]
FF Extension: Adblock Plus - C:\Users\zbi1\AppData\Roaming\Mozilla\Firefox\Profiles\v0odqc13.default-1437835576827\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-07-29]

Chrome: 
=======
CHR Profile: C:\Users\zbi1\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\zbi1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-17]
CHR Extension: (Google Drive) - C:\Users\zbi1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-17]
CHR Extension: (YouTube) - C:\Users\zbi1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-17]
CHR Extension: (Google Search) - C:\Users\zbi1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-17]
CHR Extension: (Skype Click to Call) - C:\Users\zbi1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-12-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\zbi1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-17]
CHR Extension: (Gmail) - C:\Users\zbi1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-17]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

Opera: 
=======
OPR Extension: (Translate) - C:\Users\zbi1\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibnombjmjocaccigcefonnipcnlaeaed [2013-08-03]
OPR Extension: (Adblock Plus) - C:\Users\zbi1\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2013-08-03]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations) [File not signed]
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R3 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 SBAMSvc; C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SBAMSvc.exe [3937472 2014-01-07] (ThreatTrack Security, Inc.)
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [620544 2008-11-11] (Nokia.) [File not signed]
R3 sz7; C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SZServer.exe [1735872 2015-07-10] (iS3, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)
R3 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69392 2014-11-20] (ASUS Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2014-11-20] (Intel Corporation)
R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [88928 2013-10-01] (ThreatTrack Security, Inc.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2014-11-20] (Synaptics Incorporated)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] ()
U0 msahci; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-29 20:22 - 2015-07-29 20:22 - 00001069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-29 20:22 - 2015-07-29 20:22 - 00001057 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-29 20:22 - 2015-07-29 20:22 - 00000997 _____ C:\Users\zbi1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-29 20:14 - 2015-07-29 20:22 - 00000000 ____D C:\AdwCleaner
2015-07-29 19:37 - 2015-07-29 19:37 - 00281280 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-29 09:05 - 2015-07-29 20:31 - 00000000 ____D C:\FRST
2015-07-27 18:30 - 2015-07-27 18:30 - 00000825 _____ C:\Users\zbi1\Desktop\Start.exe — skrót.lnk
2015-07-25 22:30 - 2015-07-13 23:22 - 00792032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-25 22:30 - 2015-07-13 23:22 - 00177632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-25 22:27 - 2015-07-25 22:27 - 00001188 _____ C:\Windows\SysWOW64\ServiceConfig.xml
2015-07-25 22:23 - 2015-07-25 22:23 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-25 22:23 - 2015-07-25 22:23 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-25 21:53 - 2014-10-09 06:00 - 01519104 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2015-07-25 21:53 - 2014-10-09 06:00 - 01484288 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2015-07-25 21:53 - 2014-10-09 06:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2015-07-25 21:53 - 2014-10-09 05:59 - 01195520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2015-07-25 21:53 - 2014-10-09 05:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2015-07-25 21:44 - 2015-01-09 08:43 - 00951808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2015-07-25 21:44 - 2015-01-09 07:03 - 00601088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2015-07-25 21:40 - 2015-04-30 15:07 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-25 21:40 - 2015-04-30 15:07 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-07-25 16:46 - 2015-07-25 16:46 - 00000000 ____D C:\Users\zbi1\Desktop\Stare dane programu Firefox
2015-07-25 15:39 - 2015-07-25 15:39 - 00000000 ____D C:\ProgramData\VIPRE
2015-07-25 15:39 - 2015-07-25 15:39 - 00000000 ____D C:\Program Files\Common Files\AV
2015-07-25 15:39 - 2013-09-04 14:57 - 00031264 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiutil.sys
2015-07-25 15:39 - 2013-05-23 08:39 - 00041032 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiark.sys
2015-07-25 15:31 - 2015-07-25 15:31 - 00001857 _____ C:\Users\zbi1\Desktop\dbf_S_MAG@185.44.216.242.lnk
2015-07-25 15:31 - 2015-07-25 15:31 - 00001857 _____ C:\Users\zbi1\Desktop\dbf_P_adm@185.44.216.242.lnk
2015-07-25 15:31 - 2015-07-25 15:31 - 00001853 _____ C:\Users\zbi1\Desktop\dbf_P_GL@185.44.216.242.lnk
2015-07-25 15:20 - 2013-10-01 16:31 - 00260816 _____ (GFI Software) C:\Windows\system32\Drivers\SbFw.sys
2015-07-25 15:20 - 2013-10-01 16:31 - 00063184 _____ (GFI Software) C:\Windows\system32\Drivers\sbhips.sys
2015-07-25 15:20 - 2013-03-26 15:58 - 00120608 _____ (GFI Software) C:\Windows\system32\Drivers\SbFwIm.sys
2015-07-25 15:19 - 2015-07-29 20:25 - 00000000 ____D C:\ProgramData\STOPzilla!
2015-07-25 15:19 - 2015-07-25 15:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla
2015-07-25 15:19 - 2015-07-25 15:19 - 00000000 ____D C:\Program Files (x86)\iS3
2015-07-25 14:34 - 2015-07-25 14:34 - 00061736 _____ C:\Users\zbi1\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-25 14:34 - 2015-07-25 14:34 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\PDF Architect
2015-07-25 13:57 - 2015-07-25 13:59 - 00000000 ____D C:\Users\zbi1\Desktop\porzadki
2015-07-23 09:35 - 2015-07-14 22:11 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-23 09:35 - 2015-07-14 22:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-23 09:35 - 2015-07-14 21:43 - 00366592 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-23 09:35 - 2015-07-14 21:43 - 00304128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 20:36 - 2015-04-30 15:44 - 00478296 _____ C:\Windows\SysWOW64\locale.nls
2015-07-16 20:36 - 2015-04-30 15:44 - 00478296 _____ C:\Windows\system32\locale.nls
2015-07-16 20:36 - 2015-04-21 15:53 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-07-16 20:35 - 2015-06-29 18:18 - 00026288 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-16 20:35 - 2015-06-29 15:28 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-16 20:35 - 2015-06-29 15:27 - 01084928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-16 20:35 - 2015-06-29 15:27 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-16 20:35 - 2015-06-29 15:27 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-16 20:35 - 2015-06-29 15:27 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-16 20:35 - 2015-06-29 15:27 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-16 20:35 - 2015-06-26 15:07 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-16 20:35 - 2015-05-22 22:44 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-07-16 20:35 - 2015-05-07 15:05 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml
2015-07-16 13:36 - 2015-06-27 18:36 - 00171352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-16 13:36 - 2015-06-27 15:56 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2015-07-16 13:36 - 2015-06-27 15:55 - 02865152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-16 13:36 - 2015-06-27 15:55 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-16 13:36 - 2015-06-27 15:46 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-16 13:36 - 2015-06-27 15:46 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-16 13:36 - 2015-06-27 15:46 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2015-07-16 13:35 - 2015-07-02 22:31 - 19291136 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-16 13:35 - 2015-06-27 15:55 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-16 13:35 - 2015-06-27 15:46 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-16 13:35 - 2015-06-27 15:46 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-16 13:35 - 2015-06-27 15:23 - 00694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-16 13:35 - 2015-06-25 20:29 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-16 13:35 - 2015-06-25 20:27 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-16 13:34 - 2015-07-02 21:15 - 14384640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 13771264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 02056704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 00690176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-16 13:34 - 2015-06-15 17:22 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-16 13:34 - 2015-06-15 17:20 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-16 13:34 - 2015-06-15 17:20 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-16 13:34 - 2015-06-15 17:20 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-16 13:34 - 2015-06-15 17:20 - 00601600 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-16 13:34 - 2015-06-15 17:20 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-16 13:34 - 2015-06-15 17:19 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-16 13:34 - 2015-06-15 17:19 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-16 13:34 - 2015-05-28 04:04 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-16 13:34 - 2015-05-28 04:03 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2015-07-16 13:34 - 2015-05-28 04:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2015-07-16 13:34 - 2015-05-28 04:02 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-16 13:34 - 2015-05-28 04:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-07-16 13:34 - 2015-05-28 04:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-16 13:34 - 2015-05-28 04:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-16 13:34 - 2015-05-28 04:01 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-16 13:34 - 2015-05-28 02:45 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-07-16 13:34 - 2015-05-28 02:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-16 13:34 - 2015-05-28 02:43 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-16 13:34 - 2015-05-28 02:43 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-07-16 13:34 - 2015-05-28 02:43 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-16 13:34 - 2015-05-28 02:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-16 13:34 - 2015-05-28 02:43 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-16 13:34 - 2015-05-28 02:24 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-16 13:34 - 2015-05-28 02:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-16 13:34 - 2015-05-28 00:14 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2015-07-16 13:34 - 2015-01-07 06:25 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-16 13:33 - 2015-06-15 17:20 - 15415296 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-16 13:33 - 2015-06-15 17:20 - 02656768 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-16 13:33 - 2015-06-15 17:20 - 02237440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-16 13:33 - 2015-06-15 17:20 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-16 13:33 - 2015-05-28 04:01 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-16 13:32 - 2015-06-17 16:13 - 01150264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-16 13:32 - 2015-06-17 15:44 - 01567560 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-16 13:32 - 2015-06-15 17:22 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-07-16 13:32 - 2015-06-15 17:22 - 02416640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-16 13:32 - 2015-06-15 17:22 - 02037760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-16 13:32 - 2015-06-15 17:22 - 00737280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-07-16 13:32 - 2015-06-15 17:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-16 13:32 - 2015-06-15 17:21 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-16 13:32 - 2015-06-15 17:20 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2015-07-16 13:32 - 2015-06-15 17:20 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-16 13:32 - 2015-06-15 17:20 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-07-16 13:32 - 2015-06-15 17:19 - 02307072 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-16 13:32 - 2015-06-11 22:29 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-16 13:32 - 2015-06-11 18:27 - 01024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-16 13:32 - 2015-06-09 15:57 - 03248640 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-16 13:32 - 2015-05-28 02:22 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2015-07-16 13:32 - 2015-05-28 02:20 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2015-07-16 13:32 - 2015-05-28 02:00 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-16 13:32 - 2015-05-28 01:55 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-16 13:32 - 2015-01-24 06:31 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-07-16 13:32 - 2014-10-11 09:44 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-16 13:32 - 2014-10-11 07:57 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-16 13:31 - 2015-06-25 03:54 - 04064768 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-16 09:20 - 2015-07-29 20:26 - 00003864 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1374854997
2015-07-16 09:20 - 2015-07-16 09:20 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-07-15 21:11 - 2015-07-29 20:26 - 00001060 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-15 21:11 - 2015-07-29 20:18 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-11 17:31 - 2015-07-11 17:31 - 00003070 _____ C:\Windows\System32\Tasks\{EE6E6D28-8D8A-48FC-A10C-7FB684DE3569}
2015-07-11 17:27 - 2015-07-11 17:27 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\PC Suite
2015-07-11 16:22 - 2015-07-11 16:22 - 00002599 _____ C:\Users\Public\Desktop\Samsung PC Studio 7.lnk
2015-07-11 16:22 - 2015-07-11 16:22 - 00000000 ____D C:\Users\zbi\AppData\Roaming\Samsung
2015-07-11 16:22 - 2015-07-11 16:22 - 00000000 ____D C:\Users\zbi\AppData\Roaming\PC Suite
2015-07-11 16:22 - 2015-07-11 16:22 - 00000000 ____D C:\Users\zbi\AppData\Roaming\ControlCenter4
2015-07-11 16:22 - 2015-07-11 16:22 - 00000000 ____D C:\ProgramData\PC Suite
2015-07-11 16:09 - 2015-07-11 16:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung PC Studio 7
2015-07-11 16:08 - 2015-07-11 16:08 - 00010774 _____ C:\Windows\DPINST.LOG
2015-07-11 16:08 - 2015-07-11 16:08 - 00000000 ____D C:\Program Files (x86)\PC Connectivity Solution
2015-07-11 16:08 - 2015-07-11 16:08 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2015-07-11 16:08 - 2008-08-28 11:44 - 00025600 _____ (Nokia) C:\Windows\system32\Drivers\pccsmcfdx64.sys
2015-07-11 16:08 - 2007-05-02 16:33 - 00066560 _____ (Nokia) C:\Windows\system32\nmwcdclsx64.dll
2015-07-11 16:06 - 2015-07-11 16:06 - 56982041 _____ C:\Users\zbi1\Downloads\Samsung_PC_Studio_7.2.24.9.exe
2015-07-11 15:51 - 2015-07-11 15:43 - 65290236 _____ (Macrovision Corporation) C:\Users\zbi1\Downloads\20080116091810562_Samsung_PC_Studio_321_GJ9.exe
2015-07-11 15:31 - 2010-07-04 19:11 - 00025960 _____ (Teruten Inc) C:\Windows\system32\FsExService64.exe
2015-07-11 15:31 - 2010-06-14 09:32 - 00016448 _____ (Teruten Inc) C:\Windows\system32\Drivers\TFsExDisk.sys
2015-07-11 15:25 - 2015-07-11 15:25 - 173838160 _____ C:\Users\zbi1\Downloads\New_PC_Studio_1.5.1.10064_2.exe
2015-07-06 19:57 - 2015-07-06 19:57 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\ControlCenter4
2015-07-06 19:51 - 2015-07-06 19:51 - 00002061 _____ C:\Users\Public\Desktop\Brother Utilities.lnk
2015-07-06 19:51 - 2015-07-06 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2015-07-06 19:51 - 2015-07-06 19:51 - 00000000 ____D C:\ProgramData\ControlCenter4
2015-07-06 19:51 - 2015-07-06 19:51 - 00000000 ____D C:\Program Files (x86)\Browny02
2015-07-06 19:51 - 2015-07-06 19:51 - 00000000 ____D C:\Brother
2015-07-06 19:50 - 2015-07-06 19:51 - 00000000 ____D C:\Program Files (x86)\Brother
2015-07-06 19:50 - 2012-07-09 17:19 - 00005120 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2015-07-06 19:50 - 2012-03-19 13:09 - 00245760 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll
2015-07-06 19:50 - 2010-09-29 17:07 - 00180224 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll
2015-07-06 19:50 - 2010-03-15 19:45 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2015-07-06 19:50 - 2007-12-13 22:16 - 00004608 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2015-07-06 19:48 - 2015-07-06 19:48 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\InstallShield

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-29 20:26 - 2013-08-07 15:48 - 00003802 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-29 20:26 - 2013-01-08 16:04 - 00003052 _____ C:\Windows\System32\Tasks\ASUS P4G
2015-07-29 20:26 - 2013-01-08 16:02 - 00003024 _____ C:\Windows\System32\Tasks\ASUS USB Charger Plus
2015-07-29 20:26 - 2013-01-08 15:53 - 00003542 _____ C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2015-07-29 20:25 - 2013-07-26 01:52 - 00000416 _____ C:\Users\zbi1\AppData\Roaming\sp_data.sys
2015-07-29 20:25 - 2013-01-08 16:01 - 00003114 _____ C:\Windows\System32\Tasks\ASUS Live Update
2015-07-29 20:24 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-29 20:22 - 2014-09-05 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung PC Studio 3
2015-07-29 20:22 - 2014-03-16 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-29 20:02 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2015-07-29 19:37 - 2014-11-20 18:15 - 00017720 _____ C:\Windows\PFRO.log
2015-07-29 19:36 - 2013-12-20 18:11 - 01676041 _____ C:\Windows\WindowsUpdate.log
2015-07-29 19:35 - 2014-04-12 13:41 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\ClassicShell
2015-07-29 19:35 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\NDF
2015-07-29 19:32 - 2013-08-03 19:15 - 00000000 ____D C:\Users\zbi1\AppData\Local\CrashDumps
2015-07-29 09:33 - 2013-08-02 04:06 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\Mozilla
2015-07-28 09:08 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AppCompat
2015-07-27 18:48 - 2014-04-28 09:43 - 00000000 ____D C:\Users\zbi1\AppData\Local\Thunderbird
2015-07-27 09:42 - 2012-08-02 20:02 - 00794946 _____ C:\Windows\system32\perfh015.dat
2015-07-27 09:42 - 2012-08-02 20:02 - 00159530 _____ C:\Windows\system32\perfc015.dat
2015-07-27 09:42 - 2012-07-26 09:28 - 01793398 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-25 22:27 - 2015-04-02 18:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-25 22:27 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-07-25 22:25 - 2012-07-26 07:38 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-07-25 22:24 - 2012-07-26 10:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-25 22:24 - 2012-07-26 10:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-25 22:24 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2015-07-25 22:24 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-07-25 22:23 - 2012-07-26 11:45 - 00000000 ____D C:\Program Files\Windows Journal
2015-07-25 22:23 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData
2015-07-25 22:23 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore
2015-07-25 22:21 - 2012-07-26 09:59 - 00000000 ____D C:\Windows\CbsTemp
2015-07-25 21:32 - 2013-08-14 21:16 - 00000000 ____D C:\Windows\system32\MRT
2015-07-25 21:02 - 2014-10-28 11:52 - 00000000 ____D C:\ProgramData\89c775be-12de-4e15-846c-6b3e6a8c39a2
2015-07-25 16:04 - 2015-04-02 18:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-25 15:56 - 2013-01-08 16:12 - 00003764 _____ C:\Windows\system32\ServiceFilter.ini
2015-07-25 15:46 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2015-07-18 18:15 - 2014-11-30 22:06 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\Skype
2015-07-16 09:20 - 2013-07-26 18:09 - 00000000 ____D C:\Program Files (x86)\Opera
2015-07-16 07:04 - 2013-08-25 18:50 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\vlc
2015-07-15 21:11 - 2013-08-07 15:48 - 00004036 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-11 17:31 - 2014-11-30 22:05 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-11 17:31 - 2014-11-30 22:05 - 00000000 ____D C:\ProgramData\Skype
2015-07-11 16:27 - 2015-04-06 17:34 - 00000000 ____D C:\Users\zbi\AppData\Roaming\ClassicShell
2015-07-11 16:21 - 2015-04-06 17:29 - 00002263 _____ C:\Users\zbi\Desktop\Google Chrome.lnk
2015-07-11 16:21 - 2015-04-06 17:27 - 00000401 _____ C:\Users\zbi\AppData\Roaming\sp_data.sys
2015-07-11 16:19 - 2014-09-05 18:35 - 00000000 _____ C:\ProgramData\LauncherAccess.dt
2015-07-11 16:09 - 2014-09-05 18:36 - 00000000 ____D C:\Users\zbi1\AppData\Roaming\Samsung
2015-07-11 16:09 - 2014-09-05 18:33 - 00000000 ____D C:\Program Files (x86)\Samsung
2015-07-11 16:08 - 2013-01-08 15:53 - 00000000 ____D C:\Program Files\DIFX
2015-07-06 19:51 - 2013-08-03 19:05 - 00000000 ____D C:\Program Files (x86)\ControlCenter4
2015-07-06 19:50 - 2013-01-08 15:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-03 08:43 - 2013-07-31 02:47 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2013-07-27 06:05 - 2013-07-27 06:05 - 0000021 _____ () C:\Users\zbi1\AppData\Roaming\my_intel.sys
2013-07-26 01:52 - 2015-07-29 20:25 - 0000416 _____ () C:\Users\zbi1\AppData\Roaming\sp_data.sys
2014-11-20 20:58 - 2014-11-20 20:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-09-05 18:35 - 2015-07-11 16:19 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt
2012-11-23 15:06 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2012-11-23 15:06 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2012-11-23 15:06 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Files to move or delete:
====================
C:\ProgramData\SetStretch.VBS


Some files in TEMP:
====================
C:\Users\zbi1\AppData\Local\Temp\3F9BF240-9808-D0CC-0B4F-2E610D63DF2C.dll
C:\Users\zbi1\AppData\Local\Temp\Checkupdate.exe
C:\Users\zbi1\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\zbi1\AppData\Local\Temp\Foxit Updater.exe
C:\Users\zbi1\AppData\Local\Temp\gcapi_dll.dll
C:\Users\zbi1\AppData\Local\Temp\GdiPlus.dll
C:\Users\zbi1\AppData\Local\Temp\gtapi_signed.dll
C:\Users\zbi1\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\zbi1\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\zbi1\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\zbi1\AppData\Local\Temp\Quarantine.exe
C:\Users\zbi1\AppData\Local\Temp\res.dll
C:\Users\zbi1\AppData\Local\Temp\SkypeSetup.exe
C:\Users\zbi1\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-29 19:36

==================== End of log ============================