Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:11-07-2015
Ran by matesz (administrator) on MATEUSZ on 04-08-2015 17:21:26
Running from C:\Users\matesz\Desktop\logi
Loaded Profiles: matesz (Available Profiles: matesz)
Platform: Windows 8 (X64) OS Language: Polski (Polska)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(DT Soft Ltd) C:\Program Files (x86)\Daemon Tools Pro\DTShellHlp.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13196432 2012-09-26] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2172816 2012-10-22] (SRS Labs, Inc.)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2611112 2012-09-04] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-05] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-17] (Synaptics Incorporated)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2995904 2012-07-11] (Symantec Corporation)
HKLM-x32\...\Run: [ToshibaAppPlace] => C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe [552960 2010-09-23] (Toshiba)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [7148032 2012-10-31] (Pegatron Corporation)
HKU\S-1-5-21-3858547714-159695882-337848512-1001\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\Daemon Tools Pro\DTAgent.exe [3035968 2012-02-02] (DT Soft Ltd)
HKU\S-1-5-21-3858547714-159695882-337848512-1001\...\MountPoints2: {9fbded30-5d02-11e3-be8e-4c72b9a66f5e} - "F:\Startme.exe" 
HKU\S-1-5-21-3858547714-159695882-337848512-1001\...\MountPoints2: {ccc49063-b002-11e3-bef7-4c72b9a66f5e} - "E:\Launcher.exe" 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll No File
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll No File
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll No File
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1402596724&from=wpm0612&uid=TOSHIBAXMK6475GSX_62HGSZ7HSXX62HGSZ7HS&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388152512&from=cor&uid=TOSHIBAXMK6475GSX_62HGSZ7HSXX62HGSZ7HS&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388152512&from=cor&uid=TOSHIBAXMK6475GSX_62HGSZ7HSXX62HGSZ7HS&q={searchTerms}
HKU\S-1-5-21-3858547714-159695882-337848512-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=TOSHIBAXMK6475GSX_62HGSZ7HSXX62HGSZ7HS&ts=1393425183&type=default&q={searchTerms}
HKU\S-1-5-21-3858547714-159695882-337848512-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://mystart.toshiba.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3858547714-159695882-337848512-1001 -> DefaultScope {1408CA6D-7563-425B-8D0E-BF3B1D6CC0A5} URL = 
SearchScopes: HKU\S-1-5-21-3858547714-159695882-337848512-1001 -> {1408CA6D-7563-425B-8D0E-BF3B1D6CC0A5} URL = 
SearchScopes: HKU\S-1-5-21-3858547714-159695882-337848512-1001 -> {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
BHO: avast! Online Security -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04] (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\20.1.0.24\coIEPlg.dll [2012-08-21] (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\20.1.0.24\IPS\IPSBHO.DLL [2012-08-10] (Symantec Corporation)
BHO-x32: EpsonToolBandKicker Class -> {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} -> C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22] (SEIKO EPSON CORPORATION)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll No File
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll No File
Toolbar: HKLM-x32 - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22] (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\..\Interfaces\{702BCA98-DDF8-456C-963C-61783AF02391}: [DhcpNameServer] 168.95.1.1 168.95.192.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\matesz\AppData\Roaming\Mozilla\Firefox\Profiles\1zh3k0i9.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-27] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-27] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-28] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-25] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-25] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-04-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3858547714-159695882-337848512-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\matesz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-08-03] (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn [2013-11-20]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn [2015-08-03]
FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\matesz\AppData\Roaming\Mozilla\Firefox\Profiles\1zh3k0i9.default\extensions\shortcutff@gmail.com

Chrome: 
=======
CHR Profile: C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-20]
CHR Extension: (Google Docs) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-20]
CHR Extension: (Google Drive) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-20]
CHR Extension: (YouTube) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-20]
CHR Extension: (Google Search) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-20]
CHR Extension: (Google Sheets) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-20]
CHR Extension: (Norton Security Toolbar) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2015-04-20]
CHR Extension: (Google Wallet) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-20]
CHR Extension: (Gmail) - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-20]
CHR HKLM-x32\...\Chrome\Extension: [ainbkicbloikcngphmjfpjdemblcojdd] - C:\Users\matesz\AppData\Local\Google\Chrome\User Data\Default\Extensions\slidebar.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.1.0.24\Exts\Chrome.crx [2013-05-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 GFNEXSrv; C:\Program Files (x86)\Toshiba\Password Utility\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 NAT; C:\Program Files (x86)\Norton Anti-Theft\Engine\1.10.0.9\NAT.exe [232424 2013-10-11] (Symantec Corporation)
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.1.0.24\ccSvcHst.exe [143928 2012-08-18] (Symantec Corporation)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3939008 2012-07-11] (Symantec Corporation)
S2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\SymcPCCULaunchSvc.exe [123320 2012-07-23] (Symantec Corporation)
S2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe [126392 2012-07-23] (Symantec Corporation)
S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-09-01] (Realtek Semiconductor)
S2 THAccelSvc; C:\Program Files\TOSHIBA\HDD Accelerator\THAccelSvc.exe [214488 2012-08-10] (TOSHIBA CORPORATION)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
S3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20120815.002\BHDrvx64.sys [1385120 2012-08-10] (Symantec Corporation)
S1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00B\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
S1 ccSet_NAT; C:\Windows\system32\drivers\NATx64\010A000.009\ccSetx64.sys [150104 2013-07-29] (Symantec Corporation)
S3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1401000.018\ccSetx64.sys [168096 2012-08-06] (Symantec Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2014-03-20] (DT Soft Ltd)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-18] (Symantec Corporation)
S3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20120811.001\IDSVia64.sys [512672 2012-08-10] (Symantec Corporation)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-20] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20120818.001\ENG64.SYS [125600 2012-08-18] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20120818.001\EX64.SYS [2084000 2012-08-18] (Symantec Corporation)
S2 PEGAGFN; C:\Program Files (x86)\Toshiba\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 RTL8192Ce; C:\Windows\system32\DRIVERS\rtwlane.sys [1498256 2012-08-29] (Realtek Semiconductor Corporation                           )
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1498256 2012-08-29] (Realtek Semiconductor Corporation                           )
S3 SRTSP; C:\Windows\system32\drivers\NISx64\1401000.018\SRTSP64.SYS [776352 2012-08-10] (Symantec Corporation)
S3 SRTSPX; C:\Windows\system32\drivers\NISx64\1401000.018\SRTSPX64.SYS [37496 2012-05-24] (Symantec Corporation)
S3 SymDS; C:\Windows\system32\drivers\NISx64\1401000.018\SYMDS64.SYS [493216 2012-07-27] (Symantec Corporation)
S3 SymEFA; C:\Windows\system32\drivers\NISx64\1401000.018\SYMEFA64.SYS [1132192 2012-08-07] (Symantec Corporation)
S4 SymELAM; C:\Windows\system32\drivers\NISx64\1401000.018\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
S3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-05-28] (Symantec Corporation)
S3 SymIRON; C:\Windows\system32\drivers\NISx64\1401000.018\Ironx64.SYS [224416 2012-07-27] (Symantec Corporation)
S3 SymNetS; C:\Windows\system32\drivers\NISx64\1401000.018\SYMNETS.SYS [432800 2012-07-22] (Symantec Corporation)
R0 THAccel; C:\Windows\System32\DRIVERS\THAccel.sys [131520 2012-08-10] (TOSHIBA CORPORATION)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R1 wStLib64; C:\Windows\System32\drivers\wStLib64.sys [61112 2014-03-22] (StdLib)
S1 iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-04 17:21 - 2015-08-04 17:21 - 00000000 ____D C:\Users\matesz\Desktop\logi
2015-08-04 17:21 - 2015-08-04 17:21 - 00000000 ____D C:\FRST

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-04 17:21 - 2015-06-21 09:50 - 00005430 _____ C:\windows\system32\PerfStringBackup.INI
2015-08-04 17:21 - 2013-10-24 22:56 - 03277788 _____ C:\windows\system32\perfh015.dat
2015-08-04 17:21 - 2013-10-24 22:56 - 00958452 _____ C:\windows\system32\perfc015.dat
2015-08-04 17:17 - 2015-04-20 14:48 - 00001068 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-04 17:16 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-08-04 06:00 - 2015-04-20 14:48 - 00001072 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-04 05:48 - 2014-04-25 18:09 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-08-04 04:00 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2015-08-03 18:27 - 2013-11-20 17:50 - 00003594 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3858547714-159695882-337848512-1001
2015-08-03 18:24 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\ELAM
2015-07-27 17:18 - 2013-11-23 03:45 - 00000000 ____D C:\Users\matesz\AppData\Local\CrashDumps
2015-07-27 16:10 - 2015-04-20 14:55 - 00002200 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-27 16:05 - 2014-04-25 18:09 - 00003818 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-07-27 13:11 - 2013-11-21 04:05 - 00000000 ____D C:\Users\matesz\AppData\Roaming\Skype
2015-07-25 16:54 - 2014-07-03 09:20 - 00004044 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-25 16:54 - 2014-07-03 09:20 - 00003808 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Files in the root of some directories =======

2014-01-24 17:56 - 2014-01-24 17:56 - 4096000 _____ () C:\Program Files (x86)\GUTAF04.tmp
2014-01-24 17:24 - 2014-01-27 01:24 - 0000086 _____ () C:\Users\matesz\AppData\Roaming\WB.CFG

Some files in TEMP:
====================
C:\Users\matesz\AppData\Local\Temp\BackupSetup.exe
C:\Users\matesz\AppData\Local\Temp\EPSDIW64_000.EXE
C:\Users\matesz\AppData\Local\Temp\EPSTPA64_000.EXE
C:\Users\matesz\AppData\Local\Temp\gcapi_dll.dll
C:\Users\matesz\AppData\Local\Temp\gdapi.dll
C:\Users\matesz\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\matesz\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\matesz\AppData\Local\Temp\GoogleSetup.exe
C:\Users\matesz\AppData\Local\Temp\GoogleUpdateSetup_latest.exe
C:\Users\matesz\AppData\Local\Temp\gtapi_signed.dll
C:\Users\matesz\AppData\Local\Temp\GTGCAPI.exe
C:\Users\matesz\AppData\Local\Temp\ICReinstall_PhotoScape_V3.6.5 - CHIP Downloader.exe
C:\Users\matesz\AppData\Local\Temp\installstats.exe
C:\Users\matesz\AppData\Local\Temp\iupdate.exe
C:\Users\matesz\AppData\Local\Temp\lowproc.exe
C:\Users\matesz\AppData\Local\Temp\Mooii_GDrive.exe
C:\Users\matesz\AppData\Local\Temp\Mooii_Photoscape_Chrome_New.exe
C:\Users\matesz\AppData\Local\Temp\Mooii_Toolbar_Omaha.exe
C:\Users\matesz\AppData\Local\Temp\msvcr90.dll
C:\Users\matesz\AppData\Local\Temp\SkypeSetup.exe
C:\Users\matesz\AppData\Local\Temp\stubhelper.dll
C:\Users\matesz\AppData\Local\Temp\{716E38FC-5A55-4476-B422-5789258646D1}-33.0.1750.22_chrome_installer.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-11 21:14

==================== End of log ============================