Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-01-2014 02
Ran by Kasia TB (administrator) on KASIATB on 27-01-2014 03:21:55
Running from C:\Users\Kasia TB\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\avp.exe
(Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\avp.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10355200 2011-01-24] (Intel Corporation)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-03-11] (IDT, Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-03-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1234216 2010-03-26] (Nero AG)
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-10-26] (Nullsoft, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Plus Internet] - C:\Program Files (x86)\Plus Internet\PlusInternetChecker.exe [497016 2012-03-13] ()
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [574008 2011-07-11] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\avp.exe [348760 2010-12-09] (Kaspersky Lab)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-01-14] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
MountPoints2: H - H:\AutoRun.exe /s
MountPoints2: {914c7a96-9130-11e2-957a-bc7737e659cd} - H:\Startme.exe
MountPoints2: {93f8bd89-925d-11e2-943f-bc7737e659cd} - H:\AutoRun.exe /s
MountPoints2: {f796aed2-0b8c-11e1-a804-806e6f6e6963} - E:\SYSTEM\AUTOSTRT.EXE
MountPoints2: {fb383adc-021f-11e2-98cc-bc7737e659cd} - I:\Startme.exe
AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll,C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\x64\sbhook64.dll [69720 2010-12-09] (Kaspersky Lab)
AppInit_DLLs-x32: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\sbhook.dll [72280 2010-12-09] (Kaspersky Lab)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDF
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://pl.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {FF9858AD-FFBA-4360-B551-CB47AB646635} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={74CB9C1D-E709-49DA-8AE6-CA3DEC8B93C5}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://pl.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={74CB9C1D-E709-49DA-8AE6-CA3DEC8B93C5}
SearchScopes: HKLM-x32 - {FF9858AD-FFBA-4360-B551-CB47AB646635} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&affID=119370&babsrc=SP_ss&mntrId=D0FFBC7737E659CA
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://pl.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={74CB9C1D-E709-49DA-8AE6-CA3DEC8B93C5}
SearchScopes: HKCU - {FF9858AD-FFBA-4360-B551-CB47AB646635} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\x64\ievkbd.dll (Kaspersky Lab)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\x64\klwtbbho.dll (Kaspersky Lab)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\ievkbd.dll (Kaspersky Lab)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\klwtbbho.dll (Kaspersky Lab)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-04-24] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1

FireFox:
========
FF ProfilePath: C:\Users\Kasia TB\AppData\Roaming\Mozilla\Firefox\Profiles\quvdfzaf.default
FF NewTab: hxxp://www2.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=D0FFBC7737E659CA
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.pl/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\5\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\Kasia TB\AppData\Roaming\Mozilla\Firefox\Profiles\quvdfzaf.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Thunderbird\Extensions: [{eea12ec4-729d-4703-bc37-106ce9879ce2}] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\THBExt
FF Extension: Kaspersky Anti-Spam Extension - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\THBExt [2014-01-26]

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security\avp.exe [348760 2010-12-09] (Kaspersky Lab)
S2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2010-03-22] (Infowatch)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2010-02-17] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2010-02-17] (Infowatch)
R1 kl1; C:\Windows\System32\DRIVERS\kl1.sys [157712 2009-09-01] (Kaspersky Lab)
R0 KLBG; C:\Windows\System32\DRIVERS\klbg.sys [40464 2009-10-14] (Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [353296 2014-01-26] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [27152 2009-09-14] (Kaspersky Lab)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [21008 2009-10-02] (Kaspersky Lab)
S3 massfilter_lte; C:\Windows\system32\drivers\massfilter_lte.sys [18456 2012-03-13] (HandSet Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 zgdcat; C:\Windows\System32\DRIVERS\zgdcat.sys [130200 2012-03-13] (ZTE Incorporated)
S3 zgdcdiag; C:\Windows\System32\DRIVERS\zgdcdiag.sys [130200 2012-03-13] (ZTE Incorporated)
S3 zgdcmdm; C:\Windows\System32\DRIVERS\zgdcmdm.sys [130200 2012-03-13] (ZTE Incorporated)
S3 zgdcnet; C:\Windows\System32\DRIVERS\zgdcnet.sys [169496 2012-03-13] (ZTE Incorporated)
S3 zgdcnmea; C:\Windows\System32\DRIVERS\zgdcnmea.sys [130200 2012-03-13] (ZTE Incorporated)
S3 EraserUtilDrv11120; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11120.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 03:21 - 2014-01-27 03:22 - 00019186 _____ C:\Users\Kasia TB\Downloads\FRST.txt
2014-01-27 03:21 - 2014-01-27 03:21 - 00000000 ____D C:\FRST
2014-01-27 02:55 - 2014-01-27 02:55 - 00001816 _____ C:\sc-cleaner.txt
2014-01-27 02:54 - 2014-01-27 02:54 - 01282568 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kasia TB\Downloads\AviraDNSRepairEN.exe
2014-01-27 02:53 - 2014-01-27 02:53 - 02800104 _____ (AVAST Software) C:\Users\Kasia TB\Downloads\avast-browser-cleanup.exe
2014-01-27 02:53 - 2014-01-27 02:53 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Kasia TB\Downloads\sc-cleaner.exe
2014-01-27 02:51 - 2014-01-27 02:51 - 00380416 _____ C:\Users\Kasia TB\Downloads\df5d38k3.exe
2014-01-27 02:48 - 2014-01-27 02:48 - 00987425 _____ C:\Users\Kasia TB\Downloads\SecurityCheck.exe
2014-01-27 02:47 - 2014-01-27 02:47 - 02078208 _____ (Farbar) C:\Users\Kasia TB\Downloads\FRST64.exe
2014-01-27 02:47 - 2014-01-27 02:47 - 00602112 _____ (OldTimer Tools) C:\Users\Kasia TB\Downloads\OTL.exe
2014-01-26 22:48 - 2014-01-26 23:00 - 00153053 _____ C:\Windows\system32\Drivers\klin.dat
2014-01-26 22:48 - 2014-01-26 23:00 - 00107384 _____ C:\Windows\system32\Drivers\klick.dat
2014-01-26 22:47 - 2010-02-17 12:04 - 00085048 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2014-01-26 22:47 - 2010-02-17 12:04 - 00066104 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2014-01-26 22:46 - 2014-01-26 22:46 - 00353296 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2014-01-26 22:46 - 2014-01-26 22:46 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2014-01-26 22:41 - 2014-01-26 22:41 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2014-01-26 22:39 - 2014-01-26 22:40 - 222284056 _____ (Kaspersky Lab) C:\Users\Kasia TB\Downloads\ksos9.1.0.59pl.exe
2014-01-26 22:25 - 2014-01-26 22:26 - 195505264 _____ (Kaspersky Lab ZAO) C:\Users\Kasia TB\Downloads\ksos13.0.4.233a_pl-pl(1).exe
2014-01-26 21:50 - 2014-01-26 21:50 - 00000000 ___SD C:\Users\Kasia TB\Documents\Passwords Database
2014-01-26 21:47 - 2014-01-26 21:50 - 195505264 _____ (Kaspersky Lab ZAO) C:\Users\Kasia TB\Downloads\ksos13.0.4.233a_pl-pl.exe
2014-01-26 20:57 - 2014-01-26 20:57 - 00000000 ____D C:\Users\Kasia TB\Downloads\Nowy folder
2014-01-26 20:26 - 2014-01-26 20:26 - 00291606 _____ C:\Users\Kasia TB\Downloads\TCPView.zip
2014-01-26 20:26 - 2014-01-26 20:26 - 00000000 ____D C:\Users\Kasia TB\Downloads\TCPView
2014-01-26 19:47 - 2014-01-26 19:47 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-26 19:47 - 2014-01-26 19:47 - 00000000 ____D C:\Program Files\CCleaner
2014-01-26 18:40 - 2014-01-26 18:42 - 99336928 _____ (Agnitum, Ltd.                                               ) C:\Users\Kasia TB\Downloads\OutpostSecuritySuiteInstall.exe
2014-01-26 18:36 - 2014-01-26 18:36 - 00001912 _____ C:\Windows\epplauncher.mif
2014-01-26 18:23 - 2014-01-26 18:23 - 00000000 ____D C:\Program Files\Microsoft Security Client
2014-01-26 18:23 - 2014-01-26 18:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2014-01-26 17:47 - 2014-01-26 17:48 - 13695672 _____ (Microsoft Corporation) C:\Users\Kasia TB\Downloads\mseinstall.exe
2014-01-26 17:28 - 2014-01-26 17:28 - 19863449 _____ C:\Users\Kasia TB\Downloads\nmap-6.40-win32.zip
2014-01-26 17:10 - 2014-01-26 17:10 - 00000000 ____D C:\Users\Kasia TB\Documents\Moje odebrane pliki
2014-01-26 17:08 - 2014-01-26 17:08 - 00001105 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-26 17:08 - 2014-01-26 17:08 - 00000000 ____D C:\Users\Kasia TB\AppData\Roaming\Malwarebytes
2014-01-26 17:08 - 2014-01-26 17:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-26 17:08 - 2014-01-26 17:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-26 17:08 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-26 17:05 - 2014-01-26 17:05 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\Kasia TB\Downloads\tdsskiller.exe
2014-01-26 16:59 - 2014-01-26 17:00 - 04429440 _____ (Piriform Ltd) C:\Users\Kasia TB\Downloads\ccsetup404.exe
2014-01-26 16:49 - 2014-01-26 16:50 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Kasia TB\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-24 15:39 - 2014-01-24 15:39 - 00000000 ____D C:\Windows\System32\Tasks\Zadania podglądu zdarzeń
2014-01-24 14:31 - 2014-01-26 22:35 - 00003204 _____ C:\Windows\System32\Tasks\HPCeeScheduleForKasia TB
2014-01-24 14:31 - 2014-01-26 22:35 - 00000344 _____ C:\Windows\Tasks\HPCeeScheduleForKasia TB.job
2014-01-24 14:18 - 2014-01-27 02:05 - 00396833 ____N C:\Windows\WindowsUpdate.log
2014-01-24 14:16 - 2014-01-24 14:16 - 00002770 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-23 13:33 - 2014-01-26 20:41 - 00007622 _____ C:\Users\Kasia TB\AppData\Local\Resmon.ResmonCfg
2014-01-15 09:26 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 09:26 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 09:26 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 09:26 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 09:26 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 09:26 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 09:26 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 09:26 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 09:26 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-03 20:43 - 2014-01-21 12:53 - 00086528 _____ C:\Users\Kasia TB\Desktop\Kopia2 cennik czujek1.xls
2014-01-02 17:21 - 2014-01-17 11:43 - 00059904 _____ C:\Users\Kasia TB\Desktop\spis z natury.xls
2014-01-02 13:45 - 2014-01-03 10:50 - 00079872 _____ C:\Users\Kasia TB\Desktop\cennik czujek1.xls
2013-12-30 13:20 - 2013-12-30 13:20 - 00002213 _____ C:\Users\Kasia TB\Desktop\HP Support Assistant.lnk
2013-12-30 13:17 - 2013-12-30 13:17 - 00000000 ____D C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}

==================== One Month Modified Files and Folders =======

2014-01-27 03:22 - 2014-01-27 03:21 - 00019186 _____ C:\Users\Kasia TB\Downloads\FRST.txt
2014-01-27 03:21 - 2014-01-27 03:21 - 00000000 ____D C:\FRST
2014-01-27 03:10 - 2012-04-13 11:04 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-27 02:55 - 2014-01-27 02:55 - 00001816 _____ C:\sc-cleaner.txt
2014-01-27 02:54 - 2014-01-27 02:54 - 01282568 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kasia TB\Downloads\AviraDNSRepairEN.exe
2014-01-27 02:53 - 2014-01-27 02:53 - 02800104 _____ (AVAST Software) C:\Users\Kasia TB\Downloads\avast-browser-cleanup.exe
2014-01-27 02:53 - 2014-01-27 02:53 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Kasia TB\Downloads\sc-cleaner.exe
2014-01-27 02:51 - 2014-01-27 02:51 - 00380416 _____ C:\Users\Kasia TB\Downloads\df5d38k3.exe
2014-01-27 02:48 - 2014-01-27 02:48 - 00987425 _____ C:\Users\Kasia TB\Downloads\SecurityCheck.exe
2014-01-27 02:47 - 2014-01-27 02:47 - 02078208 _____ (Farbar) C:\Users\Kasia TB\Downloads\FRST64.exe
2014-01-27 02:47 - 2014-01-27 02:47 - 00602112 _____ (OldTimer Tools) C:\Users\Kasia TB\Downloads\OTL.exe
2014-01-27 02:16 - 2011-11-27 18:17 - 00000000 ____D C:\Users\Kasia TB\AppData\Local\CrashDumps
2014-01-27 02:05 - 2014-01-24 14:18 - 00396833 ____N C:\Windows\WindowsUpdate.log
2014-01-26 23:00 - 2014-01-26 22:48 - 00153053 _____ C:\Windows\system32\Drivers\klin.dat
2014-01-26 23:00 - 2014-01-26 22:48 - 00107384 _____ C:\Windows\system32\Drivers\klick.dat
2014-01-26 22:57 - 2013-09-26 07:29 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2014-01-26 22:46 - 2014-01-26 22:46 - 00353296 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2014-01-26 22:46 - 2014-01-26 22:46 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2014-01-26 22:41 - 2014-01-26 22:41 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2014-01-26 22:40 - 2014-01-26 22:39 - 222284056 _____ (Kaspersky Lab) C:\Users\Kasia TB\Downloads\ksos9.1.0.59pl.exe
2014-01-26 22:38 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-26 22:38 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-26 22:35 - 2014-01-24 14:31 - 00003204 _____ C:\Windows\System32\Tasks\HPCeeScheduleForKasia TB
2014-01-26 22:35 - 2014-01-24 14:31 - 00000344 _____ C:\Windows\Tasks\HPCeeScheduleForKasia TB.job
2014-01-26 22:35 - 2011-04-25 02:05 - 00701532 _____ C:\Windows\system32\perfh015.dat
2014-01-26 22:35 - 2011-04-25 02:05 - 00136518 _____ C:\Windows\system32\perfc015.dat
2014-01-26 22:35 - 2009-07-14 06:13 - 01558840 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-26 22:31 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-26 22:26 - 2014-01-26 22:25 - 195505264 _____ (Kaspersky Lab ZAO) C:\Users\Kasia TB\Downloads\ksos13.0.4.233a_pl-pl(1).exe
2014-01-26 22:19 - 2011-11-10 12:15 - 00000000 ____D C:\Users\Kasia TB
2014-01-26 21:50 - 2014-01-26 21:50 - 00000000 ___SD C:\Users\Kasia TB\Documents\Passwords Database
2014-01-26 21:50 - 2014-01-26 21:47 - 195505264 _____ (Kaspersky Lab ZAO) C:\Users\Kasia TB\Downloads\ksos13.0.4.233a_pl-pl.exe
2014-01-26 20:57 - 2014-01-26 20:57 - 00000000 ____D C:\Users\Kasia TB\Downloads\Nowy folder
2014-01-26 20:41 - 2014-01-23 13:33 - 00007622 _____ C:\Users\Kasia TB\AppData\Local\Resmon.ResmonCfg
2014-01-26 20:26 - 2014-01-26 20:26 - 00291606 _____ C:\Users\Kasia TB\Downloads\TCPView.zip
2014-01-26 20:26 - 2014-01-26 20:26 - 00000000 ____D C:\Users\Kasia TB\Downloads\TCPView
2014-01-26 20:14 - 2011-04-24 16:31 - 00000000 ____D C:\Program Files (x86)\Windows Live
2014-01-26 20:06 - 2013-11-22 22:35 - 00000000 ____D C:\Users\Kasia TB\AppData\Roaming\Real
2014-01-26 20:06 - 2013-11-22 22:35 - 00000000 ____D C:\ProgramData\Real
2014-01-26 20:06 - 2013-11-22 22:35 - 00000000 ____D C:\Program Files (x86)\Real
2014-01-26 20:05 - 2012-11-09 17:50 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson
2014-01-26 20:02 - 2012-07-04 09:16 - 00000000 ___SD C:\Users\Kasia TB\Documents\Moje źródła danych
2014-01-26 20:02 - 2011-08-02 07:37 - 00000000 ____D C:\Users\Public\Documents\YouCam
2014-01-26 20:00 - 2011-04-24 16:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-26 19:59 - 2011-11-15 11:06 - 00000000 ____D C:\Program Files (x86)\SubEdit-Player
2014-01-26 19:55 - 2011-11-15 11:08 - 00000000 ____D C:\Users\Kasia TB\AppData\Roaming\Winamp
2014-01-26 19:54 - 2012-03-26 11:33 - 00000000 ___DC C:\Users\Kasia TB\AppData\Local\MigWiz
2014-01-26 19:54 - 2007-01-02 02:25 - 00000000 ____D C:\Windows\Panther
2014-01-26 19:47 - 2014-01-26 19:47 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-26 19:47 - 2014-01-26 19:47 - 00000000 ____D C:\Program Files\CCleaner
2014-01-26 18:42 - 2014-01-26 18:40 - 99336928 _____ (Agnitum, Ltd.                                               ) C:\Users\Kasia TB\Downloads\OutpostSecuritySuiteInstall.exe
2014-01-26 18:36 - 2014-01-26 18:36 - 00001912 _____ C:\Windows\epplauncher.mif
2014-01-26 18:23 - 2014-01-26 18:23 - 00000000 ____D C:\Program Files\Microsoft Security Client
2014-01-26 18:23 - 2014-01-26 18:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2014-01-26 17:48 - 2014-01-26 17:47 - 13695672 _____ (Microsoft Corporation) C:\Users\Kasia TB\Downloads\mseinstall.exe
2014-01-26 17:28 - 2014-01-26 17:28 - 19863449 _____ C:\Users\Kasia TB\Downloads\nmap-6.40-win32.zip
2014-01-26 17:10 - 2014-01-26 17:10 - 00000000 ____D C:\Users\Kasia TB\Documents\Moje odebrane pliki
2014-01-26 17:08 - 2014-01-26 17:08 - 00001105 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-26 17:08 - 2014-01-26 17:08 - 00000000 ____D C:\Users\Kasia TB\AppData\Roaming\Malwarebytes
2014-01-26 17:08 - 2014-01-26 17:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-26 17:08 - 2014-01-26 17:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-26 17:05 - 2014-01-26 17:05 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\Kasia TB\Downloads\tdsskiller.exe
2014-01-26 17:00 - 2014-01-26 16:59 - 04429440 _____ (Piriform Ltd) C:\Users\Kasia TB\Downloads\ccsetup404.exe
2014-01-26 16:50 - 2014-01-26 16:49 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Kasia TB\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-26 16:46 - 2011-11-10 12:20 - 00003974 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{75694F8A-38CB-4586-AC81-B488E5F77D43}
2014-01-26 16:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-24 15:41 - 2012-03-23 12:35 - 00000000 ____D C:\Users\Kasia TB\Documents\Fax
2014-01-24 15:39 - 2014-01-24 15:39 - 00000000 ____D C:\Windows\System32\Tasks\Zadania podglądu zdarzeń
2014-01-24 14:16 - 2014-01-24 14:16 - 00002770 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-21 12:53 - 2014-01-03 20:43 - 00086528 _____ C:\Users\Kasia TB\Desktop\Kopia2 cennik czujek1.xls
2014-01-20 19:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-20 08:18 - 2011-11-25 16:00 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-01-20 08:18 - 2011-11-12 20:34 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2014-01-19 08:33 - 2010-11-21 04:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-17 11:43 - 2014-01-02 17:21 - 00059904 _____ C:\Users\Kasia TB\Desktop\spis z natury.xls
2014-01-16 21:18 - 2012-04-12 15:39 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2014-01-16 08:14 - 2009-07-14 05:45 - 00441448 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 16:01 - 2012-03-21 13:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-15 16:00 - 2013-08-17 19:02 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 15:58 - 2013-03-04 15:17 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-03 10:50 - 2014-01-02 13:45 - 00079872 _____ C:\Users\Kasia TB\Desktop\cennik czujek1.xls
2013-12-30 13:20 - 2013-12-30 13:20 - 00002213 _____ C:\Users\Kasia TB\Desktop\HP Support Assistant.lnk
2013-12-30 13:19 - 2011-04-24 16:21 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2013-12-30 13:17 - 2013-12-30 13:17 - 00000000 ____D C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2013-12-30 13:15 - 2011-04-24 16:29 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-12-30 13:14 - 2011-02-10 20:23 - 00000000 ____D C:\SWSetup

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-20 12:19

==================== End Of Log ============================