Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2014 Ran by DPS2 (administrator) on DPS2-KOMPUTER on 11-07-2014 17:55:17 Running from C:\Users\DPS2\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Fuyu LIMITED) C:\ProgramData\WindowsProtectManger\wprotectmanager.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (The Firebird Project) C:\Program Files (x86)\Firebird\Firebird_1_5\bin\fbguard.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP) C:\Windows\System32\HPSIsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe () C:\Windows\Temp\dgen.exe () C:\Program Files\004\rqpbhevlkc64.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (The Firebird Project) C:\Program Files (x86)\Firebird\Firebird_1_5\bin\fbserver.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (PC Utilities Software Limited) C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe (AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe (AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [380544 2012-05-28] (Alcor Micro Corp.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13196432 2012-09-25] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2908984 2012-07-12] (Synaptics Incorporated) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293672 2013-01-28] (Lenovo Group Limited) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2011-11-24] (Vimicro) HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1095472 2012-03-12] (Lenovo) HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-12-14] (Intel Corporation) HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-13] (Lenovo, Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [fst_pl_131] => [X] HKLM-x32\...\Run: [fst_pl_129] => [X] HKLM-x32\...\Runonce: [DelTr136751396] - cmd.exe /c rd /s /q "C:\Users\DPS2\AppData\Roaming\foxtab" [X] Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1500459270-1683930023-1386335449-1000\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135112 2014-05-09] (PC Utilities Software Limited) HKU\S-1-5-21-1500459270-1683930023-1386335449-1000\...\RunOnce: [DelTr136751396] - cmd.exe /c rd /s /q "C:\Users\DPS2\AppData\Roaming\foxtab" HKU\S-1-5-21-1500459270-1683930023-1386335449-1000\...\MountPoints2: {5f3b6ef1-2ef3-11e3-8b34-806e6f6e6963} - Q:\LenovoQDrive.exe HKU\S-1-5-21-1500459270-1683930023-1386335449-1000\...\MountPoints2: {ac9e4720-aa7b-11e3-8575-0c84dcd00f76} - E:\SISetup.exe AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\Program Files (x86)\SupTab\SearchProtect64.dll [102512 2014-05-08] (Skytech Co., Ltd.) AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => C:\Program Files (x86)\SupTab\SearchProtect32.dll [91248 2014-05-08] (Skytech Co., Ltd.) IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\dprotectsvc.exe: [Debugger] tasklist.exe IFEO\jumpflip: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\searchinstaller.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\searchprotector.exe: [Debugger] tasklist.exe IFEO\searchsettings.exe: [Debugger] tasklist.exe IFEO\searchsettings64.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\umbrella.exe: [Debugger] tasklist.exe IFEO\utiljumpflip.exe: [Debugger] tasklist.exe IFEO\volaro: [Debugger] tasklist.exe IFEO\vonteera: [Debugger] tasklist.exe IFEO\websteroids.exe: [Debugger] tasklist.exe IFEO\websteroidsservice.exe: [Debugger] tasklist.exe Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.) ShellIconOverlayIdentifiers: SugarSyncBackedUp -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ShellIconOverlayIdentifiers: SugarSyncPending -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ShellIconOverlayIdentifiers: SugarSyncRoot -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ShellIconOverlayIdentifiers: SugarSyncShared -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=498&aid=109&itype=a&ver=12791&tm=381&src=hmp HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?sid=498&aid=109&itype=a&ver=12791&tm=381&src=ds&p={searchTerms} SearchScopes: HKLM - {A653B3F4-5CDD-434E-946A-359C2580E402} URL = http://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MALCJS SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?sid=498&aid=109&itype=a&ver=12791&tm=381&src=ds&p={searchTerms} SearchScopes: HKLM-x32 - {A653B3F4-5CDD-434E-946A-359C2580E402} URL = http://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MALCJS SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1402898060&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?sid=498&aid=109&itype=a&ver=12791&tm=381&src=ds&p={searchTerms} BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.) BHO: saaFerweb - {900079E0-956E-FE5E-B998-B2C52B6C8E1A} - C:\ProgramData\saaFerweb\DyGSDZ4_l.x64.dll () BHO-x32: CouponDownloader - {10AD2C61-0898-4348-8600-14A342F22AC3} - C:\Program Files (x86)\Coupon Downloader\Coupon Downloader.dll () BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.) BHO-x32: saaFerweb - {900079E0-956E-FE5E-B998-B2C52B6C8E1A} - C:\ProgramData\saaFerweb\DyGSDZ4_l.dll () BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\DPS2\AppData\Roaming\Mozilla\Firefox\Profiles\j8affl7e.default-1405092946896 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel) FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\DPS2\AppData\Roaming\Mozilla\Firefox\Profiles\a1py1dfb.default-1399564243149\extensions\quick_start@gmail.com FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff Chrome: ======= CHR HomePage: hxxp://istart.webssearches.com/?type=hppp&ts=1403002120&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA CHR StartupUrls: "hxxp://istart.webssearches.com/?type=hppp&ts=1403002120&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA" CHR DefaultSearchKeyword: webssearches CHR DefaultSearchProvider: webssearches CHR DefaultSearchURL: http://istart.webssearches.com/web/?type=dspp&ts=1403002120&from=amt&uid=ST500LT012-9WS142_W0VFSPLAXXXXW0VFSPLA&q={searchTerms} CHR DefaultNewTabURL: CHR Extension: (Docs) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-22] CHR Extension: (Dysk Google) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-22] CHR Extension: (Iframely for Gmail) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbafbcjnlgfbemjemgliogmfdlkocjmi [2014-07-08] CHR Extension: (YouTube) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-22] CHR Extension: (Website Logon) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdkedefaddcdlpmiafhicjnkbogjiogj [2014-01-22] CHR Extension: (Szukaj w Google) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-22] CHR Extension: (Google Wallet) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-22] CHR Extension: (Pin Search Image Search on Pinterest) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\okiaciimfpgbpdhnfdllhdkicpmdoakm [2014-07-07] CHR Extension: (Gmail) - C:\Users\DPS2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-22] CHR HKLM-x32\...\Chrome\Extension: [cdkedefaddcdlpmiafhicjnkbogjiogj] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx [2012-03-13] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 70e6ca8c; c:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll [186496 2014-06-17] () R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [945440 2012-02-01] (Broadcom Corporation.) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [169776 2012-03-12] (Lenovo) R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_1_5\bin\fbguard.exe [65536 2004-12-13] (The Firebird Project) [File not signed] R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_1_5\bin\fbserver.exe [1527893 2004-12-13] (The Firebird Project) [File not signed] R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [328520 2012-05-14] (AuthenTec, Inc) S3 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2010-10-27] (Hewlett-Packard Company) [File not signed] R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [145920 2010-10-27] (HP) [File not signed] R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-06] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [163608 2012-03-06] (Intel Corporation) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [188200 2013-01-28] (Lenovo Group Limited) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1674720 2013-09-25] () R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed] R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation) S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed] S2 ProtectMonitor; C:\Program Files\PCDApp\StartHelp.exe [77705 2014-06-09] () [File not signed] R2 rqpbhevlkc64; C:\Program Files\004\rqpbhevlkc64.exe [709120 2014-06-17] () [File not signed] S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] () R2 WindowsProtectManger; C:\ProgramData\WindowsProtectManger\wprotectmanager.exe [591776 2014-06-12] (Fuyu LIMITED) ==================== Drivers (Whitelisted) ==================== R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-01] (Broadcom Corporation.) R1 F06DEFF2-5B9C-490D-910F-35D3A91196222; C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc1.cfg [36240 2014-05-25] (Aztec Media Inc) R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [71440 2012-03-12] (Windows (R) Win 7 DDK provider) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation) S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.) R4 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-06-02] (NetFilterSDK.com) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [27960 2012-07-12] (Synaptics Incorporated) R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.) R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2012-02-29] (Vimicro Corporation) R1 {3f538614-b636-4023-9ec2-564ada4b07b3}Gw64; C:\Windows\System32\drivers\{3f538614-b636-4023-9ec2-564ada4b07b3}Gw64.sys [61112 2014-06-23] (StdLib) S1 {b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gt; C:\Windows\System32\drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gt.sys [55224 2014-06-18] (StdLib) R1 {b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gw64; C:\Windows\System32\drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gw64.sys [61112 2014-06-13] (StdLib) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-11 17:55 - 2014-07-11 17:55 - 00025490 _____ () C:\Users\DPS2\Downloads\FRST.txt 2014-07-11 17:54 - 2014-07-11 17:55 - 00000000 ____D () C:\FRST 2014-07-11 17:54 - 2014-07-11 17:54 - 00065968 _____ () C:\Users\DPS2\Downloads\Extras.Txt 2014-07-11 17:53 - 2014-07-11 17:53 - 00147802 _____ () C:\Users\DPS2\Downloads\OTL.Txt 2014-07-11 17:44 - 2014-07-11 17:44 - 02084864 _____ (Farbar) C:\Users\DPS2\Downloads\FRST64.exe 2014-07-11 17:44 - 2014-07-11 17:44 - 00602112 _____ (OldTimer Tools) C:\Users\DPS2\Downloads\OTL.exe 2014-07-11 17:32 - 2014-07-11 17:35 - 00000000 ____D () C:\Users\DPS2\Desktop\Stare dane programu Firefox 2014-07-11 17:25 - 2014-07-11 17:25 - 00000000 ____D () C:\Program Files (x86)\predm 2014-07-11 17:24 - 2013-04-15 11:50 - 00654336 _____ () C:\Windows\system32\HP1006SM.EXE 2014-07-11 17:24 - 2013-04-15 11:50 - 00198144 _____ () C:\Windows\system32\HP1006LM.DLL 2014-07-10 03:00 - 2014-07-10 03:00 - 00000000 ____D () C:\Users\DPS2\AppData\Local\Packages 2014-07-10 03:00 - 2014-07-10 03:00 - 00000000 ____D () C:\ProgramData\saaFerweb 2014-07-09 08:48 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-09 08:48 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-09 08:48 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-09 08:48 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-09 08:48 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-09 08:47 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-09 08:47 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-09 08:47 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-09 08:47 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-09 08:47 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-09 08:47 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-09 08:47 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-09 08:47 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-09 08:47 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-09 08:47 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-09 08:47 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-09 08:47 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-09 08:47 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-09 08:47 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-09 08:47 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-09 08:47 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-09 08:47 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-09 08:47 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-09 08:47 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-09 08:47 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-09 08:47 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-09 08:47 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-09 08:47 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-09 08:47 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-09 08:47 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-09 08:47 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-09 08:47 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-09 08:47 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-09 08:47 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-09 08:47 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-09 08:47 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-09 08:47 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-09 08:47 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-09 08:47 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-09 08:47 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-09 08:47 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-09 08:47 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-09 08:47 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-09 08:47 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-09 08:47 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-09 08:47 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-09 08:47 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-09 08:47 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-09 08:47 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-09 08:47 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-09 08:47 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-09 08:47 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-09 08:47 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-09 08:47 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-09 08:47 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-09 08:47 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-09 08:47 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-09 08:47 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-09 08:47 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-09 08:47 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-09 08:47 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-09 08:47 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-09 08:47 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-09 08:47 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-09 08:47 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-09 08:47 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-09 08:47 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-09 08:47 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-09 08:47 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-09 08:47 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-09 08:47 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-09 08:47 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-09 08:47 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-09 08:47 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-09 08:47 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-09 08:47 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-09 08:47 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-09 08:47 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-09 08:46 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-09 08:46 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-09 08:46 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-08 08:37 - 2014-07-08 08:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-08 08:35 - 2014-07-08 08:35 - 01058200 _____ (Adobe) C:\Users\DPS2\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe 2014-07-07 13:29 - 2014-07-10 03:00 - 00000000 ____D () C:\ProgramData\74bef561e32638c4 2014-06-24 11:29 - 2014-06-23 16:42 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{3f538614-b636-4023-9ec2-564ada4b07b3}Gw64.sys 2014-06-23 18:13 - 2014-06-18 16:55 - 00055224 _____ (StdLib) C:\Windows\system32\Drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gt.sys 2014-06-18 08:26 - 2014-07-11 17:20 - 00000286 _____ () C:\Windows\Tasks\bench-Updater removing.job 2014-06-18 08:26 - 2014-06-18 08:26 - 00003226 _____ () C:\Windows\System32\Tasks\bench-Updater removing 2014-06-17 14:17 - 2014-06-17 14:17 - 00003154 _____ () C:\Windows\System32\Tasks\Systweak Support Dock 2014-06-17 14:16 - 2014-06-17 14:16 - 00001484 _____ () C:\Users\Public\Desktop\Advanced Disk Recovery.lnk 2014-06-17 14:16 - 2014-06-17 14:16 - 00001311 _____ () C:\Users\Public\Desktop\Systweak Support Dock.lnk 2014-06-17 14:16 - 2014-06-17 14:16 - 00000000 ____D () C:\Users\DPS2\AppData\Local\CrashRpt 2014-06-17 14:16 - 2014-06-17 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Systweak Support Dock 2014-06-17 14:16 - 2014-06-17 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Disk Recovery 2014-06-17 14:16 - 2014-06-17 14:16 - 00000000 ____D () C:\Program Files (x86)\Advanced Disk Recovery 2014-06-17 14:15 - 2014-06-17 14:16 - 00000000 ____D () C:\Program Files (x86)\Systweak Support Dock 2014-06-17 13:58 - 2014-06-17 13:58 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\Optimizer Pro 2014-06-17 13:53 - 2014-07-11 17:53 - 00000284 _____ () C:\Windows\Tasks\FoxTab.job 2014-06-17 13:53 - 2014-06-17 13:53 - 00003232 _____ () C:\Windows\System32\Tasks\FoxTab 2014-06-17 13:53 - 2014-06-17 13:53 - 00001077 _____ () C:\Users\DPS2\Desktop\Optimizer Pro.lnk 2014-06-17 13:53 - 2014-06-17 13:53 - 00000043 _____ () C:\Users\DPS2\AppData\Roaming\WB.CFG 2014-06-17 13:53 - 2014-06-17 13:53 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\FoxTab 2014-06-17 13:53 - 2014-06-17 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 2014-06-17 13:52 - 2014-06-17 13:53 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 2014-06-17 13:51 - 2014-06-17 13:51 - 00000000 ____D () C:\ProgramData\374311380 2014-06-17 13:41 - 2014-06-17 13:58 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-17 13:41 - 2014-06-17 13:41 - 00000000 ____D () C:\Users\DPS2\Documents\Optimizer Pro 2014-06-17 13:37 - 2014-07-11 10:01 - 00000000 ____D () C:\Program Files\CouponDownloader 2014-06-17 13:37 - 2014-06-17 13:37 - 00000000 ____D () C:\temp 2014-06-17 13:37 - 2014-06-17 13:37 - 00000000 ____D () C:\Program Files\coupon downloader 2014-06-17 13:37 - 2014-06-17 13:37 - 00000000 ____D () C:\Program Files (x86)\Coupon Downloader 2014-06-17 13:35 - 2014-06-17 13:37 - 00000000 ____D () C:\Program Files\004 2014-06-17 13:06 - 2014-06-17 13:06 - 00623552 _____ (Click Me In Limited) C:\Users\DPS2\AppData\Local\nsgDBCA.tmp 2014-06-17 12:51 - 2014-06-17 14:13 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job 2014-06-17 12:51 - 2014-06-17 14:01 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job 2014-06-17 12:51 - 2014-06-17 14:01 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job 2014-06-17 12:51 - 2014-06-17 13:53 - 00002826 _____ () C:\Windows\System32\Tasks\APSnotifierPP1 2014-06-17 12:51 - 2014-06-17 13:53 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP3 2014-06-17 12:51 - 2014-06-17 13:53 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP2 2014-06-17 12:51 - 2014-06-17 12:51 - 00000320 _____ () C:\Users\DPS2\AppData\Roaming\aps.uninstall.scan.results 2014-06-17 12:50 - 2014-06-16 09:10 - 00608164 _____ (Click Me In Limited) C:\Users\DPS2\AppData\Local\AnyProtectScannerSetup.exe 2014-06-17 12:48 - 2014-06-17 14:11 - 00000266 __RSH () C:\ProgramData\ntuser.pol 2014-06-17 12:47 - 2014-06-17 13:41 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-06-17 12:47 - 2014-06-17 12:47 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\Opera Software 2014-06-17 12:47 - 2014-06-17 12:47 - 00000000 ____D () C:\Users\DPS2\AppData\Local\Opera Software 2014-06-17 12:46 - 2014-04-25 14:49 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe 2014-06-17 12:45 - 2014-06-17 14:24 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\systweak 2014-06-17 12:45 - 2014-06-17 14:15 - 00000000 ____D () C:\Program Files (x86)\RegClean Pro 2014-06-17 11:48 - 2014-07-11 17:20 - 00000342 _____ () C:\Windows\Tasks\bench-sys.job 2014-06-17 11:48 - 2014-06-17 14:25 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-06-17 11:48 - 2014-06-17 11:48 - 00003238 _____ () C:\Windows\System32\Tasks\bench-sys 2014-06-17 11:45 - 2014-06-17 13:44 - 00000000 ____D () C:\Program Files (x86)\Linkey 2014-06-17 11:45 - 2014-06-17 13:27 - 00000000 ____D () C:\ProgramData\systemk 2014-06-17 11:44 - 2014-06-17 11:44 - 00000000 ____D () C:\Program Files (x86)\Settings Manager 2014-06-17 10:08 - 2014-06-18 08:45 - 00010542 _____ () C:\Users\DPS2\Desktop\PREMIA 2014.ods 2014-06-16 08:55 - 2014-06-13 16:09 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gw64.sys 2014-06-16 07:55 - 2014-07-10 03:25 - 00000000 ____D () C:\Program Files\PCDApp 2014-06-16 07:55 - 2014-06-17 14:14 - 00000000 ____D () C:\Program Files (x86)\AmiExt 2014-06-16 07:54 - 2014-06-16 07:55 - 00000000 ____D () C:\ProgramData\IePluginServices 2014-06-16 07:54 - 2014-06-16 07:54 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\SupTab 2014-06-16 07:54 - 2014-06-16 07:54 - 00000000 ____D () C:\ProgramData\WindowsProtectManger 2014-06-16 07:54 - 2014-06-16 07:54 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-06-16 07:53 - 2014-07-11 17:20 - 00000340 _____ () C:\Windows\Tasks\AmiUpdXp.job 2014-06-16 07:53 - 2014-06-16 07:53 - 00003358 _____ () C:\Windows\System32\Tasks\AmiUpdXp 2014-06-16 07:53 - 2014-06-16 07:53 - 00000000 ____D () C:\Users\DPS2\AppData\Local\13307 2014-06-16 07:52 - 2014-06-17 14:14 - 00000000 ____D () C:\Users\DPS2\AppData\Local\Genesis_06160552 2014-06-16 07:51 - 2014-06-16 07:51 - 00346144 _____ () C:\Users\DPS2\Downloads\FlashPlayersetup__2583_i878035289_il1.exe 2014-06-16 07:51 - 2014-06-16 07:51 - 00346144 _____ () C:\Users\DPS2\Downloads\FlashPlayersetup__2583_i878032611_il1.exe 2014-06-16 07:48 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-16 07:48 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-06-16 07:48 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-16 07:48 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-16 07:48 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-16 07:48 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-16 07:48 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-16 07:48 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-16 07:48 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-06-16 07:48 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-06-16 07:48 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-06-16 07:48 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll ==================== One Month Modified Files and Folders ======= 2014-07-11 17:55 - 2014-07-11 17:55 - 00025490 _____ () C:\Users\DPS2\Downloads\FRST.txt 2014-07-11 17:55 - 2014-07-11 17:54 - 00000000 ____D () C:\FRST 2014-07-11 17:54 - 2014-07-11 17:54 - 00065968 _____ () C:\Users\DPS2\Downloads\Extras.Txt 2014-07-11 17:53 - 2014-07-11 17:53 - 00147802 _____ () C:\Users\DPS2\Downloads\OTL.Txt 2014-07-11 17:53 - 2014-06-17 13:53 - 00000284 _____ () C:\Windows\Tasks\FoxTab.job 2014-07-11 17:49 - 2009-07-14 06:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-11 17:49 - 2009-07-14 06:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-11 17:44 - 2014-07-11 17:44 - 02084864 _____ (Farbar) C:\Users\DPS2\Downloads\FRST64.exe 2014-07-11 17:44 - 2014-07-11 17:44 - 00602112 _____ (OldTimer Tools) C:\Users\DPS2\Downloads\OTL.exe 2014-07-11 17:39 - 2013-12-06 13:12 - 00001162 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-11 17:35 - 2014-07-11 17:32 - 00000000 ____D () C:\Users\DPS2\Desktop\Stare dane programu Firefox 2014-07-11 17:33 - 2014-06-08 13:19 - 00555008 ___SH () C:\Users\DPS2\Desktop\Thumbs.db 2014-07-11 17:30 - 2014-02-07 15:18 - 00000000 ____D () C:\Users\DPS2\AppData\Local\CrashDumps 2014-07-11 17:25 - 2014-07-11 17:25 - 00000000 ____D () C:\Program Files (x86)\predm 2014-07-11 17:25 - 2014-01-20 11:52 - 00000000 ____D () C:\Program Files\HP 2014-07-11 17:25 - 2013-10-07 03:57 - 01553710 ____N () C:\Windows\WindowsUpdate.log 2014-07-11 17:25 - 2009-07-14 04:34 - 00000505 _____ () C:\Windows\win.ini 2014-07-11 17:22 - 2014-01-20 11:40 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-11 17:20 - 2014-06-18 08:26 - 00000286 _____ () C:\Windows\Tasks\bench-Updater removing.job 2014-07-11 17:20 - 2014-06-17 11:48 - 00000342 _____ () C:\Windows\Tasks\bench-sys.job 2014-07-11 17:20 - 2014-06-16 07:53 - 00000340 _____ () C:\Windows\Tasks\AmiUpdXp.job 2014-07-11 13:22 - 2014-01-20 11:40 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-11 13:22 - 2014-01-20 11:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-11 13:22 - 2014-01-20 11:40 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-11 12:42 - 2013-10-07 04:18 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2014-07-11 10:01 - 2014-06-17 13:37 - 00000000 ____D () C:\Program Files\CouponDownloader 2014-07-11 09:10 - 2013-10-07 13:41 - 00741124 _____ () C:\Windows\system32\perfh015.dat 2014-07-11 09:10 - 2013-10-07 13:41 - 00156408 _____ () C:\Windows\system32\perfc015.dat 2014-07-11 09:10 - 2009-07-14 07:13 - 01672070 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-10 10:33 - 2014-05-08 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-10 10:11 - 2013-12-06 13:03 - 00074990 _____ () C:\Users\DPS2\AppData\Roaming\AbsoluteReminder.xml 2014-07-10 03:26 - 2013-10-07 04:18 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2014-07-10 03:26 - 2013-10-07 04:16 - 629752320 ___SH () C:\Windows\lenovo_fastboot.img 2014-07-10 03:25 - 2014-06-16 07:55 - 00000000 ____D () C:\Program Files\PCDApp 2014-07-10 03:25 - 2013-12-06 13:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-10 03:25 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-10 03:25 - 2009-07-14 06:45 - 00276200 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-10 03:23 - 2014-05-10 03:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-10 03:23 - 2013-12-06 13:32 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\SoftGrid Client 2014-07-10 03:23 - 2013-02-11 19:31 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-10 03:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-10 03:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-10 03:06 - 2014-04-30 08:10 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 03:03 - 2014-04-30 08:10 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-10 03:00 - 2014-07-10 03:00 - 00000000 ____D () C:\Users\DPS2\AppData\Local\Packages 2014-07-10 03:00 - 2014-07-10 03:00 - 00000000 ____D () C:\ProgramData\saaFerweb 2014-07-10 03:00 - 2014-07-07 13:29 - 00000000 ____D () C:\ProgramData\74bef561e32638c4 2014-07-08 08:38 - 2014-07-08 08:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-08 08:35 - 2014-07-08 08:35 - 01058200 _____ (Adobe) C:\Users\DPS2\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe 2014-06-30 04:09 - 2014-07-09 08:48 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-09 08:48 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-23 16:42 - 2014-06-24 11:29 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{3f538614-b636-4023-9ec2-564ada4b07b3}Gw64.sys 2014-06-20 22:14 - 2014-07-09 08:47 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-06-20 21:39 - 2014-07-09 08:47 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-06-19 03:39 - 2014-07-09 08:47 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-19 03:06 - 2014-07-09 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-19 03:06 - 2014-07-09 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-19 02:48 - 2014-07-09 08:47 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-19 02:42 - 2014-07-09 08:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-19 02:42 - 2014-07-09 08:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-19 02:41 - 2014-07-09 08:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-06-19 02:41 - 2014-07-09 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-19 02:32 - 2014-07-09 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-19 02:31 - 2014-07-09 08:47 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-19 02:26 - 2014-07-09 08:47 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-19 02:24 - 2014-07-09 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-19 02:24 - 2014-07-09 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-19 02:23 - 2014-07-09 08:47 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-19 02:16 - 2014-07-09 08:47 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-06-19 02:14 - 2014-07-09 08:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-19 02:09 - 2014-07-09 08:47 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-19 01:59 - 2014-07-09 08:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-19 01:56 - 2014-07-09 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-06-19 01:53 - 2014-07-09 08:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-19 01:51 - 2014-07-09 08:47 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-19 01:50 - 2014-07-09 08:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-19 01:48 - 2014-07-09 08:47 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-19 01:39 - 2014-07-09 08:47 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-19 01:38 - 2014-07-09 08:47 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-06-19 01:37 - 2014-07-09 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-06-19 01:36 - 2014-07-09 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-06-19 01:35 - 2014-07-09 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-06-19 01:33 - 2014-07-09 08:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-19 01:32 - 2014-07-09 08:47 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-06-19 01:28 - 2014-07-09 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-06-19 01:28 - 2014-07-09 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-06-19 01:27 - 2014-07-09 08:47 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-19 01:27 - 2014-07-09 08:47 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-19 01:25 - 2014-07-09 08:47 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-06-19 01:23 - 2014-07-09 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-06-19 01:22 - 2014-07-09 08:47 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-06-19 01:12 - 2014-07-09 08:47 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-06-19 01:06 - 2014-07-09 08:47 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-06-19 01:01 - 2014-07-09 08:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-06-19 00:59 - 2014-07-09 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-06-19 00:58 - 2014-07-09 08:47 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-19 00:58 - 2014-07-09 08:47 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-06-19 00:52 - 2014-07-09 08:47 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-06-19 00:51 - 2014-07-09 08:47 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-19 00:49 - 2014-07-09 08:47 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-06-19 00:46 - 2014-07-09 08:47 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-06-19 00:45 - 2014-07-09 08:47 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-06-19 00:35 - 2014-07-09 08:47 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-06-19 00:34 - 2014-07-09 08:47 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-19 00:15 - 2014-07-09 08:47 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-19 00:13 - 2014-07-09 08:47 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-06-19 00:09 - 2014-07-09 08:47 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-06-19 00:07 - 2014-07-09 08:47 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-06-18 16:55 - 2014-06-23 18:13 - 00055224 _____ (StdLib) C:\Windows\system32\Drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gt.sys 2014-06-18 08:45 - 2014-06-17 10:08 - 00010542 _____ () C:\Users\DPS2\Desktop\PREMIA 2014.ods 2014-06-18 08:29 - 2013-12-18 04:04 - 00000000 ____D () C:\ldiag 2014-06-18 08:26 - 2014-06-18 08:26 - 00003226 _____ () C:\Windows\System32\Tasks\bench-Updater removing 2014-06-18 04:18 - 2014-07-09 08:48 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-06-18 03:51 - 2014-07-09 08:48 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-06-18 03:10 - 2014-07-09 08:48 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-06-17 14:25 - 2014-06-17 11:48 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-06-17 14:24 - 2014-06-17 12:45 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\systweak 2014-06-17 14:17 - 2014-06-17 14:17 - 00003154 _____ () C:\Windows\System32\Tasks\Systweak Support Dock 2014-06-17 14:16 - 2014-06-17 14:16 - 00001484 _____ () C:\Users\Public\Desktop\Advanced Disk Recovery.lnk 2014-06-17 14:16 - 2014-06-17 14:16 - 00001311 _____ () C:\Users\Public\Desktop\Systweak Support Dock.lnk 2014-06-17 14:16 - 2014-06-17 14:16 - 00000000 ____D () C:\Users\DPS2\AppData\Local\CrashRpt 2014-06-17 14:16 - 2014-06-17 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Systweak Support Dock 2014-06-17 14:16 - 2014-06-17 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Disk Recovery 2014-06-17 14:16 - 2014-06-17 14:16 - 00000000 ____D () C:\Program Files (x86)\Advanced Disk Recovery 2014-06-17 14:16 - 2014-06-17 14:15 - 00000000 ____D () C:\Program Files (x86)\Systweak Support Dock 2014-06-17 14:15 - 2014-06-17 12:45 - 00000000 ____D () C:\Program Files (x86)\RegClean Pro 2014-06-17 14:14 - 2014-06-16 07:55 - 00000000 ____D () C:\Program Files (x86)\AmiExt 2014-06-17 14:14 - 2014-06-16 07:52 - 00000000 ____D () C:\Users\DPS2\AppData\Local\Genesis_06160552 2014-06-17 14:13 - 2014-06-17 12:51 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job 2014-06-17 14:11 - 2014-06-17 12:48 - 00000266 __RSH () C:\ProgramData\ntuser.pol 2014-06-17 14:10 - 2013-12-06 13:13 - 00000000 ____D () C:\Program Files (x86)\Google 2014-06-17 14:09 - 2014-05-17 14:33 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\FileZilla 2014-06-17 14:09 - 2014-05-16 18:31 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-06-17 14:09 - 2014-05-10 15:34 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\uTorrent 2014-06-17 14:01 - 2014-06-17 12:51 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job 2014-06-17 14:01 - 2014-06-17 12:51 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job 2014-06-17 13:58 - 2014-06-17 13:58 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\Optimizer Pro 2014-06-17 13:58 - 2014-06-17 13:41 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-17 13:53 - 2014-06-17 13:53 - 00003232 _____ () C:\Windows\System32\Tasks\FoxTab 2014-06-17 13:53 - 2014-06-17 13:53 - 00001077 _____ () C:\Users\DPS2\Desktop\Optimizer Pro.lnk 2014-06-17 13:53 - 2014-06-17 13:53 - 00000043 _____ () C:\Users\DPS2\AppData\Roaming\WB.CFG 2014-06-17 13:53 - 2014-06-17 13:53 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\FoxTab 2014-06-17 13:53 - 2014-06-17 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 2014-06-17 13:53 - 2014-06-17 13:52 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 2014-06-17 13:53 - 2014-06-17 12:51 - 00002826 _____ () C:\Windows\System32\Tasks\APSnotifierPP1 2014-06-17 13:53 - 2014-06-17 12:51 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP3 2014-06-17 13:53 - 2014-06-17 12:51 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP2 2014-06-17 13:51 - 2014-06-17 13:51 - 00000000 ____D () C:\ProgramData\374311380 2014-06-17 13:48 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-06-17 13:44 - 2014-06-17 11:45 - 00000000 ____D () C:\Program Files (x86)\Linkey 2014-06-17 13:41 - 2014-06-17 13:41 - 00000000 ____D () C:\Users\DPS2\Documents\Optimizer Pro 2014-06-17 13:41 - 2014-06-17 12:47 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-06-17 13:37 - 2014-06-17 13:37 - 00000000 ____D () C:\temp 2014-06-17 13:37 - 2014-06-17 13:37 - 00000000 ____D () C:\Program Files\coupon downloader 2014-06-17 13:37 - 2014-06-17 13:37 - 00000000 ____D () C:\Program Files (x86)\Coupon Downloader 2014-06-17 13:37 - 2014-06-17 13:35 - 00000000 ____D () C:\Program Files\004 2014-06-17 13:37 - 2013-12-06 13:02 - 00000000 ____D () C:\Users\DPS2 2014-06-17 13:27 - 2014-06-17 11:45 - 00000000 ____D () C:\ProgramData\systemk 2014-06-17 13:06 - 2014-06-17 13:06 - 00623552 _____ (Click Me In Limited) C:\Users\DPS2\AppData\Local\nsgDBCA.tmp 2014-06-17 12:51 - 2014-06-17 12:51 - 00000320 _____ () C:\Users\DPS2\AppData\Roaming\aps.uninstall.scan.results 2014-06-17 12:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-06-17 12:48 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-06-17 12:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-06-17 12:47 - 2014-06-17 12:47 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\Opera Software 2014-06-17 12:47 - 2014-06-17 12:47 - 00000000 ____D () C:\Users\DPS2\AppData\Local\Opera Software 2014-06-17 11:48 - 2014-06-17 11:48 - 00003238 _____ () C:\Windows\System32\Tasks\bench-sys 2014-06-17 11:44 - 2014-06-17 11:44 - 00000000 ____D () C:\Program Files (x86)\Settings Manager 2014-06-16 09:10 - 2014-06-17 12:50 - 00608164 _____ (Click Me In Limited) C:\Users\DPS2\AppData\Local\AnyProtectScannerSetup.exe 2014-06-16 07:55 - 2014-06-16 07:54 - 00000000 ____D () C:\ProgramData\IePluginServices 2014-06-16 07:54 - 2014-06-16 07:54 - 00000000 ____D () C:\Users\DPS2\AppData\Roaming\SupTab 2014-06-16 07:54 - 2014-06-16 07:54 - 00000000 ____D () C:\ProgramData\WindowsProtectManger 2014-06-16 07:54 - 2014-06-16 07:54 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-06-16 07:54 - 2013-12-06 13:12 - 00001386 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-16 07:54 - 2013-12-06 13:05 - 00001660 _____ () C:\Users\DPS2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-16 07:53 - 2014-06-16 07:53 - 00003358 _____ () C:\Windows\System32\Tasks\AmiUpdXp 2014-06-16 07:53 - 2014-06-16 07:53 - 00000000 ____D () C:\Users\DPS2\AppData\Local\13307 2014-06-16 07:51 - 2014-06-16 07:51 - 00346144 _____ () C:\Users\DPS2\Downloads\FlashPlayersetup__2583_i878035289_il1.exe 2014-06-16 07:51 - 2014-06-16 07:51 - 00346144 _____ () C:\Users\DPS2\Downloads\FlashPlayersetup__2583_i878032611_il1.exe 2014-06-13 16:09 - 2014-06-16 08:55 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}Gw64.sys Some content of TEMP: ==================== C:\Users\DPS2\AppData\Local\Temp\57224uninstall.exe C:\Users\DPS2\AppData\Local\Temp\Sqlite3.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-30 12:13 ==================== End Of Log ============================