Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-10-2014 01
Ran by b3 (administrator) on ZORDON on 08-10-2014 03:12:48
Running from C:\Users\b3\Desktop
Loaded Profile: b3 (Available profiles: b3)
Platform: Windows 8.1 Pro N (Update 1) (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\ReviverSoft\Battery Optimizer\BatteryOptimizer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(Gadwin Systems) C:\Program Files\Gadwin\Gadwin PrintScreen\PrintScreen64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe
(Dropbox, Inc.) C:\Users\b3\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(K2T.eu, Kaworu) C:\Program Files\K2T\WTW\wtw.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Tethys Solutions, LLC) C:\Program Files (x86)\Workspace Macro Pro 6.5\Workspace Macro Pro.exe
(Tethys Solutions, LLC) C:\Program Files (x86)\Workspace Macro Pro 6.5\Workspace Macro Pro.exe
(Solutions) C:\Program Files (x86)\Workspace Macro Pro 6.5\WMPHotkeys.exe
(Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC 2014\Photoshop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(WebServ.PL) D:\_webserv\WebServ.exe
(Apache Software Foundation) D:\_webserv\apache2\bin\WebServ(apache).exe
() D:\_webserv\mysql\bin\WebServ(mysqld).exe
(Apache Software Foundation) D:\_webserv\apache2\bin\WebServ(apache).exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(OldTimer Tools) C:\Users\b3\Desktop\OTL.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\b3\AppData\Local\Temp\Rar$EXa0.048\m57g1hli.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [13840 2013-11-04] (Alienware)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7174728 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] => C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [4593968 2013-11-15] ()
HKLM-x32\...\Run: [Alienware Survey] => C:\Program Files (x86)\Alienware Customer Surveys\AlienSurvey.exe [7390264 2013-03-09] (Alienware, Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039240 2013-05-16] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKU\S-1-5-21-2274604848-2066818195-768471220-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2274604848-2066818195-768471220-1001\...\Run: [Gadwin PrintScreen (64-bit)] => C:\Program Files\Gadwin\Gadwin PrintScreen\PrintScreen64.exe [14082208 2014-02-21] (Gadwin Systems)
HKU\S-1-5-21-2274604848-2066818195-768471220-1001\...\Run: [SRS Audio Sandbox] => C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe [4354048 2012-06-09] (SRS Labs, Inc.)
HKU\S-1-5-21-2274604848-2066818195-768471220-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2274604848-2066818195-768471220-1001\...\Run: [Spotify Web Helper] => C:\Users\b3\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-09-30] (Spotify Ltd)
HKU\S-1-5-21-2274604848-2066818195-768471220-1001\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3510704 2014-07-23] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-2274604848-2066818195-768471220-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{987ACE92-A585-45CF-AE43-0B038780B497}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TrayMenu.lnk
ShortcutTarget: TrayMenu.lnk -> C:\Windows\SysWOW64\C2MP\TrayMenu.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Workspace Macro Pro Hotkeys.lnk
ShortcutTarget: Workspace Macro Pro Hotkeys.lnk -> C:\Program Files (x86)\Workspace Macro Pro 6.5\WMPHotkeys.exe (Solutions)
Startup: C:\Users\b3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\b3\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: zmien.info:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9D0F894BB080CF01
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Tcpip\Parameters: [DhcpNameServer] 194.204.159.1 194.204.152.34

FireFox:
========
FF ProfilePath: C:\Users\b3\AppData\Roaming\Mozilla\Firefox\Profiles\v2bm19qy.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\b3\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Auto Refresh - C:\Users\b3\AppData\Roaming\Mozilla\Firefox\Profiles\v2bm19qy.default\Extensions\autorefresh@plugin.xpi [2014-06-09]
FF Extension: Polski Language Pack - C:\Users\b3\AppData\Roaming\Mozilla\Firefox\Profiles\v2bm19qy.default\Extensions\langpack-pl@Waterfox.mozilla.org.xpi [2014-08-11]
FF Extension: Adblock Plus - C:\Users\b3\AppData\Roaming\Mozilla\Firefox\Profiles\v2bm19qy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-28]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-05-26]

Chrome: 
=======
CHR Profile: C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-26]
CHR Extension: (Dysk Google) - C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-26]
CHR Extension: (YouTube) - C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-26]
CHR Extension: (Szukaj w Google) - C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-26]
CHR Extension: (AdBlock) - C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-26]
CHR Extension: (Smooth Gestures) - C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfkgmnnajiljnolcgolmmgnecgldgeld [2014-05-26]
CHR Extension: (Google Wallet) - C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-26]
CHR Extension: (Gmail) - C:\Users\b3\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [614624 2014-09-02] (Futuremark)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 ioloEnergyBooster; C:\Program Files\Alienware\Command Center\ioloEnergyBooster.exe [6145872 2012-11-01] (iolo technologies, LLC)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2013-08-31] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [340480 2013-10-08] (Qualcomm Atheros) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [239176 2013-02-19] (Realtek Semiconductor)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [635160 2014-04-22] (Wacom Technology, Corp.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 akwbx; C:\Windows\system32\DRIVERS\akwbx64.sys [3885264 2013-08-29] (Qualcomm Atheros, Inc.)
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-13] (Qualcomm Atheros, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-05-29] (Disc Soft Ltd)
R0 EMSC; C:\Windows\System32\drivers\EMSC.SYS [17720 2012-07-10] ()
R0 EMSC; C:\Windows\SysWOW64\drivers\EMSC.SYS [15160 2012-07-10] ()
R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [163536 2013-03-20] (Qualcomm Atheros, Inc.)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [299352 2014-07-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 SRS_SSCFilter; C:\Windows\system32\drivers\srs_sscfilter_amd64.sys [55040 2007-07-26] ()
R3 ST_ACCEL; C:\Windows\system32\DRIVERS\ST_Accel.sys [91360 2013-04-11] (STMicroelectronics)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S1 MpKsl70089e84; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E9CB9F87-05C6-47AB-ADB0-5770CC9FAE52}\MpKsl70089e84.sys [X]
S3 SmbDrvI; \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys [X]
U3 uxldypob; \??\C:\Users\b3\AppData\Local\Temp\uxldypob.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-08 03:12 - 2014-10-08 03:13 - 00022547 _____ () C:\Users\b3\Desktop\FRST.txt
2014-10-08 03:12 - 2014-10-08 03:12 - 00000000 ____D () C:\FRST
2014-10-08 03:10 - 2014-10-08 03:11 - 00368705 _____ () C:\Users\b3\Desktop\gm.zip
2014-10-08 03:10 - 2014-10-08 03:10 - 02109952 _____ (Farbar) C:\Users\b3\Desktop\FRST64.exe
2014-10-08 03:09 - 2014-10-08 03:09 - 00148054 _____ () C:\Users\b3\Desktop\OTL.Txt
2014-10-08 02:55 - 2014-10-08 02:55 - 00053040 _____ () C:\Users\b3\Desktop\F-Secure_DNSCheck.zip
2014-10-08 02:55 - 2014-10-08 02:55 - 00000000 ____D () C:\Users\b3\Desktop\F-Secure_DNSCheck
2014-10-08 02:52 - 2014-10-08 02:52 - 00602112 _____ (OldTimer Tools) C:\Users\b3\Desktop\OTL.exe
2014-10-07 22:59 - 2014-10-07 22:59 - 00154299 _____ () C:\Users\b3\Desktop\przelewiki.rar
2014-10-07 21:22 - 2014-10-08 01:27 - 00043960 _____ () C:\Windows\WindowsUpdate.log
2014-10-06 14:18 - 2014-10-06 14:18 - 00002766 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-10-06 14:17 - 2014-10-06 14:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-10-06 14:17 - 2014-10-06 14:17 - 00000000 ____D () C:\Program Files\CCleaner
2014-10-06 14:02 - 2014-10-06 14:03 - 04965896 _____ (Piriform Ltd) C:\Users\b3\Downloads\ccsetup418.exe
2014-10-06 04:18 - 2014-10-06 07:20 - 04407838 _____ () C:\Users\b3\Desktop\Sequence 01.flv
2014-10-05 22:21 - 2014-10-05 22:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-04 18:01 - 2014-10-04 19:22 - 00000000 ____D () C:\Users\b3\AppData\Local\.magick
2014-10-04 17:59 - 2014-10-04 22:43 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-10-04 17:59 - 2014-10-04 17:59 - 00000000 ____D () C:\Users\b3\AppData\Local\IsolatedStorage
2014-10-04 17:59 - 2014-10-04 17:59 - 00000000 ____D () C:\Users\b3\AppData\Local\Futuremark
2014-10-04 17:59 - 2014-10-04 17:59 - 00000000 ____D () C:\Temp
2014-10-04 17:55 - 2014-10-04 17:59 - 00000000 ____D () C:\Users\b3\Documents\PCMark 8
2014-10-04 17:02 - 2014-10-04 17:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Futuremark
2014-10-04 17:02 - 2014-10-04 17:02 - 00000000 ____D () C:\Program Files\Futuremark
2014-10-04 17:01 - 2014-10-04 17:01 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-10-03 16:43 - 2014-10-03 16:43 - 00002504 _____ () C:\Windows\System32\Tasks\Start Battery Optimizer for zordon@b3
2014-10-03 16:43 - 2014-10-03 16:43 - 00000302 _____ () C:\Windows\Tasks\Start Battery Optimizer for zordon@b3.job
2014-10-03 16:43 - 2014-10-03 16:43 - 00000000 ____D () C:\Users\b3\AppData\Roaming\ReviverSoft
2014-10-03 16:43 - 2014-10-03 16:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReviverSoft
2014-10-03 16:43 - 2014-10-03 16:43 - 00000000 ____D () C:\ProgramData\BatteryOptimizer.exe
2014-10-03 16:43 - 2014-10-03 16:43 - 00000000 ____D () C:\Program Files\ReviverSoft
2014-10-03 16:39 - 2014-10-03 16:39 - 03056136 _____ (ReviverSoft LLC) C:\Users\b3\Downloads\BatteryOptimizerSetup.exe
2014-10-03 09:37 - 2014-10-03 09:38 - 00000000 ____D () C:\Users\b3\AppData\Local\Popcorn-Time
2014-10-03 09:34 - 2014-10-03 09:34 - 00000000 ____D () C:\Users\b3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2014-10-03 09:33 - 2014-10-03 09:34 - 00000000 ____D () C:\Users\b3\AppData\Local\Popcorn Time
2014-10-02 18:05 - 2014-10-02 18:05 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-10-02 18:05 - 2014-10-02 18:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-01 13:10 - 2014-10-01 13:20 - 00001556 _____ () C:\Users\b3\Desktop\marsi.txt
2014-10-01 03:41 - 2014-10-01 03:42 - 05582345 _____ (Swearware) C:\Users\b3\Downloads\ComboFix.exe
2014-09-30 19:48 - 2014-09-30 19:48 - 00000000 ____D () C:\Users\b3\Desktop\movie2
2014-09-30 17:21 - 2014-09-30 17:21 - 00117507 _____ () C:\Users\b3\Downloads\batteryinfoview.zip
2014-09-30 00:52 - 2014-09-30 01:07 - 09989013 _____ ( ) C:\Users\b3\Downloads\NapiProjektBuild_2.2.0.2399(dobreprogramy.pl).exe
2014-09-30 00:22 - 2014-09-30 00:23 - 08517896 _____ () C:\Users\b3\Desktop\movie.mp4
2014-09-21 17:40 - 2014-09-21 17:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free MP4 to MP3 Converter
2014-09-21 17:40 - 2014-09-21 17:40 - 00000000 ____D () C:\Program Files (x86)\Free MP4 to MP3 Converter
2014-09-19 22:42 - 2014-09-19 18:29 - 261092800 _____ () C:\Users\b3\Desktop\Video 2014-09-19 18-28-00.avi
2014-09-16 13:44 - 2014-09-16 18:39 - 00000000 ____D () C:\Users\b3\Documents\FotoSender
2014-09-16 13:44 - 2014-09-16 13:44 - 00116624 _____ () C:\Users\b3\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-16 13:44 - 2014-09-16 13:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fotolab-Fuji
2014-09-16 13:44 - 2014-09-16 13:44 - 00000000 ____D () C:\Program Files (x86)\FotoSender
2014-09-16 10:32 - 2014-09-16 10:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
2014-09-14 17:48 - 2014-09-14 17:48 - 00000000 ____D () C:\Users\b3\Desktop\movie1
2014-09-12 21:22 - 2014-09-12 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-12 21:22 - 2014-09-12 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer Pilot
2014-09-12 21:22 - 2014-09-12 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer
2014-09-12 21:22 - 2014-09-12 21:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-09-12 21:22 - 2014-09-12 21:22 - 00000000 ____D () C:\Program Files (x86)\ALLPlayer Remote
2014-09-12 21:21 - 2014-09-12 21:24 - 00000000 ____D () C:\ProgramData\ALLPlayer
2014-09-12 21:21 - 2014-09-12 21:22 - 00000000 ____D () C:\Program Files (x86)\ALLPlayer
2014-09-12 21:21 - 2013-04-05 21:26 - 02106368 _____ () C:\Windows\SysWOW64\ac3filter.ax
2014-09-12 21:21 - 2013-04-05 21:26 - 00276992 _____ (IntelleSoft) C:\Windows\SysWOW64\BugTrap.dll
2014-09-12 21:21 - 2007-10-07 15:36 - 00258048 _____ () C:\Windows\SysWOW64\libFLAC.dll
2014-09-12 21:12 - 2014-09-12 21:14 - 43507528 _____ (ALLPlayer ) C:\Users\b3\Downloads\ALLPlayerPL.exe
2014-09-08 20:27 - 2014-09-08 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Imagenomic

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-08 03:12 - 2014-05-26 14:48 - 00000000 ____D () C:\Users\b3\AppData\Local\CrashDumps
2014-10-08 03:04 - 2014-05-26 14:34 - 00003964 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{FCCA8D9D-0548-4502-ABCF-06B333F3977F}
2014-10-08 03:01 - 2014-05-26 14:51 - 00001054 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-08 03:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-10-08 02:37 - 2014-06-21 23:50 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-08 02:29 - 2014-05-26 11:15 - 00000000 ____D () C:\Users\b3
2014-10-08 02:21 - 2014-05-28 00:47 - 00000000 ____D () C:\Users\b3\Documents\Workspace Macro Pro
2014-10-08 02:02 - 2014-08-31 10:57 - 00000000 ____D () C:\Users\b3\AppData\Local\Adobe
2014-10-08 01:53 - 2014-05-26 11:21 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2274604848-2066818195-768471220-1001
2014-10-08 01:16 - 2014-05-26 14:51 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-08 01:15 - 2014-05-26 16:34 - 00000000 ____D () C:\Users\b3\AppData\Roaming\Dropbox
2014-10-08 01:14 - 2014-05-26 14:09 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-08 01:14 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-07 23:01 - 2014-06-06 21:02 - 00000000 ____D () C:\Users\b3\AppData\Roaming\Spotify
2014-10-07 16:33 - 2014-05-27 02:13 - 00001740 _____ () C:\Users\b3\AppData\Local\Adobe Save for Web 13.0 Prefs
2014-10-07 14:18 - 2014-05-26 11:19 - 01828496 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-07 14:18 - 2013-08-23 01:12 - 00808198 _____ () C:\Windows\system32\perfh015.dat
2014-10-07 14:18 - 2013-08-23 01:12 - 00164014 _____ () C:\Windows\system32\perfc015.dat
2014-10-07 14:01 - 2014-05-27 18:02 - 00000000 ____D () C:\Users\b3\AppData\Roaming\AIMP3
2014-10-07 13:15 - 2014-06-06 21:04 - 00000000 ____D () C:\Users\b3\AppData\Local\Spotify
2014-10-07 04:46 - 2014-05-26 15:43 - 00000000 ____D () C:\Users\b3\AppData\Roaming\uTorrent
2014-10-06 14:21 - 2014-08-20 05:50 - 00000000 ____D () C:\Users\b3\AppData\Roaming\TeamViewer
2014-10-06 14:21 - 2014-05-29 02:57 - 00000000 ____D () C:\Users\b3\AppData\Roaming\DAEMON Tools Lite
2014-10-06 14:20 - 2014-05-30 05:14 - 00000000 ____D () C:\Windows\Minidump
2014-10-06 14:20 - 2014-05-26 03:58 - 00000000 ____D () C:\Windows\Panther
2014-10-05 22:21 - 2014-08-09 13:25 - 00000000 ____D () C:\Users\b3\Documents\Gamepires
2014-10-05 22:21 - 2014-08-09 13:25 - 00000000 ____D () C:\Users\b3\AppData\Local\SKIDROW
2014-10-04 17:01 - 2014-05-26 13:19 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-03 20:25 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-10-03 16:44 - 2014-06-06 17:54 - 00000000 ____D () C:\Users\b3\AppData\Roaming\vlc
2014-10-02 18:09 - 2014-06-06 19:32 - 00000000 ____D () C:\Users\b3\AppData\Roaming\Skype
2014-10-02 18:05 - 2014-06-06 19:32 - 00000000 ____D () C:\ProgramData\Skype
2014-10-02 18:01 - 2014-06-06 19:34 - 00000000 ____D () C:\Users\b3\AppData\Roaming\ViberPC
2014-10-02 18:01 - 2014-06-06 19:33 - 00000000 ____D () C:\Users\b3\AppData\Local\Viber
2014-10-01 14:46 - 2014-06-04 08:22 - 00005632 _____ () C:\Users\b3\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-01 14:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-09-30 01:43 - 2014-06-06 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt
2014-09-30 01:43 - 2014-06-06 17:59 - 00000000 ____D () C:\Program Files (x86)\NapiProjekt
2014-09-26 21:41 - 2014-06-05 14:38 - 00003868 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1401382706
2014-09-26 21:41 - 2014-05-29 18:58 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-09-22 08:42 - 2014-05-26 22:41 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-21 17:43 - 2014-07-20 23:12 - 00000000 ____D () C:\Users\b3\Desktop\redsquare-sunrise festival
2014-09-19 10:31 - 2014-05-26 16:43 - 00000000 ____D () C:\Users\b3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-16 10:32 - 2014-05-27 18:02 - 00000000 ____D () C:\Program Files (x86)\AIMP3
2014-09-12 17:52 - 2014-08-25 15:52 - 00000000 ____D () C:\Users\b3\Desktop\mailing
2014-09-09 19:37 - 2014-06-21 23:50 - 00003818 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-08 20:27 - 2014-07-14 21:49 - 00000000 ____D () C:\Program Files (x86)\Imagenomic

Files to move or delete:
====================
C:\ProgramData\BatteryOptimizer.exe


Some content of TEMP:
====================
C:\Users\b3\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmper45ix.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-04 18:47

==================== End Of Log ============================