Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by robert (administrator) on LAPTOPR on 05-11-2014 11:09:58
Running from C:\Users\robert\Downloads
Loaded Profile: robert (Available profiles: robert)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() D:\Programy\HDD Health\HDDHealthService.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(PANTERASoft) D:\Programy\HDD Health\hddhealth.exe
(Dropbox, Inc.) C:\Users\robert\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => D:\Programy\KeePass Password Safe 2\KeePass.exe [2117632 2014-07-06] (Dominik Reichl)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKU\S-1-5-21-1569867841-3924063619-169500110-1000\...\Run: [uTorrent] => C:\Users\robert\AppData\Roaming\uTorrent\uTorrent.exe [1385808 2014-10-31] (BitTorrent Inc.)
HKU\S-1-5-21-1569867841-3924063619-169500110-1000\...\Run: [GoogleChromeAutoLaunch_2F069F40C2C9595F1F6B2AD78092287C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-09-04] (Google Inc.)
HKU\S-1-5-21-1569867841-3924063619-169500110-1000\...\Policies\Explorer: [HideSCAPower] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HDDHealth.lnk
ShortcutTarget: HDDHealth.lnk -> D:\Programy\HDD Health\hddhealth.exe (PANTERASoft)
Startup: C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\robert\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://192.168.1.14:240/index1.htm
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1569867841-3924063619-169500110-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
DPF: HKLM-x32 {52D57856-859C-4F58-81E3-7C86B4DA7C48} http://192.168.1.239:239/IPCPlayerPlug.exe
DPF: HKLM-x32 {73FDD716-9BCE-42F7-8B13-DB4F7587B8D1} http://192.168.1.3/webview_ntic.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{275708B8-BE1F-44EB-A072-B3623E2DCFB5}: [NameServer] 8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Robert
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\ay6zof72.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2013-02-06]
FF Extension: easyGestures - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Robert\Extensions\{11F9F076-72B3-4586-995D-5042CF5D3AD4} [2013-02-06]
FF Extension: SeoQuake - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Robert\Extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74} [2014-09-03]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Robert\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-09-14]
FF Extension: All-in-One Gestures - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Robert\Extensions\{8b86149f-01fb-4842-9dd8-4d7eb02fd055} [2013-06-18]
FF Extension: LinkDiagnosis 2.3 - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Robert\Extensions\beta@linkdiagnosis.com.xpi [2013-02-06]
FF Extension: Secure Login - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Robert\Extensions\secureLogin@blueimp.net.xpi [2013-02-06]

Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "https://www.google.com/", "hxxp://www.google.com/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Easy Auto Refresh) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabcgdmkeabbnleenpncegpcngjpnjkc [2014-09-12]
CHR Extension: (Dysk Google) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-16]
CHR Extension: (SEO SERP Workbench) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehbgolklgacemnfnmkkpgekngaaggjjl [2014-09-01]
CHR Extension: (Doit.im) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdifigodhjmpcflipigiicnkdohneben [2014-09-01]
CHR Extension: (CrxMouse) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlgkpaicikihijadgifklkbpdajbkhjo [2014-09-01]
CHR Extension: (Google Hangouts) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2014-09-12]
CHR Extension: (Google Wallet) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-05]
CHR Extension: (SEO for Chrome) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\oangcciaeihlfmhppegpdceadpfaoclj [2014-09-01]
CHR Extension: (Gmail) - C:\Users\robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-01]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\robert\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-08-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
S4 FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [1030600 2013-02-28] (Macrovision Europe Ltd.) [File not signed]
R2 HDDHealth; D:\Programy\HDD Health\HDDHealthService.exe [17760 2013-03-08] () [File not signed]
S3 MSSQL$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [43010392 2009-03-30] (Microsoft Corporation)
S4 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-06-03] (Nitro PDF Software)
S4 SQLAgent$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [366936 2009-03-30] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-08-25] (DEVGURU Co., LTD.)
S4 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-19] (GlavSoft LLC.)
S4 BrlAPI; E:\@Systemy\@CYGWIN\System\bin\cygrunsrv.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-30] ()
R0 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [25056 2011-12-21] (IVT Corporation.)
S3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [31968 2011-12-21] (IVT Corporation.)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-27] (DT Soft Ltd)
R1 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [32336 2008-12-18] (Aladdin Knowledge Systems Ltd.)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2014-08-20] (Sony Mobile Communications)
S3 giveio; C:\Windows\giveio.sys [5248 1996-04-03] () [File not signed]
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [164864 2013-11-30] (ITE                      )
S3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [27016 2010-04-06] (IVT Corporation.)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2014-11-03] (http://libusb-win32.sourceforge.net)
S3 libusb0; C:\Windows\SysWOW64\DRIVERS\libusb0.sys [16896 2010-11-18] (http://libusb-win32.sourceforge.net) [File not signed]
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed]
R2 npf; C:\Windows\System32\drivers\npf.sys [36600 2014-04-18] (Riverbed Technology, Inc.)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2012-08-20] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2012-08-20] ()
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)
R3 subvgaproduct64; C:\Windows\System32\DRIVERS\subvga64.sys [5120 2013-04-18] (Windows (R) Win 7 DDK provider)
R3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [46592 2007-03-28] (Winbond Electronics Corporation)
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [267776 2013-05-12] (Jungo Connectivity)
S3 WinRing0_1_2_0; D:\_Programy NOINSTALL\Moo0 SystemMonitor 1.64 Portable\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
S3 BT; system32\DRIVERS\btnetdrv.sys [X]
S3 BTCOM; system32\DRIVERS\btcomport.sys [X]
S3 BTCOMBUS; System32\Drivers\btcombus.sys [X]
S3 Btcsrusb; System32\Drivers\btcusb.sys [X]
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [X]
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; system32\drivers\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]
S3 RTHDMIAzAudService; system32\drivers\RtHDMIVX.sys [X]
S3 TVICPORT; \??\C:\Windows\system32\DRIVERS\TVICPORT.SYS [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VComm; system32\DRIVERS\VComm.sys [X]
S3 VcommMgr; System32\Drivers\VcommMgr.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-04 19:26 - 2014-11-05 07:25 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-11-04 19:26 - 2014-11-04 19:26 - 00128728 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-04 19:24 - 2014-11-04 20:07 - 00000000 ____D () C:\Users\robert\Desktop\mbar
2014-11-04 19:24 - 2014-11-04 19:24 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-04 19:21 - 2014-11-04 19:23 - 14349744 _____ (Malwarebytes Corp.) C:\Users\robert\Downloads\mbar-1.07.0.1012.exe
2014-11-04 15:29 - 2014-11-04 15:29 - 00000000 ____D () C:\Users\robert\Downloads\FlashEff2_demo
2014-11-04 15:27 - 2014-11-04 15:27 - 15941852 _____ () C:\Users\robert\Downloads\FlashEff2_demo.zip
2014-11-04 15:16 - 2014-11-04 15:18 - 00059540 _____ () C:\Users\robert\Downloads\Addition.txt
2014-11-04 15:14 - 2014-11-05 11:10 - 00020377 _____ () C:\Users\robert\Downloads\FRST.txt
2014-11-04 15:14 - 2014-11-05 11:10 - 00000000 ____D () C:\FRST
2014-11-04 15:14 - 2014-11-04 15:14 - 02114560 _____ (Farbar) C:\Users\robert\Downloads\FRST64.exe
2014-11-04 15:01 - 2014-11-04 15:01 - 00066685 _____ () C:\Users\robert\Downloads\1508947.html
2014-11-04 14:54 - 2014-11-04 14:54 - 00130312 _____ () C:\Users\robert\Downloads\Extras.Txt
2014-11-04 14:51 - 2014-11-04 14:51 - 00133312 _____ () C:\Users\robert\Downloads\OTL.Txt
2014-11-04 14:23 - 2014-11-04 14:23 - 00602112 _____ (OldTimer Tools) C:\Users\robert\Downloads\OTL.exe
2014-11-04 14:22 - 2014-11-04 14:22 - 00380416 _____ () C:\Users\robert\Downloads\xmhlwznv.exe
2014-11-04 14:20 - 2014-11-04 14:20 - 01100288 _____ (Farbar) C:\Users\robert\Downloads\frst.exe
2014-11-04 12:46 - 2014-11-04 12:46 - 00016400 _____ () C:\Users\robert\Downloads\jchunn.zip
2014-11-04 12:46 - 2014-11-04 12:46 - 00000000 ____D () C:\Users\robert\Downloads\jchunn
2014-11-03 19:46 - 2014-11-03 19:46 - 00353093 _____ () C:\Users\robert\Downloads\usbasp-windriver.2011-05-28.zip
2014-11-03 19:46 - 2014-11-03 19:46 - 00000000 ____D () C:\Users\robert\Downloads\usbasp-windriver.2011-05-28
2014-11-03 19:40 - 2014-11-03 19:40 - 00531310 _____ () C:\Users\robert\Downloads\usbasp.2011-05-28.tar.gz
2014-11-03 19:40 - 2014-11-03 19:40 - 00000000 ____D () C:\Users\robert\Downloads\usbasp.2011-05-28.tar
2014-11-03 18:42 - 2014-11-03 18:42 - 00001144 _____ () C:\Users\Public\Desktop\SideSync 3.0.lnk
2014-11-03 18:41 - 2014-11-03 18:41 - 00000000 ____D () C:\Program Files\SAMSUNG
2014-11-03 18:34 - 2014-11-03 18:34 - 39364760 _____ (Samsung) C:\Users\robert\Downloads\SideSync_3.0.3.663.exe
2014-11-03 18:26 - 2014-11-03 18:27 - 41039812 _____ () C:\Users\robert\Downloads\as-avr8-toolchain-msi-native-trunk-6.2.1056-win32.any.x86.msi
2014-11-03 18:26 - 2014-11-03 18:27 - 39875444 _____ () C:\Users\robert\Downloads\as-avr32-toolchain-msi-native-trunk-6.2.1057-win32.any.x86.msi
2014-11-03 18:26 - 2014-11-03 18:27 - 133004864 _____ () C:\Users\robert\Downloads\as-arm-toolchain-msi-native-trunk-6.2.1429-win32.any.x86.msi
2014-11-03 17:04 - 2014-11-03 17:04 - 00076384 _____ (http://libusb-win32.sourceforge.net) C:\Windows\system32\libusb0.dll
2014-11-03 17:04 - 2014-11-03 17:04 - 00067680 _____ (http://libusb-win32.sourceforge.net) C:\Windows\SysWOW64\libusb0.dll
2014-11-03 17:04 - 2014-11-03 17:04 - 00052832 _____ (http://libusb-win32.sourceforge.net) C:\Windows\system32\Drivers\libusb0.sys
2014-11-03 17:04 - 2014-11-03 17:04 - 00025088 _____ () C:\Users\robert\Desktop\installer_x64.exe
2014-11-03 17:04 - 2014-11-03 17:04 - 00023552 _____ () C:\Users\robert\Desktop\installer_x86.exe
2014-11-03 17:04 - 2014-11-03 17:04 - 00006392 _____ () C:\Users\robert\Desktop\Triwiyanto_OK_MK_II.cat
2014-11-03 17:04 - 2014-11-03 17:04 - 00000000 ____D () C:\Users\robert\Desktop\x86
2014-11-03 17:04 - 2014-11-03 17:04 - 00000000 ____D () C:\Users\robert\Desktop\license
2014-11-03 17:04 - 2014-11-03 17:04 - 00000000 ____D () C:\Users\robert\Desktop\ia64
2014-11-03 17:04 - 2014-11-03 17:04 - 00000000 ____D () C:\Users\robert\Desktop\amd64
2014-11-03 17:03 - 2014-11-03 17:03 - 00913186 _____ () C:\Users\robert\Downloads\libusb-win32-bin-1.2.6.0.zip
2014-11-03 17:03 - 2014-11-03 17:03 - 00000000 ____D () C:\Users\robert\Downloads\libusb-win32-bin-1.2.6.0
2014-11-03 16:08 - 2014-11-03 16:08 - 00231269 _____ () C:\Users\robert\Downloads\a.zip
2014-11-03 16:08 - 2014-11-03 16:08 - 00000000 ____D () C:\Users\robert\Downloads\avrispmkii_libusb-win32_1.2.1.0
2014-11-03 16:05 - 2014-11-03 16:05 - 00000000 ____D () C:\Users\robert\Downloads\ISPMKII_firmware
2014-11-03 15:58 - 2014-11-03 15:58 - 00148073 _____ () C:\Users\robert\Downloads\alternate_USBaspLoader.2010-07-27_configured_for_betemcu.zip
2014-11-03 15:49 - 2014-11-03 15:49 - 00044390 _____ () C:\Users\robert\Downloads\ispmkII_pdf.zip
2014-11-03 15:40 - 2014-11-03 15:40 - 00000000 ____D () C:\Users\robert\Desktop\UsbAsp
2014-11-03 10:56 - 2014-11-03 10:56 - 00010921 _____ () C:\Users\robert\Downloads\attiny13.zip
2014-11-03 07:43 - 2014-11-03 07:50 - 00000000 ____D () C:\Users\robert\Desktop\firmatec_aktualny
2014-11-02 21:55 - 2014-11-03 19:17 - 00000000 ____D () C:\Users\robert\AppData\Roaming\AVRDUDESS
2014-11-02 21:55 - 2014-11-02 21:55 - 00000685 _____ () C:\Users\Public\Desktop\AVRDUDESS.lnk
2014-11-02 21:55 - 2014-11-02 21:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVRDUDESS
2014-11-02 21:54 - 2014-11-02 21:54 - 00936681 _____ (Zak Kemble ) C:\Users\robert\Downloads\setup-AVRDUDESS-2.4.exe
2014-11-02 21:13 - 2014-11-02 21:16 - 00000000 ____D () C:\Users\robert\AppData\Local\usbavrlab
2014-11-02 21:13 - 2014-11-02 21:13 - 00002481 _____ () C:\Users\robert\Downloads\1040_avrisp_bootloader_m8_2009-04-01.zip
2014-11-02 21:13 - 2014-11-02 21:13 - 00000668 _____ () C:\Users\robert\Desktop\USB AVR-Lab Tool.lnk
2014-11-02 21:13 - 2014-11-02 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB AVR-Lab Tool
2014-11-02 21:13 - 2010-11-18 20:32 - 00043008 _____ (http://libusb-win32.sourceforge.net) C:\Windows\SysWOW64\libusb0_x64.dll
2014-11-02 21:13 - 2010-11-18 20:32 - 00016896 _____ (http://libusb-win32.sourceforge.net) C:\Windows\SysWOW64\Drivers\libusb0_x64.sys
2014-11-02 21:13 - 2010-11-18 20:32 - 00016896 _____ (http://libusb-win32.sourceforge.net) C:\Windows\SysWOW64\Drivers\libusb0.sys
2014-11-02 21:12 - 2014-11-02 21:12 - 03936710 _____ ( ) C:\Users\robert\Downloads\1040_avrlabtool_i386-win32-5.10.exe
2014-11-02 21:06 - 2014-11-02 21:06 - 00006096 _____ () C:\Users\robert\Downloads\ISPMKII_firmware.zip
2014-11-02 20:52 - 2014-11-02 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\khazama.com
2014-11-02 20:52 - 2014-11-02 20:52 - 00000000 ____D () C:\Program Files (x86)\khazama.com
2014-11-02 20:51 - 2014-11-02 20:51 - 00000732 _____ () C:\Users\Public\Desktop\eXtreme Burner - AVR.lnk
2014-11-02 20:51 - 2014-11-02 20:51 - 00000000 ____D () C:\Users\robert\Downloads\KhazamaAVRProgrammer
2014-11-02 20:51 - 2014-11-02 20:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eXtreme Burner - AVR
2014-11-02 20:50 - 2014-11-02 20:50 - 01849008 _____ (eXtreme Electronics, India ) C:\Users\robert\Downloads\Setup.exe
2014-11-02 20:50 - 2014-11-02 20:50 - 01563270 _____ () C:\Users\robert\Downloads\KhazamaAVRProgrammer.rar
2014-11-02 20:44 - 2014-11-02 20:44 - 01854464 _____ () C:\Users\robert\Downloads\prolific-driver.zip
2014-11-02 09:34 - 2014-11-02 09:34 - 00000725 _____ () C:\Users\Public\Desktop\AVR Burn-O-Mat.lnk
2014-11-02 09:34 - 2014-11-02 09:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVR Burn-O-Mat
2014-11-02 09:33 - 2014-11-02 09:33 - 01682097 _____ (Torsten Brischalle ) C:\Users\robert\Downloads\AVR8_Burn-O-Mat_2_1_2_setup.exe
2014-11-02 09:20 - 2014-11-02 09:21 - 01054912 _____ (Adobe) C:\Users\robert\Downloads\install_flashplayer15x32au_mssa_aaa_aih.exe
2014-10-31 09:24 - 2014-10-31 09:25 - 00000000 ____D () C:\Users\robert\Downloads\ae2-2-5-beta3
2014-10-31 08:54 - 2014-10-31 08:55 - 05163630 _____ () C:\Users\robert\Downloads\ae2-2-5-beta3.rar
2014-10-31 08:54 - 2014-10-31 08:54 - 04484322 _____ () C:\Users\robert\Downloads\ae2-2-4-beta2.rar
2014-10-30 15:26 - 2014-10-30 15:26 - 00001848 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-10-30 15:26 - 2014-10-30 15:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-10-30 15:25 - 2014-10-30 15:26 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-10-30 15:25 - 2014-10-30 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2014-10-30 14:58 - 2014-10-30 14:58 - 00001786 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-10-30 14:58 - 2014-10-30 14:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-10-30 14:57 - 2014-10-30 14:58 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-10-30 14:57 - 2014-10-30 14:58 - 00000000 ____D () C:\Program Files\iTunes
2014-10-30 14:57 - 2014-10-30 14:58 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-10-30 14:57 - 2014-10-30 14:57 - 00000000 ____D () C:\Program Files\iPod
2014-10-29 20:53 - 2014-10-29 20:53 - 00002924 _____ () C:\Windows\System32\Tasks\{BBDAC1DE-9702-41F9-A3CC-43F0D5FC6607}
2014-10-29 20:52 - 2014-10-29 20:52 - 00002976 _____ () C:\Windows\System32\Tasks\{2159967B-B4E2-4972-8F41-10AFB094AEC7}
2014-10-29 20:52 - 2014-10-29 20:52 - 00000686 _____ () C:\Users\robert\Desktop\VAG-COM Release 311-2.lnk
2014-10-29 20:52 - 2014-10-29 20:52 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VAG-COM
2014-10-29 20:52 - 2014-10-29 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAG-COM
2014-10-29 20:51 - 2014-10-29 20:51 - 02096263 _____ () C:\Users\robert\Downloads\vag_com_311_2_579.rar
2014-10-29 20:51 - 2004-10-03 12:10 - 01046624 ____R () C:\Users\robert\Downloads\Release3112n.exe
2014-10-29 20:51 - 2004-10-03 12:10 - 01044977 ____R () C:\Users\robert\Downloads\Release3112n2.exe
2014-10-29 20:51 - 2004-10-03 12:10 - 00049152 ____R () C:\Users\robert\Downloads\VagComKeyGen311.2.exe
2014-10-29 20:48 - 2014-10-29 20:48 - 00482777 _____ () C:\Users\robert\Downloads\vwtool_2_0_9_pl_en.rar
2014-10-29 20:48 - 2014-10-29 20:48 - 00000000 ____D () C:\Users\robert\Downloads\vwtool_2_0_9_pl_en
2014-10-29 20:43 - 2014-10-29 20:43 - 00203172 _____ () C:\Users\robert\Downloads\ObdTester.rar
2014-10-29 20:39 - 2014-10-29 20:39 - 11030528 _____ () C:\Users\robert\Downloads\OBDwizSetup (1).exe
2014-10-29 20:24 - 2014-10-29 20:24 - 00000000 ____D () C:\Users\robert\Downloads\Sterowniki VAG KKL USB
2014-10-29 20:23 - 2014-10-29 20:23 - 01290575 _____ () C:\Users\robert\Downloads\Sterowniki VAG KKL USB.rar
2014-10-29 20:21 - 2014-10-29 20:21 - 11030528 _____ () C:\Users\robert\Downloads\OBDwizSetup.exe
2014-10-29 16:53 - 2014-10-29 16:53 - 00000706 _____ () C:\Users\robert\Desktop\ScanTool.net for Windows v1.21.lnk
2014-10-29 16:53 - 2014-10-29 16:53 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBD-II Software
2014-10-29 16:53 - 2014-10-29 16:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBD-II Software
2014-10-29 16:52 - 2014-10-29 16:52 - 00465529 _____ () C:\Users\robert\Downloads\scantool_net121win.exe
2014-10-29 16:48 - 2014-10-29 16:48 - 00000039 _____ () C:\Users\robert\Downloads\OBD Wiz License Key.txt
2014-10-29 09:13 - 2014-10-29 09:13 - 00000863 _____ () C:\Users\robert\Desktop\Handlowiec iBiznes.lnk
2014-10-29 09:13 - 2014-10-29 09:13 - 00000827 _____ () C:\Users\robert\Desktop\Serwis iBiznes.lnk
2014-10-25 17:48 - 2014-10-25 17:48 - 00000000 ____D () C:\Users\robert\Downloads\arduino-1.5.8-windows
2014-10-25 17:41 - 2014-10-30 21:56 - 00000000 ____D () C:\Users\robert\AppData\Local\VMicro
2014-10-25 17:10 - 2014-10-25 17:10 - 00000919 _____ () C:\Users\Public\Desktop\Atmel Studio 6.1.lnk
2014-10-25 16:58 - 2014-10-25 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atmel
2014-10-25 16:42 - 2014-10-25 16:42 - 00004512 _____ () C:\Windows\DPINST.LOG
2014-10-25 16:41 - 2014-10-25 16:41 - 00000000 ____D () C:\Program Files\Seggger
2014-10-25 16:41 - 2013-05-12 13:05 - 00151552 _____ (Jungo Connectivity) C:\Windows\SysWOW64\wdapi1130.dll
2014-10-25 16:41 - 2009-09-02 10:48 - 00143360 _____ (Jungo) C:\Windows\SysWOW64\wdapi1010.dll
2014-10-25 16:41 - 2009-07-14 09:07 - 00143360 _____ (Jungo) C:\Windows\SysWOW64\wdapi1002.dll
2014-10-25 16:41 - 2009-05-14 12:21 - 00157184 _____ (Jungo) C:\Windows\SysWOW64\wdapi1001.dll
2014-10-25 16:41 - 2008-07-04 08:51 - 00110592 _____ (Jungo) C:\Windows\SysWOW64\wdapi921.dll
2014-10-25 16:41 - 2006-10-18 14:39 - 00141824 _____ (Jungo) C:\Windows\SysWOW64\wdapi811.dll
2014-10-25 16:40 - 2013-05-12 13:04 - 00267776 _____ (Jungo Connectivity) C:\Windows\system32\Drivers\windrvr6.sys
2014-10-25 16:40 - 2010-01-17 19:13 - 00110592 _____ (Jungo) C:\Windows\SysWOW64\wdapi1011.dll
2014-10-23 20:24 - 2014-10-23 20:24 - 00035192 _____ () C:\ComboFix.txt
2014-10-23 20:00 - 2014-11-04 20:34 - 00003020 _____ () C:\Windows\PFRO.log
2014-10-23 19:40 - 2014-10-23 19:40 - 05584933 ____R (Swearware) C:\Users\robert\Desktop\ComboFix.exe
2014-10-23 16:58 - 2014-10-23 17:33 - 00000000 ____D () C:\Users\robert\Desktop\DlaCiociKrysi
2014-10-21 10:49 - 2014-10-21 10:49 - 00000000 ____D () C:\Users\robert\Documents\eagle
2014-10-21 10:49 - 2014-10-21 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EAGLE Layout Editor 7.1.0
2014-10-21 10:47 - 2014-10-21 10:47 - 00000000 ____D () C:\Users\robert\AppData\Roaming\CadSoft
2014-10-21 05:09 - 2014-11-05 07:17 - 00003416 _____ () C:\Windows\setupact.log
2014-10-21 05:09 - 2014-10-21 05:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-20 20:54 - 2014-10-20 20:54 - 00000780 _____ () C:\Users\Public\Desktop\Wasteland 2.lnk
2014-10-20 20:54 - 2014-10-20 20:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wasteland 2
2014-10-20 19:59 - 2014-10-20 19:59 - 00000724 _____ () C:\Users\robert\Desktop\Wasteland 2.lnk
2014-10-20 19:58 - 2014-10-20 19:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Wasteland 2
2014-10-20 19:58 - 2014-10-20 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Gamblers
2014-10-17 09:52 - 2014-10-10 03:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-17 09:52 - 2014-10-10 03:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-17 09:52 - 2014-10-10 03:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-17 09:52 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-17 09:52 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-17 09:52 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-17 09:52 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-17 09:52 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-17 09:52 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-17 09:52 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-17 09:52 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-17 09:52 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-17 09:52 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-17 09:52 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-17 09:52 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-17 09:52 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-17 09:52 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-17 09:52 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-17 09:52 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-17 09:52 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-17 09:52 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-17 09:52 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-17 09:52 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-17 09:52 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-17 09:52 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-17 09:52 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-17 09:52 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-17 09:52 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-17 09:52 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-17 09:52 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-17 09:52 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-17 09:52 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-17 09:52 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-17 09:52 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-17 09:52 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-17 09:52 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-17 09:52 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-17 09:52 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-17 09:52 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-17 09:52 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-17 09:52 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-17 09:52 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-17 09:52 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-17 09:52 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-17 09:52 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-17 09:52 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-17 09:52 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-17 09:52 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-17 09:52 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-17 09:52 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-17 09:52 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-17 09:52 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-17 09:52 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-17 09:52 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-17 09:52 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-17 09:52 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-17 09:52 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-17 09:52 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-17 09:52 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-17 09:52 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-17 09:52 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-17 09:52 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-17 09:52 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-17 09:52 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-17 09:52 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-17 09:52 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-17 09:51 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-17 09:51 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-17 09:51 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-17 09:51 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-17 09:51 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-17 09:51 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-17 09:51 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-17 09:51 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-17 09:51 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-17 09:51 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-17 09:51 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-17 09:51 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-17 09:51 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-17 09:51 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-17 09:51 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-17 09:51 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-17 09:51 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-17 09:51 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-17 09:51 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-17 09:51 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-17 09:51 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-17 09:51 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 11:00 - 2014-10-15 11:04 - 00000000 ____D () C:\Users\robert\Desktop\Instrukcje
2014-10-15 08:55 - 2014-10-15 08:55 - 00001965 _____ () C:\Users\Public\Desktop\Yenka.lnk
2014-10-15 08:55 - 2014-10-15 08:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yenka
2014-10-13 07:15 - 2014-10-13 07:15 - 00000934 _____ () C:\Users\robert\Desktop\Asystent-24 — skrót.lnk
2014-10-10 23:29 - 2014-10-30 21:13 - 00000000 ____D () C:\Users\robert\Documents\Arduino
2014-10-10 09:29 - 2014-10-10 23:29 - 00000665 _____ () C:\Users\Public\Desktop\Arduino.lnk
2014-10-10 09:29 - 2014-10-10 23:29 - 00000665 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk
2014-10-10 09:13 - 2014-10-10 09:13 - 00008192 ___SH () C:\Users\robert\Documents\Thumbs.db
2014-10-10 08:06 - 2014-10-10 08:11 - 00000000 ____D () C:\Users\robert\Desktop\arduino-1.0.6
2014-10-07 13:28 - 2014-10-07 13:28 - 00001162 _____ () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free HD Converter.lnk
2014-10-07 13:28 - 2014-10-07 13:28 - 00001108 _____ () C:\Users\robert\Desktop\Free HD Converter.lnk
2014-10-07 13:28 - 2014-10-07 13:28 - 00000000 ____D () C:\Users\robert\AppData\Roaming\FreeHDConverter
2014-10-07 13:28 - 2014-10-07 13:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free HD Converter
2014-10-07 13:25 - 2014-10-07 13:28 - 00000000 ____D () C:\Program Files (x86)\Free HD Converter

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-05 07:29 - 2013-03-21 20:57 - 00000600 _____ () C:\Users\robert\AppData\Local\PUTTY.RND
2014-11-05 07:27 - 2013-08-22 12:42 - 00000000 ____D () C:\Users\robert\AppData\Roaming\uTorrent
2014-11-05 07:26 - 2013-02-04 07:43 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Dropbox
2014-11-05 07:24 - 2009-07-14 05:45 - 00028288 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-05 07:24 - 2009-07-14 05:45 - 00028288 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-05 07:23 - 2013-02-03 19:32 - 01562395 _____ () C:\Windows\WindowsUpdate.log
2014-11-05 07:17 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-05 07:16 - 2013-11-18 19:02 - 10485760 _____ () C:\vgaexte.dat
2014-11-04 20:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Cursors
2014-11-04 15:29 - 2013-04-21 06:53 - 00000000 ____D () C:\Users\robert\AppData\Roaming\AIMP3
2014-11-04 13:31 - 2009-07-14 18:55 - 00811758 _____ () C:\Windows\system32\perfh015.dat
2014-11-04 13:31 - 2009-07-14 18:55 - 00183368 _____ () C:\Windows\system32\perfc015.dat
2014-11-04 13:31 - 2009-07-14 06:13 - 01865992 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-03 18:40 - 2013-06-05 10:22 - 00000000 ____D () C:\Users\robert\AppData\Roaming\VisualAssistAtmel
2014-11-03 18:40 - 2013-06-05 10:22 - 00000000 ____D () C:\Users\robert\AppData\Local\VisualAssistAtmel
2014-11-03 18:32 - 2013-06-05 10:03 - 00000000 ____D () C:\Program Files (x86)\Atmel
2014-11-03 17:04 - 2014-06-23 21:03 - 00000406 __RSH () C:\ProgramData\ntuser.pol
2014-11-03 10:38 - 2013-02-11 19:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Nitro PDF
2014-11-02 23:00 - 2013-10-26 20:48 - 00000000 ____D () C:\Users\robert\AppData\Roaming\vlc
2014-11-02 09:25 - 2014-09-01 23:20 - 00000000 ____D () C:\Users\robert\AppData\Local\Adobe
2014-11-02 09:25 - 2013-02-03 21:01 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-02 09:25 - 2013-02-03 21:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-01 11:13 - 2013-05-08 22:09 - 00000600 _____ () C:\Users\robert\AppData\Roaming\winscp.rnd
2014-10-31 22:10 - 2013-04-24 07:54 - 00000000 ____D () C:\Users\robert\AppData\Local\Apple Computer
2014-10-30 18:00 - 2013-04-24 07:54 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Apple Computer
2014-10-30 17:00 - 2013-06-05 10:03 - 00000000 ____D () C:\Users\robert\AppData\Local\Atmel
2014-10-30 15:25 - 2014-01-12 21:24 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-10-30 14:57 - 2014-09-16 07:20 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-10-29 20:55 - 2013-05-22 17:02 - 00000000 ____D () C:\Users\robert\AppData\Local\CrashDumps
2014-10-29 20:32 - 2014-09-04 22:56 - 00000000 ____D () C:\Users\robert\TEMP2
2014-10-29 09:13 - 2013-03-19 10:17 - 00000863 _____ () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handlowiec iBiznes.lnk
2014-10-29 09:13 - 2013-03-19 10:16 - 00000827 _____ () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Serwis iBiznes.lnk
2014-10-25 16:58 - 2013-02-10 10:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-23 20:24 - 2014-02-16 12:04 - 00000000 ____D () C:\Qoobox
2014-10-23 20:04 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-10-23 20:00 - 2014-02-16 12:03 - 00000000 ____D () C:\Windows\erdnt
2014-10-23 19:32 - 2014-09-16 08:56 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-10-22 11:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-21 16:38 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-21 08:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-10-21 05:09 - 2009-07-14 05:45 - 00558168 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-20 22:03 - 2014-08-28 16:11 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-20 22:03 - 2014-05-07 06:34 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-20 22:03 - 2013-02-03 20:24 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-20 21:49 - 2013-02-06 23:58 - 00000000 ____D () C:\Users\robert\Documents\My Games
2014-10-20 20:02 - 2013-02-03 19:50 - 00160272 _____ () C:\Users\robert\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-20 18:28 - 2014-08-14 18:09 - 00000000 ___RD () C:\Users\robert\Desktop\FolderFolderow
2014-10-20 15:51 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2014-10-20 15:39 - 2013-08-08 02:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-20 15:15 - 2013-02-04 17:35 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-15 09:02 - 2013-04-25 20:46 - 00000000 ____D () C:\Users\robert\AppData\Local\Yenka
2014-10-15 08:55 - 2013-04-25 20:44 - 00000000 ____D () C:\Program Files (x86)\Yenka
2014-10-13 07:14 - 2013-02-06 07:38 - 00000000 ____D () C:\Users\robert\Documents\@Opracowywane
2014-10-07 00:41 - 2014-03-18 17:19 - 00000000 ____D () C:\Users\robert\AppData\Roaming\ObviousIdea

Files to move or delete:
====================
C:\Users\robert\EOEffects.dll


Some content of TEMP:
====================
C:\Users\robert\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfnlknj.dll
C:\Users\robert\AppData\Local\Temp\kernal.dll
C:\Users\robert\AppData\Local\Temp\kernal32.dll
C:\Users\robert\AppData\Local\Temp\tssetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-05 08:17

==================== End Of Log ============================