Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2014
Ran by samsung (administrator) on SAMSUNG-KOMPUTE on 15-11-2014 16:47:21
Running from C:\Users\samsung\Desktop
Loaded Profiles: samsung & UpdatusUser (Available profiles: samsung & UpdatusUser)
Platform: Windows 7 Ultimate (X64) OS Language: Polski (Polska)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\nsbu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\nsbu.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Update\GoogleUpdate.exe
(Spotify Ltd) C:\Users\samsung\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\SamsungFastStart\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-06-24] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2893096 2011-12-28] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\Run: [Google Update] => C:\Users\samsung\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-30] (Google Inc.)
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\Run: [Spotify] => C:\Users\samsung\AppData\Roaming\Spotify\Spotify.exe [6553144 2014-11-09] (Spotify Ltd)
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\Run: [Spotify Web Helper] => C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-11-09] (Spotify Ltd)
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: {0a84f19d-3143-11e4-8f0d-bd8480eed6ad} - G:\LGAutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: {0bbcdffd-7795-11e2-b706-dca97122bf9f} - H:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: {43078fde-76b4-11e2-b8c5-dca97122bf9f} - G:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: {43078fef-76b4-11e2-b8c5-dca97122bf9f} - G:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: {5259cf05-5b88-11e3-bbf6-e3ec79b498fe} - H:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: {6bf66844-f5e5-11e1-b575-dca97122bf9f} - F:\setup.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\MountPoints2: {6f09723e-063a-11e2-bf43-dca97122bf9f} - F:\Autorun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\Run: [Google Update] => C:\Users\samsung\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-30] (Google Inc.)
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\Run: [DAEMON Tools Lite] => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\Run: [NTRedirect] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\samsung\AppData\Roaming\BabSolution\Shared\EnhancedNT.dll",Run
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\Run: [EA Core] => C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {0bbcdffd-7795-11e2-b706-dca97122bf9f} - H:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {346248d3-da2f-11e1-84f1-806e6f6e6963} - E:\Autorun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {43078fde-76b4-11e2-b8c5-dca97122bf9f} - G:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {43078fef-76b4-11e2-b8c5-dca97122bf9f} - G:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {6bf66844-f5e5-11e1-b575-dca97122bf9f} - F:\setup.exe
AppInit_DLLs: c:\windows\system32\nvinitx.dll => c:\windows\system32\nvinitx.dll [226920 2011-05-04] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\buShell.dll (Symantec Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=156
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {szukaj.gazeta.pl} URL = http://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms}
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\coIEPlg.dll (Symantec Corporation)
BHO: FiineDDealSofT -> {96CE041C-471F-3B0E-B58A-10FF14DCCC6C} -> C:\ProgramData\FiineDDealSofT\FUaYvdXTm_.x64.dll No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\coIEPlg.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\coIEPlg.dll (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1270606213-4017362319-1625700523-1000 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Hosts: 127.0.0.1 activate.adobe.com

FireFox:
========
FF ProfilePath: C:\Users\samsung\AppData\Roaming\Mozilla\Firefox\Profiles\i3cqdc9y.default-1393672165572
FF Homepage: hxxp://www.gazeta.pl/0,0.html?p=156
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @idsoftware.com/QuakeLive -> C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\samsung\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1270606213-4017362319-1625700523-1000: @tools.google.com/Google Update;version=3 -> C:\Users\samsung\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1270606213-4017362319-1625700523-1000: @tools.google.com/Google Update;version=9 -> C:\Users\samsung\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1270606213-4017362319-1625700523-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKU\S-1-5-21-1270606213-4017362319-1625700523-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\samsung\AppData\Roaming\Mozilla\Firefox\Profiles\i3cqdc9y.default-1393672165572\searchplugins\szukaj-gazeta-pl.xml
FF Extension: Firefox Hotfix - C:\Users\samsung\AppData\Roaming\Mozilla\Firefox\Profiles\i3cqdc9y.default-1393672165572\Extensions\firefox-hotfix@mozilla.org [2014-03-20]
FF Extension: Firefox Hotfix - C:\Users\samsung\AppData\Roaming\Mozilla\Firefox\Profiles\i3cqdc9y.default-1393672165572\Extensions\firefox-hotfix@mozilla.org.xpi [2014-03-20]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.0.0.110\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.0.0.110\coFFPlgn [2014-11-15]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-23]
CHR Extension: (Dokumenty Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-23]
CHR Extension: (Dysk Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-23]
CHR Extension: (YouTube) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-23]
CHR Extension: (Szukaj w Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-23]
CHR Extension: (Arkusze Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-23]
CHR Extension: (Wolf and the Ice Planet) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffkhmkbijdmbncaoclaclldnbndflck [2014-10-23]
CHR Extension: (Norton Identity Safe) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-10-23]
CHR Extension: (Gmail) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-23]
CHR StartMenuInternet: Google Chrome - C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 NSBU; C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\NSBU.exe [282568 2014-10-15] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-08-17] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
S2 EraserSvc11410; "C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.0.110\NSBU.exe" /h ccCommon [X]
S2 Update SunriseBrowse; "C:\Program Files (x86)\SunriseBrowse\updateSunriseBrowse.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-09-24] ()
S3 Axtmvflt; C:\Windows\System32\DRIVERS\Axtmvflt.sys [6144 2009-02-25] (Axesstel)
S3 Axtmvmdm; C:\Windows\System32\DRIVERS\Axtmvmdm.sys [54272 2009-02-25] (Axesstel)
S3 Axtmvprt; C:\Windows\System32\Drivers\Axtmvprt.sys [52224 2009-02-25] (Axesstel)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.0.0.110\Definitions\BASHDefs\20141107.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)
R1 ccSet_NSBU; C:\Windows\system32\drivers\NSBUx64\1600020.011\ccSetx64.sys [165080 2014-09-09] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-10-15] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-10-15] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.0.0.110\Definitions\IPSDefs\20141112.001\IDSvia64.sys [633560 2014-10-14] (Symantec Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-09-24] ()
R3 NAVENG; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.0.0.110\Definitions\VirusDefs\20141114.017\ENG64.SYS [129752 2014-10-15] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.0.0.110\Definitions\VirusDefs\20141114.017\EX64.SYS [2137304 2014-10-15] (Symantec Corporation)
R1 SRTSP; C:\Windows\System32\Drivers\NSBUx64\1600020.011\SRTSP64.SYS [1016024 2014-09-09] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSBUx64\1600020.011\SRTSPX64.SYS [42200 2014-09-09] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NSBUx64\1600020.011\SYMDS64.SYS [490712 2014-09-09] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NSBUx64\1600020.011\SYMEFA64.SYS [1151704 2014-09-09] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102616 2014-10-15] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSBUx64\1600020.011\Ironx64.SYS [271576 2014-09-09] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NSBUx64\1600020.011\SYMNETS.SYS [565464 2014-09-09] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-15 16:47 - 2014-11-15 16:48 - 00021470 _____ () C:\Users\samsung\Desktop\FRST.txt
2014-11-15 16:47 - 2014-11-15 16:47 - 00000000 ____D () C:\Users\samsung\Desktop\fixitraporty
2014-11-15 16:46 - 2014-11-15 16:47 - 00000000 ____D () C:\FRST
2014-11-15 16:45 - 2014-11-15 16:45 - 02116608 _____ (Farbar) C:\Users\samsung\Desktop\frst64.exe
2014-11-13 11:24 - 2014-11-13 12:08 - 00000000 ____D () C:\Users\samsung\Marzena
2014-11-09 21:45 - 2014-11-13 19:27 - 00000000 ____D () C:\Users\samsung\AppData\Local\Spotify
2014-11-09 21:45 - 2014-11-09 21:45 - 00001822 _____ () C:\Users\samsung\Desktop\Spotify.lnk
2014-11-09 21:45 - 2014-11-09 21:45 - 00001808 _____ () C:\Users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-11-09 21:43 - 2014-11-15 15:35 - 00000000 ____D () C:\Users\samsung\AppData\Roaming\Spotify
2014-11-09 20:21 - 2013-11-19 17:24 - 00000542 _____ () C:\Users\samsung\Desktop\Need For Speed Underground.lnk
2014-11-05 15:36 - 2014-11-05 15:37 - 01744300 _____ () C:\Users\samsung\butelka.ai
2014-10-29 22:48 - 2014-10-29 22:48 - 00000000 __SHD () C:\found.000
2014-10-25 12:13 - 2014-10-25 12:13 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Security with Backup
2014-10-25 11:44 - 2014-10-25 11:44 - 00638888 _____ (Oracle Corporation) C:\Users\samsung\Downloads\chromeinstall-8u25.exe
2014-10-22 21:02 - 2014-11-15 15:07 - 00000000 ____D () C:\AdwCleaner
2014-10-21 20:31 - 2014-10-21 20:31 - 00002253 _____ () C:\Users\Public\Desktop\ToneMaker 1.lnk
2014-10-21 20:31 - 2014-10-21 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloody
2014-10-21 20:31 - 2014-10-21 20:31 - 00000000 ____D () C:\Program Files (x86)\BloodyToneMaker
2014-10-21 20:29 - 2014-10-21 20:29 - 00000000 ____D () C:\Windows\system32\BloodyTonemaker1_V2014.0115
2014-10-19 20:22 - 2014-10-19 20:41 - 00000000 ____D () C:\Users\samsung\Desktop\bejca zdjecia

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-15 16:30 - 2012-07-30 11:14 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1270606213-4017362319-1625700523-1000UA.job
2014-11-15 16:20 - 2012-08-26 11:13 - 00000000 ____D () C:\Users\samsung\AppData\Local\PMB Files
2014-11-15 15:15 - 2012-07-29 16:57 - 01455445 _____ () C:\Windows\WindowsUpdate.log
2014-11-15 15:11 - 2013-01-18 15:25 - 00026629 _____ () C:\Windows\setupact.log
2014-11-15 15:11 - 2012-09-17 05:19 - 00069874 _____ () C:\Windows\PFRO.log
2014-11-15 15:11 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-15 15:04 - 2013-08-16 12:17 - 00000000 ____D () C:\Program Files (x86)\Passware
2014-11-15 15:03 - 2012-09-16 13:21 - 00000000 ____D () C:\Program Files (x86)\Dziobas Rar Player
2014-11-15 13:29 - 2013-07-19 12:50 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-14 23:30 - 2012-07-30 11:14 - 00001014 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1270606213-4017362319-1625700523-1000Core.job
2014-11-13 11:48 - 2012-07-29 17:10 - 00000000 ____D () C:\Users\samsung
2014-11-11 21:32 - 2013-02-20 16:12 - 00000000 ____D () C:\Users\samsung\AppData\Roaming\Skype
2014-11-11 13:01 - 2009-07-14 18:55 - 00738192 _____ () C:\Windows\system32\perfh015.dat
2014-11-11 13:01 - 2009-07-14 18:55 - 00154848 _____ () C:\Windows\system32\perfc015.dat
2014-11-11 13:01 - 2009-07-14 06:13 - 01663412 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-10 20:30 - 2012-09-08 12:56 - 00000000 ____D () C:\Users\samsung\AppData\Local\Adobe
2014-11-10 20:30 - 2012-08-26 23:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-10 20:30 - 2012-08-26 23:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-26 09:07 - 2013-12-23 19:18 - 00000000 ____D () C:\Users\samsung\Documents\Honorbuddy
2014-10-25 12:08 - 2014-10-15 19:11 - 00000000 ____D () C:\Windows\system32\Drivers\NSBUx64
2014-10-25 12:07 - 2014-10-15 19:12 - 00003240 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-10-25 12:07 - 2014-10-15 19:12 - 00002542 _____ () C:\Users\Public\Desktop\Norton Security with Backup.lnk
2014-10-25 12:07 - 2014-10-15 19:11 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security with Backup
2014-10-25 12:06 - 2009-07-14 05:45 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-25 12:06 - 2009-07-14 05:45 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-25 12:05 - 2012-08-26 11:13 - 00000000 ____D () C:\ProgramData\PMB Files
2014-10-25 11:52 - 2014-10-15 20:12 - 00000004 _____ () C:\Users\samsung\AppData\Roaming\appdataFr2.bin
2014-10-22 21:09 - 2012-07-30 11:16 - 00000000 ____D () C:\Users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-10-18 09:42 - 2012-09-24 05:51 - 00000000 ____D () C:\Users\samsung\AppData\Roaming\vlc
2014-10-17 21:16 - 2013-01-14 18:44 - 00000000 ____D () C:\Users\samsung\Desktop\altgr
2014-10-16 21:06 - 2014-09-25 19:13 - 00000000 ____D () C:\ProgramData\DealsFactor
2014-10-16 18:57 - 2014-02-22 17:27 - 00000000 ____D () C:\Program Files (x86)\Mafia
2014-10-16 18:55 - 2014-10-15 20:01 - 00067632 _____ (Symantec Corporation) C:\Windows\system32\msln.exe

Some content of TEMP:
====================
C:\Users\samsung\AppData\Local\Temp\EAInstall.dll
C:\Users\samsung\AppData\Local\Temp\eauninstall.exe
C:\Users\samsung\AppData\Local\Temp\Madden NFL 08_uninst.exe
C:\Users\samsung\AppData\Local\Temp\Medal of Honor_uninst.exe
C:\Users\samsung\AppData\Local\Temp\ose00001.exe
C:\Users\samsung\AppData\Local\Temp\Quarantine.exe
C:\Users\samsung\AppData\Local\Temp\SkypeSetup.exe
C:\Users\samsung\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-08 10:56

==================== End Of Log ============================