Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2014
Ran by samsung (administrator) on SAMSUNG-KOMPUTE on 16-11-2014 02:16:10
Running from C:\Users\samsung\Desktop
Loaded Profiles: samsung & UpdatusUser (Available profiles: samsung & UpdatusUser)
Platform: Windows 7 Ultimate (X64) OS Language: Polski (Polska)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\nsbu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\nsbu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Spotify Ltd) C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\SamsungFastStart\SmartRestarter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe
(Spotify Ltd) C:\Users\samsung\AppData\Roaming\Spotify\spotify.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-06-24] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2893096 2011-12-28] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\Run: [Google Update] => "C:\Users\samsung\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\Run: [Spotify] => C:\Users\samsung\AppData\Roaming\Spotify\Spotify.exe [6553144 2014-11-09] (Spotify Ltd)
HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\...\Run: [Spotify Web Helper] => C:\Users\samsung\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-11-09] (Spotify Ltd)
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\Run: [Google Update] => "C:\Users\samsung\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\Run: [DAEMON Tools Lite] => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\Run: [NTRedirect] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\samsung\AppData\Roaming\BabSolution\Shared\EnhancedNT.dll",Run
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\Run: [EA Core] => C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {0bbcdffd-7795-11e2-b706-dca97122bf9f} - H:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {346248d3-da2f-11e1-84f1-806e6f6e6963} - E:\Autorun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {43078fde-76b4-11e2-b8c5-dca97122bf9f} - G:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {43078fef-76b4-11e2-b8c5-dca97122bf9f} - G:\AutoRun.exe
HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\...\MountPoints2: {6bf66844-f5e5-11e1-b575-dca97122bf9f} - F:\setup.exe
AppInit_DLLs: c:\windows\system32\nvinitx.dll => c:\windows\system32\nvinitx.dll [226920 2011-05-04] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\buShell.dll (Symantec Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x60B16EA63901D001
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\coIEPlg.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\coIEPlg.dll (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1270606213-4017362319-1625700523-1000 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine64\22.0.2.17\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {8AD9C840-044E-11D1-B3E9-00805F499D93} 
DPF: HKLM-x32 {CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA} 
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.0.0.110\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.0.0.110\coFFPlgn [2014-11-16]

Chrome: 
=======
CHR Profile: C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-16]
CHR Extension: (Dokumenty Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-16]
CHR Extension: (Dysk Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-16]
CHR Extension: (YouTube) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-16]
CHR Extension: (Szukaj w Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-16]
CHR Extension: (Arkusze Google) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-16]
CHR Extension: (Norton Identity Safe) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-11-16]
CHR Extension: (Adblock Super) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd [2014-11-16]
CHR Extension: (Google Wallet) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-16]
CHR Extension: (Gmail) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 NSBU; C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.2.17\NSBU.exe [282568 2014-10-15] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-08-17] ()
S2 EraserSvc11410; "C:\Program Files (x86)\Norton Security with Backup\Engine\22.0.0.110\NSBU.exe" /h ccCommon [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-09-24] ()
S3 Axtmvflt; C:\Windows\System32\DRIVERS\Axtmvflt.sys [6144 2009-02-25] (Axesstel)
S3 Axtmvmdm; C:\Windows\System32\DRIVERS\Axtmvmdm.sys [54272 2009-02-25] (Axesstel)
S3 Axtmvprt; C:\Windows\System32\Drivers\Axtmvprt.sys [52224 2009-02-25] (Axesstel)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.0.0.110\Definitions\BASHDefs\20141107.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)
R1 ccSet_NSBU; C:\Windows\system32\drivers\NSBUx64\1600020.011\ccSetx64.sys [165080 2014-09-09] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-10-15] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-10-15] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.0.0.110\Definitions\IPSDefs\20141114.001\IDSvia64.sys [633560 2014-10-14] (Symantec Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-09-24] ()
R3 NAVENG; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.0.0.110\Definitions\VirusDefs\20141114.017\ENG64.SYS [129752 2014-10-15] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.0.0.110\Definitions\VirusDefs\20141114.017\EX64.SYS [2137304 2014-10-15] (Symantec Corporation)
R1 SRTSP; C:\Windows\System32\Drivers\NSBUx64\1600020.011\SRTSP64.SYS [1016024 2014-09-09] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSBUx64\1600020.011\SRTSPX64.SYS [42200 2014-09-09] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NSBUx64\1600020.011\SYMDS64.SYS [490712 2014-09-09] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NSBUx64\1600020.011\SYMEFA64.SYS [1151704 2014-09-09] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102616 2014-10-15] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSBUx64\1600020.011\Ironx64.SYS [271576 2014-09-09] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NSBUx64\1600020.011\SYMNETS.SYS [565464 2014-09-09] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-16 02:10 - 2014-11-16 02:10 - 00002265 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-16 02:10 - 2014-11-16 02:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-16 02:08 - 2014-11-16 02:13 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-16 02:08 - 2014-11-16 02:13 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-16 02:08 - 2014-11-16 02:10 - 00000000 ____D () C:\Users\samsung\AppData\Local\Google
2014-11-16 02:08 - 2014-11-16 02:10 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-16 02:08 - 2014-11-16 02:08 - 00004046 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-16 02:08 - 2014-11-16 02:08 - 00003794 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-16 01:49 - 2014-11-16 01:49 - 00018117 _____ () C:\Users\samsung\Desktop\bookmarks_16.11.2014.html
2014-11-15 16:47 - 2014-11-16 02:16 - 00015550 _____ () C:\Users\samsung\Desktop\FRST.txt
2014-11-15 16:47 - 2014-11-16 02:15 - 00000000 ____D () C:\Users\samsung\Desktop\fixitraporty
2014-11-15 16:46 - 2014-11-16 02:16 - 00000000 ____D () C:\FRST
2014-11-15 16:45 - 2014-11-15 16:45 - 02116608 _____ (Farbar) C:\Users\samsung\Desktop\frst64.exe
2014-11-13 11:24 - 2014-11-13 12:08 - 00000000 ____D () C:\Users\samsung\Marzena
2014-11-09 21:45 - 2014-11-13 19:27 - 00000000 ____D () C:\Users\samsung\AppData\Local\Spotify
2014-11-09 21:45 - 2014-11-09 21:45 - 00001822 _____ () C:\Users\samsung\Desktop\Spotify.lnk
2014-11-09 21:45 - 2014-11-09 21:45 - 00001808 _____ () C:\Users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-11-09 21:43 - 2014-11-16 02:14 - 00000000 ____D () C:\Users\samsung\AppData\Roaming\Spotify
2014-11-09 20:21 - 2013-11-19 17:24 - 00000542 _____ () C:\Users\samsung\Desktop\Need For Speed Underground.lnk
2014-11-05 15:36 - 2014-11-05 15:37 - 01744300 _____ () C:\Users\samsung\butelka.ai
2014-10-29 22:48 - 2014-10-29 22:48 - 00000000 __SHD () C:\found.000
2014-10-25 12:13 - 2014-10-25 12:13 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Security with Backup
2014-10-25 11:44 - 2014-10-25 11:44 - 00638888 _____ (Oracle Corporation) C:\Users\samsung\Downloads\chromeinstall-8u25.exe
2014-10-22 21:02 - 2014-11-15 15:07 - 00000000 ____D () C:\AdwCleaner
2014-10-21 20:31 - 2014-10-21 20:31 - 00002253 _____ () C:\Users\Public\Desktop\ToneMaker 1.lnk
2014-10-21 20:31 - 2014-10-21 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloody
2014-10-21 20:31 - 2014-10-21 20:31 - 00000000 ____D () C:\Program Files (x86)\BloodyToneMaker
2014-10-21 20:29 - 2014-10-21 20:29 - 00000000 ____D () C:\Windows\system32\BloodyTonemaker1_V2014.0115
2014-10-19 20:22 - 2014-10-19 20:41 - 00000000 ____D () C:\Users\samsung\Desktop\bejca zdjecia

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-16 02:08 - 2012-07-30 11:10 - 00000000 ____D () C:\Users\samsung\AppData\Local\Deployment
2014-11-16 02:08 - 2012-07-30 11:10 - 00000000 ____D () C:\Users\samsung\AppData\Local\Apps\2.0
2014-11-16 02:08 - 2012-07-29 16:57 - 01464168 _____ () C:\Windows\WindowsUpdate.log
2014-11-16 02:04 - 2013-01-18 15:25 - 00026797 _____ () C:\Windows\setupact.log
2014-11-16 02:04 - 2012-09-17 05:19 - 00072182 _____ () C:\Windows\PFRO.log
2014-11-16 02:04 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-16 01:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-11-16 01:56 - 2013-01-14 19:38 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-11-16 01:54 - 2009-07-14 05:45 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-16 01:54 - 2009-07-14 05:45 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-16 01:30 - 2012-07-30 11:14 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1270606213-4017362319-1625700523-1000UA.job
2014-11-16 01:12 - 2012-09-09 23:42 - 00000000 ____D () C:\Program Files (x86)\Java
2014-11-16 01:12 - 2012-07-30 11:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-16 01:11 - 2012-09-08 12:56 - 00000000 ____D () C:\Users\samsung\AppData\Local\Adobe
2014-11-16 01:11 - 2012-09-08 12:55 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-11-16 01:11 - 2012-08-26 22:55 - 00000000 ____D () C:\ProgramData\Adobe
2014-11-16 00:55 - 2012-08-26 11:13 - 00000000 ____D () C:\Users\samsung\AppData\Local\PMB Files
2014-11-15 23:30 - 2012-07-30 11:14 - 00001014 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1270606213-4017362319-1625700523-1000Core.job
2014-11-15 15:03 - 2012-09-16 13:21 - 00000000 ____D () C:\Program Files (x86)\Dziobas Rar Player
2014-11-15 13:29 - 2013-07-19 12:50 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-13 11:48 - 2012-07-29 17:10 - 00000000 ____D () C:\Users\samsung
2014-11-11 21:32 - 2013-02-20 16:12 - 00000000 ____D () C:\Users\samsung\AppData\Roaming\Skype
2014-11-11 13:01 - 2009-07-14 18:55 - 00738192 _____ () C:\Windows\system32\perfh015.dat
2014-11-11 13:01 - 2009-07-14 18:55 - 00154848 _____ () C:\Windows\system32\perfc015.dat
2014-11-11 13:01 - 2009-07-14 06:13 - 01663412 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-10 20:30 - 2012-08-26 23:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-10 20:30 - 2012-08-26 23:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-26 09:07 - 2013-12-23 19:18 - 00000000 ____D () C:\Users\samsung\Documents\Honorbuddy
2014-10-25 12:08 - 2014-10-15 19:11 - 00000000 ____D () C:\Windows\system32\Drivers\NSBUx64
2014-10-25 12:07 - 2014-10-15 19:12 - 00003240 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-10-25 12:07 - 2014-10-15 19:12 - 00002542 _____ () C:\Users\Public\Desktop\Norton Security with Backup.lnk
2014-10-25 12:07 - 2014-10-15 19:11 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security with Backup
2014-10-25 12:05 - 2012-08-26 11:13 - 00000000 ____D () C:\ProgramData\PMB Files
2014-10-18 09:42 - 2012-09-24 05:51 - 00000000 ____D () C:\Users\samsung\AppData\Roaming\vlc

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-15 17:45

==================== End Of Log ============================