Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-11-2014 01
Ran by Lenovo (administrator) on LENOVO-KOMPUTER on 28-11-2014 12:44:04
Running from C:\Users\Lenovo\Downloads
Loaded Profile: Lenovo (Available profiles: Lenovo)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(CyberLink) C:\Program Files\Lenovo\YouCam\YCMMirage.exe
(Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\Energy Management\utility.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Flux Software LLC) C:\Users\Lenovo\AppData\Local\FluxSoftware\Flux\flux.exe
(Sony) C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
(SmsDiscount) C:\Program Files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe
() C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
(Spotify Ltd) C:\Users\Lenovo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(www.shadowexplorer.com) C:\Program Files\ShadowExplorer\sesvc.exe
(www.shadowexplorer.com) C:\Program Files\ShadowExplorer\ShadowExplorer.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-07-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [YouCam Mirage] => C:\Program Files\Lenovo\YouCam\YCMMirage.exe [136488 2010-12-05] (CyberLink)
HKLM\...\Run: [YouCam Tray] => C:\Program Files\Lenovo\YouCam\YouCam.exe [224352 2010-12-05] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] => C:\Program Files\Lenovo\Energy Management\Energy Management.exe [8969264 2012-04-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files\Lenovo\Energy Management\Utility.exe [5646272 2011-01-06] (Lenovo(beijing) Limited)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKU\S-1-5-21-4144906793-159945770-2030462716-1000\...\Run: [f.lux] => C:\Users\Lenovo\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-4144906793-159945770-2030462716-1000\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [468192 2014-10-15] (Sony)
HKU\S-1-5-21-4144906793-159945770-2030462716-1000\...\Run: [SmsDiscount] => C:\Program Files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe [19737920 2014-02-11] (SmsDiscount)
HKU\S-1-5-21-4144906793-159945770-2030462716-1000\...\Run: [Spotify Web Helper] => C:\Users\Lenovo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-06] (Spotify Ltd)
HKU\S-1-5-21-4144906793-159945770-2030462716-1000\...\Run: [GoogleChromeAutoLaunch_332B101ED56858E0765C41199BCD4350] => C:\Program Files\Google\Chrome\Application\chrome.exe [856904 2014-11-25] (Google Inc.)
HKU\S-1-5-21-4144906793-159945770-2030462716-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4144906793-159945770-2030462716-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=166
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 193.162.153.164 194.239.134.83

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_233.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @verimatrix.com/ViewRightWeb -> C:\Program Files\Verimatrix\ViewRight Web\\npViewRight.dll (Verimatrix, Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4144906793-159945770-2030462716-1000: @verimatrix.com/ViewRightWeb -> C:\Program Files\Verimatrix\ViewRight Web\\npViewRight.dll (Verimatrix, Inc.)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.gazeta.pl/0,0.html?p=166"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-03]
CHR Extension: (Dysk Google) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-03]
CHR Extension: (YouTube) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-03]
CHR Extension: (Adblock Plus) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-29]
CHR Extension: (Szukaj w Google) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-03]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-11-02]
CHR Extension: (Google Wallet) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-03]
CHR Extension: (Gmail) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-03]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [122000 2011-12-11] (Seiko Epson Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 sesvc; C:\Program Files\ShadowExplorer\sesvc.exe [9216 2013-01-02] (www.shadowexplorer.com) [File not signed]
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 ACPIVPC; C:\Windows\System32\DRIVERS\AcpiVpc.sys [23136 2010-10-25] (Lenovo Corporation)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [26328 2014-10-27] (Sony Mobile Communications)
R3 intelkmd; C:\Windows\System32\DRIVERS\igdpmd32.sys [10857984 2011-09-26] (Intel Corporation)
R0 LHDmgr; C:\Windows\System32\DRIVERS\LhdX86.sys [32352 2010-01-15] (Lenovo.)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
S3 RSUSBVSTOR; C:\Windows\System32\Drivers\RTSUVSTOR.sys [233104 2012-06-15] (Realtek Semiconductor Corp.)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-28 12:44 - 2014-11-28 12:44 - 00012423 _____ () C:\Users\Lenovo\Downloads\FRST.txt
2014-11-28 12:43 - 2014-11-28 12:43 - 01109504 _____ (Farbar) C:\Users\Lenovo\Downloads\FRST.exe
2014-11-28 12:42 - 2011-09-26 13:26 - 10857984 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdpmd32.sys
2014-11-28 12:36 - 2014-11-28 12:36 - 00001843 _____ () C:\Users\Lenovo\Desktop\ShadowExplorer.lnk
2014-11-28 12:36 - 2014-11-28 12:36 - 00000000 ____D () C:\Users\Lenovo\AppData\Roaming\www.shadowexplorer.com
2014-11-28 12:36 - 2014-11-28 12:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShadowExplorer
2014-11-28 12:36 - 2014-11-28 12:36 - 00000000 ____D () C:\Program Files\ShadowExplorer
2014-11-28 12:35 - 2014-11-28 12:35 - 00969845 _____ (ShadowExplorer.com ) C:\Users\Lenovo\Downloads\ShadowExplorer-0.9-setup.exe
2014-11-28 11:01 - 2014-11-28 11:16 - 00018929 _____ () C:\Windows\IE11_main.log
2014-11-28 10:51 - 2014-11-28 10:52 - 00003987 _____ () C:\Windows\IE9_main.log
2014-11-28 10:48 - 2014-11-28 10:48 - 14368768 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 13758464 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 02861568 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-28 10:48 - 2014-11-28 10:48 - 02055168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 01762816 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-28 10:48 - 2014-11-28 10:48 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-11-28 10:48 - 2014-11-28 10:48 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00745472 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-28 10:48 - 2014-11-28 10:48 - 00719360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-11-28 10:48 - 2014-11-28 10:48 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-11-28 10:48 - 2014-11-28 10:48 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-11-28 10:48 - 2014-11-28 10:48 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-28 10:48 - 2014-11-28 10:48 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-11-28 10:48 - 2014-11-28 10:48 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-11-28 10:48 - 2014-11-28 10:48 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-11-28 10:48 - 2014-11-28 10:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-28 10:48 - 2014-11-28 10:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-11-28 10:48 - 2014-11-28 10:48 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-11-28 10:48 - 2014-11-28 10:48 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-11-28 10:46 - 2014-11-28 10:51 - 00010709 _____ () C:\Windows\IE10_main.log
2014-11-28 09:49 - 2014-11-28 12:44 - 00000000 ____D () C:\FRST
2014-11-26 15:38 - 2014-11-26 15:38 - 00135216 _____ () C:\Windows\Minidump\112614-17019-01.dmp
2014-11-26 09:51 - 2014-11-26 09:51 - 00131072 _____ () C:\Windows\Minidump\112614-192676-01.dmp
2014-11-24 12:20 - 2014-11-24 12:20 - 00000000 __SHD () C:\Users\Lenovo\AppData\Local\EmieBrowserModeList
2014-11-19 10:40 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 10:40 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-14 22:36 - 2014-11-14 22:36 - 00131072 _____ () C:\Windows\Minidump\111414-15537-01.dmp
2014-11-12 11:33 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 11:33 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 11:33 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 11:33 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 11:33 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 11:33 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 11:33 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 11:33 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 11:33 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 11:33 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 11:33 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 11:33 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 11:33 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 11:33 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 11:33 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 11:33 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 11:33 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 11:33 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 11:33 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 11:33 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 11:33 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 11:33 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 11:33 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 16:59 - 2014-11-19 22:45 - 00000000 ____D () C:\Users\Lenovo\Desktop\Options
2014-11-08 23:48 - 2014-11-08 23:48 - 00135216 _____ () C:\Windows\Minidump\110814-15054-01.dmp
2014-11-05 21:51 - 2014-11-05 21:52 - 00000000 ____D () C:\Users\Lenovo\AppData\Roaming\Elluminate
2014-11-05 11:25 - 2014-11-23 21:14 - 00000000 ____D () C:\Users\Lenovo\Desktop\The Digestion Sessions
2014-11-02 12:28 - 2014-11-28 11:12 - 00000000 ___RD () C:\Users\Lenovo\Dysk Google
2014-11-02 12:26 - 2014-11-02 12:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-11-02 12:11 - 2014-11-02 12:12 - 00131072 _____ () C:\Windows\Minidump\110214-13338-01.dmp
2014-10-31 21:23 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-10-30 15:03 - 2014-10-30 15:03 - 00131072 _____ () C:\Windows\Minidump\103014-13275-01.dmp
2014-10-29 14:16 - 2014-10-29 14:16 - 00000000 ____D () C:\Windows\Sun
2014-10-29 13:53 - 2014-10-29 13:53 - 00448512 _____ (OldTimer Tools) C:\Users\Lenovo\Desktop\TFC.exe
2014-10-29 13:48 - 2014-10-29 13:50 - 00000270 _____ () C:\DelFix.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-28 12:24 - 2014-10-03 15:39 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-28 11:54 - 2014-10-04 20:38 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-28 11:54 - 2014-10-04 20:38 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-28 11:17 - 2009-07-14 05:34 - 00025280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-28 11:17 - 2009-07-14 05:34 - 00025280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-28 11:16 - 2014-05-17 10:59 - 01127472 _____ () C:\Windows\WindowsUpdate.log
2014-11-28 11:12 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-28 11:11 - 2014-10-02 07:27 - 00032520 _____ () C:\Windows\setupact.log
2014-11-28 11:01 - 2011-02-04 15:37 - 00067154 _____ () C:\Windows\system32\perfh015.dat
2014-11-28 11:01 - 2011-02-04 15:37 - 00030204 _____ () C:\Windows\system32\perfc015.dat
2014-11-28 11:01 - 2010-11-20 22:01 - 00836844 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-28 11:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\it-IT
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\el-GR
2014-11-28 10:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-28 10:39 - 2014-05-17 10:58 - 00001421 _____ () C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-28 10:37 - 2014-05-17 11:48 - 00000000 ____D () C:\Windows\Panther
2014-11-27 22:01 - 2014-08-10 14:20 - 00000000 ____D () C:\Users\Lenovo\AppData\Roaming\Spotify
2014-11-27 16:39 - 2014-08-10 14:21 - 00000000 ____D () C:\Users\Lenovo\AppData\Local\Spotify
2014-11-26 15:47 - 2014-10-04 16:20 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-26 15:38 - 2014-05-24 19:36 - 00000000 ____D () C:\Windows\Minidump
2014-11-26 14:24 - 2014-10-03 15:39 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-26 14:24 - 2014-10-03 15:39 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-24 17:01 - 2014-05-20 13:04 - 01075627 _____ () C:\Users\Lenovo\danid.log
2014-11-23 21:19 - 2014-05-20 12:50 - 00000000 ____D () C:\Users\Lenovo\AppData\Roaming\Skype
2014-11-20 14:42 - 2014-10-20 12:46 - 01582309 _____ () C:\Users\Lenovo\Documents\Multi Product.cs2
2014-11-16 11:17 - 2014-10-07 08:40 - 00241826 _____ () C:\Windows\DPINST.LOG
2014-11-16 11:17 - 2014-10-07 08:40 - 00001972 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-11-14 22:38 - 2014-05-17 11:30 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-11-13 18:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-11-12 15:32 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-12 15:25 - 2009-07-14 05:33 - 00434808 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 15:04 - 2014-05-20 16:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 15:01 - 2014-05-20 16:09 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-06 20:18 - 2014-10-20 12:46 - 01557321 _____ () C:\Users\Lenovo\Documents\Multi Product.bs2
2014-11-05 11:33 - 2014-05-20 12:38 - 03650544 _____ (MetaQuotes Software Corp.) C:\Windows\system32\MetaViewer.dll
2014-11-02 12:28 - 2014-05-17 10:58 - 00000000 ____D () C:\Users\Lenovo
2014-11-02 12:26 - 2014-10-03 14:42 - 00000000 ____D () C:\Program Files\Google
2014-11-02 12:26 - 2014-05-20 12:38 - 00000000 ____D () C:\Users\Lenovo\AppData\Local\Google
2014-10-30 12:24 - 2014-05-17 11:13 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Some content of TEMP:
====================
C:\Users\Lenovo\AppData\Local\Temp\5C0D6A83.dll
C:\Users\Lenovo\AppData\Local\Temp\868C7543.dll
C:\Users\Lenovo\AppData\Local\Temp\A90319A9.dll
C:\Users\Lenovo\AppData\Local\Temp\A90A0110.dll
C:\Users\Lenovo\AppData\Local\Temp\C27F3AF7.dll
C:\Users\Lenovo\AppData\Local\Temp\E288FF5B.dll
C:\Users\Lenovo\AppData\Local\Temp\FRST.exe
C:\Users\Lenovo\AppData\Local\Temp\t.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-26 10:29

==================== End Of Log ============================