Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2015
Ran by dom (administrator) on TEST-KOMPUTER on 11-01-2015 17:32:25
Running from E:\Pliki instalacyjne\Nowy folder (2)
Loaded Profile: dom (Available profiles: dom)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe
(AVAST Software) D:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LBTWiz.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
() C:\Program Files\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmdb.exe
(IvoSoft) D:\Program Files\Classic Shell\ClassicStartMenu.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(AVAST Software) D:\Program Files\AVAST Software\Avast\avastui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() D:\Program Files\Rainlendar2\Rainlendar2.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avast Software) D:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(AIMP DevTeam) D:\Program Files\AIMP3\AIMP3.exe
(Mozilla Corporation) D:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Classic Start Menu] => D:\Program Files\Classic Shell\ClassicStartMenu.exe [147456 2012-12-29] (IvoSoft)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2303256 2014-05-19] (Logitech, Inc.)
HKLM\...\Run: [AvastUI.exe] => d:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12021464 2014-06-30] (Realtek Semiconductor)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-2821332150-970914226-2612375139-1004\...\Run: [Rainlendar2] => d:\Program Files\Rainlendar2\Rainlendar2.exe [2611808 2014-03-14] ()
HKU\S-1-5-21-2821332150-970914226-2612375139-1004\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-2821332150-970914226-2612375139-1004\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-2821332150-970914226-2612375139-1004\...\MountPoints2: {1e01f2ac-d0dd-11e2-8165-0021851243c8} - H:\Startme.exe
HKU\S-1-5-21-2821332150-970914226-2612375139-1004\...\MountPoints2: {8b4f1c29-cd22-11e2-818e-0021851243c8} - H:\Startme.exe
HKU\S-1-5-21-2821332150-970914226-2612375139-1004\...\MountPoints2: {f66b0641-d5a7-11e2-bfe0-806e6f6e6963} - G:\Install.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => d:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2821332150-970914226-2612375139-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} ->  No File
BHO: No Name -> {AF949550-9094-4807-95EC-D1C317803333} ->  No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
Toolbar: HKU\S-1-5-21-2821332150-970914226-2612375139-1004 -> No Name - {D2BF470E-ED1C-487F-A777-2BD8835EB6CE} -  No File
Toolbar: HKU\S-1-5-21-2821332150-970914226-2612375139-1004 -> No Name - {D2BF470E-ED1C-487F-A333-2BD8835EB6CE} -  No File
Toolbar: HKU\S-1-5-21-2821332150-970914226-2612375139-1004 -> No Name - {D2BF470E-ED1C-487F-A666-2BD8835EB6CE} -  No File
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63

FireFox:
========
FF ProfilePath: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396
FF NewTab: chrome://fvd.speeddial/content/fvd_about_blank.html
FF Homepage: hxxp://www.onet.pl/
FF NetworkProxy: "backup.ftp", ""
FF NetworkProxy: "backup.ftp_port", 0
FF NetworkProxy: "backup.gopher", ""
FF NetworkProxy: "backup.gopher_port", 0
FF NetworkProxy: "backup.socks", ""
FF NetworkProxy: "backup.socks_port", 0
FF NetworkProxy: "backup.ssl", ""
FF NetworkProxy: "backup.ssl_port", 0
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks_version", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1215155.dll (Adobe Systems, Inc.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> D:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.72.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.72.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKU\S-1-5-21-2821332150-970914226-2612375139-1004: @unity3d.com/UnityPlayer,version=1.0 -> D:\Users\dom\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\searchplugins\dobreprogramy.xml
FF SearchPlugin: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\searchplugins\filestubecom.xml
FF SearchPlugin: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\searchplugins\filmwebpl.xml
FF SearchPlugin: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\searchplugins\linguee-pl-en.xml
FF SearchPlugin: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\searchplugins\napisy24pl.xml
FF SearchPlugin: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\searchplugins\translate-english-to-polish.xml
FF SearchPlugin: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\searchplugins\wolframalpha.xml
FF SearchPlugin: D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\searchplugins\youtube.xml
FF Extension: Classic Theme Restorer - D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-11-15]
FF Extension: Click to Play per-element - D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\Extensions\ClickToPlayPerElement@uaSad.addons.mozilla.org.xpi [2014-11-15]
FF Extension: Add-on Compatibility Reporter - D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\Extensions\compatibility@addons.mozilla.org.xpi [2014-11-15]
FF Extension: Element Hiding Helper for Adblock Plus - D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\Extensions\elemhidehelper@adblockplus.org.xpi [2014-11-15]
FF Extension: searchOnTab - D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\Extensions\searchontab@sogame.cat.xpi [2014-11-15]
FF Extension: Session Manager - D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2014-11-15]
FF Extension: Stylish - D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2014-11-15]
FF Extension: Adblock Plus - D:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\ddp0ksvy.default-1399131752396\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-15]
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-06-18]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - d:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - d:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-08]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - d:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-08]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - d:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-08]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; d:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-08] (AVAST Software)
R3 AvastVBoxSvc; d:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2014-11-08] (Avast Software)
S3 Microsoft SharePoint Workspace Audit Service; D:\Program Files\Microsoft Office\Office14\GROOVE.EXE [30798512 2013-03-08] (Microsoft Corporation)
R2 XRNADB; C:\Program Files\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmdb.exe [79872 2011-04-19] () [File not signed]
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-11-08] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-11-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-11-08] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-11-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-11-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-11-08] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [83872 2014-03-14] ()
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2014-12-31] (REALiX(tm))
R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [106296 2014-11-09] (JMicron Technology Corp.)
S3 LGDDCDevice; C:\Program Files\LG Soft India\forteManager\bin\I2CDriver.sys [14336 2009-04-24] () [File not signed]
S4 LGII2CDevice; C:\Program Files\LG Soft India\forteManager\bin\PII2CDriver.sys [18432 2009-04-24] () [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2014-03-14] ()
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [89256 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [15016 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [120744 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [114216 2008-05-16] (MCCI Corporation)
S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [25512 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [110632 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [115752 2008-05-16] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation)
S3 SIVDriver; C:\Windows\system32\Drivers\SIVX32.sys [104848 2012-12-14] (Ray Hinchliffe)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [320120 2014-09-26] (Duplex Secure Ltd.)
S3 udsstub; C:\Windows\System32\DRIVERS\udsstub.sys [16000 2012-06-18] (SysNucleus) [File not signed]
R2 VBoxAswDrv; d:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2014-11-08] (Avast Software)
S2 ASPI32; No ImagePath
U5 UnlockerDriver5; d:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-11 17:31 - 2015-01-11 17:32 - 00000000 ____D () C:\FRST
2015-01-11 13:11 - 2015-01-11 14:39 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2015-01-11 11:50 - 2015-01-11 11:50 - 00000000 ____D () D:\Users\dom\Documents\Ashampoo Burning Studio 2014
2015-01-11 11:30 - 2015-01-11 11:30 - 00000000 ____D () D:\Users\dom\AppData\Local\CrashDumps
2015-01-11 11:14 - 2015-01-11 17:16 - 00001324 _____ () C:\Windows\Tasks\KOO.job
2015-01-11 11:13 - 2015-01-11 17:16 - 00001326 _____ () C:\Windows\Tasks\CJVW.job
2015-01-04 19:17 - 2015-01-04 19:17 - 00000000 ____D () C:\Program Files\Wirtualna Polska
2015-01-04 18:05 - 2015-01-04 18:05 - 00050760 _____ () D:\Users\dom\AppData\Local\recently-used.xbel
2015-01-04 17:26 - 2015-01-04 17:26 - 00000000 ____D () D:\Users\dom\AppData\Local\ElevatedDiagnostics
2015-01-04 16:57 - 2014-07-15 12:01 - 03125592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2015-01-04 16:57 - 2014-07-15 08:30 - 00917720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2015-01-04 16:57 - 2014-07-15 04:14 - 01277681 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-01-04 16:57 - 2014-07-14 08:26 - 67564544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2015-01-04 16:57 - 2014-07-09 09:57 - 02481368 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2015-01-04 16:57 - 2014-07-07 07:07 - 02588888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2015-01-04 16:57 - 2014-07-04 04:07 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2015-01-04 16:57 - 2014-07-03 10:05 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2015-01-04 16:57 - 2014-07-03 10:04 - 05087496 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2015-01-04 16:57 - 2014-06-19 03:58 - 02144560 _____ () C:\Windows\system32\SStudio.dll
2015-01-04 16:57 - 2014-06-17 12:18 - 00844192 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2015-01-04 16:57 - 2014-04-10 05:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2015-01-04 16:57 - 2014-04-10 05:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2015-01-04 16:57 - 2014-04-10 05:19 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2015-01-04 16:57 - 2014-04-10 05:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2015-01-04 16:57 - 2014-04-10 05:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2015-01-04 16:57 - 2014-03-06 09:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2015-01-04 16:57 - 2013-10-11 04:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2015-01-04 16:57 - 2013-08-14 08:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2015-01-04 16:57 - 2013-08-14 08:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2015-01-04 16:57 - 2012-08-31 12:17 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2015-01-04 16:57 - 2012-08-31 12:17 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2015-01-04 16:57 - 2012-08-31 12:17 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2015-01-04 16:57 - 2012-08-31 12:17 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2015-01-04 16:57 - 2012-08-31 12:17 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2015-01-04 16:57 - 2012-01-10 03:20 - 00058264 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll
2015-01-04 16:57 - 2011-11-22 09:28 - 00013416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2015-01-04 16:57 - 2011-09-02 07:21 - 00214368 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2015-01-04 16:57 - 2011-09-02 07:21 - 00074080 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2015-01-04 16:57 - 2011-09-02 07:21 - 00068960 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2015-01-04 16:57 - 2011-03-17 05:16 - 01379760 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2015-01-04 16:57 - 2011-03-07 10:03 - 00134584 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2015-01-04 16:57 - 2010-11-08 00:31 - 00359768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2015-01-04 16:57 - 2010-11-08 00:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2015-01-04 16:57 - 2010-11-08 00:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2015-01-04 16:57 - 2010-11-08 00:31 - 00170840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2015-01-04 16:57 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2015-01-04 16:57 - 2010-11-08 00:31 - 00064856 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2015-01-04 16:57 - 2010-09-27 02:34 - 00232792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2015-01-04 16:57 - 2009-12-04 08:43 - 00132368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2015-01-04 16:57 - 2009-11-24 02:55 - 00345328 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2015-01-04 16:57 - 2009-11-24 02:55 - 00185584 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2015-01-04 16:57 - 2009-11-24 02:55 - 00173296 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2015-01-04 16:57 - 2009-11-24 02:55 - 00140528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2015-01-04 16:57 - 2009-11-18 11:42 - 01783056 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2015-01-04 16:56 - 2014-07-09 06:15 - 01452224 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32APO.dll
2015-01-04 16:56 - 2014-07-02 03:12 - 00272032 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2015-01-04 16:56 - 2014-06-06 17:00 - 00519368 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2015-01-04 16:56 - 2014-05-22 09:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2015-01-04 16:56 - 2014-02-18 10:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2015-01-04 16:56 - 2013-10-11 05:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-01-04 16:56 - 2013-10-06 17:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2015-01-04 16:56 - 2013-10-06 17:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2015-01-04 16:56 - 2013-10-06 17:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2015-01-04 16:56 - 2012-03-08 04:47 - 00095840 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2015-01-04 16:56 - 2011-08-23 10:00 - 00357712 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 01509480 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 01292904 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 01220200 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00654952 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00631400 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00601704 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00458344 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00389736 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00375400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll
2015-01-04 16:56 - 2011-05-31 02:42 - 00218216 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll
2015-01-04 16:29 - 2014-05-19 03:47 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2015-01-04 15:47 - 2015-01-04 15:47 - 00077824 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW73.sys
2015-01-01 16:00 - 2015-01-04 18:11 - 00000000 ____D () D:\Users\dom\AppData\Roaming\FileZilla
2014-12-31 17:39 - 2014-12-31 17:39 - 00023840 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO32.SYS
2014-12-27 15:22 - 2015-01-11 17:15 - 00127978 _____ () C:\Windows\PFRO.log
2014-12-26 16:12 - 2014-12-26 16:12 - 00000000 ____D () D:\Users\dom\AppData\Local\Programs
2014-12-25 11:20 - 2014-12-25 11:21 - 34630867 _____ () D:\Users\dom\Downloads\torbrowser-install-4.0.2_pl.exe
2014-12-23 23:33 - 2014-12-23 23:33 - 00000000 ____D () D:\Users\dom\AppData\Local\BigAngryDog_HWipe
2014-12-21 16:50 - 2014-12-21 16:50 - 00084856 _____ () D:\Users\dom\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-21 16:49 - 2014-12-21 16:49 - 00000000 ____D () D:\Users\dom\AppData\Roaming\ATI
2014-12-21 16:49 - 2014-12-21 16:49 - 00000000 ____D () D:\Users\dom\AppData\Roaming\Adobe
2014-12-21 16:48 - 2015-01-11 17:16 - 00005145 _____ () C:\Windows\setupact.log
2014-12-21 16:48 - 2014-12-21 16:48 - 00337520 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-21 16:48 - 2014-12-21 16:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-18 18:30 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-12 23:31 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-12 18:41 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-12 18:41 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-12 18:41 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-12 18:41 - 2014-11-22 03:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-12 18:41 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-12 18:41 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-12 18:41 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-12 18:41 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-12 18:41 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-12 18:41 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-12 18:41 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-12 18:41 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-12 18:41 - 2014-11-22 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-12 18:41 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-12 18:41 - 2014-11-22 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-12 18:41 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-12 18:41 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-12 18:41 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-12 18:41 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-12 18:41 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-12 18:41 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-12 18:41 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-12 18:41 - 2014-11-22 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-12 18:41 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-12 18:41 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-12 18:41 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-12 18:41 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-12 18:41 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-12 18:41 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-12 18:41 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-12 18:41 - 2014-11-11 02:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-12 18:40 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-12 18:39 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-12 18:39 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-12 18:39 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-12 18:39 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-12 18:39 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-12 18:39 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-11 17:34 - 2012-12-28 16:03 - 00000000 ____D () D:\Users\dom\AppData\Local\Temp
2015-01-11 17:32 - 2012-12-28 16:03 - 08912896 _____ () D:\Users\dom\NTUSER.DAT
2015-01-11 17:32 - 2012-12-28 16:03 - 00262144 ___SH () D:\Users\dom\ntuser.dat.LOG1
2015-01-11 17:29 - 2012-12-28 16:36 - 00000000 ____D () D:\Users\dom\AppData\Roaming\AIMP3
2015-01-11 17:21 - 2012-12-28 15:32 - 01839683 _____ () C:\Windows\WindowsUpdate.log
2015-01-11 17:16 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-11 17:14 - 2012-12-28 16:11 - 01702116 ____H () D:\Users\dom\AppData\Local\IconCache.db
2015-01-11 17:07 - 2014-06-27 16:31 - 00000820 _____ () D:\Users\dom\Desktop\Mozilla Firefox.lnk
2015-01-11 17:07 - 2012-12-28 16:03 - 00000000 ___RD () D:\Users\dom\Desktop
2015-01-11 17:06 - 2012-12-28 16:03 - 00000000 ____D () D:\Users\dom\AppData\Roaming
2015-01-11 17:06 - 2012-12-28 16:03 - 00000000 ____D () D:\Users\dom\AppData\Local
2015-01-11 17:06 - 2012-12-28 15:58 - 00000000 ___RD () D:\Users\Public\Documents
2015-01-11 11:50 - 2012-12-28 16:03 - 00000000 ___RD () D:\Users\dom\Documents
2015-01-11 11:41 - 2014-12-07 11:18 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-11 11:39 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-11 11:31 - 2013-01-03 17:34 - 00000000 ____D () D:\Users\dom\AppData\Roaming\uTorrent
2015-01-11 11:31 - 2009-07-14 03:04 - 00000572 _____ () C:\Windows\win.ini
2015-01-11 11:23 - 2012-12-28 16:03 - 00000000 ___RD () D:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2015-01-11 11:14 - 2013-04-24 09:30 - 00000000 ____D () C:\Program Files\Google
2015-01-07 20:17 - 2012-12-31 11:14 - 00000000 ____D () D:\Users\dom\AppData\Roaming\Mp3tag
2015-01-06 18:02 - 2012-12-29 11:22 - 00000000 _____ () C:\sparkraw.log
2015-01-06 16:23 - 2012-12-28 15:58 - 00000000 __RHD () D:\Users\Public\Desktop
2015-01-06 09:57 - 2012-12-29 11:09 - 00000035 _____ () C:\Windows\Ulead32.INI
2015-01-04 18:12 - 2013-02-13 10:25 - 00000000 ____D () D:\Users\dom\.gimp-2.8
2015-01-04 17:24 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Msdtc
2015-01-04 17:02 - 2012-12-28 16:25 - 00000000 ___HD () C:\Program Files\Temp
2015-01-04 16:58 - 2012-12-28 16:26 - 00000000 ____D () C:\Windows\system32\RTCOM
2015-01-04 16:55 - 2012-12-28 16:25 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-01-04 15:43 - 2012-12-28 16:25 - 00000000 ____D () C:\Program Files\Realtek
2015-01-04 10:19 - 2009-07-14 05:34 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-04 10:19 - 2009-07-14 05:34 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-03 15:46 - 2011-04-12 06:08 - 00750178 _____ () C:\Windows\system32\perfh015.dat
2015-01-03 15:46 - 2011-04-12 06:08 - 00161656 _____ () C:\Windows\system32\perfc015.dat
2015-01-03 15:46 - 2010-11-20 22:01 - 01699810 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-31 20:25 - 2012-12-29 17:19 - 00000000 ____D () D:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bezpieczeństwo
2014-12-31 20:24 - 2012-12-29 17:18 - 00000000 ___RD () D:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Multimedia
2014-12-26 16:11 - 2012-12-29 17:18 - 00000000 ____D () D:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Użytkowe
2014-12-26 16:11 - 2012-12-28 16:33 - 00000000 ____D () D:\Users\dom\AppData\Roaming\WinRAR
2014-12-25 18:21 - 2012-12-31 11:45 - 00000000 ____D () D:\Users\dom\AppData\Roaming\Notepad++
2014-12-25 11:22 - 2012-12-28 16:03 - 00000000 ___RD () D:\Users\dom\Downloads
2014-12-24 20:51 - 2013-01-14 17:35 - 00000000 ____D () D:\Users\dom\AppData\Local\Microsoft Games
2014-12-21 16:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-12-21 11:28 - 2012-12-28 15:27 - 00000000 ____D () C:\Windows\Panther
2014-12-14 20:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-12-13 10:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-12-12 22:47 - 2012-12-28 16:07 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-12-12 20:51 - 2014-11-08 17:15 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-12 20:50 - 2009-07-14 05:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-12 17:43 - 2014-03-06 09:17 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-12 17:43 - 2014-03-06 09:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Files to move or delete:
====================
D:\Users\dom\jagex_cl_runescape_LIVE.dat
D:\Users\dom\random.dat


Some content of TEMP:
====================
D:\Users\dom\AppData\Local\Temp\7z920.exe
D:\Users\dom\AppData\Local\Temp\bytes.exe
D:\Users\dom\AppData\Local\Temp\InstallGenieo.exe
D:\Users\dom\AppData\Local\Temp\Quarantine.exe
D:\Users\dom\AppData\Local\Temp\sqlite3.dll
D:\Users\dom\AppData\Local\Temp\ytdieamo_amodc_setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-10 19:10

==================== End Of Log ============================