Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-01-2015 01
Ran by Soob (administrator) on SOOB-PC on 24-01-2015 23:16:58
Running from C:\Users\Soob\Desktop
Loaded Profiles: Soob (Available profiles: Soob)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\Soob\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Last.fm) C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_257.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_257.exe
(Spotify Ltd) C:\Users\Soob\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Soob\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Soob\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Soob\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Soob\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Soob\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Soob\AppData\Roaming\Spotify\Data\SpotifyHelper.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKU\S-1-5-21-682461631-3795882564-1583022148-1000\...\Run: [Spotify Web Helper] => C:\Users\Soob\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-13] (Spotify Ltd)
HKU\S-1-5-21-682461631-3795882564-1583022148-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [380928 2009-11-04] (AMD)
HKU\S-1-5-21-682461631-3795882564-1583022148-1000\...\Run: [uTorrent] => C:\Users\Soob\AppData\Roaming\uTorrent\uTorrent.exe [1677904 2015-01-24] (BitTorrent Inc.)
HKU\S-1-5-21-682461631-3795882564-1583022148-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Soob\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Soob\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Soob\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Soob\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Soob\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Soob\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Soob\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Soob\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} =>  No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} =>  No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} =>  No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} =>  No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} =>  No File
CHR HKU\S-1-5-21-682461631-3795882564-1583022148-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-682461631-3795882564-1583022148-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-682461631-3795882564-1583022148-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://wyborcza.pl/0,0.html?p=138
HKU\S-1-5-21-682461631-3795882564-1583022148-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKU\S-1-5-21-682461631-3795882564-1583022148-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> DefaultScope value is missing.
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-682461631-3795882564-1583022148-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3306681&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP7F1F2992-7DB7-4668-8818-942EDA2EA8F3&q={SearchTerms}
SearchScopes: HKU\S-1-5-21-682461631-3795882564-1583022148-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3306681&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP7F1F2992-7DB7-4668-8818-942EDA2EA8F3&q={SearchTerms}
SearchScopes: HKU\S-1-5-21-682461631-3795882564-1583022148-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://www.mystart.com/results.php?pr=vmn&id=toolbarcleaner&v=1_1_1_4&ent=ch_4802&q={searchTerms}
SearchScopes: HKU\S-1-5-21-682461631-3795882564-1583022148-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO-x32: No Name -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} ->  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32:  - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} -  No File [ ]
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044
FF DefaultSearchEngine,S: 
FF DefaultSearchUrl: 
FF SearchEngineOrder.1: Google
FF SearchEngineOrder.1,S: 
FF SelectedSearchEngine: Wiktionary (en)
FF SelectedSearchEngine,S: 
FF Homepage: https://www.google.pl/
FF Keyword.URL: https://www.google.com/search?q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\searchplugins\cambridge-dictionaries-online.xml
FF SearchPlugin: C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\searchplugins\dikipl---sownik-angielskiego.xml
FF SearchPlugin: C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\searchplugins\the-free-dictionary.xml
FF SearchPlugin: C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\searchplugins\the-pirate-bay.xml
FF SearchPlugin: C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\searchplugins\wiktionary-en.xml
FF SearchPlugin: C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\searchplugins\wyszukiwarka-filmw-w-youtube.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\testlog.txt
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahootc.xml
FF Extension: United States English Spellchecker - C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\Extensions\en-US@dictionaries.addons.mozilla.org [2013-03-24]
FF Extension: DownloadHelper - C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-05]
FF Extension: Gmail Watcher - C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\Extensions\gmailwatcher@sonthakit.xpi [2013-03-08]
FF Extension: Toggle Find Bar - C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\Extensions\togglefindbar@ashphy.com.xpi [2015-01-15]
FF Extension: Adblock Plus - C:\Users\Soob\AppData\Roaming\Mozilla\Firefox\Profiles\xe59akw9.default-1362709498044\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-03-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-06-03]

Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> ""
CHR Profile: C:\Users\Soob\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Angry Birds) - C:\Users\Soob\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-04-14]
CHR Extension: (Dysk Google) - C:\Users\Soob\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-16]
CHR Extension: (2048) - C:\Users\Soob\AppData\Local\Google\Chrome\User Data\Default\Extensions\hekhdfjankbhklfkjmnmnefcacndeoll [2014-04-14]
CHR Extension: (Google Wallet) - C:\Users\Soob\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-13]
CHR Extension: (Adblock Pro) - C:\Users\Soob\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2014-11-22]
CHR Extension: (Gmail) - C:\Users\Soob\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-16]
CHR HKLM-x32\...\Chrome\Extension: [aohddidmgooofkgohkbkaohadkolgejj] - C:\Users\Soob\AppData\Local\Youdao\Dict\Application\stable\YDChromeTextExtractor.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-26]
CHR HKLM-x32\...\Chrome\Extension: [jfeamifeonnccnmggejamaikapdibimp] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-26] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-26] (Avast Software)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-25] (Electronic Arts)
S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [438272 2014-01-12] (PowerUp Software, LLC) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [20520 2010-03-01] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-26] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-26] ()
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-15] (Malwarebytes Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-26] (Avast Software)
S3 WsAudioDevice_383S(1); C:\Windows\System32\drivers\WsAudioDevice_383S(1).sys [29288 2014-07-31] (Wondershare)
S3 zgdcat; No ImagePath
S3 zgdcdiag; No ImagePath
S3 zgdcmdm; No ImagePath
S3 zgdcnet; No ImagePath
S3 zgdcnmea; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 massfilter_lte; \??\C:\Windows\system32\drivers\massfilter_lte.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-24 23:16 - 2015-01-24 23:17 - 00019185 _____ () C:\Users\Soob\Desktop\FRST.txt
2015-01-24 23:14 - 2015-01-24 23:17 - 00000000 ____D () C:\FRST
2015-01-24 23:14 - 2015-01-24 23:14 - 00380416 _____ () C:\Users\Soob\Desktop\n5fzgt6s.exe
2015-01-24 23:13 - 2015-01-24 23:13 - 02129920 _____ (Farbar) C:\Users\Soob\Desktop\FRST64.exe
2015-01-24 18:16 - 2015-01-24 18:16 - 00000197 _____ () C:\Windows\system32\2015-01-24-17-16-20.015-AvastVBoxSVC.exe-3388.log
2015-01-24 18:13 - 2015-01-24 18:13 - 00000056 _____ () C:\Windows\setupact.log
2015-01-24 18:13 - 2015-01-24 18:13 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-24 18:12 - 2015-01-24 18:12 - 22818816 _____ () C:\Windows\system32\config\system.sav.LOG
2015-01-24 18:08 - 2015-01-24 18:12 - 91549696 _____ () C:\Windows\system32\config\software.sav.LOG
2015-01-24 18:08 - 2015-01-24 18:08 - 00061440 _____ () C:\Windows\system32\config\sam.sav.LOG
2015-01-24 18:08 - 2015-01-24 18:08 - 00024576 _____ () C:\Windows\system32\config\security.sav.LOG
2015-01-24 17:23 - 2015-01-24 17:23 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2015-01-24 17:22 - 2015-01-24 17:22 - 03223152 _____ (VMware, Inc.) C:\Windows\SysWOW64\vm3dgl.dll
2015-01-24 17:22 - 2015-01-24 17:22 - 00219248 _____ (VMware, Inc.) C:\Windows\SysWOW64\vm3dum.dll
2015-01-24 17:21 - 2015-01-24 17:21 - 01047552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71u.dll
2015-01-24 17:19 - 2015-01-24 17:55 - 00063088 _____ (VMware, Inc.) C:\Windows\SysWOW64\vsocklib.dll
2015-01-24 17:19 - 2015-01-24 17:55 - 00053360 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmGuestLib.dll
2015-01-24 17:19 - 2015-01-24 17:55 - 00050800 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmhgfs.dll
2015-01-24 17:19 - 2015-01-24 17:55 - 00034416 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmGuestLibJava.dll
2015-01-24 17:18 - 2015-01-24 17:54 - 00606208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2015-01-24 17:18 - 2015-01-24 17:54 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2015-01-24 17:18 - 2015-01-24 17:54 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2015-01-24 17:18 - 2015-01-24 17:54 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-01-24 17:18 - 2015-01-24 17:54 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2015-01-24 17:18 - 2015-01-24 17:54 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2015-01-24 17:18 - 2015-01-24 17:54 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\corpol.dll
2015-01-24 17:09 - 2015-01-24 17:09 - 00000000 ____D () C:\ProgramData\Weskysoft
2015-01-24 17:06 - 2015-01-24 17:06 - 00000000 ____D () C:\Program Files (x86)\DLLSuite
2015-01-24 16:25 - 2015-01-24 16:36 - 00000000 ____D () C:\Users\Soob\AppData\Roaming\Solvusoft
2015-01-24 16:25 - 2012-10-15 17:02 - 00019888 _____ (solvusoft) C:\Windows\system32\roboot64.exe
2015-01-24 15:50 - 2015-01-24 15:50 - 00000000 ____D () C:\ProgramData\APN
2015-01-24 08:30 - 2015-01-24 08:30 - 00000197 _____ () C:\Windows\system32\2015-01-24-07-30-09.019-AvastVBoxSVC.exe-3512.log
2015-01-24 03:05 - 2015-01-24 03:05 - 00008015 _____ () C:\Users\Soob\AppData\Local\recently-used.xbel
2015-01-24 03:00 - 2015-01-24 03:06 - 00000000 ____D () C:\Users\Soob\Desktop\Battlecat
2015-01-23 14:26 - 2015-01-23 14:31 - 00000000 ____D () C:\Users\Soob\Desktop\30 minutes c'est tassé
2015-01-23 12:28 - 2015-01-23 12:28 - 00000197 _____ () C:\Windows\system32\2015-01-23-11-28-07.094-AvastVBoxSVC.exe-3920.log
2015-01-23 09:35 - 2015-01-23 09:35 - 00000197 _____ () C:\Windows\system32\2015-01-23-08-35-29.044-AvastVBoxSVC.exe-3136.log
2015-01-22 09:26 - 2015-01-22 09:26 - 00000197 _____ () C:\Windows\system32\2015-01-22-08-26-15.096-AvastVBoxSVC.exe-3504.log
2015-01-21 20:52 - 2015-01-21 20:52 - 00000197 _____ () C:\Windows\system32\2015-01-21-19-52-02.040-AvastVBoxSVC.exe-3676.log
2015-01-21 11:33 - 2015-01-21 11:33 - 00000197 _____ () C:\Windows\system32\2015-01-21-10-33-15.022-AvastVBoxSVC.exe-3548.log
2015-01-21 09:21 - 2015-01-21 09:21 - 00000197 _____ () C:\Windows\system32\2015-01-21-08-21-09.062-AvastVBoxSVC.exe-3368.log
2015-01-21 07:21 - 2015-01-21 07:22 - 00000197 _____ () C:\Windows\system32\2015-01-21-06-21-59.004-AvastVBoxSVC.exe-2304.log
2015-01-20 19:55 - 2015-01-20 19:55 - 00000197 _____ () C:\Windows\system32\2015-01-20-18-55-01.087-AvastVBoxSVC.exe-3476.log
2015-01-20 17:04 - 2015-01-20 17:04 - 00000197 _____ () C:\Windows\system32\2015-01-20-16-04-15.006-AvastVBoxSVC.exe-3456.log
2015-01-20 10:37 - 2015-01-20 10:37 - 00000197 _____ () C:\Windows\system32\2015-01-20-09-37-58.062-AvastVBoxSVC.exe-3312.log
2015-01-20 06:51 - 2015-01-20 06:52 - 00000197 _____ () C:\Windows\system32\2015-01-20-05-51-49.093-AvastVBoxSVC.exe-3384.log
2015-01-19 10:41 - 2015-01-19 10:42 - 00000197 _____ () C:\Windows\system32\2015-01-19-09-41-55.014-AvastVBoxSVC.exe-3700.log
2015-01-18 10:41 - 2015-01-18 10:41 - 00000197 _____ () C:\Windows\system32\2015-01-18-09-41-34.024-AvastVBoxSVC.exe-3380.log
2015-01-17 11:49 - 2015-01-17 11:49 - 00000197 _____ () C:\Windows\system32\2015-01-17-10-49-47.064-AvastVBoxSVC.exe-3692.log
2015-01-17 08:10 - 2015-01-17 08:10 - 00000197 _____ () C:\Windows\system32\2015-01-17-07-10-05.008-AvastVBoxSVC.exe-1572.log
2015-01-16 10:31 - 2015-01-16 10:31 - 00000197 _____ () C:\Windows\system32\2015-01-16-09-31-00.006-AvastVBoxSVC.exe-2328.log
2015-01-15 12:10 - 2015-01-15 12:10 - 00000197 _____ () C:\Windows\system32\2015-01-15-11-10-50.052-AvastVBoxSVC.exe-3368.log
2015-01-15 11:08 - 2015-01-15 11:08 - 00000197 _____ () C:\Windows\system32\2015-01-15-10-08-26.033-AvastVBoxSVC.exe-2428.log
2015-01-14 11:29 - 2015-01-14 11:30 - 00000197 _____ () C:\Windows\system32\2015-01-14-10-29-43.041-AvastVBoxSVC.exe-2336.log
2015-01-14 10:31 - 2015-01-23 00:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-14 10:24 - 2015-01-14 10:24 - 00000197 _____ () C:\Windows\system32\2015-01-14-09-24-00.066-AvastVBoxSVC.exe-2740.log
2015-01-14 00:32 - 2015-01-14 00:32 - 00000000 ____D () C:\Program Files\Steinberg
2015-01-13 10:40 - 2015-01-13 10:41 - 00000197 _____ () C:\Windows\system32\2015-01-13-09-40-59.078-AvastVBoxSVC.exe-3064.log
2015-01-12 11:23 - 2015-01-12 11:23 - 00000197 _____ () C:\Windows\system32\2015-01-12-10-23-32.066-AvastVBoxSVC.exe-2268.log
2015-01-12 09:31 - 2015-01-12 09:32 - 00000197 _____ () C:\Windows\system32\2015-01-12-08-31-47.017-AvastVBoxSVC.exe-2948.log
2015-01-11 12:10 - 2015-01-11 12:10 - 00000197 _____ () C:\Windows\system32\2015-01-11-11-10-06.062-AvastVBoxSVC.exe-2496.log
2015-01-11 09:35 - 2015-01-11 09:35 - 00000197 _____ () C:\Windows\system32\2015-01-11-08-35-19.014-AvastVBoxSVC.exe-2732.log
2015-01-10 17:56 - 2015-01-10 17:56 - 00000197 _____ () C:\Windows\system32\2015-01-10-16-56-38.032-AvastVBoxSVC.exe-2112.log
2015-01-10 08:08 - 2015-01-10 08:08 - 00000197 _____ () C:\Windows\system32\2015-01-10-07-08-18.001-AvastVBoxSVC.exe-2280.log
2015-01-09 10:22 - 2015-01-09 10:22 - 00000197 _____ () C:\Windows\system32\2015-01-09-09-22-24.011-AvastVBoxSVC.exe-3364.log
2015-01-09 06:54 - 2015-01-09 06:54 - 00000197 _____ () C:\Windows\system32\2015-01-09-05-54-27.093-AvastVBoxSVC.exe-3132.log
2015-01-09 01:17 - 2015-01-09 01:17 - 00000197 _____ () C:\Windows\system32\2015-01-09-00-17-16.087-AvastVBoxSVC.exe-3788.log
2015-01-08 09:52 - 2015-01-08 09:52 - 00000197 _____ () C:\Windows\system32\2015-01-08-08-52-27.041-AvastVBoxSVC.exe-2848.log
2015-01-08 06:55 - 2015-01-08 06:55 - 00000197 _____ () C:\Windows\system32\2015-01-08-05-55-10.035-AvastVBoxSVC.exe-3300.log
2015-01-07 12:11 - 2015-01-07 12:11 - 00000197 _____ () C:\Windows\system32\2015-01-07-11-11-30.049-AvastVBoxSVC.exe-712.log
2015-01-06 18:51 - 2015-01-06 18:51 - 00000197 _____ () C:\Windows\system32\2015-01-06-17-51-21.004-AvastVBoxSVC.exe-2312.log
2015-01-06 14:44 - 2015-01-06 14:45 - 00000197 _____ () C:\Windows\system32\2015-01-06-13-44-59.096-AvastVBoxSVC.exe-2624.log
2015-01-06 12:56 - 2015-01-06 12:56 - 00000197 _____ () C:\Windows\system32\2015-01-06-11-56-30.001-AvastVBoxSVC.exe-3288.log
2015-01-06 11:37 - 2015-01-06 11:37 - 00000197 _____ () C:\Windows\system32\2015-01-06-10-37-20.062-AvastVBoxSVC.exe-3384.log
2015-01-06 08:19 - 2015-01-06 08:19 - 00000197 _____ () C:\Windows\system32\2015-01-06-07-19-36.047-AvastVBoxSVC.exe-3348.log
2015-01-05 19:24 - 2015-01-05 19:25 - 00000197 _____ () C:\Windows\system32\2015-01-05-18-24-47.038-AvastVBoxSVC.exe-2356.log
2015-01-05 15:17 - 2015-01-05 15:17 - 00000197 _____ () C:\Windows\system32\2015-01-05-14-17-49.097-AvastVBoxSVC.exe-3552.log
2015-01-04 19:19 - 2015-01-04 19:19 - 00000197 _____ () C:\Windows\system32\2015-01-04-18-19-09.065-AvastVBoxSVC.exe-4128.log
2015-01-04 12:15 - 2015-01-04 12:15 - 00000197 _____ () C:\Windows\system32\2015-01-04-11-15-07.040-AvastVBoxSVC.exe-2980.log
2015-01-04 08:23 - 2015-01-04 08:23 - 00000197 _____ () C:\Windows\system32\2015-01-04-07-23-16.086-AvastVBoxSVC.exe-1708.log
2015-01-03 15:21 - 2015-01-03 15:21 - 00000197 _____ () C:\Windows\system32\2015-01-03-14-21-26.013-AvastVBoxSVC.exe-1348.log
2015-01-02 20:03 - 2015-01-02 20:04 - 00000197 _____ () C:\Windows\system32\2015-01-02-19-03-42.063-AvastVBoxSVC.exe-4004.log
2015-01-02 15:52 - 2015-01-02 15:52 - 00000197 _____ () C:\Windows\system32\2015-01-02-14-52-10.016-AvastVBoxSVC.exe-2864.log
2015-01-02 10:18 - 2015-01-02 10:19 - 00000197 _____ () C:\Windows\system32\2015-01-02-09-18-43.056-AvastVBoxSVC.exe-3532.log
2015-01-01 16:07 - 2015-01-01 16:07 - 00000197 _____ () C:\Windows\system32\2015-01-01-15-07-21.077-AvastVBoxSVC.exe-3432.log
2015-01-01 10:16 - 2015-01-01 10:16 - 00000197 _____ () C:\Windows\system32\2015-01-01-09-16-11.097-AvastVBoxSVC.exe-3848.log
2014-12-31 09:54 - 2014-12-31 09:55 - 00000197 _____ () C:\Windows\system32\2014-12-31-08-54-54.015-AvastVBoxSVC.exe-2952.log
2014-12-31 07:16 - 2014-12-31 07:17 - 00000197 _____ () C:\Windows\system32\2014-12-31-06-16-46.052-AvastVBoxSVC.exe-2532.log
2014-12-30 19:22 - 2014-12-30 19:22 - 00000197 _____ () C:\Windows\system32\2014-12-30-18-22-40.019-AvastVBoxSVC.exe-3324.log
2014-12-30 13:34 - 2014-12-30 13:34 - 00000197 _____ () C:\Windows\system32\2014-12-30-12-34-08.058-AvastVBoxSVC.exe-4068.log
2014-12-29 12:33 - 2014-12-29 12:33 - 00000197 _____ () C:\Windows\system32\2014-12-29-11-33-13.088-AvastVBoxSVC.exe-2656.log
2014-12-29 00:51 - 2014-12-29 00:51 - 00000197 _____ () C:\Windows\system32\2014-12-28-23-51-12.050-AvastVBoxSVC.exe-4092.log
2014-12-28 09:49 - 2014-12-28 09:49 - 00000247 _____ () C:\Windows\system32\2014-12-28-08-49-08.092-aswFe.exe-3740.log
2014-12-28 09:45 - 2014-12-28 09:49 - 00000247 _____ () C:\Windows\system32\2014-12-28-08-45-06.018-aswFe.exe-3800.log
2014-12-28 09:45 - 2014-12-28 09:45 - 00000197 _____ () C:\Windows\system32\2014-12-28-08-45-01.039-AvastVBoxSVC.exe-792.log
2014-12-27 09:10 - 2014-12-27 09:10 - 00000197 _____ () C:\Windows\system32\2014-12-27-08-10-14.001-AvastVBoxSVC.exe-1292.log
2014-12-26 12:31 - 2014-12-26 12:32 - 00000197 _____ () C:\Windows\system32\2014-12-26-11-31-57.055-AvastVBoxSVC.exe-3032.log
2014-12-26 08:53 - 2014-12-26 08:53 - 00000197 _____ () C:\Windows\system32\2014-12-26-07-53-25.025-AvastVBoxSVC.exe-3708.log
2014-12-25 14:19 - 2014-12-25 14:19 - 00000000 ____D () C:\Users\Soob\Documents\Notesy programu OneNote
2014-12-25 09:53 - 2014-12-25 09:53 - 00000197 _____ () C:\Windows\system32\2014-12-25-08-53-12.080-AvastVBoxSVC.exe-3140.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-24 22:53 - 2012-09-12 13:59 - 01583165 _____ () C:\Windows\WindowsUpdate.log
2015-01-24 22:32 - 2013-02-11 21:49 - 00000000 ____D () C:\Users\Soob\AppData\Roaming\Spotify
2015-01-24 22:21 - 2013-09-13 20:41 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-24 22:19 - 2013-03-19 07:06 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-24 19:01 - 2012-09-14 06:03 - 00000000 ____D () C:\Users\Soob\AppData\Local\Last.fm
2015-01-24 18:25 - 2012-09-17 18:26 - 00000000 ____D () C:\Users\Soob\AppData\Roaming\uTorrent
2015-01-24 18:21 - 2009-07-14 05:45 - 00016928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-24 18:21 - 2009-07-14 05:45 - 00016928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-24 18:13 - 2013-09-13 20:41 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-24 18:13 - 2012-09-12 14:04 - 00000000 ____D () C:\Users\Soob
2015-01-24 18:13 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-24 18:12 - 2012-12-08 01:14 - 00001652 _____ () C:\Windows\system32\ASOROSet.bin
2015-01-24 18:06 - 2014-10-27 12:55 - 00000000 ____D () C:\Users\Soob\.thumbnails
2015-01-24 18:06 - 2013-04-27 02:31 - 00000000 ____D () C:\ProgramData\TEMP
2015-01-24 16:33 - 2012-10-08 09:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SuperMemo UX
2015-01-24 16:29 - 2012-12-08 01:14 - 00000000 ____D () C:\Windows\system32\config\RCCBakup
2015-01-24 15:50 - 2013-07-11 22:28 - 00000829 _____ () C:\Users\Soob\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-01-24 03:06 - 2012-09-13 16:16 - 00000000 ____D () C:\Users\Soob\AppData\Roaming\Mp3tag
2015-01-24 03:05 - 2012-09-15 09:56 - 00000000 ____D () C:\Users\Soob\.gimp-2.8
2015-01-24 00:37 - 2012-10-13 20:08 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2015-01-23 22:50 - 2013-02-11 21:51 - 00000000 ____D () C:\Users\Soob\AppData\Local\Spotify
2015-01-23 19:04 - 2013-09-28 21:07 - 00000000 ____D () C:\ProgramData\Origin
2015-01-23 19:03 - 2013-09-28 21:07 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-01-23 02:10 - 2012-09-13 04:58 - 00000000 ____D () C:\Users\Soob\Documents\Transkrypcje
2015-01-23 00:43 - 2012-09-16 18:22 - 00000000 ____D () C:\Users\Soob\AppData\Roaming\Audacity
2015-01-23 00:34 - 2013-11-01 18:35 - 00000000 ____D () C:\Users\Soob\Documents\Anki
2015-01-21 19:06 - 2012-09-23 16:19 - 00000000 ____D () C:\Users\Soob\AppData\Roaming\Skype
2015-01-20 06:49 - 2014-08-18 00:43 - 00119296 _____ () C:\Windows\SysWOW64\zlib.dll
2015-01-19 23:49 - 2012-09-23 23:31 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-19 14:19 - 2009-07-14 18:55 - 00743808 _____ () C:\Windows\system32\perfh015.dat
2015-01-19 14:19 - 2009-07-14 18:55 - 00157290 _____ () C:\Windows\system32\perfc015.dat
2015-01-19 14:19 - 2009-07-14 06:13 - 01679426 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-19 10:37 - 2012-09-14 06:12 - 00000000 ____D () C:\Program Files\WinRAR
2015-01-19 02:35 - 2012-09-14 06:13 - 00000000 ____D () C:\Users\Soob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-01-19 02:35 - 2012-09-14 06:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-01-15 21:50 - 2013-05-14 13:34 - 00001224 _____ () C:\lxdx.log
2015-01-15 11:07 - 2012-09-13 07:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-15 02:25 - 2013-09-29 13:49 - 00000000 ____D () C:\Users\Soob\Documents\FIFA 14
2015-01-14 19:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-14 11:33 - 2014-12-02 02:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2015-01-14 11:12 - 2013-07-30 06:45 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 11:07 - 2012-09-24 19:35 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 03:19 - 2012-09-13 07:40 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-14 03:19 - 2012-09-13 07:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-06 04:36 - 2012-09-13 08:07 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-01 19:42 - 2014-02-27 17:56 - 00002299 _____ () C:\Users\Soob\Documents\Hey Love.txt
2015-01-01 16:04 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

==================== Files in the root of some directories =======

2014-04-19 12:59 - 2014-04-19 12:59 - 0000826 _____ () C:\Users\Soob\AppData\Roaming\LiveSupport.exe_log.txt
2012-11-03 02:12 - 2012-11-03 02:13 - 0000016 _____ () C:\Users\Soob\AppData\Roaming\mbam.context.scan
2014-04-19 12:59 - 2014-04-19 12:59 - 0000092 _____ () C:\Users\Soob\AppData\Roaming\regsvr32.exe_log.txt
2012-12-24 11:14 - 2014-12-09 12:42 - 0022265 _____ () C:\Users\Soob\AppData\Roaming\UserTile.png
2013-06-05 21:54 - 2014-04-21 22:25 - 0004608 _____ () C:\Users\Soob\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-24 03:05 - 2015-01-24 03:05 - 0008015 _____ () C:\Users\Soob\AppData\Local\recently-used.xbel
2012-12-21 16:55 - 2013-08-08 21:50 - 0007597 _____ () C:\Users\Soob\AppData\Local\resmon.resmoncfg
2014-01-29 17:32 - 2014-01-29 17:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2012-11-07 02:23 - 2012-11-07 02:23 - 0000252 _____ () C:\ProgramData\FastPics.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-14 14:41

==================== End Of Log ============================