Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-01-2015 01
Ran by ZolwieGalapagos (administrator) on ZOLWIEGALAPAGO on 29-01-2015 11:30:31
Running from C:\Users\ZolwieGalapagos\Desktop
Loaded Profiles: ZolwieGalapagos (Available profiles: ZolwieGalapagos)
Platform: Microsoft Windows 7 Professional  (X86) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\launcher_service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe
(Comodo Security Solutions, Inc.) C:\Program Files\Comodo\Dragon\dragon_updater.exe
(Foxit Software Inc.) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\CisTray.exe
(PowerISO Computing, Inc.) C:\Program Files\PowerISO\PWRISOVM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
(Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dropbox, Inc.) C:\Users\ZolwieGalapagos\AppData\Roaming\Dropbox\bin\Dropbox.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Comodo Security Solutions, Inc.) C:\Program Files\Comodo\GeekBuddy\unit_manager.exe
(Comodo Security Solutions, Inc.) C:\Program Files\Comodo\GeekBuddy\unit.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cis.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cmdvirth.exe
(Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\launcher_service.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(OldTimer Tools) C:\Users\ZolwieGalapagos\Desktop\OTL.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [180224 2009-11-09] (PowerISO Computing, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [tvncontrol] => C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-09-17] (Comodo Security Solutions, Inc.)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1243352 2014-12-09] (COMODO)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [SMSERIAL] => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1458176 2015-01-29] (Motorola Inc.)
HKU\S-1-5-21-43850688-3849737671-2875471931-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [17877168 2012-11-09] (Skype Technologies S.A.)
HKU\S-1-5-21-43850688-3849737671-2875471931-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-43850688-3849737671-2875471931-1000\...\MountPoints2: G - G:\SETUP.EXE
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files\Comodo\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.)
Startup: C:\Users\ZolwieGalapagos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\ZolwieGalapagos\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\ZolwieGalapagos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\ZolwieGalapagos\AppData\Roaming\Mozilla\Firefox\Profiles\jeegs21q.default
FF DefaultSearchEngine: Bing
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Extension: Adblock Plus - C:\Users\ZolwieGalapagos\AppData\Roaming\Mozilla\Firefox\Profiles\jeegs21q.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-27]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 CLPSLauncher; C:\Program Files\Common Files\COMODO\launcher_service.exe [70864 2014-09-17] (Comodo Security Solutions, Inc.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5868440 2014-12-09] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [1664216 2014-12-09] (COMODO)
R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2370240 2014-11-27] (Comodo Security Solutions, Inc.)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [243880 2015-01-23] (Foxit Software Inc.)
R2 GeekBuddyRSP; C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-09-17] (Comodo Security Solutions, Inc.)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [35064 2014-06-26] (Windows (R) Win 7 DDK provider)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [17088 2014-12-09] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [617536 2014-12-09] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [41248 2014-12-09] (COMODO)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [91200 2014-12-09] (COMODO)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [59388 2009-11-09] (PowerISO Computing, Inc.) [File not signed]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-29 11:30 - 2015-01-29 11:30 - 00101116 _____ () C:\Users\ZolwieGalapagos\Desktop\OTL.Txt
2015-01-29 11:30 - 2015-01-29 11:30 - 00031830 _____ () C:\Users\ZolwieGalapagos\Desktop\Extras.Txt
2015-01-29 11:30 - 2015-01-29 11:30 - 00009364 _____ () C:\Users\ZolwieGalapagos\Desktop\FRST.txt
2015-01-29 11:29 - 2015-01-29 11:30 - 00000000 ____D () C:\FRST
2015-01-29 11:28 - 2015-01-29 11:28 - 01121792 _____ (Farbar) C:\Users\ZolwieGalapagos\Desktop\FRST.exe
2015-01-29 11:24 - 2015-01-29 11:24 - 00602112 _____ (OldTimer Tools) C:\Users\ZolwieGalapagos\Desktop\OTL.exe
2015-01-29 08:24 - 2015-01-29 08:28 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-29 08:24 - 2015-01-29 08:24 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-29 08:20 - 2015-01-29 08:20 - 00000000 ____D () C:\Program Files\Motorola
2015-01-29 08:11 - 2015-01-29 08:11 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-01-29 08:11 - 2015-01-29 08:11 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2015-01-29 08:02 - 2015-01-29 08:02 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-01-29 08:02 - 2015-01-29 08:02 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-29 08:02 - 2015-01-29 08:02 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2015-01-29 08:02 - 2015-01-29 08:02 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2015-01-29 08:02 - 2015-01-29 08:02 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2015-01-29 08:02 - 2015-01-29 08:02 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-29 08:02 - 2015-01-29 08:02 - 00194488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-01-29 08:02 - 2015-01-29 08:02 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-01-29 08:02 - 2015-01-29 08:02 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2015-01-29 08:02 - 2014-09-15 01:42 - 02377216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-29 08:02 - 2010-04-07 08:10 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-29 08:02 - 2010-01-09 07:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2015-01-29 08:01 - 2015-01-29 08:01 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-01-29 08:01 - 2015-01-29 08:01 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-01-29 08:01 - 2015-01-29 08:01 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-01-29 07:38 - 2015-01-29 07:38 - 03957632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-29 07:38 - 2015-01-29 07:38 - 03901824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-29 07:38 - 2015-01-29 07:38 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-01-29 07:37 - 2015-01-29 07:37 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-29 07:33 - 2015-01-29 07:33 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-29 07:33 - 2015-01-29 07:33 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-29 07:33 - 2015-01-29 07:33 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-29 07:33 - 2015-01-29 07:33 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-29 07:33 - 2015-01-29 07:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-01-29 07:33 - 2015-01-29 07:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-29 07:33 - 2015-01-29 07:33 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-01-27 22:41 - 2015-01-27 13:48 - 00000000 ____D () C:\Windows\Panther
2015-01-27 19:10 - 2015-01-27 19:10 - 00009012 _____ () C:\Users\ZolwieGalapagos\Desktop\rewelacja.xlsx
2015-01-27 17:39 - 2015-01-29 11:23 - 00359952 _____ () C:\Windows\system32\Drivers\fvstore.dat
2015-01-27 17:39 - 2015-01-27 18:28 - 00000000 ___HD () C:\VTRoot
2015-01-27 17:39 - 2015-01-27 17:39 - 02340258 _____ () C:\Users\ZolwieGalapagos\Desktop\cv AI - od Tomka Bachora, + wysoko umiejętność sprawnego zarzadzanie zespołem na placu działania.ai
2015-01-27 17:22 - 2015-01-05 12:21 - 00000000 ____D () C:\Users\ZolwieGalapagos\Desktop\Tkaniny 05.01.2014
2015-01-27 15:56 - 2015-01-27 15:56 - 08259245 _____ () C:\Users\ZolwieGalapagos\Desktop\Tkaniny 05.01.2014.rar
2015-01-27 15:45 - 2015-01-27 15:49 - 00000000 ____D () C:\Users\ZolwieGalapagos\Documents\Notesy programu OneNote
2015-01-27 15:37 - 2015-01-27 15:37 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\NVIDIA
2015-01-27 15:36 - 2015-01-27 15:36 - 00001165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2015-01-27 15:31 - 2015-01-27 15:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2015-01-27 15:29 - 2015-01-29 11:19 - 00002584 _____ () C:\Windows\PFRO.log
2015-01-27 15:18 - 2015-01-29 11:29 - 00580161 _____ () C:\Windows\system32\Drivers\sfi.dat
2015-01-27 15:17 - 2015-01-27 15:17 - 00000000 ____D () C:\ProgramData\Shared Space
2015-01-27 15:15 - 2015-01-27 15:17 - 00000000 ____D () C:\Users\ZolwieGalapagos\Downloads\Red Army
2015-01-27 15:15 - 2015-01-27 15:15 - 00000803 _____ () C:\Users\ZolwieGalapagos\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-01-27 15:15 - 2015-01-27 15:15 - 00000000 ____D () C:\ProgramData\APN
2015-01-27 15:14 - 2015-01-27 19:10 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\uTorrent
2015-01-27 15:14 - 2015-01-27 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2015-01-27 15:14 - 2015-01-27 15:18 - 00000000 ____D () C:\ProgramData\Comodo
2015-01-27 15:14 - 2015-01-27 15:16 - 00000000 ____D () C:\Program Files\Comodo
2015-01-27 15:14 - 2015-01-27 15:14 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2015-01-27 15:14 - 2015-01-27 15:14 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Local\Comodo
2015-01-27 15:14 - 2015-01-27 15:14 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2015-01-27 15:14 - 2015-01-27 15:14 - 00000000 ____D () C:\Program Files\Common Files\COMODO
2015-01-27 15:02 - 2015-01-27 17:27 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Foxit Software
2015-01-27 15:02 - 2015-01-27 15:02 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2015-01-27 15:01 - 2015-01-27 15:01 - 00085688 _____ () C:\Users\ZolwieGalapagos\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-27 14:59 - 2015-01-27 15:36 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-01-27 14:58 - 2015-01-27 14:58 - 00001127 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2015-01-27 14:57 - 2015-01-27 18:26 - 00000000 ____D () C:\Program Files\Adobe
2015-01-27 14:57 - 2015-01-27 14:57 - 00001477 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2015-01-27 14:57 - 2015-01-27 14:57 - 00001311 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2015-01-27 14:57 - 2015-01-27 14:57 - 00000967 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2015-01-27 14:57 - 2015-01-27 14:57 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-01-27 14:57 - 2015-01-27 14:57 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-01-27 14:57 - 2015-01-27 14:57 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2015-01-27 14:56 - 2015-01-27 14:56 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-27 14:54 - 2015-01-27 18:26 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-01-27 14:54 - 2015-01-27 14:54 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Macromedia
2015-01-27 14:53 - 2015-01-29 07:38 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Local\Adobe
2015-01-27 14:53 - 2015-01-29 07:38 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-27 14:53 - 2015-01-27 15:42 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Adobe
2015-01-27 14:48 - 2015-01-27 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-01-27 14:48 - 2006-10-26 19:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2015-01-27 14:47 - 2015-01-27 14:47 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2015-01-27 14:47 - 2015-01-27 14:47 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-01-27 14:46 - 2015-01-27 14:47 - 00098488 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2015-01-27 14:46 - 2015-01-27 14:47 - 00000000 ____D () C:\Program Files\PDFCreator
2015-01-27 14:46 - 2015-01-27 14:46 - 00000000 ____D () C:\Windows\PCHEALTH
2015-01-27 14:46 - 2015-01-27 14:46 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\pdfforge
2015-01-27 14:46 - 2015-01-27 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2015-01-27 14:46 - 2015-01-27 14:46 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2015-01-27 14:46 - 2015-01-27 14:46 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2015-01-27 14:45 - 2015-01-27 14:45 - 00000000 ____D () C:\Program Files\DAMN NFO Viewer
2015-01-27 14:44 - 2015-01-27 14:52 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-27 14:44 - 2015-01-27 14:46 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-27 14:44 - 2015-01-27 14:44 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Local\Microsoft Help
2015-01-27 14:43 - 2015-01-27 14:43 - 00000000 __RHD () C:\MSOCache
2015-01-27 14:38 - 2015-01-27 14:38 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-01-27 14:38 - 2015-01-27 14:38 - 00000000 ____D () C:\Users\Public\Foxit Software
2015-01-27 14:38 - 2015-01-27 14:38 - 00000000 ____D () C:\ProgramData\Sun
2015-01-27 14:38 - 2015-01-27 14:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-27 14:38 - 2015-01-27 14:38 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-01-27 14:37 - 2015-01-27 14:37 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-27 14:37 - 2015-01-27 14:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2015-01-27 14:37 - 2015-01-27 14:37 - 00000000 ____D () C:\Program Files\Java
2015-01-27 14:37 - 2015-01-27 14:37 - 00000000 ____D () C:\Program Files\Foxit Software
2015-01-27 14:31 - 2015-01-27 19:10 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\foobar2000
2015-01-27 14:24 - 2015-01-27 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-27 14:23 - 2015-01-27 14:23 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Local\NVIDIA
2015-01-27 14:19 - 2015-01-27 14:19 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2015-01-27 14:18 - 2015-01-29 11:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-27 14:18 - 2014-07-02 20:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-01-27 14:18 - 2014-07-02 20:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2015-01-27 14:18 - 2014-07-02 20:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-01-27 14:18 - 2014-07-02 20:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-01-27 14:18 - 2014-07-02 20:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-01-27 14:18 - 2014-07-02 20:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-01-27 14:18 - 2014-07-02 18:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2015-01-27 14:18 - 2014-07-02 06:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2015-01-27 14:17 - 2015-01-27 14:22 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-01-27 14:17 - 2014-07-02 21:54 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-01-27 14:14 - 2015-01-27 14:46 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-01-27 14:13 - 2009-11-25 20:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-01-27 14:13 - 2009-11-25 20:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2015-01-27 14:13 - 2009-11-25 20:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2015-01-27 14:13 - 2009-11-25 20:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2015-01-27 14:13 - 2009-11-25 20:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 24198088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 16122344 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 15296456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 14498552 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 11283344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 11222048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 10681176 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-27 14:11 - 2014-07-02 21:54 - 03988952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 02814656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 01054552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234052.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 00907552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234052.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 00907096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 00869152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2015-01-27 14:11 - 2014-07-02 21:54 - 00021215 _____ () C:\Windows\system32\nvinfo.pb
2015-01-27 14:11 - 2014-03-31 17:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll
2015-01-27 14:11 - 2014-03-31 17:42 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys
2015-01-27 14:08 - 2015-01-27 14:19 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-01-27 14:08 - 2015-01-27 14:08 - 00000000 ____D () C:\NVIDIA
2015-01-27 14:07 - 2015-01-29 11:21 - 00000000 ___RD () C:\Users\ZolwieGalapagos\Dropbox
2015-01-27 14:06 - 2015-01-27 15:12 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-01-27 14:05 - 2015-01-29 11:22 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Skype
2015-01-27 14:05 - 2015-01-29 11:21 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Dropbox
2015-01-27 14:05 - 2015-01-27 14:05 - 00001071 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2015-01-27 14:05 - 2015-01-27 14:05 - 00000000 ___RD () C:\Program Files\Skype
2015-01-27 14:05 - 2015-01-27 14:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-27 14:05 - 2015-01-27 14:05 - 00000000 ____D () C:\Program Files\foobar2000
2015-01-27 14:05 - 2015-01-27 14:05 - 00000000 ____D () C:\Program Files\Common Files\Skype
2015-01-27 14:05 - 2015-01-08 09:55 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-27 14:04 - 2015-01-27 15:43 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\WinRAR
2015-01-27 14:04 - 2015-01-27 14:05 - 00000000 ____D () C:\ProgramData\Skype
2015-01-27 14:04 - 2015-01-27 14:04 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-01-27 14:04 - 2015-01-27 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2015-01-27 14:04 - 2015-01-27 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-01-27 14:04 - 2015-01-27 14:04 - 00000000 ____D () C:\Program Files\XnView
2015-01-27 14:04 - 2015-01-27 14:04 - 00000000 ____D () C:\Program Files\WinRAR
2015-01-27 14:03 - 2015-01-27 14:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2015-01-27 14:03 - 2015-01-27 14:03 - 00000000 ____D () C:\Program Files\PowerISO
2015-01-27 13:58 - 2015-01-27 13:58 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-27 13:58 - 2015-01-27 13:58 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Mozilla
2015-01-27 13:58 - 2015-01-27 13:58 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Local\Mozilla
2015-01-27 13:58 - 2015-01-27 13:58 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-27 13:58 - 2015-01-27 13:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-27 13:58 - 2015-01-27 13:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-27 13:56 - 2015-01-29 07:32 - 00000000 ____D () C:\Program Files\Opera
2015-01-27 13:56 - 2015-01-27 13:56 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-01-27 13:56 - 2015-01-27 13:56 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Roaming\Opera Software
2015-01-27 13:56 - 2015-01-27 13:56 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Local\Opera Software
2015-01-27 13:52 - 2015-01-29 11:25 - 00779016 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-27 13:49 - 2015-01-27 14:07 - 00000000 ____D () C:\Users\ZolwieGalapagos
2015-01-27 13:49 - 2015-01-27 13:49 - 00001413 _____ () C:\Users\ZolwieGalapagos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-27 13:49 - 2015-01-27 13:49 - 00000020 ___SH () C:\Users\ZolwieGalapagos\ntuser.ini
2015-01-27 13:49 - 2015-01-27 13:49 - 00000000 ____D () C:\Users\ZolwieGalapagos\AppData\Local\VirtualStore
2015-01-27 13:49 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-01-27 13:49 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-01-27 13:49 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-01-27 13:49 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-01-27 13:49 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-01-27 13:49 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-01-27 13:49 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-01-27 13:49 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-01-27 13:49 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-01-27 13:49 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\ZolwieGalapagos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-27 13:49 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\ZolwieGalapagos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-27 13:48 - 2015-01-27 13:48 - 00000000 __SHD () C:\Recovery
2015-01-27 13:45 - 2015-01-29 11:23 - 00705679 _____ () C:\Windows\WindowsUpdate.log
2015-01-27 13:45 - 2015-01-27 13:45 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-01-27 13:45 - 2015-01-27 13:45 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-01-27 13:42 - 2015-01-27 13:45 - 00001313 _____ () C:\Windows\TSSysprep.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-29 11:22 - 2009-07-14 05:34 - 00013728 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-29 11:22 - 2009-07-14 05:34 - 00013728 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-29 11:21 - 2009-07-14 05:33 - 03736624 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-29 11:20 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-29 11:20 - 2009-07-14 05:39 - 00016511 _____ () C:\Windows\setupact.log
2015-01-29 08:43 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-01-29 08:21 - 2009-07-14 00:55 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\MODEMCSA.sys
2015-01-29 08:20 - 2009-10-26 15:09 - 01095936 _____ (Motorola Inc.) C:\Windows\system32\Drivers\smserial.sys
2015-01-29 08:20 - 2009-10-26 14:49 - 00516096 _____ (Motorola Inc.) C:\Windows\system32\sm56co85.dll
2015-01-29 08:16 - 2009-07-08 00:45 - 02506232 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL6.SYS
2015-01-27 22:41 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2015-01-27 22:41 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2015-01-27 14:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-01-27 14:44 - 2009-07-14 08:50 - 00000000 ____D () C:\Windows\ShellNew
2015-01-27 14:38 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2015-01-27 14:18 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2015-01-27 13:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore
2015-01-27 13:48 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Recovery
2015-01-27 13:48 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-01-27 13:45 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-27 13:42 - 2009-07-14 08:50 - 00000000 ____D () C:\Windows\CSC
2015-01-27 13:42 - 2009-07-14 05:34 - 00001774 _____ () C:\Windows\DtcInstall.log

Some content of TEMP:
====================
C:\Users\ZolwieGalapagos\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpo9a6le.dll
C:\Users\ZolwieGalapagos\AppData\Local\Temp\ose00000.exe
C:\Users\ZolwieGalapagos\AppData\Local\Temp\utt8012.tmp.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-27 13:42

==================== End Of Log ============================