Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2015 01
Ran by Proteus (administrator) on PHOBOS on 05-02-2015 14:40:42
Running from C:\Users\Proteus\Downloads
Loaded Profiles: UpdatusUser & Proteus (Available profiles: UpdatusUser & Proteus)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ABBYY (BIT Software)) C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
( ) C:\Windows\System32\lxeccoms.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital ) C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Western Digital ) C:\Program Files\Western Digital\WD SmartWare\WDFME.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\PING.EXE
(Microsoft Corporation) C:\Windows\System32\PING.EXE
(Microsoft Corporation) C:\Windows\System32\PING.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WDDMStatus.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(IVONA Software Sp. z o.o.) C:\Program Files (x86)\IVONA\IVONA Reader\IVONA Reader.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(IVONA Software Sp. z o.o.) C:\Program Files (x86)\IVONA\IVONA ControlCenter\IVONA ControlCenter.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Acronis) C:\Program Files (x86)\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe
(Dropbox, Inc.) C:\Users\Proteus\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\ProgramData\{d0a5e402-7f84-7b8f-d0a5-5e4027f89009}\M-Kernel_a69.zip.exe
(Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Apps\WDDriveAutoUnlock.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPNetworkCommunicatorCom.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\SamsungFastStart\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Farbar) C:\Users\Proteus\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2011-05-19] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [UsBuga Acronis Scheduler2] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [391232 2010-09-21] (Acronis)
HKLM\...\Run: [lxecmon.exe] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [772712 2013-01-23] ()
HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [150264 2013-01-23] ()
HKLM\...\Run: [WD Quick View] => C:\Program Files\Western Digital\WD SmartWare\WDDMStatus.exe [4244888 2011-12-15] (Western Digital Technologies, Inc.)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-05-14] (CANON INC.)
HKLM\...\Run: [WrtMon.exe] => C:\windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM-x32\...\Run: [SAOB Monitor] => C:\Program Files (x86)\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe [2536752 2010-09-02] (Acronis)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5511008 2010-09-21] (Acronis)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-08-11] (Macrovision Corporation)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Apps\WDDriveAutoUnlock.exe [1687968 2011-12-16] (Western Digital)
HKLM-x32\...\Run: [fst_pl_81] => [X]
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [925960 2011-08-30] (ABBYY.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-07] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Andy] => C:\Program Files\Andy\HandyAndy.exe
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\Run: [Google Update] => C:\Users\Proteus\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-11-04] (Google Inc.)
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\Run: [] => [X]
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\Run: [IVONA Reader] => C:\Program Files (x86)\IVONA\IVONA Reader\IVONA Reader.exe [1429504 2012-08-30] (IVONA Software Sp. z o.o.)
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\Run: [IVONA ControlCenter] => C:\Program Files (x86)\IVONA\IVONA ControlCenter\IVONA ControlCenter.exe [2172864 2012-11-07] (IVONA Software Sp. z o.o.)
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-08-11] (Macrovision Corporation)
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-10-02] (Nokia)
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {08128df6-18e0-11e1-bca9-dca9711fc6a5} - F:\setup.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {2b95ae63-3fce-11e4-866a-dca9711fc6a5} - G:\AutoRun.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {2b95aeaa-3fce-11e4-866a-dca9711fc6a5} - G:\AutoRun.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {59a52355-96b7-11e1-99c9-dca9711fc6a5} - I:\AutoRun.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {5a7dc1fa-32b2-11e3-848c-dca9711fc6a5} - G:\AutoRun.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {5a7dc241-32b2-11e3-848c-dca9711fc6a5} - G:\AutoRun.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {655710a2-96dc-11e1-b6de-dca9711fc6a5} - G:\AutoRun.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {99955f5e-9bd5-11e4-90c5-dca9711fc6a5} - G:\LG_PC_Programs.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {c1c5cfd7-f880-11e2-9dcf-dca9711fc6a5} - G:\AutoRun.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {cbca7a5d-8ef5-11e1-bc25-dca9711fc6a5} - I:\LaunchU3.exe -a
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {f21dcc0c-fccf-11e2-a223-dca9711fc6a5} - H:\Startme.exe
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\MountPoints2: {fe9345f0-5973-11e1-bbdb-dca9711fc6a5} - F:\setup.exe
Startup: C:\Users\Proteus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Proteus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Proteus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Proteus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\M-Kernel_a69.zip.lnk
ShortcutTarget: M-Kernel_a69.zip.lnk -> C:\ProgramData\{d0a5e402-7f84-7b8f-d0a5-5e4027f89009}\M-Kernel_a69.zip.exe ()
Startup: C:\Users\Proteus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 2540 series (sieć).lnk
ShortcutTarget: Powiadomienia monitorowania tuszu - HP Deskjet 2540 series (sieć).lnk -> C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141121
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NIS&pvid=21.5.0.19
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NIS&pvid=21.5.0.19
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NIS&pvid=21.5.0.19
HKU\S-1-5-21-1866740971-3537411966-2138577161-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NIS&pvid=21.5.0.19
HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1866740971-3537411966-2138577161-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1866740971-3537411966-2138577161-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO: IVONA Reader -> {8664889D-ED18-4713-918F-E2BB69D8452B} -> C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll (IVONA Software Sp. z o.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: IVONA Reader -> {8664889D-ED18-4713-918F-E2BB69D8452B} -> C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll (IVONA Software Sp. z o.o.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Samsung BHO Class -> {AA609D72-8482-4076-8991-8CDAE5B93BCB} -> C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2_x64.dll (IVONA Software Sp. z o.o.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - IVONA Reader - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll (IVONA Software Sp. z o.o.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1866740971-3537411966-2138577161-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{EDB645AD-A359-48D9-9FEF-7EDC9658F91A}: [NameServer] 193.41.112.14 193.41.112.18

FireFox:
========
FF ProfilePath: C:\Users\Proteus\AppData\Roaming\Mozilla\Firefox\Profiles\vt3s6qgp.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @audioteka.pl/Audioteka.pl,version=1.0.0.1 -> C:\Program Files (x86)\Audioteka.pl\Plugins\npaudiotekadesktop.dll (Audioteka.pl)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 -> C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1866740971-3537411966-2138577161-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Proteus\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1866740971-3537411966-2138577161-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Proteus\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Media Hint - C:\Users\Proteus\AppData\Roaming\Mozilla\Firefox\Profiles\vt3s6qgp.default\Extensions\firefox@mediahint.com.xpi [2015-01-05]
FF Extension: Firefox Google Search - C:\Users\Proteus\AppData\Roaming\Mozilla\Firefox\Profiles\vt3s6qgp.default\Extensions\jid1-ruV7VAC61k9bqA@jetpack.xpi [2015-01-26]
FF Extension: Download YouTube Videos as MP4 - C:\Users\Proteus\AppData\Roaming\Mozilla\Firefox\Profiles\vt3s6qgp.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2015-01-26]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\coFFPlgn [2015-02-05]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dysk Google) - C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-03]
CHR Extension: (YouTube) - C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-17]
CHR Extension: (Szukaj w Google) - C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-17]
CHR Extension: (Norton Identity Safe) - C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-15]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-01-26]
CHR Extension: (Google Wallet) - C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR Extension: (Evernote Web Clipper) - C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-03-20]
CHR Extension: (Gmail) - C:\Users\Proteus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-17]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]
CHR HKU\S-1-5-21-1866740971-3537411966-2138577161-1001\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [660768 2007-12-06] (ABBYY (BIT Software))
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-07] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-07] (BlueStack Systems, Inc.)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [130976 2011-03-01] (Futuremark Corporation)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 lxecCATSCustConnectService; C:\windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
R2 lxec_device; C:\windows\SysWOW64\lxeccoms.exe [598696 2010-04-14] ( )
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [232288 2012-03-12] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2013-10-11] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] () [File not signed]
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe [319384 2011-12-15] (WDC)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [246688 2011-12-16] (Western Digital)
R2 WDFMEService; C:\Program Files\Western Digital\WD SmartWare\WDFME.exe [1977224 2011-12-15] (Western Digital )
R2 WDRulesService; C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe [1338264 2011-12-15] (Western Digital )
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-07-03] (LG Electronics Inc.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.2.1\Definitions\BASHDefs\20141209.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-07] (BlueStack Systems)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2014-02-21] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-12] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-12] (Symantec Corporation)
S3 FsUsbExDisk; C:\windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-04-18] () [File not signed]
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-10-11] (Huawei Technologies Co., Ltd.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.2.1\Definitions\IPSDefs\20150130.001\IDSvia64.sys [668888 2015-01-14] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.2.1\Definitions\VirusDefs\20150204.017\ENG64.SYS [129752 2015-01-20] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.2.1\Definitions\VirusDefs\20150204.017\EX64.SYS [2137304 2015-01-20] (Symantec Corporation)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-08-02] (Windows (R) 2003 DDK 3790 provider)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-07-23] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-09-15] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-07-23] (Symantec Corporation)
S3 cpuz130; \??\C:\Users\Proteus\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]
S3 cpuz135; \??\C:\windows\TEMP\cpuz135\cpuz135_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 14:40 - 2015-02-05 14:40 - 02131968 _____ (Farbar) C:\Users\Proteus\Downloads\FRST64(1).exe
2015-02-05 14:37 - 2015-02-05 14:41 - 00032068 _____ () C:\Users\Proteus\Downloads\FRST.txt
2015-02-05 14:37 - 2015-02-05 14:40 - 00000000 ____D () C:\FRST
2015-02-05 14:36 - 2015-02-05 14:36 - 02131968 _____ (Farbar) C:\Users\Proteus\Downloads\FRST64.exe
2015-02-05 14:12 - 2015-02-05 14:13 - 00000000 ____D () C:\Users\Proteus\Desktop\TAURON_FV
2015-02-05 12:35 - 2015-02-05 12:35 - 00000669 _____ () C:\Users\Proteus\Desktop\EBOOK_ALL.lnk
2015-02-05 10:26 - 2015-02-05 10:28 - 00000000 ____D () C:\Users\Proteus\Desktop\BLOG_MOBINAUT
2015-02-05 08:35 - 2015-02-05 08:36 - 135146499 _____ () C:\Users\Proteus\Downloads\Slim-grouper-4.4.4.build.9.0-OFFICIAL-8258.zip
2015-02-05 08:27 - 2015-02-05 08:36 - 165120754 _____ () C:\Users\Proteus\Downloads\omni-4.4.4-20150128-grouper-NIGHTLY.zip
2015-02-05 08:09 - 2015-02-05 08:09 - 02194432 _____ () C:\Users\Proteus\Downloads\AdwCleaner(1).exe
2015-02-05 08:01 - 2015-02-05 08:01 - 00000000 ____D () C:\Users\Proteus\AppData\Local\FastStone
2015-02-05 07:59 - 2015-02-05 08:00 - 02945706 _____ () C:\Users\Proteus\Downloads\FSCaptureSetup80.exe
2015-02-04 17:04 - 2015-02-04 17:04 - 00000000 ____D () C:\Users\Default\Documents\Visual Studio 2008
2015-02-04 17:04 - 2015-02-04 17:04 - 00000000 ____D () C:\Users\Default User\Documents\Visual Studio 2008
2015-02-03 13:18 - 2015-02-03 13:20 - 00000000 ____D () C:\Users\Proteus\Desktop\corel
2015-02-03 13:15 - 2015-02-03 13:15 - 00000000 ____D () C:\Users\Proteus\Documents\Moje palety
2015-02-03 13:09 - 2015-02-03 13:09 - 00000000 ____D () C:\ProgramData\Protexis
2015-02-03 13:08 - 2015-02-03 13:20 - 00000000 ____D () C:\Users\Proteus\Documents\Corel
2015-02-03 13:08 - 2015-02-03 13:08 - 00000000 ____D () C:\Users\Proteus\Documents\Visual Studio 2008
2015-02-03 13:07 - 2015-02-03 13:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0
2015-02-03 13:07 - 2015-02-03 13:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft SDKs
2015-02-03 13:05 - 2015-02-03 13:05 - 00000000 ____D () C:\ProgramData\Corel
2015-02-03 13:03 - 2015-02-03 13:03 - 00000000 ____D () C:\Users\Public\Documents\Corel
2015-02-03 13:02 - 2015-02-03 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X6
2015-02-03 12:54 - 2015-02-03 13:09 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X6
2015-02-02 15:04 - 2015-02-02 15:05 - 05257385 _____ () C:\Users\Proteus\Downloads\Z. Miłoszewski Ziarno prawdy, Gniew , Bezcenny (epub,mobi).zip
2015-01-30 15:54 - 2015-01-30 15:54 - 00617523 _____ () C:\Users\Proteus\Downloads\combomag-1.3.zip
2015-01-30 15:13 - 2015-01-30 15:13 - 00997546 _____ () C:\Users\Proteus\Downloads\bibi.zip
2015-01-28 09:00 - 2015-01-28 09:03 - 43147711 _____ () C:\Users\Proteus\Downloads\AmazonCloudDriveDownload.zip
2015-01-27 12:38 - 2015-01-27 12:38 - 03010303 _____ () C:\Users\Proteus\Downloads\relogo.zip
2015-01-27 11:53 - 2015-01-27 11:53 - 00000000 _____ () C:\Users\Proteus\Desktop\Komputer Marcina.txt
2015-01-27 10:05 - 2015-01-27 10:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-26 10:39 - 2015-01-26 10:39 - 02194432 _____ () C:\Users\Proteus\Downloads\AdwCleaner.exe
2015-01-23 12:37 - 2015-01-23 12:37 - 00001135 _____ () C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2015-01-23 12:37 - 2015-01-23 12:37 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith
2015-01-23 12:37 - 2015-01-23 12:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-01-23 12:37 - 2015-01-23 12:37 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-01-23 12:36 - 2015-01-23 12:36 - 00001047 _____ () C:\Users\Proteus\Desktop\Google Drive.lnk
2015-01-23 12:36 - 2015-01-23 12:36 - 00000000 ____D () C:\ProgramData\TechSmith
2015-01-23 12:36 - 2015-01-23 12:36 - 00000000 ____D () C:\Program Files (x86)\TechSmith
2015-01-23 11:52 - 2015-01-23 11:52 - 02186752 _____ () C:\Users\Proteus\Downloads\AdwCleaner_4.exe
2015-01-23 11:49 - 2015-01-23 11:49 - 00000000 ____D () C:\windows\SysWOW64\X86
2015-01-23 11:49 - 2015-01-23 11:49 - 00000000 ____D () C:\windows\SysWOW64\AMD64
2015-01-23 11:48 - 2015-02-05 14:01 - 00000000 ____D () C:\ProgramData\{d0a5e402-7f84-7b8f-d0a5-5e4027f89009}
2015-01-23 11:42 - 2015-01-23 11:42 - 00000000 ____D () C:\Program Files (x86)\Grammarly Lite  Smart Spellchecker
2015-01-23 11:39 - 2015-01-23 11:39 - 00000000 ____D () C:\ProgramData\{1b30cb05-82b9-9e5a-1b30-0cb0582b2c16}
2015-01-23 11:17 - 2015-01-23 11:17 - 01031912 _____ () C:\Users\Proteus\Downloads\UPDATE-SuperSU-v1.65.zip
2015-01-23 10:37 - 2015-01-23 10:37 - 00880784 _____ (Google Inc.) C:\Users\Proteus\Downloads\googledrivesync(1).exe
2015-01-23 10:28 - 2015-01-23 10:28 - 22324900 _____ () C:\Users\Proteus\Downloads\Aktualizacja-2015-01-23.zip
2015-01-21 13:20 - 2015-01-21 16:03 - 00003384 _____ () C:\windows\System32\Tasks\SYSTEMUP
2015-01-21 13:20 - 2015-01-21 16:03 - 00003384 _____ () C:\windows\System32\Tasks\SYSTEMDOWN
2015-01-21 12:09 - 2015-01-21 12:16 - 00000000 ____D () C:\ProgramData\Sony
2015-01-21 11:49 - 2015-01-21 11:49 - 00000000 ____D () C:\Users\Proteus\AppData\Local\TechSmith
2015-01-21 11:45 - 2015-01-21 12:02 - 00000000 ____D () C:\Users\Proteus\Documents\Camtasia Studio
2015-01-21 11:45 - 2015-01-21 11:45 - 00000000 ____D () C:\Users\Proteus\AppData\Roaming\TechSmith
2015-01-21 11:30 - 2015-01-21 11:30 - 00003400 _____ () C:\windows\System32\Tasks\SYSTEM
2015-01-21 11:29 - 2015-01-21 11:29 - 00401408 _____ () C:\ProgramData\wget.exe
2015-01-21 09:49 - 2015-01-21 09:49 - 00000000 _____ () C:\Users\Proteus\Downloads\Camtasia-Studio(12665)-dp.exe
2015-01-20 12:59 - 2015-01-20 12:59 - 00000000 ____D () C:\Users\Public\Documents\Blackmagic Design
2015-01-20 12:59 - 2015-01-20 12:59 - 00000000 ____D () C:\Users\Proteus\Documents\Blackmagic Design
2015-01-20 12:59 - 2015-01-20 12:59 - 00000000 ____D () C:\Users\Proteus\AppData\Roaming\Blackmagic Design
2015-01-20 12:58 - 2015-01-20 12:58 - 00000000 ____D () C:\ProgramData\Blackmagic Design
2015-01-20 12:54 - 2015-01-20 13:19 - 00000000 ____D () C:\Users\Proteus\AppData\Roaming\avidemux
2015-01-20 12:54 - 2015-01-20 12:54 - 00000000 ____D () C:\Users\Proteus\AppData\Local\Windows Live
2015-01-20 12:52 - 2015-01-20 12:53 - 54735792 _____ () C:\Users\Proteus\Downloads\Blackmagic_Fusion_7.5_Windows.zip
2015-01-20 12:51 - 2015-01-20 12:51 - 00000914 _____ () C:\Users\Public\Desktop\Avidemux 2.6 - 64bits.lnk
2015-01-20 12:51 - 2015-01-20 12:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avidemux (64bits)
2015-01-20 12:51 - 2015-01-20 12:51 - 00000000 ____D () C:\Program Files\Avidemux 2.6 - 64bits
2015-01-20 12:50 - 2015-01-20 12:50 - 01245896 _____ (Microsoft Corporation) C:\Users\Proteus\Downloads\wlsetup-web.exe
2015-01-20 12:42 - 2015-01-20 12:42 - 16456460 _____ () C:\Users\Proteus\Downloads\avidemux_2.6.8_win64_v2.exe
2015-01-14 11:26 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-01-14 11:25 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-01-14 11:25 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-01-14 11:25 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-01-14 11:25 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-01-14 11:25 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-01-14 11:25 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-01-14 11:25 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-01-14 11:25 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-01-14 11:25 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-01-14 11:25 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-01-14 11:25 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncsi.dll
2015-01-14 11:25 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-01-13 14:32 - 2015-01-13 14:32 - 00880784 _____ (Google Inc.) C:\Users\Proteus\Downloads\googledrivesync.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 14:38 - 2011-06-15 21:24 - 01166085 _____ () C:\windows\WindowsUpdate.log
2015-02-05 14:34 - 2012-10-29 18:28 - 00000000 ___RD () C:\Users\Proteus\Dropbox
2015-02-05 14:33 - 2012-10-29 18:27 - 00000000 ____D () C:\Users\Proteus\AppData\Roaming\Dropbox
2015-02-05 14:31 - 2011-12-06 17:26 - 00001044 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-05 14:31 - 2011-11-20 19:01 - 00072381 _____ () C:\ProgramData\lxecscan.log
2015-02-05 14:30 - 2012-03-31 20:37 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-02-05 14:30 - 2010-11-21 04:47 - 01663396 _____ () C:\windows\PFRO.log
2015-02-05 14:30 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-05 14:30 - 2009-07-14 05:51 - 00013916 _____ () C:\windows\setupact.log
2015-02-05 14:28 - 2014-03-20 15:32 - 00000000 ____D () C:\AdwCleaner
2015-02-05 14:09 - 2011-11-18 18:00 - 00001066 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1866740971-3537411966-2138577161-1001UA.job
2015-02-05 14:05 - 2011-12-06 17:26 - 00001048 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-05 14:01 - 2014-11-17 08:55 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2015-02-05 13:59 - 2012-03-31 20:37 - 00003868 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 13:58 - 2012-03-31 20:36 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 13:58 - 2011-11-27 21:05 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-05 13:39 - 2012-05-02 15:15 - 00000000 ___RD () C:\Users\Proteus\Google Drive
2015-02-05 11:23 - 2014-11-12 12:50 - 00000000 ____D () C:\Users\Proteus\Desktop\FOLDERY
2015-02-05 11:15 - 2014-11-20 11:45 - 00000000 ____D () C:\Users\Proteus\Desktop\CYRYL
2015-02-05 09:43 - 2011-06-15 21:02 - 00741140 _____ () C:\windows\system32\perfh015.dat
2015-02-05 09:43 - 2011-06-15 21:02 - 00156424 _____ () C:\windows\system32\perfc015.dat
2015-02-05 09:43 - 2009-07-14 06:13 - 01672206 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-05 09:09 - 2011-11-18 18:00 - 00001014 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1866740971-3537411966-2138577161-1001Core.job
2015-02-05 08:01 - 2012-01-21 20:02 - 00001046 _____ () C:\Users\Public\Desktop\FastStone Capture.lnk
2015-02-05 08:01 - 2012-01-21 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2015-02-05 08:01 - 2012-01-21 20:02 - 00000000 ____D () C:\Program Files (x86)\FastStone Capture
2015-02-05 07:50 - 2009-07-14 05:45 - 00028848 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-05 07:50 - 2009-07-14 05:45 - 00028848 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-04 17:05 - 2012-09-01 17:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-04 14:49 - 2011-12-18 17:54 - 00000000 ____D () C:\Users\Proteus\Documents\My eBooks
2015-02-04 11:25 - 2011-11-19 21:00 - 00000000 ____D () C:\Users\Proteus\AppData\Local\CrashDumps
2015-02-04 10:04 - 2009-07-14 06:08 - 00032604 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2015-02-04 10:04 - 2009-07-14 05:45 - 00435272 _____ () C:\windows\system32\FNTCACHE.DAT
2015-02-03 13:15 - 2013-03-31 20:44 - 00000000 ____D () C:\Users\Proteus\AppData\Roaming\Corel
2015-02-03 13:15 - 2011-11-18 16:31 - 00117440 _____ () C:\Users\Proteus\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-03 13:02 - 2013-03-31 20:42 - 00000000 ____D () C:\Program Files (x86)\Corel
2015-02-03 13:00 - 2011-11-18 18:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2015-01-30 13:20 - 2011-11-18 16:14 - 00000000 ____D () C:\Users\Proteus
2015-01-28 09:10 - 2011-12-10 22:48 - 00000000 ____D () C:\Users\Proteus\Desktop\ANGIELSKI
2015-01-28 08:06 - 2014-08-06 12:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-23 10:38 - 2012-05-02 15:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-21 12:16 - 2012-08-20 20:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-01-21 12:16 - 2012-08-20 20:10 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-01-21 12:13 - 2014-03-14 11:47 - 00000000 ____D () C:\Users\Proteus\AppData\Roaming\Sony
2015-01-21 12:13 - 2012-08-22 19:50 - 00000000 ____D () C:\Users\Proteus\AppData\Local\Sony
2015-01-20 08:45 - 2011-11-18 18:01 - 00002390 _____ () C:\Users\Proteus\Desktop\Google Chrome.lnk
2015-01-14 15:14 - 2013-08-10 11:47 - 00000000 ____D () C:\windows\system32\MRT
2015-01-14 14:44 - 2011-11-19 17:14 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

==================== Files in the root of some directories =======

2011-11-19 16:57 - 2011-11-19 16:57 - 0017408 _____ () C:\Users\Proteus\AppData\Local\WebpageIcons.db
2014-03-24 08:59 - 2014-03-24 08:59 - 0000057 _____ () C:\ProgramData\Ament.ini
2011-12-25 17:05 - 2011-12-25 17:05 - 0000000 _____ () C:\ProgramData\cmn_upld.log
2011-11-20 19:03 - 2011-11-20 19:03 - 0000252 _____ () C:\ProgramData\FastPics.log
2011-11-20 19:05 - 2013-03-29 12:29 - 0000431 _____ () C:\ProgramData\lxecDiagnostics.log
2011-11-20 19:06 - 2011-12-25 17:03 - 0006554 _____ () C:\ProgramData\lxecJSW.log
2011-11-20 19:01 - 2015-02-05 14:31 - 0072381 _____ () C:\ProgramData\lxecscan.log
2011-12-25 17:05 - 2011-12-25 17:05 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log
2012-11-23 17:44 - 2012-11-23 17:44 - 0528821 _____ () C:\ProgramData\SPL1F23.tmp
2012-11-01 18:00 - 2012-11-01 18:00 - 0528821 _____ () C:\ProgramData\SPL8121.tmp
2012-11-13 18:44 - 2012-11-13 18:44 - 0528821 _____ () C:\ProgramData\SPLD680.tmp
2011-11-20 19:00 - 2011-11-20 19:00 - 0000000 _____ () C:\ProgramData\UpdaterLog.txt
2015-01-21 11:29 - 2015-01-21 11:29 - 0401408 _____ () C:\ProgramData\wget.exe
2011-06-15 05:52 - 2011-06-15 05:52 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2011-06-15 05:46 - 2011-06-15 05:46 - 0000113 _____ () C:\ProgramData\{34FBC7C4-CD31-4D93-A428-0E524EAC4586}.log
2011-06-15 05:49 - 2011-06-15 05:50 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2012-07-22 19:34 - 2012-07-22 19:34 - 0000104 _____ () C:\ProgramData\{4C599D06-A0C4-4ACB-34E9-F4C0-9C05F6EF}.ini
2011-06-15 05:47 - 2011-06-15 05:49 - 0000106 _____ () C:\ProgramData\{80E158EA-7181-40FE-A701-301CE6BE64AB}.log
2012-04-12 21:55 - 2012-04-12 21:55 - 0000120 _____ () C:\ProgramData\{81EFC7D3-3CF1-DF08-0E9A-8C83-989422F3}.ini
2011-06-15 05:50 - 2011-06-15 05:51 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log

Files to move or delete:
====================
C:\ProgramData\wget.exe


Some content of TEMP:
====================
C:\Users\Proteus\AppData\Local\Temp\6a935b.exe
C:\Users\Proteus\AppData\Local\Temp\AskSLib.dll
C:\Users\Proteus\AppData\Local\Temp\camtasia.exe
C:\Users\Proteus\AppData\Local\Temp\drm_dyndata_7340007.dll
C:\Users\Proteus\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpen2jbh.dll
C:\Users\Proteus\AppData\Local\Temp\DTLite4453-0297.exe
C:\Users\Proteus\AppData\Local\Temp\el_inst.exe
C:\Users\Proteus\AppData\Local\Temp\Execute2App.exe
C:\Users\Proteus\AppData\Local\Temp\ipl81B.tmp.exe
C:\Users\Proteus\AppData\Local\Temp\ipl9F3B.tmp.exe
C:\Users\Proteus\AppData\Local\Temp\iplF160.tmp.exe
C:\Users\Proteus\AppData\Local\Temp\iplF8FE.tmp.exe
C:\Users\Proteus\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Proteus\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe
C:\Users\Proteus\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Proteus\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Proteus\AppData\Local\Temp\Kies2RemoveAll.exe
C:\Users\Proteus\AppData\Local\Temp\msvcp90.dll
C:\Users\Proteus\AppData\Local\Temp\msvcr90.dll
C:\Users\Proteus\AppData\Local\Temp\muz198.tmp.exe
C:\Users\Proteus\AppData\Local\Temp\Nokia_Suite_WU.exe
C:\Users\Proteus\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Proteus\AppData\Local\Temp\oalinst.exe
C:\Users\Proteus\AppData\Local\Temp\Quarantine.exe
C:\Users\Proteus\AppData\Local\Temp\QuickTimeInstaller.exe
C:\Users\Proteus\AppData\Local\Temp\SIntf16.dll
C:\Users\Proteus\AppData\Local\Temp\SIntf32.dll
C:\Users\Proteus\AppData\Local\Temp\SIntfNT.dll
C:\Users\Proteus\AppData\Local\Temp\sqlite3.dll
C:\Users\Proteus\AppData\Local\Temp\utt3510.tmp.exe
C:\Users\Proteus\AppData\Local\Temp\uttBE61.tmp.exe
C:\Users\Proteus\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Proteus\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Proteus\AppData\Local\Temp\wmpfirefoxplugin.exe
C:\Users\Proteus\AppData\Local\Temp\_is39E9.exe
C:\Users\Proteus\AppData\Local\Temp\_isF29C.exe
C:\Users\Proteus\AppData\Local\Temp\_isF852.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 18:40

==================== End Of Log ============================