Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by Dominik (administrator) on PIKUS on 14-02-2015 20:43:17
Running from C:\Users\werasia\Downloads
Loaded Profiles: Dominik & werasia (Available profiles: Dominik & werasia)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\System32\WpcMon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Utilities\KeNotify.exe
(TOSHIBA) C:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TDUSrv64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
() C:\Users\werasia\Downloads\vfud6snb.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxcr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-10-08] (TOSHIBA Corporation)
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [179288 2014-01-04] (TOSHIBA Corporation)
HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296008 2013-10-21] (TOSHIBA Corporation)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1689576 2015-02-14] (Bitdefender)
HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2013-08-05] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKLM\...\Policies\Explorer: [NoShellSearchButton] 0
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKLM\...\Policies\Explorer: [NoSetFolders] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [NoDesktop] 0
HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-368051678-2853264572-336665041-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-368051678-2853264572-336665041-1001\...\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-02-14] (Bitdefender)
HKU\S-1-5-21-368051678-2853264572-336665041-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-368051678-2853264572-336665041-1001\...\RunOnce: [Report] => \AdwCleaner\AdwCleaner[S2].txt [1969 2015-02-14] ()
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-02-14] (Bitdefender)
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-368051678-2853264572-336665041-1002\...\MountPoints2: {80e38b24-b467-11e4-827c-b8ee65edf483} - "E:\Autorun.exe" 
HKU\S-1-5-18\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0
Startup: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StarOffice 7.lnk
ShortcutTarget: StarOffice 7.lnk -> C:\Program Files (x86)\StarOffice7\program\quickstart.exe ()
Startup: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall Webroot RunOnce.lnk
ShortcutTarget: Uninstall Webroot RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-368051678-2853264572-336665041-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-368051678-2853264572-336665041-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-368051678-2853264572-336665041-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://mystart.toshiba.com
HKU\S-1-5-21-368051678-2853264572-336665041-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://mystart.toshiba.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-368051678-2853264572-336665041-1001 -> {34BECB51-C832-4ED3-BD76-A101B2BDC0D9} URL = 
SearchScopes: HKU\S-1-5-21-368051678-2853264572-336665041-1002 -> {34BECB51-C832-4ED3-BD76-A101B2BDC0D9} URL = 
BHO: Bitdefender Wallet  -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: No Name -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} ->  No File
Toolbar: HKLM - Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll (Bitdefender)
Toolbar: HKU\S-1-5-21-368051678-2853264572-336665041-1001 -> Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKU\S-1-5-21-368051678-2853264572-336665041-1002 -> Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Tcpip\Parameters: [DhcpNameServer] 75.75.76.76 75.75.75.75
Tcpip\..\Interfaces\{6F7098E8-DD43-461D-A103-8FC18603A62A}: [NameServer] 208.67.222.123,208.67.220.123
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2015-02-14]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-02-25] (WildTangent)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-10] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-10-27] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1547936 2015-02-14] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1306464 2015-02-14] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [262544 2015-02-14] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [677104 2015-02-14] (BitDefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2015-02-14] (BitDefender SRL)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-02-14] (Disc Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [155912 2014-10-22] (BitDefender LLC)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [291032 2013-11-22] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-21] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [33168 2013-10-10] (Windows (R) Win 7 DDK provider)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-10-15] (BitDefender S.R.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-21] (Microsoft Corporation)
U0 SR; No ImagePath
U2 srservice; No ImagePath
U3 fxddapog; \??\C:\Users\Dominik\AppData\Local\Temp\fxddapog.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 20:37 - 2015-02-14 20:37 - 00257225 _____ () C:\Users\Dominik\Downloads\gmer.log
2015-02-14 20:12 - 2015-02-14 20:12 - 00000116 _____ () C:\Windows\setupact.log
2015-02-14 20:12 - 2015-02-14 20:12 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-14 20:11 - 2015-02-14 20:11 - 00075172 _____ () C:\Windows\PFRO.log
2015-02-14 20:06 - 2015-02-14 20:06 - 00050906 _____ () C:\Users\Dominik\Documents\cc_20150214_200607.reg
2015-02-14 20:04 - 2015-02-14 20:04 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-14 20:04 - 2015-02-14 20:04 - 00000845 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-14 20:04 - 2015-02-14 20:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-14 20:04 - 2015-02-14 20:04 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-14 20:02 - 2015-02-14 20:02 - 00000000 ____D () C:\Device
2015-02-14 19:55 - 2015-02-14 19:55 - 05325208 _____ (Piriform Ltd) C:\Users\werasia\Downloads\ccsetup502.exe
2015-02-14 19:44 - 2015-02-14 20:02 - 00000000 ____D () C:\Users\Dominik\Doctor Web
2015-02-14 19:38 - 2015-02-14 19:43 - 161956992 _____ () C:\Users\werasia\Downloads\qa73u31j.exe
2015-02-14 19:35 - 2015-02-14 19:35 - 00067920 _____ () C:\Users\werasia\Downloads\Extras.Txt
2015-02-14 19:34 - 2015-02-14 19:34 - 00131082 _____ () C:\Users\werasia\Downloads\OTL.Txt
2015-02-14 19:33 - 2015-02-14 20:22 - 00027638 _____ () C:\Users\werasia\Downloads\Addition.txt
2015-02-14 19:31 - 2015-02-14 20:43 - 00024817 _____ () C:\Users\werasia\Downloads\FRST.txt
2015-02-14 19:31 - 2015-02-14 20:43 - 00000000 ____D () C:\FRST
2015-02-14 19:22 - 2015-02-14 19:22 - 00602112 _____ (OldTimer Tools) C:\Users\werasia\Downloads\OTL.exe
2015-02-14 19:22 - 2015-02-14 19:22 - 00380416 _____ () C:\Users\werasia\Downloads\vfud6snb.exe
2015-02-14 19:21 - 2015-02-14 19:21 - 02134528 _____ (Farbar) C:\Users\werasia\Downloads\FRST64.exe
2015-02-14 19:08 - 2015-02-14 20:01 - 00000000 ____D () C:\ProgramData\Doctor Web
2015-02-14 19:07 - 2015-02-14 19:07 - 297640080 _____ (Doctor Web, Ltd.) C:\Users\werasia\Downloads\dr-web-cureit.exe
2015-02-14 19:05 - 2015-02-14 19:05 - 00735768 _____ (Web ) C:\Users\werasia\Downloads\dr-web-cureit_setup.exe
2015-02-14 18:53 - 2015-02-14 19:11 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-02-14 18:53 - 2015-02-14 19:03 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-02-14 18:53 - 2015-02-14 18:53 - 00001414 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-02-14 18:53 - 2015-02-14 18:53 - 00001402 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-02-14 18:53 - 2015-02-14 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-02-14 18:53 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2015-02-14 18:51 - 2015-02-14 18:51 - 00000000 ____D () C:\Users\werasia\AppData\Roaming\Sun
2015-02-14 18:49 - 2015-02-14 18:50 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\werasia\Downloads\spybot-2.4.exe
2015-02-14 18:47 - 2015-02-14 18:47 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\werasia\Downloads\tdsskiller.exe
2015-02-14 15:11 - 2015-02-14 15:11 - 00002286 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-14 15:11 - 2015-02-14 15:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-14 14:52 - 2015-02-14 14:52 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Mozilla
2015-02-14 14:36 - 2015-02-14 14:36 - 00002278 _____ () C:\Users\Dominik\Desktop\Taplika.lnk
2015-02-14 14:35 - 2015-02-14 14:35 - 00002650 _____ () C:\Windows\System32\Tasks\UpdaterEX
2015-02-14 14:35 - 2015-02-14 14:35 - 00000312 _____ () C:\Windows\Tasks\UpdaterEX.job
2015-02-14 14:35 - 2015-02-14 14:35 - 00000000 _____ () C:\Users\Dominik\Downloads\ChromeSetup.exe
2015-02-14 14:31 - 2015-02-14 14:31 - 00000000 ____D () C:\Users\werasia\AppData\Roaming\QuickScan
2015-02-14 14:25 - 2015-02-14 14:25 - 00000000 __SHD () C:\Users\werasia\AppData\Local\EmieBrowserModeList
2015-02-14 13:32 - 2015-02-14 13:32 - 00079192 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2015-02-14 13:32 - 2015-02-14 13:32 - 00074000 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2015-02-14 13:11 - 2015-01-22 23:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-14 13:11 - 2015-01-22 22:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-14 13:03 - 2015-02-14 13:03 - 00000000 ____D () C:\Users\werasia\Documents\Electronic Arts
2015-02-14 13:02 - 2015-02-14 13:02 - 00000385 _____ () C:\Windows\system32\user_gensett.xml
2015-02-14 12:53 - 2008-09-04 13:17 - 00447752 ____R (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2015-02-14 12:52 - 2015-02-14 12:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2015-02-14 12:49 - 2015-02-14 12:49 - 00002110 _____ () C:\Users\Public\Desktop\The Sims™ 3.lnk
2015-02-14 12:49 - 2015-02-14 12:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2015-02-14 12:49 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2015-02-14 12:49 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2015-02-14 12:44 - 2015-02-14 12:44 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2015-02-14 12:36 - 2015-02-14 13:03 - 00000000 ____D () C:\Users\werasia\AppData\Roaming\DAEMON Tools Lite
2015-02-14 12:31 - 2015-02-14 12:31 - 00516759 _____ () C:\ProgramData\1423933942.bdinstall.bin
2015-02-14 12:17 - 2015-02-14 12:52 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2015-02-14 12:17 - 2015-02-14 12:23 - 00000000 ____D () C:\Users\werasia\AppData\Roaming\Bitdefender
2015-02-14 12:17 - 2015-02-14 12:17 - 00002224 _____ () C:\Users\Public\Desktop\Bitdefender Antivirus Plus 2015.lnk
2015-02-14 12:17 - 2015-02-14 12:17 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2015-02-14 12:17 - 2015-02-14 12:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2015
2015-02-14 12:17 - 2015-02-14 12:17 - 00000000 ____D () C:\ProgramData\BDLogging
2015-02-14 12:17 - 2014-12-02 16:37 - 00074000 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2015-02-14 12:17 - 2013-09-08 20:04 - 00023568 _____ (Bitdefender) C:\Windows\system32\Drivers\bdelam.sys
2015-02-14 12:17 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2015-02-14 12:16 - 2015-02-14 12:55 - 00262544 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2015-02-14 12:16 - 2015-02-14 12:53 - 01306464 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2015-02-14 12:16 - 2015-02-14 12:53 - 00677104 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2015-02-14 12:16 - 2015-02-14 12:16 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Bitdefender
2015-02-14 12:12 - 2015-02-14 12:54 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2015-02-14 12:12 - 2015-02-14 12:53 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2015-02-14 12:12 - 2015-02-14 12:17 - 00000000 ____D () C:\ProgramData\Bitdefender
2015-02-14 12:12 - 2015-02-14 12:12 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\QuickScan
2015-02-14 12:12 - 2015-02-14 12:12 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2015-02-14 12:12 - 2015-02-14 12:12 - 00000000 ____D () C:\Program Files\Bitdefender
2015-02-14 12:12 - 2014-10-22 09:29 - 00155912 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2015-02-14 12:12 - 2014-10-15 16:14 - 00452040 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2015-02-14 12:09 - 2015-02-14 12:10 - 00000000 ____D () C:\Users\werasia\AppData\Local\lptmp1354002020
2015-02-14 12:07 - 2015-02-14 20:04 - 00000000 ____D () C:\Users\Dominik\AppData\Local\CrashDumps
2015-02-14 12:07 - 2015-02-14 12:07 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2015-02-14 12:06 - 2015-02-14 12:07 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2015-02-14 12:05 - 2012-10-24 14:44 - 00656048 _____ (WildTangent, Inc.) C:\ProgramData\uninstall309006.exe
2015-02-14 12:03 - 2015-02-14 12:03 - 00003090 _____ () C:\Windows\System32\Tasks\{AAC50437-6009-4771-B047-103F0D32FD21}
2015-02-14 12:02 - 2015-02-14 12:02 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Skype
2015-02-14 12:02 - 2015-02-14 12:02 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Skype
2015-02-14 11:54 - 2015-02-14 20:04 - 00000000 ____D () C:\Windows\Minidump
2015-02-14 11:46 - 2015-02-14 20:05 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\DAEMON Tools Lite
2015-02-14 11:46 - 2015-02-14 14:37 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{0D2F762A-0885-4302-BFFC-7FEF79B4FA59}
2015-02-14 11:46 - 2015-02-14 11:46 - 00000000 __SHD () C:\Users\Dominik\AppData\Local\EmieUserList
2015-02-14 11:46 - 2015-02-14 11:46 - 00000000 __SHD () C:\Users\Dominik\AppData\Local\EmieSiteList
2015-02-14 11:46 - 2015-02-14 11:46 - 00000000 __SHD () C:\Users\Dominik\AppData\Local\EmieBrowserModeList
2015-02-14 11:44 - 2015-02-14 11:47 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-02-14 10:44 - 2015-02-14 11:58 - 00000000 ____D () C:\Instalki
2015-02-14 10:43 - 2015-02-14 10:43 - 00000000 _____ () C:\Users\werasia\Downloads\test.txt
2015-02-12 18:28 - 2015-01-19 13:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-02-12 18:28 - 2014-12-19 03:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-12 18:28 - 2014-12-19 03:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-12 18:28 - 2014-12-08 18:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml
2015-02-12 18:24 - 2015-01-15 17:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-12 18:24 - 2015-01-15 17:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-12 18:24 - 2015-01-13 23:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-02-12 18:24 - 2015-01-13 22:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-02-12 18:24 - 2015-01-13 17:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-12 18:24 - 2015-01-13 17:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-12 18:24 - 2015-01-10 04:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-12 18:24 - 2015-01-10 04:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-02-12 18:24 - 2015-01-10 03:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-02-12 18:24 - 2014-12-08 22:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-12 18:24 - 2014-12-08 20:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-12 18:24 - 2014-10-28 21:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-12 18:24 - 2014-10-28 21:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-12 18:24 - 2014-10-28 21:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-12 18:24 - 2014-10-28 21:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-12 18:24 - 2014-10-28 21:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-02-12 18:24 - 2014-10-28 21:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-02-12 18:24 - 2014-10-28 20:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-02-12 18:24 - 2014-10-28 20:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-12 18:24 - 2014-10-28 20:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-02-12 18:24 - 2014-10-28 20:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-02-12 18:24 - 2014-10-28 20:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-02-12 18:24 - 2014-10-28 20:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-02-12 18:24 - 2014-10-28 20:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-02-12 18:23 - 2015-01-11 22:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-12 18:23 - 2015-01-11 21:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-12 18:23 - 2015-01-11 21:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-12 18:23 - 2015-01-11 21:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-12 18:23 - 2015-01-11 21:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-02-12 18:23 - 2015-01-11 21:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-12 18:23 - 2015-01-11 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-12 18:23 - 2015-01-11 21:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-12 18:23 - 2015-01-11 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-12 18:23 - 2015-01-11 21:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-12 18:23 - 2015-01-11 21:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-12 18:23 - 2015-01-11 20:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-02-12 18:23 - 2015-01-11 20:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-02-12 18:23 - 2015-01-11 20:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-02-12 18:23 - 2015-01-11 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-12 18:23 - 2015-01-11 20:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-12 18:23 - 2015-01-11 20:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-12 18:23 - 2015-01-11 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-12 18:23 - 2015-01-11 20:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-12 18:23 - 2015-01-11 20:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-12 18:23 - 2015-01-11 20:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-02-12 18:23 - 2015-01-11 20:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-02-12 18:23 - 2015-01-11 20:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-02-12 18:23 - 2015-01-11 20:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-12 18:23 - 2015-01-11 20:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-02-12 18:23 - 2015-01-11 20:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-12 18:23 - 2015-01-11 20:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-12 18:23 - 2015-01-11 20:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-12 18:23 - 2015-01-11 20:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-12 18:23 - 2015-01-11 20:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-12 18:23 - 2015-01-11 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-12 18:23 - 2015-01-11 20:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-12 18:23 - 2015-01-11 19:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-12 18:23 - 2015-01-11 19:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-12 18:23 - 2015-01-10 02:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-12 18:23 - 2015-01-10 01:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-12 18:22 - 2015-01-10 03:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-08 12:20 - 2015-02-08 12:20 - 00880208 _____ (Google Inc.) C:\Users\werasia\Downloads\GoogleVoiceAndVideoSetup.exe
2015-02-07 13:09 - 2015-02-07 13:09 - 00000696 _____ () C:\Users\werasia\Documents\Desktop - Shortcut.lnk
2015-01-31 17:29 - 2015-01-31 17:29 - 00000000 ___RD () C:\Users\werasia\Documents\Notes
2015-01-26 17:05 - 2015-01-26 17:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 20:43 - 2014-05-16 05:28 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-14 20:39 - 2014-05-16 05:13 - 01826046 _____ () C:\Windows\WindowsUpdate.log
2015-02-14 20:23 - 2014-09-01 13:26 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 20:19 - 2014-09-01 12:27 - 00000000 ____D () C:\Users\Dominik
2015-02-14 20:17 - 2014-09-01 12:44 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-368051678-2853264572-336665041-1002
2015-02-14 20:12 - 2014-05-16 05:28 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-14 20:12 - 2013-08-22 09:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-14 20:12 - 2013-08-22 08:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-02-14 20:10 - 2013-08-22 10:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-02-14 20:05 - 2014-03-26 15:07 - 00000000 ____D () C:\Windows\Panther
2015-02-14 20:00 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sru
2015-02-14 18:51 - 2014-09-01 13:38 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-14 18:46 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-02-14 18:41 - 2014-09-01 12:39 - 00000000 ____D () C:\Users\werasia\AppData\Local\Packages
2015-02-14 18:40 - 2014-09-18 17:58 - 00000000 ____D () C:\AdwCleaner
2015-02-14 18:39 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-14 18:34 - 2014-09-01 12:43 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{DF9B815D-F848-4299-AE8E-74D4D5D815FA}
2015-02-14 15:11 - 2014-09-18 20:52 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Google
2015-02-14 15:11 - 2014-09-01 13:09 - 00000000 ____D () C:\Users\werasia\AppData\Local\Google
2015-02-14 15:11 - 2014-05-16 05:28 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-14 14:57 - 2013-08-22 08:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-02-14 14:52 - 2014-09-18 18:10 - 00000000 ____D () C:\Antywir
2015-02-14 14:35 - 2014-09-01 12:46 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-14 13:01 - 2014-09-18 17:22 - 00000000 ____D () C:\Program Files\Webroot
2015-02-14 12:44 - 2014-03-25 23:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-14 12:25 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-02-14 12:08 - 2014-03-25 22:26 - 00899672 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-14 12:07 - 2014-09-01 12:35 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-368051678-2853264572-336665041-1001
2015-02-14 12:02 - 2014-09-01 12:33 - 00000000 __RDO () C:\Users\Dominik\OneDrive
2015-02-14 12:02 - 2014-09-01 12:31 - 00000000 ____D () C:\Users\Dominik\AppData\Local\TOSHIBA
2015-02-14 12:02 - 2014-09-01 12:29 - 00000000 ____D () C:\Users\Dominik\AppData\Local\VirtualStore
2015-02-14 12:01 - 2014-09-01 12:38 - 00000000 ____D () C:\Users\werasia
2015-02-14 11:57 - 2014-03-25 23:52 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-02-14 11:36 - 2013-08-22 09:44 - 00362288 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-14 11:35 - 2014-09-04 16:25 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-14 11:32 - 2014-09-04 16:24 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-14 11:31 - 2014-09-01 12:51 - 00000000 ____D () C:\Users\werasia\AppData\Roaming\Skype
2015-02-14 10:39 - 2014-09-01 13:20 - 00000000 ____D () C:\Users\werasia\Desktop\wazne
2015-02-08 15:28 - 2014-09-18 17:02 - 00000000 ____D () C:\Users\werasia\AppData\Local\CrashDumps
2015-02-08 12:40 - 2014-10-27 18:01 - 00000000 ____D () C:\Users\werasia\Desktop\Asi Rzeczy ;-)
2015-02-08 12:39 - 2014-10-22 16:54 - 00000000 ____D () C:\Users\werasia\Desktop\Weronika #5
2015-02-07 11:38 - 2014-05-16 05:28 - 00003890 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-07 11:38 - 2014-05-16 05:28 - 00003654 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 16:23 - 2014-09-01 13:26 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-03 14:31 - 2014-09-17 18:08 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 14:31 - 2014-09-17 18:08 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-30 20:40 - 2014-05-16 05:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-26 18:12 - 2014-09-01 12:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-17 10:06 - 2014-10-05 20:42 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-17 10:06 - 2014-09-01 12:50 - 00000000 ____D () C:\ProgramData\Skype

==================== Files in the root of some directories =======

2014-09-18 17:23 - 2015-02-14 12:09 - 10395072 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe
2014-09-01 13:46 - 2014-09-01 13:46 - 0000075 _____ () C:\Users\Dominik\AppData\Roaming\sversion.ini
2015-02-14 12:31 - 2015-02-14 12:31 - 0516759 _____ () C:\ProgramData\1423933942.bdinstall.bin
2014-05-16 05:00 - 2014-05-16 05:00 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-02-14 12:05 - 2012-10-24 14:44 - 0656048 _____ (WildTangent, Inc.) C:\ProgramData\uninstall309006.exe

Files to move or delete:
====================
C:\ProgramData\uninstall309006.exe


Some content of TEMP:
====================
C:\Users\Dominik\AppData\Local\Temp\DTLite4491-0356.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-31 14:25

==================== End Of Log ============================