Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by Masa (administrator) on MAS-KOMPUTER on 14-02-2015 14:08:10
Running from C:\Users\Masa\Desktop
Loaded Profiles: Masa & UpdatusUser (Available profiles: Masa & UpdatusUser)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
() C:\Program Files (x86)\WIntEnhance\WIntEnhance Internet Enhancer\InternetEnhancerService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files (x86)\MagnoPlayer\MagnoPlayerUpdaterService.exe
(OptimizerMonitor Inc.) C:\Program Files (x86)\IGS\OptimizerMonitor.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Users\Masa\AppData\Local\ConvertAd\CASrv.exe
() C:\Users\Masa\AppData\Roaming\VOPackage\VOsrv.exe
(Weather Protector LLC) C:\Program Files (x86)\StormWatch\SWUpdaterSvc.exe
(Word Proser) C:\Program Files (x86)\WordProser_1.10.0.6\Service\wpsvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Plus HDV02.02) C:\Program Files (x86)\PlusHD Cinema 2.1cV02.02\72548802-a28d-42ac-b6e0-97de66a49026-1-6.exe
(Microsoft Corporation) C:\Windows\System32\runonce.exe
(Microsoft Corporation) C:\Windows\SysWOW64\runonce.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
() C:\Program Files (x86)\WIntEnhance\WIntEnhance Internet Enhancer\InternetEnhancer.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
() C:\Program Files (x86)\MagnoPlayer\WBrowser.exe
(SoftBrain Technologies Ltd.) C:\Users\Masa\AppData\Local\SmartWeb\SmartWebHelper.exe
(Weather Protector LLC) C:\Program Files (x86)\StormWatch\StormWatch.exe
() C:\Program Files (x86)\StormWatch\StormWatchApp.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
(SoftBrain Technologies Ltd.) C:\Users\Masa\AppData\Local\SmartWeb\SmartWebApp.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files (x86)\Browser Good\updateBrowserGood.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
() C:\Program Files (x86)\Browser Good\bin\utilBrowserGood.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.BRT.Helper.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.BOASHelper.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.BOASPRT.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.BOAS.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.PurBrowse64.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.BrowserAdapter.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.BrowserAdapter64.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.expext.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.BOASPRT.exe
() C:\Program Files (x86)\Browser Good\bin\BrowserGood.BOAS.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12459112 2012-03-15] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2598696 2012-02-29] (ELAN Microelectronics Corp.)
HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe [14115328 2015-01-09] (zik.mu)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [307200 2011-06-15] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [WinCheck] => C:\Users\Masa\AppData\Local\wincheck\wincheck.exe [417792 2015-01-30] ()
HKLM-x32\...\Run: [gmsd_de_174] => C:\Program Files (x86)\gmsd_de_174\gmsd_de_174.exe [3979920 2015-02-01] ()
HKLM-x32\...\Run: [SmartWeb] => C:\Users\Masa\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-04] (SoftBrain Technologies Ltd.)
HKLM-x32\...\Run: [gmsd_de_187] => C:\Program Files (x86)\gmsd_de_187\gmsd_de_187.exe [3979408 2015-02-07] ()
HKLM-x32\...\Run: [gmsd_de_192] => C:\Program Files (x86)\gmsd_de_192\gmsd_de_192.exe [3978384 2015-02-09] ()
HKLM-x32\...\RunOnce: [Taplika] => C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Masa\AppData\Roaming\Taplika\UpdateProc\bkup.dat"
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2991616 2012-10-08] (ALLCinema)
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [Facebook Update] => C:\Users\Masa\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-11-25] (Facebook Inc.)
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [TornTv Downloader] => C:\Users\Masa\AppData\Roaming\TornTV.com\Torntv Downloader.exe /c=startup
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [uTorrent] => C:\Users\Masa\AppData\Roaming\uTorrent\uTorrent.exe [1374032 2015-01-21] (BitTorrent Inc.)
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [1792376 2014-10-03] (TomTom)
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [framei] => C:\Users\Masa\AppData\Local\ContextTrue\framei.exe
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [nvhlpr] => C:\Users\Masa\AppData\Local\ContextTrue\nvhlpr.exe [601584 2014-07-11] ()
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [cnthlpr] => C:\Users\Masa\AppData\Local\ContextTrue\cnthlpr.exe [601584 2014-07-11] ()
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [GoogleChromeAutoLaunch_B876C87023B15F094EF5879A580247EB] => C:\Users\Masa\AppData\Local\Taplika\Application\taplika.exe [754176 2014-11-06] ()
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Run: [Gameo] => C:\Users\Masa\AppData\Roaming\Gameo\gameo.exe [42482176 2015-01-18] ()
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\RunOnce: [Taplika] => C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Masa\AppData\Roaming\Taplika\UpdateProc\bkup.dat"
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\MountPoints2: F - F:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\MountPoints2: G - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\MountPoints2: {43cdc65d-716c-11e4-a38a-001e101f1ed9} - F:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\MountPoints2: {a13e0751-6ff2-11e4-a17c-0cd292012192} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\MountPoints2: {a675f2f8-6f13-11e4-85ae-0cd292012192} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\MountPoints2: {a675f312-6f13-11e4-85ae-0cd292012192} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\MountPoints2: {b1d1552e-7187-11e4-8875-012197000000} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\MountPoints2: {c55bf2f6-f07b-11e3-b8eb-806e6f6e6963} - E:\CDSetup.exe
HKU\S-1-5-21-4164922102-3460450381-1936108056-1001\...\MountPoints2: {c55bf2f6-f07b-11e3-b8eb-806e6f6e6963} - E:\CDSetup.exe
AppInit_DLLs: _C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [253200 2015-01-28] ()
AppInit_DLLs-x32: C:/PROGRA~3/{29E4C~1/171~1.0/dana.dll => C:/PROGRA~3/{29E4C~1/171~1.0/dana.dll [649216 2015-02-06] ()
AppInit_DLLs-x32:  _C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [219408 2015-01-28] ()
AppInit_DLLs-x32:  c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [215360 2012-02-23] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WebBrowserMagnoPlayer.lnk
ShortcutTarget: WebBrowserMagnoPlayer.lnk -> C:\Program Files (x86)\MagnoPlayer\WBrowser.exe ()
Startup: C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk
ShortcutTarget: SmartWeb.lnk -> C:\Users\Masa\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
Startup: C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatch.lnk
ShortcutTarget: StormWatch.lnk -> C:\Program Files (x86)\StormWatch\StormWatch.exe (Weather Protector LLC)
Startup: C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatchApp.lnk
ShortcutTarget: StormWatchApp.lnk -> C:\Program Files (x86)\StormWatch\StormWatchApp.exe ()
Startup: C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TornTvDownloader.lnk
ShortcutTarget: TornTvDownloader.lnk -> C:\Users\Masa\AppData\Roaming\TornTV.com\TornTV Downloader.exe (No File)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-4164922102-3460450381-1936108056-1000] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-4164922102-3460450381-1936108056-1000] => http=127.0.0.1:49351;https=127.0.0.1:49351
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://taplika.com/?f=1&a=tpl_tuto2_15_06&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDtDtCzyyD0EyBzy0B0FyBtN0D0Tzu0StCtCtAtBtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StDyB0CtC0C0FtA0FtGtCyByEtAtG0DtD0CtCtGtBtC0CtCtGyEzz0B0CtA0EyDyEtAyE0F0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyDtB0B0CtDtB0EtG0BzytCzztGyEyCtDyDtG0AyCtDtBtGyE0Bzzzy0CyD0AyDzytC0FyB2Q&cr=1211795611&ir=
HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto2_15_06&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDtDtCzyyD0EyBzy0B0FyBtN0D0Tzu0StCtCtAtBtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StDyB0CtC0C0FtA0FtGtCyByEtAtG0DtD0CtCtGtBtC0CtCtGyEzz0B0CtA0EyDyEtAyE0F0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyDtB0B0CtDtB0EtG0BzytCzztGyEyCtDyDtG0AyCtDtBtGyE0Bzzzy0CyD0AyDzytC0FyB2Q&cr=1211795611&ir=
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
SearchScopes: HKLM -> {589B893E-773C-4941-88C2-0DCC718E621C} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4164922102-3460450381-1936108056-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto2_15_06&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDtDtCzyyD0EyBzy0B0FyBtN0D0Tzu0StCtCtAtBtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StDyB0CtC0C0FtA0FtGtCyByEtAtG0DtD0CtCtGtBtC0CtCtGyEzz0B0CtA0EyDyEtAyE0F0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyDtB0B0CtDtB0EtG0BzytCzztGyEyCtDyDtG0AyCtDtBtGyE0Bzzzy0CyD0AyDzytC0FyB2Q&cr=1211795611&ir=
SearchScopes: HKU\S-1-5-21-4164922102-3460450381-1936108056-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto2_15_06&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDtDtCzyyD0EyBzy0B0FyBtN0D0Tzu0StCtCtAtBtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StDyB0CtC0C0FtA0FtGtCyByEtAtG0DtD0CtCtGtBtC0CtCtGyEzz0B0CtA0EyDyEtAyE0F0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyDtB0B0CtDtB0EtG0BzytCzztGyEyCtDyDtG0AyCtDtBtGyE0Bzzzy0CyD0AyDzytC0FyB2Q&cr=1211795611&ir=
SearchScopes: HKU\S-1-5-21-4164922102-3460450381-1936108056-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419531078&from=ild&uid=HitachiXHTS727575A9E364_J3740084HB11YEHB11YEX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4164922102-3460450381-1936108056-1000 -> {589B893E-773C-4941-88C2-0DCC718E621C} URL = http://www.trovi.com/Results.aspx?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M00C716EB-9838-4600-A7CF-2C526BD15C9E&SearchSource=58&CUI=&UM=8&UP=SPB28B4711-4CBB-4B83-98B5-99FF36603867&q={searchTerms}&SSPV=
BHO: MedPLyerV1.2 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files (x86)\MedPLyerV1.2\MedPLyerV1.2-bho64.dll (MPlyerVenture)
BHO: BlockAndSurf -> {37827FC8-C8FF-2CDB-30B4-1D9052361621} -> C:\Program Files (x86)\ver3BlockAndSurf\187_x64.dll ()
BHO: SooftCooup -> {7c577a5c-1e80-414d-9d67-72bdb529a887} -> C:\Program Files (x86)\SooftCooup\hKskfjGaZ9CQ0g.x64.dll ()
BHO: WebbsAveER -> {8516ef18-9087-4b7e-a12f-dc22cdcdc3ce} -> C:\ProgramData\WebbsAveER\BOCeSo3E5WnQp7.x64.dll ()
BHO: ApptoUa -> {9492cc12-4843-415f-a33f-9cb18a60bc31} -> C:\ProgramData\ApptoUa\OW4YVIEEeAxLR1.x64.dll ()
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: MedPLyerV1.2 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files (x86)\MedPLyerV1.2\MedPLyerV1.2-bho.dll (MPlyerVenture)
BHO-x32: Browser Good 1.0.0.7 -> {2dd0916f-60de-4413-8198-d3c9d9b959d1} -> C:\Program Files (x86)\Browser Good\BrowserGoodbho.dll (Browser Good)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: BlockAndSurf -> {37827FC8-C8FF-2CDB-30B4-1D9052361621} -> C:\Program Files (x86)\ver3BlockAndSurf\187.dll ()
BHO-x32: SooftCooup -> {7c577a5c-1e80-414d-9d67-72bdb529a887} -> C:\Program Files (x86)\SooftCooup\hKskfjGaZ9CQ0g.dll ()
BHO-x32: WebbsAveER -> {8516ef18-9087-4b7e-a12f-dc22cdcdc3ce} -> C:\ProgramData\WebbsAveER\BOCeSo3E5WnQp7.dll ()
BHO-x32: ApptoUa -> {9492cc12-4843-415f-a33f-9cb18a60bc31} -> C:\ProgramData\ApptoUa\OW4YVIEEeAxLR1.dll ()
BHO-x32: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\OptimizerMonitor.dll [318624] (OM Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\OptimizerMonitor.dll [318624] (OM Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\OptimizerMonitor.dll [318624] (OM Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\OptimizerMonitor.dll [318624] (OM Inc.)
Winsock: Catalog9 16 C:\Windows\SysWOW64\OptimizerMonitor.dll [318624] (OM Inc.)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Taplika
FF SelectedSearchEngine: Taplika
FF Homepage: hxxp://taplika.com/?f=1&a=tpl_tuto2_15_06&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDtDtCzyyD0EyBzy0B0FyBtN0D0Tzu0StCtCtAtBtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StDyB0CtC0C0FtA0FtGtCyByEtAtG0DtD0CtCtGtBtC0CtCtGyEzz0B0CtA0EyDyEtAyE0F0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyDtB0B0CtDtB0EtG0BzytCzztGyEyCtDyDtG0AyCtDtBtGyE0Bzzzy0CyD0AyDzytC0FyB2Q&cr=1211795611&ir=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4164922102-3460450381-1936108056-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Masa\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF user.js: detected! => C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\user.js
FF SearchPlugin: C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\searchplugins\Taplika.xml
FF SearchPlugin: C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\searchplugins\trovi.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml
FF Extension: PlusHD Cinema 2.1cV02.02 - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\6c03cee0ab9442c4a67a507@58d658df5a30468fabf5c7a.com [2015-02-03]
FF Extension: MedPLyerV1.2 - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com [2015-01-30]
FF Extension: FineDeAllSoft - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\bKJE4Q@8.edu [2015-01-14]
FF Extension: SoftCOup - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\E0KD@4.org [2015-01-14]
FF Extension: Fast Start - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\faststartff@gmail.com [2014-12-25]
FF Extension: ossenyandexru - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\ossen@yandex.ru [2014-12-29]
FF Extension: FineeDealSaOeft - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\pjFif8@jmY.edu [2015-02-05]
FF Extension: 2A1D5949B5194924BF628522FE0D5274 - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\{2A1D5949-B519-4924-BF62-8522FE0D5274} [2015-02-09]
FF Extension: EE223D7AF30F11DD8F0AD2AD55D89593 - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\{EE223D7A-F30F-11DD-8F0A-D2AD55D89593} [2015-02-11]
FF Extension: Browser Good 1.0.1 - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\Extensions\{089299d4-0680-4375-a6a9-d9a7c9109a71}.xpi [2015-02-06]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Masa\AppData\Roaming\Mozilla\Firefox\Profiles\cyk539n4.default\extensions\faststartff@gmail.com
FF HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-4164922102-3460450381-1936108056-1000\...\Firefox\Extensions: [{AAB8C196-B829-7008-9494-5F4DDFEC16B7}] - C:\Program Files (x86)\ver3BlockAndSurf\187.xpi
FF Extension: BlockAndSurf - C:\Program Files (x86)\ver3BlockAndSurf\187.xpi [2015-02-04]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 4e12ee83; c:\Program Files (x86)\SegmentBuilder\SegmentBuilder.dll [2095616 2015-01-14] () [File not signed]
R2 ALDITALKVerbindungsassistent_Service; C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [342984 2011-09-13] ()
S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3505936 2015-01-28] () [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-02-03] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-02-03] (globalUpdate) [File not signed]
S2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [715656 2014-12-25] () [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-15] ()
R2 Internet Enhancer Service; C:\Program Files (x86)\WIntEnhance\WIntEnhance Internet Enhancer\InternetEnhancerService.exe [463872 2015-01-22] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
R2 MagnoPlayerUpdaterService; C:\Program Files (x86)\MagnoPlayer\MagnoPlayerUpdaterService.exe [11776 2015-01-29] () [File not signed]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()
R2 OptimizerMonitor; C:\Program Files (x86)\IGS\OptimizerMonitor.exe [1820240 2015-01-29] (OptimizerMonitor Inc.) [File not signed]
R2 serverca; C:\Users\Masa\AppData\Local\ConvertAd\CASrv.exe [165376 2015-02-09] () [File not signed]
R2 servervo; C:\Users\Masa\AppData\Roaming\VOPackage\VOsrv.exe [153600 2015-01-30] () [File not signed] <==== ATTENTION
R2 SWUpdater; C:\Program Files (x86)\StormWatch\SWUpdaterSvc.exe [17584 2014-11-22] (Weather Protector LLC)
R2 Update Browser Good; C:\Program Files (x86)\Browser Good\updateBrowserGood.exe [402168 2015-02-14] ()
R2 Util Browser Good; C:\Program Files (x86)\Browser Good\bin\utilBrowserGood.exe [402168 2015-02-14] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [485888 2014-12-25] () [File not signed]
R2 wpsvc_1.10.0.6; C:\Program Files (x86)\WordProser_1.10.0.6\Service\wpsvc.exe [277584 2015-01-07] (Word Proser)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [138752 2014-11-18] (Huawei Technologies Co., Ltd.)
S3 ewusbnet; C:\Windows\SysWOW64\DRIVERS\ewusbnet.sys [138752 2014-11-18] (Huawei Technologies Co., Ltd.)
S3 ew_hwusbdev; C:\Windows\SysWOW64\DRIVERS\ew_hwusbdev.sys [117248 2014-11-18] (Huawei Technologies Co., Ltd.)
S3 hwdatacard; C:\Windows\SysWOW64\DRIVERS\ewusbmdm.sys [121600 2014-11-18] (Huawei Technologies Co., Ltd.)
R2 webinstrNHKT; C:\Windows\system32\Drivers\webinstrNHKT.sys [50800 2015-02-04] ()
R1 wpnfd_1_10_0_6; C:\Windows\System32\drivers\wpnfd_1_10_0_6.sys [58240 2015-01-07] (Word Proser)
R1 {089299d4-0680-4375-a6a9-d9a7c9109a71}Gw64; C:\Windows\System32\drivers\{089299d4-0680-4375-a6a9-d9a7c9109a71}Gw64.sys [48792 2015-02-06] (StdLib)
R1 {dcd044e6-adb7-46c3-8ece-3d3a0a33bf3a}Gw64; C:\Windows\System32\drivers\{dcd044e6-adb7-46c3-8ece-3d3a0a33bf3a}Gw64.sys [48792 2015-02-12] (StdLib)
R1 {e65048d8-bd76-44ed-ac28-c25d339ab590}Gw64; C:\Windows\System32\drivers\{e65048d8-bd76-44ed-ac28-c25d339ab590}Gw64.sys [48792 2015-02-09] (StdLib)
R1 {feff35ba-2139-454f-bd8e-bc1ab8b3774d}Gw64; C:\Windows\System32\drivers\{feff35ba-2139-454f-bd8e-bc1ab8b3774d}Gw64.sys [48792 2015-02-08] (StdLib)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 14:08 - 2015-02-14 14:08 - 00029860 _____ () C:\Users\Masa\Desktop\FRST.txt
2015-02-14 14:07 - 2015-02-14 14:08 - 00000000 ____D () C:\FRST
2015-02-14 14:06 - 2015-02-14 14:06 - 02134528 _____ (Farbar) C:\Users\Masa\Desktop\FRST64.exe
2015-02-14 13:54 - 2015-02-14 13:55 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Masa\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-13 15:10 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-13 15:10 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 15:10 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-13 15:10 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-13 15:08 - 2015-02-12 23:28 - 00048792 _____ (StdLib) C:\Windows\system32\Drivers\{dcd044e6-adb7-46c3-8ece-3d3a0a33bf3a}Gw64.sys
2015-02-12 15:19 - 2015-02-12 15:19 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\BRT
2015-02-11 16:23 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 16:23 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 16:23 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 16:23 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 16:23 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 16:23 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 16:23 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 16:23 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 16:23 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 16:23 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 16:23 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 16:23 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 16:23 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 16:23 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 16:23 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 16:23 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 16:23 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 16:23 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 16:23 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 16:23 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 16:23 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 16:23 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 16:22 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 16:22 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 16:22 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 16:22 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 16:22 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 16:22 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 16:22 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 16:22 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 16:22 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 16:22 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 16:22 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 16:22 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 16:22 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 16:22 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 16:22 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 16:22 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 16:22 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 16:22 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 16:22 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 16:22 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 16:22 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 16:22 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 16:22 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 16:22 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 16:22 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 16:22 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 16:22 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 16:22 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 16:22 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 16:22 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 16:22 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 16:22 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 16:22 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 16:22 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 16:22 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 16:22 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 16:22 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 16:22 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 16:22 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 16:22 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 16:22 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 16:22 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 16:22 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 16:22 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 16:22 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 16:22 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 16:22 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 16:22 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 16:22 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 16:22 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 16:22 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 16:22 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 16:21 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 16:21 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 16:21 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 16:21 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 16:21 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 16:21 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 16:21 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 16:21 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 16:21 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 16:21 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 16:21 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 16:21 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 16:21 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 16:21 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 16:21 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 16:21 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 16:21 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 16:21 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 16:21 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 16:21 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 16:20 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 16:20 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 16:20 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 16:20 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 16:20 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 16:20 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 16:20 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-11 16:20 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 16:20 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 16:20 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 16:20 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-11 16:19 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 16:19 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 16:19 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 16:19 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 16:19 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 16:19 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 16:19 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 16:19 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 16:19 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 16:18 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 16:05 - 2015-02-11 16:05 - 00613057 _____ (CMI Limited) C:\Users\Masa\AppData\Local\nsiDDBD.tmp
2015-02-10 19:08 - 2015-02-10 19:08 - 00003574 _____ () C:\Windows\System32\Tasks\Pirates WW2
2015-02-10 19:08 - 2015-02-10 19:08 - 00003574 _____ () C:\Windows\System32\Tasks\Pirates WW1
2015-02-10 19:08 - 2015-02-10 19:08 - 00003574 _____ () C:\Windows\System32\Tasks\Pirates W2
2015-02-10 19:07 - 2015-02-10 19:07 - 00003574 _____ () C:\Windows\System32\Tasks\Pirates W1
2015-02-10 19:07 - 2015-02-10 19:07 - 00001993 _____ () C:\Users\Masa\Desktop\Pirates.lnk
2015-02-10 19:07 - 2015-02-10 19:07 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Pirates946
2015-02-10 19:07 - 2015-02-10 19:07 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pirates
2015-02-10 19:07 - 2015-02-10 19:07 - 00000000 ____D () C:\Users\Masa\AppData\Local\Sparta
2015-02-10 19:07 - 2015-02-10 19:07 - 00000000 ____D () C:\Users\Masa\AppData\Local\Pirates
2015-02-10 19:07 - 2015-02-10 19:07 - 00000000 ____D () C:\Users\Masa\AppData\Local\GGEmpire
2015-02-10 15:40 - 2015-02-09 20:52 - 00048792 _____ (StdLib) C:\Windows\system32\Drivers\{e65048d8-bd76-44ed-ac28-c25d339ab590}Gw64.sys
2015-02-09 18:05 - 2015-02-11 15:20 - 00000000 ____D () C:\Users\Masa\AppData\Local\gmsd_de_192
2015-02-09 18:05 - 2015-02-11 15:20 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_192
2015-02-09 17:29 - 2015-02-09 17:29 - 00288240 _____ () C:\Windows\Minidump\020915-46191-01.dmp
2015-02-09 17:29 - 2015-02-09 17:29 - 00000000 ____D () C:\Windows\Minidump
2015-02-09 16:31 - 2015-02-09 16:31 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Opera Software
2015-02-09 16:31 - 2015-02-09 16:31 - 00000000 ____D () C:\Users\Masa\AppData\Local\Opera Software
2015-02-09 16:30 - 2015-02-11 14:55 - 00003880 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1423495852
2015-02-09 16:30 - 2015-02-09 16:30 - 00001139 _____ () C:\Users\Public\Desktop\Opera.lnk
2015-02-09 16:30 - 2015-02-09 16:30 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-02-09 16:29 - 2015-02-13 16:07 - 00000000 ____D () C:\Users\Masa\AppData\Local\Gameo
2015-02-09 16:29 - 2015-02-09 19:33 - 00000000 ___HD () C:\Users\Masa\AppData\Roaming\GoldenGate
2015-02-09 16:29 - 2015-02-09 16:29 - 00001742 _____ () C:\Users\Masa\Desktop\Gameo.lnk
2015-02-09 16:29 - 2015-02-09 16:29 - 00001728 _____ () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gameo.lnk
2015-02-09 16:29 - 2015-02-09 16:29 - 00000170 _____ () C:\Users\Masa\Desktop\Play Games Online.url
2015-02-09 16:29 - 2015-02-09 16:29 - 00000170 _____ () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url
2015-02-09 16:29 - 2015-02-09 16:29 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gameo
2015-02-09 16:28 - 2015-02-09 16:29 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Gameo
2015-02-09 16:27 - 2015-02-13 15:06 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-09 16:27 - 2015-02-09 16:27 - 00003582 _____ () C:\Windows\System32\Tasks\StormFall W2
2015-02-09 16:27 - 2015-02-09 16:27 - 00003582 _____ () C:\Windows\System32\Tasks\StormFall W1
2015-02-09 16:27 - 2015-02-09 16:27 - 00003582 _____ () C:\Windows\System32\Tasks\StormFall TW2
2015-02-09 16:27 - 2015-02-09 16:27 - 00003582 _____ () C:\Windows\System32\Tasks\StormFall TW1
2015-02-09 16:27 - 2015-02-09 16:27 - 00001993 _____ () C:\Users\Masa\Desktop\StormFall.lnk
2015-02-09 16:27 - 2015-02-09 16:27 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\StormFall
2015-02-09 16:27 - 2015-02-09 16:27 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormFall
2015-02-09 16:27 - 2015-02-09 16:27 - 00000000 ____D () C:\Users\Masa\AppData\Local\StormFall
2015-02-09 16:26 - 2015-02-09 16:26 - 00000000 ____D () C:\Users\Masa\AppData\Local\gmsd_de_187
2015-02-09 16:26 - 2015-02-09 16:26 - 00000000 ____D () C:\Program Files (x86)\WordProser_1.10.0.6
2015-02-09 16:26 - 2015-02-09 16:26 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_187
2015-02-09 16:05 - 2015-02-08 18:42 - 00048792 _____ (StdLib) C:\Windows\system32\Drivers\{feff35ba-2139-454f-bd8e-bc1ab8b3774d}Gw64.sys
2015-02-06 12:51 - 2015-02-13 15:01 - 00000472 __RSH () C:\ProgramData\ntuser.pol
2015-02-06 12:02 - 2015-02-06 12:02 - 00000000 ____D () C:\Users\Masa\AppData\Local\Google
2015-02-06 11:36 - 2015-02-13 15:36 - 00000065 _____ () C:\Users\Masa\AppData\Roaming\WB.CFG
2015-02-06 10:51 - 2015-02-06 01:35 - 00048792 _____ (StdLib) C:\Windows\system32\Drivers\{089299d4-0680-4375-a6a9-d9a7c9109a71}Gw64.sys
2015-02-06 10:39 - 2015-02-06 10:39 - 00002206 _____ () C:\Users\Masa\Desktop\Taplika.lnk
2015-02-06 10:39 - 2015-02-06 10:39 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Taplika
2015-02-06 10:39 - 2015-02-06 10:39 - 00000000 ____D () C:\Users\Masa\AppData\Local\Taplika
2015-02-06 10:36 - 2015-02-13 18:36 - 00000286 _____ () C:\Windows\Tasks\Taplika.job
2015-02-06 10:36 - 2015-02-06 10:36 - 00003232 _____ () C:\Windows\System32\Tasks\Taplika
2015-02-06 10:36 - 2015-02-06 10:36 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Taplika
2015-02-06 10:36 - 2015-02-06 10:36 - 00000000 ____D () C:\ProgramData\{29E4C127-7966-10A1-C8E0-60231862B3AD}
2015-02-06 10:36 - 2015-02-06 10:36 - 00000000 ____D () C:\Program Files (x86)\WSE_Taplika
2015-02-06 10:35 - 2015-02-14 13:59 - 00000000 ____D () C:\Program Files (x86)\Browser Good
2015-02-05 12:00 - 2015-02-05 13:00 - 05070512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-02-05 09:44 - 2015-02-14 14:01 - 00000000 ____D () C:\Program Files (x86)\Adblock for Gmail
2015-02-05 09:44 - 2015-02-05 09:44 - 00000000 ____D () C:\ProgramData\2937277774088153005
2015-02-05 09:44 - 2015-02-05 09:44 - 00000000 ____D () C:\Program Files (x86)\SooftCooup
2015-02-05 09:44 - 2015-02-05 09:44 - 00000000 ____D () C:\Program Files (x86)\FineeDealSaOeft
2015-02-04 23:39 - 2015-02-04 23:39 - 00000000 ____D () C:\ProgramData\SharkManCoupon
2015-02-04 09:20 - 2015-02-12 20:56 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2015-02-04 09:20 - 2015-02-12 15:07 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2015-02-04 09:20 - 2015-02-11 18:47 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2015-02-04 09:20 - 2015-02-11 18:27 - 00002826 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2015-02-04 09:20 - 2015-02-11 18:27 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2015-02-04 09:20 - 2015-02-11 18:27 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2015-02-04 09:20 - 2015-02-11 16:08 - 00001049 _____ () C:\Users\Masa\Desktop\AnyProtect.lnk
2015-02-04 09:20 - 2015-02-04 09:20 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
2015-02-04 09:18 - 2015-02-09 18:10 - 00000000 ____D () C:\Users\Masa\AppData\Local\ConvertAd
2015-02-04 09:18 - 2015-02-04 09:20 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
2015-02-04 09:18 - 2015-02-04 09:18 - 00613057 _____ (CMI Limited) C:\Users\Masa\AppData\Local\nsa6E49.tmp
2015-02-04 09:18 - 2015-02-04 09:18 - 00000000 __SHD () C:\Users\Masa\AppData\Roaming\AnyProtectEx
2015-02-04 09:17 - 2015-02-14 13:44 - 00000422 _____ () C:\Windows\Tasks\BlockAndSurf Update.job
2015-02-04 09:17 - 2015-02-14 13:41 - 00002201 _____ () C:\Windows\patsearch.bin
2015-02-04 09:17 - 2015-02-04 09:17 - 00050800 _____ () C:\Windows\system32\Drivers\webinstrNHKT.sys
2015-02-04 09:17 - 2015-02-04 09:17 - 00003068 _____ () C:\Windows\System32\Tasks\BlockAndSurf Update
2015-02-04 09:17 - 2015-02-04 09:17 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf
2015-02-04 09:17 - 2015-02-04 09:17 - 00000000 ____D () C:\Program Files (x86)\ver3BlockAndSurf
2015-02-03 09:57 - 2015-02-03 09:57 - 00000000 ____D () C:\ProgramData\CouponFactory
2015-02-03 09:45 - 2015-02-14 13:42 - 00002450 _____ () C:\Windows\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-5_user.job
2015-02-03 09:45 - 2015-02-03 09:45 - 00005480 _____ () C:\Windows\System32\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-5
2015-02-03 09:44 - 2015-02-14 13:44 - 00003142 _____ () C:\Windows\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-1-6.job
2015-02-03 09:44 - 2015-02-14 13:42 - 00004498 _____ () C:\Windows\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-4.job
2015-02-03 09:44 - 2015-02-14 13:42 - 00002450 _____ () C:\Windows\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-5.job
2015-02-03 09:44 - 2015-02-14 13:41 - 00003478 _____ () C:\Windows\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-1-7.job
2015-02-03 09:44 - 2015-02-03 09:44 - 00007528 _____ () C:\Windows\System32\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-4
2015-02-03 09:44 - 2015-02-03 09:44 - 00006508 _____ () C:\Windows\System32\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-1-7
2015-02-03 09:44 - 2015-02-03 09:44 - 00006170 _____ () C:\Windows\System32\Tasks\72548802-a28d-42ac-b6e0-97de66a49026-1-6
2015-02-03 09:43 - 2015-02-03 22:47 - 00000000 ____D () C:\Users\Masa\AppData\Local\avaxvavya
2015-02-03 09:43 - 2015-02-03 09:45 - 00000000 ____D () C:\Program Files (x86)\PlusHD Cinema 2.1cV02.02
2015-02-03 09:43 - 2015-02-03 09:43 - 00003472 _____ () C:\Windows\System32\Tasks\avaxvavya
2015-02-03 09:43 - 2015-02-03 09:43 - 00000863 _____ () C:\Users\Masa\Desktop\3D BubbleSound.lnk
2015-02-03 09:43 - 2015-02-03 09:43 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0
2015-02-03 09:43 - 2015-02-03 09:43 - 00000000 ____D () C:\Program Files\BubbleSound
2015-02-03 09:42 - 2015-02-03 09:43 - 00000000 ____D () C:\Users\Masa\AppData\Local\SearchProtect
2015-02-03 09:42 - 2015-02-03 09:43 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2015-02-02 10:53 - 2015-02-11 20:00 - 00000000 ____D () C:\Users\Masa\AppData\Local\gmsd_de_174
2015-02-02 10:53 - 2015-02-09 17:32 - 00004928 _____ () C:\Windows\SysWOW64\OptimizerMonitor.ini
2015-02-02 10:53 - 2015-02-09 17:32 - 00002712 _____ () C:\Windows\SysWOW64\OptimizerMonitorOff.ini
2015-02-02 10:53 - 2015-02-09 17:32 - 00002712 _____ () C:\Windows\system32\OptimizerMonitorOff.ini
2015-02-02 10:53 - 2015-02-09 16:25 - 00000000 ____D () C:\Program Files (x86)\IGS
2015-02-02 10:53 - 2015-02-04 20:19 - 00318624 _____ (OM Inc.) C:\Windows\SysWOW64\OptimizerMonitor.dll
2015-02-02 10:53 - 2015-02-02 10:53 - 00000000 ____D () C:\Users\Masa\AppData\Local\SmartWeb
2015-02-02 10:53 - 2015-02-02 10:53 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_174
2015-02-02 10:52 - 2015-02-09 18:02 - 00000000 ____D () C:\Users\Masa\AppData\Local\igs
2015-01-30 13:42 - 2015-01-30 13:42 - 00000000 ____D () C:\ProgramData\Uniblue
2015-01-30 07:27 - 2015-02-14 13:42 - 00004474 _____ () C:\Windows\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-4.job
2015-01-30 07:27 - 2015-02-14 13:41 - 00003428 _____ () C:\Windows\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-1.job
2015-01-30 07:27 - 2015-02-14 13:41 - 00002426 _____ () C:\Windows\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-5.job
2015-01-30 07:27 - 2015-02-14 13:41 - 00002090 _____ () C:\Windows\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-2.job
2015-01-30 07:27 - 2015-02-14 13:41 - 00000944 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-01-30 07:27 - 2015-02-13 15:49 - 00000948 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-01-30 07:27 - 2015-02-03 09:44 - 00003946 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-01-30 07:27 - 2015-02-03 09:44 - 00003692 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-01-30 07:27 - 2015-01-30 07:27 - 00007504 _____ () C:\Windows\System32\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-4
2015-01-30 07:27 - 2015-01-30 07:27 - 00006458 _____ () C:\Windows\System32\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-1
2015-01-30 07:27 - 2015-01-30 07:27 - 00005456 _____ () C:\Windows\System32\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-5
2015-01-30 07:27 - 2015-01-30 07:27 - 00005120 _____ () C:\Windows\System32\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-2
2015-01-30 07:27 - 2015-01-30 07:27 - 00000000 __SHD () C:\AI_RecycleBin
2015-01-30 07:27 - 2015-01-30 07:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WIntEnhance
2015-01-30 07:27 - 2015-01-30 07:27 - 00000000 ____D () C:\Program Files (x86)\Wajam
2015-01-30 07:26 - 2015-02-14 13:48 - 00000338 _____ () C:\Windows\Tasks\dsmonitor.job
2015-01-30 07:26 - 2015-02-14 13:43 - 00002092 _____ () C:\Windows\Tasks\e357ac9d-de4e-4dcd-943c-3988a945bd48-10_user.job
2015-01-30 07:26 - 2015-02-14 13:42 - 00000278 _____ () C:\Windows\Tasks\DriverScanner.job
2015-01-30 07:26 - 2015-01-30 07:27 - 00000000 ____D () C:\Program Files (x86)\WIntEnhance
2015-01-30 07:26 - 2015-01-30 07:27 - 00000000 ____D () C:\Program Files (x86)\MedPLyerV1.2
2015-01-30 07:26 - 2015-01-30 07:26 - 00002516 _____ () C:\Windows\System32\Tasks\DriverScanner
2015-01-30 07:26 - 2015-01-30 07:26 - 00002508 _____ () C:\Windows\System32\Tasks\dsmonitor
2015-01-30 07:26 - 2015-01-30 07:26 - 00001923 _____ () C:\Users\UpdatusUser\Desktop\MagnoPlayer.lnk
2015-01-30 07:26 - 2015-01-30 07:26 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Uniblue
2015-01-30 07:26 - 2015-01-30 07:26 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Pro PC Cleaner
2015-01-30 07:26 - 2015-01-30 07:26 - 00000000 ____D () C:\Users\Masa\AppData\Local\wincheck
2015-01-30 07:26 - 2015-01-30 07:26 - 00000000 ____D () C:\Users\Masa\AppData\Local\magnoplayer
2015-01-30 07:26 - 2015-01-30 07:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2015-01-30 07:26 - 2015-01-30 07:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MagnoPlayer
2015-01-30 07:26 - 2015-01-30 07:26 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2015-01-30 07:26 - 2015-01-30 07:26 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2015-01-30 07:25 - 2015-01-30 07:26 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\VOPackage
2015-01-30 07:25 - 2015-01-30 07:26 - 00000000 ____D () C:\Program Files (x86)\MagnoPlayer
2015-01-30 07:25 - 2015-01-30 07:25 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2015-01-30 07:25 - 2015-01-30 07:25 - 00000000 ____D () C:\Users\Masa\AppData\Local\Weather_Protector_LLC
2015-01-30 07:24 - 2015-02-09 17:13 - 00000000 ____D () C:\Users\Masa\AppData\Local\StormWatch
2015-01-30 07:24 - 2015-01-30 07:24 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
2015-01-30 07:24 - 2015-01-30 07:24 - 00000000 ____D () C:\Program Files (x86)\StormWatch
2015-01-30 07:23 - 2015-01-30 07:23 - 00000000 ____D () C:\Users\Masa\AppData\Local\ContextTrue
2015-01-30 07:22 - 2015-01-30 07:22 - 01114664 _____ () C:\Users\Masa\Downloads\Installation(1).exe
2015-01-30 07:21 - 2015-01-30 07:21 - 01114664 _____ () C:\Users\Masa\Downloads\Installation.exe
2015-01-27 12:06 - 2015-01-27 12:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-22 18:00 - 2015-01-22 18:00 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\MPC-HC
2015-01-20 17:27 - 2015-01-20 17:27 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\EurekaLog

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 14:05 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-14 14:05 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-14 14:00 - 2014-06-14 18:33 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 13:59 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-02-14 13:54 - 2014-06-10 09:51 - 01119338 _____ () C:\Windows\WindowsUpdate.log
2015-02-14 13:50 - 2015-01-14 10:05 - 00000000 ____D () C:\ProgramData\28c34e92bb2ca7ad
2015-02-14 13:42 - 2014-06-10 10:29 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2015-02-14 13:41 - 2014-06-14 17:31 - 00038679 _____ () C:\Windows\setupact.log
2015-02-14 13:41 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 19:28 - 2014-06-13 15:23 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\uTorrent
2015-02-13 19:26 - 2014-11-06 16:19 - 00000000 ____D () C:\Users\Masa\Documents\FIFA 14
2015-02-13 19:16 - 2014-11-25 22:07 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4164922102-3460450381-1936108056-1000UA.job
2015-02-13 16:08 - 2014-11-22 16:48 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\Skype
2015-02-13 16:08 - 2014-11-18 12:14 - 00000000 ____D () C:\Users\Masa\AppData\Roaming\ALDITALKVerbindungsassistent
2015-02-13 15:06 - 2011-02-04 18:38 - 00740252 _____ () C:\Windows\system32\perfh015.dat
2015-02-13 15:06 - 2011-02-04 18:38 - 00155794 _____ () C:\Windows\system32\perfc015.dat
2015-02-13 15:06 - 2009-07-14 06:13 - 01668794 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-12 15:40 - 2009-07-14 05:45 - 00360312 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 15:38 - 2014-12-13 09:51 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 15:38 - 2014-06-17 13:27 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 15:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-12 15:18 - 2014-11-06 14:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-06 23:05 - 2014-06-16 21:30 - 00023666 _____ () C:\Windows\PFRO.log
2015-02-06 11:51 - 2014-06-10 10:28 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2015-02-06 11:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2015-02-06 10:36 - 2014-06-13 15:24 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-05 13:00 - 2014-06-14 18:33 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 13:00 - 2014-06-14 18:33 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-05 13:00 - 2014-06-14 18:33 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-01 22:16 - 2014-11-25 22:07 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4164922102-3460450381-1936108056-1000Core.job
2015-02-01 13:40 - 2009-07-14 06:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-30 07:26 - 2014-12-25 19:08 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-01-28 11:23 - 2014-06-13 15:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-20 17:27 - 2014-06-13 15:17 - 00000000 ____D () C:\Program Files (x86)\NapiProjekt

==================== Files in the root of some directories =======

2014-12-25 19:08 - 2014-12-25 19:08 - 1990120 _____ (Qwerty) C:\Users\Masa\AppData\Roaming\HBTTGY.exe
2014-12-25 19:09 - 2014-12-25 19:09 - 1351144 _____ (Qwerty) C:\Users\Masa\AppData\Roaming\OKXJLUU.exe
2015-02-06 11:36 - 2015-02-13 15:36 - 0000065 _____ () C:\Users\Masa\AppData\Roaming\WB.CFG
2015-02-04 09:18 - 2015-02-04 09:18 - 0613057 _____ (CMI Limited) C:\Users\Masa\AppData\Local\nsa6E49.tmp
2015-02-11 16:05 - 2015-02-11 16:05 - 0613057 _____ (CMI Limited) C:\Users\Masa\AppData\Local\nsiDDBD.tmp
2014-12-25 19:09 - 2014-12-25 19:22 - 0000003 _____ () C:\Users\Masa\AppData\Local\proxy.log

Some content of TEMP:
====================
C:\Users\Masa\AppData\Local\Temp\191306.exe.exe
C:\Users\Masa\AppData\Local\Temp\25043.exe
C:\Users\Masa\AppData\Local\Temp\5CE7C5FD-F8FF-B361-810D-C236A69389D1.exe
C:\Users\Masa\AppData\Local\Temp\68E1EC45-9CD3-2699-407A-61F1BCFF66D1.dll
C:\Users\Masa\AppData\Local\Temp\68E1EC45-9CD3-2699-407A-61F1BCFF66D1.exe
C:\Users\Masa\AppData\Local\Temp\BackupSetup.exe
C:\Users\Masa\AppData\Local\Temp\i42A.tmp.exe
C:\Users\Masa\AppData\Local\Temp\optprosetup.exe
C:\Users\Masa\AppData\Local\Temp\Runner2.exe
C:\Users\Masa\AppData\Local\Temp\Runner4.exe
C:\Users\Masa\AppData\Local\Temp\SpOrder.dll
C:\Users\Masa\AppData\Local\Temp\t.dll
C:\Users\Masa\AppData\Local\Temp\ttv.exe
C:\Users\Masa\AppData\Local\Temp\Uninstall.exe
C:\Users\Masa\AppData\Local\Temp\utt491A.tmp.exe
C:\Users\Masa\AppData\Local\Temp\utt79BF.tmp.exe
C:\Users\Masa\AppData\Local\Temp\uttB979.tmp.exe
C:\Users\Masa\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 22:55

==================== End Of Log ============================