Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2015 01
Ran by Agusia (ATTENTION: The logged in user is not administrator) on AGA on 20-02-2015 19:08:33
Running from C:\Users\Agusia\Desktop
Loaded Profiles: Aga & Agusia (Available profiles: Aga & Agusia)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

Failed to access process -> smss.exe
Failed to access process -> csrss.exe
Failed to access process -> csrss.exe
Failed to access process -> wininit.exe
Failed to access process -> winlogon.exe
Failed to access process -> services.exe
Failed to access process -> lsass.exe
Failed to access process -> lsm.exe
Failed to access process -> svchost.exe
Failed to access process -> nvvsvc.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> SbieSvc.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> wlanext.exe
Failed to access process -> conhost.exe
Failed to access process -> spoolsv.exe
Failed to access process -> NvXDSync.exe
Failed to access process -> nvvsvc.exe
Failed to access process -> armsvc.exe
Failed to access process -> avp.exe
Failed to access process -> btwdins.exe
Failed to access process -> CompassGPSDBService.exe
Failed to access process -> EvtEng.exe
Failed to access process -> fbguard.exe
Failed to access process -> fbserver.exe
Failed to access process -> GenieUpdaterService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Users\Agusia\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
Failed to access process -> svchost.exe
Failed to access process -> HPSIsvc.exe
Failed to access process -> HWDeviceService64.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(K2T.eu, Kaworu) C:\Program Files\K2T\WTW\wtw.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE
Failed to access process -> svchost.exe
Failed to access process -> NvNetworkService.exe
(Flexera Software, Inc.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
Failed to access process -> svchost.exe
Failed to access process -> RegSrvc.exe
Failed to access process -> dbeng10.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> unsecapp.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> SHS.SAT.Common.Ipc.ServiceHost.exe
Failed to access process -> USBVaccine.exe
Failed to access process -> sftvsa.exe
Failed to access process -> sftlist.exe
Failed to access process -> svchost.exe
Failed to access process -> SearchIndexer.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> wmpnetwk.exe
Failed to access process -> CVHSVC.EXE
() Q:\140066.plk\Office14\MSOSYNC.EXE
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
() C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\OFFICEVIRT.EXE
Failed to access process -> dllhost.exe
Failed to access process -> LMS.exe
Failed to access process -> RtLEDService.exe
Failed to access process -> RtLED.exe
Failed to access process -> UNS.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
Failed to access process -> dllhost.exe
Failed to access process -> taskhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11697768 2010-12-14] (Realtek Semiconductor)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [789920 2011-09-07] (Lenovo)
HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-09-07] (Lenovo)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-11-02] (Intel(R) Corporation)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2011-09-07] (Lenovo(beijing) Limited)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9769888 2011-09-07] (Lenovo (Beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3023600 2013-02-25] (Synaptics Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [313656 2013-04-18] (Hewlett-Packard Company)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\Run: [SkyDrive] => C:\Users\Agusia\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [277672 2014-09-25] (Microsoft Corporation)
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-07] (Samsung)
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [784904 2014-10-14] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\Run: [WTW] => C:\Program Files\K2T\WTW\wtw.exe [2945536 2014-12-26] (K2T.eu, Kaworu)
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [3207912 2013-07-23] (Microsoft Corporation)
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [324976 2010-05-21] (Flexera Software, Inc.)
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\MountPoints2: {07b7dddc-64c2-11e3-83a2-ec55f9e043b6} - G:\Autorun.exe
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\MountPoints2: {2037a2b1-d6c8-11e2-a83f-ec55f9e043b6} - H:\Autorun.exe
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\MountPoints2: {6796b075-a1eb-11e1-a14c-ec55f9e043b6} - E:\SISetup.exe
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\MountPoints2: {68c4fc61-3ca1-11e3-be94-ec55f9e043b6} - G:\AutoRun.exe
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\MountPoints2: {68c4fc70-3ca1-11e3-be94-ec55f9e043b6} - E:\AutoRun.exe
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\MountPoints2: {9a5c39d8-23ea-11e4-8f48-ec55f9e043b6} - E:\AutoRun.exe
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\...\MountPoints2: {ee18ddb6-f25e-11e3-9f3a-ec55f9e043b6} - E:\AutoRun.exe
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Inspire Updater.lnk
ShortcutTarget: Inspire Updater.lnk -> C:\Program Files (x86)\Starkey Laboratories\Updater\ServiceManager.exe (Starkey Laboratories, Inc)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll ()
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Agusia\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Agusia\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Agusia\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Agusia\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
HKU\S-1-5-21-2403310642-1225698830-1158638626-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
URLSearchHook: [S-1-5-21-2403310642-1225698830-1158638626-1001] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-2403310642-1225698830-1158638626-1005 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2403310642-1225698830-1158638626-1005 -> {61AED317-8D0D-41E8-8354-044C0D386EE3} URL = http://pl.wikipedia.org/w/index.php?title=Specjalna:Szukaj&search={searchTerms}
SearchScopes: HKU\S-1-5-21-2403310642-1225698830-1158638626-1005 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2403310642-1225698830-1158638626-1005 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKU\S-1-5-21-2403310642-1225698830-1158638626-1005 -> {A4E1B6DB-D1BA-4E7D-AE9F-8D5F2E9DB873} URL = http://www.allegro.pl/search.php?sg=0&string={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.11.2 -> C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @sony.com/ReaderDesktop -> C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF SearchPlugin: C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\searchplugins\googlemaps.xml
FF SearchPlugin: C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\searchplugins\szukaj-chomikuj.xml
FF Extension: Classic Theme Restorer - C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-05-20]
FF Extension: GlassMyFox - C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\Extensions\GlassMyFox@ArisT2_Noia4dev.xpi [2014-05-20]
FF Extension: Noia Fox options - C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\Extensions\NoiaFoxoption@davidvincent.tld.xpi [2014-05-20]
FF Extension: Tab Scope - C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\Extensions\tabscope@xuldev.org.xpi [2014-05-20]
FF Extension: Tab Scope Tweaker - C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\Extensions\tabScopeTweaker@infocatcher.xpi [2014-05-20]
FF Extension: Noia Fox - C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi [2014-05-20]
FF Extension: Adblock Plus - C:\Users\Agusia\AppData\Roaming\Mozilla\Firefox\Profiles\qqsxtuo2.default-1400611712706\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-20]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2012-05-17]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-05-25]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013-07-27]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Kaspersky виртуелна тастатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013-07-27]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Gevaarlijke websiteblokkering - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013-07-27]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013-07-27]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013-07-27]
StartMenuInternet: FIREFOX.EXE - C:\Anton\Programy\Firefox\firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-29]
CHR Extension: (Google Docs) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-29]
CHR Extension: (Google Drive) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-29]
CHR Extension: (YouTube) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-29]
CHR Extension: (µBlock) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2015-02-19]
CHR Extension: (Google Search) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-29]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-10-29]
CHR Extension: (Google Sheets) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-29]
CHR Extension: (Kaspersky Protection) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2014-10-29]
CHR Extension: (Glossy Blue) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nheaocaplknjkpcnbadlgfpdfjaabiml [2014-11-01]
CHR Extension: (Google Wallet) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-29]
CHR Extension: (Gmail) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-29]
CHR Extension: (Anti-Banner) - C:\Users\Agusia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-10-29]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2013-05-03]
CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2013-05-03]

Opera: 
=======
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [956192 2011-02-15] (Broadcom Corporation.)
R2 Compass GPS DB Service; C:\Anton\Programy\Widex\Compass GPS\CompassGPSDBService.exe [31744 2014-11-21] (WIDEX A/S) [File not signed]
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe [81920 2007-09-03] (FirebirdSQL Project) [File not signed]
R2 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe [2002944 2007-09-03] (FirebirdSQL Project) [File not signed]
R2 GenieUpdaterService; C:\Program Files (x86)\Oticon\Genie\GenieUpdater\GenieUpdaterService.exe [17664 2014-08-14] (Oticon A/S)
S3 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [File not signed]
S2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [174592 2012-12-04] (HP) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S3 Inspire Updater Service; C:\Program Files (x86)\Starkey Laboratories\Updater\WindowsService.exe [91648 2014-09-15] (Starkey Laboratories) [File not signed]
S3 InspireSupportService; C:\Anton\Programy\Starkey\Inspire OS\Starkey.InspireSupport.Service.exe [39936 2014-09-15] (Microsoft) [File not signed]
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 lxdoCATSCustConnectService; C:\windows\system32\spool\DRIVERS\x64\3\\lxdoserv.exe [28672 2007-07-17] (Lexmark International, Inc.)
S3 lxdo_device; C:\windows\system32\lxdocoms.exe [1039360 2007-09-20] ( )
S3 lxdo_device; C:\windows\SysWOW64\lxdocoms.exe [589824 2007-09-20] ( ) [File not signed]
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-11-02] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-02-20] (Electronic Arts)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S3 PrintNotify; C:\windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll [2675200 2012-07-25] (Microsoft Corporation) [File not signed]
R2 RtLedService; C:\Program Files\Realtek\RtLED\RtLEDService.exe [311296 2010-09-30] (Realtek Semiconductor Corp.) [File not signed]
R2 SAT IPC; C:\Anton\Programy\Connexx7\IPC\SHS.SAT.Common.Ipc.ServiceHost.exe [56136 2013-09-18] (SHS)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174600 2014-10-14] (Sandboxie Holdings, LLC)
S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-05-23] (Sony Corporation) [File not signed]
R3 SQLANYe_Cxx7SA10Service; C:\Anton\Programy\Connexx7\SQLAnywhere10\win32\dbeng10.exe [136568 2012-01-09] (iAnywhere Solutions, Inc.)
S3 UI Assistant Service; C:\Program Files (x86)\blueconnect\AssistantServices.exe [241664 2009-04-07] () [File not signed]
S3 UpdaterService; C:\Anton\Programy\Starkey\Inspire OS\InspireUpdaterSDK.exe [8192 2014-09-15] () [File not signed]
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 filter; C:\Windows\System32\drivers\bc02filt.sys [12896 2010-01-25] ()
S3 FsUsbExDisk; C:\windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-04-18] () [File not signed]
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [244736 2013-02-17] (Huawei Technologies Co., Ltd.)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-12-11] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [91008 2014-05-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628320 2014-05-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-12-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-27] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [177864 2015-02-17] (Kaspersky Lab ZAO)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-09-27] (Marvell Semiconductor, Inc.)
R3 PYCH_CoreDriver; C:\Windows\System32\drivers\PYCH_CoreDriver.sys [254976 2012-10-13] (Jungo)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8200552 2010-12-15] (Realtek Semiconductor Corp.)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-10-14] (Sandboxie Holdings, LLC)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2012-10-13] (Jungo)
U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 IAStorDataMgrSvc; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
U2 Oasis2Service; No ImagePath
U2 PCCarerServic; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 SoftwareService; No ImagePath
U2 Stereo Service; No ImagePath
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-20 18:53 - 2015-02-20 19:08 - 00031547 _____ () C:\Users\Agusia\Desktop\FRST.txt
2015-02-20 15:48 - 2015-02-20 15:49 - 00000000 ____D () C:\Users\Agusia\Desktop\LOGI
2015-02-20 08:18 - 2015-02-20 08:20 - 00000000 ____D () C:\Users\Agusia\Desktop\shexview-x64
2015-02-16 03:43 - 2015-02-16 03:43 - 1743792658 _____ () C:\windows\MEMORY.DMP
2015-02-16 00:58 - 2015-02-20 19:08 - 00000000 ____D () C:\FRST
2015-02-15 20:47 - 2015-02-20 18:48 - 02086912 _____ (Farbar) C:\Users\Agusia\Desktop\FRST64.exe
2015-02-11 23:15 - 2015-02-11 23:15 - 00003854 _____ () C:\Users\Agusia\AppData\Local\recently-used.xbel
2015-02-11 19:08 - 2015-02-11 20:17 - 00000000 ____D () C:\Users\Agusia\Documents\Sims 4 Studio
2015-02-11 19:07 - 2015-02-11 23:01 - 00000000 ____D () C:\Users\Agusia\AppData\Local\S4Studio
2015-02-06 22:36 - 2012-09-27 06:25 - 00052224 _____ () C:\windows\system32\HP1100SMs.dll
2015-02-06 22:36 - 2012-08-31 15:10 - 00350720 _____ () C:\windows\system32\mvhlewsi.DLL
2015-02-06 22:36 - 2012-08-31 15:03 - 01696256 _____ () C:\windows\system32\HP1100SM.EXE
2015-02-06 22:36 - 2012-08-31 15:03 - 00288768 _____ () C:\windows\system32\HP1100LM.DLL
2015-02-06 21:58 - 2015-02-06 21:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-02-06 21:55 - 2011-11-11 03:08 - 00126520 _____ (HP) C:\windows\system32\HPSIsvc.exe
2015-02-05 10:54 - 2015-02-05 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phonak
2015-02-05 10:43 - 2015-02-05 10:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My archive shortcuts
2015-02-05 10:43 - 2015-02-05 10:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inspire Updater
2015-02-05 10:41 - 2015-02-05 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Starkey Laboratories
2015-01-28 22:51 - 2015-01-28 22:51 - 00000000 ____D () C:\windows\SysWOW64\NV
2015-01-28 22:51 - 2015-01-28 22:51 - 00000000 ____D () C:\windows\system32\NV
2015-01-28 22:51 - 2015-01-28 22:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-01-28 22:48 - 2015-01-10 09:07 - 32102544 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 25459856 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 24765584 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 20465296 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 18566296 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 17250776 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 16009120 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 14115944 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 13295552 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 13210248 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 10774544 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 10714488 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 10274448 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys
2015-01-28 22:48 - 2015-01-10 09:07 - 03607184 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 03245712 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 02902456 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6434725.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6434725.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 00969360 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 00942736 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 00929424 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 00906384 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 00877488 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvumdshim.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 00353040 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 00305320 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll
2015-01-28 22:48 - 2015-01-10 09:07 - 00031376 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvpciflt.sys
2015-01-28 12:12 - 2015-02-20 08:08 - 00000000 ____D () C:\Users\Agusia\AppData\Roaming\HpUpdate
2015-01-26 14:03 - 2015-01-26 14:03 - 00000000 _____ () C:\Users\Agusia\Desktop\Nowy dokument tekstowy.txt
2015-01-22 17:38 - 2015-01-28 23:15 - 00001622 _____ () C:\Users\Agusia\Desktop\The Sims 4.lnk
2015-01-22 17:28 - 2015-01-22 17:29 - 00005734 _____ () C:\windows\DPINST.LOG
2015-01-22 17:27 - 2015-01-22 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Widex
2015-01-21 16:45 - 2015-01-21 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Theme Hospital

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-20 18:59 - 2012-05-17 09:01 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-02-20 18:58 - 2011-09-07 17:52 - 06704676 _____ () C:\FaceProv.log
2015-02-20 18:51 - 2012-07-13 19:37 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-02-20 18:35 - 2014-03-19 21:34 - 00000000 ____D () C:\Users\Agusia\Desktop\Temp
2015-02-20 18:34 - 2011-09-07 17:11 - 01152473 _____ () C:\windows\WindowsUpdate.log
2015-02-20 18:28 - 2014-10-29 21:31 - 00001048 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-20 17:22 - 2014-11-03 19:57 - 00000000 ____D () C:\Users\Aga\AppData\Roaming\PhotoScape
2015-02-20 17:22 - 2012-05-16 10:20 - 00082016 _____ () C:\Users\Aga\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-20 17:16 - 2012-05-19 20:56 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-20 16:56 - 2009-07-14 05:45 - 00028928 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-20 16:56 - 2009-07-14 05:45 - 00028928 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-20 16:19 - 2011-09-08 00:55 - 00741124 _____ () C:\windows\system32\perfh015.dat
2015-02-20 16:19 - 2011-09-08 00:55 - 00156408 _____ () C:\windows\system32\perfc015.dat
2015-02-20 16:19 - 2009-07-14 06:13 - 01672134 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-20 16:14 - 2013-10-06 14:09 - 00000000 ___RD () C:\Users\Aga\SkyDrive
2015-02-20 16:12 - 2014-10-29 21:31 - 00001044 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-20 16:12 - 2011-09-07 17:56 - 00936951 _____ () C:\windows\system32\fastboot.set
2015-02-20 16:11 - 2014-11-12 22:05 - 00010710 _____ () C:\windows\setupact.log
2015-02-20 16:11 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-20 16:10 - 2012-05-17 15:30 - 00031496 _____ () C:\ProgramData\hpzinstall.log
2015-02-20 16:07 - 2012-07-14 20:11 - 00000000 ____D () C:\ProgramData\eMule
2015-02-20 15:54 - 2009-07-14 05:45 - 00313080 _____ () C:\windows\system32\FNTCACHE.DAT
2015-02-20 15:53 - 2014-11-12 22:04 - 00005308 _____ () C:\windows\PFRO.log
2015-02-20 15:52 - 2013-08-03 14:49 - 00000000 ____D () C:\Users\Agusia\AppData\Roaming\SoftGrid Client
2015-02-20 13:43 - 2013-08-05 10:37 - 00082016 _____ () C:\Users\Agusia\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-20 08:59 - 2013-07-17 20:53 - 00000000 ____D () C:\Users\Aga\AppData\Local\LG Electronics
2015-02-20 08:58 - 2015-01-19 13:57 - 00000000 ____D () C:\ProgramData\Programer
2015-02-20 08:55 - 2014-04-22 16:50 - 00000000 ____D () C:\Program Files (x86)\PIT Format 2013
2015-02-17 23:07 - 2012-05-17 06:35 - 00000000 ___RD () C:\Users\Aga\Documents\Firma
2015-02-17 18:58 - 2015-01-15 09:09 - 00000000 ____D () C:\Users\Agusia\Desktop\The Sims 4_Temp
2015-02-17 16:26 - 2013-05-03 07:09 - 00177864 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kneps.sys
2015-02-17 11:42 - 2013-08-03 14:33 - 00000000 ___RD () C:\Users\Agusia\Desktop\Udostępnione
2015-02-17 00:22 - 2013-08-03 15:15 - 00000000 ____D () C:\Users\Agusia\AppData\Roaming\Adobe
2015-02-16 07:34 - 2013-10-13 10:31 - 00001832 _____ () C:\windows\Sandboxie.ini
2015-02-16 03:43 - 2013-09-04 16:46 - 00000000 ____D () C:\windows\Minidump
2015-02-15 19:17 - 2012-05-19 20:57 - 00000000 ____D () C:\ProgramData\Origin
2015-02-11 23:16 - 2014-10-02 18:35 - 00000000 ____D () C:\Users\Agusia\.gimp-2.8
2015-02-11 20:12 - 2014-10-02 20:35 - 00000000 ____D () C:\Users\Agusia\AppData\Local\gtk-2.0
2015-02-11 16:04 - 2012-05-17 16:00 - 00000900 _____ () C:\windows\amhm.ini
2015-02-10 13:14 - 2012-05-17 15:30 - 00250273 _____ () C:\windows\hpwins23.dat
2015-02-10 13:13 - 2009-07-14 03:34 - 00000438 _____ () C:\windows\win.ini
2015-02-09 15:25 - 2013-08-03 14:33 - 00000000 ____D () C:\Users\Agusia\Desktop\Temp_skan
2015-02-07 15:54 - 2012-05-16 10:22 - 00000000 ____D () C:\Users\Aga\AppData\Roaming\SoftGrid Client
2015-02-07 15:43 - 2012-05-21 11:34 - 00000000 ____D () C:\ProgramData\Lx_cats
2015-02-06 21:55 - 2012-05-17 16:01 - 00000000 ____D () C:\Program Files\HP
2015-02-06 20:34 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\NDF
2015-02-06 08:35 - 2012-05-17 20:51 - 00001302 _____ () C:\windows\connexx.ini
2015-02-06 08:35 - 2012-05-17 20:51 - 00001196 _____ () C:\windows\unity.ini
2015-02-05 20:59 - 2012-05-17 09:01 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 20:59 - 2012-05-17 09:01 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-05 11:01 - 2012-05-16 10:19 - 00000000 ___RD () C:\Users\Aga\Moje obrazy
2015-02-05 10:56 - 2013-08-03 15:21 - 00000000 ___RD () C:\Users\Agusia\Skróty
2015-02-05 10:49 - 2013-11-20 13:37 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-05 10:44 - 2012-05-16 10:19 - 00000000 ___RD () C:\Users\Aga\Pulpit
2015-02-05 10:43 - 2012-05-17 21:52 - 00000000 ____D () C:\Program Files (x86)\Starkey Laboratories
2015-02-05 10:40 - 2012-05-18 08:53 - 00000000 ____D () C:\Users\Aga\AppData\Local\Starkey Laboratories
2015-02-05 10:34 - 2012-05-17 21:48 - 00053629 _____ () C:\ProgramData\InstallOnDemand.xml
2015-01-28 22:51 - 2011-09-07 17:23 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-28 22:51 - 2011-09-07 17:23 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-01-28 22:51 - 2011-09-07 17:23 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-01-28 22:50 - 2013-05-21 17:14 - 00000000 ____D () C:\TEMP
2015-01-28 09:27 - 2012-05-17 15:30 - 00000000 ____D () C:\ProgramData\HP
2015-01-22 11:05 - 2012-05-16 10:19 - 00000000 ____D () C:\Users\Aga
2015-01-22 09:35 - 2012-05-16 10:22 - 01644740 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-01-22 09:27 - 2013-07-19 14:59 - 00000000 ____D () C:\windows\system32\MRT
2015-01-22 08:33 - 2012-05-18 17:58 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-01-21 16:45 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-01-21 16:44 - 2012-08-14 10:37 - 00000000 ____D () C:\Program Files (x86)\Origin Games

==================== Files in the root of some directories =======

2013-11-13 23:33 - 2013-11-13 23:34 - 0009657 _____ () C:\Users\Agusia\AppData\Roaming\hiselection1.crp
2013-11-13 23:33 - 2013-11-13 23:34 - 0009657 _____ () C:\Users\Agusia\AppData\Roaming\hiselection4.crp
2013-09-20 09:11 - 2014-08-22 09:08 - 0043008 _____ () C:\Users\Agusia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-02-11 23:15 - 2015-02-11 23:15 - 0003854 _____ () C:\Users\Agusia\AppData\Local\recently-used.xbel
2012-05-17 15:30 - 2015-02-20 16:10 - 0031496 _____ () C:\ProgramData\hpzinstall.log
2012-05-17 21:48 - 2015-02-05 10:34 - 0053629 _____ () C:\ProgramData\InstallOnDemand.xml
2012-06-18 13:14 - 2014-07-29 19:13 - 0000912 _____ () C:\ProgramData\lxdo.log
2012-05-17 20:22 - 2012-05-17 20:22 - 0000120 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2013-11-20 13:56 - 2014-05-12 12:59 - 0000369 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2013-12-05 18:49 - 2013-12-05 18:49 - 0000268 ___RH () C:\ProgramData\Perl
2013-12-05 18:50 - 2013-12-05 18:50 - 0000268 ___RH () C:\ProgramData\Phaser
2013-12-05 18:49 - 2013-12-05 18:49 - 0000268 ___RH () C:\ProgramData\Piano
2013-12-05 18:47 - 2013-12-05 18:49 - 0000020 ____H () C:\ProgramData\PKP_DLeo.DAT
2013-12-05 18:50 - 2013-12-05 18:50 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2013-12-05 18:49 - 2014-04-17 08:58 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2013-12-05 18:49 - 2013-12-05 18:55 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT
2013-12-05 18:47 - 2013-12-05 18:49 - 0000012 ___RH () C:\ProgramData\Podcasting
2013-12-05 18:50 - 2013-12-05 18:50 - 0000012 ___RH () C:\ProgramData\Pop Kit
2013-12-05 18:49 - 2013-12-05 18:49 - 0000012 ___RH () C:\ProgramData\Printer Icons
2014-02-25 15:58 - 2014-02-25 15:58 - 0010190 _____ () C:\ProgramData\regid.1996-10.com.phonak_CE1DCF85-DFD3-440E-92CC-63DBB4CEC6D3.swidtag
2013-12-05 18:47 - 2013-12-05 18:47 - 0000012 ___RH () C:\ProgramData\Screen Savers
2012-08-01 21:35 - 2012-08-01 21:35 - 6033408 _____ () C:\ProgramData\SPL680F.tmp
2014-12-26 22:22 - 2014-12-26 22:22 - 0003584 _____ () C:\ProgramData\wtwLicensing.db

Some content of TEMP:
====================
C:\Users\Aga\AppData\Local\Temp\siuninst.exe
C:\Users\Agusia\AppData\Local\Temp\SandboxieInstall.exe
C:\Users\Agusia\AppData\Local\Temp\wtw-update.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================