Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-03-2015 03
Ran by yammo.it (administrator) on WIN8 on 09-03-2015 11:09:34
Running from C:\Users\yammo.it\Desktop\FRST
Loaded Profiles: yammo.it (Available profiles: yammo.it & giuseppe)
Platform: Windows 8 (X64) OS Language: Italiano (Italia)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\BlockAndSurf Corp\BlockAndSurf158.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(GenTechnologies Apps, LLC) C:\ProgramData\MovieMode\up\2.6.78\MovieModeService.exe
() C:\Program Files (x86)\Chiavetta Internet Olicard 200\BackgroundService\ServiceManager.exe
() C:\Program Files (x86)\SoftwareUpdater\UpdaterService.exe
(TorchMedia Inc.) C:\Users\yammo.it\AppData\Local\Torch\Update\TorchCrashHandler.exe
(AVG) C:\Program Files (x86)\AVG PC TuneUp 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe
() C:\Users\yammo.it\AppData\Roaming\VOPackage\VOsrv.exe
(Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
() C:\Program Files (x86)\BlockAndSurf Corp\BlockAndSurf_wd.exe
(AVG) C:\Program Files (x86)\AVG PC TuneUp 2014\TuneUpUtilitiesApp64.exe
(GenTechnologies Apps, LLC) C:\ProgramData\MovieMode\up\2.6.78\MovieMode.exe
(GenTechnologies Apps, LLC) C:\ProgramData\MovieMode\up\2.6.78\MovieMode64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Users\yammo.it\AppData\Local\fst_it_84\upfst_it_84.exe
() C:\Users\yammo.it\AppData\Local\fst_it_148\upfst_it_148.exe
(Pokki) C:\Users\yammo.it\AppData\Local\Pokki\Engine\pokki.exe
(Revizer) C:\Program Files (x86)\BlockAndSurf Corp\BlockNSurf.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
() C:\Program Files (x86)\PricePeep\PricePeepUpdater.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Chiavetta Internet Olicard 200\BackgroundService\ModemListener.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\fst_it_84\fst_it_84.exe
() C:\Program Files (x86)\fst_it_148\fst_it_148.exe
(Pokki) C:\Users\yammo.it\AppData\Local\Pokki\Engine\pokki.exe
(Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [379904 2013-01-10] (IVT Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [384800 2012-12-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Sepang Olivetti ModemListener] => C:\Program Files (x86)\Chiavetta Internet Olicard 200\BackgroundService\ModemListener.exe [102400 2011-06-20] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [fst_it_84] => C:\Program Files (x86)\fst_it_84\fst_it_84.exe [3985920 2014-03-19] ()
HKLM-x32\...\Run: [fst_it_148] => C:\Program Files (x86)\fst_it_148\fst_it_148.exe [3981304 2014-06-17] ()
HKLM-x32\...\RunOnce: [upfst_it_84.exe] => C:\Users\yammo.it\AppData\Local\fst_it_84\upfst_it_84.exe [3264512 2014-03-19] ()
HKLM-x32\...\RunOnce: [upfst_it_148.exe] => C:\Users\yammo.it\AppData\Local\fst_it_148\upfst_it_148.exe [3341280 2014-06-17] ()
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [Facebook Update] => C:\Users\yammo.it\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-01-30] (Facebook Inc.)
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [iLivid] => C:\Users\yammo.it\AppData\Local\iLivid\iLivid.exe [7307776 2014-02-12] (Bandoo Media Inc.)
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3402376 2012-03-03] (Electronic Arts)
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [PC Speed Maximizer] => C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe [134456 2013-03-09] (Smart PC Solutions)
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [BlockNSurf] => C:\Program Files (x86)\BlockAndSurf Corp\BlockNSurf.exe [104448 2014-04-02] (Revizer)
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [contextfr] => C:\Users\yammo.it\AppData\Local\Context2pro\contextfr.exe [545792 2013-08-26] ()
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [conadvanced] => C:\Users\yammo.it\AppData\Local\Context2pro\conadvanced.exe [573952 2013-08-26] ()
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [contextprod] => C:\Users\yammo.it\AppData\Local\Context2pro\contextprod.exe [573952 2013-08-26] ()
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Run: [lollipop_03051521] => c:\users\yammo.it\appdata\local\lollipop\lollipop_03051521.exe [4448768 2015-03-05] (tamponnais)
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\MountPoints2: {d9f3b8b7-5779-11e3-be67-8056f2259d94} - "F:\Autorun.exe" 
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\MountPoints2: {e42f726a-9280-11e3-be99-9cb6544452dd} - "D:\AutoRun.exe" 
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\MountPoints2: {e42f729e-9280-11e3-be99-9cb6544452dd} - "D:\AutoRun.exe" 
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\MountPoints2: {e42f72c9-9280-11e3-be99-9cb6544452dd} - "D:\AutoRun.exe" 
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\MountPoints2: {e42f7305-9280-11e3-be99-9cb6544452dd} - "D:\AutoRun.exe" 
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] 
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\yammo.it\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\yammo.it\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PricePeepUpdater.lnk
ShortcutTarget: PricePeepUpdater.lnk -> C:\Program Files (x86)\PricePeep\PricePeepUpdater.exe ()
HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll [489984 2014-05-19] () <===== ATTENTION
HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll [664576 2014-05-19] () <===== ATTENTION
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-4165106140-1766778721-1585055742-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-4165106140-1766778721-1585055742-1001] => http=127.0.0.1:13828
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/?f=1&a=cmi_14_17_ch&cd=2XzuyEtN2Y1L1Qzuzy0C0ByCyDyEyEyEyDtB0D0D0EtAtD0DtN0D0Tzu0SzzyEyCtN1L2XzutBtFtBtDtFyDtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0BtDtCzy0EzytG0ByEtAzytGyDzytB0AtGtAtDyDtCtGtB0C0DyDzytDzyyBzzyC0FtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0CtDtDyCtAzy0EtGyEzz0A0FtG0BtB0BtBtGtDzyyDtDtGyCzyyBtCzytAyB0CyEyCyDzz2Q&cr=1370767680&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/?f=1&a=cmi_14_17_ch&cd=2XzuyEtN2Y1L1Qzuzy0C0ByCyDyEyEyEyDtB0D0D0EtAtD0DtN0D0Tzu0SzzyEyCtN1L2XzutBtFtBtDtFyDtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0BtDtCzy0EzytG0ByEtAzytGyDzytB0AtGtAtDyDtCtGtB0C0DyDzytDzyyBzzyC0FtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0CtDtDyCtAzy0EtGyEzz0A0FtG0BtB0BtBtGtDzyyDtDtGyCzyyBtCzytAyB0CyEyCyDzz2Q&cr=1370767680&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.amazon.it/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_it_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_d1e02b4e8c01404aa514e85bb40777db_18_38_20131216_IT_ie_sp_OC1
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.it.msn.com/
HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
SearchScopes: HKLM -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=884&systemid=406&v=a12712-292&apn_uid=0251945370254400&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=884&systemid=406&v=a12712-292&apn_uid=0251945370254400&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4165106140-1766778721-1585055742-1001 -> DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://search.conduit.com/Results.aspx?gd=&ctid=CT3322168&octid=EB_ORIGINAL_CTID&ISID=M78CA24F6-5C6D-4FEB-B854-E2404859190A&SearchSource=58&CUI=&UM=5&UP=&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-4165106140-1766778721-1585055742-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=cmi_14_17_ch&cd=2XzuyEtN2Y1L1Qzuzy0C0ByCyDyEyEyEyDtB0D0D0EtAtD0DtN0D0Tzu0SzzyEyCtN1L2XzutBtFtBtDtFyDtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtB0BtDtCzy0EzytG0ByEtAzytGyDzytB0AtGtAtDyDtCtGtB0C0DyDzytDzyyBzzyC0FtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0CtDtDyCtAzy0EtGyEzz0A0FtG0BtB0BtBtGtDzyyDtDtGyCzyyBtCzytAyB0CyEyCyDzz2Q&cr=1370767680&ir=
SearchScopes: HKU\S-1-5-21-4165106140-1766778721-1585055742-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=34068056F2259D95&affID=128166&tsp=5208
SearchScopes: HKU\S-1-5-21-4165106140-1766778721-1585055742-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4165106140-1766778721-1585055742-1001 -> {6CF4CB1B-C6A9-4D7E-97F1-A9E3A1431822} URL = http://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=3406e30d00000000000000a0c6000000&r=719
SearchScopes: HKU\S-1-5-21-4165106140-1766778721-1585055742-1001 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://search.conduit.com/Results.aspx?gd=&ctid=CT3322168&octid=EB_ORIGINAL_CTID&ISID=M78CA24F6-5C6D-4FEB-B854-E2404859190A&SearchSource=58&CUI=&UM=5&UP=&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-4165106140-1766778721-1585055742-1001 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=884&systemid=406&v=a12712-292&apn_uid=0251945370254400&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4165106140-1766778721-1585055742-1001 -> {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=cmi_14_15_ch&cd=2XzuyEtN2Y1L1Qzuzy0C0ByCyDyEyEyEyDtB0D0D0EtAtD0DtN0D0Tzu0SzztBzytN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtA0D0C0B0CtDtCtG0AtDzyzztGzyzytCyEtG0DyE0EzztGtAyBzyyB0EtA0FyBzzyCyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0CtDtDyCtAzy0EtGyEzz0A0FtG0BtB0BtBtGtDzyyDtDtGyCzyyBtCzytAyB0CyEyCyDzz2Q&cr=748189893&ir=
BHO: Plus-HD-9.1 -> {11111111-1111-1111-1111-110511291116} -> C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-bho64.dll [2014-04-07] (Plus HD)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-11-20] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO: Movies Toolbar (Dist. by Bandoo Media, Inc.) -> {d1dac034-9fd9-4c13-a388-d2e10e57707f} -> C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx64.dll [2013-12-11] ()
BHO-x32: SaveSense -> {0f21b1e5-5afc-43c9-9c66-515046e92ec2} -> C:\Program Files (x86)\SaveSense\SaveSenseIE.dll [2013-11-04] (SaveSense)
BHO-x32: Plus-HD-9.1 -> {11111111-1111-1111-1111-110511291116} -> C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-bho.dll [2014-04-07] (Plus HD)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll [2014-04-11] (Thinknice Co. Limited)
BHO-x32: IEiRobinHoodAddon Class -> {54E67346-EE5A-45B6-82AA-4F0BB28C79C2} -> C:\Program Files (x86)\iRobinHood\iRobinHood Addon\iRobinHood.dll [2014-01-21] (iRobinHood)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-03-31] (Oracle Corporation)
BHO-x32: KingBrowse -> {a5915ec9-2613-45fc-931c-229a142d396c} -> C:\Program Files (x86)\KingBrowse\KingBrowsebho.dll [2014-04-01] (KingBrowse)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2013-11-20] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Movies Toolbar (Dist. by Bandoo Media, Inc.) -> {d1dac034-9fd9-4c13-a388-d2e10e57707f} -> C:\PROGRA~2\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-31] (Oracle Corporation)
BHO-x32: FlowSurf -> {E3F1CA13-EA0E-4617-8D03-3EAA6A94A7E0} -> C:\Program Files (x86)\Flowsurf\FlowSurf.dll [2014-04-22] (FlowSurf Inc.)
BHO-x32: Softonic Helper Object -> {E87806B5-E908-45FD-AF5E-957D83E58E68} -> C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\bh\Softonic.dll [2013-06-11] (Softonic.com)
BHO-x32: mysearchdial Helper Object -> {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} -> C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh\mysearchdial.dll [2014-04-08] (MySearchDial)
BHO-x32: AlxHelper Class -> {F443A627-5009-4323-9C1D-7FD598D0D712} -> C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll [2012-08-15] (Amazon.com)
BHO-x32: PricePeep -> {FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} -> C:\Program Files (x86)\PricePeep\pricepeep.dll [2014-03-24] (PricePeep)
Toolbar: HKLM - Movies Toolbar (Dist. by Bandoo Media, Inc.) - {d1dac034-9fd9-4c13-a388-d2e10e57707f} - C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx64.dll [2013-12-11] ()
Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\SoftonicTlbr.dll [2013-06-11] (Softonic.com)
Toolbar: HKLM-x32 - Amazon Browser Bar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll [2012-08-15] (Amazon.com)
Toolbar: HKLM-x32 - Movies Toolbar (Dist. by Bandoo Media, Inc.) - {d1dac034-9fd9-4c13-a388-d2e10e57707f} - C:\PROGRA~2\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll No File
Toolbar: HKLM-x32 - mysearchdial Toolbar - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll [2014-04-08] (MySearchDial)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-11-20] (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2013-11-20] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2011-11-03] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-page.com/?type=sc&ts=1396427062&from=vit&uid=WDCXWD3200LPVX-60V0TT0_WD-WX91A83U8412U8412

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-03-31] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-03-31] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-25] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-25] (Google Inc.)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll [2013-12-26] (SaveSense)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll [2013-12-26] (SaveSense)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-06-07] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2011-06-06] (Adobe Systems Inc.)
FF Plugin-x32: TorchVLC -> C:\Users\yammo.it\AppData\Local\Torch\Plugins\Video\VLC\npvlc.dll [2013-07-30] (VideoLAN)
FF Plugin HKU\S-1-5-21-4165106140-1766778721-1585055742-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\yammo.it\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2013-11-06] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF Extension: No Name - C:\Users\yammo.it\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2014-06-22]
FF HKLM-x32\...\Firefox\Extensions: [irobinhood@irobinhood.org] - C:\Program Files (x86)\iRobinHood\iRobinHood Addon\irobinhood@irobinhood.org.xpi
FF Extension: iRobinHood Partners Addon - C:\Program Files (x86)\iRobinHood\iRobinHood Addon\irobinhood@irobinhood.org.xpi [2014-01-21]
FF HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\...\Firefox\Extensions: [{188129b8-979f-42d5-b4e8-037f4c40ecf2}] - C:\Program Files (x86)\BlockAndSurf Corp\158.xpi
FF Extension: No Name - C:\Program Files (x86)\BlockAndSurf Corp\158.xpi [2014-04-02]

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\21.0.1180.83\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - F:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll ()
CHR Plugin: (Wajam) - F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins/PriamNPAPI.dll No File
CHR Plugin: (Adobe Acrobat) - F:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.170.4) - F:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll No File
CHR Plugin: (2007 Microsoft Office system) - F:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Winamp Application Detector) - F:\Program Files\Mozilla Firefox\plugins\npwachk.dll No File
CHR Plugin: (Microsoft® DRM) - F:\Program Files\Windows Media Player\npdrmv2.dll No File
CHR Plugin: (Microsoft® DRM) - F:\Program Files\Windows Media Player\npwmsdrm.dll No File
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - F:\Program Files\Windows Media Player\npdsplay.dll No File
CHR Plugin: (Google Update) - F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Google Earth Plugin) - F:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Panda ActiveScan 2.0) - F:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll No File
CHR Plugin: (iTunes Application Detector) - F:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Ma-Config.com plugin) - F:\Program Files\ma-config.com\nphardwaredetection.dll No File
CHR Plugin: (Silverlight Plug-In) - f:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Profile: C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Movies App) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob [2014-07-15]
CHR Extension: (Plus-HD-9.1) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe [2014-04-15]
CHR Extension: (https://www.facebook.com/) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\celnaknmndcdcjcagffhbhciignkeokb [2015-02-25]
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf [2014-03-31]
CHR Extension: (iRobinHood Partners Donations) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\iidmoehhpbghchkaogkhmcckhlhebekn [2014-07-15]
CHR Extension: (entrusted) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk [2014-07-15]
CHR Extension: (Skype Click to Call) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-07-15]
CHR Extension: (Google Wallet) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-27]
CHR Extension: (FlowSurf) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglkiljdmflopemijdadoiepkhcaodjn [2014-07-15]
CHR Extension: (Amazon 1Button App for Chrome) - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2014-07-15]
CHR HKLM\...\Chrome\Extension: [ejocekekgcaldnmjngfdbmbeebcekelc] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ejocekekgcaldnmjngfdbmbeebcekelc] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\yammo.it\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-12-16]
CHR HKU\S-1-5-21-4165106140-1766778721-1585055742-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files (x86)\Amazon\ABB\AmazonChrome-bds-amzn.crx [2013-07-18]
CHR HKLM-x32\...\Chrome\Extension: [aaaaabcbmongicmdegkmmfgdickgnnob] - C:\Users\yammo.it\AppData\Local\ilividmoviestoolbar181\GC\toolbar.crx [2013-12-11]
CHR HKLM-x32\...\Chrome\Extension: [ejocekekgcaldnmjngfdbmbeebcekelc] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [elchiiiejkobdbblfejjkbphbddgmljf] - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\Softonic.crx [2013-06-11]
CHR HKLM-x32\...\Chrome\Extension: [iidmoehhpbghchkaogkhmcckhlhebekn] - C:\Program Files (x86)\iRobinHood\iRobinHood Addon\iRobinHoodPartnersExtension12_73.crx [2014-01-21]
CHR HKLM-x32\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\yammo.it\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-12-16]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-03-03]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\yammo.it\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-04-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [85280 2012-12-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [109344 2012-12-07] (Avira Operations GmbH & Co. KG)
R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [53320 2014-11-13] (Just Develop It) <==== ATTENTION
R2 BlockAndSurf; C:\Program Files (x86)\BlockAndSurf Corp\BlockAndSurf158.exe [142336 2014-04-02] () [File not signed]
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1626872 2013-01-31] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2013-01-10] (IVT Corporation) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363584 2014-03-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748608 2014-03-03] (Microsoft Corporation)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2458400 2014-04-07] (Conduit)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 MovieMode; C:\ProgramData\MovieMode\up\2.6.78\MovieMode.exe [152720 2014-04-25] (GenTechnologies Apps, LLC)
R2 Olivetti Silverstone Modem Device Helper; C:\Program Files (x86)\Chiavetta Internet Olicard 200\BackgroundService\ServiceManager.exe [49752 2011-06-20] () [File not signed]
S2 savesenselive; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2013-12-26] (SaveSense)
S3 savesenselivem; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2013-12-26] (SaveSense)
R2 SrvUpdater; C:\Program Files (x86)\SoftwareUpdater\UpdaterService.exe [39424 2014-04-02] () [File not signed]
R2 TorchCrashHandler; C:\Users\yammo.it\AppData\Local\Torch\Update\TorchCrashHandler.exe [1216520 2014-03-01] (TorchMedia Inc.) <==== ATTENTION
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG PC TuneUp 2014\TuneUpUtilitiesService64.exe [2099000 2013-10-12] (AVG)
R2 Updater Service for AMZN; C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe [222368 2013-03-21] ()
R2 vosr; C:\Users\yammo.it\AppData\Roaming\VOPackage\VOsrv.exe [355328 2014-04-01] () [File not signed] <==== ATTENTION <==== ATTENTION
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [15440 2012-07-26] (Microsoft Corporation)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [496640 2014-04-02] (Cherished Technololgy LIMITED) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [99912 2012-12-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [129216 2012-12-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [27800 2012-12-07] (Avira Operations GmbH & Co. KG)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49200 2013-02-26] (Ralink Corporation)
S3 jrdusbser; C:\Windows\system32\DRIVERS\jrdusbser.sys [119680 2011-06-20] (Olivetti)
S3 Olicard200net; C:\Windows\system32\DRIVERS\Olicard200Usbnet.sys [138240 2011-06-20] (Olivetti)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288328 2013-01-23] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1149232 2013-03-09] (Ralink Technology, Corp.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG PC TuneUp 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-06-27] (Hewlett-Packard Development Company, L.P.)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-09 11:02 - 2015-03-09 11:09 - 00000000 ____D () C:\FRST
2015-03-09 10:56 - 2015-03-09 11:09 - 00000000 ____D () C:\Users\yammo.it\Desktop\FRST
2015-03-09 10:21 - 2015-03-09 10:21 - 00000117 _____ () C:\Windows\system32\netcfg-217824.txt
2015-03-09 10:19 - 2015-03-09 10:19 - 00000117 _____ () C:\Windows\system32\netcfg-74131.txt
2015-03-09 10:17 - 2015-03-09 10:17 - 00000117 _____ () C:\Windows\system32\netcfg-213903750.txt
2015-03-09 10:16 - 2015-03-09 10:16 - 00000117 _____ () C:\Windows\system32\netcfg-213809744.txt
2015-03-09 10:16 - 2015-03-09 10:16 - 00000117 _____ () C:\Windows\system32\netcfg-213806639.txt
2015-03-09 10:16 - 2015-03-09 10:16 - 00000117 _____ () C:\Windows\system32\netcfg-213795064.txt
2015-03-09 10:16 - 2015-03-09 10:16 - 00000117 _____ () C:\Windows\system32\netcfg-213792849.txt
2015-03-07 02:17 - 2015-03-07 02:17 - 00000117 _____ () C:\Windows\system32\netcfg-12293424.txt
2015-03-07 02:17 - 2015-03-07 02:17 - 00000117 _____ () C:\Windows\system32\netcfg-12293128.txt
2015-03-06 22:57 - 2015-03-06 22:57 - 00000117 _____ () C:\Windows\system32\netcfg-37346.txt
2015-03-06 22:54 - 2015-03-06 22:54 - 00000117 _____ () C:\Windows\system32\netcfg-2647851.txt
2015-03-06 22:46 - 2015-03-06 22:17 - 06431728 _____ (Microsoft Corporation) C:\Users\yammo.it\Desktop\OSGS14-WindowsSetupBox-32bitand64bit-English-4141408.exe
2015-03-06 22:30 - 2015-03-09 10:21 - 00003120 _____ () C:\Windows\System32\Tasks\Advanced System Protector_startup
2015-03-06 22:29 - 2015-03-06 22:29 - 00000117 _____ () C:\Windows\system32\netcfg-1188041.txt
2015-03-06 22:29 - 2015-03-06 22:29 - 00000117 _____ () C:\Windows\system32\netcfg-1163845.txt
2015-03-06 19:40 - 2015-03-06 19:42 - 06431728 _____ (Microsoft Corporation) C:\Users\yammo.it\Downloads\OSGS14-WindowsSetupBox-32bitand64bit-English-4141408.exe
2015-03-06 16:59 - 2015-03-06 16:59 - 00000117 _____ () C:\Windows\system32\netcfg-325277.txt
2015-03-05 21:18 - 2015-03-05 21:18 - 00000000 _____ () C:\Recovery.txt
2015-03-05 20:55 - 2015-03-05 20:55 - 00000117 _____ () C:\Windows\system32\netcfg-135190.txt
2015-03-05 19:43 - 2015-03-05 19:43 - 00000117 _____ () C:\Windows\system32\netcfg-35505.txt
2015-03-05 19:42 - 2015-03-05 19:42 - 00000117 _____ () C:\Windows\system32\netcfg-70247.txt
2015-03-05 19:31 - 2015-03-05 19:32 - 00255576 _____ () C:\Users\yammo.it\Downloads\setup (2).exe
2015-03-05 19:25 - 2015-03-05 19:26 - 00255576 _____ () C:\Users\yammo.it\Downloads\setup (1).exe
2015-03-05 19:18 - 2015-03-05 19:18 - 00002105 _____ () C:\Users\yammo.it\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rising Cities.lnk
2015-03-05 19:08 - 2015-03-05 19:08 - 00000117 _____ () C:\Windows\system32\netcfg-464992.txt
2015-03-05 19:01 - 2015-03-05 19:01 - 00000117 _____ () C:\Windows\system32\netcfg-58344.txt
2015-03-05 18:58 - 2015-03-05 18:58 - 00000117 _____ () C:\Windows\system32\netcfg-9904862.txt
2015-03-05 16:31 - 2015-03-05 16:31 - 00000117 _____ () C:\Windows\system32\netcfg-1071539.txt
2015-03-05 16:31 - 2015-03-05 16:31 - 00000117 _____ () C:\Windows\system32\netcfg-1070900.txt
2015-03-05 16:08 - 2015-03-05 16:08 - 00000117 _____ () C:\Windows\system32\netcfg-62244.txt
2015-03-05 16:08 - 2015-03-05 16:08 - 00000117 _____ () C:\Windows\system32\netcfg-58703.txt
2015-03-05 16:08 - 2015-03-05 16:08 - 00000117 _____ () C:\Windows\system32\netcfg-46925.txt
2015-03-05 16:03 - 2015-03-05 16:03 - 00000117 _____ () C:\Windows\system32\netcfg-676637847.txt
2015-02-25 20:38 - 2015-02-25 20:38 - 00000117 _____ () C:\Windows\system32\netcfg-1951307.txt
2015-02-25 20:30 - 2015-02-25 20:30 - 00000117 _____ () C:\Windows\system32\netcfg-1479435.txt
2015-02-25 20:30 - 2015-02-25 20:30 - 00000117 _____ () C:\Windows\system32\netcfg-1476331.txt
2015-02-25 20:29 - 2015-02-25 20:29 - 00000117 _____ () C:\Windows\system32\netcfg-1417487.txt
2015-02-25 20:29 - 2015-02-25 20:29 - 00000117 _____ () C:\Windows\system32\netcfg-1406271.txt
2015-02-25 20:17 - 2015-02-25 20:17 - 00000117 _____ () C:\Windows\system32\netcfg-659135.txt
2015-02-25 20:16 - 2015-02-25 20:16 - 00000117 _____ () C:\Windows\system32\netcfg-624378.txt
2015-02-25 20:16 - 2015-02-25 20:16 - 00000117 _____ () C:\Windows\system32\netcfg-619105.txt
2015-02-25 20:16 - 2015-02-25 20:16 - 00000117 _____ () C:\Windows\system32\netcfg-616032.txt
2015-02-25 20:14 - 2015-02-25 20:14 - 00000117 _____ () C:\Windows\system32\netcfg-508469.txt
2015-02-25 20:14 - 2015-02-25 20:14 - 00000117 _____ () C:\Windows\system32\netcfg-507720.txt
2015-02-25 20:13 - 2015-02-25 20:13 - 00000000 ____D () C:\Users\giuseppe\AppData\Local\MovieMode
2015-02-25 20:12 - 2015-02-25 20:12 - 00000117 _____ () C:\Windows\system32\netcfg-356821.txt
2015-02-25 20:12 - 2015-02-25 20:12 - 00000117 _____ () C:\Windows\system32\netcfg-341392.txt
2015-02-25 20:11 - 2015-02-25 20:11 - 00000117 _____ () C:\Windows\system32\netcfg-291831.txt
2015-02-25 20:11 - 2015-02-25 20:11 - 00000117 _____ () C:\Windows\system32\netcfg-285435.txt
2015-02-25 20:10 - 2015-02-25 20:10 - 00000000 ____D () C:\Users\giuseppe\AppData\Roaming\Systweak
2015-02-25 20:08 - 2015-02-25 20:08 - 00000117 _____ () C:\Windows\system32\netcfg-126828.txt
2015-02-25 20:08 - 2015-02-25 20:08 - 00000117 _____ () C:\Windows\system32\netcfg-126360.txt
2015-02-25 20:07 - 2015-02-25 20:07 - 00000117 _____ () C:\Windows\system32\netcfg-63071.txt
2015-02-25 20:07 - 2015-02-25 20:07 - 00000117 _____ () C:\Windows\system32\netcfg-61979.txt
2015-02-25 20:06 - 2015-02-25 20:06 - 00280208 _____ () C:\Windows\Minidump\022515-17300-01.dmp
2015-02-25 19:07 - 2015-02-25 19:07 - 00000117 _____ () C:\Windows\system32\netcfg-418831.txt
2015-02-25 19:06 - 2015-02-25 19:06 - 00000117 _____ () C:\Windows\system32\netcfg-324622.txt
2015-02-25 19:05 - 2015-02-25 19:05 - 00000117 _____ () C:\Windows\system32\netcfg-285341.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-09 11:07 - 2013-11-27 16:07 - 00001168 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-09 11:06 - 2013-11-27 16:13 - 00002181 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-03-09 11:00 - 2013-12-26 11:55 - 00000946 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
2015-03-09 11:00 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2015-03-09 10:59 - 2012-07-26 10:55 - 00938240 _____ () C:\Windows\system32\perfh010.dat
2015-03-09 10:59 - 2012-07-26 10:55 - 00200174 _____ () C:\Windows\system32\perfc010.dat
2015-03-09 10:59 - 2012-07-26 08:28 - 00005426 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-09 10:55 - 2013-12-26 11:54 - 00000314 _____ () C:\Windows\Tasks\SaveSense.job
2015-03-09 10:37 - 2013-12-26 11:39 - 00000000 ____D () C:\Users\yammo.it\AppData\Local\Pokki
2015-03-09 10:27 - 2014-04-02 10:18 - 00000314 _____ () C:\Windows\Tasks\MySearchDial.job
2015-03-09 10:24 - 2013-11-27 15:58 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4165106140-1766778721-1585055742-1001
2015-03-09 10:24 - 2013-03-04 16:30 - 00000983 _____ () C:\Windows\SysWOW64\bscs.ini
2015-03-09 10:23 - 2014-04-02 09:24 - 00000000 ____D () C:\Users\yammo.it\AppData\Local\fst_it_84
2015-03-09 10:22 - 2014-06-19 10:08 - 00000000 ____D () C:\Users\yammo.it\AppData\Local\fst_it_148
2015-03-09 10:20 - 2013-11-27 16:38 - 00003617 _____ () C:\Windows\SysWOW64\LOCALSERVICE.INI
2015-03-09 10:20 - 2013-11-27 16:38 - 00000043 _____ () C:\Windows\SysWOW64\LOCALDEVICE.INI
2015-03-09 10:19 - 2014-04-07 08:33 - 00002160 _____ () C:\Windows\Tasks\55db4e47-c5e4-4e65-b683-ccae584151dd-4.job
2015-03-09 10:19 - 2014-04-07 08:33 - 00001480 _____ () C:\Windows\Tasks\55db4e47-c5e4-4e65-b683-ccae584151dd-5.job
2015-03-09 10:19 - 2014-04-07 08:33 - 00001374 _____ () C:\Windows\Tasks\55db4e47-c5e4-4e65-b683-ccae584151dd-2.job
2015-03-09 10:19 - 2014-04-07 08:32 - 00002788 _____ () C:\Windows\Tasks\55db4e47-c5e4-4e65-b683-ccae584151dd-3.job
2015-03-09 10:19 - 2014-04-02 11:00 - 00000420 _____ () C:\Windows\Tasks\BlockAndSurf Update.job
2015-03-09 10:19 - 2013-12-26 11:55 - 00000942 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
2015-03-09 10:19 - 2013-11-27 16:07 - 00001164 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-09 10:18 - 2014-04-07 08:33 - 00001390 _____ () C:\Windows\Tasks\55db4e47-c5e4-4e65-b683-ccae584151dd-1.job
2015-03-09 10:18 - 2014-04-02 10:59 - 00000424 _____ () C:\Windows\Tasks\BlockAndSurf_wd.job
2015-03-09 10:18 - 2014-03-20 20:10 - 00000000 ____D () C:\ProgramData\TorchCrashHandler
2015-03-09 10:18 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-09 10:17 - 2013-11-27 15:51 - 01227619 _____ () C:\Windows\WindowsUpdate.log
2015-03-06 21:21 - 2014-06-19 10:03 - 00002006 _____ () C:\Users\yammo.it\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2015-03-06 21:03 - 2014-04-02 09:24 - 00000000 ____D () C:\Users\yammo.it\AppData\Local\Lollipop
2015-03-06 19:53 - 2014-04-05 12:59 - 00000000 ____D () C:\Users\yammo.it\AppData\Local\MovieMode
2015-03-06 19:38 - 2014-04-02 09:26 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2015-03-06 17:27 - 2013-12-26 17:55 - 00000223 _____ () C:\Users\yammo.it\AppData\Roaming\WB.CFG
2015-03-06 17:22 - 2013-11-27 15:51 - 00000000 ____D () C:\Users\yammo.it
2015-03-05 21:02 - 2014-04-08 17:19 - 00003108 _____ () C:\Windows\System32\Tasks\RegClean Pro
2015-03-05 21:00 - 2015-01-11 10:49 - 00001368 _____ () C:\Users\yammo.it\Desktop\Ripulisci gratuitamente il registro di sistema!.lnk
2015-03-05 20:59 - 2014-07-15 10:38 - 00000000 ____D () C:\Program Files (x86)\Flowsurf
2015-03-05 20:58 - 2012-07-26 08:21 - 00041785 _____ () C:\Windows\setupact.log
2015-03-05 20:35 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2015-03-05 16:03 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-25 20:35 - 2013-11-27 16:07 - 00004140 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-25 20:35 - 2013-11-27 16:07 - 00003904 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-25 20:06 - 2013-12-12 19:42 - 200895447 _____ () C:\Windows\MEMORY.DMP
2015-02-25 20:06 - 2013-12-12 19:42 - 00000000 ____D () C:\Windows\Minidump

==================== Files in the root of some directories =======

2014-04-02 09:47 - 2014-04-02 09:47 - 0001128 _____ () C:\Users\yammo.it\AppData\Roaming\aps.scan.quick.results
2014-04-02 09:47 - 2014-04-02 09:47 - 0002788 _____ () C:\Users\yammo.it\AppData\Roaming\aps.scan.results
2014-04-02 09:47 - 2014-04-02 09:47 - 0000312 _____ () C:\Users\yammo.it\AppData\Roaming\aps.uninstall.scan.results
2013-12-26 17:55 - 2015-03-06 17:27 - 0000223 _____ () C:\Users\yammo.it\AppData\Roaming\WB.CFG
2014-04-02 10:16 - 2014-04-24 14:31 - 1089760 _____ (AnyProtect.com) C:\Users\yammo.it\AppData\Local\AnyProtectScannerSetup.exe
2014-04-07 08:22 - 2014-04-07 08:22 - 0000000 _____ () C:\Users\yammo.it\AppData\Local\BIT96AE.tmp
2014-04-02 09:45 - 2014-04-02 09:45 - 1176864 _____ (AnyProtect.com) C:\Users\yammo.it\AppData\Local\nsy8F29.tmp
2014-06-07 08:50 - 2014-06-07 08:50 - 0000000 _____ () C:\Users\yammo.it\AppData\Local\{2149AAAE-4A9A-40F8-82EB-CDC037956FB3}
2014-07-06 13:37 - 2014-07-06 13:39 - 0000000 _____ () C:\Users\yammo.it\AppData\Local\{B93388AF-4C57-4FD5-9C59-248A0C1E1FFD}
2014-04-07 08:22 - 2014-04-07 08:22 - 0000000 _____ () C:\Users\yammo.it\AppData\Local\{F7F31FB2-94F8-4B0C-B95B-7E2B849EE8C6}

Files to move or delete:
====================
C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll
C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll
C:\Users\Public\AlexaNSISPlugin.5560.dll


Some content of TEMP:
====================
C:\Users\giuseppe\AppData\Local\Temp\Setup.exe
C:\Users\yammo.it\AppData\Local\Temp\228687-666092-the-sims-3.exe
C:\Users\yammo.it\AppData\Local\Temp\APNSetup.exe
C:\Users\yammo.it\AppData\Local\Temp\BackupSetup.exe
C:\Users\yammo.it\AppData\Local\Temp\baseflashSetup.exe
C:\Users\yammo.it\AppData\Local\Temp\BuenoSearchTB.exe
C:\Users\yammo.it\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\yammo.it\AppData\Local\Temp\costmin.exe
C:\Users\yammo.it\AppData\Local\Temp\Delta.exe
C:\Users\yammo.it\AppData\Local\Temp\DeltaTB.exe
C:\Users\yammo.it\AppData\Local\Temp\instloffer.exe
C:\Users\yammo.it\AppData\Local\Temp\MybabylonTB.exe
C:\Users\yammo.it\AppData\Local\Temp\nsb3F4F.exe
C:\Users\yammo.it\AppData\Local\Temp\nsg492F.exe
C:\Users\yammo.it\AppData\Local\Temp\nswB128.exe
C:\Users\yammo.it\AppData\Local\Temp\nswB8C7.exe
C:\Users\yammo.it\AppData\Local\Temp\pcspeedmaxsetup.exe
C:\Users\yammo.it\AppData\Local\Temp\Setup.exe
C:\Users\yammo.it\AppData\Local\Temp\setup_168.exe
C:\Users\yammo.it\AppData\Local\Temp\uninst1.exe
C:\Users\yammo.it\AppData\Local\Temp\vcredist_x64.exe
C:\Users\yammo.it\AppData\Local\Temp\vit_sweet-page.exe
C:\Users\yammo.it\AppData\Local\Temp\vp.exe
C:\Users\yammo.it\AppData\Local\Temp\VuuPC_Setup.exe
C:\Users\yammo.it\AppData\Local\Temp\WSSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-06 23:12

==================== End Of Log ============================