Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-04-2015
Ran by Grzegorz (administrator) on GRZESIEK on 27-04-2015 15:28:40
Running from C:\Temp
Loaded Profiles: Grzegorz (Available profiles: Grzegorz)
Platform: Windows 8.1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS VivoBook\vivokey.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5670448 2013-02-05] (VIA)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\System32\DptfPolicyLpmServiceHelper.exe [27024 2013-10-17] (Intel Corporation)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1426136 2015-04-01] (COMODO)
HKLM\...\RunOnce: [WinSat] => winsat dwm -xml results.xml
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\skti4qzf.default-1430135216838
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-22] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-22] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)

Chrome: 
=======
CHR Profile: C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default

Opera: 
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe http://www.istartsurf.com/?type=sc&ts=1429731640&from=squadm&uid=ST500LT012-9WS142_W0V469QHXXXXW0V469QH

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-03-26] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5540424 2015-04-01] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265816 2015-04-01] (COMODO)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [31632 2013-10-17] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [33168 2013-10-17] (Intel Corporation)
R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107944 2013-01-08] (Condusiv Technologies)
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2013-10-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-24] (Atheros) [File not signed]
S2 UpdaterSvcGreenerWeb; "C:\Program Files (x86)\Greener Web\updater.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20696 2015-04-01] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [820952 2015-04-01] (COMODO)
R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [35080 2015-04-01] (COMODO)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107920 2013-10-17] (Intel Corporation)
R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [43408 2013-10-17] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [65424 2013-10-17] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [97680 2013-10-17] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229776 2013-10-17] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363920 2013-10-17] (Intel Corporation)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [26024 2013-01-08] (Condusiv Technologies)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112552 2013-01-08] (Condusiv Technologies)
R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [126720 2015-04-01] (COMODO)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2013-10-17] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2013-10-17] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [136408 2015-04-27] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [18304 2013-03-26] (ASUSTek Computer Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-27 15:27 - 2015-04-27 15:28 - 00000000 ____D () C:\FRST
2015-04-27 15:12 - 2015-04-27 15:12 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2015-04-27 15:12 - 2015-04-27 15:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-04-27 15:12 - 2015-04-27 15:12 - 00000000 ____D () C:\WINDOWS\LastGood
2015-04-27 15:06 - 2015-04-27 15:07 - 00000062 _____ () C:\Users\Grzegorz\AppData\Roaming\sp_data.sys
2015-04-27 15:04 - 2015-04-27 15:04 - 00003002 _____ () C:\WINDOWS\System32\Tasks\ASUS Splendid ColorU
2015-04-27 15:04 - 2015-04-27 15:04 - 00002986 _____ () C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
2015-04-27 15:04 - 2015-04-27 15:04 - 00001107 _____ () C:\Users\Public\Desktop\Splendid Utility.Lnk
2015-04-27 14:52 - 2015-04-27 15:28 - 00000000 ____D () C:\Temp
2015-04-27 13:47 - 2015-04-27 13:47 - 00000000 __SHD () C:\Users\Grzegorz\AppData\Local\EmieBrowserModeList
2015-04-27 13:47 - 2015-04-27 13:47 - 00000000 ____D () C:\Users\Grzegorz\Desktop\Stare dane programu Firefox
2015-04-27 13:44 - 2015-04-27 13:45 - 02224640 _____ () C:\Users\Grzegorz\Downloads\adwcleaner_4.202.exe
2015-04-27 13:34 - 2015-04-27 13:38 - 00000000 ____D () C:\ProgramData\HitmanPro
2015-04-27 13:34 - 2015-04-27 13:34 - 00000000 ____D () C:\Program Files\HitmanPro
2015-04-27 13:20 - 2015-04-27 15:25 - 01160528 _____ () C:\WINDOWS\system32\Drivers\sfi.dat
2015-04-27 13:20 - 2015-04-27 13:34 - 11028616 _____ (SurfRight B.V.) C:\Users\Grzegorz\Desktop\HitmanPro_x64.exe
2015-04-27 13:20 - 2015-04-27 13:20 - 00001904 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2015-04-27 13:20 - 2015-04-27 13:20 - 00000000 ____D () C:\WINDOWS\System32\Tasks\COMODO
2015-04-27 13:20 - 2015-04-27 13:20 - 00000000 ____D () C:\ProgramData\Shared Space
2015-04-27 13:20 - 2015-04-27 13:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2015-04-27 13:19 - 2015-04-27 13:19 - 00000000 ____D () C:\Program Files\COMODO
2015-04-27 13:16 - 2015-04-27 13:20 - 00000000 ____D () C:\ProgramData\Comodo
2015-04-27 13:11 - 2015-04-27 15:05 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-04-27 13:10 - 2015-04-27 13:10 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-27 13:10 - 2015-04-27 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-27 13:10 - 2015-04-27 13:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-27 13:10 - 2015-04-27 13:10 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-27 13:10 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-04-27 13:10 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-04-27 13:10 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-04-27 13:04 - 2015-04-27 13:14 - 214041880 _____ (COMODO) C:\Users\Grzegorz\Downloads\cispremium_installer_6100_08.exe
2015-04-25 12:55 - 2015-04-25 12:55 - 00000000 ____D () C:\Users\Grzegorz\AppData\Local\Intel_Corporation
2015-04-25 12:44 - 2015-04-25 12:44 - 00000448 _____ () C:\Users\Grzegorz\Desktop\Ten komputer — skrót.lnk
2015-04-23 21:09 - 2015-04-23 21:09 - 00000028 ___SH () C:\a_disk_identifier_bc.platform
2015-04-23 21:09 - 2015-04-23 21:09 - 00000000 ____D () C:\RecData
2015-04-23 21:08 - 2015-04-23 21:08 - 00002006 _____ () C:\Users\Public\Desktop\B-Viewer.lnk
2015-04-23 21:08 - 2015-04-23 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\B-Viewer
2015-04-23 21:08 - 2015-04-23 21:08 - 00000000 ____D () C:\Program Files (x86)\B-Viewer
2015-04-23 20:59 - 2015-04-23 21:06 - 32852480 _____ (Microsoft Corporation) C:\Users\Grzegorz\Downloads\B-Viewer.2.1.3.exe
2015-04-22 21:54 - 2015-04-22 21:54 - 00001273 _____ () C:\Users\Grzegorz\Desktop\adwcleaner_4.201 — skrót.lnk
2015-04-22 21:50 - 2015-04-22 21:50 - 00000379 _____ () C:\Users\Grzegorz\Desktop\Panel sterowania — skrót.lnk
2015-04-22 21:42 - 2015-04-22 21:42 - 00000000 ____D () C:\Users\Grzegorz\AppData\Local\0000B48A-1429738923-283B-FFFF-60A44C753955
2015-04-22 21:22 - 2015-04-22 21:52 - 00000000 ____D () C:\Program Files\KMSpico
2015-04-22 21:22 - 2015-04-22 21:22 - 00004608 _____ () C:\WINDOWS\SECOH-QAD.exe
2015-04-22 21:22 - 2015-04-22 21:22 - 00003584 _____ () C:\WINDOWS\SECOH-QAD.dll
2015-04-22 21:14 - 2015-04-22 22:33 - 00000000 ____D () C:\WINDOWS\AutoKMS
2015-04-22 19:33 - 2015-04-22 19:33 - 00002689 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Otwórz dokument pakietu Microsoft Office.lnk
2015-04-22 19:33 - 2015-04-22 19:33 - 00002663 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Nowy dokument pakietu Microsoft Office.lnk
2015-04-22 19:33 - 2015-04-22 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-04-22 19:33 - 2015-04-22 19:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-22 19:32 - 2015-04-22 19:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2015-04-22 19:31 - 2015-04-22 19:31 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2015-04-22 19:30 - 2015-04-22 21:29 - 00000000 ____D () C:\Users\Grzegorz\AppData\Local\Microsoft Help
2015-04-22 19:30 - 2015-04-22 19:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-22 19:30 - 2015-04-22 19:30 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-04-22 19:29 - 2015-04-22 19:29 - 00000000 __RHD () C:\MSOCache
2015-04-22 18:24 - 2015-04-22 19:28 - 313766816 _____ (Microsoft Corporation) C:\Users\Grzegorz\Downloads\MicrosoftInstaller.exe
2015-04-22 18:04 - 2015-04-27 13:50 - 00000000 ____D () C:\AdwCleaner
2015-04-06 20:02 - 2015-04-06 20:03 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-06 20:02 - 2015-04-06 20:02 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-01 18:50 - 2015-04-01 18:50 - 00820952 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdguard.sys
2015-04-01 18:50 - 2015-04-01 18:50 - 00126720 _____ (COMODO) C:\WINDOWS\system32\Drivers\inspect.sys
2015-04-01 18:50 - 2015-04-01 18:50 - 00035080 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdhlp.sys
2015-04-01 18:50 - 2015-04-01 18:50 - 00020696 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmderd.sys
2015-04-01 18:48 - 2015-04-01 18:48 - 00576848 _____ (COMODO) C:\WINDOWS\system32\guard64.dll
2015-04-01 18:48 - 2015-04-01 18:48 - 00444472 _____ (COMODO) C:\WINDOWS\SysWOW64\guard32.dll
2015-04-01 18:48 - 2015-04-01 18:48 - 00041248 _____ (COMODO) C:\WINDOWS\system32\cmdcsr.dll
2015-04-01 18:47 - 2015-04-01 18:47 - 00358104 _____ (COMODO) C:\WINDOWS\system32\cmdvrt64.dll
2015-04-01 18:46 - 2015-04-01 18:46 - 00045784 _____ (COMODO) C:\WINDOWS\system32\cmdkbd64.dll
2015-04-01 18:45 - 2015-04-01 18:45 - 00288472 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdvrt32.dll
2015-04-01 18:45 - 2015-04-01 18:45 - 00040664 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdkbd32.dll
2015-03-30 22:56 - 2015-03-30 22:56 - 00030069 _____ () C:\Users\Grzegorz\Downloads\Zestawienie_-_lista_kandydatow_RPOWM.xlsx

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-27 15:19 - 2014-08-01 17:55 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-27 15:16 - 2014-02-03 07:49 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1985800023-111756243-2703984466-1002
2015-04-27 15:15 - 2014-03-18 11:57 - 02067614 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-27 15:15 - 2014-03-18 11:28 - 01021866 _____ () C:\WINDOWS\system32\perfh015.dat
2015-04-27 15:15 - 2014-03-18 11:28 - 00242772 _____ () C:\WINDOWS\system32\perfc015.dat
2015-04-27 15:13 - 2015-02-07 21:42 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1
2015-04-27 15:13 - 2015-02-06 11:57 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2
2015-04-27 15:13 - 2014-06-14 23:42 - 01367910 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-27 15:12 - 2014-06-14 23:21 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-04-27 15:12 - 2013-10-01 09:02 - 00241664 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2015-04-27 15:12 - 2013-10-01 09:02 - 00193536 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2015-04-27 15:12 - 2013-08-23 00:56 - 00039320 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\intelaud.sys
2015-04-27 15:12 - 2013-08-23 00:56 - 00026008 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iwdbus.sys
2015-04-27 15:12 - 2013-08-22 16:46 - 00297959 _____ () C:\WINDOWS\setupact.log
2015-04-27 15:10 - 2013-09-23 11:32 - 00449528 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcDAud.sys
2015-04-27 15:06 - 2014-06-14 23:50 - 00000000 ___RD () C:\Users\Grzegorz\OneDrive
2015-04-27 15:05 - 2014-03-18 03:46 - 00037028 _____ () C:\WINDOWS\PFRO.log
2015-04-27 15:05 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-27 15:05 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-27 15:04 - 2013-10-17 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-04-27 15:01 - 2013-08-22 16:44 - 00374064 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-04-27 15:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-27 14:56 - 2014-05-12 19:27 - 00049664 ___SH () C:\Users\Grzegorz\Downloads\Thumbs.db
2015-04-27 14:05 - 2015-02-06 02:21 - 00000000 ____D () C:\Users\Grzegorz\AppData\Roaming\Opera Software
2015-04-27 14:05 - 2015-02-06 02:21 - 00000000 ____D () C:\Users\Grzegorz\AppData\Local\Opera Software
2015-04-27 13:33 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Branding
2015-04-27 13:03 - 2014-10-11 20:14 - 00003996 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6C62C48B-1A3B-4B21-A8FB-59DE1FC5D1DA}
2015-04-27 13:01 - 2014-06-17 17:20 - 00078848 ___SH () C:\Users\Grzegorz\Desktop\Thumbs.db
2015-04-23 21:08 - 2013-10-17 14:14 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-22 21:53 - 2014-03-16 17:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-22 21:51 - 2015-02-06 02:20 - 00001013 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-04-22 21:51 - 2015-02-06 02:20 - 00001001 _____ () C:\Users\Public\Desktop\Opera.lnk
2015-04-22 21:51 - 2014-06-14 23:48 - 00001022 _____ () C:\Users\Grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-22 21:51 - 2014-03-16 17:30 - 00001080 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-22 21:51 - 2014-03-16 17:30 - 00001068 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-22 19:32 - 2013-10-24 08:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-04-22 19:30 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew
2015-04-22 19:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-22 18:37 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-04-22 18:20 - 2014-08-01 17:55 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-22 18:18 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-22 18:10 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-08 23:24 - 2015-02-06 02:21 - 00003872 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1423182058
2015-04-08 23:24 - 2015-02-06 02:19 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-28 00:00 - 2014-12-14 03:10 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-03-28 00:00 - 2014-07-15 10:17 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel

==================== Files in the root of some directories =======

2015-04-27 15:06 - 2015-04-27 15:07 - 0000062 _____ () C:\Users\Grzegorz\AppData\Roaming\sp_data.sys

Some content of TEMP:
====================
C:\Users\Grzegorz\AppData\Local\Temp\Quarantine.exe
C:\Users\Grzegorz\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-27 14:02

==================== End Of Log ============================