Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-05-2015 02
Ran by Kika (administrator) on KAROLINAKIKA on 15-05-2015 18:59:21
Running from C:\Users\Kika\Desktop
Loaded Profiles: UpdatusUser & Kika (Available profiles: UpdatusUser & Kika)
Platform: Windows 8.1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Condusiv Technologies) C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Auslogics) C:\Program Files (x86)\Auslogics\BoostSpeed\BoostSpeed.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(BlazeVideo Company) C:\Program Files (x86)\BlazeVideo\BlazeHDTV 6.0\MediaDetector.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIILE.EXE
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices64.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
() C:\Program Files (x86)\Opera\29.0.1795.47\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191312 2012-08-07] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM\...\Run: [Bitcasa] => C:\Program Files\Bitcasa\Bitcasa.exe [3952128 2012-11-27] (Bitcasa, Inc)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2014-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124720 2014-10-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-1735395495-2726210869-181527219-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-1735395495-2726210869-181527219-1001\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1001\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1001\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1001\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1001\...\Policies\Explorer: [DisallowRun] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Run: [BlazeServoTool] => C:\Program Files (x86)\BlazeVideo\BlazeHDTV 6.0\MediaDetector.exe [286720 2011-11-30] (BlazeVideo Company)
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Run: [EPLTarget\P0000000000000001] => C:\windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [455392 2015-04-10] (Sony)
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Run: [System Optimizer] => C:\Program Files (x86)\System Optimizer\SysOptLauncher.exe [466464 2015-05-05] ()
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Policies\Explorer: [DisallowRun] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\MountPoints2: {62d2f776-c961-11e4-808f-c8f7335faf04} - "F:\Startme.exe" 
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\MountPoints2: {86f3a269-99bc-11e4-806d-c8f7335faf04} - "G:\Startme.exe" 
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\MountPoints2: {ea579893-64e2-11e4-824f-806e6f6e6963} - "E:\autorun.bat" 
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Corporation)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [1EldosIconOverlay] -> {C3A420F9-A911-4925-B4CB-2909DBDB6199} => C:\windows\SYSTEM32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation)
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\system32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [1EldosIconOverlay] -> {C3A420F9-A911-4925-B4CB-2909DBDB6199} => C:\windows\SysWOW64\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\SysWow64\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1735395495-2726210869-181527219-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NIS&pvid=20.1.0.24
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473
HKU\S-1-5-21-1735395495-2726210869-181527219-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1735395495-2726210869-181527219-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1735395495-2726210869-181527219-1002 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=34ABCAF7335FAF01&affID=119357&tsp=5015
SearchScopes: HKU\S-1-5-21-1735395495-2726210869-181527219-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473&q={searchTerms}
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-03] (Oracle Corporation)
BHO-x32: delta Helper Object -> {C1AF5FA5-852C-4C90-812E-A7F75E011D87} ->  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-03] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Kika\AppData\Roaming\Mozilla\Firefox\Profiles\xekdt6eg.default
FF DefaultSearchEngine: do-search
FF SelectedSearchEngine: do-search
FF Homepage: hxxp://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-03] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-09-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1735395495-2726210869-181527219-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Kika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-07-07] (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Kika\AppData\Roaming\Mozilla\Firefox\Profiles\xekdt6eg.default\searchplugins\do-search.xml [2015-05-10]

Chrome: 
=======
CHR HomePage: Default -> hxxp://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473
CHR StartupUrls: Default -> "hxxp://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473"
CHR DefaultSearchKeyword: Default -> do-search
CHR DefaultSuggestURL: Default -> 
CHR Profile: C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Angry Birds) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2013-12-11]
CHR Extension: (Google Docs) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-20]
CHR Extension: (Google Drive) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-20]
CHR Extension: (YouTube) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-20]
CHR Extension: (Adblock Plus) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-17]
CHR Extension: (Google Search) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-20]
CHR Extension: (Bookmark Manager) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (Google Wallet) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-20]
CHR Extension: (Gmail) - C:\Users\Kika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-20]
CHR HKLM-x32\...\Chrome\Extension: [dbpebffoameokfhnaaedmefjncfboino] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - No Path Or update_url value

Opera: 
=======
OPR StartupUrls: "hxxp://do-search.com/?type=hp&ts=1431248209&z=091088d95170c2bbae0f31cg7zfccgeo8zcb0ofgeq&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9DCC03473"
OPR Extension: (AdBlock) - C:\Users\Kika\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2014-02-02]
OPR Extension: (Adblock Plus) - C:\Users\Kika\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2014-06-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 31064272; c:\Program Files (x86)\System Optimizer\SysOptCrash.dll [1796128 2015-05-10] ()
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171664 2012-11-06] (Adobe Systems Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-05] (Avira Operations GmbH & Co. KG)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1591176 2012-11-30] (Samsung Electronics CO., LTD.) [File not signed]
R2 EpsonScanSvc; C:\windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 IntelliMemory; C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe [55120 2012-11-01] (Condusiv Technologies)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [75584 2013-09-29] (IObit)
R2 SWUpdateService; C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2876024 2012-12-10] (Samsung Electronics CO., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [152744 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-03-05] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 intmfs; C:\Windows\System32\DRIVERS\intmfs.sys [28496 2012-11-01] (Condusiv Technologies)
R0 intmsd; C:\Windows\System32\DRIVERS\intmsd.sys [104272 2012-11-01] (Condusiv Technologies)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2013-09-23] (ITE                      )
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R1 {345422e3-72fa-447a-9550-97803edfacf3}Gw64; C:\Windows\System32\drivers\{345422e3-72fa-447a-9550-97803edfacf3}Gw64.sys [61120 2014-04-24] (StdLib)
R4 GUBootStartup; \??\C:\WINDOWS\System32\drivers\GUBootStartup.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-15 18:59 - 2015-05-15 19:00 - 00027255 _____ () C:\Users\Kika\Desktop\FRST.txt
2015-05-15 18:59 - 2015-05-15 18:59 - 00000000 ____D () C:\Users\Kika\Desktop\FRST-OlderVersion
2015-05-15 18:57 - 2015-05-15 18:59 - 00000000 ____D () C:\FRST
2015-05-15 18:56 - 2015-05-15 18:56 - 02106368 _____ (Farbar) C:\Users\Kika\Downloads\FRST64 (1).exe
2015-05-15 15:07 - 2015-05-15 19:00 - 00029779 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-14 21:13 - 2015-05-14 21:13 - 00338432 _____ () C:\Users\Kika\Downloads\05_Etyka_wyklad_5_-_zrodlo_moralnosci_.ppt
2015-05-14 08:27 - 2015-05-14 08:27 - 00000000 ___SH () C:\DkHyperbootSync
2015-05-13 12:21 - 2015-05-13 12:21 - 00119808 ____H () C:\Users\Kika\Downloads\photothumb.db
2015-05-13 12:20 - 2015-05-13 12:20 - 00048128 ____H () C:\Users\Kika\Desktop\photothumb.db
2015-05-13 11:38 - 2015-05-13 12:19 - 00000000 ____D () C:\Users\Kika\Desktop\ETYKA
2015-05-11 17:23 - 2015-05-11 17:24 - 17290770 _____ () C:\Users\Kika\Downloads\etyka.rar
2015-05-10 11:47 - 2015-05-10 11:53 - 00000000 ____D () C:\Program Files (x86)\SlimCleaner
2015-05-10 11:47 - 2015-05-10 11:47 - 00003020 _____ () C:\WINDOWS\System32\Tasks\SlimCleaner Run
2015-05-10 11:47 - 2015-05-10 11:47 - 00002483 _____ () C:\Users\Public\Desktop\SlimCleaner.lnk
2015-05-10 11:47 - 2015-05-10 11:47 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2015-05-10 11:47 - 2015-05-10 11:47 - 00000000 ____D () C:\Users\Kika\AppData\Local\SlimWare Utilities Inc
2015-05-10 11:47 - 2015-05-10 11:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner
2015-05-10 11:44 - 2015-05-10 11:45 - 01038656 _____ (SlimWare Utilities, Inc.) C:\Users\Kika\Downloads\slimcleaner-setup.exe
2015-05-10 11:38 - 2015-05-13 09:49 - 00000000 ____D () C:\Program Files (x86)\System Ninja
2015-05-10 11:38 - 2015-05-10 11:38 - 00001067 _____ () C:\Users\Public\Desktop\System Ninja.lnk
2015-05-10 11:38 - 2015-05-10 11:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Ninja
2015-05-10 11:37 - 2015-05-10 11:37 - 02507200 _____ (SingularLabs ) C:\Users\Kika\Downloads\ninja-setup-3.0.6.exe
2015-05-10 11:16 - 2015-05-10 11:16 - 00000000 ____D () C:\ProgramData\GlarySoft
2015-05-10 11:13 - 2015-05-10 11:34 - 00000000 ____D () C:\Users\Kika\AppData\Roaming\GlarySoft
2015-05-10 11:13 - 2015-05-10 11:13 - 00000000 ____D () C:\Users\Kika\AppData\Roaming\DiskDefrag
2015-05-10 11:09 - 2015-05-10 11:09 - 15058280 _____ () C:\Users\Kika\Downloads\gu5setup.exe
2015-05-10 11:08 - 2015-05-10 11:08 - 00741672 _____ (Web software ) C:\Users\Kika\Downloads\Glary-Utilities(13276)-dp.exe
2015-05-10 11:03 - 2015-05-10 11:03 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Auslogics
2015-05-10 11:02 - 2015-05-10 11:03 - 00000000 ____D () C:\ProgramData\Auslogics
2015-05-10 11:01 - 2015-05-10 11:03 - 00001185 _____ () C:\Users\Kika\Desktop\Auslogics BoostSpeed 7.lnk
2015-05-10 11:01 - 2015-05-10 11:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-05-10 11:01 - 2015-05-10 11:03 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2015-05-10 11:01 - 2015-05-10 11:01 - 00001252 _____ () C:\Users\Kika\Desktop\Auslogics Registry Cleaner.lnk
2015-05-10 10:57 - 2015-05-10 10:57 - 00741672 _____ (Web software ) C:\Users\Kika\Downloads\Auslogics-Registry-Cleaner(18986)-dp (1).exe.opdownload
2015-05-10 10:57 - 2015-05-10 10:57 - 00000000 ____D () C:\Users\Kika\AppData\Roaming\do-search
2015-05-10 10:56 - 2015-05-10 10:56 - 07737464 _____ (Auslogics Labs Pty Ltd ) C:\Users\Kika\Downloads\registry-cleaner-setup.exe
2015-05-10 10:55 - 2015-05-10 10:55 - 00741672 _____ (Web software ) C:\Users\Kika\Downloads\Auslogics-Registry-Cleaner(18986)-dp.exe
2015-05-10 10:34 - 2015-05-10 10:34 - 00003366 _____ () C:\WINDOWS\System32\Tasks\Odkurzacz
2015-05-10 10:34 - 2015-05-10 10:34 - 00001071 _____ () C:\Users\Kika\Desktop\Odkurzacz.lnk
2015-05-10 10:34 - 2015-05-10 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz
2015-05-10 10:34 - 2015-05-10 10:34 - 00000000 ____D () C:\Program Files (x86)\Odkurzacz
2015-05-10 10:33 - 2015-05-10 16:28 - 00000000 ____D () C:\Program Files (x86)\System Optimizer
2015-05-10 10:33 - 2015-05-10 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Optimizer
2015-05-10 10:33 - 2015-05-10 10:33 - 04610053 _____ (FranmoSoftware ) C:\Users\Kika\Downloads\odk13.5.0.1911setup_www.INSTALKI.pl.exe
2015-05-10 10:27 - 2015-05-10 10:27 - 00740400 _____ (Generic ) C:\Users\Kika\Downloads\pobierz_Odkurzacz_V13.5.3.1962.exe
2015-05-07 21:31 - 2015-05-07 21:31 - 00000000 ____D () C:\Users\Kika\Desktop\Nowy folder (2)
2015-05-07 20:02 - 2015-05-07 20:02 - 00000162 ____H () C:\Users\Kika\Downloads\~$ogram praktyk.odt
2015-05-07 20:01 - 2015-05-07 20:03 - 00005706 _____ () C:\Users\Kika\Downloads\program praktyk.odt
2015-05-06 16:03 - 2015-05-06 16:03 - 01126045 _____ () C:\Users\Kika\Downloads\Etyka.zip
2015-05-06 15:48 - 2015-05-06 15:48 - 00001637 _____ () C:\Users\Public\Desktop\Market Leader Pre-intermediate DVD-ROM.lnk
2015-05-06 15:31 - 2015-05-06 15:31 - 01257952 _____ () C:\Users\Kika\Downloads\Angielski egzamin B1.rar
2015-05-06 14:29 - 2015-05-13 11:39 - 00000000 ____D () C:\Users\Kika\Desktop\angielski
2015-04-30 15:44 - 2015-04-30 15:44 - 00002042 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-04-28 13:29 - 2015-04-28 13:29 - 00001063 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 29.lnk
2015-04-26 21:53 - 2015-04-26 21:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-25 12:30 - 2015-04-25 12:31 - 00000000 ____D () C:\Users\Kika\Desktop\telefon 25.04
2015-04-21 19:35 - 2015-05-10 10:48 - 00000000 ____D () C:\Users\Kika\Desktop\Nowy folder
2015-04-21 18:59 - 2015-04-30 09:48 - 00000000 ____D () C:\Users\Kika\Desktop\Originals
2015-04-16 08:08 - 2015-04-16 08:13 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-16 08:08 - 2015-04-16 08:08 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-15 22:15 - 2015-04-15 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-04-15 22:15 - 2015-04-15 22:15 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-15 16:39 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-15 16:39 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-15 16:39 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-15 16:39 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-15 16:39 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-15 16:39 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-15 16:39 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-15 16:39 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-15 16:39 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 14:39 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 14:39 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-15 14:39 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-15 14:39 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 14:39 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 14:39 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 14:39 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-15 14:39 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-15 14:39 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-15 14:39 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 14:39 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-15 14:39 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 14:39 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-15 14:38 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-15 14:38 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-15 14:38 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-15 14:38 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 14:38 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 14:38 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-15 14:38 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-15 14:38 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-15 14:38 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-15 14:38 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-15 14:38 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 14:38 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-15 14:38 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-15 14:38 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-15 14:38 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 14:38 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 14:38 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 14:38 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 14:38 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-15 14:38 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-15 14:38 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-15 14:38 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-15 14:38 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-15 14:38 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 14:38 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 14:38 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-15 14:38 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 14:38 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-15 14:38 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 14:38 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-15 14:38 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-15 14:38 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-15 14:38 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-15 14:38 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 14:38 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 14:38 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-15 14:38 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 14:38 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 14:38 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 14:38 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-15 14:38 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-15 14:38 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 14:38 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 14:38 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 14:38 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 14:38 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-15 14:38 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 14:38 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-15 19:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-15 18:59 - 2015-02-14 21:18 - 02106368 _____ (Farbar) C:\Users\Kika\Desktop\FRST64.exe
2015-05-15 18:52 - 2014-11-25 23:54 - 00003996 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{24BDD254-26F4-410D-ADA2-D8B2742A8294}
2015-05-15 16:33 - 2014-10-24 14:11 - 00001082 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-15 13:20 - 2013-12-18 20:20 - 00001350 _____ () C:\WINDOWS\Tasks\HDvid Codec V6.0-updater.job
2015-05-15 13:20 - 2013-12-18 20:20 - 00001242 _____ () C:\WINDOWS\Tasks\HDvid Codec V6.0-codedownloader.job
2015-05-15 13:20 - 2013-12-18 20:20 - 00001152 _____ () C:\WINDOWS\Tasks\HDvid Codec V6.0-enabler.job
2015-05-15 09:55 - 2013-09-19 19:16 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1735395495-2726210869-181527219-1002
2015-05-15 09:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-05-15 08:33 - 2014-10-24 14:11 - 00001078 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-14 22:57 - 2013-09-20 18:12 - 00000000 ____D () C:\Users\Kika\AppData\Roaming\Skype
2015-05-14 20:44 - 2013-09-20 14:28 - 00002211 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-14 19:01 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-05-14 15:33 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-05-14 15:29 - 2013-09-19 19:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-14 15:21 - 2013-09-21 13:30 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-05-14 15:13 - 2013-09-21 13:29 - 140425016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-05-14 15:02 - 2013-10-01 17:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-14 15:00 - 2013-10-01 17:01 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-14 15:00 - 2013-10-01 17:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-14 14:55 - 2014-09-24 16:51 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-14 13:11 - 2012-12-17 14:19 - 00000000 ____D () C:\ProgramData\WinClon
2015-05-14 13:00 - 2013-09-19 19:10 - 01239430 _____ () C:\Users\Kika\AppData\Roaming\AbsoluteReminder.xml
2015-05-14 12:56 - 2014-11-05 14:09 - 00000000 ____D () C:\Users\Kika
2015-05-14 12:55 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-10 12:11 - 2014-11-05 14:09 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-10 12:11 - 2014-11-05 14:09 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-10 12:11 - 2014-11-05 14:09 - 00000000 ____D () C:\Users\Kika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-10 12:11 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2015-05-10 12:11 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-10 12:11 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-10 12:11 - 2013-08-22 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-10 11:48 - 2014-11-05 13:57 - 00000000 ___DC () C:\WINDOWS\Panther
2015-05-10 11:02 - 2012-12-17 13:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-05-10 10:48 - 2015-04-08 14:07 - 00000000 ____D () C:\Users\Kika\Desktop\Nowy folder (11)
2015-05-10 10:48 - 2014-02-04 18:42 - 00000000 ____D () C:\Users\Kika\Downloads\Nowy folder
2015-05-10 10:48 - 2012-08-06 00:44 - 00000000 ____D () C:\WINDOWS\Sec
2015-05-10 10:37 - 2013-10-13 19:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2015-05-10 10:37 - 2013-10-13 19:34 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2015-05-10 10:37 - 2013-09-20 18:12 - 00000000 ____D () C:\ProgramData\Skype
2015-05-10 08:57 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-05-06 15:53 - 2013-09-19 19:09 - 00000000 ____D () C:\Users\Kika\AppData\Local\VirtualStore
2015-05-05 12:23 - 2014-07-16 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-05-05 12:21 - 2014-07-16 11:32 - 00152744 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2015-05-05 12:21 - 2014-07-16 11:32 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2015-05-03 09:38 - 2014-06-13 01:56 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-03 09:37 - 2014-06-13 01:54 - 00000000 ____D () C:\Program Files (x86)\Java
2015-05-03 09:36 - 2014-06-13 01:55 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-05-02 15:17 - 2013-09-20 14:26 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-04-30 15:44 - 2015-04-11 12:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-04-30 15:43 - 2012-12-17 12:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-30 15:38 - 2013-12-25 00:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-28 13:29 - 2015-01-28 10:44 - 00003880 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1379697450
2015-04-20 20:46 - 2015-04-09 19:31 - 00000000 ____D () C:\Users\Kika\Desktop\Z TELEFONU
2015-04-16 21:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-16 17:08 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-04-16 08:08 - 2014-12-11 07:55 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-16 08:08 - 2014-09-24 18:37 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel

==================== Files in the root of some directories =======

2013-09-19 19:10 - 2015-05-14 13:00 - 1239430 _____ () C:\Users\Kika\AppData\Roaming\AbsoluteReminder.xml
2013-12-20 17:47 - 2014-02-03 19:55 - 0001885 _____ () C:\Users\Kika\AppData\Roaming\LiveSupport.exe_log.txt
2013-12-20 17:47 - 2014-02-07 22:55 - 0000092 _____ () C:\Users\Kika\AppData\Roaming\regsvr32.exe_log.txt
2013-09-20 14:52 - 2013-09-20 14:56 - 0002089 _____ () C:\Users\Kika\AppData\Local\Temprir668.html
2013-09-20 14:52 - 2013-09-20 14:56 - 0002432 _____ () C:\Users\Kika\AppData\Local\TempyZj668.html
2012-12-17 14:24 - 2012-08-08 06:07 - 2258432 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe
2012-12-17 14:24 - 2012-08-07 12:11 - 0003196 _____ () C:\ProgramData\MakeMarkerFile.xml

Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe


Some content of TEMP:
====================
C:\Users\Kika\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-15 09:42

==================== End Of Log ============================