Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-12-2015
Ran by KO (administrator) on KO-PC (17-12-2015 23:17:16)
Running from C:\Users\KO\Downloads
Loaded Profiles: KO (Available Profiles: KO)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(BitTorrent, Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Jing\Jing.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Ghisler Software GmbH) C:\Program Files (x86)\Total CMA Pack\TOTALCMD.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSMonitorServicePDVD14.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Unified Intents AB) C:\Program Files (x86)\Unified Remote\RemoteServer.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3540 series\Bin\ScanToPCActivationApp.exe
(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\loggingserver.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD14\Common\CLMPSvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3540 series\Bin\HPNetworkCommunicatorCom.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11858536 2011-06-07] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1757520 2014-12-08] (Bitdefender)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PowerDVD13Agent] => C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe [517144 2013-07-05] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795672 2014-03-17] (CyberLink Corp.)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2814864 2015-12-17] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [917112 2015-10-08] (BlueStack Systems, Inc.)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [uTorrent] => C:\Program Files (x86)\uTorrent\uTorrent.exe [969104 2012-12-19] (BitTorrent, Inc.)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [Total CMA Pack] => C:\Program Files (x86)\Total CMA Pack\Total CMA Pack.exe [63290 2011-09-30] (CMA®)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [6A74C55672FC087E18B134B7F65CAF1447F8C225._service_run] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [741704 2015-12-11] (Google Inc.)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [Jing] => C:\Program Files (x86)\TechSmith\Jing\Jing.exe [2911224 2015-09-11] (TechSmith Corporation)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [568400 2014-12-08] (Bitdefender)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [Bitdefender Wallet] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1002048 2014-08-13] (Bitdefender)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [Bitdefender Wallet Application Agent] => C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [615256 2014-08-13] (Bitdefender)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [Unified Remote v2] => C:\Program Files (x86)\Unified Remote\RemoteServer.exe [333008 2014-10-02] (Unified Intents AB)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [GoogleChromeAutoLaunch_5F4AA3C5639732D365D0165A4769D9D6] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [741704 2015-12-11] (Google Inc.)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [HP Deskjet 3540 series (NET)] => C:\Program Files\HP\HP Deskjet 3540 series\Bin\ScanToPCActivationApp.exe [3487240 2014-03-06] (Hewlett-Packard Co.)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [ChomikBox] => C:\Program Files (x86)\ChomikBox\chomikbox.exe [6033408 2014-03-11] ( )
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50509440 2015-11-30] (Skype Technologies S.A.)
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\MountPoints2: {0d4a9f03-9acc-11e2-9c7c-50e549e56c76} - H:\MicroLauncher.exe
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\MountPoints2: {6d28180c-673c-11e4-b830-50e549e56c76} - I:\Startme.exe
HKU\S-1-5-21-2044814858-3257045265-4192325483-1000\...\MountPoints2: {d5373aa6-7305-11e3-9005-50e549e56c76} - G:\setup.exe
HKU\S-1-5-18\...\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [568400 2014-12-08] (Bitdefender)
HKU\S-1-5-18\...\Run: [Bitdefender Wallet] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1002048 2014-08-13] (Bitdefender)
HKU\S-1-5-18\...\Run: [Bitdefender Wallet Application Agent] => C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [615256 2014-08-13] (Bitdefender)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-03-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2013-07-08] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2013-07-08] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2013-07-08] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2013-07-08] (Bitdefender)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{5FD09654-01C1-4942-AD66-55F3820378A2}: [DhcpNameServer] 62.179.1.61 62.179.1.63
Tcpip\..\Interfaces\{9FA8CFA0-97BF-46DF-BE97-EA560E8CA42F}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A235492D-C775-4E87-BE24-997B3CEBA87B}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450070380&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm07173&uid=ST3250410AS_6RY1WRLEXXXX6RY1WRLE&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450070380&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm07173&uid=ST3250410AS_6RY1WRLEXXXX6RY1WRLE&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-21-2044814858-3257045265-4192325483-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-21-2044814858-3257045265-4192325483-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-21-2044814858-3257045265-4192325483-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={93343963-E764-42B8-8047-6BE83FD753AE}&mid=6b0653b77c2147d08c5181ac0f018585-4323c9a1a5a383db39737bd017fae0a1668e3319&lang=en&ds=AVG&coid=avgtbavg&cmpid=0915wt&pr=un&d=2015-09-13 20:01:02&v=4.1.6.294&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Bitdefender Wallet  -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll [2014-08-13] (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-02] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-02] (Oracle Corporation)
BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll [2014-08-13] (Bitdefender)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-05-19] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2015-12-17] (AVG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-05-19] (Oracle Corporation)
BHO-x32: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll [2011-02-09] (ALLCinema Ltd.)
Toolbar: HKU\S-1-5-21-2044814858-3257045265-4192325483-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1448450618&z=75314eddb34a151c27cebf0g8z7z3bdz0wfeccbc5m&from=cor&uid=ST3250410AS_6RY1WRLEXXXX6RY1WRLE

FireFox:
========
FF ProfilePath: C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: yoursites123
FF SelectedSearchEngine: yoursites123
FF Homepage: hxxp://www.yoursites123.com/?type=hp&ts=1450070380&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm07173&uid=ST3250410AS_6RY1WRLEXXXX6RY1WRLE
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll [2013-04-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-04-02] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.4\\npsitesafety.dll [No File]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2044814858-3257045265-4192325483-1000: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-05-26] (The Happy Cloud)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2015-08-17]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-12-17]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yoursites123.xml [2015-12-14]
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman [2013-10-17] [not signed]
FF Extension: DownloadHelper - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2015-06-24]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\extensions\adblockpopups@jessehakanen.net.xpi [2015-06-24]
FF Extension: EPUBReader - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-06-24]
FF Extension: Default NewTab - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\extensions\default_newtabff@gmail.com [2015-12-14] [not signed]
FF Extension: No Name - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\Extensions\avg@toolbar.xpi [2015-12-17] [not signed]
FF Extension: Iplex to ALLPlayer - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2013-07-31] [not signed]
FF Extension: Adblock Plus - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-17]
FF Extension: Adblock Edge - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2015-06-12]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2013-10-17] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\KO\AppData\Roaming\Mozilla\Firefox\Profiles\16nhte20.default\extensions\default_newtabff@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1450070380&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm07173&uid=ST3250410AS_6RY1WRLEXXXX6RY1WRLE

Chrome: 
=======
CHR HomePage: Profile 1 -> hxxps://www.google.pl/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.pl/"
CHR Profile: C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dysk Google) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-19]
CHR Extension: (YouTube) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-11]
CHR Extension: (Bitdefender Wallet) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-11-07]
CHR Extension: (Battlefield Heroes) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh [2013-04-02]
CHR Extension: (Adblock Plus) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-04]
CHR Extension: (Szukaj w Google) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-30]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2014-06-06]
CHR Extension: (Google Wallet) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-20]
CHR Extension: (MyHarmony Chrome Plugin) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\omaonpoimgkmbllpdihbnmgphjoipdhf [2012-12-25]
CHR Extension: (Gmail) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-19]
CHR Profile: C:\Users\KO\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Dokumenty Google) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-25]
CHR Extension: (Dysk Google) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-25]
CHR Extension: (YouTube) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-25]
CHR Extension: (Bitdefender Wallet) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2015-11-25]
CHR Extension: (Google Search) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-25]
CHR Extension: (Dokumenty Google offline) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-25]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\KO\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-25]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-12-08]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2014-08-13] (Bitdefender)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.)
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-03-17] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [File not signed]
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-07-05] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-07-05] (CyberLink)
R2 CyberLink PowerDVD 14 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSMonitorServicePDVD14.exe [77576 2014-03-17] (CyberLink)
R2 CyberLink PowerDVD 14 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe [323336 2014-03-17] (CyberLink)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
S2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [327064 2010-05-18] (Enigma Software Group USA, LLC.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2014-08-13] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1538672 2014-12-08] (Bitdefender)
S2 vToolbarUpdater40.2.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe [1923984 2015-12-17] (AVG Secure Search)
S2 WdMan; C:\ProgramData\SWdMS\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1164688 2015-12-17] ()

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1288472 2014-12-08] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [263032 2014-12-08] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-08-13] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2015-01-30] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-13] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-01] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 esgiguard; C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [5248 2010-01-27] () [File not signed]
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-06-22] ()
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2010-03-06] (Marvell Semiconductor, Inc.)
S3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [416768 2009-06-10] (Realtek Semiconductor Corporation                           )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2014-01-01] (Duplex Secure Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-12-08] (BitDefender S.R.L.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-17 23:08 - 2015-12-17 23:08 - 00007950 _____ C:\Users\KO\Desktop\1.txt
2015-12-17 23:06 - 2015-12-17 23:06 - 00000000 ____D C:\Users\KO\Desktop\backups
2015-12-17 22:49 - 2015-12-17 23:17 - 00031495 _____ C:\Users\KO\Downloads\FRST.txt
2015-12-17 22:49 - 2015-12-17 23:17 - 00000000 ____D C:\FRST
2015-12-17 22:49 - 2015-12-17 22:51 - 00065894 _____ C:\Users\KO\Downloads\Addition.txt
2015-12-17 22:49 - 2015-12-17 22:49 - 02370048 _____ (Farbar) C:\Users\KO\Downloads\FRST64.exe
2015-12-17 22:46 - 2015-12-17 22:46 - 00671232 _____ C:\Users\KO\Downloads\MicrosoftFixit50688.msi
2015-12-17 21:47 - 2015-12-17 22:34 - 00001430 _____ C:\spyhunter.fix
2015-12-17 21:18 - 2015-12-17 21:18 - 00003320 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2015-12-17 21:18 - 2015-12-17 21:18 - 00002242 _____ C:\Users\KO\Desktop\SpyHunter.lnk
2015-12-17 21:18 - 2015-12-17 21:18 - 00000000 ____D C:\Users\KO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2015-12-17 21:18 - 2015-12-17 21:18 - 00000000 ____D C:\sh4ldr
2015-12-17 21:18 - 2015-12-17 21:18 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2015-12-17 21:17 - 2015-12-17 21:18 - 00000000 ____D C:\Windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2015-12-17 21:14 - 2015-12-17 21:14 - 00000000 ____D C:\Users\KO\Downloads\backups
2015-12-17 21:08 - 2015-12-17 21:08 - 00388608 _____ (Trend Micro Inc.) C:\Users\KO\Desktop\HijackThis.exe
2015-12-17 21:05 - 2015-12-17 21:06 - 00000000 ____D C:\Users\KO\Desktop\SpyHunter 4.16.5.4290 [Eng] patch
2015-12-14 22:12 - 2015-12-14 22:12 - 45503175 _____ C:\Users\KO\Downloads\SpyHunter_4.17.6.4336 [Eng]   patch.rar
2015-12-14 21:26 - 2015-12-14 21:26 - 00000000 _____ C:\autoexec.bat
2015-12-14 21:25 - 2015-12-14 21:25 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\KO\Downloads\sh-remover.exe
2015-12-14 06:19 - 2015-12-14 06:21 - 00000000 ____D C:\ProgramData\SWdMS
2015-12-14 06:19 - 2015-12-14 06:19 - 00000042 _____ C:\Windows\SysWOW64\Z
2015-12-14 06:19 - 2015-12-14 06:19 - 00000000 ____D C:\ProgramData\ZWdMZ
2015-12-13 17:14 - 2015-12-13 18:59 - 00010425 _____ C:\Users\KO\Desktop\AGD.xlsx
2015-12-13 16:57 - 2015-12-13 16:57 - 00030236 _____ C:\Users\KO\Downloads\transfer_20151210 (3).pdf
2015-12-13 16:57 - 2015-12-13 16:57 - 00029744 _____ C:\Users\KO\Downloads\transfer_20151210 (2).pdf
2015-12-13 16:56 - 2015-12-13 16:56 - 00030175 _____ C:\Users\KO\Downloads\transfer_20151210 (1).pdf
2015-12-13 16:54 - 2015-12-13 16:54 - 00030909 _____ C:\Users\KO\Downloads\transfer_20151210.pdf
2015-12-13 16:53 - 2015-12-13 16:53 - 00030100 _____ C:\Users\KO\Downloads\transfer_20151214.pdf
2015-12-12 15:33 - 2015-12-12 15:33 - 00073816 _____ C:\Users\KO\Downloads\Big Eyes  2014  [Bluray 1080p x264 DTS-HighCode] [Napisy PL][Torrenty.org].torrent
2015-12-11 15:15 - 2015-12-11 15:15 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2015-12-10 20:11 - 2015-12-10 20:12 - 00000000 ____D C:\Users\KO\Desktop\kuchnia
2015-12-09 22:23 - 2015-12-09 22:23 - 07613657 _____ C:\Users\KO\Downloads\291301umPL.pdf
2015-12-09 17:35 - 2015-12-09 17:35 - 00013107 _____ C:\Users\KO\Downloads\Tremors 5  Bloodlines  2015  [1080p AC3 BDRip x264-gix] [Lektor PL] [ AT-Team][Torrenty.org].torrent
2015-12-09 17:30 - 2015-12-09 17:30 - 00054951 _____ C:\Users\KO\Downloads\System_-_Child_44_ 2015 _[DVDRip x264][DualAudio_PL _EN][Lektor_PL][AC-3][Napisy_PL][Torrenty.org].torrent
2015-12-09 17:27 - 2015-12-09 17:27 - 00020520 _____ C:\Users\KO\Downloads\Carte_Blanche_ 2014 _[720p VODRip x264-B666]_[PL][Torrenty.org].torrent
2015-12-04 08:50 - 2015-12-04 08:50 - 00012685 _____ C:\Users\KO\Downloads\Dar_ _The_Gift_ 2015 _[720p BluRay x264 AC3-K12]_[Lektor_PL][Torrenty.org].torrent
2015-12-04 08:48 - 2015-12-04 08:48 - 00012010 _____ C:\Users\KO\Downloads\Maly_Ksiaze_ _Le_petit_prince_ _The_Little_Prince_ 2015 _[720p BluRay x264 AC3-K12]_[Dubbing_PL][Torrenty.org].torrent
2015-12-03 22:15 - 2015-12-04 07:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-12-02 16:12 - 2015-12-02 19:03 - 00000000 ____D C:\Users\KO\Desktop\Stylowa 6
2015-11-26 12:39 - 2015-11-26 12:39 - 00095542 _____ C:\Users\KO\Desktop\wyniki.pdf
2015-11-25 14:47 - 2015-11-25 14:47 - 00001767 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2015-11-25 14:46 - 2015-11-25 14:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2015-11-25 14:46 - 2015-11-25 14:46 - 00000000 ____D C:\ProgramData\BlueStacks
2015-11-25 14:46 - 2015-11-25 14:46 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2015-11-25 14:44 - 2015-11-25 14:45 - 274585064 _____ (BlueStack Systems Inc.) C:\Users\KO\Downloads\BlueStacks-Installer_native.exe
2015-11-25 12:38 - 2015-11-25 12:38 - 05611251 _____ C:\Users\KO\Desktop\wordtopdf_setup [1].rar
2015-11-25 12:38 - 2015-11-25 12:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Word To PDF
2015-11-25 12:38 - 2015-11-25 12:38 - 00000000 ____D C:\Program Files (x86)\Free Word To PDF
2015-11-25 12:24 - 2015-11-25 12:28 - 00000000 ____D C:\Users\KO\AppData\Roaming\StormFall
2015-11-25 12:24 - 2015-11-25 12:27 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2015-11-25 12:24 - 2015-11-25 12:27 - 00000000 ____D C:\Program Files (x86)\Lenovo
2015-11-25 12:24 - 2015-11-25 12:24 - 00000000 ___HD C:\Users\KO\AppData\Roaming\GoldenGate
2015-11-25 12:24 - 2015-11-25 12:24 - 00000000 ____D C:\Windows\Downloaded Installations
2015-11-25 12:24 - 2015-11-25 12:24 - 00000000 ____D C:\Users\KO\REACHit
2015-11-25 12:24 - 2015-11-25 12:24 - 00000000 ____D C:\Users\KO\AppData\Local\StormFall
2015-11-25 12:24 - 2015-11-25 12:24 - 00000000 ____D C:\Users\KO\AppData\Local\Lenovo
2015-11-25 12:24 - 2015-11-25 12:24 - 00000000 ____D C:\ProgramData\NortonInstaller
2015-11-25 12:23 - 2015-12-14 06:19 - 00002494 _____ C:\Users\KO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk
2015-11-25 12:23 - 2015-12-14 06:19 - 00000000 ____D C:\ProgramData\MWMiniProM
2015-11-25 12:23 - 2015-11-25 12:28 - 00000000 ____D C:\Users\KO\AppData\Roaming\WarThunder
2015-11-25 12:23 - 2015-11-25 12:23 - 05627653 _____ (Free Word To PDF ) C:\Users\KO\Desktop\wordtopdf_setup [1].exe
2015-11-25 12:23 - 2015-11-25 12:23 - 00000170 _____ C:\Users\KO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url
2015-11-25 12:23 - 2015-11-16 05:13 - 01037880 _____ (Internet Program ) C:\Users\KO\AppData\Local\wordtopdf_setup.exe
2015-11-24 15:09 - 2015-11-24 15:09 - 00019466 _____ C:\Users\KO\Downloads\O_dziewczynie _ktora_wraca_noca_sama_do_domu_ _A_Girl_Walks_Home_Alone_at_Night_ 2014 _[720p BluRay x264-KiT]_[Lektor_PL][Torrenty.org].torrent
2015-11-24 15:07 - 2015-11-24 15:07 - 00019416 _____ C:\Users\KO\Downloads\Z_jak_Zachariasz_ _Z_for_Zachariah_ 2015 _[720p BluRay x264 AC3-K12_]_[Lektor_PL][Torrenty.org].torrent
2015-11-24 15:04 - 2015-11-24 15:04 - 00014262 _____ C:\Users\KO\Downloads\Klucz_do_wiecznosci_ _Self less_ 2015 _[720p BluRay x264 AC3-KiT]_[Lektor_PL][Torrenty.org].torrent
2015-11-24 15:01 - 2015-11-24 15:01 - 00067994 _____ C:\Users\KO\Downloads\Maze Runner  The Scorch Trials  2015  [1080p Bluray x264 DTS-HD MA 7 1-RARBG] [Napisy PL][Torrenty.org].torrent
2015-11-24 14:58 - 2015-11-24 14:58 - 00015336 _____ C:\Users\KO\Downloads\Ted_2_ 2015 _[1080p AC3 BDRip x264-gix]_[Lektor_PL]_[AT-Team][Torrenty.org].torrent
2015-11-24 14:56 - 2015-11-24 14:56 - 00016336 _____ C:\Users\KO\Downloads\Ant-Man  2015  [1080p AC3 BDRip x264-gix] [Dubbing PL] [AT-Team][Torrenty.org].torrent
2015-11-23 14:23 - 2015-11-23 14:23 - 00000000 ____D C:\ProgramData\bdch
2015-11-18 12:12 - 2015-11-18 12:12 - 00028816 _____ C:\Users\KO\Downloads\Symetria_ 2004 _[DVDRip XviD]_[PL][Torrenty.org].torrent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-17 23:16 - 2012-12-19 22:16 - 00000000 ____D C:\Users\KO\AppData\Roaming\uTorrent
2015-12-17 23:14 - 2012-12-19 22:48 - 00000000 ____D C:\Users\KO\AppData\Roaming\Skype
2015-12-17 23:14 - 2012-12-19 22:05 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-17 22:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-17 22:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-17 22:43 - 2009-07-14 05:45 - 00022528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-17 22:43 - 2009-07-14 05:45 - 00022528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-17 22:41 - 2012-12-21 16:06 - 00743754 _____ C:\Windows\system32\perfh015.dat
2015-12-17 22:41 - 2012-12-21 16:06 - 00157236 _____ C:\Windows\system32\perfc015.dat
2015-12-17 22:41 - 2009-07-14 06:13 - 01679266 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-17 22:38 - 2015-07-04 17:38 - 00000000 ____D C:\Users\KO\AppData\Local\ChomikBox
2015-12-17 22:36 - 2014-01-04 14:16 - 00000000 ____D C:\Users\KO\AppData\Local\LogMeIn Hamachi
2015-12-17 22:35 - 2015-07-04 17:39 - 00000000 ____D C:\Users\KO\.gstreamer-0.10
2015-12-17 22:35 - 2012-12-19 22:05 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-17 22:35 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-17 22:34 - 2013-10-28 19:46 - 00910806 _____ C:\bdlog.txt
2015-12-17 22:34 - 2013-10-13 18:37 - 00061088 _____ C:\Windows\system32\BMXStateBkp-{00000004-00000000-00000001-00001102-00000005-00311102}.rfx
2015-12-17 22:34 - 2013-10-13 18:37 - 00061088 _____ C:\Windows\system32\BMXState-{00000004-00000000-00000001-00001102-00000005-00311102}.rfx
2015-12-17 22:34 - 2013-10-13 18:37 - 00000788 _____ C:\Windows\system32\DVCState-{00000004-00000000-00000001-00001102-00000005-00311102}.rfx
2015-12-17 22:26 - 2013-05-29 22:05 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-17 21:18 - 2015-01-12 20:31 - 00000000 __SHD C:\Users\KO\AppData\Local\EmieBrowserModeList
2015-12-17 21:18 - 2014-08-28 20:03 - 00000000 __SHD C:\Users\KO\AppData\Local\EmieUserList
2015-12-17 21:18 - 2014-08-28 20:03 - 00000000 __SHD C:\Users\KO\AppData\Local\EmieSiteList
2015-12-17 21:14 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\Downloaded Program Files
2015-12-17 12:39 - 2015-09-13 19:00 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2015-12-14 06:19 - 2013-01-14 00:22 - 00001457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-14 06:19 - 2012-12-19 21:20 - 00001719 _____ C:\Users\KO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-13 16:54 - 2015-05-02 09:18 - 00000000 ____D C:\Users\KO\Desktop\Bądkowskiego
2015-12-10 20:12 - 2015-07-20 17:34 - 00000000 ____D C:\Users\KO\Desktop\Wesele
2015-12-09 21:53 - 2014-12-18 21:53 - 00000270 _____ C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job
2015-12-09 16:26 - 2015-10-14 19:26 - 09498816 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-12-09 16:26 - 2013-05-29 22:05 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-09 16:26 - 2012-12-19 21:47 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-09 16:26 - 2012-12-19 21:47 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-07 19:13 - 2012-12-19 22:48 - 00000000 ____D C:\ProgramData\Skype
2015-12-04 21:07 - 2013-01-14 00:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-04 16:03 - 2015-01-02 19:20 - 00000000 ____D C:\Users\KO\Desktop\Nowy Horyzont bud. 5
2015-12-03 21:09 - 2012-12-19 22:05 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-03 21:09 - 2012-12-19 22:05 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 19:03 - 2014-06-07 14:08 - 00000132 _____ C:\Users\KO\AppData\Roaming\Preferencje Adobe CS5 dla formatu BMP
2015-11-29 21:01 - 2012-12-19 23:38 - 00000000 ____D C:\Users\KO\AppData\Roaming\AIMP3
2015-11-28 21:53 - 2014-12-18 21:53 - 00000286 _____ C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job
2015-11-25 14:52 - 2013-01-30 19:44 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2015-11-25 14:47 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2015-11-25 12:25 - 2014-12-18 21:52 - 00000000 ____D C:\Users\KO\AppData\Roaming\dll-files.com
2015-11-25 12:24 - 2014-07-20 17:37 - 00000000 ____D C:\Users\KO\AppData\Local\Downloaded Installations
2015-11-25 12:24 - 2012-12-19 21:19 - 00000000 ____D C:\Users\KO
2015-11-18 12:07 - 2014-12-15 15:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-11-18 12:07 - 2014-12-15 15:42 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2015-11-18 12:07 - 2014-10-20 15:02 - 00000886 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

==================== Files in the root of some directories =======

2013-12-09 16:12 - 2014-06-23 14:29 - 0003702 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2014-01-01 17:53 - 2014-01-03 10:20 - 0099384 _____ () C:\Users\KO\AppData\Roaming\inst.exe
2014-01-01 17:53 - 2014-01-03 10:20 - 0007859 _____ () C:\Users\KO\AppData\Roaming\pcouffin.cat
2014-01-01 17:53 - 2014-01-03 10:20 - 0001167 _____ () C:\Users\KO\AppData\Roaming\pcouffin.inf
2014-01-01 17:54 - 2014-01-03 10:20 - 0000033 _____ () C:\Users\KO\AppData\Roaming\pcouffin.log
2014-01-01 17:53 - 2014-01-03 10:20 - 0082816 _____ (VSO Software) C:\Users\KO\AppData\Roaming\pcouffin.sys
2014-06-07 14:08 - 2015-12-02 19:03 - 0000132 _____ () C:\Users\KO\AppData\Roaming\Preferencje Adobe CS5 dla formatu BMP
2015-06-07 20:50 - 2015-09-27 10:36 - 0000132 _____ () C:\Users\KO\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
2013-03-24 18:59 - 2013-03-24 19:40 - 0032256 _____ () C:\Users\KO\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-16 05:13 - 2015-11-16 05:13 - 0986955 _____ () C:\Users\KO\AppData\Local\Word-to-PDF-Converter_1357.rar
2015-11-25 12:23 - 2015-11-16 05:13 - 1037880 _____ (Internet Program                                            ) C:\Users\KO\AppData\Local\wordtopdf_setup.exe
2013-10-28 19:36 - 2013-10-28 19:36 - 0662212 _____ () C:\ProgramData\1382984653.bdinstall.bin
2015-05-19 18:03 - 2015-05-19 18:03 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-03-10 19:59 - 2015-03-10 19:59 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some files in TEMP:
====================
C:\Users\KO\AppData\Local\Temp\AcDeltree.exe
C:\Users\KO\AppData\Local\Temp\FreeVideoEditor.exe
C:\Users\KO\AppData\Local\Temp\gert0.exe
C:\Users\KO\AppData\Local\Temp\gtapi_signed.dll
C:\Users\KO\AppData\Local\Temp\JingSetup.exe
C:\Users\KO\AppData\Local\Temp\jna1031276666183346017.dll
C:\Users\KO\AppData\Local\Temp\jna2548182869995119884.dll
C:\Users\KO\AppData\Local\Temp\jna3229724678967640841.dll
C:\Users\KO\AppData\Local\Temp\jna3353486794317370005.dll
C:\Users\KO\AppData\Local\Temp\jna4040673141934338204.dll
C:\Users\KO\AppData\Local\Temp\jna4178990289177702970.dll
C:\Users\KO\AppData\Local\Temp\jna4970573565295387468.dll
C:\Users\KO\AppData\Local\Temp\jna5163932704743974826.dll
C:\Users\KO\AppData\Local\Temp\jna6007007525480888589.dll
C:\Users\KO\AppData\Local\Temp\jna7317351570120745708.dll
C:\Users\KO\AppData\Local\Temp\jna7546437063188745564.dll
C:\Users\KO\AppData\Local\Temp\jna8284807421168296251.dll
C:\Users\KO\AppData\Local\Temp\jna832777602612853197.dll
C:\Users\KO\AppData\Local\Temp\jna8996128138738652503.dll
C:\Users\KO\AppData\Local\Temp\siinst.exe
C:\Users\KO\AppData\Local\Temp\SIntf16.dll
C:\Users\KO\AppData\Local\Temp\SIntf32.dll
C:\Users\KO\AppData\Local\Temp\SIntfNT.dll
C:\Users\KO\AppData\Local\Temp\SkypeSetup.exe
C:\Users\KO\AppData\Local\Temp\strings.dll
C:\Users\KO\AppData\Local\Temp\t.dll
C:\Users\KO\AppData\Local\Temp\wget.exe
C:\Users\KO\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-11 15:44

==================== End of FRST.txt ============================