Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-12-2015
Ran by Ja (administrator) on RAFAL (18-12-2015 19:19:38)
Running from C:\Users\Ja\Desktop
Loaded Profiles: Ja & UpdatusUser (Available Profiles: Ja & UpdatusUser)
Platform: Windows 10 Pro (X64) Language: Angielski (Zjednoczone Królestwo)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(Disc Soft Ltd) D:\DAEMON Tools Lite\DiscSoftBusService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(MSI) C:\Program Files (x86)\SCM\SCM.exe
(Spotify Ltd) C:\Users\Ja\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Ja\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Ja\AppData\Roaming\Spotify\SpotifyCrashService.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\KLM\KLM.exe
(Spotify Ltd) C:\Users\Ja\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Ja\AppData\Roaming\Spotify\Spotify.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3347680 2015-12-07] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2014-08-14] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SCM] => c:\Program Files (x86)\SCM\SCM.exe [405504 2014-09-01] (MSI)
HKLM-x32\...\Run: [KLM] => C:\Program Files (x86)\MSI\KLM\KLM.exe [1566344 2014-04-08] (Micro-Star International Co., Ltd.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKU\S-1-5-21-3464617433-2053413537-2677913718-1001\...\Run: [Spotify Web Helper] => C:\Users\Ja\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2345584 2015-12-02] (Spotify Ltd)
HKU\S-1-5-21-3464617433-2053413537-2677913718-1001\...\Run: [Spotify] => C:\Users\Ja\AppData\Roaming\Spotify\Spotify.exe [8270448 2015-12-02] (Spotify Ltd)
HKU\S-1-5-21-3464617433-2053413537-2677913718-1001\...\Run: [DAEMON Tools Lite Automount] => D:\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-3464617433-2053413537-2677913718-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-3464617433-2053413537-2677913718-1001\...\MountPoints2: {65fa8dda-870c-11e5-825a-448a5bf1742e} - "H:\setup.exe" 
HKU\S-1-5-21-3464617433-2053413537-2677913718-1001\...\MountPoints2: {65fa90e9-870c-11e5-825a-448a5bf1742e} - "G:\setup.exe" 
HKU\S-1-5-21-3464617433-2053413537-2677913718-1002\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-07-10] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-10-14]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{29CDA0F1-A6DA-44CC-9ABB-131A7D3D77AE}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254 0.0.0.0
Tcpip\..\Interfaces\{3d8bb8f9-b4d4-40aa-b5b5-c5b2ea3d6ac6}: [DhcpNameServer] 37.8.214.2 31.11.202.254 0.0.0.0

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130935572574655114&GUID=15C53E44-6A5F-4B90-B067-532B2451E152
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130935572574661506&GUID=15C53E44-6A5F-4B90-B067-532B2451E152
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3464617433-2053413537-2677913718-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130935572574668390&GUID=15C53E44-6A5F-4B90-B067-532B2451E152
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-3464617433-2053413537-2677913718-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-3464617433-2053413537-2677913718-1001 -> hxxp://do-search.com/?type=hp&ts=1447092136&z=76ad15a328cc92ce9e05c7fgez7z9mfe1t7oegccfq&from=dae&uid=hgstxhts721010a9e630_jr10006p1g44uf1g44ufx

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)

Chrome: 
=======
CHR DefaultSearchKeyword: Profile 3 -> t
CHR Profile: C:\Users\Ja\AppData\Local\Google\Chrome\User Data\Default
CHR Profile: C:\Users\Ja\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Profile: C:\Users\Ja\AppData\Local\Google\Chrome\User Data\Profile 3
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Ja\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-09]
CHR HKLM\...\Chrome\Extension: [iccodbepgnkhafhjajchdjkadbflkijl] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [iccodbepgnkhafhjajchdjkadbflkijl] - C:\Users\Ja\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\iccodbepgnkhafhjajchdjkadbflkijl.crx [2015-11-15]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 Disc Soft Lite Bus Service; D:\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144096 2015-12-07] (ELAN Microelectronics Corp.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-17] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 Micro Star SCM; c:\Program Files (x86)\SCM\MSIService.exe [160768 2014-09-01] (Micro-Star International Co., Ltd.) [File not signed]
S2 MustangService_2015_10_10; C:\ProgramData\TempMoudleSet\MustangSer1558.exe [236816 2015-10-09] (MustangService)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-03-04] (Qualcomm Atheros) [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [81072 2014-02-20] (Qualcomm Atheros, Inc.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-11-09] (Disc Soft Ltd)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-12-02] ()
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [263952 2015-07-14] (Intel Corporation)
R3 Ke2200; C:\Windows\System32\drivers\e22w8x64.sys [163536 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3496216 2015-06-18] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-09-27] (NVIDIA Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-02-21] (Realsil Semiconductor Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-18 19:19 - 2015-12-18 19:20 - 00015066 _____ C:\Users\Ja\Desktop\FRST.txt
2015-12-18 19:19 - 2015-12-18 19:19 - 00000000 ____D C:\Users\Ja\Desktop\FRST-OlderVersion
2015-12-18 18:44 - 2015-12-18 18:44 - 00016148 _____ C:\WINDOWS\system32\RAFAL_Ja_HistoryPrediction.bin
2015-12-13 12:48 - 2015-12-13 12:48 - 00003266 _____ C:\WINDOWS\System32\Tasks\{2D53EADF-C5F8-4742-9DAF-D30F65B3CB77}
2015-12-07 20:32 - 2015-12-07 20:32 - 00057064 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\ETDCoInstaller01000.dll
2015-12-07 20:32 - 2015-12-07 20:32 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ETD_01011.Wdf
2015-12-02 21:25 - 2015-12-02 21:25 - 00002844 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-12-02 21:25 - 2015-12-02 21:25 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-12-02 21:25 - 2015-12-02 21:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-12-02 21:24 - 2015-12-02 21:25 - 00000000 ____D C:\Program Files\CCleaner
2015-12-02 21:23 - 2015-12-02 21:24 - 06801752 _____ (Piriform Ltd) C:\Users\Ja\Desktop\ccsetup512.exe
2015-12-02 21:16 - 2015-12-02 21:19 - 00000000 ____D C:\AdwCleaner
2015-12-02 21:15 - 2015-12-02 21:16 - 01736704 _____ C:\Users\Ja\Desktop\adwcleaner_5.023.exe
2015-12-02 20:48 - 2015-12-02 20:48 - 07888323 _____ C:\Users\Ja\Desktop\policy_templates.zip
2015-12-02 20:26 - 2015-12-18 19:19 - 00000000 ____D C:\FRST
2015-12-02 20:20 - 2015-12-18 19:19 - 02370048 _____ (Farbar) C:\Users\Ja\Desktop\FRST64.exe
2015-12-02 19:55 - 2015-12-02 19:55 - 00000000 _____ C:\autoexec.bat
2015-12-02 19:54 - 2015-12-02 19:54 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-02 19:40 - 2015-12-02 19:40 - 00000000 ___HD C:\$WINDOWS.~BT
2015-11-24 21:10 - 2015-11-27 17:25 - 00000000 ____D C:\Users\Ja\Desktop\systemy
2015-11-22 12:55 - 2015-11-22 12:55 - 00032256 _____ C:\Users\Ja\Desktop\SWOT-PKO-BP.xls
2015-11-20 16:09 - 2015-11-21 08:22 - 00000000 ____D C:\Users\Ja\Desktop\M1 - zaliczone
2015-11-18 20:51 - 2015-11-18 20:51 - 00012907 _____ C:\Users\Ja\Desktop\Swot-Pko-BP.xlsx

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-18 19:20 - 2015-10-17 19:40 - 00000000 ____D C:\Users\Ja\AppData\Roaming\Spotify
2015-12-18 19:13 - 2015-10-14 22:57 - 00001068 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-18 19:02 - 2015-11-15 11:58 - 00001670 __RSH C:\ProgramData\ntuser.pol
2015-12-18 18:59 - 2015-10-17 19:41 - 00000000 ____D C:\Users\Ja\AppData\Local\Spotify
2015-12-18 18:54 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-18 18:49 - 2015-07-30 23:42 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-18 18:48 - 2015-11-15 15:18 - 00004200 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{17579987-0AF6-4A46-8DC8-2E6C8C4E5004}
2015-12-18 18:44 - 2015-10-16 21:49 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-18 18:44 - 2015-10-14 22:57 - 00001064 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-18 18:44 - 2015-10-14 22:15 - 00000000 __SHD C:\Users\Ja\IntelGraphicsProfiles
2015-12-17 17:16 - 2015-11-15 19:22 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-17 17:03 - 2015-10-16 22:03 - 00002402 _____ C:\Users\Ja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-17 17:03 - 2015-10-16 22:03 - 00000000 ___RD C:\Users\Ja\OneDrive
2015-12-13 13:30 - 2015-07-30 23:25 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-12 16:39 - 2015-11-10 15:36 - 00000000 ____D C:\Users\Ja\AppData\Local\ElevatedDiagnostics
2015-12-11 22:52 - 2015-07-10 10:47 - 00000000 ____D C:\Windows
2015-12-09 04:39 - 2015-10-14 18:27 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-07 20:34 - 2015-10-16 21:49 - 00000000 ____D C:\Program Files\Elantech
2015-12-07 20:34 - 2015-07-30 22:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-07 20:34 - 2015-07-30 22:49 - 00349872 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-07 20:34 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-07 20:32 - 2015-10-07 01:11 - 00454888 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\Drivers\ETD.sys
2015-12-07 20:32 - 2015-07-30 23:40 - 00000000 ____D C:\WINDOWS\INF
2015-12-05 12:08 - 2015-10-14 22:57 - 00004126 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-05 12:08 - 2015-10-14 22:57 - 00003894 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 21:27 - 2015-11-09 19:01 - 00000000 ____D C:\Users\Ja\AppData\Roaming\DAEMON Tools Lite
2015-12-02 21:27 - 2015-10-16 23:45 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-02 21:19 - 2015-10-16 22:27 - 00000652 _____ C:\Users\Public\Desktop\League of Legends.lnk
2015-12-02 21:19 - 2015-10-16 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-12-02 20:54 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2015-12-02 20:22 - 2015-10-14 22:57 - 00000000 ____D C:\Program Files\Google
2015-12-02 20:22 - 2015-10-14 22:57 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-02 19:55 - 2015-10-16 21:51 - 00000000 ____D C:\Users\Ja
2015-12-01 01:32 - 2015-07-30 23:43 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-01 01:32 - 2015-07-30 23:43 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-21 08:19 - 2015-10-16 22:14 - 00814774 _____ C:\WINDOWS\system32\perfh015.dat
2015-11-21 08:19 - 2015-10-16 22:14 - 00156796 _____ C:\WINDOWS\system32\perfc015.dat
2015-11-21 08:19 - 2015-10-16 22:02 - 01839522 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-20 22:06 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\rescache

==================== Files in the root of some directories =======

2015-11-10 15:51 - 2015-11-14 13:30 - 0000080 _____ () C:\Users\Ja\AppData\Roaming\mBot.ini

Some files in TEMP:
====================
C:\Users\Ja\AppData\Local\Temp\1TykvvW5r4MT1u84.dll
C:\Users\Ja\AppData\Local\Temp\3W41c431926CD1jp.dll
C:\Users\Ja\AppData\Local\Temp\bNFxQB7Su25L4Oge.dll
C:\Users\Ja\AppData\Local\Temp\dEi9J8F1b0Yww9qx.dll
C:\Users\Ja\AppData\Local\Temp\HdYmjkrFM1p0g2sm.dll
C:\Users\Ja\AppData\Local\Temp\HQk3156HJMJ10ekw.dll
C:\Users\Ja\AppData\Local\Temp\JgfDe2HwF2962JAj.dll
C:\Users\Ja\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-05 00:52

==================== End of FRST.txt ============================