Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Basia (administrator) on BASIA (22-03-2016 05:09:16)
Running from C:\Users\Basia\Downloads
Loaded Profiles: Basia (Available Profiles: Basia)
Platform: Windows 8.1 (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Qksee Pvt Ltd.) C:\Program Files (x86)\qksee\qkseeSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(tsvr.com) C:\Users\Basia\AppData\Roaming\TSv\TSvr.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TFuns LIMITED) C:\ProgramData\pWdMp\WdMan.exe
(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Toshiba) C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)
HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-11] (TOSHIBA Corporation)
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595336 2014-10-01] (ESET)
HKLM-x32\...\Run: [ToshibaAppPlace] => C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe [552960 2010-09-23] (Toshiba)
HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)
HKLM-x32\...\Run: [Plus Internet] => C:\Program Files (x86)\Plus Internet\PlusInternetChecker.exe [497016 2012-03-13] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50509440 2015-11-30] (Skype Technologies S.A.)
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {03a5f4e8-8e2c-11e5-82a7-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {03a5f5be-8e2c-11e5-82a7-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {03a5f6b2-8e2c-11e5-82a7-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {2963dd5f-b53e-11e4-828e-008cfa75c6a7} - "E:\AutoRun.exe" /s
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {2963de86-b53e-11e4-828e-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {2963debf-b53e-11e4-828e-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {2963e2eb-b53e-11e4-828e-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {5ec5cde1-47a2-11e5-82a0-008cfa75c6a7} - "E:\.\StartModem.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {6643c98e-5dd0-11e5-82a2-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {b60db425-e98d-11e3-826d-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {bc90056e-ce9e-11e3-826a-008cfa75c6a7} - "E:\AutoRun.exe" 
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\...\MountPoints2: {bc900619-ce9e-11e3-826a-008cfa75c6a7} - "E:\AutoRun.exe" 
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
Startup: C:\Users\Basia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2015-11-19]
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (No File)
BootExecute: autocheck autochk * sh4native Sh4Removal

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 194.204.159.1 194.204.152.34
Tcpip\..\Interfaces\{281F376B-184A-404E-8A46-17462BC568E5}: [NameServer] 89.108.195.21 
Tcpip\..\Interfaces\{4C656DEA-240A-4263-BD77-9F32904EE554}: [NameServer] 89.108.195.21 
Tcpip\..\Interfaces\{68B55E7C-75CF-45E4-9F10-618CF4ACD765}: [DhcpNameServer] 194.204.159.1 194.204.152.34
Tcpip\..\Interfaces\{91147B9B-4760-49DC-80F3-C8DF438C47EA}: [DhcpNameServer] 194.204.159.1 194.204.152.34

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT&q={searchTerms}
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT&q={searchTerms}
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT
HKU\S-1-5-21-1659662942-3678176710-1018204553-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1458195278&z=04f3e794f9c395e26f6007ag2z1w8bbg2tewfoem0z&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450282594&z=e96eaa0628aa4177aa2b74eg1z6w5e0obb2oew2t1o&from=wpm07173&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450282594&z=e96eaa0628aa4177aa2b74eg1z6w5e0obb2oew2t1o&from=wpm07173&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1659662942-3678176710-1018204553-1001 -> {884B5FE9-FDA5-4924-A5F2-10AE2EBC0FFE} URL = 
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Basia\AppData\Roaming\Mozilla\Firefox\Profiles\5tlij8x5.default
FF NewTab: hxxp://www.yoursites123.com/newtab/?type=nt&ts=1458473396&z=6d24b9e6e9e86087ada56b3gdzcw5bdz4maccc1t2w&from=wpm0314&uid=TOSHIBAXMQ01ABD075_9356C9BPTXX9356C9BPT
FF Homepage: google.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-12] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-05-11] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Basia\AppData\Roaming\Mozilla\Firefox\Profiles\5tlij8x5.default\searchplugins\yoursites123.xml [2016-03-20]
FF Extension: Default NewTab - C:\Users\Basia\AppData\Roaming\Mozilla\Firefox\Profiles\5tlij8x5.default\Extensions\default_newtabff@gmail.com [2016-03-20] [not signed]
FF Extension: Adblock Plus - C:\Users\Basia\AppData\Roaming\Mozilla\Firefox\Profiles\5tlij8x5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-24]
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-19] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Basia\AppData\Roaming\Mozilla\Firefox\Profiles\5tlij8x5.default\extensions\default_newtabff@gmail.com

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2014-10-01] (ESET)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 IhPul; C:\Users\Basia\AppData\Roaming\TSv\TSvr.exe [116368 2016-03-16] (tsvr.com)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-03] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2015-11-24] ()
R2 qkseeService; C:\Program Files (x86)\qksee\qkseeSvc.exe [699952 2016-03-14] (Qksee Pvt Ltd.)
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [784256 2015-12-16] (Enigma Software Group USA, LLC.)
R2 WdMan; C:\ProgramData\pWdMp\WdMan.exe [294912 2016-03-17] (TFuns LIMITED) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [243440 2014-10-10] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241368 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [169280 2014-10-10] (ESET)
R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [222280 2014-10-10] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [44632 2014-10-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63160 2014-10-10] (ESET)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2015-12-16] ()
S3 huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [229376 2015-11-24] (Huawei Technologies Co., Ltd.)
S3 massfilter_lte; C:\Windows\system32\drivers\massfilter_lte.sys [18456 2012-03-13] (HandSet Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-26] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-03] (Intel Corporation)
S3 mtkmbim; C:\Windows\system32\DRIVERS\mtkmbim7_x64.sys [208896 2012-12-12] (MediaTek Inc.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2945240 2013-09-12] (Realtek Semiconductor Corporation                           )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2014-08-06] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 wdf_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [81408 2013-02-21] (MediaTek Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 zgdcat; C:\Windows\system32\DRIVERS\zgdcat.sys [130200 2012-03-13] (ZTE Incorporated)
S3 zgdcdiag; C:\Windows\system32\DRIVERS\zgdcdiag.sys [130200 2012-03-13] (ZTE Incorporated)
S3 zgdcmdm; C:\Windows\system32\DRIVERS\zgdcmdm.sys [130200 2012-03-13] (ZTE Incorporated)
S3 zgdcnet; C:\Windows\system32\DRIVERS\zgdcnet.sys [169496 2012-03-13] (ZTE Incorporated)
S3 zgdcnmea; C:\Windows\system32\DRIVERS\zgdcnmea.sys [130200 2012-03-13] (ZTE Incorporated)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-22 05:01 - 2016-03-22 05:03 - 00030383 _____ C:\Users\Basia\Downloads\Addition.txt
2016-03-22 05:00 - 2016-03-22 05:09 - 00019632 _____ C:\Users\Basia\Downloads\FRST.txt
2016-03-22 05:00 - 2016-03-22 05:09 - 00000000 ____D C:\FRST
2016-03-22 04:33 - 2016-03-22 04:33 - 02374144 _____ (Farbar) C:\Users\Basia\Downloads\FRST64.exe
2016-03-22 04:32 - 2016-03-22 04:32 - 01725440 _____ (Farbar) C:\Users\Basia\Downloads\FRST.exe
2016-03-22 04:24 - 2016-03-22 04:24 - 00000001 _____ C:\Windows\SysWOW64\pl.html
2016-03-22 04:05 - 2016-03-22 04:05 - 00003254 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2016-03-22 04:05 - 2015-12-16 10:37 - 00025984 _____ C:\Windows\SysWOW64\sh4native.exe
2016-03-22 04:01 - 2016-03-22 04:21 - 00195832 _____ C:\spyhunter.fix
2016-03-22 04:01 - 2016-03-22 04:16 - 00000000 ___HD C:\tvwZdHxHI7ZY36AE
2016-03-22 04:00 - 2016-03-22 04:00 - 00001078 _____ C:\Users\Basia\Desktop\SpyHunter4.lnk
2016-03-22 04:00 - 2016-03-22 04:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpyHunter4
2016-03-22 04:00 - 2016-03-22 04:00 - 00000000 ____D C:\Program Files\Enigma Software Group
2016-03-22 04:00 - 2015-12-16 10:38 - 00019984 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2016-03-22 03:58 - 2016-03-22 03:58 - 00000000 ____D C:\Users\Basia\Downloads\SpyHunter 4.21.10.4585 eng-full- x32 bit
2016-03-22 03:39 - 2016-03-22 03:48 - 50355423 _____ C:\Users\Basia\Downloads\SpyHunter 4.21.10.4585 eng-full- x32 bit.rar
2016-03-20 06:49 - 2016-03-20 06:49 - 00000000 _____ C:\autoexec.bat
2016-03-20 06:39 - 2016-03-20 06:40 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Basia\Downloads\sh-remover.exe
2016-03-20 06:31 - 2016-03-22 04:25 - 00000000 ____D C:\Program Files (x86)\qksee
2016-03-20 06:31 - 2016-03-20 06:32 - 00000000 ____D C:\ProgramData\pWdMp
2016-03-20 06:31 - 2016-03-20 06:31 - 00001758 _____ C:\Users\Public\Desktop\qksee.lnk
2016-03-20 06:31 - 2016-03-20 06:31 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2016-03-20 06:31 - 2016-03-20 06:31 - 00000000 ____D C:\Users\Basia\AppData\Roaming\qksee
2016-03-20 06:31 - 2016-03-20 06:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qksee
2016-03-20 06:29 - 2016-03-20 06:32 - 00000072 _____ C:\Windows\SysWOW64\123.html
2016-03-20 06:29 - 2016-03-20 06:29 - 00000000 ____D C:\Windows\SysWOW64\_tWm
2016-03-19 12:22 - 2016-03-20 06:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-17 01:14 - 2016-03-20 06:31 - 00000000 ____D C:\Users\Basia\AppData\Roaming\TSv
2016-03-17 01:14 - 2016-03-17 01:14 - 00000000 ____D C:\Windows\SysWOW64\xxp
2016-03-09 12:34 - 2016-02-20 10:45 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 12:34 - 2016-02-20 10:45 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 12:34 - 2016-02-20 10:45 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 12:34 - 2016-02-20 10:45 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 12:34 - 2016-02-20 10:45 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 12:34 - 2016-02-20 10:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 12:34 - 2016-02-06 11:58 - 00987648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 12:34 - 2016-02-06 11:32 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 12:34 - 2016-02-05 14:06 - 00046768 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 12:34 - 2016-01-24 13:19 - 00419160 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-03-09 12:34 - 2016-01-24 13:19 - 00378712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-09 12:34 - 2016-01-24 13:19 - 00331608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-03-09 12:34 - 2016-01-24 06:57 - 01335296 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-03-09 12:34 - 2016-01-24 06:45 - 01063424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-03-09 12:34 - 2016-01-10 11:41 - 01707008 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-03-09 12:34 - 2016-01-10 11:31 - 01344512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-03-09 12:34 - 2016-01-08 20:49 - 00218448 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-03-09 12:34 - 2016-01-08 20:49 - 00192120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-03-09 12:34 - 2016-01-08 20:38 - 00091992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-03-09 12:34 - 2016-01-06 18:46 - 00148752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-03-09 12:34 - 2016-01-06 18:45 - 00177712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-03-09 12:34 - 2016-01-06 13:25 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-03-09 12:34 - 2016-01-06 11:47 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-03-09 12:34 - 2015-12-30 16:53 - 02017624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 12:34 - 2015-11-19 09:33 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 12:34 - 2015-11-19 09:26 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-09 12:33 - 2016-01-15 11:56 - 02487296 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-09 12:33 - 2016-01-15 11:45 - 01482240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-09 12:33 - 2016-01-05 10:00 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-09 12:33 - 2015-12-30 15:49 - 00470360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-03-09 12:33 - 2015-12-20 09:57 - 00839168 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-03-09 12:33 - 2015-12-20 09:56 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2016-03-09 12:33 - 2015-12-20 09:43 - 00696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-03-09 11:42 - 2016-02-08 16:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 11:42 - 2016-02-08 15:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 11:42 - 2016-02-08 15:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 11:42 - 2016-02-08 13:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 11:42 - 2016-02-08 12:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 11:41 - 2016-02-08 15:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 11:41 - 2016-02-08 15:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 11:41 - 2016-02-08 15:29 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-03-09 11:41 - 2016-02-08 15:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 11:41 - 2016-02-08 15:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 11:41 - 2016-02-08 15:07 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-03-09 11:41 - 2016-02-08 15:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 11:41 - 2016-02-08 15:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 11:41 - 2016-02-08 15:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 11:41 - 2016-02-08 14:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 11:41 - 2016-02-08 14:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 11:41 - 2016-02-08 14:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 11:41 - 2016-02-08 13:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 11:41 - 2016-02-08 13:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 11:41 - 2016-02-08 13:14 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-03-09 11:41 - 2016-02-08 13:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 11:41 - 2016-02-08 12:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 11:41 - 2016-02-08 12:42 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-03-09 11:41 - 2016-02-08 12:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 11:41 - 2016-02-08 12:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 11:41 - 2016-02-08 12:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 11:41 - 2016-02-08 12:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 11:41 - 2016-02-08 12:15 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-03-09 11:41 - 2016-02-08 12:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 11:41 - 2016-02-08 11:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 11:39 - 2016-02-12 14:14 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 11:39 - 2016-02-12 10:14 - 03708416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 11:39 - 2016-02-12 09:55 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-03-09 11:39 - 2016-02-12 09:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 11:39 - 2016-02-12 09:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 11:39 - 2016-02-12 09:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 11:39 - 2016-02-12 09:51 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 11:39 - 2016-02-12 09:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 11:39 - 2016-02-12 09:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 11:39 - 2016-02-12 09:48 - 02244096 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 11:39 - 2016-02-12 09:47 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 11:39 - 2016-02-12 09:46 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 11:39 - 2016-02-11 09:21 - 00869576 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-03-09 11:39 - 2016-02-11 09:21 - 00678600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2016-03-09 11:39 - 2016-02-11 09:20 - 00875720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-03-09 11:39 - 2016-02-11 09:20 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2016-03-09 11:39 - 2016-02-06 13:08 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 11:39 - 2016-02-05 14:07 - 00292696 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL
2016-03-09 11:39 - 2016-02-05 14:07 - 00243032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL
2016-03-09 11:39 - 2016-02-05 10:03 - 15432704 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 11:39 - 2016-02-05 10:00 - 13318144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 11:39 - 2016-02-05 09:59 - 07784960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-09 11:39 - 2016-02-05 09:55 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-03-09 11:39 - 2016-02-05 09:48 - 07075840 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-03-09 11:39 - 2016-02-05 09:47 - 05268480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-03-09 11:39 - 2016-02-04 13:18 - 04174336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 11:39 - 2016-02-04 13:18 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 11:39 - 2016-02-04 13:12 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 11:39 - 2016-02-04 12:44 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 11:39 - 2016-02-04 12:39 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 11:39 - 2016-02-04 12:24 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 11:39 - 2016-02-04 12:02 - 00483328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-09 11:39 - 2016-02-03 15:37 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-09 11:39 - 2016-02-03 15:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-09 11:39 - 2016-02-03 10:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-03-09 11:39 - 2016-02-03 10:00 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 11:39 - 2016-02-03 10:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 11:39 - 2016-01-31 14:16 - 00148832 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-02-27 03:25 - 2016-02-27 03:26 - 00000000 ____D C:\Users\Basia\Desktop\Zbrodnia i kara
2016-02-27 03:24 - 2016-02-27 03:25 - 01992496 _____ C:\Users\Basia\Downloads\winrar-x64-531.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-22 05:06 - 2013-09-29 07:10 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-22 05:00 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\tracing
2016-03-22 04:59 - 2015-12-08 15:40 - 00008192 ___SH C:\Users\Basia\Downloads\Thumbs.db
2016-03-22 04:59 - 2015-08-03 20:01 - 00000000 ____D C:\Users\Basia\AppData\Roaming\Skype
2016-03-22 04:43 - 2013-11-30 13:35 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1659662942-3678176710-1018204553-1001
2016-03-22 04:31 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\Inf
2016-03-22 04:25 - 2013-11-30 13:34 - 00000000 __RDO C:\Users\Basia\SkyDrive
2016-03-22 04:24 - 2015-12-06 11:06 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d13040120a5caf.job
2016-03-22 04:24 - 2013-09-29 07:10 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-22 04:22 - 2015-08-25 12:36 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2016-03-22 04:22 - 2013-08-22 09:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-22 04:22 - 2013-08-22 08:25 - 01310720 ___SH C:\Windows\system32\config\BBI
2016-03-22 04:21 - 2013-11-30 14:19 - 00807134 _____ C:\Windows\system32\perfh015.dat
2016-03-22 04:21 - 2013-11-30 14:19 - 00163478 _____ C:\Windows\system32\perfc015.dat
2016-03-22 04:21 - 2013-09-12 23:20 - 01825074 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-22 03:59 - 2014-01-13 20:44 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-22 03:34 - 2013-11-30 13:40 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{03AD3C44-CFCA-4425-9BA2-E4DFFF26DD88}
2016-03-20 15:40 - 2016-01-03 11:24 - 00003348 _____ C:\Windows\System32\Tasks\ESET Windows 10 upgrade – Refresh settings
2016-03-20 06:51 - 2014-01-02 19:36 - 00001036 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-20 06:30 - 2014-01-02 19:36 - 00001354 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-20 06:30 - 2013-11-30 13:30 - 00001326 _____ C:\Users\Basia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-20 06:24 - 2014-01-02 19:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-20 02:28 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-19 09:12 - 2014-10-26 12:37 - 00000000 ____D C:\Users\Basia\Desktop\Camera Roll
2016-03-17 01:14 - 2015-12-24 02:41 - 00000000 ____D C:\ProgramData\aWdMa
2016-03-13 01:08 - 2013-09-29 07:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-03-12 10:59 - 2014-01-13 20:44 - 00003818 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-12 10:50 - 2013-08-22 10:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-10 16:10 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\rescache
2016-03-10 01:53 - 2013-08-22 09:44 - 00542312 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-09 18:27 - 2014-12-15 14:06 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-09 18:26 - 2013-12-27 21:20 - 00000000 ____D C:\Windows\system32\MRT
2016-03-09 18:23 - 2013-12-27 21:20 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-09 17:45 - 2015-10-02 13:00 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1659662942-3678176710-1018204553-1001
2016-03-09 17:45 - 2015-10-02 13:00 - 00000000 ___RD C:\Users\Basia\OneDrive
2016-03-09 13:13 - 2013-08-22 10:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-08 02:00 - 2013-08-22 10:38 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-08 02:00 - 2013-08-22 10:38 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-28 12:01 - 2015-04-05 12:31 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-02-28 12:01 - 2015-04-05 12:31 - 00000000 ___SD C:\Windows\system32\GWX
2016-02-28 04:42 - 2013-11-30 15:49 - 00000000 ____D C:\Users\Basia\AppData\Local\CrashDumps
2016-02-27 17:04 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\ModemLogs
2016-02-27 10:50 - 2014-09-21 08:54 - 00207872 ___SH C:\Users\Basia\Desktop\Thumbs.db
2016-02-27 03:25 - 2014-12-15 13:59 - 00000000 ____D C:\Users\Basia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-27 03:25 - 2014-12-15 13:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-27 03:25 - 2014-12-15 13:58 - 00000000 ____D C:\Program Files\WinRAR
2016-02-22 14:13 - 2016-02-20 13:57 - 00000000 ____D C:\Users\Basia\Desktop\jezyk
2016-02-21 08:34 - 2015-09-03 02:47 - 00000000 ____D C:\Users\Basia\Desktop\103___08

==================== Files in the root of some directories =======

2015-12-24 02:39 - 2015-12-24 02:39 - 2770377 _____ (iBank) C:\Program Files (x86)\SSFK.exe
2013-09-29 06:46 - 2013-09-29 06:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-03-20 06:31 - 2016-03-20 06:31 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Some files in TEMP:
====================
C:\Users\Basia\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\Basia\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Basia\AppData\Local\Temp\install_flashplayer11x32_mssa_aaa_aih.exe
C:\Users\Basia\AppData\Local\Temp\InstHelper.exe
C:\Users\Basia\AppData\Local\Temp\ResetDevice.exe
C:\Users\Basia\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Basia\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-03-22 04:13

==================== End of FRST.txt ============================