Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by pc (administrator) on LENOVO-PC (26-04-2016 14:04:23)
Running from E:\
Loaded Profiles: pc (Available Profiles: pc)
Platform: Windows 8.1 (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\Dragon Assistant\Core\DACore.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
(Maxthon) C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe.7410.deleteme
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvTrayLoad.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe.f885.deleteme
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvController.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LU.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
() C:\Program Files\Lenovo PhoneCompanion\adb.exe
(McAfee, Inc.) C:\Program Files\mcafee\vul\McVulCtr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
() E:\hhl4ftgf.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2014-01-21] (Realtek semiconductor)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-02-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1381744 2014-02-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1381744 2014-02-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1381744 2014-02-25] (Realtek Semiconductor)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2015-04-30] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2015-04-30] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10973168 2015-04-30] (Lenovo(beijing) Limited)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1571231700-2717941315-1072459818-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2015-04-30]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{5227B345-8BD6-428E-9C59-E06190A4A18E}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{E062B904-EF6F-47CD-93B7-821B80C8009A}: [DhcpNameServer] 168.94.0.1 168.94.0.2 168.94.0.3

Internet Explorer:
==================
HKU\S-1-5-21-1571231700-2717941315-1072459818-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-1571231700-2717941315-1072459818-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-1571231700-2717941315-1072459818-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-1571231700-2717941315-1072459818-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKU\S-1-5-21-1571231700-2717941315-1072459818-1001 -> DefaultScope {26FD85CF-C277-4F3B-9045-A01B5BC63F82} URL = 
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2012-06-01] (Skype Technologies)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [2013-08-18] (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-26] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-26] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.pl/
CHR StartupUrls: Default -> "hxxps://www.google.pl/"
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-04-26]
CHR Extension: (Marble) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijhebjoppbkfocoeceijgihihgckeool [2016-04-26]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-26]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 0003421461675321mcinstcleanup; C:\Users\pc\AppData\Local\Temp\0003421461675321mcinst.exe [834664 2013-07-31] (McAfee, Inc.)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2014-03-25] (Broadcom Corporation.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [976088 2014-03-15] (Broadcom Corporation.)
R2 DACoreService; C:\Program Files (x86)\Nuance\Dragon Assistant\Core\DACore.exe [432528 2013-05-02] (Nuance Communications, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2520928 2016-03-03] (ESET)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 LenovoSetSvr; C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe [389680 2015-04-30] (Lenovo(beijing) Limited)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2015-04-30] (Lenovo(beijing) Limited)
R2 LsvUIService; C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe [70416 2015-04-30] (Lenovo)
R2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-18] (Lenovo(beijing) Limited)
R2 MaxthonUpdateSvc; C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [1872808 2015-12-31] (Maxthon)
U4 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-09-12] (McAfee, Inc.)
R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-08-18] (Nitro PDF Software)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PGService; C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe [163624 2014-01-07] (PointGrab LTD)
R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2015-04-30] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [308720 2015-04-30] (Lenovo)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-25] ()
S3 TESHelper; c:\Program Files\Common Files\Lenovo\Magic Transfer\x64\MagicTransferTESHelper.exe [104696 2015-04-30] (Lenovo)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [68880 2015-04-30] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 mfefire; "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" [X]
R2 mfevtp; "C:\windows\system32\mfevtps.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2014-03-25] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7545008 2014-01-29] (Broadcom Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264552 2016-04-14] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2016-04-14] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2016-04-14] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [170792 2016-04-14] (ESET)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [444632 2013-10-24] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9105624 2014-01-21] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2014-01-24] (Synaptics Incorporated)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S0 cfwids; system32\drivers\cfwids.sys [X]
S0 mfeapfk; system32\drivers\mfeapfk.sys [X]
R0 mfeavfk; system32\drivers\mfeavfk.sys [X]
S0 mfeelamk; system32\drivers\mfeelamk.sys [X]
R0 mfefirek; system32\drivers\mfefirek.sys [X]
R0 mfehidk; system32\drivers\mfehidk.sys [X]
R0 mfewfpk; system32\drivers\mfewfpk.sys [X]
U3 fxryrpog; \??\C:\Users\pc\AppData\Local\Temp\fxryrpog.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-26 14:34 - 2016-04-26 14:34 - 00001283 _____ C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wi-FiHotspotChgToast.lnk
2016-04-26 14:11 - 2016-04-26 14:12 - 00000000 ____D C:\windows\system32\MRT
2016-04-26 14:11 - 2016-04-26 14:11 - 135176864 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2016-04-26 14:03 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\windows\SysWOW64\aspnet_counters.dll
2016-04-26 14:03 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\windows\system32\aspnet_counters.dll
2016-04-26 13:59 - 2016-04-26 13:59 - 00000000 ____D C:\Users\pc\AppData\Local\Intel_Corporation
2016-04-26 13:57 - 2014-01-08 02:46 - 00325464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2016-04-26 13:57 - 2014-01-08 02:41 - 01530712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2016-04-26 13:57 - 2014-01-08 02:41 - 00382808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys
2016-04-26 13:57 - 2014-01-04 16:54 - 00138240 _____ C:\windows\system32\OEMLicense.dll
2016-04-26 13:57 - 2014-01-04 16:08 - 00103936 _____ C:\windows\SysWOW64\OEMLicense.dll
2016-04-26 13:57 - 2014-01-04 15:08 - 00206336 _____ (Microsoft Corporation) C:\windows\system32\WSClient.dll
2016-04-26 13:57 - 2014-01-04 14:53 - 00174592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSClient.dll
2016-04-26 13:57 - 2014-01-03 00:54 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll
2016-04-26 13:57 - 2014-01-03 00:48 - 00336896 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll
2016-04-26 13:57 - 2014-01-01 02:55 - 01720560 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2016-04-26 13:57 - 2014-01-01 02:52 - 00481944 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll
2016-04-26 13:57 - 2014-01-01 01:56 - 01472048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2016-04-26 13:57 - 2014-01-01 01:55 - 00381168 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll
2016-04-26 13:57 - 2014-01-01 00:59 - 00802816 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
2016-04-26 13:57 - 2014-01-01 00:57 - 01214976 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2016-04-26 13:57 - 2014-01-01 00:56 - 00960512 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
2016-04-26 13:57 - 2013-12-31 00:34 - 00218112 _____ (Microsoft Corporation) C:\windows\SysWOW64\sti.dll
2016-04-26 13:57 - 2013-12-31 00:33 - 00770560 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgent.dll
2016-04-26 13:57 - 2013-12-31 00:32 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\sti.dll
2016-04-26 13:57 - 2013-12-31 00:31 - 00947712 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
2016-04-26 13:57 - 2013-12-31 00:31 - 00914944 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll
2016-04-26 13:57 - 2013-12-27 16:09 - 00419160 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2016-04-26 13:57 - 2013-12-27 09:57 - 00842752 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.dll
2016-04-26 13:57 - 2013-12-27 09:57 - 00628736 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncHost.exe
2016-04-26 13:57 - 2013-12-27 09:23 - 00749056 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncCore.dll
2016-04-26 13:57 - 2013-12-27 08:03 - 00630272 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsSpellCheckingFacility.dll
2016-04-26 13:57 - 2013-12-27 08:03 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncHost.exe
2016-04-26 13:57 - 2013-12-27 07:37 - 00588800 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncCore.dll
2016-04-26 13:57 - 2013-12-21 08:21 - 00376320 _____ (Microsoft Corporation) C:\windows\system32\pnrpsvc.dll
2016-04-26 13:57 - 2013-12-17 08:21 - 00408576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys
2016-04-26 13:57 - 2013-12-14 07:31 - 13949440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2016-04-26 13:57 - 2013-12-14 07:19 - 18576384 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2016-04-26 13:57 - 2013-12-13 11:54 - 00131160 _____ (Microsoft Corporation) C:\windows\system32\easinvoker.exe
2016-04-26 13:57 - 2013-12-13 07:36 - 00178176 _____ (Microsoft Corporation) C:\windows\system32\easwrt.dll
2016-04-26 13:57 - 2013-12-13 06:32 - 00140800 _____ (Microsoft Corporation) C:\windows\SysWOW64\easwrt.dll
2016-04-26 13:56 - 2016-04-26 14:04 - 00000000 ____D C:\FRST
2016-04-26 13:56 - 2016-04-26 13:53 - 00342912 _____ C:\windows\system32\perfi015.dat
2016-04-26 13:55 - 2016-04-26 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-04-26 13:55 - 2016-04-26 13:55 - 00000000 ____D C:\ProgramData\ESET
2016-04-26 13:55 - 2016-04-26 13:55 - 00000000 ____D C:\Program Files\ESET
2016-04-26 13:55 - 2016-04-26 13:54 - 00807134 _____ C:\windows\system32\perfh015.dat
2016-04-26 13:55 - 2016-04-26 13:54 - 00163478 _____ C:\windows\system32\perfc015.dat
2016-04-26 13:55 - 2016-04-26 13:53 - 00041236 _____ C:\windows\system32\perfd015.dat
2016-04-26 13:54 - 2016-04-26 13:54 - 00000000 ____D C:\windows\SysWOW64\XPSViewer
2016-04-26 13:54 - 2016-04-26 13:54 - 00000000 ____D C:\windows\SysWOW64\pl
2016-04-26 13:53 - 2016-04-26 14:01 - 00000000 ____D C:\Users\pc\AppData\Roaming\AIMP
2016-04-26 13:53 - 2016-04-26 13:53 - 00000922 _____ C:\Users\Public\Desktop\AIMP.lnk
2016-04-26 13:53 - 2016-04-26 13:53 - 00000000 ____D C:\windows\system32\pl
2016-04-26 13:53 - 2016-04-26 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP
2016-04-26 13:53 - 2016-04-26 13:53 - 00000000 ____D C:\Program Files (x86)\AIMP
2016-04-26 13:43 - 2016-04-26 13:43 - 00001006 _____ C:\Users\Public\Desktop\Eden4S.lnk
2016-04-26 13:43 - 2016-04-26 13:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eden4S
2016-04-26 13:40 - 2016-04-26 13:43 - 00000000 ____D C:\Program Files (x86)\Eden4S
2016-04-26 13:38 - 2016-04-26 13:38 - 00002310 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-26 13:38 - 2016-04-26 13:38 - 00002298 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-26 13:37 - 2016-04-26 14:25 - 00001056 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-26 13:37 - 2016-04-26 13:42 - 00001060 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-26 13:37 - 2016-04-26 13:38 - 00000000 ____D C:\Program Files (x86)\Google
2016-04-26 13:37 - 2016-04-26 13:37 - 00004032 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-04-26 13:37 - 2016-04-26 13:37 - 00003796 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-04-26 13:37 - 2016-04-26 13:37 - 00000379 _____ C:\Users\pc\Desktop\Panel sterowania.lnk
2016-04-26 13:37 - 2016-04-09 20:54 - 1491125550 _____ (Eden4S, Inc. ) C:\Users\pc\Desktop\eden4s_full_setup_v51.exe
2016-04-26 13:36 - 2016-04-26 13:36 - 00000448 _____ C:\Users\pc\Desktop\komputer.lnk
2016-04-26 13:36 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2016-04-26 13:36 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2016-04-26 13:36 - 2014-03-06 10:19 - 01287576 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2016-04-26 13:36 - 2014-03-06 10:02 - 01109424 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2016-04-26 13:36 - 2014-03-06 07:17 - 00835584 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2016-04-26 13:36 - 2014-03-06 07:10 - 01036288 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2016-04-26 13:36 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2016-04-26 13:36 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2016-04-26 13:36 - 2013-12-20 11:18 - 01643584 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2016-04-26 13:36 - 2013-12-20 11:18 - 01507704 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2016-04-26 13:36 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2016-04-26 13:36 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2016-04-26 13:36 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll
2016-04-26 13:36 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\windows\SysWOW64\d2d1.dll
2016-04-26 13:35 - 2014-04-19 12:15 - 21186352 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2016-04-26 13:35 - 2014-04-19 07:49 - 18644072 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2016-04-26 13:35 - 2014-03-10 11:35 - 02008408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2016-04-26 13:35 - 2014-03-10 11:35 - 00377176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\clfs.sys
2016-04-26 13:35 - 2014-02-11 04:04 - 04189184 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-04-26 13:35 - 2014-02-11 03:43 - 00488448 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2016-04-26 13:35 - 2014-02-11 03:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2016-04-26 13:35 - 2014-01-31 17:15 - 00311640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2016-04-26 13:35 - 2014-01-31 17:07 - 00233920 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2016-04-26 13:35 - 2014-01-31 17:06 - 02133208 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2016-04-26 13:35 - 2014-01-31 14:47 - 02143960 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2016-04-26 13:35 - 2014-01-31 10:06 - 00716288 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll
2016-04-26 13:35 - 2014-01-29 09:53 - 00458616 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2016-04-26 13:35 - 2014-01-29 09:53 - 00407024 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2016-04-26 13:35 - 2014-01-29 09:49 - 01928144 _____ (Microsoft Corporation) C:\windows\system32\combase.dll
2016-04-26 13:35 - 2014-01-29 09:47 - 02543960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2016-04-26 13:35 - 2014-01-29 08:44 - 01371824 _____ (Microsoft Corporation) C:\windows\SysWOW64\combase.dll
2016-04-26 13:35 - 2014-01-29 08:44 - 00408480 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2016-04-26 13:35 - 2014-01-29 08:44 - 00369280 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2016-04-26 13:35 - 2014-01-29 07:41 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll
2016-04-26 13:35 - 2014-01-29 01:36 - 00249856 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll
2016-04-26 13:35 - 2014-01-27 20:07 - 04175360 _____ (Microsoft Corporation) C:\windows\system32\dbgeng.dll
2016-04-26 13:35 - 2014-01-27 20:06 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2016-04-26 13:35 - 2014-01-27 20:04 - 00160256 _____ (Microsoft Corporation) C:\windows\system32\DWWIN.EXE
2016-04-26 13:35 - 2014-01-27 19:23 - 02873344 _____ (Microsoft Corporation) C:\windows\SysWOW64\dbgeng.dll
2016-04-26 13:35 - 2014-01-27 19:21 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2016-04-26 13:35 - 2014-01-27 19:20 - 00138752 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWWIN.EXE
2016-04-26 13:35 - 2014-01-27 19:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2016-04-26 13:35 - 2014-01-27 18:43 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2016-04-26 13:35 - 2014-01-27 18:18 - 01486848 _____ (Microsoft Corporation) C:\windows\system32\dbghelp.dll
2016-04-26 13:35 - 2014-01-27 18:00 - 01238016 _____ (Microsoft Corporation) C:\windows\SysWOW64\dbghelp.dll
2016-04-26 13:35 - 2014-01-27 16:58 - 05770752 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2016-04-26 13:35 - 2014-01-27 16:50 - 06640640 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2016-04-26 13:35 - 2014-01-27 12:45 - 00386722 _____ C:\windows\system32\ApnDatabase.xml
2016-04-26 13:35 - 2014-01-18 00:04 - 00764864 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
2016-04-26 13:35 - 2014-01-17 22:54 - 00669352 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll
2016-04-26 13:35 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\pcaui.exe
2016-04-26 13:35 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\pcaui.exe
2016-04-26 13:35 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
2016-04-26 13:35 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
2016-04-26 13:35 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2016-04-26 13:35 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2016-04-26 13:35 - 2014-01-04 15:03 - 00919040 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2016-04-26 13:35 - 2014-01-04 14:47 - 00628736 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2016-04-26 13:35 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
2016-04-26 13:35 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2016-04-26 13:35 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
2016-04-26 13:35 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2016-04-26 13:35 - 2013-12-21 15:51 - 06353960 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2016-04-26 13:35 - 2013-12-21 09:54 - 00447488 _____ (Microsoft Corporation) C:\windows\system32\sppcomapi.dll
2016-04-26 13:35 - 2013-12-21 03:10 - 00009701 _____ C:\windows\SysWOW64\connectedsearch-results.searchconnector-ms
2016-04-26 13:35 - 2013-12-21 03:10 - 00009701 _____ C:\windows\system32\connectedsearch-results.searchconnector-ms
2016-04-26 13:35 - 2013-11-09 07:34 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
2016-04-26 13:35 - 2013-11-09 07:34 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\mdmregistration.dll
2016-04-26 13:35 - 2013-11-09 06:52 - 00240128 _____ (Microsoft Corporation) C:\windows\SysWOW64\mdmregistration.dll
2016-04-26 13:31 - 2016-04-26 13:38 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2016-04-26 13:31 - 2016-04-26 13:37 - 00000000 ____D C:\Users\pc\AppData\Local\Deployment
2016-04-26 13:31 - 2016-04-26 13:31 - 00000000 ____D C:\Users\pc\AppData\Local\Apps\2.0
2016-04-26 13:29 - 2016-04-26 13:29 - 00003918 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{616F0ABE-FFD7-4F22-BD32-B0BF735A9E87}
2016-04-26 13:25 - 2016-04-26 13:25 - 00000000 ____D C:\Users\pc\AppData\Roaming\Macromedia
2016-04-26 13:20 - 2016-04-26 14:34 - 00000000 ____D C:\ProgramData\LU
2016-04-19 12:44 - 2016-04-26 13:58 - 00003598 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1571231700-2717941315-1072459818-1001
2016-04-14 15:09 - 2016-04-14 15:09 - 00264552 _____ (ESET) C:\windows\system32\Drivers\eamonm.sys
2016-04-14 15:09 - 2016-04-14 15:09 - 00186784 _____ (ESET) C:\windows\system32\Drivers\ehdrv.sys
2016-04-14 15:09 - 2016-04-14 15:09 - 00170792 _____ (ESET) C:\windows\system32\Drivers\epfwwfpr.sys
2016-04-14 15:09 - 2016-04-14 15:09 - 00014976 _____ (ESET) C:\windows\system32\Drivers\eelam.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-26 14:37 - 2013-08-22 16:20 - 00000000 ____D C:\windows\CbsTemp
2016-04-26 14:30 - 2015-04-30 20:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2016-04-26 14:30 - 2015-04-30 20:32 - 00000000 ____D C:\Program Files (x86)\Lenovo
2016-04-26 14:30 - 2015-04-30 20:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-04-26 14:24 - 2013-08-22 15:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-04-26 14:22 - 2015-04-30 20:52 - 00002560 _____ C:\windows\system32\VfService.trf
2016-04-26 14:22 - 2013-08-22 14:25 - 00262144 ___SH C:\windows\system32\config\BBI
2016-04-26 14:17 - 2013-08-22 14:25 - 00262144 ___SH C:\windows\system32\config\ELAM
2016-04-26 14:15 - 2013-08-22 15:44 - 00344624 _____ C:\windows\system32\FNTCACHE.DAT
2016-04-26 14:14 - 2013-08-22 16:36 - 00000000 ___RD C:\windows\ToastData
2016-04-26 14:03 - 2013-08-22 16:36 - 00000000 ____D C:\windows\system32\SecureBootUpdates
2016-04-26 14:03 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-04-26 13:59 - 2013-08-22 16:36 - 00000000 ___HD C:\windows\ELAMBKUP
2016-04-26 13:59 - 2013-08-22 14:36 - 00000000 ____D C:\windows\Inf
2016-04-26 13:54 - 2013-10-07 19:27 - 01825074 _____ C:\windows\system32\PerfStringBackup.INI
2016-04-26 13:54 - 2013-08-22 20:12 - 00000000 ____D C:\Program Files\Windows Journal
2016-04-26 13:54 - 2013-08-22 20:10 - 00000000 ____D C:\windows\SysWOW64\winrm
2016-04-26 13:54 - 2013-08-22 20:10 - 00000000 ____D C:\windows\SysWOW64\WCN
2016-04-26 13:54 - 2013-08-22 20:10 - 00000000 ____D C:\windows\SysWOW64\slmgr
2016-04-26 13:54 - 2013-08-22 20:10 - 00000000 ____D C:\windows\SysWOW64\Printing_Admin_Scripts
2016-04-26 13:54 - 2013-08-22 20:10 - 00000000 ____D C:\windows\system32\winrm
2016-04-26 13:54 - 2013-08-22 20:10 - 00000000 ____D C:\windows\system32\WCN
2016-04-26 13:54 - 2013-08-22 20:10 - 00000000 ____D C:\windows\system32\slmgr
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ___RD C:\windows\ImmersiveControlPanel
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\windows\WinStore
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\windows\SysWOW64\MUI
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\windows\SysWOW64\Com
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\windows\system32\MUI
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\windows\system32\migwiz
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\windows\PolicyDefinitions
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\windows\IME
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-04-26 13:54 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-04-26 13:54 - 2013-08-22 14:36 - 00000000 ____D C:\windows\SysWOW64\oobe
2016-04-26 13:54 - 2013-08-22 14:36 - 00000000 ____D C:\windows\SysWOW64\Dism
2016-04-26 13:54 - 2013-08-22 14:36 - 00000000 ____D C:\windows\system32\Sysprep
2016-04-26 13:54 - 2013-08-22 14:36 - 00000000 ____D C:\windows\system32\oobe
2016-04-26 13:54 - 2013-08-22 14:36 - 00000000 ____D C:\windows\system32\Dism
2016-04-26 13:54 - 2013-08-22 14:36 - 00000000 ____D C:\windows\servicing
2016-04-26 13:53 - 2013-08-22 20:10 - 00000000 ____D C:\windows\system32\Printing_Admin_Scripts
2016-04-26 13:53 - 2013-08-22 16:36 - 00000000 ____D C:\windows\system32\SystemResetPlatform
2016-04-26 13:53 - 2013-08-22 16:36 - 00000000 ____D C:\windows\system32\Com
2016-04-26 13:53 - 2013-08-22 16:36 - 00000000 ____D C:\windows\Help
2016-04-26 13:53 - 2013-08-22 16:36 - 00000000 ____D C:\windows\FileManager
2016-04-26 13:25 - 2015-04-30 20:53 - 00000000 ____D C:\ProgramData\McAfee
2016-04-26 13:23 - 2015-04-30 20:52 - 00000000 ____D C:\ProgramData\CyberLink
2016-04-19 13:03 - 2016-02-04 20:17 - 00000000 ____D C:\Users\pc
2016-04-19 12:49 - 2013-08-22 16:36 - 00000000 ____D C:\windows\AppReadiness
2016-04-19 12:43 - 2015-04-30 21:04 - 00000000 ____D C:\windows\System32\Tasks\Lenovo
2016-04-19 12:41 - 2016-02-04 20:18 - 00000000 ____D C:\Users\pc\AppData\Local\Packages
2016-04-19 12:40 - 2015-04-30 21:04 - 00000000 ____D C:\ProgramData\Energy Manager
2016-04-19 12:39 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps

==================== Files in the root of some directories =======

2015-04-30 20:31 - 2015-04-30 20:31 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\pc\AppData\Local\Temp\0003421461675321mcinst.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-26 14:02

==================== End of FRST.txt ============================