Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-07-2016
Ran by dawid (administrator) on DAWID (06-07-2016 17:59:40)
Running from C:\Users\dawid\Desktop
Loaded Profiles: dawid (Available Profiles: dawid)
Platform: Windows 8.1 (Update) (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.5.450.0\McCSPServiceHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.31\opera.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
() C:\Users\dawid\Desktop\4q3g31k6.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637208 2014-09-15] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2818800 2014-06-04] (Synaptics Incorporated)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [719272 2015-04-02] (McAfee, Inc.)
HKLM-x32\...\Run: [DropboxOEM] => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [462160 2014-09-02] ()
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [653576 2015-06-29] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKU\S-1-5-21-575411724-1307231427-2836151415-1002\...\Run: [GG] => C:\Users\dawid\AppData\Local\GG\Application\gghub.exe [4078144 2015-04-21] (GG Network S.A.)
HKU\S-1-5-21-575411724-1307231427-2836151415-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5DF8E8B7-E7B2-42C9-A88F-71EAC4B7C79A}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A3F66009-3120-4E07-B11B-4D0CED1329F1}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {F1087E11-0F95-4D5C-B5F2-BC1DF5C5F6D0} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-575411724-1307231427-2836151415-1002 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-575411724-1307231427-2836151415-1002 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-575411724-1307231427-2836151415-1002 -> {F1087E11-0F95-4D5C-B5F2-BC1DF5C5F6D0} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-575411724-1307231427-2836151415-1002 -> {F7B5B76B-1F3D-401C-96D7-3B43AA21931B} URL = hxxps://uk.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-02-25] (HP)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-27] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-07-25] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-27] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-02-25] (HP)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-04-07] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-04-07] (McAfee, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\dawid\AppData\Roaming\Mozilla\Firefox\Profiles\l75w327o.default
FF NewTab: hxxp://www.google.com
FF DefaultSearchEngine: Google 
FF DefaultSearchEngine,S: WebSearch
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SelectedSearchEngine: Google 
FF SelectedSearchEngine,S: WebSearch
FF Homepage: hxxp://www.google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll [2016-06-16] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-04-07] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-16] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-06-19] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-06-19] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-27] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-04-07] ()
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin HKU\S-1-5-21-575411724-1307231427-2836151415-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\dawid\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
FF SearchPlugin: C:\Users\dawid\AppData\Roaming\Mozilla\Firefox\Profiles\l75w327o.default\searchplugins\google-.xml [2016-02-17]
FF Extension: Adblock Plus - C:\Users\dawid\AppData\Roaming\Mozilla\Firefox\Profiles\l75w327o.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-05-30]
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-06-29] [not signed]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION

Opera: 
=======
OPR Extension: (AdBlock) - C:\Users\dawid\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2016-05-16]
OPR Extension: (Adblock Plus) - C:\Users\dawid\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-06-29]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-09-07] (Advanced Micro Devices, Inc.) [File not signed]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [94936 2014-07-04] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-05-23] (EasyAntiCheat Ltd)
S4 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [255040 2014-08-25] (WildTangent)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2015-12-31] (Hi-Rez Studios) [File not signed]
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [28552 2016-04-26] (Hewlett-Packard Company)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [602888 2015-06-29] (Hewlett-Packard Development Company, L.P.)
S4 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [753768 2015-04-07] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.5.450.0\McCSPServiceHost.exe [207344 2015-04-08] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [612688 2015-04-09] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-02-17] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [372144 2015-04-06] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [250672 2015-02-17] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-04-02] (McAfee, Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
S3 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [292568 2014-09-04] (Realtek Semiconductor)
S4 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [191728 2014-06-04] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-12] (Advanced Micro Devices)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [68784 2015-02-17] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-11-12] (LogMeIn Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [401736 2015-02-17] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [337888 2015-02-17] (McAfee, Inc.)
R0 mfedisk; C:\Windows\System32\DRIVERS\mfedisk.sys [101872 2015-02-17] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80160 2015-02-13] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [488000 2015-02-17] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864072 2015-02-17] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [482600 2015-01-16] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100720 2015-01-16] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340448 2015-02-17] (McAfee, Inc.)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [291544 2014-01-04] (Realtek Semiconductor Corp.)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [578776 2014-08-05] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3560664 2014-09-05] (Realtek Semiconductor Corporation                           )
R3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver_AMDASF.sys [30448 2014-06-04] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [31472 2014-06-04] (Synaptics Incorporated)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
S1 fvypgemp; \??\C:\Windows\system32\drivers\fvypgemp.sys [X]
S3 GENERICDRV; \??\C:\Users\ADMINI~1\AppData\Local\Temp\pftAF85.tmp\amifldrv64.sys [X]
U3 pgldapod; \??\C:\Users\dawid\AppData\Local\Temp\pgldapod.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-07-06 17:59 - 2016-07-06 18:00 - 00020671 _____ C:\Users\dawid\Desktop\FRST.txt
2016-07-06 17:17 - 2016-07-06 17:59 - 00000000 ____D C:\FRST
2016-07-06 17:17 - 2016-07-06 17:17 - 00380928 _____ C:\Users\dawid\Desktop\4q3g31k6.exe
2016-07-06 17:15 - 2016-07-06 17:15 - 02390016 _____ (Farbar) C:\Users\dawid\Desktop\FRST64.exe
2016-07-06 16:58 - 2016-07-06 16:58 - 00000748 _____ C:\Users\dawid\Desktop\TP-LINK Modem Router Settings.txt
2016-07-06 11:54 - 2016-07-06 11:54 - 00016384 _____ C:\Users\dawid\Downloads\rom-0 (1)
2016-07-06 11:31 - 2016-07-06 11:31 - 00000000 ____D C:\Users\dawid\Downloads\TD-W8901G(UK_V3_140512
2016-07-06 11:30 - 2016-07-06 11:30 - 01181902 _____ C:\Users\dawid\Downloads\TD-W8901G(UK_V3_140512.zip
2016-07-06 11:24 - 2016-07-06 11:24 - 00016384 _____ C:\Users\dawid\Downloads\rom-0
2016-07-03 22:46 - 2016-07-03 22:46 - 00000000 ____D C:\Users\dawid\Documents\Lightshot
2016-07-01 09:42 - 2016-07-01 09:42 - 00251311 _____ C:\Users\dawid\Desktop\JYJFNT_Wozniakaaaa.pdf
2016-06-24 10:15 - 2016-06-24 10:15 - 00184180 _____ C:\Users\dawid\Desktop\coach.nationalexpressdasdasdasds.pdf
2016-06-18 17:55 - 2016-06-14 18:13 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-18 17:55 - 2016-06-14 18:13 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-17 13:06 - 2016-06-17 13:06 - 00000978 _____ C:\Users\dawid\AppData\Local\recently-used.xbel
2016-06-15 15:51 - 2016-05-12 19:38 - 00135336 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-15 15:51 - 2016-05-12 18:43 - 00115704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-06-15 15:51 - 2016-05-12 17:17 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-15 15:51 - 2016-05-12 17:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-15 15:51 - 2016-05-12 17:07 - 01360896 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-15 15:51 - 2016-05-12 16:59 - 00398848 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-15 15:51 - 2016-05-12 16:43 - 00291328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-15 15:51 - 2016-05-12 16:37 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-15 15:50 - 2016-05-14 00:09 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-06-15 15:50 - 2016-05-06 16:45 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-15 15:50 - 2016-05-06 16:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-15 15:49 - 2016-05-14 00:07 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-15 15:49 - 2016-05-14 00:07 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-15 15:49 - 2016-05-09 22:35 - 07075328 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-06-15 15:49 - 2016-05-09 21:56 - 05270016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-06-15 15:49 - 2016-05-09 21:45 - 07793152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-06-15 15:49 - 2016-05-09 21:23 - 05265920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-06-14 20:38 - 2016-05-21 18:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-14 20:38 - 2016-05-21 17:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-14 20:38 - 2016-05-20 23:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-14 20:38 - 2016-05-20 23:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-14 20:38 - 2016-05-20 23:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-14 20:38 - 2016-05-20 22:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-14 20:38 - 2016-05-20 22:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-06-14 20:38 - 2016-05-20 22:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-14 20:38 - 2016-05-20 22:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-14 20:38 - 2016-05-20 22:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-14 20:38 - 2016-05-20 22:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-14 20:38 - 2016-05-20 22:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-06-14 20:38 - 2016-05-20 22:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-06-14 20:38 - 2016-05-20 22:25 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-06-14 20:38 - 2016-05-20 22:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-06-14 20:38 - 2016-05-20 22:21 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-06-14 20:38 - 2016-05-20 22:19 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-06-14 20:38 - 2016-05-20 22:16 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-06-14 20:38 - 2016-05-20 22:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-14 20:38 - 2016-05-20 22:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-06-14 20:38 - 2016-05-20 22:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-14 20:38 - 2016-05-20 22:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-06-14 20:38 - 2016-05-20 22:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-14 20:38 - 2016-05-20 22:09 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-06-14 20:38 - 2016-05-20 22:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-06-14 20:38 - 2016-05-20 22:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-14 20:38 - 2016-05-20 22:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-06-14 20:38 - 2016-05-20 21:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-14 20:38 - 2016-05-20 21:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-14 20:38 - 2016-05-20 21:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-14 20:38 - 2016-05-20 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-06-14 20:38 - 2016-05-20 21:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-14 20:38 - 2016-05-20 21:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-06-14 20:38 - 2016-05-18 06:31 - 00372568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-14 20:38 - 2016-05-18 06:31 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-14 20:38 - 2016-05-16 22:13 - 00563016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-14 20:38 - 2016-05-16 22:13 - 00397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-14 20:38 - 2016-05-16 22:13 - 00340872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-14 20:38 - 2016-05-16 22:13 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-14 20:38 - 2016-05-14 00:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-14 20:38 - 2016-05-14 00:04 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-14 20:38 - 2016-05-13 23:34 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-06-14 20:38 - 2016-05-13 23:19 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-14 20:38 - 2016-05-13 22:58 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-06-14 20:37 - 2016-05-19 00:15 - 01379040 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-14 20:37 - 2016-05-18 21:35 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-14 20:37 - 2016-05-14 21:01 - 00363104 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-14 20:37 - 2016-05-14 21:01 - 00320720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-14 20:37 - 2016-05-14 00:07 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-14 20:37 - 2016-05-13 22:58 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-14 20:37 - 2016-05-13 22:45 - 00802816 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-14 20:37 - 2016-05-13 22:35 - 00286208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-14 20:37 - 2016-05-13 22:26 - 00631808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-10 19:47 - 2016-06-10 19:47 - 03878112 _____ (Husdawg, LLC) C:\Users\dawid\Desktop\Detection.exe
2016-06-08 15:44 - 2016-06-08 15:44 - 00000000 ____D C:\Users\dawid\AppData\Roaming\com.freakinware.wormis
2016-06-07 17:06 - 2016-06-07 17:06 - 00000222 _____ C:\Users\dawid\Desktop\Worm.is The Game.url

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-07-06 17:44 - 2015-05-22 17:39 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-575411724-1307231427-2836151415-1002
2016-07-06 17:39 - 2016-03-20 00:23 - 00001619 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-07-06 17:39 - 2016-02-17 11:39 - 00001115 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-07-06 17:39 - 2016-02-17 00:53 - 00001910 _____ C:\Users\Public\Desktop\YAC Desktop.lnk
2016-07-06 17:39 - 2015-11-27 21:21 - 00002010 _____ C:\Users\Public\Desktop\Theory Test Complete.lnk
2016-07-06 17:39 - 2015-11-14 15:44 - 00001020 _____ C:\Users\Public\Desktop\UltraISO.lnk
2016-07-06 17:39 - 2015-10-19 20:26 - 00001024 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2016-07-06 17:39 - 2015-09-25 16:30 - 00002056 _____ C:\Users\Public\Desktop\DSA Car Theory Test DVD.lnk
2016-07-06 17:39 - 2015-07-10 11:13 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-07-06 17:39 - 2015-06-24 17:38 - 00000949 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2016-07-06 17:39 - 2015-05-23 21:30 - 00001166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-07-06 17:39 - 2015-05-23 21:30 - 00001160 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-07-06 17:39 - 2015-05-22 19:13 - 00002709 _____ C:\Users\Public\Desktop\Skype.lnk
2016-07-06 17:39 - 2015-05-22 17:43 - 00001124 _____ C:\Users\Public\Desktop\Opera.lnk
2016-07-06 17:39 - 2015-05-22 17:43 - 00001058 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-07-06 17:39 - 2015-03-13 01:00 - 00002159 _____ C:\Users\Public\Desktop\Connected Drive.lnk
2016-07-06 17:39 - 2015-03-13 01:00 - 00001630 _____ C:\Users\Public\Desktop\Connected Photo.lnk
2016-07-06 17:39 - 2015-03-13 00:54 - 00001386 _____ C:\Users\Public\Desktop\HP Quick Access to Miracast.lnk
2016-07-06 17:39 - 2015-03-13 00:40 - 00002145 _____ C:\Users\Public\Desktop\Connected Music.lnk
2016-07-06 17:39 - 2014-10-31 03:34 - 00001984 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2016-07-06 17:38 - 2016-05-03 22:54 - 00001015 _____ C:\Users\dawid\Desktop\VTFEdit.lnk
2016-07-06 17:38 - 2016-04-26 00:46 - 00000814 _____ C:\Users\dawid\Desktop\World of Warships.lnk
2016-07-06 17:38 - 2016-04-19 03:01 - 00000788 _____ C:\Users\dawid\Desktop\World of Tanks.lnk
2016-07-06 17:38 - 2016-04-01 22:16 - 00002106 _____ C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape.lnk
2016-07-06 17:38 - 2016-01-12 19:54 - 00001089 _____ C:\Users\dawid\Desktop\GameRanger.lnk
2016-07-06 17:38 - 2016-01-12 19:54 - 00001075 _____ C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameRanger.lnk
2016-07-06 17:38 - 2015-11-15 22:53 - 00002250 _____ C:\Users\dawid\Desktop\HP Support Assistant.lnk
2016-07-06 17:38 - 2015-09-16 22:50 - 00001104 _____ C:\Users\dawid\Desktop\Cheat Engine.lnk
2016-07-06 17:38 - 2015-08-31 17:52 - 00001640 _____ C:\Users\dawid\Desktop\blender.exe - Shortcut.lnk
2016-07-06 17:38 - 2015-08-28 14:09 - 00001072 _____ C:\Users\dawid\Desktop\Notepad++.lnk
2016-07-06 17:38 - 2015-05-26 20:07 - 00001203 _____ C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk
2016-07-06 17:38 - 2015-05-26 20:07 - 00001164 _____ C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2016-07-06 17:38 - 2015-05-22 19:18 - 00000982 _____ C:\Users\dawid\Desktop\Steam.lnk
2016-07-06 17:38 - 2015-05-22 17:33 - 00001449 _____ C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-07-06 17:38 - 2015-05-22 17:30 - 00000469 _____ C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-07-06 17:38 - 2015-05-22 17:30 - 00000467 _____ C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-07-06 17:19 - 2015-05-23 19:23 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-07-06 16:51 - 2015-05-22 17:43 - 00000000 ____D C:\Program Files (x86)\Opera
2016-07-06 16:29 - 2016-02-17 11:39 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-07-06 11:53 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-07-05 23:37 - 2015-05-22 17:37 - 00000000 ____D C:\Users\dawid\Documents\Youcam
2016-07-05 23:30 - 2015-05-22 17:39 - 00000000 __RDO C:\Users\dawid\OneDrive
2016-07-02 21:24 - 2015-05-22 19:13 - 00000000 ____D C:\Users\dawid\AppData\Roaming\Skype
2016-07-02 21:01 - 2015-05-23 19:23 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-07-02 19:32 - 2015-10-19 20:26 - 00000000 ____D C:\Users\dawid\AppData\Roaming\TS3Client
2016-07-02 08:05 - 2016-05-14 18:14 - 00000344 _____ C:\Windows\Tasks\HPCeeScheduleFordawid.job
2016-07-01 14:19 - 2014-03-18 10:53 - 00956476 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-01 07:03 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2016-06-30 21:01 - 2015-05-22 19:13 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-06-30 21:01 - 2015-05-22 19:13 - 00000000 ____D C:\ProgramData\Skype
2016-06-30 10:35 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-22 15:21 - 2015-05-22 17:30 - 00000000 ____D C:\Users\dawid
2016-06-22 15:17 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-21 19:18 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2016-06-20 23:06 - 2015-05-22 19:18 - 00000000 ____D C:\Program Files (x86)\Steam
2016-06-18 17:55 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2016-06-18 17:54 - 2013-08-22 15:44 - 00356696 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-17 22:20 - 2015-03-13 00:32 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-06-17 22:20 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-06-17 22:17 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2016-06-17 22:17 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\en-GB
2016-06-17 22:16 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2016-06-17 20:53 - 2015-05-24 18:14 - 00000000 ____D C:\Windows\system32\MRT
2016-06-17 20:46 - 2015-05-24 18:14 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-17 13:06 - 2015-06-24 18:50 - 00000000 ____D C:\Users\dawid\AppData\Local\gtk-2.0
2016-06-17 13:06 - 2015-06-24 18:12 - 00000000 ____D C:\Users\dawid\.gimp-2.8
2016-06-16 20:19 - 2015-05-23 19:23 - 00003850 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-06-16 20:19 - 2015-05-23 19:23 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-06-16 16:50 - 2015-05-22 17:44 - 00003840 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1432313035
2016-06-07 17:06 - 2015-05-23 17:34 - 00000000 ____D C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-06-06 20:50 - 2015-09-22 17:31 - 00000000 ____D C:\Users\dawid\Desktop\g

==================== Files in the root of some directories =======

2015-05-31 20:11 - 2015-09-18 01:42 - 0000095 _____ () C:\Users\dawid\AppData\Roaming\LauncherSettings_live.cfg
2015-09-06 18:51 - 2015-09-06 19:24 - 0000039 _____ () C:\Users\dawid\AppData\Roaming\TheHunterSettings_live.cfg
2016-06-17 13:06 - 2016-06-17 13:06 - 0000978 _____ () C:\Users\dawid\AppData\Local\recently-used.xbel
2015-06-30 00:33 - 2015-06-30 00:33 - 0000003 _____ () C:\Users\dawid\AppData\Local\updater.log
2015-06-30 00:33 - 2015-06-30 00:33 - 0000424 _____ () C:\Users\dawid\AppData\Local\UserProducts.xml
2016-01-21 15:51 - 2015-11-22 15:52 - 0000032 ____R () C:\ProgramData\hash.dat

Files to move or delete:
====================
C:\ProgramData\hash.dat
C:\Windows\Tasks\{8B7255C6-CC26-485E-82DF-678818A94AFA}.job


Some files in TEMP:
====================
C:\Users\dawid\AppData\Local\Temp\Extract.exe
C:\Users\dawid\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\dawid\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\dawid\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\dawid\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\dawid\AppData\Local\Temp\HPSFUpdater.exe
C:\Users\dawid\AppData\Local\Temp\installstats.exe
C:\Users\dawid\AppData\Local\Temp\jre-8u60-windows-au.exe
C:\Users\dawid\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\dawid\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\dawid\AppData\Local\Temp\m84imm7c.dll
C:\Users\dawid\AppData\Local\Temp\SkypeSetup.exe
C:\Users\dawid\AppData\Local\Temp\SP71716.exe
C:\Users\dawid\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\dawid\AppData\Local\Temp\xmlUpdater.exe
C:\Users\dawid\AppData\Local\Temp\ytb.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-07-04 03:22

==================== End of FRST.txt ============================