ADVERTISEMENT

FRST.txt

Jak usunąć Dynamo Combo Ads? Skanowanie Pandą i Malwarebytes nie pomogło

Ok, oto one: Edit: I jeszcze Addition: Posty scaliłem. Proszę, byś w przypadku aktualizacji informacji używał opcji "Zmień".


Download file - link to post

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-01-2015
Ran by w (administrator) on KEOH208DPUMGM0J on 07-01-2015 17:09:31
Running from C:\Documents and Settings\w\Moje dokumenty\Downloads
Loaded Profile: w (Available profiles: w)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
() C:\WINDOWS\system32\WLTRYSVC.EXE
(Dell Inc.) C:\WINDOWS\system32\BCMWLTRY.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(OptionNV) C:\Program Files\Option\GlobeTrotter Connect\GtDetectSc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(ATI Technologies, Inc.) C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Dell Inc.) C:\WINDOWS\system32\WLTRAY.EXE
(France Telecom SA) C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() C:\Program Files\PLAY ONLINE\UIExec.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\Kies\KiesTrayAgent.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(ALi) C:\WINDOWS\WebCam\M1000\M1000Mnt.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Nokia) C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
() C:\Program Files\PLAY ONLINE\AssistantServices.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe
(WinZip Computing, Inc.) C:\Program Files\WinZip\WZQKPICK.EXE
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Farbar) C:\Documents and Settings\w\Moje dokumenty\Downloads\FRST (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ATIPTA] = & gt; C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [344064 2005-07-06] (ATI Technologies, Inc.)
HKLM\...\Run: [NeroFilterCheck] = & gt; C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [155648 2006-01-12] (Nero AG)
HKLM\...\Run: [BluetoothAuthenticationAgent] = & gt; rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM\...\Run: [Broadcom Wireless Manager UI] = & gt; C:\WINDOWS\system32\WLTRAY.exe [1392640 2007-03-16] (Dell Inc.)
HKLM\...\Run: [CardDetectorHUAWEI1752_1552] = & gt; C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe [282624 2009-10-14] (France Telecom SA)
HKLM\...\Run: [BEWINTERNET-PLSessionManager] = & gt; C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe [140016 2009-10-14] (France Telecom SA)
HKLM\...\Run: [Adobe ARM] = & gt; C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [AvastUI.exe] = & gt; C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-16] (AVAST Software)
HKLM\...\Run: [UIExec] = & gt; C:\Program Files\PLAY ONLINE\UIExec.exe [138584 2010-04-30] ()
HKLM\...\Run: [SunJavaUpdateSched] = & gt; C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [M1000Mnt] = & gt; M1000Rmv.exe /StartStillMnt
HKLM\...\Run: [KiesTrayAgent] = & gt; C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2014-12-17] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [KernelFaultCheck] = & gt; %systemroot%\system32\dumprep 0 -k
HKLM\...\Run: [IntelZeroConfig] = & gt; C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [1372160 2009-11-03] (Intel(R) Corporation)
HKLM\...\Run: [IntelWireless] = & gt; C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1202448 2009-11-03] (Intel(R) Corporation)
HKLM\...\Run: [igfxpers] = & gt; C:\WINDOWS\system32\igfxpers.exe [118784 2006-09-15] (Intel Corporation)
HKLM\...\Run: [igfxhkcmd] = & gt; C:\WINDOWS\system32\hkcmd.exe [77824 2006-09-15] (Intel Corporation)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Run: [Google Update] = & gt; C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [136176 2011-03-12] (Google Inc.)
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Run: [MSMSGS] = & gt; C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Run: [PC Suite Tray] = & gt; C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia)
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Run: [CCleaner Monitoring] = & gt; C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Run: [Skype] = & gt; C:\Program Files\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Run: [FDPRO-516] = & gt; C:\Program Files\Fighters\FighterLauncher.exe FDPRO
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Run: [ChomikBox] = & gt; C:\Program Files\ChomikBox\ChomikBox.exe [6017024 2014-02-06] ( )
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] = & gt; C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [139264 2006-10-09] (Nero AG)
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\MountPoints2: {37c3d068-5d4b-11e0-a402-0010c6168b54} - G:\MicroLauncher.exe
HKU\S-1-5-21-507921405-1592454029-725345543-1003\...\MountPoints2: {9f5d1a0f-d7ec-11e2-895b-0010c6ee19a7} - G:\LaunchU3.exe -a
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.exe.lnk
ShortcutTarget: Adobe Gamma Loader.exe.lnk - & gt; C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - & gt; C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (No File)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk - & gt; C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk - & gt; C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, Inc.)
ShellIconOverlayIdentifiers: [00avast] - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
GroupPolicy: Group Policy on Chrome detected & lt; ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction & lt; ======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKU\S-1-5-21-507921405-1592454029-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie & ar=iesearch
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: " http://www.google.com " & lt; ======= ATTENTION
SearchScopes: HKU\S-1-5-19 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-507921405-1592454029-725345543-1003 - & gt; 7BDB8B5204094F9E967C56E40144987C URL = http://www.bing.com/search?FORM=UP97DF & PC=UP97 & q={searchTerms} & src=IE-SearchBox
BHO: No Name - & gt; {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - & gt; No File
BHO: Java(tm) Plug-In SSV Helper - & gt; {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - & gt; C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - & gt; {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - & gt; C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\.DEFAULT - & gt; No Name - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No File
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 62.179.1.60 62.179.1.61

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 - & gt; C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 - & gt; C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - & gt; C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - & gt; C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - & gt; C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-507921405-1592454029-725345543-1003: @tools.google.com/Google Update;version=3 - & gt; C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-507921405-1592454029-725345543-1003: @tools.google.com/Google Update;version=9 - & gt; C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-03-15]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-12-02]

Chrome:
=======
CHR HomePage: Default - & gt; hxxp://g.pl/
CHR StartupUrls: Default - & gt; " hxxp://g.pl/ "
CHR DefaultSuggestURL: Default - & gt; {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient} & gs_ri={google:suggestRid} & xssi=t & q={searchTerms} & {google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-25]
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-25]
CHR Extension: (Arkusze Google) - C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-25]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-27]
CHR Extension: (Google Wallet) - C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR Extension: (Dynamo Combo) - C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\okkmdjgiocljmajcolbkhkfpkddapfhf [2015-01-06]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-27]
CHR HKU\.DEFAULT\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\DOCUME~1\NETWOR~1\USTAWI~1\DANEAP~1\newhb2.crx [2013-10-24]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-27] (AVAST Software)
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany) [File not signed]
R2 GtDetectSc; C:\Program Files\Option\GlobeTrotter Connect\GtDetectSc.exe [196704 2007-12-18] (OptionNV) [File not signed]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [724992 2006-10-09] (Nero AG) [File not signed]
S3 npggsvc; C:\WINDOWS\system32\GameMon.des [5434008 2013-08-25] (INCA Internet Co., Ltd.)
R2 S24EventMonitor; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [909312 2009-11-03] (Intel(R) Corporation) [File not signed]
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 UI Assistant Service; C:\Program Files\PLAY ONLINE\AssistantServices.exe [252784 2010-04-30] ()
R2 WLANKEEPER; C:\Program Files\Intel\WiFi\bin\WLKeeper.exe [348160 2009-11-03] (Intel(R) Corporation) [File not signed]
R2 wltrysvc; C:\WINDOWS\System32\bcmwltry.exe [1253376 2007-03-16] (Dell Inc.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-11-27] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-11-27] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-11-27] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-11-27] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-11-27] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2014-11-27] (AVAST Software)
S3 aswTap; C:\WINDOWS\System32\DRIVERS\aswTap.sys [35144 2014-11-27] (The OpenVPN Project)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-11-27] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-11-27] ()
S3 BCM43XX; C:\WINDOWS\System32\DRIVERS\bcmwl5.sys [604928 2007-03-16] (Broadcom Corporation)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S3 FreshIO; C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys [2410 2004-10-26] () [File not signed]
S3 GTF32BUS; C:\WINDOWS\System32\DRIVERS\gtf32bus.sys [35328 2007-04-17] (Option N.V.)
S3 GTFFBUS; C:\WINDOWS\System32\DRIVERS\gtffbus.sys [16128 2006-05-29] (Option N.V.)
R3 GTIPCI21; C:\WINDOWS\System32\DRIVERS\gtipci21.sys [88192 2006-04-06] (Texas Instruments)
S3 GTMMDMUSB; C:\WINDOWS\System32\DRIVERS\gtmmdmusb.sys [25344 2006-05-29] (Option N.V.)
S3 GTMNDISIRPXP; C:\WINDOWS\System32\DRIVERS\Gtm51Irp.sys [112000 2006-05-29] (Option NV)
S3 GTMSERUSB; C:\WINDOWS\System32\DRIVERS\gtmserusb.sys [21760 2006-05-29] (Option N.V.)
S3 GTPTSER; C:\WINDOWS\System32\DRIVERS\gtptser.sys [8064 2007-04-17] (Option N.V.)
S3 GTSCSER; C:\WINDOWS\System32\DRIVERS\gtscser.sys [21248 2007-04-17] (Option N.V.)
S3 GtVUsb; C:\WINDOWS\System32\DRIVERS\GtVUsb.sys [5120 2006-05-29] (option) [File not signed]
R3 HSFHWICH; C:\WINDOWS\System32\DRIVERS\HSFHWICH.sys [208384 2005-05-03] (Conexant Systems, Inc.)
R3 HSF_DPV; C:\WINDOWS\System32\DRIVERS\HSF_DPV.SYS [1033728 2005-05-03] (Conexant Systems, Inc.)
S3 hwusbfake; C:\WINDOWS\System32\DRIVERS\ewusbfake.sys [102656 2009-08-04] (Huawei Technologies Co., Ltd.)
S3 M1000Srv; C:\WINDOWS\System32\Drivers\M1000KNT.sys [274567 2005-07-20] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [114904 2015-01-07] (Malwarebytes Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 PCAMPR5; C:\WINDOWS\system32\PCAMPR5.SYS [34688 2003-09-23] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 PCANDIS5; C:\WINDOWS\system32\PCANDIS5.SYS [32128 2006-03-01] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 PCASp50; C:\WINDOWS\System32\Drivers\PCASp50.sys [18560 2006-08-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R3 Rasirda; C:\WINDOWS\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
R2 s24trans; C:\WINDOWS\System32\DRIVERS\s24trans.sys [11904 2008-08-13] (Intel Corporation)
S3 Ser2pl; C:\WINDOWS\System32\DRIVERS\ser2pl.sys [43136 2012-10-26] (Prolific Technology Inc.) [File not signed]
S3 SMCIRDA; C:\WINDOWS\System32\DRIVERS\smcirda.sys [36425 2001-10-26] (SMC)
S3 ssudserd; C:\WINDOWS\System32\DRIVERS\ssudserd.sys [181432 2011-10-18] (DEVGURU Co., LTD.(www.devguru.co.kr))
R3 STAC97; C:\WINDOWS\System32\drivers\STAC97.sys [273168 2005-03-10] (SigmaTel, Inc.)
R3 w29n51; C:\WINDOWS\System32\DRIVERS\w29n51.sys [2216064 2009-11-11] (Intel® Corporation)
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 UIUSys; system32\drivers\UIUSys.sys [X]

========================== Drivers MD5 =======================

C:\WINDOWS\System32\DRIVERS\ACPI.sys 05118282F5D039595A2B92B4A4AFE197
C:\WINDOWS\system32\Drivers\ACPIEC.sys 66A42B7DB194E24B973BBCCE840A0F3F
C:\WINDOWS\System32\drivers\aec.sys 8BED39E3C35D6A489438B8141717A557
C:\WINDOWS\System32\drivers\afd.sys 1E44BC1E83D8FD2305F8D452DB109CF9
C:\WINDOWS\system32\drivers\aswHwid.sys 9D23DE88C3B18BA87CD4587177CA6CEA
C:\WINDOWS\system32\drivers\aswMonFlt.sys 73A9014A9C4B19AA093DA05ED4246E27
C:\WINDOWS\system32\drivers\aswRdr.sys 0926775B8C3B32EE99921CCB0F85378E
C:\WINDOWS\system32\Drivers\aswRvrt.sys 6544697080421E62E97AAFBD0A8AA391
C:\WINDOWS\system32\drivers\aswSnx.sys E73CBE3420ECFA8FF7D0467E170E335D
C:\WINDOWS\system32\drivers\aswSP.sys 1624D5AD126B8AFE2B2E85E5B8364EB6
C:\WINDOWS\System32\DRIVERS\aswTap.sys C62E0261EC93B66151E5BAE83B61EE30
C:\WINDOWS\system32\drivers\aswTdi.sys 4C0ECF1AFA6992904814C74B99DD36F9
C:\WINDOWS\system32\Drivers\aswVmm.sys 0EFBC2962B156E8AC267F96D4D93EF06
C:\WINDOWS\System32\DRIVERS\asyncmac.sys B153AFFAC761E7F5FCFA822B9C4E97BC
C:\WINDOWS\System32\DRIVERS\atapi.sys 9F3A2F5AA6875C72BF062C712CFA2674
C:\WINDOWS\System32\DRIVERS\ati2mtag.sys 2A6C99CFDC23C9C26D0E30B1C99748D4
C:\WINDOWS\System32\DRIVERS\atmarpc.sys 9916C1225104BA14794209CFA8012159
C:\WINDOWS\System32\DRIVERS\audstub.sys D9F724AA26C010A217C97606B160ED68
C:\WINDOWS\System32\DRIVERS\b57xp32.sys 3A3A82FFD268BCFB7AE6A48CECF00AD9
C:\WINDOWS\System32\DRIVERS\bcmwl5.sys B89BCF0A25AEB3B47030AC83287F894A
C:\WINDOWS\system32\Drivers\Beep.sys DA1F27D85E0D1525F6621372E7B685E9
C:\WINDOWS\System32\DRIVERS\BthEnum.sys B279426E3C0C344893ED78A613A73BDE
C:\WINDOWS\System32\DRIVERS\bthmodem.sys FCA6F069597B62D42495191ACE3FC6C1
C:\WINDOWS\System32\DRIVERS\bthpan.sys 80602B8746D3738F5886CE3D67EF06B6
C:\WINDOWS\System32\Drivers\BTHport.sys 58D5250A872F2466EBCBDD9E6643525C
C:\WINDOWS\System32\Drivers\BTHUSB.sys 61364CD71EF63B0F038B7E9DF00F1EFA
C:\WINDOWS\system32\Drivers\cbidf2k.sys 90A673FC8E12A79AFBED2576F6A7AAF9
C:\WINDOWS\System32\DRIVERS\CCDECODE.sys 0BE5AEF125BE881C4F854C554F2B025C
C:\WINDOWS\system32\Drivers\Cdaudio.sys C1B486A7658353D33A10CC15211A873B
C:\WINDOWS\system32\Drivers\Cdfs.sys C885B02847F5D2FD45A24E219ED93B32
C:\WINDOWS\System32\DRIVERS\cdrom.sys 1F4260CC5B42272D71F79E570A27A4FE
C:\WINDOWS\System32\DRIVERS\CmBatt.sys 0F6C187D38D98F8DF904589A5F94D411
C:\WINDOWS\System32\DRIVERS\compbatt.sys 6E4C9F21F0FAE8940661144F41B13203
C:\WINDOWS\System32\drivers\dgderdrv.sys 6216FD7FD227DE454238A702B218CEC7
C:\WINDOWS\System32\DRIVERS\ssudbus.sys 7A5FB3E4E0D77740D56E516EE6B2DC2B
C:\WINDOWS\System32\DRIVERS\disk.sys 044452051F3E02E7963599FC8F4F3E25
C:\WINDOWS\System32\drivers\dmboot.sys BC9219ABC5696942E6F9AC8A9B28670F
C:\WINDOWS\System32\drivers\dmio.sys 5FA232E3BA6E1346F9F5A7E519320CB0
C:\WINDOWS\System32\drivers\dmload.sys E9317282A63CA4D188C0DF5E09C6AC5F
C:\WINDOWS\System32\drivers\DMusic.sys 8A208DFCF89792A484E76C40E5F50B45
C:\WINDOWS\System32\drivers\drmkaud.sys 8F5FCFF8E8848AFAC920905FBD9D33C8
C:\WINDOWS\system32\Drivers\Fastfat.sys 38D332A6D56AF32635675F132548343E
C:\WINDOWS\system32\Drivers\Fdc.sys 92CDD60B6730B9F50F6A1A0C1F8CDC81
C:\WINDOWS\system32\Drivers\Fips.sys 09E2A4D33F81A06A8AAB2BA0A0B5D235
C:\WINDOWS\system32\Drivers\Flpydisk.sys 9D27E7B80BFCDF1CDD9B555862D5E7F0
C:\WINDOWS\System32\drivers\fltmgr.sys B2CF4B0786F8212CB92ED2B50C6DB6B0
C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys CAAC750E6D27866C28494E0DE9FA802A
C:\WINDOWS\system32\Drivers\Fs_Rec.sys 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A
C:\WINDOWS\System32\DRIVERS\ftdisk.sys ED6D921D8AB423138FB35BEEE6D6A6CB
C:\WINDOWS\System32\DRIVERS\msgpc.sys 0A02C63C8B144BD8C86B103DEE7C86A2
C:\WINDOWS\System32\DRIVERS\gtf32bus.sys C1156A82EBAA899E0B5738406F31DFEA
C:\WINDOWS\System32\DRIVERS\gtffbus.sys 978C519C96E6F0B3B5F2AFD6246BAE20
C:\WINDOWS\System32\DRIVERS\gtipci21.sys CA835331825599B938E37525796D3549
C:\WINDOWS\System32\DRIVERS\gtmmdmusb.sys B6EA09106566150EBFE1650C2073A68E
C:\WINDOWS\System32\DRIVERS\Gtm51Irp.sys 21349817E90356A09A94F850024B8B4C
C:\WINDOWS\System32\DRIVERS\gtmserusb.sys E4562705B6564E86173816721E517FCD
C:\WINDOWS\System32\DRIVERS\gtptser.sys B7D480186F433A08AD31F19A4AFEA888
C:\WINDOWS\System32\DRIVERS\gtscser.sys E28CF2F7E9BF9A3B42986848EE6F6FCC
C:\WINDOWS\System32\DRIVERS\GtVUsb.sys 4F46C5A8B50D5EF05C1B2DA655438F5F
C:\WINDOWS\System32\DRIVERS\hidusb.sys CCF82C5EC8A7326C3066DE870C06DAF1
C:\WINDOWS\System32\DRIVERS\HSFHWICH.sys A84BBBDD125D370593004F6429F8445C
C:\WINDOWS\System32\DRIVERS\HSF_DPV.SYS B678FA91CF4A1C19B462D8DB04CD02AB
C:\WINDOWS\System32\Drivers\HTTP.sys F80A415EF82CD06FFAF0D971528EAD38
C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys 8ADF5EF39E896A65BEDED878494EE2B6
C:\WINDOWS\System32\DRIVERS\ewusbfake.sys 9BE5CAEABC6B2EB98B3A4839A55D47A0
C:\WINDOWS\System32\DRIVERS\i8042prt.sys 177B372AF55C4460D0968B5F1D02AA1C
C:\WINDOWS\System32\DRIVERS\ialmnt5.sys 643162FBC619E35D3F1A90A095A5BB42
C:\WINDOWS\System32\DRIVERS\imapi.sys 083A052659F5310DD8B6A6CB05EDCF8E
C:\WINDOWS\System32\DRIVERS\intelppm.sys DA153EDC09DE8C4F846C085CAA39D1CC
C:\WINDOWS\System32\drivers\ip6fw.sys 3BB22519A194418D5FEC05D800A19AD0
C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys 731F22BA402EE4B62748ADAF6363C182
C:\WINDOWS\System32\DRIVERS\ipinip.sys B87AB476DCF76E72010632B5550955F5
C:\WINDOWS\System32\DRIVERS\ipnat.sys CC748EA12C6EFFDE940EE98098BF96BB
C:\WINDOWS\System32\DRIVERS\ipsec.sys 23C74D75E36E7158768DD63D92789A91
C:\WINDOWS\System32\DRIVERS\irda.sys ACA5E7B54409F9CB5EED97ED0C81120E
C:\WINDOWS\System32\DRIVERS\irenum.sys C93C9FF7B04D772627A3646D89F7BF89
C:\WINDOWS\System32\DRIVERS\isapnp.sys C8EEF2E93835B81BD335DE2123121283
C:\WINDOWS\System32\DRIVERS\kbdclass.sys 2AECA45D4AEAACBDCB77AD11184E4601
C:\WINDOWS\System32\drivers\kmixer.sys 692BCF44383D056AED41B045A323D378
C:\WINDOWS\system32\Drivers\KSecDD.sys B467646C54CC746128904E1654C750C1
C:\WINDOWS\System32\Drivers\M1000KNT.sys A17C23BA79B188621BAF14CAB66BB1D9
C:\WINDOWS\System32\drivers\massfilter.sys 09721F2C56681A83C93ECDFAB8B102A9
C:\WINDOWS\system32\drivers\mbam.sys A3F4391DFDF2F9E9FE4EAD193265A5AD
C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys 8E2E9CCD873ABF180F48BCAEEEBE347D
C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys 3C318B9CD391371BED62126581EE9961
C:\WINDOWS\system32\Drivers\mnmdd.sys 4AE068242760A1FB6E1A44BF4E16AFA6
C:\WINDOWS\system32\Drivers\Modem.sys 4A068DB7DC37D5AFEDB6512D2931D7B3
C:\WINDOWS\System32\DRIVERS\mouclass.sys FBED3DF6B884F8CF00447B73507F2C48
C:\WINDOWS\System32\DRIVERS\mouhid.sys ECEC1E6CD558AB80F944F31326E9D3B5
C:\WINDOWS\system32\Drivers\MountMgr.sys A80B9A0BAD1B73637DBCBBA7DF72D3FD
C:\WINDOWS\System32\DRIVERS\mrxdav.sys 11D42BB6206F33FBB3BA0288D3EF81BD
C:\WINDOWS\System32\DRIVERS\mrxsmb.sys 7D304A5EB4344EBEEAB53A2FE3FFB9F0
C:\WINDOWS\system32\Drivers\Msfs.sys C941EA2454BA8350021D774DAF0F1027
C:\WINDOWS\System32\drivers\MSKSSRV.sys D1575E71568F4D9E14CA56B7B0453BF1
C:\WINDOWS\System32\drivers\MSPCLOCK.sys 325BB26842FC7CCC1FCCE2C457317F3E
C:\WINDOWS\System32\drivers\MSPQM.sys BAD59648BA099DA4A17680B39730CB3D
C:\WINDOWS\System32\DRIVERS\mssmbios.sys AF5F4F3F14A8EA2C26DE30F7A1E17136
C:\WINDOWS\System32\drivers\MSTEE.sys E53736A9E30C45FA9E7B5EAC55056D1D
C:\WINDOWS\system32\Drivers\Mup.sys DE6A75F5C270E756C5508D94B6CF68F5
C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys 5B50F1B2A2ED47D560577B221DA734DB
C:\WINDOWS\system32\Drivers\NDIS.sys 1DF7F42665C94B825322FAE71721130D
C:\WINDOWS\System32\DRIVERS\NdisIP.sys 7FF1F1FD8609C149AA432F95A8163D97
C:\WINDOWS\System32\DRIVERS\ndistapi.sys 0109C4F3850DFBAB279542515386AE22
C:\WINDOWS\System32\DRIVERS\ndisuio.sys F927A4434C5028758A842943EF1A3849
C:\WINDOWS\System32\DRIVERS\ndiswan.sys EDC1531A49C80614B2CFDA43CA8659AB
C:\WINDOWS\system32\Drivers\NDProxy.sys 2F597BB467E05B1FE3830EABD821B8E0
C:\WINDOWS\System32\DRIVERS\netbios.sys 5D81CF9A2F1A3A756B66CF684911CDF0
C:\WINDOWS\System32\DRIVERS\netbt.sys 74B2B2F5BEA5E9A3DC021D685551BD3D
C:\WINDOWS\system32\Drivers\Npfs.sys 3182D64AE053D6FB034F44B6DEF8034A
C:\WINDOWS\system32\Drivers\Ntfs.sys 78A08DD6A8D65E697C18E1DB01C5CDCA
C:\WINDOWS\system32\Drivers\Null.sys 73C1E1F395918BC2C6DD67AF7591A3AD
C:\WINDOWS\System32\DRIVERS\NWADIenum.sys 091A1284AA583288B64DCD370D1B421E
C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys B305F3FAD35083837EF46A0BBCE2FC57
C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys C99B3415198D1AAB7227F2C88FD664B9
C:\WINDOWS\System32\DRIVERS\parport.sys 2D4CDAEBCED17743AA9E25D3016DC229
C:\WINDOWS\system32\Drivers\PartMgr.sys BEB3BA25197665D82EC7065B724171C6
C:\WINDOWS\system32\Drivers\ParVdm.sys 453EC2C2A20A1382F564541918520EEB
C:\WINDOWS\system32\PCAMPR5.SYS B670C5D89F0726B7A2A7DFB4E968CDF8
C:\WINDOWS\system32\PCANDIS5.SYS ECD2F9D67B06606064DAF6961A6D5EFE
C:\WINDOWS\System32\Drivers\PCASp50.sys 803C8E7F4D00FE832C1F3871514FEC85
C:\WINDOWS\System32\DRIVERS\pccsmcfd.sys F451DCACBAA67F3307305EBD4A39EA07
C:\WINDOWS\System32\DRIVERS\pci.sys 6862C69168D787B85A7D95CCD33C694E
C:\WINDOWS\System32\DRIVERS\pciide.sys 548CF2D6369EAE441A4C6BAA75BC4F0A
C:\WINDOWS\System32\DRIVERS\pcmcia.sys 8DB27F1AE9593C94095485305A583862
C:\WINDOWS\System32\DRIVERS\raspptp.sys EFEEC01B1D3CF84F16DDD24D9D9D8F99
C:\WINDOWS\System32\DRIVERS\processr.sys 7A1367D250502C6416A4D3A19EF155F5
C:\WINDOWS\System32\DRIVERS\psched.sys 09298EC810B07E5D582CB3A3F9255424
C:\WINDOWS\System32\DRIVERS\ptilink.sys 80D317BD1C3DBC5D4FE7B1678C60CADD
C:\WINDOWS\System32\DRIVERS\rasacd.sys FE0D99D6F31E4FAD8159F690D68DED9C
C:\WINDOWS\System32\DRIVERS\rasirda.sys 0207D26DDF796A193CCD9F83047BB5FC
C:\WINDOWS\System32\DRIVERS\rasl2tp.sys 11B4A627BC9614B885C4969BFA5FF8A6
C:\WINDOWS\System32\DRIVERS\raspppoe.sys 5BC962F2654137C9909C3D4603587DEE
C:\WINDOWS\System32\DRIVERS\raspti.sys FDBB1D60066FCFBB7452FD8F9829B242
C:\WINDOWS\System32\DRIVERS\rdbss.sys 7AD224AD1A1437FE28D89CF22B17780A
C:\WINDOWS\System32\DRIVERS\RDPCDD.sys 4912D5B403614CE99C28420F75353332
C:\WINDOWS\System32\DRIVERS\rdpdr.sys 15CABD0F7C00C47C70124907916AF3F1
C:\WINDOWS\system32\Drivers\RDPWD.sys 43AF5212BD8FB5BA6EED9754358BD8F7
C:\WINDOWS\System32\DRIVERS\redbook.sys E0C7BBD18040B58651BAC700C804861D
C:\WINDOWS\System32\DRIVERS\rfcomm.sys 851C30DF2807FCFA21E4C681A7D6440E
C:\WINDOWS\System32\DRIVERS\s24trans.sys 96B4494D4734970F47C566E098C4F527
C:\WINDOWS\System32\DRIVERS\secdrv.sys == & gt; MD5 is legit
C:\WINDOWS\System32\DRIVERS\ser2pl.sys E42F03D1081C4F60D3DB6C38235B1456
C:\WINDOWS\System32\DRIVERS\serenum.sys 0F29512CCD6BEAD730039FB4BD2C85CE
C:\WINDOWS\System32\DRIVERS\serial.sys D07B02F88165E69B9F17162CF592C8A6
C:\WINDOWS\system32\Drivers\Sfloppy.sys 8E6B8C671615D126FDC553D1E2DE5562
C:\WINDOWS\System32\DRIVERS\SLIP.sys 866D538EBE33709A5C9F5C62B73B7D14
C:\WINDOWS\System32\DRIVERS\smcirda.sys 74866CD443002434A24DE153AEFBED33
C:\WINDOWS\System32\drivers\splitter.sys AB8B92451ECB048A4D1DE7C3FFCB4A9F
C:\WINDOWS\System32\DRIVERS\sr.sys EB032822BE406EF220D546DDFFCF0002
C:\WINDOWS\System32\DRIVERS\srv.sys 47DDFC2F003F7F9F0592C6874962A2E7
C:\WINDOWS\System32\DRIVERS\ssudmdm.sys 5EE6503C932CB79B493E4B4D8E23D219
C:\WINDOWS\System32\DRIVERS\ssudserd.sys A20A049142D5964701ED449A4A10A338
C:\WINDOWS\System32\drivers\STAC97.sys 305CC42945A713347F978D78566113F3
C:\WINDOWS\System32\DRIVERS\StreamIP.sys 77813007BA6265C4B6098187E6ED79D2
C:\WINDOWS\System32\DRIVERS\swenum.sys 3941D127AEF12E93ADDF6FE6EE027E0F
C:\WINDOWS\System32\drivers\swmidi.sys 8CE882BCC6CF8A62F2B2323D95CB3D01
C:\WINDOWS\System32\drivers\sysaudio.sys 8B83F3ED0F1688B4958F77CD6D2BF290
C:\WINDOWS\System32\DRIVERS\tcpip.sys 9AEFA14BD6B182D61E3119FA5F436D3D
C:\WINDOWS\system32\Drivers\TDPIPE.sys 6471A66807F5E104E4885F5B67349397
C:\WINDOWS\system32\Drivers\TDTCP.sys C56B6D0402371CF3700EB322EF3AAF61
C:\WINDOWS\System32\DRIVERS\termdd.sys 88155247177638048422893737429D9E
C:\WINDOWS\system32\Drivers\Udfs.sys 5787B80C2E3C5E2F56C2A233D91FA2C9
C:\WINDOWS\System32\DRIVERS\update.sys 402DDC88356B1BAC0EE3DD1580C76A31
C:\WINDOWS\System32\drivers\usbaudio.sys 65898A183FBF1D1F7759D5CCB364DCD4
C:\WINDOWS\System32\DRIVERS\usbccgp.sys 1B611611C28D2DF25BC057D79C6F13FC
C:\WINDOWS\System32\DRIVERS\usbehci.sys 4BAC8DF07F1D8434FC640E677A62204E
C:\WINDOWS\System32\DRIVERS\usbhub.sys 1AB3CDDE553B6E064D2E754EFE20285C
C:\WINDOWS\System32\DRIVERS\usbohci.sys 0DAECCE65366EA32B162F85F07C6753B
C:\WINDOWS\System32\DRIVERS\usbprint.sys A717C8721046828520C9EDF31288FC00
C:\WINDOWS\System32\DRIVERS\usbscan.sys F8EDE2B6928970DCE3D5614C27D9E7F6
C:\WINDOWS\System32\drivers\usbser.sys 84C44D720655A8AA475E57A9E764D675
C:\WINDOWS\System32\DRIVERS\usbser_lowerfltj.sys 4F8FBC51A1C0A17310846B417A447F91
C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS A32426D9B14A089EAA1D922E0C5801A9
C:\WINDOWS\System32\DRIVERS\usbuhci.sys 26496F9DEE2D787FC3E61AD54821FFE6
C:\WINDOWS\System32\drivers\vga.sys 0D3A8FAFCEACD8B7625CD549757A7DF1
C:\WINDOWS\system32\Drivers\VolSnap.sys 56B191AC5FC0DF219949C95A6C87AFE7
C:\WINDOWS\System32\DRIVERS\w29n51.sys F0608F3B5B6D16F4870E867F9D069B6B
C:\WINDOWS\System32\DRIVERS\wanarp.sys E20B95BAEDB550F32DD489265C1DA1F6
C:\WINDOWS\System32\Drivers\wdf01000.sys D918617B46457B9AC28027722E30F647
C:\WINDOWS\System32\drivers\wdmaud.sys 6768ACF64B18196494413695F0C3A00F
C:\WINDOWS\System32\DRIVERS\HSF_CNXT.sys 0C5B9CF1BDF998750D9C5EEB5F8C55AC
C:\WINDOWS\System32\DRIVERS\wpdusb.sys CF4DEF1BF66F06964DC0D91844239104
C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS C98B39829C2BBD34E454150633C62C78
C:\WINDOWS\System32\DRIVERS\WudfPf.sys F15FEAFFFBB3644CCC80C5DA584E6311
C:\WINDOWS\System32\DRIVERS\wudfrd.sys 28B524262BCE6DE1F7EF9F510BA3985B
C:\WINDOWS\System32\DRIVERS\ZTEusbmdm6k.sys 616B411BFC0E9F535A436759F19B79D8
C:\WINDOWS\System32\DRIVERS\ZTEusbnmea.sys 616B411BFC0E9F535A436759F19B79D8
C:\WINDOWS\System32\DRIVERS\ZTEusbser6k.sys 616B411BFC0E9F535A436759F19B79D8

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-07 16:55 - 2015-01-07 17:09 - 00000000 ____D () C:\FRST
2015-01-07 16:01 - 2015-01-07 16:01 - 00001423 _____ () C:\Documents and Settings\w\Pulpit\AdwCleaner[R6].txt
2015-01-07 13:28 - 2015-01-07 13:35 - 00000000 ____D () C:\WINDOWS\pss
2015-01-07 11:40 - 2015-01-07 11:40 - 00000955 _____ () C:\Documents and Settings\All Users\Pulpit\Panda Cloud Cleaner.lnk
2015-01-07 11:40 - 2015-01-07 11:40 - 00000000 ____D () C:\Program Files\Panda Security
2015-01-07 11:40 - 2015-01-07 11:40 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Panda Security
2015-01-07 11:30 - 2015-01-07 11:30 - 00001606 _____ () C:\WINDOWS\setupapi.log
2015-01-07 11:30 - 2015-01-07 11:30 - 00000000 ____D () C:\Program Files\SkanerOnline
2015-01-06 23:02 - 2015-01-07 16:27 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-01-06 23:01 - 2015-01-06 23:01 - 00000793 _____ () C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
2015-01-06 23:01 - 2015-01-06 23:01 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-01-06 23:01 - 2015-01-06 23:01 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes Anti-Malware
2015-01-06 23:01 - 2015-01-06 23:01 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2015-01-06 23:01 - 2014-11-21 06:14 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-01-06 23:01 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-01-06 22:53 - 2015-01-06 22:53 - 00000682 _____ () C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
2015-01-06 22:53 - 2015-01-06 22:53 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-06 22:53 - 2015-01-06 22:53 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
2015-01-06 19:33 - 2015-01-06 19:33 - 00000472 __RSH () C:\Documents and Settings\All Users\ntuser.pol
2015-01-06 17:49 - 2015-01-06 17:49 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy
2015-01-05 11:07 - 2015-01-05 11:07 - 00000000 ____D () C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Opera Software
2015-01-05 11:07 - 2015-01-05 11:07 - 00000000 ____D () C:\Documents and Settings\w\Dane aplikacji\Opera Software
2015-01-05 11:02 - 2015-01-05 11:02 - 00001377 _____ () C:\Documents and Settings\All Users\Pulpit\Wznów Instalację Reimage Repair.lnk
2015-01-05 11:00 - 2015-01-05 14:02 - 00000000 ____D () C:\Program Files\Opera
2015-01-02 19:49 - 2015-01-02 19:49 - 00001737 _____ () C:\Documents and Settings\All Users\Pulpit\Avast Free Antivirus.lnk
2015-01-02 19:48 - 2014-11-27 19:17 - 00291352 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-30 21:09 - 2014-12-30 21:09 - 00027472 _____ () C:\Documents and Settings\w\Pulpit\Contacts001.spb
2014-12-30 21:09 - 2014-12-30 21:09 - 00000000 ____D () C:\Documents and Settings\w\Pulpit\BackUp
2014-12-30 13:34 - 2014-12-30 13:36 - 00222070 ____N () C:\Documents and Settings\w\Pulpit\Kontakty.vcf
2014-12-30 11:12 - 2014-12-30 11:12 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB941569$
2014-12-28 00:18 - 2014-12-28 00:18 - 00182444 _____ () C:\Documents and Settings\w\Pulpit\watch (1).htm
2014-12-27 15:20 - 2014-12-30 21:04 - 00000000 ____D () C:\Documents and Settings\w\Moje dokumenty\SelfMV
2014-12-27 15:19 - 2014-12-27 15:19 - 00001610 _____ () C:\Documents and Settings\All Users\Pulpit\Samsung Kies 3.lnk
2014-12-27 14:39 - 2014-12-27 14:40 - 00000000 ____D () C:\Documents and Settings\w\Pulpit\Nowy folder (5)
2014-12-27 14:39 - 2014-12-27 14:39 - 00000000 ____D () C:\Documents and Settings\w\Pulpit\Camera
2014-12-27 14:37 - 2014-12-27 14:37 - 00000000 ____D () C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Samsung
2014-12-27 14:36 - 2014-12-27 14:36 - 00001643 _____ () C:\Documents and Settings\All Users\Pulpit\Samsung Kies (Lite).lnk
2014-12-27 14:36 - 2014-12-27 14:36 - 00001633 _____ () C:\Documents and Settings\All Users\Pulpit\Samsung Kies.lnk
2014-12-27 14:34 - 2014-10-13 06:57 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2014-12-27 14:34 - 2014-10-13 06:57 - 00089856 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudbus.sys
2014-12-27 14:04 - 2014-12-27 15:19 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Samsung
2014-12-27 14:04 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\WINDOWS\system32\Redemption.dll
2014-12-27 14:04 - 2013-12-30 10:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\WINDOWS\system32\secman.dll
2014-12-27 14:04 - 2013-12-30 10:52 - 00821824 _____ (Devguru Co., Ltd.) C:\WINDOWS\system32\dgderapi.dll
2014-12-27 14:04 - 2013-12-30 10:52 - 00020032 _____ (Devguru Co., Ltd) C:\WINDOWS\system32\Drivers\dgderdrv.sys
2014-12-27 13:58 - 2007-07-27 23:11 - 00016760 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg.dll
2014-12-11 12:12 - 2014-12-11 12:12 - 03981488 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-07 17:10 - 2011-03-12 12:57 - 00000000 ____D () C:\Documents and Settings\w\Ustawienia lokalne\Temp
2015-01-07 16:47 - 2014-02-07 11:47 - 00000448 _____ () C:\WINDOWS\Tasks\At2.job
2015-01-07 16:47 - 2013-10-10 13:47 - 00000432 _____ () C:\WINDOWS\Tasks\At1.job
2015-01-07 16:38 - 2011-03-12 13:35 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-07 16:32 - 2011-03-12 14:07 - 00001116 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-507921405-1592454029-725345543-1003UA.job
2015-01-07 16:32 - 2011-03-12 12:56 - 00031944 _____ () C:\WINDOWS\SchedLgU.Txt
2015-01-07 16:12 - 2012-04-24 22:24 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-01-07 16:01 - 2011-03-12 12:57 - 00000000 ____D () C:\Documents and Settings\w\Pulpit
2015-01-07 16:00 - 2014-03-10 15:47 - 00000000 ____D () C:\AdwCleaner
2015-01-07 13:37 - 2011-03-12 13:11 - 00000211 __RSH () C:\boot.ini
2015-01-07 13:37 - 2003-08-06 20:07 - 00000836 _____ () C:\WINDOWS\win.ini
2015-01-07 13:37 - 2003-08-06 20:03 - 00000227 ____C () C:\WINDOWS\system.ini
2015-01-07 12:34 - 2011-03-12 13:33 - 01478262 ____C () C:\WINDOWS\WindowsUpdate.log
2015-01-07 12:23 - 2014-11-27 19:18 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-01-07 12:22 - 2011-03-12 12:13 - 00072734 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-07 12:22 - 2003-08-06 19:55 - 00971690 _____ () C:\WINDOWS\system32\perfh015.dat
2015-01-07 12:22 - 2003-08-06 19:55 - 00360452 _____ () C:\WINDOWS\system32\perfc015.dat
2015-01-07 12:19 - 2014-02-10 22:41 - 00000000 ____D () C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\ChomikBox
2015-01-07 12:19 - 2011-07-18 11:22 - 00000000 ____D () C:\Documents and Settings\w\Dane aplikacji\Skype
2015-01-07 12:18 - 2014-02-10 22:42 - 00000000 ____D () C:\Documents and Settings\w\.gstreamer-0.10
2015-01-07 12:17 - 2012-02-03 12:19 - 00000159 ____C () C:\WINDOWS\wiadebug.log
2015-01-07 12:17 - 2012-02-03 12:19 - 00000050 ____C () C:\WINDOWS\wiaservc.log
2015-01-07 12:17 - 2011-03-12 13:35 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-07 12:17 - 2011-03-12 12:52 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-07 12:17 - 2003-08-06 20:09 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-01-07 12:15 - 2011-03-12 12:57 - 00000188 ___SH () C:\Documents and Settings\w\ntuser.ini
2015-01-07 11:40 - 2011-03-12 12:13 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2015-01-07 11:40 - 2011-03-12 12:13 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-01-06 23:31 - 2011-03-12 16:29 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2115168$
2015-01-06 23:26 - 2013-11-22 16:10 - 00000000 ____D () C:\temp
2015-01-06 23:26 - 2013-11-22 16:10 - 00000000 ____D () C:\Program Files\mutualpublic
2015-01-06 23:16 - 2014-02-25 18:08 - 00000000 ____D () C:\Documents and Settings\LocalService\TEMP
2015-01-06 23:01 - 2011-03-12 12:13 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2015-01-06 22:57 - 2011-03-12 12:57 - 00000000 ____D () C:\Documents and Settings\w
2015-01-06 22:55 - 2013-05-01 10:50 - 00000000 ____D () C:\WINDOWS\Minidump
2015-01-06 22:45 - 2011-03-12 12:57 - 00000000 ___HD () C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji
2015-01-06 22:42 - 2011-03-12 12:57 - 00000000 __RHD () C:\Documents and Settings\w\Dane aplikacji
2015-01-05 14:14 - 2014-07-25 14:01 - 00001316 _____ () C:\Documents and Settings\w\Pulpit\Wyczyść rejestr za darmo!.lnk
2015-01-05 14:01 - 2011-03-12 12:57 - 00000000 ___RD () C:\Documents and Settings\w\Menu Start\Programy
2015-01-05 10:31 - 2011-03-12 14:07 - 00001064 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-507921405-1592454029-725345543-1003Core.job
2015-01-05 09:20 - 2012-04-24 22:24 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-01-05 09:20 - 2011-06-19 09:15 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-01-02 20:00 - 2014-11-25 18:24 - 00194184 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
2015-01-02 20:00 - 2011-03-12 12:56 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji
2015-01-02 19:51 - 2014-11-27 19:23 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVAST Software
2015-01-01 21:08 - 2013-01-11 11:59 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat
2014-12-30 21:09 - 2011-03-12 12:57 - 00000000 ___HD () C:\Documents and Settings\w\Szablony
2014-12-30 11:12 - 2014-11-11 20:32 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2014-12-30 11:10 - 2014-11-11 20:32 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB929399$
2014-12-27 15:24 - 2014-11-08 13:27 - 00000000 ____D () C:\Documents and Settings\w\Moje dokumenty\samsung
2014-12-27 15:20 - 2011-03-12 12:57 - 00000000 ___RD () C:\Documents and Settings\w\Moje dokumenty
2014-12-27 15:13 - 2014-11-08 13:27 - 00000000 ____D () C:\Documents and Settings\w\Dane aplikacji\Samsung
2014-12-27 15:13 - 2011-03-12 13:20 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-12-27 15:12 - 2013-12-09 14:16 - 00000000 ____D () C:\Program Files\SAMSUNG
2014-12-27 14:37 - 2011-03-12 12:13 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty
2014-12-27 14:02 - 2013-12-09 14:13 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Samsung
2014-12-27 13:59 - 2013-11-22 16:06 - 00000000 ____D () C:\WINDOWS\system32\LogFiles
2014-12-27 13:55 - 2014-11-08 13:11 - 00000000 __HDC () C:\WINDOWS\$NtUninstallWMFDist11$
2014-12-27 13:49 - 2013-04-17 16:45 - 00000000 ____D () C:\Documents and Settings\w\Ustawienia lokalne\Dane aplikacji\Downloaded Installations
2014-12-15 21:05 - 2011-03-13 15:17 - 00002515 _____ () C:\Documents and Settings\w\Pulpit\Microsoft Word.lnk
2014-12-15 17:18 - 2013-12-01 16:11 - 00000151 ____C () C:\WINDOWS\PhotoSnapViewer.INI
2014-12-13 11:46 - 2014-11-25 18:51 - 00001821 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-12-12 08:44 - 2013-07-15 11:46 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-12 08:19 - 2011-03-16 23:33 - 109818608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

Files to move or delete:
====================
C:\Documents and Settings\w\sqlite3.dll
C:\Windows\Tasks\At1.job
C:\Windows\Tasks\At2.job


Some content of TEMP:
====================
C:\Documents and Settings\w\Ustawienia lokalne\Temp\Quarantine.exe
C:\Documents and Settings\w\Ustawienia lokalne\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe = & gt; File is digitally signed
C:\WINDOWS\system32\winlogon.exe = & gt; File is digitally signed
C:\WINDOWS\system32\svchost.exe = & gt; File is digitally signed
C:\WINDOWS\system32\services.exe = & gt; File is digitally signed
C:\WINDOWS\system32\User32.dll = & gt; File is digitally signed
C:\WINDOWS\system32\userinit.exe = & gt; File is digitally signed
C:\WINDOWS\system32\rpcss.dll = & gt; File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys = & gt; File is digitally signed

==================== End Of Log ============================