Proszę o sprawdzenie, nie nadążam zamykać reklam.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015 ([color=red]ATTENTION: ==== & gt; FRST version is 251 days old and could be outdated[/color])
Ran by Noras Joanna (administrator) on NORASJOANNA on 08-01-2016 16:24:11
Running from C:\Users\Noras Joanna\Downloads
Loaded Profiles: Noras Joanna (Available profiles: Noras Joanna & Denis Noras & DefaultAppPool)
Platform: Windows 10 Home (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\taskhostw.exe
(Microsoft Corporation) C:\Windows\System32\sihost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(eRmail Company, s. r. o.) C:\Users\Noras Joanna\AppData\Roaming\eRclient\eRclient.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Dropbox, Inc.) C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVH.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\fontdrvhost.exe
() C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\OFFICEVIRT.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\ApplicationFrameHost.exe
(Microsoft Corporation) C:\Windows\System32\taskhostw.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(Microsoft Corporation) C:\Windows\System32\wimserv.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\7\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\6\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\3\Plugin.exe
() C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\7\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\3\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\5\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\8\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\12\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\2\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\12\Plugin.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SystemSettingsBroker.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_267.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_267.exe
(Farbar) C:\Users\Noras Joanna\Downloads\FRST64_02.5.2015.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVBg] = & gt; C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] = & gt; " C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe "
HKLM\...\Run: [AthBtTray] = & gt; C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800416 2012-02-23] (Atheros Commnucations)
HKLM\...\Run: [McAfeeWrapperApplication] = & gt; " C:\Program Files (x86)\McAfeeMOBK\WrapperTrayIcon.exe "
HKLM\...\Run: [Windows Mobile Device Center] = & gt; C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] = & gt; C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.)
HKLM\...\Run: [SynTPEnh] = & gt; C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954368 2015-10-21] (Synaptics Incorporated)
HKLM-x32\...\Run: [IAStorIcon] = & gt; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] = & gt; C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-22] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] = & gt; C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [HP Software Update] = & gt; C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM-x32\...\Run: [] = & gt; [X]
HKLM-x32\...\Run: [StartCCC] = & gt; C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-19\...\Run: [OneDriveSetup] = & gt; C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] = & gt; C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\Run: [eRclient] = & gt; C:\Users\Noras Joanna\AppData\Roaming\eRclient\eRclient.exe [1269248 2013-07-15] (eRmail Company, s. r. o.)
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\Run: [Facebook Update] = & gt; C:\Users\Noras Joanna\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-07-22] (Facebook Inc.)
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\Run: [Sony PC Companion] = & gt; C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\Run: [Dropbox Update] = & gt; C:\Users\Noras Joanna\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\Run: [Sidebar] = & gt; C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\Run: [OneDrive] = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\OneDrive.exe [551112 2015-12-20] (Microsoft Corporation)
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\RunOnce: [Uninstall C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64 "
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\RunOnce: [Uninstall C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64 "
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\RunOnce: [Uninstall C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64 "
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\RunOnce: [Uninstall C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64 "
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\MountPoints2: {a649d775-47d6-11e4-a7fb-08edb9b6b0b8} - " E:\LaunchU3.exe " -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-10-05]
ShortcutTarget: HP Digital Imaging Monitor.lnk - & gt; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Denis Noras\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-10]
ShortcutTarget: Dropbox.lnk - & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Noras Joanna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-05]
ShortcutTarget: Dropbox.lnk - & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] - & gt; {BBACC218-34EA-4666-9D7A-C78F2274A524} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] - & gt; {5AB7172C-9C11-405C-8DD5-AF20F3606282} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] - & gt; {A78ED123-AB77-406B-9962-2A5D9D2F7F30} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] - & gt; {F241C880-6982-4CE5-8CF7-7085BA96DA5A} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] - & gt; {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ " DropboxExt1 " ] - & gt; {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt2 " ] - & gt; {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt3 " ] - & gt; {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt4 " ] - & gt; {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt5 " ] - & gt; {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt6 " ] - & gt; {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt7 " ] - & gt; {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ " DropboxExt8 " ] - & gt; {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Users\Noras Joanna\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] - & gt; {BBACC218-34EA-4666-9D7A-C78F2274A524} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] - & gt; {5AB7172C-9C11-405C-8DD5-AF20F3606282} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] - & gt; {A78ED123-AB77-406B-9962-2A5D9D2F7F30} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] - & gt; {F241C880-6982-4CE5-8CF7-7085BA96DA5A} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] - & gt; {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} = & gt; C:\Users\Noras Joanna\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-20] (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected & lt; ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction & lt; ======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFcAlaVw8QQhhBclxZTA1BGVcOeQ0LUxREEQFFIwpZU1hGQlcFIk0FA1ADB0VXfVBdFElXTwhwNEtXD14iSFJNIVU=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFcAlaVw8QQhhBclxZTA1BGVcOeQ0LUxREEQFFIwpZU1hGQlcFIk0FA1ADB0VXfVBdFElXTwhwNEtXD14iSFJNIVU=
HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://sony.msn.com
URLSearchHook: HKU\S-1-5-21-3495295910-1159901202-3536328795-1000 - (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File
SearchScopes: HKLM - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfV8IUVtHF1RAbVsKBFhcFQUbIhQBVQpDDAATdF9bUlhDQAJAIh9aFQQTSEcFME0FCFwEURNNfWpME1YfRmZKJ1dZDQ== & q={searchTerms}
SearchScopes: HKLM - & gt; {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfV8IUVtHF1RAbVsKBFhcFQUbIhQBVQpDDAATdF9bUlhDQAJAIh9aFQQTSEcFME0FCFwEURNNfWpME1YfRmZKJ1dZDQ== & q={searchTerms}
SearchScopes: HKU\.DEFAULT - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3495295910-1159901202-3536328795-1000 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfV8IUVtHF1RAbVsKBFhcFQUbIhQBVQpDDAATdF9bUlhDQAJAIh9aFQQTSEcFME0FCFwEURNNfWpME1YfRmZKJ1dZDQ== & q={searchTerms}
SearchScopes: HKU\S-1-5-21-3495295910-1159901202-3536328795-1000 - & gt; {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfV8IUVtHF1RAbVsKBFhcFQUbIhQBVQpDDAATdF9bUlhDQAJAIh9aFQQTSEcFME0FCFwEURNNfWpME1YfRmZKJ1dZDQ== & q={searchTerms}
BHO: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-06-24] (Oracle Corporation)
BHO-x32: HP Print Enhancer - & gt; {0347C33E-8762-4905-BF09-768834316C61} - & gt; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - & gt; {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - & gt; c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15] (Adobe Systems Incorporated)
BHO-x32: CIESpeechBHO Class - & gt; {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - & gt; C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-02-23] (Atheros Commnucations)
BHO-x32: Strong Signal - & gt; {c723a437-2eaf-466d-a95b-3fa0966bf88c} - & gt; C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-06-24] (Oracle Corporation)
BHO-x32: HP Smart BHO Class - & gt; {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - & gt; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Noras Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\es569ko3.default
FF NewTab: hxxp://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHFMTcFsOV1gSDFcRJVgVVQlJQxgadAoKTAxBFVNAc1gKAA4SQxNBNARaB0tXUUEeGGlxR1dMckFRL1dfMlAWT1RP
FF DefaultSearchEngine: Default
FF SelectedSearchEngine: Default
FF Homepage: hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFcAlaVw8QQhhBclxZTA1BGVcOeQ0LUxREEQFFIwpZU1hGQlcFIk0FA18DB0VXfWFoKB8fHGZXMlZWBmoYRltCLA==
FF Keyword.URL: hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfV8IUVtHF1RAbVsKBFhcFQUbIhQBVQpDDAATdF9bUlhDQAJAIh9aFQQTR0cFME0FB18EURNNfWpME1YfRmZKJ1dZDQ== & q={searchTerms}
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-28] ()
FF Plugin: @java.com/JavaPlugin - & gt; C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll [2014-06-24] (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - & gt; C:\Program Files\McAfee\MSC\npMcSnFFPl64.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-28] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - & gt; C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-03-13] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-03-13] (Intel Corporation)
FF Plugin-x32: @java.com/JavaPlugin - & gt; C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll [2014-06-24] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - & gt; C:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - & gt; c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - & gt; C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - & gt; C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - & gt; C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - & gt; C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll [2011-08-03] (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - & gt; C:\Program Files (x86)\Sony\Media Go\npmediago.dll [2011-08-02] (Sony Network Entertainment International LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - & gt; C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2011-09-28] ()
FF Plugin HKU\S-1-5-21-3495295910-1159901202-3536328795-1000: @Skype Limited.com/Facebook Video Calling Plugin - & gt; C:\Users\Noras Joanna\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF user.js: detected! = & gt; C:\Users\Noras Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\es569ko3.default\user.js [2015-12-12]
FF SearchPlugin: C:\Users\Noras Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\es569ko3.default\searchplugins\default.xml [2016-01-05]
FF Extension: Strong Signal - C:\Users\Noras Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\es569ko3.default\Extensions\{0ef92032-e1c2-4f64-99f9-4b2072e055b2}.xpi [2015-04-01]
FF Extension: Adblock Plus - C:\Users\Noras Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\es569ko3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-04-01]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-10-05]
FF HKU\S-1-5-21-3495295910-1159901202-3536328795-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
CHR Profile: C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-10]
CHR Extension: (Google Drive) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-10]
CHR Extension: (YouTube) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-10]
CHR Extension: (Strong Signal) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfkggacbhnamignfjnppjplenmgljim [2015-12-10]
CHR Extension: (Google Search) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-10]
CHR Extension: (SiteAdvisor) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-05-17]
CHR Extension: (Google Docs Offline) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-10]
CHR Extension: (Gmail) - C:\Users\Noras Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-10]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [Not Found]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 AJRouter; C:\Windows\System32\AJRouter.dll [23040 2015-07-10] (Microsoft Corporation)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
R3 ClipSVC; C:\Windows\System32\ClipSVC.dll [658568 2015-08-25] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [809352 2015-09-17] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [512000 2015-09-17] (Microsoft Corporation)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.) [File not signed]
S3 DcpSvc; C:\Windows\system32\dcpsvc.dll [196096 2015-07-10] (Microsoft Corporation)
S3 DevQueryBroker; C:\Windows\system32\DevQueryBroker.dll [33280 2015-07-10] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1643872 2015-08-25] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-09-17] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-09-17] (Microsoft Corporation)
S2 dmwappushservice; C:\Windows\system32\dmwappushsvc.dll [63488 2015-07-10] (Microsoft Corporation)
R2 DoSvc; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 DoSvc; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R3 DsSvc; C:\Windows\System32\DsSvc.dll [145408 2015-11-05] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [149504 2015-09-17] (Microsoft Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-13] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-03-13] (Intel Corporation)
R3 lfsvc; C:\Windows\System32\lfsvc.dll [27136 2015-07-10] (Microsoft Corporation)
R3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-25] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]
S3 NetSetupSvc; C:\Windows\System32\NetSetupSvc.dll [187392 2015-08-18] (Microsoft Corporation)
S3 NgcCtnrSvc; C:\Windows\System32\NgcCtnrSvc.dll [268800 2015-07-10] (Microsoft Corporation)
S3 NgcSvc; C:\Windows\system32\ngcsvc.dll [513536 2015-09-17] (Microsoft Corporation)
R2 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]
S3 RetailDemo; C:\Windows\system32\RDXService.dll [1015808 2015-11-05] (Microsoft Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-08-25] (Microsoft Corporation)
S3 SensorService; C:\Windows\system32\SensorService.dll [229376 2015-08-25] (Microsoft Corporation)
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [772840 2016-01-07] ()
S3 SmsRouter; C:\Windows\system32\SmsRouterSvc.dll [583680 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2675200 2015-11-05] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049536 2015-11-05] (Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255168 2015-10-21] (Synaptics Incorporated)
R2 tiledatamodelsvc; C:\Windows\system32\tileobjserver.dll [503808 2015-09-17] (Microsoft Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [639208 2016-01-07] ()
R2 UserManager; C:\Windows\System32\usermgr.dll [713216 2015-11-05] (Microsoft Corporation)
U3 UsoSvc; C:\Windows\system32\usocore.dll [343040 2015-08-25] (Microsoft Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-25] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-25] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 WpnService; C:\Windows\system32\WpnService.dll [49152 2015-07-10] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)
R2 ZAtheros Bt & Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-02-23] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
S3 buttonconverter; C:\Windows\System32\drivers\buttonconverter.sys [36352 2015-09-17] (Microsoft Corporation)
S3 CapImg; C:\Windows\System32\drivers\capimg.sys [116736 2015-07-10] (Microsoft Corporation)
S4 cnghwassist; C:\Windows\System32\DRIVERS\cnghwassist.sys [39264 2015-07-10] (Microsoft Corporation)
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2015-08-29] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2015-08-29] (Windows (R) Win 7 DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
S3 fcvsc; C:\Windows\System32\drivers\fcvsc.sys [31232 2015-07-10] (Microsoft Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
S3 hidinterrupt; C:\Windows\System32\drivers\hidinterrupt.sys [50016 2015-07-10] (Microsoft Corporation)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
S0 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-07-10] (LSI Corporation)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
S0 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-07-10] (Avago Technologies)
S1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75672 2011-08-15] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100904 2011-08-15] (McAfee, Inc.)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
R2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [48128 2015-07-10] (Microsoft Corporation)
R1 MOBK649Filter; C:\Windows\System32\DRIVERS\MOBK649.sys [66040 2011-04-18] (Mozy, Inc.)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-25] (Microsoft Corporation)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
S3 netvsc; C:\Windows\System32\drivers\netvsc.sys [94720 2015-07-10] (Microsoft Corporation)
S2 OneSyncSvc; No ImagePath
R2 OneSyncSvc_Session1; No ImagePath
U2 OneSyncSvc_Session2; No ImagePath
U2 OneSyncSvc_Session3; No ImagePath
U2 OneSyncSvc_Session9; No ImagePath
S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-07-10] (LSI Corporation)
S0 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-07-10] (Avago Technologies)
S3 PimIndexMaintenanceSvc; No ImagePath
S3 PimIndexMaintenanceSvc_Session1; No ImagePath
U3 PimIndexMaintenanceSvc_Session2; No ImagePath
U3 PimIndexMaintenanceSvc_Session3; No ImagePath
U3 PimIndexMaintenanceSvc_Session9; No ImagePath
S3 ReFSv1; C:\Windows\System32\Drivers\ReFSv1.sys [934752 2015-08-25] (Microsoft Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
S3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver.sys [21264 2012-03-13] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [51392 2015-10-21] (Synaptics Incorporated)
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
S0 storufs; C:\Windows\System32\drivers\storufs.sys [40288 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-08-25] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 Ufx01000; C:\Windows\System32\drivers\ufx01000.sys [245088 2015-07-10] (Microsoft Corporation)
S3 UfxChipidea; C:\Windows\System32\drivers\UfxChipidea.sys [94048 2015-07-10] (Microsoft Corporation)
S3 ufxsynopsys; C:\Windows\System32\drivers\ufxsynopsys.sys [127840 2015-07-10] (Microsoft Corporation)
S3 UnistoreSvc; No ImagePath
S3 UnistoreSvc_Session1; No ImagePath
U3 UnistoreSvc_Session2; No ImagePath
U3 UnistoreSvc_Session3; No ImagePath
U3 UnistoreSvc_Session9; No ImagePath
S3 UrsChipidea; C:\Windows\System32\drivers\urschipidea.sys [28512 2015-07-10] (Microsoft Corporation)
S3 UrsCx01000; C:\Windows\System32\drivers\urscx01000.sys [57696 2015-07-10] (Microsoft Corporation)
S3 UrsSynopsys; C:\Windows\System32\drivers\urssynopsys.sys [27488 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; No ImagePath
S3 UserDataSvc_Session1; No ImagePath
U3 UserDataSvc_Session2; No ImagePath
U3 UserDataSvc_Session3; No ImagePath
U3 UserDataSvc_Session9; No ImagePath
S3 vhf; C:\Windows\System32\drivers\vhf.sys [31744 2015-07-10] (Microsoft Corporation)
S3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [685568 2015-08-25] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
U3 idsvc; No ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; No ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
NETSVC: dosvc - & gt; No ServiceDLL Path.
NETSVC: DcpSvc - & gt; C:\Windows\system32\dcpsvc.dll (Microsoft Corporation)
NETSVC: NetSetupSvc - & gt; C:\Windows\System32\NetSetupSvc.dll (Microsoft Corporation)
NETSVC: dmwappushservice - & gt; C:\Windows\system32\dmwappushsvc.dll (Microsoft Corporation)
NETSVC: XblGameSave - & gt; C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc - & gt; C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UsoSvc - & gt; C:\Windows\system32\usocore.dll (Microsoft Corporation)
NETSVC: UserManager - & gt; C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: DmEnrollmentSvc - & gt; C:\Windows\system32\Windows.Internal.Management.dll (Microsoft Corporation)
NETSVC: XblAuthManager - & gt; C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVC: RetailDemo - & gt; C:\Windows\system32\RDXService.dll (Microsoft Corporation)
NETSVCx32: NetSetupSvc - & gt; C:\Windows\SysWOW64\NetSetupSvc.dll == & gt; No File.
NETSVCx32: UserManager - & gt; C:\Windows\SysWOW64\usermgr.dll == & gt; No File.
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2016-01-08 16:24 - 2016-01-08 16:25 - 00042947 _____ () C:\Users\Noras Joanna\Downloads\FRST.txt
2016-01-08 16:24 - 2016-01-08 16:24 - 00000000 ____D () C:\FRST
2016-01-08 16:23 - 2016-01-08 16:23 - 02101248 _____ (Farbar) C:\Users\Noras Joanna\Downloads\FRST64_02.5.2015.exe
2016-01-08 16:13 - 2016-01-08 16:13 - 00016148 _____ () C:\WINDOWS\system32\NORASJOANNA_Noras Joanna_HistoryPrediction.bin
2016-01-07 16:51 - 2016-01-08 16:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-12-29 18:37 - 2016-01-08 16:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2015-12-27 20:03 - 2015-12-27 20:03 - 00000000 ____D () C:\ProgramData\ATI
2015-12-20 21:27 - 2015-12-20 21:27 - 00061701 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201512202127066198.log
2015-12-20 21:26 - 2015-12-20 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-12-20 21:26 - 2015-12-20 21:26 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-12-20 21:25 - 2015-12-20 21:25 - 00060821 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201512202125267460.log
2015-12-20 21:19 - 2015-12-20 21:19 - 47794160 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 39720944 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 30775792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 27544560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 22327280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 15725552 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 14310896 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 07482560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 03471376 _____ () C:\WINDOWS\SysWOW64\atiumdva.cap
2015-12-20 21:19 - 2015-12-20 21:19 - 03437632 _____ () C:\WINDOWS\system32\atiumd6a.cap
2015-12-20 21:19 - 2015-12-20 21:19 - 01196032 _____ () C:\WINDOWS\system32\amdocl_as64.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 01070592 _____ () C:\WINDOWS\system32\amdocl_ld64.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 01004032 _____ () C:\WINDOWS\SysWOW64\amdocl_as32.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00807424 _____ () C:\WINDOWS\SysWOW64\amdocl_ld32.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 00662400 _____ () C:\WINDOWS\SysWOW64\atiapfxx.blb
2015-12-20 21:19 - 2015-12-20 21:19 - 00662400 _____ () C:\WINDOWS\system32\atiapfxx.blb
2015-12-20 21:19 - 2015-12-20 21:19 - 00631792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00471320 _____ () C:\WINDOWS\system32\amdmiracast.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 00243696 _____ () C:\WINDOWS\system32\clinfo.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 00213488 _____ () C:\WINDOWS\system32\amdgfxinfo64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00199664 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00198640 _____ () C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00168944 _____ () C:\WINDOWS\system32\atieah64.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00152560 _____ () C:\WINDOWS\SysWOW64\atieah32.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00143344 _____ () C:\WINDOWS\system32\amdhdl64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00132080 _____ () C:\WINDOWS\SysWOW64\amdhdl32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00111600 _____ () C:\WINDOWS\system32\hsa-thunk64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00111088 _____ () C:\WINDOWS\SysWOW64\hsa-thunk.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00073712 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00071152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00068080 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00064496 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00060912 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe
2015-12-20 21:19 - 2015-12-20 21:19 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00057840 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00038384 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00012784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2015-12-20 21:19 - 2015-12-20 21:19 - 00012784 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2015-12-10 20:08 - 2015-12-10 20:08 - 00000000 ____D () C:\Users\Noras Joanna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2016-01-08 16:17 - 2015-04-01 20:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-08 16:13 - 2015-07-10 12:04 - 00000000 ____D () C:\WINDOWS\system32\sru
2016-01-07 22:32 - 2015-07-10 12:04 - 00000000 ____D () C:\WINDOWS\AppReadiness
2016-01-07 16:59 - 2014-12-10 17:19 - 00001080 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-07 16:59 - 2014-12-10 17:19 - 00001076 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-07 16:54 - 2014-06-24 12:56 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-07 13:36 - 2015-06-18 13:24 - 00001190 _____ () C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-3495295910-1159901202-3536328795-1000UA.job
2016-01-07 13:36 - 2015-02-07 10:37 - 00000000 ____D () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
2016-01-06 21:17 - 2014-07-22 23:12 - 00000956 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3495295910-1159901202-3536328795-1000UA.job
2016-01-06 20:47 - 2015-07-10 11:55 - 00000000 ____D () C:\WINDOWS\CbsTemp
2016-01-06 20:46 - 2015-08-25 22:59 - 00000000 ___DC () C:\WINDOWS\Panther
2016-01-06 20:34 - 2015-10-30 20:56 - 00000000 ___HD () C:\$WINDOWS.~BT
2016-01-06 00:17 - 2014-07-22 23:12 - 00000934 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3495295910-1159901202-3536328795-1000Core.job
2016-01-03 12:36 - 2015-06-18 13:24 - 00001138 _____ () C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-3495295910-1159901202-3536328795-1000Core.job
2016-01-03 02:40 - 2015-10-07 22:27 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-07 22:27 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-02 22:46 - 2014-07-23 14:07 - 00000000 ____D () C:\Users\Noras Joanna\Desktop\denia ;)
2016-01-02 22:37 - 2015-03-01 12:35 - 00000000 ___RD () C:\Users\Noras Joanna\Dropbox
2016-01-02 22:37 - 2015-03-01 12:27 - 00000000 ____D () C:\Users\Noras Joanna\AppData\Roaming\Dropbox
2016-01-02 22:34 - 2015-07-10 13:22 - 00000275 _____ () C:\WINDOWS\WindowsUpdate.log
2016-01-02 22:32 - 2015-08-25 22:00 - 00007098 _____ () C:\WINDOWS\PFRO.log
2016-01-02 22:32 - 2015-07-10 13:21 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2016-01-02 22:32 - 2014-10-13 21:56 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2016-01-02 22:32 - 2014-10-13 21:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-12-20 21:26 - 2015-08-25 22:07 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-12-20 21:23 - 2015-08-25 22:06 - 00000000 ____D () C:\AMD
2015-12-20 21:19 - 2015-08-20 20:51 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2015-12-20 21:19 - 2015-08-20 20:51 - 10211016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2015-12-20 21:19 - 2015-08-20 20:51 - 08982432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2015-12-20 21:19 - 2015-08-20 20:51 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2015-12-20 21:19 - 2015-08-20 20:51 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2015-12-20 21:19 - 2015-08-20 20:51 - 01223544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2015-12-20 21:19 - 2015-08-20 20:51 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2015-12-20 21:19 - 2015-08-20 20:51 - 00143056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2015-12-20 21:19 - 2015-08-20 20:51 - 00130064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2015-12-20 21:19 - 2015-08-20 20:46 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2015-12-20 21:19 - 2015-08-20 20:46 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2015-12-20 21:19 - 2015-08-20 20:46 - 00874480 _____ (AMD) C:\WINDOWS\system32\coinst_15.20.dll
2015-12-20 21:19 - 2015-08-20 20:46 - 00683504 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2015-12-20 21:19 - 2015-08-20 20:46 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2015-12-20 21:19 - 2015-08-20 20:46 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2015-12-20 21:19 - 2015-08-20 20:46 - 00255472 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2015-12-20 21:18 - 2014-10-13 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-20 15:17 - 2015-08-25 23:03 - 00002473 _____ () C:\Users\Noras Joanna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-20 15:17 - 2015-08-25 23:03 - 00000000 ___RD () C:\Users\Noras Joanna\OneDrive
2015-12-17 21:39 - 2015-04-30 14:56 - 00002099 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-12-17 21:39 - 2014-06-24 13:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-12-17 21:39 - 2014-06-24 12:27 - 00220030 _____ () C:\WINDOWS\DPINST.LOG
2015-12-17 21:38 - 2014-06-24 12:27 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-12-17 21:14 - 2015-06-10 15:45 - 00002266 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-14 19:27 - 2015-07-10 13:20 - 00025853 _____ () C:\WINDOWS\setupact.log
2015-12-13 23:05 - 2015-08-25 22:10 - 02120794 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-13 23:05 - 2015-07-10 17:30 - 00918804 _____ () C:\WINDOWS\system32\perfh015.dat
2015-12-13 23:05 - 2015-07-10 17:30 - 00202422 _____ () C:\WINDOWS\system32\perfc015.dat
2015-12-12 22:41 - 2015-08-25 22:58 - 00000000 ____D () C:\Users\Noras Joanna\AppData\Local\Packages
2015-12-10 19:55 - 2015-08-25 22:12 - 00000000 ____D () C:\Users\Noras Joanna
2015-12-09 04:39 - 2010-11-21 04:27 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
==================== Files in the root of some directories =======
2015-08-25 22:07 - 2015-08-25 22:07 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-06-27 20:43 - 2015-08-29 22:07 - 0003054 _____ () C:\ProgramData\hpzinstall.log
Some content of TEMP:
====================
C:\Users\Noras Joanna\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmponpbkb.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{002114CA-4973-40AB-A53B-EBDE56842AE8}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{0059F73F-160C-4840-B787-F887997DA33F}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{01064EAD-6387-4882-B760-67D259B11350}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{01BE8595-1F35-402E-9B06-466804E8B0FF}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{06AB006B-CE4F-4707-B434-04D77788559C}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{0C853E9E-483E-43A8-837E-9261B252C5EE}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{0CD43D9B-D956-426C-95C6-9AE88CF12271}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{0E625965-0619-497C-9B93-312D248F9132}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{1035220D-9DDB-4A5A-A12B-6EFDCB186966}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{105BF0B8-8676-4DEE-AC0B-C958C1A52C9B}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{128B9D65-2028-487A-A4E5-78EB9D8D5838}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{185A524C-D0C5-4936-98B5-D444ADC15477}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{1A17AE6F-3107-4A86-B889-BD651E48EBB5}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{1A7E297A-A51D-4A3C-AF2C-A610217B0BBE}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{1AD3CDCE-EDFD-4B5C-BC08-F3DB4E89B04C}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{1C666A2A-5B96-4AF9-9973-550CA4ACB616}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{1EA7CDEF-8FDF-450E-8B09-8F05530B2845}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{1F964565-0DC3-499B-B8BE-EDFD37324D0F}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{2117EF80-0C3E-45DA-980D-E73A0DB0365F}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{218F5E96-F100-41B6-95BD-216EBD895BDE}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{21F5EDF7-D82E-46E6-A856-0C0FECFFCFEB}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{23190CDB-4D31-44D4-9441-E44D7947E68C}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{24594079-CF0B-494A-BB22-24A9A08B29F6}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{24751C91-FDB2-4A23-986C-8A8519704EE2}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{254F63F5-8940-4EAA-8BFE-6BE9E5C33A97}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{272BB257-3A69-4716-A347-BD0F919CCE9C}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{29368DA4-4EF5-4811-9757-9C25F24D2CB5}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{2AB1EFA7-7D09-4FE5-9253-4EA76A864603}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{2BB8D66A-EC1B-4510-8D1E-319F7F7D6FF8}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{2EA56385-FB41-4631-B554-0B4CBDD05F6F}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{2EAF3892-25D4-4B23-A428-824D36DAD954}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{2F2F74D3-D630-41B4-AAAF-EBA56952CDB4}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{300C3C26-2DB0-4F3C-8B4A-8AE91AD176F2}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{30398477-062B-48CA-919A-1F19FBF78989}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{32152E8F-A4AB-4B41-BA3F-A1A98F3BC948}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{33E8CCEC-9B9A-4AD1-9014-1D8C2B7DD17F}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{343C04DD-B0B3-4ECA-97E9-712FA46679AF}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{3563E061-1ACE-414F-ACC3-1A6DA54068E9}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{36BF7B52-8B35-465F-AB24-3710360AED64}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{380C246E-4A93-43B1-BA16-B970A885F078}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{38AAE9B5-E222-45AC-99BB-27DE72CF223B}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{394481AE-71F9-4466-AE28-F42DA23FD253}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{3B20D896-C156-4B59-BB5A-9713AECB9221}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{3B7FAF1A-2E90-4E08-8517-50AD0F9DB7ED}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{3DFF3810-7E6E-4F9F-B74A-BAAF4B57B118}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{3E83A368-9A28-4804-BC2C-65883C4C7B57}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{3F45C4AE-6712-4A36-86C4-EB40792C50D9}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{442B0904-3993-47A5-9D39-6995E34D95FF}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{4512638E-8D30-49D0-93C4-CDA5C1FEA7CB}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{483940E2-C370-457D-8954-ECE777063C9D}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{48F02F40-8DE7-47EA-8649-B36A610A925E}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{4CC6F283-87BF-4D6E-A473-05000BEE0C19}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{4CE7F18D-18AB-4CA3-BC14-A727FEF9C940}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{4D4BCE58-5009-46C8-816F-1E47CC4EDE18}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{4EA1DB88-B8E1-4B9C-A10B-4A537220F81F}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{4EB122B3-27FA-479A-80A0-BA2EEDA4218F}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{4F474AAC-2A6B-4898-89E1-10E2EAF21920}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{4FB9BBFD-C4F4-407E-9199-A95EFC486B8B}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{50309880-1FBB-4594-A21F-C1B56D23F7F0}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{55B16169-E91B-4D7D-A611-AEBD939E96A2}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{56CB071C-168F-48A9-99A9-47F5A9AF2795}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{57F9F44E-67B1-4E0E-8020-9276369FD2D2}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{5807884C-597C-466E-B290-8C8972DEA027}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{585B4B0B-6230-4EC9-9F05-6204D5403BE7}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{5860F14F-6B7A-4A05-A7AC-B3B9F4CDFD5A}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{590B896A-ED9E-4847-8BAC-045252BF25EC}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{5D6C81D7-0440-4992-A330-361F2B0E3788}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{5DC49B25-6369-4265-891B-2FB3DC00406B}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{600C91BE-BB35-4F5F-891A-C69D52812775}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{6251546E-FF08-4564-B8B5-4639E1F36897}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{6751CBBE-BCE9-4EA3-865D-A5C0DB45C091}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{68389932-0545-40B4-B2F7-E308DBEE8072}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{6A200CBB-78DE-4926-BB1E-F5C016082B0E}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{6D851456-9E13-4546-8DB6-E66E17B0475E}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{71247F34-7E80-459C-B7D1-D0CA7EAA63AD}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{731CECF7-E597-4152-A6E0-A98AC8CED913}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{75F464CB-4C90-441B-872A-0058887C403E}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{774425A9-F055-43D3-9A97-78E563F66CEA}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{7B5CC490-6E5A-4563-BAA0-7A838CA8A297}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{7BC6498D-7E18-4EE1-A34F-AAE7157B9BB6}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{7BD3DE30-9975-4E68-BB45-215AE860FC67}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{7F899E6A-1484-4503-B4EB-4C63D7E4C9CA}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{81E7A1DA-02F6-4D49-91E1-8F125046436C}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{81FDA690-1783-498D-AC2B-73CF78E779FA}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{83D50657-EF58-46BA-BF0B-573C9A3B2068}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{86DBE44C-61CB-408D-83E6-D205CB082F21}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{87B6D8E1-94A1-48AE-B37C-3A99FEE97091}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{8E01A401-46E1-469F-93B7-8862AABCAF4A}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{8E2E2E74-09C9-4ADF-BC2A-C2E3E7415980}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{8E94A5D5-5EA4-49BD-B6A7-C1A3474D62B2}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{8F80AE3F-C869-4024-8901-A73CE77099E0}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{8FF6CA4A-4CE4-4DAE-BE9A-893E4FC805E8}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{9307E09E-5B40-40BD-9802-7BE8E5E2B3AB}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{9348EAB6-C23B-498C-AD20-A945A7971F95}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{95310CC0-7F53-4C83-90E2-CEC4612628EB}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{97F01764-BF8D-422C-ABA4-686CC45B9FD8}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{9971B4BA-97D5-48CE-9A26-D9EFBE008A62}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{9B603093-D6AF-4C1D-B5DE-B61A8FC7C5C4}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{9D37D9CB-C4B9-4FC4-9324-DF9DE94F2CA1}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{9DCAFF01-AA4B-4226-AD59-1CCC752783F6}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{9FD01D3F-ACB6-4ADB-B337-FED73682EC4B}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{A2D69533-A990-448F-9F64-91679D510632}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{A3366DC4-408D-462B-80E7-7FE3FEA43A7A}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{A4B239A5-7A27-4975-86CE-7F8EC2E2176E}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{A61256C7-916E-4807-AF60-9CAEA9F7B62D}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{A61FF628-ACAA-4469-8C13-2032E1240B9B}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{A65EE8B5-BCBD-4E3A-B3C6-FECB5A458B37}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{A8022459-BEDC-490F-BCBB-B07BCBD83106}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{ABA294A9-58F1-4785-8AD8-30E996958EA7}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{ACD5D677-C3C9-427A-B242-074F4C00AFDA}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{AD17688F-564F-494B-9A26-46FA54C7B9E7}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{AD89A2B9-30F0-4A15-929D-BB7B321ED9E5}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{AECB284B-5265-4818-990C-C7A6B18EC0BC}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{AF930CC1-5ECA-4927-994F-1886072CBADC}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{B2018ACB-75C5-438F-A6B4-5DA347BCB3E7}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{B20801A4-81FD-4641-B89A-47E1FAC5511A}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{B2D82138-3C97-44C5-93B9-2B5404DC7DF5}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{B39A48A6-1906-48A5-84C8-F8D1AE0F97A1}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{B6609B5B-3BA4-411D-A356-344C502E894D}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{B7E450B4-F529-4F64-BB90-E6D581A4D51E}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{B98859C1-23EE-466E-8475-BD213414C7CA}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{BC0BF694-876B-45DC-A3E6-551854397BE6}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{BC6C15B8-690A-454A-89EC-E49A5B855EAE}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{BC86614D-8E72-4558-8269-20BD397C3E54}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{BD5A452D-FAC6-4B65-A535-4A8F4CDD83E0}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{BDAB7AB0-2BB0-41E5-8B8A-984C2EFCCAF0}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{BEEF913F-090D-49C8-94E3-69ACB1769F8E}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{C1914111-D329-4319-9437-6EC003450022}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{C36D6C27-9DE4-4B79-99D7-EF75C2A2B162}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{C712AD99-30D9-486D-B27E-04E57D60C440}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{C835A630-FE1D-48A8-8C64-64923DDA6E83}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{C9CF36E7-07B0-4D38-A7F4-29BD4DE237A0}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{D0143648-EA3A-4D55-8AF1-E7EE544308C2}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{D125C994-5888-49E4-9450-1706EF923419}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{D45A5398-B355-401B-B7A3-36FA7C22ADCE}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{D66B2623-6288-4A3B-89A0-BF4ADA61F6E1}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{D681359E-3675-4D1C-9F8F-05ED8A757154}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{D6C9F625-01DC-427E-A7C3-29A355352DC6}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{DC375014-4EB7-4CD4-AD42-8777F38BFF67}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{DC3AA758-BEE9-4552-A08C-26ED13AE5185}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{DC58219B-9D2D-4984-BF54-FE5B54D45234}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{DD14AD01-ACA3-4B91-807B-EE823BE87C5C}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{DD14F9F6-6131-4239-8265-C6F61DA60B2F}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{DE9E5286-9270-4668-BFA6-F1EB53BB6FE4}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{E0B70CE8-FC94-4C87-9923-C472F0C99749}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{E1C4EBDA-1B8D-4DAD-9CF1-402088CF7077}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{E665BD8E-D644-4D9A-8FA2-105507E8C28C}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{E7ED3C3C-B7E0-4052-9590-3DCC0274D7ED}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{EE46C21A-BBD1-4368-8329-6A1FD41AE73B}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{EF554C47-68B6-4E40-B67B-702C43485171}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{F0A76AC5-63A8-412B-8FF5-78C711106685}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{F0E27F95-C082-4C94-88FB-6954E2B5775B}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{F975B49D-AFD1-49DD-AD88-14BC6CF8487A}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{F9A12C33-545B-446C-934E-19A45248A40A}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{FA89677E-B464-4CC0-9158-D2B2942A9727}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{FA89B430-26D7-4BDB-A6A5-CDD7523CBA89}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{FA99BC83-31A9-4B33-A80F-6DA4DDDD1774}.dll
C:\Users\Noras Joanna\AppData\Local\Temp\{FE38EAA9-E64C-4C12-A73A-DAA56B5C68C3}.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe = & gt; File is digitally signed
C:\Windows\System32\wininit.exe = & gt; File is digitally signed
C:\Windows\explorer.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\explorer.exe = & gt; File is digitally signed
C:\Windows\System32\svchost.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\svchost.exe = & gt; File is digitally signed
C:\Windows\System32\services.exe = & gt; File is digitally signed
C:\Windows\System32\User32.dll = & gt; File is digitally signed
C:\Windows\SysWOW64\User32.dll = & gt; File is digitally signed
C:\Windows\System32\userinit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\userinit.exe = & gt; File is digitally signed
C:\Windows\System32\rpcss.dll = & gt; File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys = & gt; File is digitally signed
LastRegBack: 2016-01-02 22:54
==================== End Of Log ============================