Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-01-2015
Ran by Andreea (administrator) on ANDREEA on 18-01-2015 12:28:59
Running from C:\Users\Andreea\Desktop
Loaded Profiles: UpdatusUser & Andreea (Available profiles: UpdatusUser & Andreea)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(http://winaero.com) C:\Downloads\wcbk\WinaeroCharmsBarKiller.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-07] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [413696 2009-01-05] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Qualcomm®Atheros®))
HKU\S-1-5-21-3947725524-1290078594-1040268346-1001\...\Run: [AcerCloud] => "C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe" startup
HKU\S-1-5-21-3947725524-1290078594-1040268346-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3947725524-1290078594-1040268346-1001\...\Run: [CharmsBarKiller] => C:\Downloads\wcbk\WinaeroCharmsBarKiller.exe [349184 2014-06-26] (http://winaero.com)
HKU\S-1-5-21-3947725524-1290078594-1040268346-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095840 2014-10-27] (Nota Inc.)
HKU\S-1-5-21-3947725524-1290078594-1040268346-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3947725524-1290078594-1040268346-1002\...\Run: [CharmsBarKiller] => C:\Downloads\wcbk\WinaeroCharmsBarKiller.exe [349184 2014-06-26] (http://winaero.com)
HKU\S-1-5-21-3947725524-1290078594-1040268346-1002\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095840 2014-10-27] (Nota Inc.)
HKU\S-1-5-21-3947725524-1290078594-1040268346-1002\...\Run: [KakaoTalk] => C:\Program Files (x86)\Kakao\KakaoTalk\KakaoTalk.exe [5405384 2014-07-31] (Kakao Inc.)
HKU\S-1-5-21-3947725524-1290078594-1040268346-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-3947725524-1290078594-1040268346-1002\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3947725524-1290078594-1040268346-1002\...\MountPoints2: {53ff87ea-31d7-11e4-826a-201a06e75783} - "E:\AutoRun.exe" 
HKU\S-1-5-21-3947725524-1290078594-1040268346-1002\...\MountPoints2: {5cce65f3-05fa-11e4-825d-806e6f6e6963} - "G:\setup.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk
ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [1SecureIconsProvider] -> {FC9D8189-520A-4417-AED7-9EAC810C6FBA} => C:\ProgramData\Microsoft\Secure\Icons\SecureIconsProvider.dll ()
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BootExecute: autocheck autochk * aswBoot.exe /M:21e49003 /wow /dir:"C:\Program Files\AVAST Software\Avast"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3947725524-1290078594-1040268346-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-3947725524-1290078594-1040268346-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3947725524-1290078594-1040268346-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3947725524-1290078594-1040268346-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3947725524-1290078594-1040268346-1002 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\Andreea\AppData\Roaming\Mozilla\Firefox\Profiles\a43wwhpt.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3947725524-1290078594-1040268346-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Andreea\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF user.js: detected! => C:\Users\Andreea\AppData\Roaming\Mozilla\Firefox\Profiles\a43wwhpt.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-30]

Chrome: 
=======
CHR Profile: C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-07]
CHR Extension: (Google Drive) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-07]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-07]
CHR Extension: (YouTube) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-07]
CHR Extension: (Google Search) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-07]
CHR Extension: (PanicButton) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2014-12-29]
CHR Extension: (Stylish) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2014-11-10]
CHR Extension: (AdBlock) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-07-08]
CHR Extension: (Avast Online Security) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-07]
CHR Extension: (Google Wallet) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-07]
CHR Extension: (Gmail) - C:\Users\Andreea\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-07]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-06-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 0102991404151380mcinstcleanup; C:\Windows\TEMP\010299~1.EXE [834664 2013-07-12] (McAfee, Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-06-30] (AVAST Software)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-06] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-12] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2013-01-28] ()
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-09-11] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-03] (Acer Incorporate)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-06-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-06-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-06-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-06-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-11-23] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-07] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-06-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-06-30] ()
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-16] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
U3 dtscsidrv; C:\Windows\System32\Drivers\dtscsidrv.sys [309248 2014-07-07] (Disc Soft Ltd)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-07-04] (Disc Soft Ltd)
S3 EWC641024; C:\Windows\system32\DRIVERS\ExtraWebcam_x64_1024.sys [25472 2010-04-12] (Somee int)
S3 EWC64320; C:\Windows\system32\DRIVERS\ExtraWebcam_x64_320.sys [25472 2010-04-12] (Somee int)
S3 EWC64640; C:\Windows\system32\DRIVERS\ExtraWebcam_x64_640.sys [25472 2010-04-12] (Somee int)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-07-07] (Duplex Secure Ltd.)
S2 trackcam; C:\Windows\system32\DRIVERS\trackcam.sys [81352 2009-10-09] (Eagletron Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R1 {fd74c1d1-1ac3-43f9-8336-32679dc7de45}Gw64; C:\Windows\System32\drivers\{fd74c1d1-1ac3-43f9-8336-32679dc7de45}Gw64.sys [48784 2014-11-16] (StdLib)
S3 WolfVision Video Capture II; \SystemRoot\system32\DRIVERS\WolfVZCamera2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-18 12:28 - 2015-01-18 12:29 - 00026656 _____ () C:\Users\Andreea\Desktop\FRST.txt
2015-01-18 12:24 - 2015-01-18 12:26 - 00000000 ____D () C:\Music for the eyes
2015-01-18 12:12 - 2015-01-18 12:29 - 00000000 ____D () C:\FRST
2015-01-18 12:09 - 2015-01-18 12:11 - 05200384 _____ (AVAST Software) C:\Users\Andreea\Desktop\aswmbr.exe
2015-01-18 12:09 - 2015-01-18 12:11 - 02126336 _____ (Farbar) C:\Users\Andreea\Desktop\FRST64.exe
2015-01-17 17:45 - 2015-01-17 17:45 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-14 22:44 - 2015-01-14 22:44 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\Unity
2015-01-14 14:56 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 14:56 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 14:56 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-01-14 14:56 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 14:56 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-01-14 14:56 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 14:56 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-01-14 14:56 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-14 14:55 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-01-14 14:55 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-01-14 14:55 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-14 14:55 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2015-01-14 14:55 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-01-14 14:55 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-14 14:55 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2015-01-14 14:55 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-01-14 14:55 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-01-14 14:55 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2015-01-14 14:55 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2015-01-14 14:55 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-14 14:55 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-14 14:55 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-14 14:55 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-01-14 14:55 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-01-14 14:55 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-01-14 14:55 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-14 14:55 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-14 14:55 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-14 14:55 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-01-14 14:55 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-01-14 14:55 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-11 02:26 - 2015-01-11 02:26 - 00000000 ____D () C:\Users\Andreea\Documents\Facepalm Games
2015-01-10 16:10 - 2015-01-10 16:10 - 00000000 ____D () C:\Users\Andreea\Documents\KentuckyRouteZero
2015-01-10 14:42 - 2015-01-10 14:51 - 00000000 ____D () C:\Users\Andreea\Documents\Reus
2015-01-10 14:31 - 2015-01-10 14:31 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\jelly
2015-01-10 14:11 - 2015-01-10 14:11 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\Steam
2015-01-10 13:37 - 2015-01-10 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Never Alone
2015-01-10 13:31 - 2015-01-10 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\(Default)
2015-01-10 13:29 - 2015-01-10 13:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-01-10 13:18 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2015-01-10 13:18 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2015-01-10 13:18 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2015-01-10 13:18 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2015-01-10 13:18 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2015-01-10 13:18 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2015-01-10 13:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2015-01-10 13:16 - 2015-01-10 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reus [GOG.com]
2015-01-10 13:16 - 2015-01-10 13:16 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2015-01-10 13:10 - 2015-01-10 13:10 - 00000971 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Floor is Jelly.lnk
2015-01-10 11:51 - 2015-01-10 11:51 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\MMFApplications
2015-01-10 11:50 - 2015-01-10 11:50 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Five Nights at Freddy's
2015-01-08 13:13 - 2015-01-08 13:13 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-08 11:53 - 2015-01-08 11:53 - 00001002 _____ () C:\Users\Public\Desktop\Gyazo.lnk
2015-01-08 11:53 - 2015-01-08 11:53 - 00001002 _____ () C:\Users\Public\Desktop\Gyazo GIF.lnk
2015-01-04 00:27 - 2005-01-22 00:53 - 00055296 _____ () C:\Windows\system32\HUFFYUV.DLL
2015-01-04 00:19 - 2015-01-04 00:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ut Video Codec Suite
2015-01-04 00:19 - 2015-01-04 00:19 - 00000000 ____D () C:\Program Files\utvideo
2015-01-04 00:19 - 2014-09-28 18:38 - 00272896 _____ () C:\Windows\system32\utv_core.dll
2015-01-04 00:19 - 2014-09-28 18:38 - 00200704 _____ () C:\Windows\SysWOW64\utv_core.dll
2015-01-04 00:19 - 2014-09-28 18:38 - 00185344 _____ (TODO: <会社名>) C:\Windows\system32\utv_mft.dll
2015-01-04 00:19 - 2014-09-28 18:38 - 00183296 _____ (TODO: <会社名>) C:\Windows\system32\utv_dmo.dll
2015-01-04 00:19 - 2014-09-28 18:38 - 00151552 _____ (TODO: <会社名>) C:\Windows\SysWOW64\utv_mft.dll
2015-01-04 00:19 - 2014-09-28 18:38 - 00151552 _____ (TODO: <会社名>) C:\Windows\SysWOW64\utv_dmo.dll
2015-01-04 00:19 - 2014-09-28 18:38 - 00069632 _____ () C:\Windows\SysWOW64\utv_vcm.dll
2015-01-04 00:19 - 2014-09-28 18:38 - 00067584 _____ () C:\Windows\system32\utv_vcm.dll
2014-12-26 22:35 - 2014-12-26 22:35 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\PACE Anti-Piracy
2014-12-26 22:35 - 2014-12-26 22:35 - 00000000 ____D () C:\Users\Andreea\AppData\Local\PACE Anti-Piracy
2014-12-26 22:35 - 2014-12-26 22:35 - 00000000 ____D () C:\ProgramData\PACE Anti-Piracy
2014-12-26 22:33 - 2014-12-26 22:33 - 00000000 ____D () C:\Users\Andreea\Documents\Adobe
2014-12-26 22:25 - 2014-12-26 22:25 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-12-26 22:21 - 2011-11-03 03:01 - 00056208 ____N (Rovi Corporation) C:\Windows\system32\Drivers\PxHlpa64.sys
2014-12-26 22:21 - 2011-10-17 03:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdralw2k.sys
2014-12-26 22:21 - 2011-10-17 03:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdr4_xp.sys
2014-12-26 22:20 - 2014-12-26 22:20 - 00000000 ____D () C:\Program Files (x86)\My Company Name
2014-12-26 22:18 - 2014-12-26 22:18 - 00001017 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2014-12-19 17:30 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-19 17:30 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2021-10-21 20:36 - 2013-12-21 06:23 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 14:34 - 2013-12-21 06:23 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2015-01-18 12:29 - 2014-06-26 10:49 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\ClassicShell
2015-01-18 12:28 - 2014-12-11 20:44 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\avidemux
2015-01-18 12:25 - 2014-07-07 14:13 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\uTorrent
2015-01-18 12:20 - 2013-12-21 06:03 - 01151735 _____ () C:\Windows\WindowsUpdate.log
2015-01-18 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-17 19:39 - 2014-07-07 10:24 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-17 17:53 - 2014-06-26 10:24 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3947725524-1290078594-1040268346-1002
2015-01-17 17:44 - 2014-06-26 13:30 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-17 17:44 - 2014-06-26 13:29 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-17 15:19 - 2014-12-02 22:48 - 00000000 ____D () C:\Users\Andreea\AppData\Local\Ighsoft
2015-01-17 15:18 - 2014-06-30 20:08 - 00000000 __RDO () C:\Users\Andreea\SkyDrive
2015-01-17 15:17 - 2014-08-05 12:29 - 00000378 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job
2015-01-17 15:17 - 2013-08-22 15:46 - 00026498 _____ () C:\Windows\setupact.log
2015-01-17 15:17 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-17 15:15 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-01-17 15:14 - 2014-07-08 16:42 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-17 15:05 - 2014-07-08 16:42 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-15 19:20 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-01-14 14:49 - 2014-12-05 21:31 - 00000000 ____D () C:\Users\Andreea\AppData\Local\Omgvics
2015-01-10 17:42 - 2014-06-30 19:19 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-01-10 17:40 - 2014-07-07 11:39 - 00000000 ____D () C:\Users\Andreea\AppData\Local\Adobe
2015-01-10 17:39 - 2014-10-05 09:38 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-10 17:39 - 2014-10-05 09:38 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-10 17:39 - 2013-10-15 15:21 - 00116466 _____ () C:\Windows\PFRO.log
2015-01-10 17:39 - 2013-08-22 15:44 - 05162984 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-10 14:30 - 2014-07-08 15:11 - 00000000 ____D () C:\Games
2015-01-08 15:32 - 2014-08-08 18:37 - 00000000 ____D () C:\Videos of games
2015-01-08 13:11 - 2014-12-11 21:35 - 00000000 ___HD () C:\Windows\msdownld.tmp
2015-01-08 13:11 - 2014-12-11 21:35 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-01-08 11:54 - 2014-07-07 13:22 - 00003752 _____ () C:\Windows\System32\Tasks\GyazoUpdateTaskMachine
2015-01-08 11:53 - 2014-07-07 13:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo
2015-01-08 11:53 - 2014-07-07 13:22 - 00000000 ____D () C:\Program Files (x86)\Gyazo
2015-01-06 23:22 - 2014-12-15 21:59 - 00028128 _____ () C:\Users\Andreea\Desktop\trine.veg
2015-01-06 21:59 - 2014-12-15 21:59 - 00028016 _____ () C:\Users\Andreea\Desktop\trine.veg.bak
2015-01-06 21:08 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-06 20:01 - 2014-07-07 09:55 - 00000000 ___HD () C:\Swsetup
2015-01-06 17:43 - 2014-09-22 16:33 - 00000000 ____D () C:\Users\Andreea\Documents\Visual Studio 2010
2015-01-06 15:55 - 2013-10-15 15:30 - 00863592 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-06 15:25 - 2014-07-08 12:03 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\vlc
2015-01-06 01:08 - 2014-12-11 21:58 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-06 01:08 - 2014-12-11 21:58 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-03 23:59 - 2014-12-10 19:23 - 00000000 ____D () C:\Program Files (x86)\FreeTime
2015-01-03 22:30 - 2014-06-25 23:11 - 00000000 ____D () C:\Users\Andreea\AppData\Local\CrashDumps
2014-12-26 22:35 - 2013-06-13 06:43 - 00000000 ___HD () C:\Users\Andreea\AppData\Local\qQAEOUqYXm
2014-12-26 22:33 - 2014-06-26 10:18 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\Adobe
2014-12-26 22:25 - 2014-11-07 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2014-12-26 22:25 - 2014-07-04 16:38 - 00000000 ____D () C:\ProgramData\Adobe
2014-12-26 22:24 - 2014-11-08 20:54 - 00000000 ____D () C:\Program Files\Adobe
2014-12-26 22:24 - 2014-11-07 18:38 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-12-26 22:19 - 2014-07-04 16:38 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-12-25 17:11 - 2014-12-10 20:09 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-21 02:01 - 2014-08-11 12:57 - 00000000 ____D () C:\Users\Andreea\AppData\Roaming\Audacity
2014-12-20 17:56 - 2014-11-29 18:30 - 00000000 ____D () C:\audios
2014-12-19 17:56 - 2014-11-30 20:48 - 00000020 _____ () C:\Windows\capsys184523.log

==================== Files in the root of some directories =======
2013-12-21 06:24 - 2013-12-21 06:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Andreea\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Andreea\AppData\Local\Temp\bdfilters.dll
C:\Users\Andreea\AppData\Local\Temp\ochelper.exe
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite12113.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite16037.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite20889.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite21547.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite21632.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite22322.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite26254.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite33311.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite35845.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite41871.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite48105.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite53198.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite62669.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite64362.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite64726.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite65758.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite65810.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite68328.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite69221.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite69808.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite70662.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite76454.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite76522.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite77268.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite81058.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite82205.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite83188.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite85671.dll
C:\Users\Andreea\AppData\Local\Temp\System.Data.SQLite93756.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-13 02:32

==================== End Of Log ============================