Windows 7: Webseiten werden auf Werbung umgeleitet.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
Ran by Dell Latitude E6430 (administrator) on DELLLATITUDEE64 (27-07-2015 18:36:08)
Running from C:\Users\Dell Latitude E6430\Downloads
Loaded Profiles: Dell Latitude E6430 (Available Profiles: Dell Latitude E6430)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Windows SysTool) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dell Inc.) C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe
(Dell Inc.) C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(XTab system) C:\Program Files (x86)\MiuiTab\ProtectService.exe
() C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(RNDPLUS.COM) C:\Program Files (x86)\iNexio\nxTCon\SerialTouchService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(O2Micro International) C:\Windows\System32\o2flash.exe
() C:\Windows\SysWOW64\srvany.exe
(O2Micro.) C:\Windows\SysWOW64\SDIOAssist.exe
() C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe
(RNDPLUS.COM) C:\Program Files (x86)\iNexio\nxTCon\UsbTouchService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Steep Sex\Steep Sex.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(NEXIO CO., LTD.) C:\Program Files (x86)\iNexio\nxTCon\nxGestureAction.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Dell Latitude E6430\Downloads\FRST64 (4).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [626552 2012-01-25] (Alps Electric Co., Ltd.)
HKLM\...\Run: [TdmNotify] => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe [381296 2011-12-08] (Wave Systems Corp.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-02-13] (IDT, Inc.)
HKLM\...\Run: [DFEPApplication] => C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe [7078424 2012-05-08] (Dell Inc.)
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4756240 2012-03-29] (Intel(R) Corporation)
HKLM\...\Run: [Andy] => "C:\Program Files\Andy\HandyAndy.exe"
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-02-28] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)
HKLM-x32\...\Run: [nxGestureAction] => C:\Program Files (x86)\iNexio\nxTCon\nxGestureAction.exe [49152 2011-08-04] (NEXIO CO., LTD.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2584240 2015-04-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\Run: [WirelessManager] => C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe [20480 2011-12-08] (Ericsson AB)
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk [2014-04-17]
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk [2014-04-17]
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll [2011-12-08] (Wave Systems Corp.)
ShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> {CF08DA3E-C97D-4891-A66B-E39B28DD270F} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll [2011-12-08] (Wave Systems Corp.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-390905103-1377331367-2787750936-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-390905103-1377331367-2787750936-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=dspp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=dspp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.searchtotal.info/?l=1&q={searchTerms}&pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88
SearchScopes: HKLM-x32 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.searchtotal.info/?l=1&q={searchTerms}&pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-03-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-06-20] (Oracle Corporation)
BHO: BitSaveer -> {9862216F-7A66-460A-9B89-62374CAAAA9E} -> C:\Program Files (x86)\BitSaveer\hPthu3WqpRvHR9.x64.dll [2015-07-27] ()
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-06-20] (Oracle Corporation)
BHO: DDealExpresS -> {E7FBB7A5-3332-494B-ADFC-6CAF73C755F2} -> C:\Program Files (x86)\DDealExpresS\FjP9jeaVghpZrO.x64.dll [2015-07-10] ()
BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-15] (Thinkgood Co. Limited)
BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-15] (Thinkgood Co. Limited)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-03-09] (Microsoft Corporation)
BHO-x32: BitSaveer -> {9862216F-7A66-460A-9B89-62374CAAAA9E} -> C:\Program Files (x86)\BitSaveer\hPthu3WqpRvHR9.dll [2015-07-27] ()
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: DDealExpresS -> {E7FBB7A5-3332-494B-ADFC-6CAF73C755F2} -> C:\Program Files (x86)\DDealExpresS\FjP9jeaVghpZrO.dll [2015-07-10] ()
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{64300E22-83CD-431B-A812-8DA5B1F4F0E3}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A5475C1D-211B-47F0-89CC-DCC22A55B672}: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{AF22A6C3-E85C-47D9-BE33-7E2B7A5B2F1F}: [DhcpNameServer] 10.0.0.1

FireFox:
========
FF ProfilePath: C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: delta-homes
FF DefaultSearchEngine,S: WebSearch
FF DefaultSearchUrl: hxxp://websearch.searchtotal.info/?pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88&l=1&q=
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SelectedSearchEngine: delta-homes
FF SelectedSearchEngine,S: WebSearch
FF Homepage: hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
FF Keyword.URL: hxxp://websearch.searchtotal.info/?pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88&l=1&q=
FF Plugin: @java.com/DTPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-06-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-06-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-04-20] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-04-20] (Adobe Systems)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-04-30] (pdfforge GmbH)
FF SearchPlugin: C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\searchplugins\WebSearch.xml [2015-06-10]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\delta-homes.xml [2015-07-16]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml [2015-07-10]
FF Extension: DealExapareEss - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\5t@0.net [2015-07-10]
FF Extension: Avira Browser Safety - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\abs@avira.com [2015-07-02]
FF Extension: Default NewTab - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\default_newtabff@gmail.com [2015-07-16]
FF Extension: deskCut - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\deskCutv2@gmail.com [2015-07-10]
FF Extension: bestadblocker - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\lq@d.org [2015-06-10]
FF Extension: DigiSaveer - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\U9X9@ujZN8J.net [2015-06-23]
FF Extension: PPriceMINuSi - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\Uc@tnS.org [2015-06-10]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-05-12]
FF Extension: Adblock Plus - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-07-02]
FF HKLM-x32\...\Firefox\Extensions: [searchffv2@gmail.com] - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\searchffv2@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-16]
CHR Extension: (Google Search) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-16]
CHR Extension: (Google Wallet) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-16]
CHR Extension: (Gmail) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-16]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 dcevt64; C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe [222144 2012-01-16] (Dell Inc.)
R2 dcstor64; C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe [293824 2012-01-16] (Dell Inc.)
R2 DFEPService; C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe [2279960 2012-05-08] (Dell Inc.)
R2 e5bd2542; c:\Program Files (x86)\SeekerModule\SeekerModule.dll [1627648 2015-06-20] () [File not signed]
R2 EmbassyService; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe [218504 2012-01-17] ()
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244392 2015-06-02] (Foxit Software Inc.)
R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-07-15] (XTab system)
R2 iNexioTouchDriverService; C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe [45056 2011-08-04] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
R2 O2FLASH; C:\Windows\system32\o2flash.exe [244328 2011-11-16] (O2Micro International)
R2 O2SDIOAssist; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
R2 Poised Measurement; C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe [8016309 2015-07-23] () [File not signed] <==== ATTENTION
R2 Steep Sex; C:\Program Files (x86)\Steep Sex\Steep Sex.exe [8016488 2015-07-08] () [File not signed] <==== ATTENTION
S2 tcsd_win32.exe; C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1637888 2011-10-08] () [File not signed]
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1679872 2012-01-05] (Wave Systems Corp.) [File not signed]
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [545280 2015-07-16] (Windows SysTool) [File not signed] <==== ATTENTION
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [337040 2015-07-14] (Taiwan Shui Mu Chih Ching Technology Limited.) <==== ATTENTION
R2 WMCoreService; C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)
S3 WvPCR; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe [198144 2012-01-16] (Wave Systems Corp.) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
S2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [X]
S4 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S4 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2014-04-17] (Broadcom Corporation.)
R3 d554gps; C:\Windows\System32\DRIVERS\d554gps64.sys [103184 2012-03-01] (Ericsson AB)
R3 d554scard; C:\Windows\System32\DRIVERS\d554scard.sys [61992 2011-01-14] (Ericsson AB)
R3 dcdbas; C:\Windows\System32\DRIVERS\dcdbas64.sys [38472 2012-03-03] (Dell Inc.)
R3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2011-10-05] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [29736 2011-10-05] (Ericsson AB)
S3 HCWF9BDA; C:\Windows\System32\Drivers\hcwF9b64.sys [188376 2013-09-25] (ITE                      )
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [443208 2012-10-02] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [453960 2012-10-02] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [21832 2012-10-02] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [506184 2012-10-02] (MCCI Corporation)
S3 nusb3hub; C:\Windows\system32\drivers\nusb3hub.sys [80384 2010-09-30] (Renesas Electronics Corporation) [File not signed]
S3 nusb3xhc; C:\Windows\system32\drivers\nusb3xhc.sys [180736 2010-09-30] (Renesas Electronics Corporation) [File not signed]
R1 PStrip64; C:\Windows\System32\drivers\pstrip64.sys [13008 2006-09-30] ()
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [280448 2012-12-21] (Ericsson AB)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\Virtualbox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-27 18:35 - 2015-07-27 18:35 - 02146816 _____ (Farbar) C:\Users\Dell Latitude E6430\Downloads\FRST64 (4).exe
2015-07-27 18:33 - 2015-07-27 18:33 - 02146816 _____ (Farbar) C:\Users\Dell Latitude E6430\Downloads\Niepotwierdzony 269470.crdownload
2015-07-27 18:17 - 2015-07-27 18:17 - 00050477 _____ C:\Users\Dell Latitude E6430\Downloads\Defogger (1).exe
2015-07-27 16:02 - 2015-07-27 16:02 - 00000000 ____D C:\ProgramData\bbjgncdmiigkoggbhkjijeocidiipkek
2015-07-27 16:02 - 2015-07-27 16:02 - 00000000 ____D C:\Program Files (x86)\BitSaveer
2015-07-27 01:07 - 2015-07-27 01:07 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-07-27 01:07 - 2015-07-27 01:07 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-07-25 19:31 - 2015-07-25 19:31 - 00000000 ____D C:\Windows\rescache
2015-07-24 23:13 - 2015-07-24 23:13 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_pl_d_install (1).exe
2015-07-24 23:13 - 2015-07-24 23:13 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_d_install.exe
2015-07-24 22:45 - 2015-07-24 22:45 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\CEF
2015-07-24 22:39 - 2015-07-24 22:39 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_d_install (1).exe
2015-07-24 22:36 - 2015-07-24 22:36 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_pl_d_install.exe
2015-07-24 22:25 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-24 22:25 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-24 22:25 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-24 22:25 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-23 20:58 - 2015-07-23 20:58 - 00000000 ____D C:\7e3238667fae037d35378662fc2066
2015-07-23 18:52 - 2015-07-27 01:06 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\clip
2015-07-23 12:32 - 2015-07-23 12:28 - 294608054 _____ C:\Users\Dell Latitude E6430\Desktop\DO Video Abend ERF 2015 präsentation mit Videos v7.pptx
2015-07-23 00:33 - 2015-07-23 00:33 - 00000000 ____D C:\Program Files (x86)\Poised Measurement
2015-07-22 20:07 - 2015-07-22 20:07 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Apple Computer
2015-07-22 20:05 - 2015-07-22 20:05 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\ProgramData\Apple Computer
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-07-22 20:04 - 2015-07-22 20:04 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-07-22 20:04 - 2015-07-22 20:04 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Apple
2015-07-22 20:04 - 2015-07-22 20:04 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-07-22 20:03 - 2015-07-22 20:04 - 41908568 _____ (Apple Inc.) C:\Users\Dell Latitude E6430\Downloads\QuickTimeInstaller.exe
2015-07-22 19:56 - 2015-07-22 19:04 - 294605680 _____ C:\Users\Dell Latitude E6430\Desktop\DO Video Abend ERF 2015 präsentation mit Videos v6.pptx
2015-07-22 19:44 - 2015-07-27 01:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-07-22 19:44 - 2015-07-22 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-07-22 19:44 - 2015-07-22 19:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Windows\PCHEALTH
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-07-22 19:42 - 2015-07-22 19:42 - 00000000 ____D C:\Program Files\Microsoft Office
2015-07-22 19:42 - 2015-07-22 19:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-07-22 19:41 - 2015-07-27 01:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 __RHD C:\MSOCache
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Microsoft Help
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-07-16 11:04 - 2015-07-27 01:29 - 00000000 ____D C:\Program Files (x86)\WinZipper
2015-07-16 11:04 - 2015-07-16 11:04 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\WinZipper
2015-07-16 11:04 - 2015-07-16 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
2015-07-16 11:02 - 2015-07-18 23:57 - 00000000 ____D C:\ProgramData\MailUpdate
2015-07-16 11:02 - 2015-07-16 11:02 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\MailUpdate
2015-07-15 11:14 - 2015-07-15 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-15 11:14 - 2015-07-15 11:14 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-15 11:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 11:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 11:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 11:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 11:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 11:14 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 11:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 11:14 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 11:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 11:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 11:14 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 11:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 11:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 11:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 11:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 11:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 11:14 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 11:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 11:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 11:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 11:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 11:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 11:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 11:14 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 11:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 11:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 11:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 11:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 11:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 11:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 11:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 11:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 11:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 11:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 11:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 11:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 11:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 11:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 11:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 11:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 11:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 11:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 11:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 11:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 11:13 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 11:13 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 11:13 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 11:13 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 11:13 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 11:13 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 11:13 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 11:13 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 11:13 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 11:13 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 11:13 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 11:13 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 11:12 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 11:12 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 11:12 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 11:12 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 11:12 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 11:12 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 11:12 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 11:12 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 11:12 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 11:12 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 11:12 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 11:12 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 09:12 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 09:12 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 09:12 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 09:12 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 09:12 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 09:12 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 09:12 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 09:12 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 09:12 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 09:12 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 09:12 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 09:12 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 09:12 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 09:12 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 09:12 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 09:12 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 09:12 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 09:12 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 09:12 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 09:12 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 09:11 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 09:11 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 09:11 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-15 09:11 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 09:11 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 09:11 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 09:11 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 09:11 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 09:11 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 09:11 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 09:11 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 09:11 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 09:08 - 2015-07-14 09:08 - 00000154 ____H C:\Users\Dell Latitude E6430\Downloads\.~lock.Szablon CV2 od praca.gratka.pl.doc#
2015-07-13 13:37 - 2015-07-13 13:43 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Foxit Software
2015-07-13 13:37 - 2015-07-13 13:37 - 00001351 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2015-07-13 13:37 - 2015-07-13 13:37 - 00000000 ____D C:\Users\Public\Foxit Software
2015-07-13 13:37 - 2015-07-13 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2015-07-13 13:36 - 2015-07-13 13:36 - 00000214 _____ C:\Users\Public\Documents\pre_fileassoc.tmp
2015-07-13 13:36 - 2015-07-13 13:36 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2015-07-13 13:35 - 2015-07-13 13:36 - 36816072 _____ (Foxit Software Inc. ) C:\Users\Dell Latitude E6430\Downloads\FoxitReader715.0425_prom_enu_Setup.exe
2015-07-11 08:33 - 2015-07-24 22:46 - 00000000 ____D C:\ProgramData\Adobe
2015-07-11 08:33 - 2015-07-24 22:45 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Adobe
2015-07-11 08:33 - 2015-07-11 08:33 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Adobe
2015-07-10 20:05 - 2015-07-10 20:05 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_ga_install.exe
2015-07-10 15:17 - 2015-07-07 16:58 - 00012753 _____ C:\Users\Dell Latitude E6430\Documents\umowapolsko-niemiecka.doc_0_1.odt
2015-07-10 15:17 - 2015-07-07 16:30 - 00471097 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0_2.odt
2015-07-10 14:39 - 2015-07-10 14:39 - 03725912 _____ C:\Users\Dell Latitude E6430\Downloads\DBSV_09_Film.zip
2015-07-10 10:28 - 2015-07-24 22:45 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-10 10:28 - 2015-07-24 22:45 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-07-10 10:28 - 2015-07-15 11:14 - 00001934 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-07-10 10:28 - 2015-07-10 15:15 - 00000000 ____D C:\ProgramData\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 10:28 - 2015-07-10 10:28 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-07-10 10:28 - 2015-07-10 10:28 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-10 10:28 - 2015-07-10 10:28 - 00000000 ____D C:\ProgramData\McAfee
2015-07-10 10:24 - 2015-07-10 10:24 - 00000000 _____ C:\Users\Dell Latitude E6430\AppData\Local\Temp.dat
2015-07-10 08:17 - 2015-07-10 08:17 - 00000000 ____D C:\Program Files (x86)\HowToSimplified
2015-07-10 08:17 - 2015-07-10 08:17 - 00000000 ____D C:\Program Files (x86)\DealExapareEss
2015-07-10 08:16 - 2015-07-10 08:16 - 00000000 ____D C:\Program Files (x86)\DDealExpresS
2015-07-09 19:58 - 2015-07-10 10:29 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Adobe-BackupByPhotoshopCS6Portable
2015-07-09 13:23 - 2015-07-11 09:24 - 00001496 _____ C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2015-07-08 20:10 - 2015-07-08 20:10 - 00000000 ____D C:\Program Files (x86)\Steep Sex
2015-07-07 16:13 - 2015-06-28 16:33 - 00471097 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0_1.odt
2015-07-07 16:13 - 2015-06-28 10:47 - 00013800 _____ C:\Users\Dell Latitude E6430\Documents\umowapolsko-niemiecka.doc_0.odt
2015-07-06 09:59 - 2015-07-06 09:59 - 00000383 _____ C:\ftconfig.ini
2015-07-02 16:13 - 2015-07-02 16:13 - 00946636 _____ C:\Users\Dell Latitude E6430\Downloads\adblock_plus-2.6.9-an+sm+tb+fx.xpi
2015-07-02 15:51 - 2015-07-02 15:51 - 00358604 _____ C:\Users\Dell Latitude E6430\Downloads\nickmsg_216058_a24330bf-d6c8-455b-8a5a-689cb71282c2.wav
2015-06-28 10:32 - 2015-07-10 15:16 - 00000154 ____H C:\Users\Dell Latitude E6430\Downloads\.~lock.umowapolsko-niemiecka.doc#
2015-06-28 10:32 - 2015-06-10 14:45 - 00471092 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0.odt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-27 18:36 - 2015-02-19 01:17 - 00032128 _____ C:\Users\Dell Latitude E6430\Downloads\FRST.txt
2015-07-27 18:36 - 2015-02-19 01:17 - 00000000 ____D C:\FRST
2015-07-27 18:19 - 2015-02-19 01:13 - 00000500 _____ C:\Users\Dell Latitude E6430\Downloads\defogger_disable.log
2015-07-27 16:02 - 2014-11-28 23:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-27 15:08 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-27 15:08 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-27 14:43 - 2015-06-10 14:43 - 00000456 _____ C:\Windows\Tasks\Bidaily Synchronize Task[973b].job
2015-07-27 13:00 - 2015-03-06 11:09 - 00000442 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-07-27 11:48 - 2014-04-17 13:52 - 02013945 _____ C:\Windows\WindowsUpdate.log
2015-07-27 01:31 - 2014-04-17 22:45 - 00732486 _____ C:\Windows\system32\perfh015.dat
2015-07-27 01:31 - 2014-04-17 22:45 - 00156064 _____ C:\Windows\system32\perfc015.dat
2015-07-27 01:31 - 2009-07-14 07:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-27 01:30 - 2015-04-06 07:58 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-27 01:27 - 2014-07-24 22:34 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\vlc
2015-07-27 01:26 - 2015-02-17 22:52 - 00189860 _____ C:\Windows\PFRO.log
2015-07-27 01:26 - 2015-02-17 22:52 - 00018026 _____ C:\Windows\setupact.log
2015-07-27 01:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-27 01:26 - 2009-07-14 06:45 - 00547104 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-27 01:07 - 2015-06-15 08:35 - 00000024 _____ C:\Users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-07-27 01:07 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2015-07-24 23:03 - 2015-04-06 07:58 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-24 23:03 - 2014-12-15 10:33 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-24 23:03 - 2014-05-11 08:33 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-24 23:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-23 20:59 - 2009-07-14 07:08 - 00032520 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-23 20:58 - 2014-05-11 09:03 - 00000000 ____D C:\Windows\system32\MRT
2015-07-22 20:07 - 2014-04-17 15:12 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\WirelessManager
2015-07-22 19:48 - 2014-04-17 14:29 - 00165088 _____ C:\Users\Dell Latitude E6430\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-22 19:44 - 2010-11-21 09:17 - 00000000 ____D C:\Windows\ShellNew
2015-07-22 19:44 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-07-22 19:43 - 2015-05-26 22:05 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-07-22 19:42 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-07-17 19:02 - 2014-09-11 14:41 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\motory
2015-07-16 11:03 - 2015-06-20 02:10 - 00000000 ____D C:\Program Files (x86)\MiuiTab
2015-07-16 11:02 - 2015-06-20 02:10 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
2015-07-16 10:04 - 2014-08-14 11:17 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\gotgolsad
2015-07-13 13:43 - 2015-05-05 18:45 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-10 16:16 - 2015-05-07 08:24 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\changhong
2015-07-10 10:29 - 2014-05-09 11:00 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 10:28 - 2014-05-09 11:00 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-10 08:17 - 2015-06-10 14:45 - 00000000 ____D C:\ProgramData\11807790828359206578
2015-07-09 13:12 - 2014-08-04 12:30 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\64
2015-07-07 16:15 - 2015-04-20 11:09 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\Firmenpapier
2015-07-07 13:40 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-04 19:45 - 2015-06-20 09:23 - 00000000 ____D C:\Program Files (x86)\DigiSSavere
2015-07-04 19:45 - 2015-06-20 09:20 - 00000000 ____D C:\Program Files (x86)\DigiSaveer
2015-07-03 08:43 - 2014-05-11 09:03 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-02 15:51 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

==================== Files in the root of some directories =======

2015-06-15 08:35 - 2015-07-27 01:07 - 0000024 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-02-24 01:49 - 2015-04-12 10:06 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bak
2015-03-03 14:50 - 2015-04-12 10:05 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bk!
2015-03-03 14:50 - 2015-04-12 10:06 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bko
2015-02-24 00:05 - 2015-04-12 14:26 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.ini
2015-07-09 13:23 - 2015-07-11 09:24 - 0001496 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2015-05-07 09:42 - 2015-06-08 08:17 - 0001496 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
2015-01-10 18:05 - 2015-01-10 18:05 - 0007603 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Resmon.ResmonCfg
2015-07-10 10:24 - 2015-07-10 10:24 - 0000000 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Temp.dat
2014-05-09 10:53 - 2014-05-09 10:53 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
C:\Users\Dell Latitude E6430\AppData\Local\Temp\2E2.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\fsdB46.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\Opera_Mini_PC.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\Quarantine.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\setacl.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-23 09:10

==================== End of log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version:26-07-2015
Ran by Dell Latitude E6430 at 2015-07-27 18:40:11
Running from C:\Users\Dell Latitude E6430\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-390905103-1377331367-2787750936-500 - Administrator - Disabled)
Dell Latitude E6430 (S-1-5-21-390905103-1377331367-2787750936-1000 - Administrator - Enabled) => C:\Users\Dell Latitude E6430
Gość (S-1-5-21-390905103-1377331367-2787750936-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.38 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0938-000001000000}) (Version: 9.38.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.0.0.74 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
BayHunter - Deinstallation (HKLM-x32\...\BayHunter_is1) (Version: 4.40 - Mathias Gerlach [aborange.de])
BayWotch v4.2.24 (HKLM-x32\...\baywotch4_is1) (Version:  - Elmar Denkmann)
BioAPI Framework (Version: 1.0.2 - Dell Inc.) Hidden
BitSaveer (HKLM-x32\...\{A3FC46A0-9B62-0EF3-B475-743B3A2762B1}) (Version:  - ) <==== ATTENTION
Button Snip Dies! für www.snip.pl, ver. 2.0 (HKLM-x32\...\SnipItButton) (Version:  - )
Canon MP550 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series) (Version:  - )
China Weather Forecast (HKLM-x32\...\{7223EDAC-E091-B3C1-BD91-B66CE557800F}) (Version:  - "") <==== ATTENTION
Custom (Version: 01.00.00.000 - Wave Systems Corp.) Hidden
DALGAKIRAN COMPRESSOR (HKLM-x32\...\dalgakiran.presenter) (Version: 1.0 - UNKNOWN)
DALGAKIRAN COMPRESSOR (x32 Version: 1.0 - UNKNOWN) Hidden
Dell Backup and Recovery Manager (HKLM\...\{50B4B603-A4C6-4739-AE96-6C76A0F8A388}) (Version: 1.3.1 - Dell Inc.)
Dell Client Configuration Toolkit (HKLM-x32\...\{C8EA30FC-B20B-465E-9D8A-CDDC09EA72D4}) (Version: 2.1 - Dell)
Dell Client System Update (HKLM-x32\...\{2B2B45B1-3CA0-4F8D-BBB3-AC77ED46A0FE}) (Version: 1.2.3 - Dell Inc.)
Dell Data Protection | Access (HKLM\...\{ABBA2EA4-740E-4052-902B-9CA70B081E3F}) (Version: 2.2.00003.009 - Dell Inc.)
Dell Feature Enhancement Pack (HKLM\...\{992D1CE7-A20F-4AB0-9D9D-AFC3418844DA}) (Version: 2.2.000 - Dell)
Dell Mobile Broadband Manager (HKLM-x32\...\{23EEC842-57ED-4055-A056-9D4185DFB1AA}) (Version: 7.1.0.2 - Dell)
Dell OpenManage Client Instrumentation (HKLM\...\{D390C5DD-9312-4F70-B3B1-4EAE635CDA17}) (Version: 8.1.0.242 - Dell)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1211.101.114 - ALPS ELECTRIC CO., LTD.)
Dell Wireless HSPA Mini-Card Drivers (HKLM-x32\...\{9D583F01-A973-4B04-90BD-FB7886779090}) (Version: 7.2.4.1 - Dell)
DellAccess (Version: 01.01.00.104 - Wave Systems Corp.) Hidden
EMBASSY Client Core (Version: 01.01.00.036 - Wave Systems Corp.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 3.5.116.602 - Foxit Software Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.1.5.425 - Foxit Software Inc.)
Gemalto (Version: 01.64.01.0010 - Wave Systems Corp) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
HP Deskjet 1050 J410 series — badanie mające na celu poprawę produktów (HKLM\...\{52A87876-4D1A-4524-9F06-53A490E6E34D}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 1050 J410 series — podstawowe oprogramowanie urządzenia (HKLM\...\{B6A3D97D-484B-48B5-85C6-361D9FA25CDF}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 1050 J410 series Pomoc (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6388.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.8 - Intel)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Java 7 Update 79 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417079FF}) (Version: 7.0.790 - Oracle)
Java SE Development Kit 7 Update 79 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170790}) (Version: 1.7.0.790 - Oracle)
LED softwore11 (HKLM-x32\...\LED softwore11) (Version:  - )
MAGIX Fastcut (HKLM\...\MX.{4313C595-29E9-484A-B861-3A8D363FCAA5}) (Version: 1.0.0.63 - MAGIX Software GmbH)
MAGIX Fastcut (Version: 1.0.0.63 - MAGIX Software GmbH) Hidden
Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.4.0.3000 - Maxthon International Limited)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
MediaInfo 0.7.72 (HKLM\...\MediaInfo) (Version: 0.7.72 - MediaArea.net)
Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mouse Recorder Pro 2.0.7.5 (HKLM-x32\...\{889E44CE-435C-4D37-B302-A7E43339E5FA}_is1) (Version:  - Nemex Studios)
Mozilla Firefox 33.1.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 pl)) (Version: 33.1.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MPC-HC 1.7.8 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.8 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MultiRes (remove only) (HKLM-x32\...\MultiRes (remove only)) (Version:  - )
NTRU TCG Software Stack (Version: 2.1.37 - Security Innovation, Inc.) Hidden
nxTCon (HKLM-x32\...\{53781579-B144-47FA-9F33-69DA28CCAB2B}) (Version: 7.90 - iNexio)
O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{6DC8AD9A-28D0-4800-818D-61667A971ED1}) (Version: 3.0.07.37 - O2Micro International LTD.)
O2Micro Flash Memory Card Windows Driver (x32 Version: 3.0.07.37 - O2Micro International LTD.) Hidden
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Opera Mini pc  1.0 (HKLM-x32\...\Opera Mini pc ) (Version: 1.0 - ECS, Inc.)
Opera Mobile Emulator (HKLM-x32\...\{1826D0CA-F479-4430-9EFE-86E8E783505B}_is1) (Version:  - Opera Software ASA)
Oprogramowanie Intel® PROSet/Wireless WiFi (HKLM\...\{54EB8041-1115-4406-AA4B-44D236E84B3B}) (Version: 15.01.1000.0927 - Intel Corporation)
Pakiet sterowników systemu Windows - Dell Inc. PBADRV System  (09/11/2009 1.0.1.6) (HKLM\...\9512AA21B791B05A54E27065C45BBC417AB282DF) (Version: 09/11/2009 1.0.1.6 - Dell Inc.)
Paragon Alignment Tool™ 3.0 (HKLM-x32\...\{4D83E500-4D0C-11DF-A750-005056C00008}) (Version: 90.00.0003 - Paragon Software)
PC-CCID (Version: 2.0.0 - Gemalto) Hidden
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{46889070-D447-4936-A5D3-246DB972FA2E}) (Version: 2.0.6.16537 - pdfforge GmbH)
PDF24 Creator 6.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation)
PowerStrip 3 (remove only) (HKLM-x32\...\PowerStrip 3 (remove only)) (Version:  - )
Preboot Manager (Version: 03.03.00.090 - Wave Systems Corp.) Hidden
Private Information Manager (Version: 07.01.00.030 - Wave Systems Corp.) Hidden
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Reksi i ortografia (HKLM-x32\...\{16757B5A-6465-40F5-9A80-DD8160912497}) (Version: 1.0.0 - AidemMedia)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.30.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden
SeekerModule (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{e5bd2542}) (Version:  - Software Publisher) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - Silicon Laboratories)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SPBA 5.9 (Version: 5.9.4.6901 - UPEK Inc.) Hidden
toolkit32for64bit (x32 Version: 7.67.47.0000 - Wave Systems Corp) Hidden
Trusted Drive Manager (Version: 4.5.0.136 - Wave Systems Corp.) Hidden
Upek Touchchip Fingerprint Reader (Version: 1.2.004 - Dell Inc.) Hidden
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Wave Crypto Runtime 2.0.7.0 x86 (x32 Version: 02.00.07.0000 - Wave Systems Corp) Hidden
Wave Infrastructure Installer (Version: 07.67.60.0020 - Wave Systems Corp) Hidden
Wave Support Software Installer (Version: 05.13.00.051 - Wave Systems Corp) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2410 - Broadcom Corporation)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinX HD Video Converter Deluxe 5.5.3 (HKLM-x32\...\WinX HD Video Converter Deluxe_is1) (Version:  - Digiarty Software, Inc.)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
WinZipper (HKLM-x32\...\WinZipper) (Version: 1.5.104 - Taiwan Shui Mu Chih Ching Technology Limited.) <==== ATTENTION

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-390905103-1377331367-2787750936-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

==================== Restore Points =========================

22-07-2015 20:04:58 Installed QuickTime 7
23-07-2015 20:58:19 Windows Update
24-07-2015 09:55:51 Windows Update
27-07-2015 01:06:54 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-07-15 11:14 - 00000057 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
0.0.0.1	mssplus.mcafee.com


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2206CB60-5659-46AE-A736-66080083B115} - System32\Tasks\HPCustParticipation HP Deskjet 1050 J410 series => C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {7A72C3A3-1B2E-47AD-A16C-DF94F958E388} - System32\Tasks\{413AA971-ECB9-411F-8547-066D6B9CF934} => pcalua.exe -a "C:\Users\Dell Latitude E6430\AppData\Roaming\mystartsearch\UninstallManager.exe" -c -ptid=ima
Task: {86E6277E-692E-422E-9B08-5B40A59274B0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {EE7B30A3-3975-428C-A7B0-C9CE0BC36B19} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\mxup.exe [2014-12-11] (Maxthon International ltd.)
Task: {F485C0DA-F73C-4024-85C2-D12471259F35} - System32\Tasks\Bidaily Synchronize Task[973b] => c:\programdata\{074510f0-3d91-0963-0745-510f03d943c0}\removewat 2.2 6 windows 7 activator full version download.exe [2014-06-10] () <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Bidaily Synchronize Task[973b].job => c:\programdata\{074510f0-3d91-0963-0745-510f03d943c0}\removewat 2.2 6 windows 7 activator full version download.exe <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2012-03-09 17:10 - 2012-03-09 17:10 - 01530904 _____ () C:\Program Files\Dell\SysMgt\shared\bin\libxml2.dll
2012-01-17 07:45 - 2012-01-17 07:45 - 00218504 _____ () C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe
2012-01-17 07:45 - 2012-01-17 07:45 - 00038792 _____ () C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\DeviceStatus.dll
2011-10-08 22:56 - 2011-10-08 22:56 - 00003072 _____ () C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\TspPopup_ENU.dll
2011-11-07 07:55 - 2011-11-07 07:55 - 00094720 _____ () C:\Windows\system32\Wavx_ESC_Logging.dll
2006-12-08 15:42 - 2014-04-17 14:21 - 00155136 _____ () C:\Windows\system32\BioAPI100.dll
2006-12-08 15:41 - 2014-04-17 14:21 - 00239104 _____ () C:\Windows\system32\BIOAPI_MDS300.dll
2015-04-01 09:51 - 2011-08-04 14:12 - 00045056 _____ () C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe
2014-04-17 14:27 - 2003-04-18 18:06 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe
2015-07-23 00:33 - 2015-07-23 00:33 - 08016309 _____ () C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe
2015-07-08 20:10 - 2015-07-08 20:10 - 08016488 _____ () C:\Program Files (x86)\Steep Sex\Steep Sex.exe
2015-04-16 17:42 - 2015-04-16 17:42 - 00997536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-04-17 14:00 - 2012-03-26 17:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-06-20 03:04 - 2015-06-20 03:04 - 01627648 _____ () c:\Program Files (x86)\SeekerModule\SeekerModule.dll
2015-07-27 16:01 - 2015-07-27 16:01 - 00140800 _____ () c:\windows\temp\tmpmihmx0.dll
2014-04-17 15:10 - 2011-07-13 10:10 - 00065576 ____R () C:\Program Files (x86)\Dell\Dell WWAN\WMCore\MBMDebug.dll
2011-07-13 10:10 - 2011-07-13 10:10 - 00065576 ____R () C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\MBMDebug.dll
2014-04-17 14:29 - 2012-02-21 14:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-06-10 08:59 - 2015-06-05 20:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libglesv2.dll
2015-06-10 08:59 - 2015-06-05 20:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libegl.dll
2015-07-15 21:26 - 2015-07-13 10:14 - 16307888 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\PepperFlash\18.0.0.209\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Dell Latitude E6430\Downloads\noname (1).eml:OECustomProperty
AlternateDataStreams: C:\Users\Dell Latitude E6430\Downloads\noname (2).eml:OECustomProperty
AlternateDataStreams: C:\Users\Dell Latitude E6430\Downloads\noname.eml:OECustomProperty

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\google.de -> www.google.de
IE trusted site: HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\mks.com.pl -> www.mks.com.pl
IE trusted site: HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\mks.com.pl -> hxxp://www.mks.com.pl


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dell Latitude E6430\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{BDC7AB67-481C-484B-BE68-77AB47D5B118}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{484B6629-F822-4DA3-9E6A-6B09148BFA35}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe
FirewallRules: [{2A65C367-EEB5-46A7-AC55-7FF70023155C}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{D567BD14-372C-4E12-B25F-868F58B018D2}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{DCA797DF-98EE-4B6F-AE8A-9ED24E21311A}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{F85D9B35-43BB-495F-8433-86128CD20506}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [TCP Query User{B62A35FF-3322-42D7-AE0B-805CF525BFB2}C:\program files (x86)\wintv\wintv7\wintv7.exe] => (Allow) C:\program files (x86)\wintv\wintv7\wintv7.exe
FirewallRules: [UDP Query User{6A221E4F-A19B-4C06-AB87-D43549E78592}C:\program files (x86)\wintv\wintv7\wintv7.exe] => (Allow) C:\program files (x86)\wintv\wintv7\wintv7.exe
FirewallRules: [{324D6D7D-93AC-48FE-8649-F402713B79EE}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{1DA0D1AF-5751-4649-A032-654D2210BF98}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{1E32FCAD-8623-4A25-A561-5079AF2E93CD}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{15EF7548-5581-4995-8E42-B896F769ADA9}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{8562C324-9354-4FCE-A26C-090F4C03169E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{8D33C8B6-5356-47B2-B6B6-DEC8A7E5018B}C:\program files (x86)\ledsoft11\ledstudio.exe] => (Allow) C:\program files (x86)\ledsoft11\ledstudio.exe
FirewallRules: [UDP Query User{8028B067-BFF5-4C02-81C7-921F6D4F1A27}C:\program files (x86)\ledsoft11\ledstudio.exe] => (Allow) C:\program files (x86)\ledsoft11\ledstudio.exe
FirewallRules: [{440D26B2-E576-4B81-B9B8-BA44521ABB44}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{810F8049-AB68-4B21-903B-6712651E916F}C:\program files\andy\andy.exe] => (Allow) C:\program files\andy\andy.exe
FirewallRules: [UDP Query User{6D81EF6E-0DEF-4BDC-A365-868D0B62BB04}C:\program files\andy\andy.exe] => (Allow) C:\program files\andy\andy.exe
FirewallRules: [{615E225F-68D3-46E3-A239-CD019D145604}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Karta tunelowania Teredo firmy Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/27/2015 06:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x14e0
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 05:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x1618
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 05:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x1430
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 04:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x4e4
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 04:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x1354
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 03:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0xfa4
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 03:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x178c
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 02:49:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0xe44
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 02:19:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0xa30
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 01:49:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x1980
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3


System errors:
=============
Error: (07/27/2015 03:07:20 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 03:05:06 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 03:03:11 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (07/27/2015 03:03:05 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 01:22:29 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 01:20:15 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 01:18:16 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (07/27/2015 01:00:56 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.0.101192.168.137.0255.255.255.0

Error: (07/27/2015 12:49:21 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.0.101192.168.137.0255.255.255.0

Error: (07/27/2015 12:49:18 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0


Microsoft Office:
=========================
Error: (07/27/2015 06:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a9414e001d0c887fb57975dC:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe3cbab821-347b-11e5-b12a-028037ec0200

Error: (07/27/2015 05:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94161801d0c883ca73de82C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe0bd72656-3477-11e5-b12a-028037ec0200

Error: (07/27/2015 05:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94143001d0c87f999073c8C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exedaf54243-3472-11e5-b12a-028037ec0200

Error: (07/27/2015 04:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a944e401d0c87b68ace1feC:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exeaa13d360-346e-11e5-b12a-028037ec0200

Error: (07/27/2015 04:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94135401d0c87737c92923C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe79312bf9-346a-11e5-b12a-028037ec0200

Error: (07/27/2015 03:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94fa401d0c87306e5aed6C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe484fad83-3466-11e5-b12a-028037ec0200

Error: (07/27/2015 03:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94178c01d0c86ed601f5fbC:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe176cdf0c-3462-11e5-b12a-028037ec0200

Error: (07/27/2015 02:49:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94e4401d0c86aa51e1171C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exee5eeb410-345d-11e5-b12a-028037ec0200

Error: (07/27/2015 02:19:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94a3001d0c866743acdc8C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exeb50d452d-3459-11e5-b12a-028037ec0200

Error: (07/27/2015 01:49:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94198001d0c862435714edC:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe842a76b6-3455-11e5-b12a-028037ec0200


CodeIntegrity Error:
===================================
  Date: 2015-02-20 10:14:23.072
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-02-20 10:14:22.930
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-02-17 13:34:00.327
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-17 13:34:00.325
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-17 11:54:54.390
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-17 11:54:54.279
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-16 09:57:11.304
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-16 09:57:11.175
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3340M CPU @ 2.70GHz
Percentage of memory in use: 79%
Total physical RAM: 3999.3 MB
Available physical RAM: 818.23 MB
Total Virtual: 8296.81 MB
Available Virtual: 4500.41 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:30.08 GB) NTFS
Drive d: (Aidem) (CDROM) (Total:0.44 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 20DD75EC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

==================== End of log ============================