Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-06-2014 01
Ran by Asus (administrator) on ASUS-PC on 11-06-2014 18:39:12
Running from C:\Users\Asus\Desktop\komp Dawida\FRST
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-15] (AVAST Software)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3785081291-1902790920-3344881401-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\9eeb4lpo.default-1402504310367
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-11-03]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-15] (AVAST Software)
S2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2014-02-15] (AVAST Software)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-02-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-02-15] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-01-13] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-02-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410784 2014-02-15] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-02-15] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180248 2014-01-13] ()
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [48128 2008-12-16] (Atheros Communications, Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1766592 2009-06-05] ()
S1 aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [X]
U5 aswNdis; C:\Windows\System32\Drivers\aswNdis.sys [12112 2014-02-15] (ALWIL Software)
S0 aswNdis2; No ImagePath
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-11 18:35 - 2014-06-11 18:35 - 00000314 _____ () C:\Windows\PFRO.log
2014-06-11 18:33 - 2014-06-11 18:38 - 00000000 ____D () C:\AdwCleaner
2014-06-11 18:31 - 2014-06-11 18:31 - 00000000 ____D () C:\Users\Asus\Desktop\Stare dane programu Firefox
2014-06-01 22:45 - 2014-06-01 22:45 - 402078675 _____ () C:\Windows\MEMORY.DMP
2014-06-01 22:45 - 2014-06-01 22:45 - 00143928 _____ () C:\Windows\Minidump\Mini060114-01.dmp
2014-06-01 22:09 - 2014-06-11 18:39 - 00000000 ____D () C:\FRST
2014-06-01 21:49 - 2014-06-11 18:38 - 00000000 ____D () C:\Users\Asus\Desktop\komp Dawida
2014-06-01 21:47 - 2014-06-05 22:50 - 00001574 _____ () C:\Windows\setupact.log
2014-06-01 21:47 - 2014-06-01 21:47 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-16 20:32 - 2014-05-16 20:32 - 00000800 _____ () C:\Users\Public\Desktop\PLAY ONLINE.lnk
2014-05-16 20:32 - 2014-05-16 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PLAY ONLINE
2014-05-16 20:31 - 2008-09-26 18:04 - 00621056 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2014-05-16 20:31 - 2008-09-26 18:04 - 00113152 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbnet.sys
2014-05-16 20:31 - 2008-09-26 18:04 - 00101760 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2014-05-16 20:31 - 2008-09-26 18:03 - 00023424 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2014-05-16 20:27 - 2014-05-16 20:32 - 00000000 ____D () C:\Program Files\PLAY ONLINE
2014-05-16 17:52 - 2014-05-16 17:52 - 00000000 ____D () C:\Windows\system32\vi-VN
2014-05-16 17:52 - 2014-05-16 17:52 - 00000000 ____D () C:\Windows\system32\eu-ES
2014-05-16 17:52 - 2014-05-16 17:52 - 00000000 ____D () C:\Windows\system32\ca-ES
2014-05-16 17:38 - 2014-06-11 18:35 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-05-16 17:20 - 2014-05-16 17:20 - 00000000 ____D () C:\Windows\system32\EventProviders

==================== One Month Modified Files and Folders =======

2014-06-11 18:39 - 2014-06-01 22:09 - 00000000 ____D () C:\FRST
2014-06-11 18:39 - 2011-10-31 13:03 - 00000000 ____D () C:\Users\Asus\AppData\Local\Temp
2014-06-11 18:38 - 2014-06-11 18:33 - 00000000 ____D () C:\AdwCleaner
2014-06-11 18:38 - 2014-06-01 21:49 - 00000000 ____D () C:\Users\Asus\Desktop\komp Dawida
2014-06-11 18:35 - 2014-06-11 18:35 - 00000314 _____ () C:\Windows\PFRO.log
2014-06-11 18:35 - 2014-05-16 17:38 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-06-11 18:35 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-11 18:35 - 2006-11-02 14:47 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-11 18:35 - 2006-11-02 14:47 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-11 18:34 - 2008-01-21 03:35 - 01256446 _____ () C:\Windows\WindowsUpdate.log
2014-06-11 18:34 - 2006-11-02 15:01 - 00032624 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-11 18:31 - 2014-06-11 18:31 - 00000000 ____D () C:\Users\Asus\Desktop\Stare dane programu Firefox
2014-06-11 18:31 - 2012-04-25 23:31 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-11 18:25 - 2008-01-21 08:24 - 00923036 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-11 18:25 - 2008-01-21 08:24 - 00155106 _____ () C:\Windows\system32\perfc015.dat
2014-06-11 18:25 - 2008-01-21 08:24 - 00013218 _____ () C:\Windows\system32\perfh015.dat
2014-06-11 18:21 - 2013-08-07 12:48 - 00000000 ____D () C:\Users\Asus\AppData\Roaming\Skype
2014-06-05 22:50 - 2014-06-01 21:47 - 00001574 _____ () C:\Windows\setupact.log
2014-06-05 22:50 - 2011-11-06 17:16 - 00012288 _____ () C:\Users\Asus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-01 22:45 - 2014-06-01 22:45 - 402078675 _____ () C:\Windows\MEMORY.DMP
2014-06-01 22:45 - 2014-06-01 22:45 - 00143928 _____ () C:\Windows\Minidump\Mini060114-01.dmp
2014-06-01 22:45 - 2014-01-12 17:19 - 00000000 ____D () C:\Windows\Minidump
2014-06-01 21:47 - 2014-06-01 21:47 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-01 21:02 - 2014-03-03 18:37 - 00000171 _____ () C:\Windows\disney.ini
2014-06-01 21:02 - 2011-11-03 20:25 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2014-06-01 21:02 - 2011-11-03 01:13 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-05-16 20:32 - 2014-05-16 20:32 - 00000800 _____ () C:\Users\Public\Desktop\PLAY ONLINE.lnk
2014-05-16 20:32 - 2014-05-16 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PLAY ONLINE
2014-05-16 20:32 - 2014-05-16 20:27 - 00000000 ____D () C:\Program Files\PLAY ONLINE
2014-05-16 20:31 - 2011-10-31 13:03 - 00000000 ____D () C:\Users\Asus
2014-05-16 20:04 - 2013-12-22 14:24 - 00000000 ____D () C:\Program Files\Fotojoker
2014-05-16 20:03 - 2013-04-08 18:42 - 00000000 ____D () C:\Program Files\Google
2014-05-16 20:02 - 2013-05-12 11:47 - 00000000 ____D () C:\Program Files\iPlus
2014-05-16 20:02 - 2013-04-08 18:43 - 00000000 ____D () C:\Users\Asus\AppData\Local\Google
2014-05-16 19:50 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\rescache
2014-05-16 19:46 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-16 17:59 - 2011-10-31 13:03 - 00000915 _____ () C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2014-05-16 17:55 - 2006-11-02 14:47 - 00228544 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-16 17:52 - 2014-05-16 17:52 - 00000000 ____D () C:\Windows\system32\vi-VN
2014-05-16 17:52 - 2014-05-16 17:52 - 00000000 ____D () C:\Windows\system32\eu-ES
2014-05-16 17:52 - 2014-05-16 17:52 - 00000000 ____D () C:\Windows\system32\ca-ES
2014-05-16 17:52 - 2008-01-21 08:23 - 00000000 ____D () C:\Windows\system32\Drivers\pl-PL
2014-05-16 17:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Windows\system32\XPSViewer
2014-05-16 17:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-05-16 17:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Photo Gallery
2014-05-16 17:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-16 17:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-16 17:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Collaboration
2014-05-16 17:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Calendar
2014-05-16 17:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Movie Maker
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\th-TH
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\SLUI
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\it-IT
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\he-IL
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\et-EE
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\el-GR
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\IME
2014-05-16 17:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-16 17:42 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\tracing
2014-05-16 17:29 - 2013-08-04 21:22 - 00000000 ____D () C:\Users\Asus\AppData\Local\Facebook
2014-05-16 17:21 - 2013-11-10 21:50 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-16 17:20 - 2014-05-16 17:20 - 00000000 ____D () C:\Windows\system32\EventProviders

Some content of TEMP:
====================
C:\Users\Asus\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-06-11 18:28

==================== End Of Log ============================