Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-08-2014 02 Ran by figaro (administrator) on FIGARO-53D87DAD on 02-09-2014 19:05:07 Running from C:\Documents and Settings\figaro\Moje dokumenty\Downloads Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 2 (X86) OS Language: Polski Internet Explorer Version 6 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Program Files\Intel\Wireless\Bin\EvtEng.exe (Intel Corporation ) C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Cherished Technololgy LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\IePluginServices\PluginService.exe (Fuyu LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect\ProtectWindowsManager.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (Intel Corporation) C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe () C:\Program Files\NetCrawl\updateNetCrawl.exe () C:\Program Files\NetCrawl\updater.exe () C:\Program Files\NetCrawl\bin\utilNetCrawl.exe () C:\WINDOWS\ATK0100\HControl.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE () C:\WINDOWS\ATK0100\ATKOSD.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe () C:\Program Files\Wireless Console 2\wcourier.exe (Intel Corporation) C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation) C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation) C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe () C:\Program Files\ASUS\ASUS Live Update\ALU.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (Intel Corporation) C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe () C:\Program Files\NetCrawl\bin\NetCrawl.BrowserAdapter.exe () C:\Program Files\NetCrawl\bin\NetCrawl.PurBrowse.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [HControl] => C:\WINDOWS\ATK0100\HControl.exe [106496 2006-02-23] () HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [nwiz] => nwiz.exe /install HKLM\...\Run: [Skrót do strony wBa[ciwo[ci High Definition Audio] => C:\WINDOWS\system32\HDAShCut.exe [61952 2005-01-07] (Windows (R) Server 2003 DDK provider) HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [14850560 2005-09-06] (Realtek Semiconductor Corp.) HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [761945 2005-10-21] (Synaptics, Inc.) HKLM\...\Run: [Wireless Console 2] => C:\Program Files\Wireless Console 2\wcourier.exe [987136 2005-10-17] () HKLM\...\Run: [IntelZeroConfig] => C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [667718 2006-04-14] (Intel Corporation) HKLM\...\Run: [IntelWireless] => C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [602182 2006-04-14] (Intel Corporation) HKLM\...\Run: [EOUApp] => C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe [569413 2006-04-14] (Intel Corporation) HKLM\...\Run: [ASUS Live Update] => C:\Program Files\ASUS\ASUS Live Update\ALU.exe [180224 2006-02-21] () HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKU\S-1-5-21-1004336348-764733703-839522115-1004\...\MountPoints2: {1eaa3351-eb3d-11e3-9d2c-0018de7913bf} - autoply.exe OPEN HKU\S-1-5-21-1004336348-764733703-839522115-1004\...\MountPoints2: {1eaa3352-eb3d-11e3-9d2c-0018de7913bf} - autoply.exe OPEN HKU\S-1-5-21-1004336348-764733703-839522115-1004\...\MountPoints2: {aac3362b-c63f-11e3-9d0f-0018de7913bf} - E:\setup.exe HKU\S-1-5-21-1004336348-764733703-839522115-1004\...\MountPoints2: {c62d8271-ef8e-11e3-9d2d-0018de7913bf} - E:\DTLplus_Launcher.exe Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe () ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\figaro\Dane aplikacji\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\figaro\Dane aplikacji\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\figaro\Dane aplikacji\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\figaro\Dane aplikacji\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1405006012&from=cor&uid=HTS541080G9AT00_MP28XBXBH0P3VSH0P3VSX HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1405006012&from=cor&uid=HTS541080G9AT00_MP28XBXBH0P3VSH0P3VSX&q={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1405006012&from=cor&uid=HTS541080G9AT00_MP28XBXBH0P3VSH0P3VSX HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1405006012&from=cor&uid=HTS541080G9AT00_MP28XBXBH0P3VSH0P3VSX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1405006012&from=cor&uid=HTS541080G9AT00_MP28XBXBH0P3VSH0P3VSX HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1405006012&from=cor&uid=HTS541080G9AT00_MP28XBXBH0P3VSH0P3VSX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1405006012&from=cor&uid=HTS541080G9AT00_MP28XBXBH0P3VSH0P3VSX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1405006012&from=cor&uid=HTS541080G9AT00_MP28XBXBH0P3VSH0P3VSX SearchScopes: HKLM - DefaultScope value is missing. BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\figaro\Dane aplikacji\Mozilla\Firefox\Profiles\zadih51u.default-1405007371765 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\sweet-page.xml FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-11-09] FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Documents and Settings\figaro\Dane aplikacji\Mozilla\Firefox\Profiles\95trv9em.default\extensions\faststartff@gmail.com FF Extension: No Name - C:\Documents and Settings\figaro\Dane aplikacji\Mozilla\Firefox\Profiles\zadih51u.default-1405007371765\extensions\{6fcd6092-9615-4f7f-8898-8df53980e5d2}.xpi [] Chrome: ======= CHR CustomProfile: C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default CHR Extension: (Dokumenty Google) - C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-09] CHR Extension: (Dysk Google) - C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-09] CHR Extension: (YouTube) - C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-09] CHR Extension: (Szukaj w Google) - C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-09] CHR Extension: (avast! Online Security) - C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-11-09] CHR Extension: (Google Wallet) - C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-09] CHR Extension: (Gmail) - C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-09] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-31] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-31] (AVAST Software) R2 EvtEng; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [114753 2006-04-14] (Intel Corporation) [File not signed] S3 idsvc; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [864256 2007-10-11] (Microsoft Corporation) [File not signed] R2 IePluginServices; C:\Documents and Settings\All Users\Dane aplikacji\IePluginServices\PluginService.exe [759688 2014-07-10] (Cherished Technololgy LIMITED) R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-07-10] (Oracle Corporation) S4 NetTcpPortSharing; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [122880 2007-10-11] (Microsoft Corporation) [File not signed] R2 RegSrvc; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [217164 2006-04-14] (Intel Corporation) [File not signed] R2 S24EventMonitor; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [540745 2006-04-14] (Intel Corporation ) [File not signed] R2 Update NetCrawl; C:\Program Files\NetCrawl\updateNetCrawl.exe [323360 2014-09-02] () R2 UpdaterSvcNetCrawl; C:\Program Files\NetCrawl\updater.exe [135968 2014-07-10] () R2 Util NetCrawl; C:\Program Files\NetCrawl\bin\utilNetCrawl.exe [323360 2014-09-02] () R2 WindowsMangerProtect; C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect\ProtectWindowsManager.exe [535936 2014-07-10] (Fuyu LIMITED) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21275 2013-11-09] (Meetinghouse Data Communications) [File not signed] R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-07-31] () R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-07-31] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-07-31] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-07-31] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-07-31] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-07-31] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-07-31] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-07-31] () S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2004-08-04] (Microsoft Corporation) S3 HdAudAddService; C:\WINDOWS\System32\drivers\HdAudio.sys [145920 2005-01-07] (Windows (R) Server 2003 DDK provider) R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ATKACPI.sys [5632 2005-02-17] () S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2004-08-04] (Microsoft Corporation) R2 s24trans; C:\WINDOWS\System32\DRIVERS\s24trans.sys [13568 2006-04-14] (Intel Corporation) [File not signed] S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [27440 2004-08-04] () R3 SynMini; C:\WINDOWS\System32\Drivers\SynMini.sys [720470 2005-10-03] (Syntek America Inc.) R3 SynScan; C:\WINDOWS\System32\Drivers\SynScan.sys [8278 2005-10-03] (Syntek America Inc.) S3 toshidpt; C:\WINDOWS\System32\drivers\Toshidpt.sys [3712 2005-07-11] (TOSHIBA Corporation.) [File not signed] R3 tosporte; C:\WINDOWS\System32\DRIVERS\tosporte.sys [47104 2005-11-24] (TOSHIBA Corporation) [File not signed] R3 Tosrfbd; C:\WINDOWS\System32\Drivers\tosrfbd.sys [108928 2006-02-03] (TOSHIBA CORPORATION) [File not signed] R3 Tosrfbnp; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [37632 2005-12-14] (TOSHIBA Corporation) [File not signed] R1 Tosrfcom; C:\WINDOWS\System32\Drivers\tosrfcom.sys [64896 2005-08-01] (TOSHIBA Corporation) [File not signed] R3 Tosrfhid; C:\WINDOWS\System32\DRIVERS\Tosrfhid.sys [62848 2006-02-08] (TOSHIBA Corporation.) [File not signed] R3 tosrfnds; C:\WINDOWS\System32\DRIVERS\tosrfnds.sys [18612 2005-01-06] (TOSHIBA Corporation.) [File not signed] S3 TosRfSnd; C:\WINDOWS\System32\drivers\TosRfSnd.sys [52864 2005-11-11] (TOSHIBA Corporation) [File not signed] R3 Tosrfusb; C:\WINDOWS\System32\Drivers\tosrfusb.sys [39808 2006-01-31] (TOSHIBA CORPORATION) [File not signed] R3 w39n51; C:\WINDOWS\System32\DRIVERS\w39n51.sys [1429632 2006-04-04] (Intel® Corporation) S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2004-08-04] (Microsoft Corporation) R1 {6fcd6092-9615-4f7f-8898-8df53980e5d2}t; C:\WINDOWS\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}t.sys [55224 2014-08-06] (StdLib) S4 IntelIde; No ImagePath U3 TlntSvr; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-02 19:04 - 2014-09-02 19:05 - 00000000 ____D () C:\FRST 2014-09-02 18:42 - 2014-09-02 18:42 - 00000000 ___RD () C:\Documents and Settings\figaro\Menu Start\Programy\Narzędzia administracyjne 2014-09-02 18:37 - 2014-09-02 18:42 - 00000000 ___SD () C:\ComboFix 2014-09-02 18:37 - 2011-06-26 08:45 - 00256000 _____ () C:\WINDOWS\PEV.exe 2014-09-02 18:37 - 2010-11-07 19:20 - 00208896 _____ () C:\WINDOWS\MBR.exe 2014-09-02 18:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe 2014-09-02 18:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe 2014-09-02 18:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe 2014-09-02 18:37 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe 2014-09-02 18:37 - 2000-08-31 02:00 - 00098816 _____ () C:\WINDOWS\sed.exe 2014-09-02 18:37 - 2000-08-31 02:00 - 00080412 _____ () C:\WINDOWS\grep.exe 2014-09-02 18:37 - 2000-08-31 02:00 - 00068096 _____ () C:\WINDOWS\zip.exe 2014-09-02 18:36 - 2014-09-02 18:42 - 00000000 ____D () C:\Qoobox 2014-09-02 18:36 - 2014-09-02 18:36 - 00000000 ___RD () C:\Documents and Settings\figaro\Moje dokumenty\Moje wideo 2014-09-02 18:36 - 2014-09-02 18:36 - 00000000 ____D () C:\WINDOWS\erdnt 2014-08-29 22:24 - 2014-08-29 22:24 - 00000293 _____ () C:\Documents and Settings\figaro\Pulpit\Skrót do Historia Rudki.odp.lnk 2014-08-08 10:34 - 2014-08-06 03:20 - 00055224 _____ (StdLib) C:\WINDOWS\system32\Drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}t.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-02 19:05 - 2014-09-02 19:04 - 00000000 ____D () C:\FRST 2014-09-02 19:05 - 2013-11-09 19:27 - 00000000 ____D () C:\Documents and Settings\figaro\Ustawienia lokalne\Temp 2014-09-02 18:58 - 2013-11-09 20:23 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-02 18:49 - 2013-11-09 19:20 - 00449948 _____ () C:\WINDOWS\WindowsUpdate.log 2014-09-02 18:48 - 2013-11-09 20:42 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2014-09-02 18:48 - 2004-08-04 14:00 - 00000579 _____ () C:\WINDOWS\win.ini 2014-09-02 18:43 - 2013-11-09 22:08 - 00000157 _____ () C:\WINDOWS\wiadebug.log 2014-09-02 18:43 - 2013-11-09 20:23 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-02 18:43 - 2013-11-09 20:02 - 00000000 ____D () C:\WINDOWS\system32\Lang 2014-09-02 18:43 - 2013-11-09 19:34 - 00041156 _____ () C:\WINDOWS\system32\nvapps.xml 2014-09-02 18:42 - 2014-09-02 18:42 - 00000000 ___RD () C:\Documents and Settings\figaro\Menu Start\Programy\Narzędzia administracyjne 2014-09-02 18:42 - 2014-09-02 18:37 - 00000000 ___SD () C:\ComboFix 2014-09-02 18:42 - 2014-09-02 18:36 - 00000000 ____D () C:\Qoobox 2014-09-02 18:42 - 2013-11-09 22:08 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-09-02 18:42 - 2013-11-09 22:05 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty 2014-09-02 18:42 - 2013-11-09 19:27 - 00000000 ___RD () C:\Documents and Settings\figaro\Menu Start\Programy 2014-09-02 18:42 - 2013-11-09 19:25 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-09-02 18:41 - 2014-07-10 17:26 - 00000000 ____D () C:\Program Files\NetCrawl 2014-09-02 18:40 - 2013-11-09 19:27 - 00000000 ____D () C:\Documents and Settings\figaro 2014-09-02 18:37 - 2013-11-09 19:25 - 00032524 _____ () C:\WINDOWS\SchedLgU.Txt 2014-09-02 18:36 - 2014-09-02 18:36 - 00000000 ___RD () C:\Documents and Settings\figaro\Moje dokumenty\Moje wideo 2014-09-02 18:36 - 2014-09-02 18:36 - 00000000 ____D () C:\WINDOWS\erdnt 2014-09-02 18:36 - 2013-11-09 19:27 - 00000000 ___RD () C:\Documents and Settings\figaro\Moje dokumenty 2014-09-02 18:31 - 2014-01-26 17:29 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-09-02 17:50 - 2013-11-09 19:27 - 00000188 ___SH () C:\Documents and Settings\figaro\ntuser.ini 2014-09-02 17:39 - 2013-11-09 22:04 - 00177533 _____ () C:\WINDOWS\setupact.log 2014-09-02 16:06 - 2013-11-09 22:05 - 00746726 _____ () C:\WINDOWS\setupapi.log 2014-08-29 22:24 - 2014-08-29 22:24 - 00000293 _____ () C:\Documents and Settings\figaro\Pulpit\Skrót do Historia Rudki.odp.lnk 2014-08-29 22:24 - 2013-11-09 19:27 - 00000000 ____D () C:\Documents and Settings\figaro\Pulpit 2014-08-23 20:59 - 2014-01-26 13:11 - 00000284 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job 2014-08-20 18:16 - 2004-08-04 14:00 - 00013712 _____ () C:\WINDOWS\system32\wpa.dbl 2014-08-17 16:56 - 2013-12-28 22:10 - 00011776 _____ () C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-08-17 10:47 - 2014-07-26 20:20 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat 2014-08-16 10:08 - 2013-11-09 20:26 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2014-08-10 15:14 - 2014-07-24 07:36 - 00000000 ____D () C:\Documents and Settings\figaro\Pulpit\łazienki 2014-08-06 03:20 - 2014-08-08 10:34 - 00055224 _____ (StdLib) C:\WINDOWS\system32\Drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}t.sys 2014-08-05 16:58 - 2013-11-09 19:27 - 00000000 ___HD () C:\Documents and Settings\figaro\Ustawienia lokalne\Dane aplikacji Some content of TEMP: ==================== C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwf0ewf.dll C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\flac-1.2.1b.exe C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\fp_pl_pfs_installer-1.exe C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\fp_pl_pfs_installer-2.exe C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\fp_pl_pfs_installer-3.exe C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\fp_pl_pfs_installer.exe C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\ICReinstall_SharePod 3.9.9_isdmgr.exe C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\maucampoSetup.exe C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\OptimizerPro.exe C:\Documents and Settings\figaro\Ustawienia lokalne\Temp\setup.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================