Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014 Ran by Joanna (administrator) on KAMIL-PC on 13-09-2014 13:01:29 Running from C:\Users\Joanna\Desktop Platform: Microsoft® Windows Vista™ Home Premium Service Pack 1 (X86) OS Language: English (United States) Internet Explorer Version 7 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\launcher_service.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe (Lexmark International Inc.) C:\Program Files\Lexmark 3600-4600 Series\ezprint.exe (Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\ehome\ehtray.exe (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe (Cyfrowy Polsat) C:\Program Files\Cyfrowy Polsat HSPA\Cyfrowy Polsat B150\BRService.exe () C:\Program Files\Gigabyte\EasySaver\essvr.exe (Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe ( ) C:\Windows\System32\lxdxcoms.exe () C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Realtek) C:\Program Files\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe (VMware, Inc.) C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe (Realtek Semiconductor Corp.) C:\Program Files\Realtek\RTL8187 Wireless LAN Utility\RtWLan.exe (VMware, Inc.) C:\Windows\System32\vmnat.exe (VMware, Inc.) C:\Windows\System32\vmnetdhcp.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Auslogics) C:\Program Files\Auslogics\Auslogics BoostSpeed\BoostSpeed.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe HKLM\...\Run: [lxdxmon.exe] => C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe [668328 2008-06-13] () HKLM\...\Run: [EzPrint] => C:\Program Files\Lexmark 3600-4600 Series\ezprint.exe [107176 2008-06-13] (Lexmark International Inc.) HKLM\...\Run: [tvncontrol] => C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-07-25] (Comodo Security Solutions, Inc.) HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation) HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\...\Policies\Explorer: [NoThumbnailCache] 1 HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\...\Policies\Explorer: [DisableThumbnailsOnNetworkFolders] 1 HKU\S-1-5-21-2620197854-1719786493-1418023469-1273\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files\Comodo\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.) Startup: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Default_search_url = http://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKLM\Software\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm SearchScopes: HKCU - google URL = SearchScopes: HKCU - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://us.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) BHO: IEPluginBHO Class -> {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} -> C:\Users\Joanna\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Hosts: 127.0.0.1 www.serialnet.pl localhost Tcpip\..\Interfaces\{303427F0-60D6-4ACF-8C22-D45D1288B708}: [NameServer] 192.168.2.1 Tcpip\..\Interfaces\{8DCCD302-3DB1-4A4A-BD2D-4914453D76A0}: [NameServer] 8.8.8.8,8.8.4.4 FireFox: ======== FF ProfilePath: C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\3d4ccgmg.default-1392563674450 FF DefaultSearchEngine: Yahoo FF SelectedSearchEngine: Yahoo FF Homepage: about:home FF Keyword.URL: hxxp://us.search.yahoo.com/search?fr=ytff-comodo&p= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Joanna\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Joanna\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft) FF Extension: PrivDog - C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\3d4ccgmg.default-1392563674450\Extensions\PrivDog@AdTrustMedia.com [2014-06-20] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-10-10] Chrome: ======= CHR HomePage: Default -> hxxp://google.pl/ CHR StartupUrls: Default -> "hxxp://www.google.com" CHR Plugin: (Shockwave Flash) - C:\Users\Joanna\AppData\Local\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Joanna\AppData\Local\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Joanna\AppData\Local\Google\Chrome\Application\36.0.1985.125\pdf.dll () CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.) CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation) CHR Plugin: (Winamp Application Detector) - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll (Nullsoft) CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File CHR Plugin: (Facebook Desktop) - C:\Users\Joanna\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll No File CHR Plugin: (Google Update) - C:\Users\Joanna\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll No File CHR CustomProfile: C:\Users\Joanna\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Wallet) - C:\Users\Joanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-06] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 BR_Launcher; C:\Program Files\Cyfrowy Polsat HSPA\Cyfrowy Polsat B150\BRService.exe [105432 2011-10-25] (Cyfrowy Polsat) R2 CLPSLauncher; C:\Program Files\Common Files\COMODO\launcher_service.exe [70864 2014-07-25] (Comodo Security Solutions, Inc.) R2 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136 2008-12-24] () R2 GeekBuddyRSP; C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-07-25] (Comodo Security Solutions, Inc.) S2 lxdxCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe [94208 2009-10-16] (Lexmark International, Inc.) [File not signed] R2 lxdx_device; C:\Windows\system32\lxdxcoms.exe [594600 2008-02-28] ( ) R2 NVIDIA Performance Driver Service; C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [4440064 2009-04-28] () [File not signed] S2 RaMediaServer; C:\Program Files\Ralink\Common\RaMediaServer.exe [625728 2011-08-18] () R2 RealtekUSB; C:\Program Files\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe [36864 2007-07-27] (Realtek) [File not signed] S3 ufad-ws60; C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe [186928 2007-08-07] (VMware, Inc.) R2 VMAuthdService; C:\Program Files\VMware\VMware Workstation\vmware-authd.exe [109104 2007-10-08] (VMware, Inc.) R2 VMnetDHCP; C:\Windows\system32\vmnetdhcp.exe [121392 2007-10-08] (VMware, Inc.) R2 vmount2; C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe [269104 2007-03-23] (VMware, Inc.) R2 VMware NAT Service; C:\Windows\system32\vmnat.exe [150064 2007-10-08] (VMware, Inc.) U4 CmdAgent; "C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe" [X] S3 cmdvirth; "C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe" [X] S2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 arusb_lh; C:\Windows\System32\DRIVERS\arusb_lh.sys [484864 2010-04-27] (Atheros Communications, Inc.) R3 gdrv; C:\Windows\gdrv.sys [16608 2014-09-13] (Windows (R) 2000 DDK provider) R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [13560 2014-01-15] (GFI Software) R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [File not signed] R2 hcmon; C:\Windows\system32\Drivers\hcmon.sys [34864 2007-10-08] (VMware, Inc.) R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [15400 2014-06-26] () S3 ips_polsat_cdc_acm; C:\Windows\System32\DRIVERS\ips_polsat_cdc_acm.sys [85888 2011-01-12] (IPS) S3 ips_polsat_cdc_ecm; C:\Windows\System32\DRIVERS\ips_polsat_cdc_ecm.sys [51072 2011-01-12] (IPS) S3 ips_polsat_cpo; C:\Windows\System32\DRIVERS\ips_polsat_cpo.sys [9856 2011-01-12] (IPS) S3 ips_polsat_dc_enum; C:\Windows\System32\DRIVERS\ips_polsat_dc_enum.sys [82176 2011-01-12] (IPS) S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider) S3 RTL8187; C:\Windows\System32\DRIVERS\RTL8187.sys [335872 2008-06-28] (Realtek Semiconductor Corporation ) R1 RtlProt; C:\Windows\System32\DRIVERS\rtlprot.sys [25896 2007-04-23] (Windows (R) Codename Longhorn DDK provider) S3 s125bus; C:\Windows\System32\DRIVERS\s125bus.sys [83336 2007-04-24] (MCCI Corporation) S3 s125mdfl; C:\Windows\System32\DRIVERS\s125mdfl.sys [15112 2007-04-24] (MCCI Corporation) S3 s125mdm; C:\Windows\System32\DRIVERS\s125mdm.sys [108680 2007-04-24] (MCCI Corporation) S3 s125mgmt; C:\Windows\System32\DRIVERS\s125mgmt.sys [100488 2007-04-24] (MCCI Corporation) S3 s125obex; C:\Windows\System32\DRIVERS\s125obex.sys [98696 2007-04-24] (MCCI Corporation) S3 siusbmod; C:\Windows\System32\DRIVERS\siusbmod.sys [27008 2005-07-28] (Siemens AG ) R0 speedfan; C:\Windows\System32\speedfan.sys [5248 2006-09-24] (Windows (R) 2000 DDK provider) [File not signed] R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed] S3 vmkbd; C:\Windows\system32\drivers\VMkbd.sys [20912 2007-10-08] (VMware, Inc.) S3 VMnetAdapter; C:\Windows\System32\DRIVERS\vmnetadapter.sys [16816 2007-10-08] (VMware, Inc.) R2 VMnetBridge; C:\Windows\System32\DRIVERS\vmnetbridge.sys [28592 2007-10-08] (VMware, Inc.) R2 VMnetuserif; C:\Windows\system32\drivers\vmnetuserif.sys [25008 2007-10-08] (VMware, Inc.) S2 VMparport; C:\Windows\system32\Drivers\VMparport.sys [15920 2007-10-08] (VMware, Inc.) S3 vmusb; C:\Windows\System32\Drivers\vmusb.sys [30768 2007-10-08] (VMware, Inc.) R2 vmx86; C:\Windows\system32\Drivers\vmx86.sys [924976 2007-10-08] (VMware, Inc.) R2 vstor2; C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vstor2.sys [18480 2007-03-23] (VMware, Inc.) R2 vstor2-ws60; C:\Program Files\VMware\VMware Workstation\vstor2-ws60.sys [19248 2007-08-07] (VMware, Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-19] (Microsoft Corporation) S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-13 13:01 - 2014-09-13 13:03 - 00016989 _____ () C:\Users\Joanna\Desktop\FRST.txt 2014-09-13 13:00 - 2014-09-13 13:01 - 00000000 ____D () C:\FRST 2014-09-13 12:59 - 2014-09-13 12:59 - 01097728 _____ (Farbar) C:\Users\Joanna\Desktop\FRST.exe 2014-09-13 12:18 - 2011-04-22 04:04 - 05493014 _____ (Forum Volunteers) C:\Users\Joanna\Desktop\Uninstaller Tool.exe 2014-09-12 21:30 - 2014-09-12 21:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-09-09 18:47 - 2014-09-13 12:23 - 00000000 ____D () C:\Users\Joanna\AppData\Roaming\Uninstaller Tool(Comodo Forums) 2014-09-09 18:46 - 2014-09-09 18:46 - 05075834 _____ () C:\Users\Joanna\Desktop\Setup_www.INSTALKI.pl.zip 2014-09-06 13:50 - 2014-09-06 13:50 - 00511306 _____ () C:\Users\Joanna\Desktop\Autoruns.zip 2014-09-06 13:47 - 2014-09-06 13:45 - 03445072 _____ () C:\Users\Joanna\Desktop\Raport kondycji systemu.html 2014-09-06 13:33 - 2014-09-06 13:33 - 00602112 _____ (OldTimer Tools) C:\OTL.exe 2014-09-06 13:07 - 2014-09-10 17:10 - 00000000 ____D () C:\AdwCleaner 2014-09-06 13:07 - 2014-09-06 13:07 - 01370467 _____ () C:\Users\Joanna\Desktop\adwcleaner_3.309.exe 2014-09-04 09:11 - 2014-09-04 12:18 - 00000000 ____D () C:\Users\Joanna\Desktop\FB 2014-09-04 08:48 - 2014-09-04 12:09 - 00000000 ____D () C:\Users\Joanna\Desktop\03.09.2014 2014-08-30 18:33 - 2014-08-30 18:33 - 00387007 _____ () C:\ProgramData\SPL3F59.tmp 2014-08-16 13:00 - 2014-08-16 13:00 - 00000000 ____D () C:\Users\Joanna\Desktop\LG 2014 2014-08-14 13:13 - 2014-08-21 16:49 - 00000000 ____D () C:\Users\Joanna\Desktop\CV PHOTO ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-13 13:03 - 2014-09-13 13:01 - 00016989 _____ () C:\Users\Joanna\Desktop\FRST.txt 2014-09-13 13:03 - 2010-07-20 12:54 - 00000000 ____D () C:\ProgramData\TEMP 2014-09-13 13:01 - 2014-09-13 13:00 - 00000000 ____D () C:\FRST 2014-09-13 12:59 - 2014-09-13 12:59 - 01097728 _____ (Farbar) C:\Users\Joanna\Desktop\FRST.exe 2014-09-13 12:59 - 2011-08-19 16:52 - 00000418 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{A6C21D97-E8FA-48C3-80F9-DECFDCB25523}.job 2014-09-13 12:59 - 2010-06-21 17:34 - 00000422 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{C2A7AFD6-ECE9-4E88-96F0-DD5714E66EE7}.job 2014-09-13 12:42 - 2006-11-02 14:52 - 01517973 _____ () C:\Windows\WindowsUpdate.log 2014-09-13 12:39 - 2013-05-07 22:36 - 00000000 ____D () C:\ProgramData\VMware 2014-09-13 12:39 - 2013-01-25 17:09 - 00000125 _____ () C:\service.log 2014-09-13 12:38 - 2011-08-05 15:41 - 00016608 _____ (Windows (R) 2000 DDK provider) C:\Windows\gdrv.sys 2014-09-13 12:38 - 2010-06-17 06:26 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-09-13 12:38 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-13 12:38 - 2006-11-02 14:47 - 00003664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-13 12:38 - 2006-11-02 14:47 - 00003664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-13 12:37 - 2006-11-02 15:01 - 00032590 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-09-13 12:25 - 2014-04-21 21:50 - 00000000 ____D () C:\Users\Joanna\AppData\Local\Comodo 2014-09-13 12:25 - 2014-04-21 21:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo 2014-09-13 12:25 - 2014-04-21 21:50 - 00000000 ____D () C:\Program Files\Comodo 2014-09-13 12:24 - 2014-04-21 21:49 - 00000000 ____D () C:\ProgramData\Comodo 2014-09-13 12:23 - 2014-09-09 18:47 - 00000000 ____D () C:\Users\Joanna\AppData\Roaming\Uninstaller Tool(Comodo Forums) 2014-09-13 12:15 - 2012-06-12 09:21 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-09-13 11:59 - 2011-12-27 15:09 - 00000000 ____D () C:\Users\Joanna\AppData\Roaming\Media Player Classic 2014-09-13 11:07 - 2012-08-22 23:55 - 00000420 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{9C2D38E0-ADA5-40BB-8DD2-75E221080E48}.job 2014-09-12 22:54 - 2010-05-03 14:31 - 00138240 _____ () C:\Users\Joanna\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-09-12 22:18 - 2013-11-24 08:27 - 00000000 ____D () C:\Users\Joanna\AppData\Roaming\Free Download Manager 2014-09-12 21:30 - 2014-09-12 21:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-09-12 09:06 - 2014-02-16 19:38 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-12 09:06 - 2010-06-22 15:33 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-09-12 09:01 - 2006-11-02 12:24 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-09-10 17:11 - 2013-10-03 12:13 - 00243880 _____ () C:\Windows\PFRO.log 2014-09-10 17:10 - 2014-09-06 13:07 - 00000000 ____D () C:\AdwCleaner 2014-09-10 17:10 - 2014-04-21 22:08 - 00594408 _____ () C:\Windows\system32\Drivers\fvstore.dat 2014-09-10 16:54 - 2014-04-21 22:08 - 00000000 ___HD () C:\VTRoot 2014-09-10 15:52 - 2013-11-19 20:57 - 00000000 ____D () C:\Users\Joanna\AppData\Roaming\foobar2000 2014-09-09 21:17 - 2014-08-03 12:49 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-09 21:11 - 2014-06-01 11:20 - 00000000 ____D () C:\Users\Joanna\Desktop\Piosenki Niemcy 2014-09-09 20:42 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc 2014-09-09 20:41 - 2012-11-23 21:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyfrowy Polsat HSPA 2014-09-09 20:41 - 2012-11-23 21:48 - 00000000 ____D () C:\Program Files\Cyfrowy Polsat HSPA 2014-09-09 20:41 - 2011-04-21 20:13 - 00000000 ____D () C:\Users\Administrator 2014-09-09 20:41 - 2010-06-23 09:57 - 00000000 ____D () C:\Users\Guest 2014-09-09 20:41 - 2010-06-21 16:29 - 00000000 ____D () C:\Users\Justyna 2014-09-09 20:41 - 2010-05-03 02:56 - 00000000 ____D () C:\Users\Joanna 2014-09-09 20:41 - 2010-05-02 20:36 - 00000000 ____D () C:\Users\Kamil 2014-09-09 20:41 - 2010-05-02 19:01 - 00000000 ____D () C:\Users\Joanna\AppData\Roaming\Winamp 2014-09-09 20:41 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool 2014-09-09 20:41 - 2006-11-02 12:22 - 46137344 _____ () C:\Windows\system32\config\software_previous 2014-09-09 20:41 - 2006-11-02 12:22 - 41943040 _____ () C:\Windows\system32\config\system_previous 2014-09-09 20:41 - 2006-11-02 12:22 - 36438016 _____ () C:\Windows\system32\config\components_previous 2014-09-09 20:41 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous 2014-09-09 20:41 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous 2014-09-09 20:41 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\default_previous 2014-09-09 20:40 - 2014-04-21 21:50 - 00000000 ____D () C:\Program Files\AdTrustMedia 2014-09-09 20:40 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration 2014-09-09 19:43 - 2010-05-03 02:56 - 00008592 _____ () C:\Users\Joanna\AppData\Local\d3d9caps.dat 2014-09-09 18:46 - 2014-09-09 18:46 - 05075834 _____ () C:\Users\Joanna\Desktop\Setup_www.INSTALKI.pl.zip 2014-09-06 13:50 - 2014-09-06 13:50 - 00511306 _____ () C:\Users\Joanna\Desktop\Autoruns.zip 2014-09-06 13:45 - 2014-09-06 13:47 - 03445072 _____ () C:\Users\Joanna\Desktop\Raport kondycji systemu.html 2014-09-06 13:33 - 2014-09-06 13:33 - 00602112 _____ (OldTimer Tools) C:\OTL.exe 2014-09-06 13:07 - 2014-09-06 13:07 - 01370467 _____ () C:\Users\Joanna\Desktop\adwcleaner_3.309.exe 2014-09-06 12:41 - 2013-03-13 08:17 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-06 12:41 - 2013-01-16 07:06 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-06 12:41 - 2013-01-16 07:06 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-06 12:41 - 2012-04-26 00:51 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2620197854-1719786493-1418023469-1000UA.job 2014-09-06 12:41 - 2012-04-26 00:51 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2620197854-1719786493-1418023469-1000Core.job 2014-09-04 12:18 - 2014-09-04 09:11 - 00000000 ____D () C:\Users\Joanna\Desktop\FB 2014-09-04 12:09 - 2014-09-04 08:48 - 00000000 ____D () C:\Users\Joanna\Desktop\03.09.2014 2014-08-30 18:42 - 2010-05-02 18:57 - 00000000 ____D () C:\ProgramData\lx_cats 2014-08-30 18:33 - 2014-08-30 18:33 - 00387007 _____ () C:\ProgramData\SPL3F59.tmp 2014-08-29 21:47 - 2012-06-28 14:55 - 00000000 ____D () C:\Users\Joanna\AppData\Local\CrashDumps 2014-08-26 14:36 - 2014-04-22 15:22 - 00000000 ____D () C:\Users\Joanna\Desktop\prezentacja 2014 2014-08-25 15:45 - 2013-11-09 20:45 - 00000000 ____D () C:\Users\Joanna\Desktop\ZDJECIA 2014-08-21 16:49 - 2014-08-14 13:13 - 00000000 ____D () C:\Users\Joanna\Desktop\CV PHOTO 2014-08-16 16:16 - 2011-01-23 19:03 - 00000000 ____D () C:\Users\Joanna\Desktop\Programy 2014-08-16 13:00 - 2014-08-16 13:00 - 00000000 ____D () C:\Users\Joanna\Desktop\LG 2014 ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-13 12:44 ==================== End Of Log ============================