Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-10-2014
Ran by pip (administrator) on LAP on 12-10-2014 19:57:19
Running from C:\Documents and Settings\pip\Moje dokumenty
Loaded Profile: pip (Available profiles: pip)
Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(S3 Graphics, Inc.) C:\WINDOWS\system32\VTTimer.exe
(S3 Graphics Co., Ltd.) C:\WINDOWS\system32\S3Trayp.exe
() C:\WINDOWS\FixCamera.exe
() C:\WINDOWS\tsnp325.exe
() C:\WINDOWS\vsnp325.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
() C:\WINDOWS\vsnpstd3.exe
() C:\WINDOWS\tsnpstd3.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Gadu-Gadu S.A.) C:\Program Files\Gadu-Gadu\gg.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\old_chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [VTTimer] => C:\WINDOWS\system32\VTTimer.exe [53248 2006-09-21] (S3 Graphics, Inc.)
HKLM\...\Run: [S3Trayp] => C:\WINDOWS\system32\S3trayp.exe [176128 2007-02-06] (S3 Graphics Co., Ltd.)
HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [778240 2007-02-01] (VIA Technologies, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [FixCamera] => C:\WINDOWS\FixCamera.exe [20480 2007-07-11] ()
HKLM\...\Run: [tsnp325] => C:\WINDOWS\tsnp325.exe [270336 2007-04-21] ()
HKLM\...\Run: [snp325] => C:\WINDOWS\vsnp325.exe [835584 2007-05-10] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3873704 2014-06-02] (AVAST Software)
HKLM\...\Run: [snpstd3] => C:\WINDOWS\vsnpstd3.exe [835584 2007-05-10] ()
HKLM\...\Run: [tsnpstd3] => C:\WINDOWS\tsnpstd3.exe [339968 2009-06-30] ()
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-04-23] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-1177238915-1364589140-2147126749-1004\...\Run: [MyCuteBuddy] => "C:\Program Files\My Cute Buddy\myCuteBuddy.exe" "file:///C:/Program Files/My Cute Buddy/Content/Cute Kitty/piticho.buddy" /m /u
HKU\S-1-5-21-1177238915-1364589140-2147126749-1004\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1561968 2013-04-23] (Samsung)
HKU\S-1-5-21-1177238915-1364589140-2147126749-1004\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2014-01-23] (Samsung Electronics)
HKU\S-1-5-21-1177238915-1364589140-2147126749-1004\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-04-23] (Samsung)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} -  No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {F229FD27-478C-4721-B1B5-4FE8489C5C02} URL = http://www.search.ask.com/web?p2=%5EB7N%5EYYYYYY%5EYY%5EPL&gct=sb&itbv=12.5.1.1394&o=APN11293&tpid=CME-V7&apn_uid=F0F1FF53-5F25-4AFC-807E-FC61D70F5774&apn_ptnrs=%5EB7N&apn_dtid=%5EYYYYYY%5EYY%5EPL&apn_dbr=cr_30.0.1599.66&doi=2013-10-05&trgb=IE&q={searchTerms}&psv=barid%253D293522355910580848898306455903316070835%2526cargo%253DCME%252DV7%2526spr%253Da%2526did%253D10714%2526ppd%253D
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {434D452D-5637-006A-76A7-7A786E7484D7} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\pip\Dane aplikacji\Mozilla\Firefox\Profiles\nfci53a5.default
FF Homepage: www.onet.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @cuminas.jp/DjVuPlugin -> C:\Program Files\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Documents and Settings\pip\Dane aplikacji\Mozilla\Firefox\Profiles\nfci53a5.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdjvu.dll (LizardTech)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Documents and Settings\pip\Dane aplikacji\Mozilla\Firefox\profiles\extensions\extensions [2013-10-24]
FF Extension: No Name - C:\Documents and Settings\pip\Dane aplikacji\Mozilla\Firefox\profiles\extensions\searchplugins [2013-10-24]
FF Extension: HDvid Codec 3 - C:\Documents and Settings\pip\Dane aplikacji\Mozilla\Firefox\profiles\extensions\hdvc3@hdvidcodec.com.xpi [2013-06-30]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF

Chrome: 
=======
CHR Profile: C:\Documents and Settings\pip\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Google Wallet) - C:\Documents and Settings\pip\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-21]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-06-02] (AVAST Software)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-08-10] (Oracle Corporation)
S2 ICM_UpdaterService; C:\Program Files\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AR5211; C:\WINDOWS\System32\DRIVERS\ar5211.sys [528736 2006-10-16] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-06-02] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-06-02] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-06-02] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-06-02] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [777488 2014-06-02] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411680 2014-06-02] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-06-02] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-06-02] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R3 FETNDIS; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc.              )
R3 HdAudAddService; C:\WINDOWS\System32\drivers\viahduaa.sys [192256 2007-01-16] (VIA Technologies, Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 S3GIGP; C:\WINDOWS\System32\DRIVERS\S3gIGPm.sys [709632 2007-03-05] (S3 Graphics Co., Ltd.)
S3 SNP325; C:\WINDOWS\System32\DRIVERS\snp325.sys [10475264 2008-03-07] (Sonix Co. Ltd.) [File not signed]
S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-12 19:57 - 2014-10-12 19:57 - 00011125 _____ () C:\Documents and Settings\pip\Moje dokumenty\FRST.txt
2014-10-12 19:56 - 2014-10-12 19:57 - 00000000 ____D () C:\FRST
2014-10-12 19:55 - 2014-10-12 19:56 - 01101824 _____ (Farbar) C:\Documents and Settings\pip\Moje dokumenty\FRST.exe
2014-10-12 19:09 - 2014-10-12 19:09 - 04120807 _____ () C:\Documents and Settings\pip\Moje dokumenty\z.zip
2014-10-12 18:51 - 2014-10-12 18:51 - 00000060 _____ () C:\WINDOWS\setupact.log
2014-10-12 18:51 - 2014-10-12 18:51 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-10-12 18:43 - 2014-10-12 18:43 - 00000548 _____ () C:\Documents and Settings\pip\Pulpit\Total Commander.lnk
2014-10-12 18:43 - 2014-10-12 18:43 - 00000000 ____D () C:\totalcmd
2014-10-12 18:43 - 2014-10-12 18:43 - 00000000 ____D () C:\Documents and Settings\pip\Menu Start\Programy\Total Commander
2014-10-12 15:11 - 2014-10-12 15:11 - 00000000 ____D () C:\Documents and Settings\pip\Moje dokumenty\_)))
2014-10-11 17:52 - 2014-10-12 18:51 - 00000000 ____D () C:\Documents and Settings\pip\Moje dokumenty\uuu
2014-09-17 08:47 - 2014-10-12 11:53 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk
2014-09-17 08:47 - 2014-09-17 08:47 - 00000000 ___RD () C:\Program Files\Skype
2014-09-17 08:47 - 2014-09-17 08:47 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-09-17 08:47 - 2014-09-17 08:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Skype

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-12 19:58 - 2013-09-18 17:43 - 00000000 ____D () C:\Documents and Settings\pip\Ustawienia lokalne\Temp
2014-10-12 19:57 - 2013-09-18 17:43 - 00000000 ___RD () C:\Documents and Settings\pip\Moje dokumenty
2014-10-12 19:56 - 2014-03-25 15:39 - 00657970 ___SH () C:\Documents and Settings\pip\Moje dokumenty\Thumbs.db
2014-10-12 19:45 - 2013-11-19 15:01 - 00000366 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-10-12 19:41 - 2013-09-18 17:35 - 01728999 _____ () C:\WINDOWS\WindowsUpdate.log
2014-10-12 19:40 - 2013-09-30 20:55 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-10-12 19:40 - 2013-09-30 20:55 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-10-12 19:40 - 2013-09-21 11:19 - 00001026 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-12 19:40 - 2013-09-18 17:41 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-10-12 19:12 - 2013-09-18 17:43 - 00000292 ___SH () C:\Documents and Settings\pip\ntuser.ini
2014-10-12 19:12 - 2013-09-18 17:41 - 00032542 _____ () C:\WINDOWS\SchedLgU.Txt
2014-10-12 19:02 - 2013-09-21 11:19 - 00001030 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-12 18:43 - 2014-02-13 23:09 - 00000000 ____D () C:\Documents and Settings\pip\Dane aplikacji\GHISLER
2014-10-12 18:43 - 2013-09-18 17:43 - 00000000 ___RD () C:\Documents and Settings\pip\Menu Start\Programy
2014-10-12 18:43 - 2013-09-18 17:43 - 00000000 ____D () C:\Documents and Settings\pip\Pulpit
2014-10-12 18:23 - 2013-10-12 00:18 - 00000000 ____D () C:\Documents and Settings\pip\Dane aplikacji\Media Player Classic
2014-10-12 18:14 - 2013-09-21 11:06 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-10-12 17:18 - 2013-12-20 21:27 - 00000000 ____D () C:\Documents and Settings\pip\Dane aplikacji\Skype
2014-10-12 16:41 - 2013-09-20 18:52 - 00000000 ____D () C:\Documents and Settings\pip\Dane aplikacji\Winamp
2014-10-12 16:39 - 2013-09-18 17:43 - 00000000 ____D () C:\Documents and Settings\pip
2014-10-12 15:14 - 2014-01-20 13:09 - 00018944 _____ () C:\Documents and Settings\pip\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-11 13:34 - 2014-08-22 17:49 - 00000000 ____D () C:\Documents and Settings\pip\Moje dokumenty\Lato 2014
2014-10-10 18:21 - 2013-10-15 23:34 - 00000012 _____ () C:\Documents and Settings\pip\intlname.ols
2014-10-09 14:02 - 2013-09-18 17:43 - 00000000 ___HD () C:\Documents and Settings\pip\Ustawienia lokalne\Dane aplikacji
2014-10-08 16:30 - 2013-09-21 18:04 - 00000000 ____D () C:\Documents and Settings\pip\Ustawienia lokalne\Dane aplikacji\Last.fm
2014-10-08 15:00 - 2014-06-02 21:52 - 00000212 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
2014-09-25 10:19 - 2013-09-21 11:22 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-09-24 17:01 - 2013-09-21 17:21 - 00000000 ____D () C:\Program Files\Gadu-Gadu
2014-09-23 20:38 - 2013-09-25 08:52 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Skype
2014-09-20 10:37 - 2013-09-21 17:38 - 00002539 _____ () C:\Documents and Settings\pip\Pulpit\Microsoft Office Word 2003.lnk
2014-09-19 16:48 - 2013-09-21 17:22 - 00000000 ____D () C:\Documents and Settings\pip\Gadu-Gadu
2014-09-17 08:47 - 2013-09-18 19:17 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-09-17 08:47 - 2013-09-18 19:17 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit

Files to move or delete:
====================
C:\Documents and Settings\pip\cygcrypto-0.9.8.dll
C:\Documents and Settings\pip\cyggcc_s-1.dll
C:\Documents and Settings\pip\cygssl-0.9.8.dll
C:\Documents and Settings\pip\cygwin1.dll
C:\Documents and Settings\pip\cygz.dll
C:\Documents and Settings\pip\hydra.exe
C:\Documents and Settings\pip\pw-inspector.exe


Some content of TEMP:
====================
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\AskSLib.dll
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\DotNetFx20Client_Package_x86.exe
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\DotNetFx20SP2ClientLangpack_pl_x86.exe
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\DotNetFx30SP2ClientLangpack_pl_x86.exe
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\DotNetFx35Client_Package_x86.exe
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\DotNetFx35SP1ClientLangpack_pl_x86.exe
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\jre-7u55-windows-i586-iftw.exe
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\jre-7u65-windows-i586-iftw.exe
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\jre-7u67-windows-i586-iftw.exe
C:\Documents and Settings\pip\Ustawienia lokalne\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================