Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-01-2015 01
Ran by Osia (administrator) on VENESSA-LAPTOP on 14-01-2015 09:15:45
Running from D:\Moje dokumenty\Downloads
Loaded Profile: Osia (Available profiles: Osia)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(Intel Corporation) C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
(Intel Corporation ) C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
(Intel(R) Corporation) C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Intel Corporation) C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Intel Corporation) C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe
(Intel Corporation) C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\hidfind.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelZeroConfig] => C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [819200 2007-02-21] (Intel Corporation)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [970752 2007-02-21] (Intel Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [176128 2005-10-07] (Alps Electric Co., Ltd.)
HKLM\...\Run: [igfxhkcmd] => C:\WINDOWS\system32\hkcmd.exe [77824 2006-09-15] (Intel Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre7\bin\jusched.exe
HKU\S-1-5-21-606747145-1844823847-839522115-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-606747145-1844823847-839522115-1003 -> {4D66D1F7-FF6B-49EE-87A8-3D23A00325FA} URL = https://www.google.com/search?q={searchTerms}
BHO: EWPBrowseObject Class -> {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} -> C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll ()
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_71-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0071-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_71-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
Tcpip\..\Interfaces\{068F7EB2-4F93-4C46-A197-3142F1C1AA7D}: [NameServer] 4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

FireFox:
========

Chrome: 
=======
CHR Profile: C:\Documents and Settings\Osia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\Osia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-01-23]
CHR Extension: (YouTube) - C:\Documents and Settings\Osia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-23]
CHR Extension: (Szukaj w Google) - C:\Documents and Settings\Osia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-23]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Osia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-15]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 EvtEng; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [643072 2007-02-21] (Intel Corporation) [File not signed]
S4 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [90112 2009-10-14] (France Telecom SA) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-10-31] (Oracle Corporation)
R2 RegSrvc; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [327680 2007-02-21] (Intel Corporation) [File not signed]
R2 S24EventMonitor; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [983040 2007-02-21] (Intel Corporation ) [File not signed]
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [770944 2015-01-12] (Enigma Software Group USA, LLC.)
R2 WLANKEEPER; C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe [294912 2007-02-21] (Intel(R) Corporation) [File not signed]
S3 COMSysApp; C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
S3 SwPrv; C:\WINDOWS\system32\dllhost.exe /Processid:{46FC9F12-1C49-4AF7-B947-271166CF9597}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21425 2009-12-08] (Meetinghouse Data Communications) [File not signed]
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-01-12] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2015-01-12] ()
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2009-11-02] () [File not signed]
S3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [57672 2012-12-07] (FTDI Ltd.)
R3 GTIPCI21; C:\WINDOWS\System32\DRIVERS\gtipci21.sys [88192 2006-04-06] (Texas Instruments)
R3 HSFHWICH; C:\WINDOWS\System32\DRIVERS\HSFHWICH.sys [208384 2005-05-03] (Conexant Systems, Inc.)
R3 HSF_DPV; C:\WINDOWS\System32\DRIVERS\HSF_DPV.SYS [1033728 2005-05-03] (Conexant Systems, Inc.)
S3 hwusbfake; C:\WINDOWS\System32\DRIVERS\ewusbfake.sys [102656 2009-08-04] (Huawei Technologies Co., Ltd.)
S3 PCAMPR5; C:\WINDOWS\system32\PCAMPR5.SYS [34688 2003-09-23] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 PCANDIS5; C:\WINDOWS\system32\PCANDIS5.SYS [32128 2006-03-01] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 s1039mdm; C:\WINDOWS\System32\DRIVERS\s1039mdm.sys [124016 2010-03-01] (MCCI Corporation)
R2 s24trans; C:\WINDOWS\System32\DRIVERS\s24trans.sys [12416 2007-02-21] (Intel Corporation) [File not signed]
S3 SE27bus; C:\WINDOWS\System32\DRIVERS\SE27bus.sys [61600 2006-09-18] (MCCI) [File not signed]
S3 SE27mdfl; C:\WINDOWS\System32\DRIVERS\SE27mdfl.sys [9360 2006-09-18] (MCCI) [File not signed]
S3 SE27mdm; C:\WINDOWS\System32\DRIVERS\SE27mdm.sys [97184 2006-09-18] (MCCI) [File not signed]
S3 SE27mgmt; C:\WINDOWS\System32\DRIVERS\SE27mgmt.sys [88688 2006-09-18] (MCCI) [File not signed]
S3 se27nd5; C:\WINDOWS\System32\DRIVERS\se27nd5.sys [18704 2006-09-18] (MCCI) [File not signed]
S3 SE27obex; C:\WINDOWS\System32\DRIVERS\SE27obex.sys [86560 2006-09-18] (MCCI) [File not signed]
S3 se27unic; C:\WINDOWS\System32\DRIVERS\se27unic.sys [90800 2006-09-18] (MCCI) [File not signed]
R3 STAC97; C:\WINDOWS\System32\drivers\STAC97.sys [273168 2005-03-10] (SigmaTel, Inc.)
R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]
S2 VPUSB; C:\WINDOWS\System32\Drivers\vpusb.sys [18048 2006-07-10] (WEILEI) [File not signed]
R3 w29n51; C:\WINDOWS\System32\DRIVERS\w29n51.sys [2209408 2007-02-08] (Intel® Corporation)
R3 WinDriver6; C:\WINDOWS\System32\drivers\windrvr6.sys [195424 2012-12-07] (Jungo) [File not signed]
R2 zntport; C:\WINDOWS\system32\zntport.sys [6560 2002-11-29] (Zeal SoftStudio) [File not signed]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-14 08:39 - 2015-01-14 08:39 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-01-14 08:39 - 2015-01-14 08:39 - 00000000 _____ () C:\WINDOWS\setupact.log
2015-01-12 18:45 - 2015-01-12 18:45 - 00079983 _____ () C:\spyhunter.log
2015-01-12 18:37 - 2015-01-13 08:35 - 00000000 ____D () C:\Documents and Settings\Osia\Pulpit\SKAN SYSTEMU
2015-01-12 18:29 - 2015-01-14 09:15 - 00000000 ____D () C:\FRST
2015-01-12 18:06 - 2015-01-12 18:11 - 00000000 ____D () C:\AdwCleaner
2015-01-12 17:45 - 2015-01-12 17:46 - 00014771 _____ () C:\sh4_service.log
2015-01-12 12:21 - 2015-01-12 12:21 - 00000000 ____D () C:\Documents and Settings\Osia\Dane aplikacji\Enigma Software Group
2015-01-12 12:20 - 2015-01-12 12:20 - 00000000 ____D () C:\sh4ldr
2015-01-12 12:15 - 2015-01-12 12:15 - 00019984 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-01-12 12:14 - 2015-01-12 12:14 - 00000000 ____D () C:\Program Files\Enigma Software Group

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-14 09:16 - 2009-12-07 14:51 - 00000000 ____D () C:\Documents and Settings\Osia\Ustawienia lokalne\Temp
2015-01-14 09:15 - 2009-12-07 14:44 - 01681630 ____C () C:\WINDOWS\WindowsUpdate.log
2015-01-14 09:14 - 2010-05-12 13:13 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-14 09:14 - 2009-12-07 15:36 - 00000159 ____C () C:\WINDOWS\wiadebug.log
2015-01-14 09:14 - 2009-12-07 15:36 - 00000050 ____C () C:\WINDOWS\wiaservc.log
2015-01-14 09:14 - 2009-12-07 15:26 - 00000000 ____D () C:\WINDOWS\system32\ias
2015-01-14 09:14 - 2009-12-07 14:51 - 00000000 __SHD () C:\Documents and Settings\Osia\Ustawienia lokalne\Historia
2015-01-14 09:14 - 2009-12-07 14:49 - 00000000 __SHD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Historia
2015-01-14 09:13 - 2009-12-07 14:51 - 00000188 __SHC () C:\Documents and Settings\Osia\ntuser.ini
2015-01-14 09:13 - 2009-12-07 14:49 - 00032394 _____ () C:\WINDOWS\SchedLgU.Txt
2015-01-14 09:13 - 2009-12-07 14:49 - 00000006 ___HC () C:\WINDOWS\Tasks\SA.DAT
2015-01-14 09:10 - 2014-09-17 09:53 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy
2015-01-14 09:10 - 2009-12-07 15:33 - 00000000 __SHD () C:\Documents and Settings\Default User\Ustawienia lokalne\Historia
2015-01-14 09:10 - 2009-12-07 15:32 - 00000000 ___HD () C:\Documents and Settings\All Users\Dane aplikacji
2015-01-14 09:10 - 2009-12-07 14:51 - 00000000 __RHD () C:\Documents and Settings\Osia\Dane aplikacji
2015-01-14 09:10 - 2009-12-07 14:49 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Historia
2015-01-14 09:10 - 2009-12-07 14:49 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Temp
2015-01-14 09:08 - 2010-05-12 13:13 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-14 08:57 - 2014-11-28 10:19 - 00049372 _____ () C:\WINDOWS\setupapi.log
2015-01-14 08:56 - 2010-05-29 18:03 - 03140840 _____ () C:\debug.txt
2015-01-14 08:52 - 2009-12-10 11:19 - 00000000 ____D () C:\Program Files\Java
2015-01-14 08:52 - 2009-12-10 11:19 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-01-14 08:40 - 2009-12-07 15:33 - 02121999 ____C () C:\WINDOWS\FaxSetup.log
2015-01-14 08:40 - 2009-12-07 15:33 - 01068549 ____C () C:\WINDOWS\ocgen.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00997394 ____C () C:\WINDOWS\tsoc.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00711027 ____C () C:\WINDOWS\comsetup.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00431804 ____C () C:\WINDOWS\ntdtcsetup.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00404737 ____C () C:\WINDOWS\iis6.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00375879 ____C () C:\WINDOWS\netfxocm.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00151330 ____C () C:\WINDOWS\MedCtrOC.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00128398 ____C () C:\WINDOWS\ocmsn.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00109860 ____C () C:\WINDOWS\tabletoc.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00106750 ____C () C:\WINDOWS\msgsocm.log
2015-01-14 08:40 - 2009-12-07 15:33 - 00001917 _____ () C:\WINDOWS\imsins.log
2015-01-14 08:39 - 2009-12-07 15:33 - 00678828 ____C () C:\WINDOWS\msmqinst.log
2015-01-13 15:22 - 2009-12-07 14:51 - 00000000 ____D () C:\Documents and Settings\Osia\Pulpit
2015-01-13 10:51 - 2009-12-07 15:33 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-01-12 17:45 - 2009-12-07 14:51 - 00000000 ____D () C:\Documents and Settings\Osia
2015-01-12 16:32 - 2014-11-28 10:04 - 00000809 _____ () C:\Documents and Settings\Osia\Menu Start\Programy\Internet Explorer.lnk
2015-01-12 16:32 - 2009-12-07 14:51 - 00000803 ____C () C:\Documents and Settings\Osia\Pulpit\Internet Explorer.lnk
2015-01-12 12:40 - 2009-12-07 14:51 - 00001605 ____C () C:\Documents and Settings\Osia\Menu Start\Programy\Pomoc zdalna.lnk
2015-01-12 12:38 - 2009-12-07 14:46 - 00001605 ____C () C:\Documents and Settings\Default User\Menu Start\Programy\Pomoc zdalna.lnk
2015-01-12 12:38 - 2009-12-07 14:46 - 00001569 ____C () C:\Documents and Settings\All Users\Menu Start\Określ dostęp do programów i ich ustawienia domyślne.lnk
2015-01-12 12:38 - 2009-12-07 14:46 - 00001513 ____C () C:\Documents and Settings\All Users\Menu Start\Windows Update.lnk
2015-01-12 12:20 - 2004-08-03 21:59 - 00285747 _____ () C:\shldr
2015-01-12 12:16 - 2014-08-15 16:11 - 00001825 ____C () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2015-01-12 11:14 - 2009-12-07 15:33 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2015-01-12 08:48 - 2001-07-21 21:17 - 00002206 ____C () C:\WINDOWS\system32\wpa.dbl
2015-01-05 13:29 - 2009-12-07 14:51 - 00000000 ___HD () C:\Documents and Settings\Osia\Ustawienia lokalne\Dane aplikacji
2014-12-31 11:44 - 2011-02-19 23:03 - 00421040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp100.dll
2014-12-31 11:44 - 2011-02-19 00:40 - 00773808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100.dll
2014-12-19 19:01 - 2013-08-03 20:51 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-19 18:48 - 2010-01-11 09:42 - 109818608 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================