Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Koksy (administrator) on KOKSY on 12-03-2015 16:59:10
Running from C:\Documents and Settings\Koksy\Pulpit
Loaded Profiles: Koksy (Available profiles: Koksy & Administrator)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Microsoft Corporation) C:\WINDOWS\system32\scardsvr.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Aladdin Knowledge Systems Ltd.) C:\WINDOWS\system32\hasplms.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [19573352 2010-09-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKU\S-1-5-21-484763869-329068152-839522115-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-484763869-329068152-839522115-1003\...\MountPoints2: {f0aee5d1-9f63-11e0-a348-001d7d52f81c} - I:\baza\Przegladarka.exe /p ik_012012max.mdb
HKU\S-1-5-21-484763869-329068152-839522115-1003\...\MountPoints2: {fc0c911f-3a64-11e0-a279-d85d4cd7e758} - G:\baza\Przegladarka.exe /p ik_012012max.mdb
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-484763869-329068152-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-484763869-329068152-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-09-26] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-09-26] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 172.21.222.0

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Koksy\Dane aplikacji\Mozilla\Firefox\Profiles\6qh1ae74.default
FF Homepage: hxxp://www.google.pl/
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-05] ()
FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files\Ganymede\Plugins\npganymedenet.dll No File
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-09-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-09-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2011-04-06] ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Extension: 20-20 3D Viewer - IKEA - C:\Documents and Settings\Koksy\Dane aplikacji\Mozilla\Firefox\Profiles\6qh1ae74.default\Extensions\2020Player_IKEA@2020Technologies.com [2015-01-18]
FF Extension: BPH Sign Plugin - C:\Documents and Settings\Koksy\Dane aplikacji\Mozilla\Firefox\Profiles\6qh1ae74.default\Extensions\SignPlugin@bph.pl [2013-05-24]
FF Extension: Twojanuta.pl - C:\Documents and Settings\Koksy\Dane aplikacji\Mozilla\Firefox\Profiles\6qh1ae74.default\Extensions\zacz3k@gmail.com.xpi [2011-08-14]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-05-11]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-01-16]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2014-05-28] (Macrovision Europe Ltd.) [File not signed]
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [2562048 2008-04-24] (Aladdin Knowledge Systems Ltd.)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-09-26] (Oracle Corporation)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACSSCR; C:\WINDOWS\System32\DRIVERS\a38usb.sys [37632 2009-12-15] (Advanced Card Systems Ltd)
R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21035 2011-11-02] (Meetinghouse Data Communications) [File not signed]
R2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [350720 2008-03-18] (Aladdin Knowledge Systems Ltd.)
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
S3 AR9271; C:\WINDOWS\System32\DRIVERS\athuw.sys [1714176 2010-01-05] (Atheros Communications, Inc.)
S3 BrScnUsb; C:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.)
R2 EAPPkt; C:\WINDOWS\System32\DRIVERS\EAPPkt.sys [38144 2006-11-15] (Windows (R) 2000 DDK provider) [File not signed]
S3 es1371; C:\WINDOWS\System32\drivers\es1371mp.sys [40704 2001-08-17] (Creative Technology Ltd.)
S3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation)
R2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [586240 2008-02-11] (Aladdin Knowledge Systems Ltd.)
R2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2011-09-08] (Aladdin Knowledge Systems) [File not signed]
R2 Kmm4xNT; C:\WINDOWS\system32\Drivers\Kmm4xNT.sys [95484 2002-04-26] (DATOM Dariusz Cielebąk) [File not signed]
S3 L1e; C:\WINDOWS\System32\DRIVERS\l1e51x86.sys [38400 2010-12-27] (Atheros Communications, Inc.)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [70912 2010-03-04] (NVIDIA Corporation)
R0 nvgts; C:\WINDOWS\System32\DRIVERS\nvgts.sys [168040 2010-04-08] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [13824 2010-03-04] (NVIDIA Corporation)
S3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
R3 rtl8185; C:\WINDOWS\System32\DRIVERS\rtl8185.sys [306688 2007-07-18] (Realtek Semiconductor Corporation                           ) [File not signed]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X]
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-12 16:59 - 2015-03-12 16:59 - 00010348 _____ () C:\Documents and Settings\Koksy\Pulpit\FRST.txt
2015-03-12 16:54 - 2015-03-12 16:54 - 01135104 _____ (Farbar) C:\Documents and Settings\Koksy\Pulpit\FRST.exe
2015-03-12 16:08 - 2015-03-12 16:23 - 00002003 _____ () C:\WINDOWS\setupapi.log
2015-03-12 10:14 - 2015-03-12 10:14 - 00000000 ____D () C:\Documents and Settings\Koksy\Menu Start\Programy\DiskInternals
2015-03-11 23:57 - 2015-03-11 23:57 - 02171392 _____ () C:\Documents and Settings\Koksy\Pulpit\adwcleaner_4.112.exe
2015-03-11 21:18 - 2015-03-11 21:18 - 04652117 _____ () C:\Documents and Settings\Koksy\Pulpit\kosztorys inwestorski popr 21.01.15 r do ARiMRU.rar
2015-02-17 10:37 - 2015-02-17 10:37 - 00000000 ____D () C:\Program Files\MSXML 4.0

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-12 16:59 - 2015-02-03 14:36 - 00000000 ____D () C:\FRST
2015-03-12 16:59 - 2010-12-22 11:08 - 00000000 ____D () C:\Documents and Settings\Koksy\Ustawienia lokalne\Temp
2015-03-12 16:59 - 2010-12-22 11:08 - 00000000 ____D () C:\Documents and Settings\Koksy\Pulpit
2015-03-12 16:43 - 2011-08-10 18:34 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-12 16:31 - 2010-12-22 10:55 - 02050723 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-12 16:30 - 2014-11-15 23:10 - 00000278 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-484763869-329068152-839522115-1003.job
2015-03-12 16:30 - 2011-08-10 18:34 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-12 16:30 - 2010-12-22 11:24 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-03-12 16:30 - 2010-12-22 11:24 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-03-12 16:30 - 2010-12-22 11:06 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-12 16:30 - 2010-03-16 03:37 - 00276202 _____ () C:\WINDOWS\system32\NvApps.xml
2015-03-12 16:29 - 2010-12-22 11:06 - 00032550 _____ () C:\WINDOWS\SchedLgU.Txt
2015-03-12 16:26 - 2014-12-22 09:35 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-03-12 16:08 - 2010-12-22 11:20 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2015-03-12 16:08 - 2010-12-22 11:20 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-03-12 10:14 - 2010-12-22 11:08 - 00000000 ___RD () C:\Documents and Settings\Koksy\Menu Start\Programy
2015-03-12 09:54 - 2011-06-09 20:14 - 00000116 ____C () C:\WINDOWS\NeroDigital.ini
2015-03-12 09:53 - 2015-01-14 14:06 - 00005120 ___SH () C:\WINDOWS\system32\Thumbs.db
2015-03-12 09:34 - 2010-12-22 11:18 - 00000240 __RSH () C:\boot.ini
2015-03-12 00:01 - 2015-02-03 13:17 - 00000000 ____D () C:\AdwCleaner
2015-03-11 23:32 - 2015-02-03 13:42 - 00000000 ____D () C:\Documents and Settings\Administrator
2015-03-11 23:32 - 2010-12-22 11:08 - 00000000 ____D () C:\Documents and Settings\Koksy
2015-03-11 23:32 - 2010-12-22 11:06 - 00000000 __SHD () C:\Documents and Settings\LocalService
2015-03-11 23:32 - 2010-12-22 11:03 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2015-03-11 23:31 - 2010-12-22 10:51 - 00000000 ____D () C:\WINDOWS\Registration
2015-03-11 22:05 - 2001-07-21 23:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-03-11 22:01 - 2010-12-22 10:53 - 00000000 ____D () C:\WINDOWS\system32\Restore
2015-03-11 09:37 - 2010-12-22 11:19 - 00180846 _____ () C:\WINDOWS\setupact.log
2015-03-08 18:43 - 2010-12-22 11:08 - 00000000 ___HD () C:\Documents and Settings\Koksy\Ustawienia lokalne\Dane aplikacji
2015-02-24 11:51 - 2014-11-15 23:10 - 00000286 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-484763869-329068152-839522115-1003.job
2015-02-11 23:21 - 2015-01-16 12:53 - 00904576 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
2015-02-11 23:21 - 2010-12-22 11:06 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji

==================== Files in the root of some directories =======

2014-06-28 07:13 - 2014-06-28 07:13 - 0000005 _____ () C:\Documents and Settings\Koksy\Dane aplikacji\mbam.context.scan
2014-01-29 00:39 - 2014-03-03 18:14 - 0000103 _____ () C:\Documents and Settings\Koksy\Dane aplikacji\WB.CFG
2011-04-10 12:39 - 2011-04-11 09:43 - 0000000 ____C () C:\Documents and Settings\Koksy\Ustawienia lokalne\Dane aplikacji\C
2011-10-29 19:26 - 2015-01-28 13:04 - 0011264 ____C () C:\Documents and Settings\Koksy\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-30 09:35 - 2015-01-14 12:49 - 0005972 _____ () C:\Documents and Settings\Koksy\Ustawienia lokalne\Dane aplikacji\unins000.dat
2015-01-14 12:49 - 2015-01-14 12:48 - 0707744 _____ () C:\Documents and Settings\Koksy\Ustawienia lokalne\Dane aplikacji\unins000.exe
2014-01-30 09:35 - 2015-01-14 12:49 - 0011761 _____ () C:\Documents and Settings\Koksy\Ustawienia lokalne\Dane aplikacji\unins000.msg
2011-10-09 14:20 - 2011-10-09 14:20 - 0017408 ____C () C:\Documents and Settings\Koksy\Ustawienia lokalne\Dane aplikacji\WebpageIcons.db

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================