Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015 Ran by EPS (administrator) on ACER on 21-03-2015 13:52:30 Running from C:\Documents and Settings\EPS\Moje dokumenty\sos Loaded Profiles: EPS (Available profiles: EPS) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () C:\WINDOWS\system32\WLTRYSVC.EXE (Broadcom Corporation) C:\WINDOWS\system32\BCMWLTRY.EXE (Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSUAMain.exe (Visicom Media Inc.) C:\Documents and Settings\All Users\Dane aplikacji\Panda Security URL Filtering\Panda_URL_Filtering.exe (Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation) C:\PROGRA~1\MI3AA1~1\rapimgr.exe () C:\Documents and Settings\All Users\Dane aplikacji\MobileBrServ\mbbService.exe (Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSANHost.exe (Panda Security, S.L.) C:\Program Files\Panda Security\Panda Devices Agent\AgentSvc.exe (Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSUAService.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SoundMan] => C:\WINDOWS\SOUNDMAN.EXE [77824 2005-02-23] (Realtek Semiconductor Corp.) HKLM\...\Run: [SiSPower] => Rundll32.exe SiSPower.dll,ModeAgent HKLM\...\Run: [BluetoothAuthenticationAgent] => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k HKLM\...\Run: [PSUAMain] => C:\Program Files\Panda Security\Panda Security Protection\PSUAMain.exe [40184 2015-02-27] (Panda Security, S.L.) HKLM\...\Run: [Panda Security URL Filtering] => C:\Documents and Settings\All Users\Dane aplikacji\Panda Security URL Filtering\Panda_URL_Filtering.exe [304952 2014-09-19] (Visicom Media Inc.) HKLM\...\Winlogon: [Shell] C:\WINDOWS\Explorer.exe [1035264 2008-04-14] (Microsoft Corporation) HKU\S-1-5-21-682003330-484763869-839522115-1003\...\Run: [H/PC Connection Agent] => C:\Program Files\Microsoft ActiveSync\Wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation) HKU\S-1-5-21-682003330-484763869-839522115-1003\...\Run: [] => [X] HKU\S-1-5-21-682003330-484763869-839522115-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\Documents and Settings\EPS\Menu Start\Programy\Autostart\WTW.lnk ShortcutTarget: WTW.lnk -> C:\Program Files\K2T\WTW\wtw.exe (K2T.eu, Kaworu) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-682003330-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.yahoo.com?fr=fp-comodo HKU\S-1-5-21-682003330-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-682003330-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.myhoome.com/ SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-682003330-484763869-839522115-1003 -> {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1376168012714 DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1376327943890 Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\EPS\Dane aplikacji\Mozilla\Firefox\Profiles\ne9lduhd.default FF Homepage: hxxp://pl.yahoo.com?fr=fp-comodo FF DefaultSearchEngine: Yahoo FF SelectedSearchEngine: Yahoo FF Keyword.URL: hxxp://pl.search.yahoo.com/search?fr=ytff-comodo&p= FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q= FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation) FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( ) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll [2014-06-21] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll [2014-06-21] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-682003330-484763869-839522115-1003: @unity3d.com/UnityPlayer,version=1.0 -> C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll [2014-01-08] (Unity Technologies ApS) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\pandasecuritytb.xml [2015-03-21] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-06-10] FF Extension: No Name - C:\Documents and Settings\EPS\Dane aplikacji\Mozilla\Firefox\Profiles\ne9lduhd.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} [Not Found] Chrome: ======= CHR HomePage: Profile 1 -> hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=38B30014A479E8C3&affID=119357&tt=110913_221&tsp=5002 CHR StartupUrls: Profile 1 -> "hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=38B30014A479E8C3&affID=119357&tt=110913_221&tsp=5002" CHR DefaultSuggestURL: Profile 1 -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\39.0.2171.99\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\39.0.2171.99\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\39.0.2171.99\pdf.dll () CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.)) CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Profile: C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default CHR Extension: (Free Windows Apps) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aiebpfofbjccilocdcobkkkkecciknlo [2015-02-19] CHR Extension: (Google Docs) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-10] CHR Extension: (Google Drive) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-10] CHR Extension: (Brushed) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg [2014-01-17] CHR Extension: (YouTube) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-10] CHR Extension: (Adblock Plus) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-08-15] CHR Extension: (Google Search) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-10] CHR Extension: (Eliminator Slajdów) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff [2013-08-15] CHR Extension: (Weather) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\fapbbpdnlcmiolkdfjnnjhabmcndadad [2014-01-16] CHR Extension: (Office Editing for Docs, Sheets & Slides) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gbkeegbaiigmenfmjfclcdgdpimamgkj [2015-02-18] CHR Extension: (Tokonda Messenger) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ghonobjagekcnpkhcpjekbbejnjdlomg [2015-02-17] CHR Extension: (SearchPreview) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\hcjdanpjacpeeppdjkppebobilhaglfo [2014-01-15] CHR Extension: (New Tab Page by Speed Dial Team) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\idgeoanibcknhniccgaoaiolihidecjn [2014-01-15] CHR Extension: (Instant Translate) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2013-08-15] CHR Extension: (Poczta o2) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\kdhkhehdcicfckijbllglgdkegdnhplm [2014-10-22] CHR Extension: (Image Properties Context Menu) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\khagclindddokccfbmfmckaflngbmpon [2013-08-15] CHR Extension: (Forecastfox Lite) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\miooijfbinpacpdpfpgpjigoajajelpo [2015-02-19] CHR Extension: (Google Wallet) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26] CHR Extension: (Hover Zoom) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nonjdcjchghhkdoolnlbekcfllmednbl [2013-08-15] CHR Extension: (Scientific Calculator) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\npoipmeppdioagbkigdlnpmjphnolaog [2014-01-15] CHR Extension: (Google Quick Scroll) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2013-08-15] CHR Extension: (My IP Address) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pinipodgkaoigpmhmmchojdmleccamce [2014-01-15] CHR Extension: (iReader) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ppelffpjgkifjfgnbaaldcehkpajlmbc [2014-01-15] CHR Profile: C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1 CHR Extension: (Google Docs) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-10] CHR Extension: (Google Drive) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-10] CHR Extension: (Weather (extension)) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\beapnbfmjmjhhfpaoajfhjbbfnnlfpnc [2015-02-17] CHR Extension: (YouTube) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-10] CHR Extension: (Google Search) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-10] CHR Extension: (Search by Image (by Google)) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2013-08-15] CHR Extension: (Eliminator Slajdów) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\eplekpmdodlgejgogbojajncdlapamff [2014-11-19] CHR Extension: (Yahoo!) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\fdhbkaahephniejapepaiggngjnedpci [2015-03-21] CHR Extension: (AdBlock) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-08-15] CHR Extension: (Instant Translate) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2013-08-15] CHR Extension: (Poczta o2) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\kdhkhehdcicfckijbllglgdkegdnhplm [2014-11-19] CHR Extension: (Advanced start page) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\lhlflcpjmbmnhfehipheboagibdjgmog [2015-02-17] CHR Extension: (Google Wallet) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23] CHR Extension: (Google Quick Scroll) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2013-08-15] CHR Extension: (Gmail) - C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-10] CHR HKLM\...\Chrome\Extension: [fdhbkaahephniejapepaiggngjnedpci] - https://clients2.google.com/service/update2/crx ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Mobile Broadband HL Service; C:\Documents and Settings\All Users\Dane aplikacji\MobileBrServ\mbbservice.exe [232288 2012-03-12] () R2 NanoServiceMain; C:\Program Files\Panda Security\Panda Security Protection\PSANHost.exe [142584 2015-02-27] (Panda Security, S.L.) R2 PandaAgent; C:\Program Files\Panda Security\Panda Devices Agent\AgentSvc.exe [66808 2014-10-09] (Panda Security, S.L.) R2 PSUAService; C:\Program Files\Panda Security\Panda Security Protection\PSUAService.exe [38136 2015-02-27] (Panda Security, S.L.) R2 wltrysvc; C:\WINDOWS\System32\bcmwltry.exe [827499 2004-12-22] (Broadcom Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [17801 2013-08-10] (Meetinghouse Data Communications) [File not signed] R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [2311680 2005-02-24] (Realtek Semiconductor Corp.) [File not signed] R3 BCM43XX; C:\WINDOWS\System32\DRIVERS\bcmwl5.sys [369024 2004-12-22] (Broadcom Corporation) S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation) R1 CFRMD; C:\WINDOWS\System32\DRIVERS\CFRMD.sys [36112 2013-05-07] (Windows (R) Win 7 DDK provider) R3 DKbFltr; C:\WINDOWS\System32\Drivers\DKbFltr.sys [16896 2004-12-08] (Dritek System Inc.) [File not signed] R1 HMD; C:\WINDOWS\System32\DRIVERS\hmd.sys [14272 2013-10-04] () S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) S3 nmwcd; C:\WINDOWS\System32\drivers\ccdcmb.sys [18560 2013-01-23] (Nokia) [File not signed] S3 nmwcdc; C:\WINDOWS\System32\drivers\ccdcmbo.sys [23168 2013-01-23] (Nokia) [File not signed] R1 NNSALPC; C:\WINDOWS\System32\DRIVERS\NNSAlpc.sys [86800 2015-02-09] (Panda Security, S.L.) R1 NNSHTTP; C:\WINDOWS\System32\DRIVERS\NNSHttp.sys [202128 2015-02-09] (Panda Security, S.L.) R1 NNSHTTPS; C:\WINDOWS\System32\DRIVERS\NNSHttps.sys [109584 2015-02-09] (Panda Security, S.L.) R1 NNSIDS; C:\WINDOWS\System32\DRIVERS\NNSIds.sys [126480 2015-02-09] (Panda Security, S.L.) R3 NNSNAHS; C:\WINDOWS\System32\DRIVERS\NNSNAHS.sys [46480 2014-10-21] (Panda Security, S.L.) R1 NNSPICC; C:\WINDOWS\System32\DRIVERS\NNSPicc.sys [99856 2015-02-09] (Panda Security, S.L.) R1 NNSPIHS; C:\WINDOWS\System32\DRIVERS\NNSPihs.sys [52112 2015-02-09] (Panda Security, S.L.) R1 NNSPOP3; C:\WINDOWS\System32\DRIVERS\NNSPop3.sys [120592 2015-02-09] (Panda Security, S.L.) R1 NNSPROT; C:\WINDOWS\System32\DRIVERS\NNSProt.sys [281232 2015-02-09] (Panda Security, S.L.) R1 NNSPRV; C:\WINDOWS\System32\DRIVERS\NNSPrv.sys [205456 2015-02-09] (Panda Security, S.L.) R1 NNSSMTP; C:\WINDOWS\System32\DRIVERS\NNSSmtp.sys [108432 2015-02-09] (Panda Security, S.L.) R1 NNSSTRM; C:\WINDOWS\System32\DRIVERS\NNSStrm.sys [239888 2015-02-09] (Panda Security, S.L.) R1 NNSTLSC; C:\WINDOWS\System32\DRIVERS\NNSTlsc.sys [94864 2015-02-09] (Panda Security, S.L.) S3 pccsmcfd; C:\WINDOWS\System32\DRIVERS\pccsmcfd.sys [19072 2012-10-17] (Nokia) [File not signed] R2 PSINAflt; C:\WINDOWS\System32\DRIVERS\PSINAflt.sys [140816 2015-02-25] (Panda Security, S.L.) R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [103312 2015-02-25] (Panda Security, S.L.) R1 PSINKNC; C:\WINDOWS\System32\DRIVERS\psinknc.sys [172432 2015-02-25] (Panda Security, S.L.) R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [114704 2015-02-25] (Panda Security, S.L.) R2 PSINProt; C:\WINDOWS\System32\DRIVERS\PSINProt.sys [124944 2015-02-25] (Panda Security, S.L.) R2 PSINReg; C:\WINDOWS\System32\DRIVERS\PSINReg.sys [100624 2015-02-25] (Panda Security, S.L.) R3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security, S.L.) R3 SiS315; C:\WINDOWS\System32\DRIVERS\sisgrp.sys [240640 2005-03-01] (Silicon Integrated Systems Corporation) R1 SiSkp; C:\WINDOWS\System32\DRIVERS\srvkp.sys [13312 2005-02-25] (Silicon Integrated Systems Corporation) S3 SISNIC; C:\WINDOWS\System32\DRIVERS\sisnic.sys [32768 2004-08-03] (SiS Corporation) R3 SISNICXP; C:\WINDOWS\System32\DRIVERS\sisnicxp.sys [32768 2004-11-05] (SiS Corporation) S3 SNP325; C:\WINDOWS\System32\DRIVERS\snp325.sys [10260864 2007-03-07] (Sonix Co. Ltd.) [File not signed] R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed] R3 SynTP; C:\WINDOWS\System32\DRIVERS\SynTP.sys [185824 2004-10-08] (Synaptics, Inc.) [File not signed] S3 upperdev; C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys [8192 2013-01-23] (Nokia) [File not signed] S3 UsbserFilt; C:\WINDOWS\System32\DRIVERS\usbser_lowerfltj.sys [8192 2013-01-23] (Nokia) [File not signed] S3 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation) S2 ASPI32; No ImagePath S4 IntelIde; No ImagePath U5 NwlnkIpx; C:\Windows\System32\Drivers\NwlnkIpx.sys [88320 2008-04-13] (Microsoft Corporation) U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-21 13:51 - 2015-03-21 13:52 - 00000000 ____D () C:\FRST 2015-03-21 13:38 - 2015-03-21 13:52 - 00000000 ____D () C:\Documents and Settings\EPS\Moje dokumenty\sos 2015-03-21 12:58 - 2015-02-04 14:53 - 04199640 _____ (COMODO) C:\Documents and Settings\All Users\Dane aplikacji\cisF.exe 2015-03-21 12:38 - 2015-03-21 12:38 - 00000450 _____ () C:\WINDOWS\nsw.log 2015-03-21 09:49 - 2015-03-21 09:49 - 00000000 ____D () C:\Documents and Settings\EPS\Dane aplikacji\Panda Security 2015-03-21 09:48 - 2015-01-29 18:21 - 00050320 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSKMAD.sys 2015-03-21 09:47 - 2015-03-21 12:50 - 00000000 ____D () C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\panda 2015-03-21 09:47 - 2015-03-21 09:47 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Panda Security URL Filtering 2015-03-21 09:44 - 2015-03-21 13:36 - 00065536 _____ () C:\WINDOWS\system32\config\Nano.evt 2015-03-21 09:44 - 2015-03-21 09:44 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Panda Free Antivirus 2015-03-21 09:32 - 2015-03-21 09:46 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Panda Security 2015-03-19 18:51 - 2015-03-21 13:06 - 00021764 _____ () C:\WINDOWS\setupapi.log 2015-03-15 22:54 - 2015-03-15 22:54 - 00090112 _____ () C:\WINDOWS\Minidump\Mini031515-01.dmp 2015-03-11 11:22 - 2015-03-11 11:22 - 00000000 ____H () C:\WINDOWS\system32\config\sam.new.LOG 2015-03-11 11:22 - 2015-03-11 11:22 - 00000000 ____H () C:\WINDOWS\system32\config\default.new.LOG 2015-03-10 10:58 - 2015-03-10 11:03 - 00011494 _____ () C:\Documents and Settings\EPS\Pulpit\Fv ORANGE do PIT'ów.xlsx 2015-02-26 19:42 - 2015-02-26 19:42 - 00003584 _____ () C:\Documents and Settings\All Users\Dane aplikacji\wtwLicensing.db 2015-02-26 19:41 - 2015-02-26 19:41 - 00000000 ____D () C:\Documents and Settings\EPS\Dane aplikacji\.wtw 2015-02-26 19:40 - 2015-02-26 19:40 - 00000000 ____D () C:\Documents and Settings\EPS\Menu Start\Programy\K2T 2015-02-26 19:36 - 2015-02-26 19:36 - 00000000 ____D () C:\Program Files\K2T 2015-02-25 20:03 - 2015-02-25 20:03 - 00172432 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINKNC.sys 2015-02-25 20:03 - 2015-02-25 20:03 - 00140816 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINAflt.sys 2015-02-25 20:03 - 2015-02-25 20:03 - 00124944 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINProt.sys 2015-02-25 20:03 - 2015-02-25 20:03 - 00114704 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINProc.sys 2015-02-25 20:03 - 2015-02-25 20:03 - 00103312 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINFile.sys 2015-02-25 20:03 - 2015-02-25 20:03 - 00100624 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINReg.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-21 13:52 - 2013-08-10 17:52 - 00000000 ____D () C:\Documents and Settings\EPS\Ustawienia lokalne\Temp 2015-03-21 13:41 - 2014-05-04 17:36 - 01180891 _____ () C:\WINDOWS\WindowsUpdate.log 2015-03-21 13:38 - 2013-08-10 17:52 - 00000000 ___RD () C:\Documents and Settings\EPS\Moje dokumenty 2015-03-21 13:37 - 2014-06-09 20:50 - 00000260 _____ () C:\WINDOWS\Tasks\WGASetup.job 2015-03-21 13:37 - 2014-05-04 17:36 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2015-03-21 13:37 - 2014-05-04 17:36 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2015-03-21 13:37 - 2013-09-14 08:30 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\COMODO 2015-03-21 13:37 - 2013-09-14 08:29 - 00000000 ____D () C:\Program Files\Comodo 2015-03-21 13:37 - 2013-08-10 19:31 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2015-03-21 13:37 - 2013-08-10 17:50 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-03-21 13:36 - 2013-08-10 17:52 - 00000188 ___SH () C:\Documents and Settings\EPS\ntuser.ini 2015-03-21 13:36 - 2013-08-10 17:52 - 00000000 ____D () C:\Documents and Settings\EPS 2015-03-21 13:36 - 2013-08-10 17:50 - 00032620 _____ () C:\WINDOWS\SchedLgU.Txt 2015-03-21 13:34 - 2014-04-10 08:55 - 00000000 ____D () C:\AdwCleaner 2015-03-21 13:15 - 2013-08-10 19:31 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2015-03-21 13:15 - 2013-08-10 19:31 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2015-03-21 13:11 - 2013-08-10 17:52 - 00000000 __RHD () C:\Documents and Settings\EPS\Dane aplikacji 2015-03-21 13:07 - 2013-08-10 17:52 - 00000000 ___RD () C:\Documents and Settings\EPS\Menu Start\Programy 2015-03-21 13:06 - 2013-08-20 16:28 - 00000000 ____D () C:\Program Files\Winamp 2015-03-21 13:05 - 2013-09-01 08:02 - 00000000 ____D () C:\Documents and Settings\EPS\Dane aplikacji\Samsung 2015-03-21 13:05 - 2013-08-10 17:54 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2015-03-21 13:01 - 2013-08-18 10:20 - 00000000 ____D () C:\Documents and Settings\EPS\Menu Start\Programy\HTC Home 2015-03-21 13:00 - 2013-08-10 17:52 - 00000000 ____D () C:\Documents and Settings\EPS\Pulpit 2015-03-21 12:59 - 2013-09-27 21:46 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\COMODO 2015-03-21 12:59 - 2013-09-14 08:30 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Comodo 2015-03-21 12:59 - 2013-08-10 17:52 - 00000000 ___HD () C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji 2015-03-21 12:59 - 2013-08-10 17:50 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji 2015-03-21 12:49 - 2013-08-10 19:30 - 00281336 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2015-03-21 12:38 - 2014-10-26 14:45 - 00000433 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.ics 2015-03-21 12:38 - 2013-08-11 20:03 - 00000180 _____ () C:\WINDOWS\hpbafd.ini 2015-03-21 09:49 - 2013-08-10 18:22 - 00069704 _____ () C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2015-03-21 09:46 - 2013-08-18 08:51 - 00000000 ____D () C:\Program Files\Panda Security 2015-03-19 18:06 - 2001-07-22 01:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2015-03-11 18:50 - 2013-12-26 14:24 - 00000000 ____D () C:\Documents and Settings\EPS\Moje dokumenty\Biblioteka calibre 2015-03-11 11:31 - 2015-01-09 18:59 - 04194304 _____ () C:\Documents and Settings\EPS\ntuser.bak 2015-03-11 11:31 - 2013-08-10 19:30 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY.bak 2015-03-11 11:31 - 2013-08-10 19:30 - 00024576 _____ () C:\WINDOWS\system32\config\SAM.bak 2015-03-11 11:31 - 2013-08-10 19:26 - 32243712 _____ () C:\WINDOWS\system32\config\software.bak 2015-03-11 11:31 - 2013-08-10 19:26 - 00270336 _____ () C:\WINDOWS\system32\config\default.bak 2015-03-11 11:31 - 2013-08-10 17:50 - 00233472 _____ () C:\Documents and Settings\LocalService\NTUSER.bak 2015-03-11 11:31 - 2013-08-10 17:50 - 00229376 _____ () C:\Documents and Settings\NetworkService\NTUSER.bak 2015-03-11 11:30 - 2013-08-10 17:50 - 00000000 __SHD () C:\Documents and Settings\NetworkService 2015-03-11 11:30 - 2013-08-10 17:50 - 00000000 __SHD () C:\Documents and Settings\LocalService 2015-03-10 22:50 - 2013-08-14 16:24 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help 2015-03-10 22:47 - 2014-06-14 19:18 - 00000000 ____D () C:\WINDOWS\system32\MRT 2015-03-10 22:27 - 2013-08-12 18:46 - 119837696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-03-02 11:56 - 2014-11-29 12:31 - 00014790 _____ () C:\Documents and Settings\EPS\Pulpit\zestawienie opłat.xlsx 2015-02-26 19:44 - 2013-08-10 17:52 - 00000000 ___RD () C:\Documents and Settings\EPS\Menu Start\Programy\Autostart 2015-02-23 09:01 - 2013-08-10 19:31 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Autostart 2015-02-23 08:54 - 2014-06-08 21:33 - 00000000 ____D () C:\Documents and Settings\EPS\Dane aplikacji\Skype ==================== Files in the root of some directories ======= 2013-09-20 15:20 - 2009-02-25 13:34 - 0090112 _____ (Axesstel) C:\Program Files\axesstel.dll 2015-02-10 06:56 - 2015-02-10 06:56 - 0000030 _____ () C:\Program Files\Exiferupdate.ini 2013-09-20 15:20 - 2009-02-25 13:34 - 0118784 _____ () C:\Program Files\MSP_Uninstall.exe 2013-10-01 18:08 - 2013-10-01 18:08 - 0002528 _____ () C:\Documents and Settings\EPS\Dane aplikacji\$_hpcst$.hpc 2013-09-11 17:33 - 2013-09-11 17:33 - 0005120 _____ () C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-08-20 16:00 - 2013-08-20 15:58 - 0333348 _____ () C:\Documents and Settings\EPS\Ustawienia lokalne\Dane aplikacji\searchya-speeddial.crx Some content of TEMP: ==================== C:\Documents and Settings\EPS\Ustawienia lokalne\Temp\Quarantine.exe C:\Documents and Settings\EPS\Ustawienia lokalne\Temp\sqlite3.dll C:\Documents and Settings\EPS\Ustawienia lokalne\Temp\wtw-update.exe C:\Documents and Settings\EPS\Ustawienia lokalne\Temp\{411F8E41-470C-409F-ABB7-E6CB9B26BAD0}.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================