Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:02-08-2015 01
Ran by Właściciel (administrator) on TERMINAL-3 (06-08-2015 17:50:11)
Running from C:\Documents and Settings\Właściciel\Moje dokumenty\Pobrane
Loaded Profiles: Właściciel (Available Profiles: Właściciel)
Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Language: Polski
Internet Explorer Version 8 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Murray Hurps Software Pty Ltd) C:\Program Files\Ad Muncher\AdMunch.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2012-07-03] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Ad Muncher] => C:\Program Files\Ad Muncher\AdMunch.exe [560760 2015-06-01] (Murray Hurps Software Pty Ltd)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2012-07-04] (ATI Technologies Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{6B5DF8A7-F13A-460F-A077-9C02E3F4D5AF}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{B146F4AA-2ED9-41EE-8096-0861B430E51F}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Właściciel\Dane aplikacji\Mozilla\Firefox\Profiles\1th1xarp.default-1438872568250
FF Homepage: hxxp://www.wp.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-09-03]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R1 AmdPPM; C:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\WINDOWS\System32\drivers\AtihdXP3.sys [103040 2012-05-14] (Advanced Micro Devices)
S3 KMWDFILTER; C:\WINDOWS\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R0 nvata; C:\WINDOWS\System32\DRIVERS\nvata.sys [100736 2006-04-24] (NVIDIA Corporation)
R0 nvatabus; C:\WINDOWS\system32\Drivers\nvatabus.sys [105344 2012-03-09] (NVIDIA Corporation) [File not signed]
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [52736 2006-03-22] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [18944 2006-03-22] (NVIDIA Corporation)
R3 RtlWlanu; C:\WINDOWS\System32\DRIVERS\rtwlanu_xp.sys [2501592 2014-01-10] (Realtek Semiconductor Corporation                           )
R0 Si3112; C:\WINDOWS\system32\Drivers\Si3112.sys [62208 2012-03-09] (Silicon Image, Inc.) [File not signed]
S3 whfltr2k; C:\WINDOWS\System32\DRIVERS\whfltr2k.sys [7424 2000-01-01] () [File not signed]
S4 IntelIde; No ImagePath
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-06 17:30 - 2015-08-06 17:30 - 00000000 ____D C:\Program Files\Unlocker
2015-08-06 14:07 - 2015-07-02 14:14 - 00018200 _____ () C:\WINDOWS\system32\roboot.exe
2015-08-06 11:21 - 2015-08-06 11:21 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-08-06 11:21 - 2015-08-06 11:21 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-08-06 10:54 - 2015-08-06 10:54 - 00000000 ____D C:\FRST
2015-08-06 10:53 - 2015-08-06 10:53 - 00000000 ___HD C:\VTRoot
2015-08-05 17:32 - 2001-10-30 13:00 - 00000742 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-08-05 17:31 - 2015-08-06 17:43 - 00001058 _____ C:\WINDOWS\Tasks\gsgM2rKhmvUAvKNu6Pz.job
2015-08-05 12:51 - 2009-07-13 18:16 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winusb.dll
2015-08-05 12:51 - 2009-07-13 16:51 - 00034944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusb.sys
2015-08-05 12:38 - 2013-01-23 11:31 - 00075264 _____ (Nokia) C:\WINDOWS\system32\nmwcdcls.dll
2015-08-03 12:29 - 2015-08-03 12:29 - 00020992 _____ (Copyright (c) Code Industry Ltd ) C:\WINDOWS\system32\mpelocalmon.dll
2015-08-03 12:29 - 2015-08-03 12:29 - 00013824 _____ (Copyright (c) Code Industry Ltd ) C:\WINDOWS\system32\mpelocalui.dll
2015-08-03 12:29 - 2015-08-03 12:29 - 00000000 ____D C:\Program Files\Code Industry
2015-07-23 23:44 - 2015-07-23 23:44 - 00875472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr110.dll
2015-07-23 23:44 - 2015-07-23 23:44 - 00535008 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp110.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-06 17:44 - 2012-08-11 16:13 - 01825835 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-06 17:43 - 2012-08-11 16:17 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-06 17:43 - 2008-06-22 01:05 - 00000159 _____ C:\WINDOWS\wiadebug.log
2015-08-06 17:43 - 2008-06-22 01:05 - 00000050 _____ C:\WINDOWS\wiaservc.log
2015-08-06 17:42 - 2012-09-01 18:03 - 00393216 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2015-08-06 17:42 - 2012-08-11 16:17 - 00031810 _____ C:\WINDOWS\SchedLgU.Txt
2015-08-06 17:17 - 2015-05-23 13:42 - 00490706 _____ C:\WINDOWS\system32\prfh0415.dat
2015-08-06 17:17 - 2015-05-23 13:42 - 00084082 _____ C:\WINDOWS\system32\prfc0415.dat
2015-08-06 17:17 - 2015-05-23 13:42 - 00065536 _____ C:\WINDOWS\system32\config\COMODO I.evt
2015-08-06 17:13 - 2008-06-22 01:00 - 00000000 ____D C:\WINDOWS\system
2015-08-06 16:53 - 2015-06-20 09:11 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-08-06 16:11 - 2001-10-30 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2015-08-06 16:08 - 2008-06-22 01:03 - 00234037 _____ C:\WINDOWS\setupapi.log
2015-08-06 16:02 - 2012-12-05 17:50 - 00000000 ____D C:\WINDOWS\pss
2015-08-06 16:02 - 2008-06-22 01:02 - 00000211 ___SH C:\boot.ini
2015-08-06 16:02 - 2001-10-30 13:00 - 00000528 _____ C:\WINDOWS\win.ini
2015-08-06 16:02 - 2001-10-30 13:00 - 00000227 _____ C:\WINDOWS\system.ini
2015-08-06 13:18 - 2015-05-23 13:18 - 00000376 _____ C:\WINDOWS\Tasks\SlimCleaner Plus (Scheduled Scan - Właściciel).job
2015-08-05 13:25 - 2008-06-22 01:03 - 00204120 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-05 12:23 - 2008-06-22 01:03 - 00203272 _____ C:\WINDOWS\setupact.log
2015-08-05 11:56 - 2013-11-29 11:54 - 00000000 ____D C:\Program Files\LibreOffice 4
2015-07-15 17:52 - 2015-05-20 17:58 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-15 14:54 - 2012-08-30 19:11 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-15 14:54 - 2012-08-30 19:11 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-08 15:00 - 2015-05-20 18:01 - 00000226 _____ C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of log ============================