Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-07-2013
Ran by Wadysaw (administrator) on 27-07-2013 12:44:41
Running from C:\Users\Wadysaw\Desktop
Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
() C:\Windows\System32\WLTRYSVC.EXE
(Dell Inc.) C:\Windows\System32\bcmwltry.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Andrea Electronics Corporation) C:\Windows\system32\aestsrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Creative Technology Ltd.) C:\Windows\OEM02Mon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Dell Inc.) C:\Windows\System32\WLTRAY.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
(IDT, Inc.) C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Windows\system32\PnkBstrA.exe
() C:\Windows\system32\PnkBstrB.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(IDT, Inc.) C:\Windows\system32\STacSV.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Facebook Inc.) C:\Users\Wadysaw\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidFind.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avanquest Software ) C:\Program Files\Digital Line Detect\DLG.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.285\SSScheduler.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [167936 2008-05-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [OEM02Mon.exe] - C:\Windows\OEM02Mon.exe [36864 2008-03-04] (Creative Technology Ltd.)
HKLM\...\Run: [DELL Webcam Manager] - C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe [118784 2007-07-27] (Creative Technology Ltd.)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [174872 2007-03-21] (Intel Corporation)
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Windows\system32\WLTRAY.exe [3563520 2008-07-03] (Dell Inc.)
HKLM\...\Run: [NeroFilterCheck] - C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [SigmatelSysTrayApp] - C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [405504 2007-11-12] (IDT, Inc.)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [6756048 2012-11-08] (COMODO)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-02-20] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1233920 2009-04-11] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59872 2012-12-17] (Apple Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59872 2012-12-17] (Apple Inc.)
HKCU\...\Run: [com.apple.dav.bookmarks.daemon] - C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe [59872 2012-12-17] (Apple Inc.)
HKCU\...\Run: [] -  [x]
HKCU\...\Run: [Facebook Update] - C:\Users\Wadysaw\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-22] (Facebook Inc.)
HKU\Default\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\Sidebar.exe [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\Sidebar.exe [ 2009-04-11] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.285\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickSet.lnk
ShortcutTarget: QuickSet.lnk -> C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
Startup: C:\Users\Wadysaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/default.aspx?c=pl&l=pl&s=pad
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si=41460&home=true&tid=2937
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&home=true&tid=2937
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q=
SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q={searchTerms}
SearchScopes: HKLM - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = ${SEARCH_URL}{searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=10&q={searchTerms}
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: IEPluginBHO Class - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.)
Toolbar: HKLM - &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll (Google Inc.)
Toolbar: HKCU -&Google - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll (Google Inc.)
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 69.85.88.187 8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Wadysaw\AppData\Roaming\Mozilla\Firefox\Profiles\dnxtgv7z.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Wadysaw\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
FF Extension: No Name - C:\Users\Wadysaw\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Default - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKCU\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] C:\ProgramData\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension
FF Extension: Browser Manager - C:\ProgramData\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension

Chrome: 
=======
CHR HomePage: hxxp://searchab.com/?aff=7&uid=2152b60a-5cb3-11e2-9fc4-001f3ad603c2
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Windows Genuine Advantage) - C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll No File
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\system32\npdeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Google Drive) - C:\Users\Wadysaw\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Wadysaw\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Wadysaw\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Gmail) - C:\Users\Wadysaw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [jbpkiefagocgkmemidfngdkamloieekf] - C:\Program Files\TornTV.com\torn11.crx

========================== Services (Whitelisted) =================

R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [1990464 2012-11-08] (COMODO)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [66872 2013-01-28] ()
R2 PnkBstrB; C:\Windows\system32\PnkBstrB.exe [103736 2013-01-28] ()
S3 SPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [77824 2007-11-28] (Sony Corporation)
R2 wltrysvc; C:\Windows\System32\bcmwltry.exe [2654208 2008-07-03] (Dell Inc.)

==================== Drivers (Whitelisted) ====================

R3 BCM42RLY; C:\Windows\System32\drivers\BCM42RLY.sys [18424 2008-07-03] (Broadcom Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [19632 2012-11-08] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [494416 2012-11-08] (COMODO)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] ()
S3 s117bus; C:\Windows\System32\DRIVERS\s117bus.sys [82984 2007-06-25] (MCCI Corporation)
S3 s117mdfl; C:\Windows\System32\DRIVERS\s117mdfl.sys [14888 2007-06-25] (MCCI Corporation)
S3 s117mdm; C:\Windows\System32\DRIVERS\s117mdm.sys [108456 2007-06-25] (MCCI Corporation)
S3 s117mgmt; C:\Windows\System32\DRIVERS\s117mgmt.sys [100264 2007-06-25] (MCCI Corporation)
S3 s117nd5; C:\Windows\System32\DRIVERS\s117nd5.sys [22952 2007-06-25] (MCCI Corporation)
S3 s117obex; C:\Windows\System32\DRIVERS\s117obex.sys [98344 2007-06-25] (MCCI Corporation)
S3 s117unic; C:\Windows\System32\DRIVERS\s117unic.sys [98856 2007-06-25] (MCCI Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 Winsock - Google Desktop Search Backup Before First Install; No ImagePath
U3 Winsock - Google Desktop Search Backup Before Last Install; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-27 12:43 - 2013-07-27 12:43 - 00000000 ____D C:\FRST
2013-07-27 12:23 - 2013-07-27 12:23 - 00026780 _____ C:\Users\Wadysaw\Desktop\Extras.Txt
2013-07-27 12:22 - 2013-07-27 12:22 - 00351964 _____ C:\Users\Wadysaw\Desktop\OTL.Txt
2013-07-27 12:12 - 2013-07-27 12:13 - 01220544 _____ (Farbar) C:\Users\Wadysaw\Desktop\FRST.exe
2013-07-27 12:00 - 2013-07-27 12:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-27 10:57 - 2013-07-27 10:57 - 21800576 _____ (Mozilla) C:\Users\Wadysaw\Desktop\Firefox Setup 20.0.1.exe
2013-07-27 10:56 - 2013-07-27 10:56 - 22056352 _____ (Mozilla) C:\Users\Wadysaw\Desktop\Firefox Setup 21.0.exe
2013-07-27 10:50 - 2013-07-27 10:50 - 00095388 _____ C:\Users\Wadysaw\Desktop\zakładki firefox.html
2013-07-27 10:36 - 2013-07-27 10:36 - 00602112 _____ (OldTimer Tools) C:\Users\Wadysaw\Desktop\OTL.exe
2013-07-27 09:33 - 2013-07-27 09:33 - 00000806 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-27 09:33 - 2013-07-27 09:33 - 00000000 ____D C:\Program Files\CCleaner
2013-07-27 09:32 - 2013-07-27 09:32 - 00000000 ____D C:\Users\Wadysaw\AppData\Local\COMODO
2013-07-27 09:12 - 2013-07-27 09:12 - 00000000 ____D C:\ProgramData\䓈.䅸.0
2013-07-24 08:40 - 2013-07-24 08:40 - 00000000 ____D C:\ProgramData\䓈ǰ䅸ǰ0
2013-07-23 16:41 - 2013-07-23 16:41 - 00000000 ____D C:\ProgramData\䓈䅸0
2013-07-22 15:06 - 2013-07-27 12:16 - 00000936 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-73736342-2443057462-394513067-1000UA.job
2013-07-22 15:05 - 2013-07-25 15:16 - 00000914 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-73736342-2443057462-394513067-1000Core.job
2013-07-22 15:05 - 2013-07-22 15:06 - 00000000 ____D C:\Users\Wadysaw\AppData\Local\Facebook
2013-07-22 15:04 - 2013-07-22 15:04 - 00501248 _____ (Facebook Inc.) C:\Users\Wadysaw\Desktop\FacebookVideoCallSetup_v1.2.205.0.exe
2013-07-22 15:02 - 2013-07-22 15:02 - 00000000 ____D C:\ProgramData\䓈…䅸…0
2013-07-21 17:55 - 2013-07-21 17:55 - 00000000 ____D C:\ProgramData\䓈x䅸x0
2013-07-20 14:07 - 2013-07-20 14:07 - 00000000 ____D C:\ProgramData\䓈Dz䅸Dz0
2013-07-20 08:02 - 2013-07-20 08:02 - 00000000 ____D C:\ProgramData\䓈Ċ䅸Ċ0
2013-07-13 06:24 - 2013-07-13 06:24 - 00000000 ____D C:\ProgramData\䓈ǜ䅸ǜ0
2013-07-11 17:51 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 17:51 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 17:51 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 17:51 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-11 17:51 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 17:51 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 17:51 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-11 17:51 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 17:51 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-11 17:51 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-11 17:51 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 17:51 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 17:51 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 17:51 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 17:51 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-11 17:51 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 17:25 - 2013-07-11 17:25 - 00000000 ____D C:\ProgramData\䓈Ǣ䅸Ǣ0
2013-07-10 18:00 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 18:00 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 17:59 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 17:59 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-10 17:59 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-10 17:59 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-10 17:59 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-10 17:59 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-10 17:59 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-10 17:59 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-10 17:59 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 17:59 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-06 19:36 - 2013-07-06 19:36 - 00000000 ____D C:\ProgramData\䓈ž䅸ž0
2013-07-01 17:02 - 2013-07-01 17:02 - 00000000 ____D C:\ProgramData\䓈Ÿ䅸Ÿ0
2013-06-30 10:28 - 2013-06-30 10:28 - 00000000 ____D C:\ProgramData\䓈ȉ䅸ȉ0
2013-06-29 08:39 - 2013-06-29 08:39 - 00000000 ____D C:\ProgramData\䓈Ę䅸Ę0
2013-06-29 07:38 - 2013-06-29 07:38 - 00000000 ____D C:\ProgramData\䓈˜䅸˜0
2013-06-28 15:58 - 2013-06-28 15:58 - 00000000 ____D C:\ProgramData\䓈’䅸’0
2013-06-27 17:07 - 2013-06-27 17:07 - 00000000 ____D C:\ProgramData\䓈2䅸20

==================== One Month Modified Files and Folders =======

2013-07-27 12:43 - 2013-07-27 12:43 - 00000000 ____D C:\FRST
2013-07-27 12:42 - 2011-05-02 19:25 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat
2013-07-27 12:23 - 2013-07-27 12:23 - 00026780 _____ C:\Users\Wadysaw\Desktop\Extras.Txt
2013-07-27 12:22 - 2013-07-27 12:22 - 00351964 _____ C:\Users\Wadysaw\Desktop\OTL.Txt
2013-07-27 12:16 - 2013-07-22 15:06 - 00000936 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-73736342-2443057462-394513067-1000UA.job
2013-07-27 12:13 - 2013-07-27 12:12 - 01220544 _____ (Farbar) C:\Users\Wadysaw\Desktop\FRST.exe
2013-07-27 12:00 - 2013-07-27 12:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-27 11:35 - 2012-03-30 16:44 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-27 11:12 - 2006-11-02 14:45 - 00003744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-27 11:12 - 2006-11-02 14:45 - 00003744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-27 11:10 - 2009-05-13 07:50 - 00000000 ____D C:\Windows\Minidump
2013-07-27 11:10 - 2008-04-17 11:14 - 00000000 ____D C:\Windows\Panther
2013-07-27 10:57 - 2013-07-27 10:57 - 21800576 _____ (Mozilla) C:\Users\Wadysaw\Desktop\Firefox Setup 20.0.1.exe
2013-07-27 10:56 - 2013-07-27 10:56 - 22056352 _____ (Mozilla) C:\Users\Wadysaw\Desktop\Firefox Setup 21.0.exe
2013-07-27 10:54 - 2008-12-12 10:31 - 01479216 ____N C:\Windows\WindowsUpdate.log
2013-07-27 10:50 - 2013-07-27 10:50 - 00095388 _____ C:\Users\Wadysaw\Desktop\zakładki firefox.html
2013-07-27 10:36 - 2013-07-27 10:36 - 00602112 _____ (OldTimer Tools) C:\Users\Wadysaw\Desktop\OTL.exe
2013-07-27 09:33 - 2013-07-27 09:33 - 00000806 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-07-27 09:33 - 2013-07-27 09:33 - 00000000 ____D C:\Program Files\CCleaner
2013-07-27 09:32 - 2013-07-27 09:32 - 00000000 ____D C:\Users\Wadysaw\AppData\Local\COMODO
2013-07-27 09:12 - 2013-07-27 09:12 - 00000000 ____D C:\ProgramData\䓈.䅸.0
2013-07-27 09:12 - 2006-11-02 14:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-26 17:49 - 2008-12-12 10:33 - 00003397 _____ C:\Windows\bthservsdp.dat
2013-07-26 17:49 - 2006-11-02 14:58 - 00032548 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-26 17:48 - 2008-01-21 08:21 - 01540870 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-26 17:48 - 2008-01-21 08:20 - 00680466 _____ C:\Windows\system32\perfh015.dat
2013-07-26 17:48 - 2008-01-21 08:20 - 00133906 _____ C:\Windows\system32\perfc015.dat
2013-07-25 15:16 - 2013-07-22 15:05 - 00000914 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-73736342-2443057462-394513067-1000Core.job
2013-07-24 08:40 - 2013-07-24 08:40 - 00000000 ____D C:\ProgramData\䓈ǰ䅸ǰ0
2013-07-23 16:41 - 2013-07-23 16:41 - 00000000 ____D C:\ProgramData\䓈䅸0
2013-07-22 15:06 - 2013-07-22 15:05 - 00000000 ____D C:\Users\Wadysaw\AppData\Local\Facebook
2013-07-22 15:04 - 2013-07-22 15:04 - 00501248 _____ (Facebook Inc.) C:\Users\Wadysaw\Desktop\FacebookVideoCallSetup_v1.2.205.0.exe
2013-07-22 15:02 - 2013-07-22 15:02 - 00000000 ____D C:\ProgramData\䓈…䅸…0
2013-07-21 17:55 - 2013-07-21 17:55 - 00000000 ____D C:\ProgramData\䓈x䅸x0
2013-07-20 14:07 - 2013-07-20 14:07 - 00000000 ____D C:\ProgramData\䓈Dz䅸Dz0
2013-07-20 08:02 - 2013-07-20 08:02 - 00000000 ____D C:\ProgramData\䓈Ċ䅸Ċ0
2013-07-13 06:24 - 2013-07-13 06:24 - 00000000 ____D C:\ProgramData\䓈ǜ䅸ǜ0
2013-07-11 21:37 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-11 18:51 - 2006-11-02 14:44 - 00292272 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 18:46 - 2006-11-02 14:35 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-11 18:00 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-07-11 17:25 - 2013-07-11 17:25 - 00000000 ____D C:\ProgramData\䓈Ǣ䅸Ǣ0
2013-07-06 19:36 - 2013-07-06 19:36 - 00000000 ____D C:\ProgramData\䓈ž䅸ž0
2013-07-01 17:02 - 2013-07-01 17:02 - 00000000 ____D C:\ProgramData\䓈Ÿ䅸Ÿ0
2013-06-30 10:28 - 2013-06-30 10:28 - 00000000 ____D C:\ProgramData\䓈ȉ䅸ȉ0
2013-06-29 08:39 - 2013-06-29 08:39 - 00000000 ____D C:\ProgramData\䓈Ę䅸Ę0
2013-06-29 07:38 - 2013-06-29 07:38 - 00000000 ____D C:\ProgramData\䓈˜䅸˜0
2013-06-28 15:58 - 2013-06-28 15:58 - 00000000 ____D C:\ProgramData\䓈’䅸’0
2013-06-27 17:07 - 2013-06-27 17:07 - 00000000 ____D C:\ProgramData\䓈2䅸20

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-27 09:18

==================== End Of Log ============================