Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-08-2013
Ran by xxx (administrator) on 19-08-2013 19:03:09
Running from C:\Users\xxx\Downloads
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\RaMaint.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeIn.exe
(Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Sonix) C:\Windows\vsnp2uvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeIn.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SMSERIAL] - C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1466368 2009-03-13] (Motorola Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11738184 2013-01-22] (Realtek Semiconductor)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13605408 2009-01-29] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] - C:\Windows\system32\NvMcTray.dll [92704 2009-01-29] (NVIDIA Corporation)
HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [662016 2009-08-12] (Sonix)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2350392 2012-09-14] (Synaptics Incorporated)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5074384 2012-11-26] (ESET)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [LogMeIn GUI] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [63048 2013-04-30] (LogMeIn, Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19604072 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [EPSON SX218 Series] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGDE.EXE /FU "C:\Windows\TEMP\E_S8F63.tmp" /EF "HKCU" [x]
IMEO\ehshell.exe: [Debugger] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe" -MceShellRedirect
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope value is missing.
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\fo4f5028.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Default - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

========================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1329304 2012-11-26] (ESET)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [153600 2009-09-14] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [121856 2009-09-14] (SEIKO EPSON CORPORATION)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [142408 2013-01-18] (Realtek Semiconductor)

==================== Drivers (Whitelisted) ====================

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [36856 2012-12-25] (IVT Corporation.)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [170656 2012-10-08] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [121216 2012-10-08] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [104712 2012-10-08] (ESET)
R3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [16440 2012-12-04] (Intel Corporation)
R2 LMIInfo; C:\Program Files\LogMeIn\x86\RaInfo.sys [13624 2013-04-30] (LogMeIn, Inc.)
R2 LMIRfsDriver; C:\Windows\system32\drivers\LMIRfsDriver.sys [47640 2013-04-30] (LogMeIn, Inc.)
R3 NETwLv32; C:\Windows\System32\DRIVERS\NETwLv32.sys [6639616 2010-10-07] (Intel Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3485952 2009-05-20] ()
S3 BTKRNL; system32\DRIVERS\btkrnl.sys [x]
S3 BTWUSB; System32\Drivers\btwusb.sys [x]
S4 LMIRfsClientNP; No ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-19 19:02 - 2013-08-19 19:02 - 00055862 _____ C:\Users\xxx\Desktop\OTL.Txt
2013-08-19 18:53 - 2013-08-19 18:53 - 01069895 _____ (Farbar) C:\Users\xxx\Downloads\FRST.exe
2013-08-19 18:52 - 2013-08-19 18:52 - 00001307 _____ C:\Users\xxx\Desktop\AdwCleaner[S1].txt
2013-08-19 18:48 - 2013-08-19 18:49 - 00001307 _____ C:\AdwCleaner[S1].txt
2013-08-19 18:48 - 2013-08-19 18:48 - 00666633 _____ C:\Users\xxx\Downloads\AdwCleaner.exe
2013-08-19 18:45 - 2013-08-19 18:45 - 00005048 _____ C:\Users\xxx\Desktop\08192013_181754.log
2013-08-19 18:17 - 2013-08-19 18:17 - 00000000 ____D C:\_OTL
2013-08-19 18:12 - 2013-08-19 18:12 - 00000000 ____D C:\Users\xxx\Desktop\Stare dane programu Firefox
2013-08-18 15:14 - 2013-08-19 19:01 - 00055862 _____ C:\Users\xxx\Downloads\OTL.Txt
2013-08-18 15:14 - 2013-08-18 15:14 - 00036606 _____ C:\Users\xxx\Downloads\Extras.Txt
2013-08-18 15:06 - 2013-08-18 15:06 - 00602112 _____ (OldTimer Tools) C:\Users\xxx\Downloads\OTL.exe
2013-08-18 14:53 - 2013-08-18 14:53 - 00000000 ____D C:\Users\xxx\AppData\Local\ESET
2013-08-16 23:52 - 2013-08-16 23:52 - 00000000 ____D C:\Users\xxx\AppData\Roaming\DivX
2013-08-15 08:40 - 2013-08-15 08:40 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Real
2013-07-27 20:51 - 2013-07-27 20:51 - 00000000 ____D C:\ProgramData\Sun
2013-07-27 20:51 - 2013-07-27 20:51 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-27 20:51 - 2013-07-27 20:50 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-07-27 20:51 - 2013-07-27 20:50 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-27 20:51 - 2013-07-27 20:50 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-27 20:50 - 2013-07-27 20:50 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-27 20:50 - 2013-07-27 20:50 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-27 20:50 - 2013-07-27 20:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-27 20:50 - 2013-07-27 20:50 - 00000000 ____D C:\Program Files\Java
2013-07-27 20:48 - 2013-07-27 20:48 - 00903080 _____ (Oracle Corporation) C:\Users\xxx\Downloads\jxpiinstall.exe
2013-07-27 20:06 - 2013-07-29 10:42 - 00000058 _____ C:\Users\xxx\AppData\Roaming\WB.CFG

==================== One Month Modified Files and Folders =======

2013-08-19 19:02 - 2013-08-19 19:02 - 00055862 _____ C:\Users\xxx\Desktop\OTL.Txt
2013-08-19 19:01 - 2013-08-18 15:14 - 00055862 _____ C:\Users\xxx\Downloads\OTL.Txt
2013-08-19 18:53 - 2013-08-19 18:53 - 01069895 _____ (Farbar) C:\Users\xxx\Downloads\FRST.exe
2013-08-19 18:52 - 2013-08-19 18:52 - 00001307 _____ C:\Users\xxx\Desktop\AdwCleaner[S1].txt
2013-08-19 18:50 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-19 18:50 - 2009-07-14 06:39 - 00038933 _____ C:\Windows\setupact.log
2013-08-19 18:49 - 2013-08-19 18:48 - 00001307 _____ C:\AdwCleaner[S1].txt
2013-08-19 18:49 - 2013-05-20 17:41 - 01921906 _____ C:\Windows\WindowsUpdate.log
2013-08-19 18:48 - 2013-08-19 18:48 - 00666633 _____ C:\Users\xxx\Downloads\AdwCleaner.exe
2013-08-19 18:45 - 2013-08-19 18:45 - 00005048 _____ C:\Users\xxx\Desktop\08192013_181754.log
2013-08-19 18:45 - 2013-05-21 15:55 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Skype
2013-08-19 18:43 - 2013-05-20 18:04 - 00045166 _____ C:\Windows\PFRO.log
2013-08-19 18:43 - 2009-07-14 06:34 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-19 18:43 - 2009-07-14 06:34 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-19 18:28 - 2013-05-21 22:09 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-19 18:17 - 2013-08-19 18:17 - 00000000 ____D C:\_OTL
2013-08-19 18:17 - 2013-05-23 17:46 - 00000000 ____D C:\Program Files\NetPanel
2013-08-19 18:12 - 2013-08-19 18:12 - 00000000 ____D C:\Users\xxx\Desktop\Stare dane programu Firefox
2013-08-19 18:10 - 2013-07-11 14:52 - 00000000 ____D C:\ProgramData\NetPanel
2013-08-19 18:02 - 2013-05-26 14:50 - 00000000 ____D C:\ProgramData\LogMeIn
2013-08-18 16:01 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-08-18 16:01 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-08-18 15:14 - 2013-08-18 15:14 - 00036606 _____ C:\Users\xxx\Downloads\Extras.Txt
2013-08-18 15:06 - 2013-08-18 15:06 - 00602112 _____ (OldTimer Tools) C:\Users\xxx\Downloads\OTL.exe
2013-08-18 15:02 - 2013-05-20 17:45 - 00000000 ____D C:\Users\xxx
2013-08-18 14:53 - 2013-08-18 14:53 - 00000000 ____D C:\Users\xxx\AppData\Local\ESET
2013-08-17 22:13 - 2013-06-17 21:42 - 00000005 _____ C:\Users\xxx\AppData\Roaming\WBPU-TTL.DAT
2013-08-16 23:52 - 2013-08-16 23:52 - 00000000 ____D C:\Users\xxx\AppData\Roaming\DivX
2013-08-15 08:40 - 2013-08-15 08:40 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Real
2013-07-29 10:42 - 2013-07-27 20:06 - 00000058 _____ C:\Users\xxx\AppData\Roaming\WB.CFG
2013-07-27 20:51 - 2013-07-27 20:51 - 00000000 ____D C:\ProgramData\Sun
2013-07-27 20:51 - 2013-07-27 20:51 - 00000000 ____D C:\Program Files\Common Files\Java
2013-07-27 20:50 - 2013-07-27 20:51 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-07-27 20:50 - 2013-07-27 20:51 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-27 20:50 - 2013-07-27 20:51 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-27 20:50 - 2013-07-27 20:50 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-27 20:50 - 2013-07-27 20:50 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-27 20:50 - 2013-07-27 20:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-27 20:50 - 2013-07-27 20:50 - 00000000 ____D C:\Program Files\Java
2013-07-27 20:48 - 2013-07-27 20:48 - 00903080 _____ (Oracle Corporation) C:\Users\xxx\Downloads\jxpiinstall.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-13 20:58

==================== End Of Log ============================