Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-08-2013 03
Ran by Darek (administrator) on PC-DAREK on 31-08-2013 16:06:32
Running from C:\Filmy
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ABBYY) C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Hagel Technologies Ltd.) C:\Program Files\DU Meter\DUMeterSvc.exe
(FileZilla Project) C:\Program Files\FileZilla Server\FileZilla Server.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\Windows\system32\PSIService.exe
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Toshiba Europe GmbH) C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA CORPORATION) c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Chicony) C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(Dropbox, Inc.) C:\Users\Darek\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynToshiba.exe
(Hagel Technologies Ltd.) C:\PROGRA~1\DUMETE~1\DUMeter.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
(C. Ghisler & Co.) C:\Program Files\totalcmd\TOTALCMD.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(OldTimer Tools) C:\Filmy\OTL.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4390912 2007-02-15] (Realtek Semiconductor)
HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [534648 2007-01-17] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1451304 2009-03-20] (Synaptics Incorporated)
HKLM\...\Run: [Camera Assistant Software] - C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [405504 2007-02-13] (Chicony)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-06-20] ()
HKLM\...\Run: [FileZilla Server Interface] - C:\Program Files\FileZilla Server\FileZilla Server Interface.exe [1044992 2012-02-26] (FileZilla Project)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [BindDirectlyToPropertySetStorage] 0
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files\DAEMON Tools Pro\DTAgent.exe [842048 2011-03-17] (DT Soft Ltd)
HKCU\...\Run: [DU Meter] - C:\Program Files\DU Meter\DUMeter.exe [1946352 2012-02-16] (Hagel Technologies Ltd.)
HKCU\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [1818984 2012-01-31] (Hewlett-Packard Co.)
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 149
HKCU\...\Policies\Explorer: [NoDriveAutoRun] 0
HKCU\...\Policies\Explorer: [NoDrives] 0
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\Default\...\Run: [TOSCDSPD] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2006-11-13] (TOSHIBA)
Startup: C:\Users\Darek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Darek\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NIS&pvid=20.0.0.39
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {470F8550-DB59-4FBC-8167-367CEEAA5FB3} URL = http://www.google.pl/search?hl=pl&q={searchTerms}&btnG=Szukaj+w+Google&lr=
SearchScopes: HKCU - ${searchCLSID} URL = http://search.yahoo.com/search?fr=megaup&p={searchTerms}
SearchScopes: HKCU - {470F8550-DB59-4FBC-8167-367CEEAA5FB3} URL = http://www.google.pl/search?hl=pl&q={searchTerms}&btnG=Szukaj+w+Google&lr=
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
BHO: IE to GetRight Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll (Headlight Software, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: IeMonitorBho Class - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll (Megaupload Limited)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - &Tłumaczenie - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll (Techland)
Toolbar: HKCU -&Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
Toolbar: HKCU -&Tłumaczenie - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll (Techland)
Toolbar: HKCU -No Name - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} -  No File
DPF: {00000161-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/msaud.cab
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {3334504D-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/0/C/8/0C8EDFAB-30BC-4792-898E-2DABE27B2C4D/mp43dmo.CAB
DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} http://www.jasnagora.com/RtspVaPgDec.cab
DPF: {69731714-6886-4587-A9AA-D80C2763884D} http://dl.google.com/dl/desktop/nv/GoogleGadgetPluginIEWin.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} http://82.146.224.245:85/activex/AxisCamControl.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540001} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {D9FDD1F3-73E8-4D37-9149-43B7B576EB0A} http://79.189.149.50:5080/WebCamX.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{469CA668-61D5-40CC-8734-2E75F53AC2B0}: [NameServer]192.168.0.1,208.67.2.2

FireFox:
========
FF ProfilePath: C:\Users\Darek\AppData\Roaming\Mozilla\Firefox\Profiles\s6t6lneb.default
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF NetworkProxy: "no_proxies_on", "127.0.0.1\r\n*.local,*.local"
FF Extension: Megaupload SX.3.2 - C:\Users\Darek\AppData\Roaming\Mozilla\Firefox\Profiles\s6t6lneb.default\Extensions\pbreak.br@gmail.com
FF Extension: WOT - C:\Users\Darek\AppData\Roaming\Mozilla\Firefox\Profiles\s6t6lneb.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: fox - C:\Users\Darek\AppData\Roaming\Mozilla\Firefox\Profiles\s6t6lneb.default\Extensions\fox@replace.fx.xpi
FF Extension: No Name - C:\Users\Darek\AppData\Roaming\Mozilla\Firefox\Profiles\s6t6lneb.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
FF Extension: No Name - C:\Users\Darek\AppData\Roaming\Mozilla\Firefox\Profiles\s6t6lneb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Blokowanie banerów - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak
FF Extension: Kaspersky URL Advisor - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak

========================== Services (Whitelisted) =================

R2 ABBYY.Licensing.PDFTransformer.Classic.3.0; C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany)
S3 Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [1349912 2009-04-17] (Diskeeper Corporation)
R2 DUMeterSvc; C:\Program Files\DU Meter\DUMeterSvc.exe [1110480 2012-02-16] (Hagel Technologies Ltd.)
R2 FileZilla Server; C:\Program Files\FileZilla Server\FileZilla Server.exe [632320 2012-02-26] (FileZilla Project)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [264704 2010-11-16] ()
S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-06-20] ()
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-06-20] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 TempoMonitoringService; C:\Program Files\Toshiba TEMPRO\TempoSVC.exe [99720 2008-11-06] (Toshiba Europe GmbH)
S4 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [53408 2010-03-18] (Ulead Systems, Inc.)
S3 Visual Studio Analyzer RPC bridge; C:\Program Files\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe [34036 1998-06-06] (Microsoft Corporation)
S4 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [x]
S2 CLTNetCnService; "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [x]
S2 Harmonogram automatycznej usługi LiveUpdate; "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" [x]
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [x]

==================== Drivers (Whitelisted) ====================

R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [277736 2008-07-30] (Protect Software GmbH)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21576 2013-05-09] (AVAST Software)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278728 2008-02-04] ()
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-10] (Microsoft Corporation)
S3 DLPortIO; C:\Windows\system32\DRIVERS\DLPortIO.SYS [3584 2000-06-29] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [233024 2011-12-04] (DT Soft Ltd)
R3 DUMeterDrv; C:\Program Files\DU Meter\DUMETR32.SYS [19832 2012-02-16] (Hagel Technologies Ltd.)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG)
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49664 2006-04-13] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2006-04-13] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2006-04-13] (HP)
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [85248 2010-11-04] (Huawei Technologies Co., Ltd.)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [28672 2007-03-20] (http://libusb-win32.sourceforge.net)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2008-02-04] ()
R0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [19456 2006-07-28] (COMPAL ELECTRONIC INC.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [50704 2009-10-20] (CACE Technologies, Inc.)
R3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2007-06-18] (Padus, Inc.)
S3 SMIGrabber3C; C:\Windows\System32\Drivers\SmiUsbGrabber3C.sys [797312 2010-02-08] (Windows (R) Codename Longhorn DDK provider)
S3 usb2vcom; C:\Windows\System32\DRIVERS\usb2vcom.sys [22528 2005-06-23] (Ark Pioneer Microelectronics Ltd.)
R3 UVCFTR; C:\Windows\System32\DRIVERS\UVCFTR_S.SYS [17712 2007-01-26] (Chicony Electronics Co., Ltd.)
S3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [3072 2007-10-10] (RealVNC Ltd.)
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}; C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl [87536 2010-03-13] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-18] (Microsoft Corporation)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 catchme; \??\C:\Users\Darek\AppData\Local\Temp\catchme.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 PCANDIS4_RETWIFI; \??\C:\PROGRA~1\EEYEDI~1\RETINA~1\PCANDIS4_RETWIFI.SYS [x]
U5 PolicyAgent; C:\Windows\system32\svchost.exe [21504 2008-01-18] (Microsoft Corporation)
S4 sptd; System32\Drivers\sptd.sys [x]
S3 TpChoice; system32\DRIVERS\TpChoice.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-31 14:37 - 2013-08-31 14:38 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-08-31 14:19 - 2013-08-31 14:19 - 00001115 _____ C:\AdwCleaner[R3].txt
2013-08-31 14:03 - 2013-08-31 14:03 - 00004898 _____ C:\Users\Darek\Desktop\fix.bat
2013-08-31 12:52 - 2013-08-31 12:52 - 00039502 _____ C:\ComboFix.txt
2013-08-31 12:36 - 2013-08-31 12:52 - 00000000 ____D C:\ComboFix
2013-08-31 10:51 - 2013-08-31 14:58 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-21 20:26 - 2013-08-21 20:27 - 00000988 _____ C:\AdwCleaner[R2].txt
2013-08-18 21:07 - 2013-08-18 21:07 - 00005648 _____ C:\AdwCleaner[S3].txt
2013-08-18 19:38 - 2013-08-18 19:38 - 00000325 _____ C:\AdwCleaner[S2].txt
2013-08-18 19:36 - 2013-08-18 19:37 - 00005512 _____ C:\AdwCleaner[R1].txt
2013-08-18 09:58 - 2013-08-31 11:03 - 05117322 ____R (Swearware) C:\ComboFix.exe
2013-08-14 20:15 - 2013-08-14 20:15 - 00000000 ____D C:\Users\Darek\AppData\Local\SmallBasic
2013-08-14 20:12 - 2013-08-14 20:12 - 00000000 ____D C:\Users\Darek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Small Basic
2013-08-04 10:56 - 2013-08-04 10:56 - 00002038 _____ C:\Users\Public\Desktop\Google Earth.lnk

==================== One Month Modified Files and Folders =======

2013-08-31 16:06 - 2010-08-29 10:21 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4043528228-873498518-3011279549-1002UA.job
2013-08-31 16:05 - 2013-08-31 16:05 - 00000000 ____D C:\FRST
2013-08-31 15:51 - 2007-06-05 13:01 - 01602650 _____ C:\Windows\WindowsUpdate.log
2013-08-31 15:46 - 2010-02-05 17:44 - 00001034 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-31 15:45 - 2013-06-14 21:13 - 00000000 ____D C:\Users\Darek\AppData\Roaming\Dropbox
2013-08-31 15:44 - 2010-02-05 17:44 - 00001030 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-31 15:44 - 2006-11-02 14:47 - 00003296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-31 15:44 - 2006-11-02 14:47 - 00003296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-31 15:43 - 2013-07-18 18:05 - 00003202 _____ C:\Windows\PFRO.log
2013-08-31 15:43 - 2013-05-04 22:21 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-31 15:43 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-31 15:40 - 2008-10-10 22:09 - 00000012 _____ C:\Windows\bthservsdp.dat
2013-08-31 15:40 - 2006-11-02 15:01 - 00032546 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-31 15:38 - 2008-02-07 13:03 - 00000000 ____D C:\Filmy
2013-08-31 15:35 - 2012-11-13 21:13 - 00000338 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-08-31 15:22 - 2012-07-05 19:16 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-31 15:03 - 2010-11-12 21:53 - 00000000 ____D C:\Users\Darek\AppData\Roaming\vlc
2013-08-31 14:58 - 2013-08-31 10:51 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-31 14:46 - 2006-12-05 07:22 - 00715572 _____ C:\Windows\system32\perfh015.dat
2013-08-31 14:46 - 2006-12-05 07:22 - 00151434 _____ C:\Windows\system32\perfc015.dat
2013-08-31 14:46 - 2006-11-02 12:33 - 01616618 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-31 14:38 - 2013-08-31 14:37 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-08-31 14:19 - 2013-08-31 14:19 - 00001115 _____ C:\AdwCleaner[R3].txt
2013-08-31 14:03 - 2013-08-31 14:03 - 00004898 _____ C:\Users\Darek\Desktop\fix.bat
2013-08-31 13:36 - 2007-11-18 17:33 - 00000000 ____D C:\Users\Darek\AppData\Local\Apps\2.0
2013-08-31 12:52 - 2013-08-31 12:52 - 00039502 _____ C:\ComboFix.txt
2013-08-31 12:52 - 2013-08-31 12:36 - 00000000 ____D C:\ComboFix
2013-08-31 12:49 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-08-31 12:36 - 2013-05-30 14:33 - 00000000 ____D C:\Qoobox
2013-08-31 11:03 - 2013-08-18 09:58 - 05117322 ____R (Swearware) C:\ComboFix.exe
2013-08-31 10:35 - 2007-06-06 23:10 - 00002579 _____ C:\Users\Darek\Desktop\Microsoft Office Excel 2007.lnk
2013-08-30 23:16 - 2007-06-11 22:11 - 00000000 ____D C:\Users\Darek\AppData\Local\Google
2013-08-30 23:16 - 2007-06-11 22:10 - 00000000 ____D C:\Program Files\Google
2013-08-30 23:06 - 2010-08-29 10:21 - 00001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4043528228-873498518-3011279549-1002Core.job
2013-08-28 19:06 - 2012-11-13 17:38 - 00000000 ____D C:\Users\Darek\AppData\Roaming\HpUpdate
2013-08-27 20:33 - 2007-06-20 21:22 - 00002585 _____ C:\Users\Darek\Desktop\Microsoft Office Word 2007.lnk
2013-08-24 14:08 - 2011-05-01 11:58 - 00000000 ____D C:\Users\Darek\AppData\Local\ChomikBox
2013-08-24 10:36 - 2012-07-14 16:57 - 00000000 ____D C:\Users\Darek\.gstreamer-0.10
2013-08-21 20:27 - 2013-08-21 20:26 - 00000988 _____ C:\AdwCleaner[R2].txt
2013-08-21 18:27 - 2012-07-05 19:15 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 18:27 - 2012-07-05 19:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-18 21:07 - 2013-08-18 21:07 - 00005648 _____ C:\AdwCleaner[S3].txt
2013-08-18 19:38 - 2013-08-18 19:38 - 00000325 _____ C:\AdwCleaner[S2].txt
2013-08-18 19:37 - 2013-08-18 19:36 - 00005512 _____ C:\AdwCleaner[R1].txt
2013-08-18 10:52 - 2006-11-02 12:22 - 79495168 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-08-18 10:52 - 2006-11-02 12:22 - 333971456 _____ C:\Windows\system32\config\SYSTEM.bak
2013-08-18 10:52 - 2006-11-02 12:22 - 30932992 _____ C:\Windows\system32\config\COMPON~1.bak
2013-08-18 10:52 - 2006-11-02 12:22 - 02359296 _____ C:\Windows\system32\config\DEFAULT.bak
2013-08-18 10:52 - 2006-11-02 12:22 - 00167936 _____ C:\Windows\system32\config\SAM.bak
2013-08-18 10:52 - 2006-11-02 12:22 - 00032768 _____ C:\Windows\system32\config\SECURITY.bak
2013-08-18 10:50 - 2013-05-30 14:32 - 00000000 ____D C:\Windows\erdnt
2013-08-18 10:12 - 2007-06-06 18:38 - 00146181 _____ C:\Users\Darek\AppData\Roaming\nvModes.001
2013-08-14 20:32 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-14 20:15 - 2013-08-14 20:15 - 00000000 ____D C:\Users\Darek\AppData\Local\SmallBasic
2013-08-14 20:12 - 2013-08-14 20:12 - 00000000 ____D C:\Users\Darek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Small Basic
2013-08-06 21:07 - 2007-06-06 18:28 - 00000914 _____ C:\Users\Darek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-04 10:56 - 2013-08-04 10:56 - 00002038 _____ C:\Users\Public\Desktop\Google Earth.lnk

Files to move or delete:
====================
ZeroAccess:
C:\Users\Darek\AppData\Local\Google\Desktop\Install\{47b79dfc-3ccb-0b31-e9d8-570b2cb6d2f8}
ZeroAccess:
C:\Program Files\Google\Desktop\Install\{47b79dfc-3ccb-0b31-e9d8-570b2cb6d2f8}

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Program Files\Microsoft Security Client\MsMpEng.exe => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Microsoft Security Client


LastRegBack: 2013-08-31 15:52

==================== End Of Log ============================