Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-09-2013
Ran by czekierap (administrator) on CZEKIERAPYO on 11-09-2013 08:55:12
Running from C:\Users\czekierap\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Could not list processes ===============

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2866960 2011-12-16] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [410896 2011-12-16] (Synaptics)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [OnekeyStudio] - C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [789856 2012-05-20] (Lenovo)
HKLM\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2012-05-20] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6200368 2012-05-20] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [206176 2012-05-20] (Lenovo)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [Cm106Sound] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [ALLUpdate] - C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [1379840 2011-08-16] ()
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Facebook Update] - C:\Users\czekierap\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-21] (Facebook Inc.)
HKCU\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIJE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKCU\...\Run: [NTRedirect] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\czekierap\AppData\Roaming\BabSolution\Shared\NTRedirect.dll",Run <===== ATTENTION
HKCU\...\Run: [WebCake Desktop] - C:\Users\czekierap\AppData\Roaming\Betcat\WebCakeDesktop.exe [50968 2013-08-29] (WebCake LLC)
HKCU\...\Run: [Slick Savings] - C:\Users\czekierap\AppData\Roaming\Slick Savings\CouponsHelper.exe [578368 2013-06-14] (Spigot, Inc.)
MountPoints2: {c2e7de4d-e8ac-11e1-97a8-08edb9d716df} - H:\AutoRun.exe
MountPoints2: {c2e7de4f-e8ac-11e1-97a8-08edb9d716df} - H:\AutoRun.exe
MountPoints2: {cff4a57f-dc01-11e1-a506-08edb9d716df} - H:\Startme.exe
MountPoints2: {fc0ebd52-dcc2-11e1-b82f-08edb9d716df} - H:\AutoRun.exe
MountPoints2: {fc0ebd5f-dcc2-11e1-b82f-08edb9d716df} - H:\AutoRun.exe
MountPoints2: {fc0ebf5b-dcc2-11e1-b82f-08edb9d716df} - H:\AutoRun.exe
MountPoints2: {fc0ebf5d-dcc2-11e1-b82f-08edb9d716df} - H:\AutoRun.exe
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-12] (Intel Corporation)
HKLM-x32\...\Run: [LockKey] - C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [Intelligent Touchpad] - C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe [291272 2011-12-08] ()
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-28] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2012-05-20] (Lenovo)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe [1493288 2012-01-13] (Nero AG)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VC10Player] - C:\Program Files (x86)\Virtual CD v10\System\VC10Play.exe [411464 2010-04-14] (H+H Software GmbH)
HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [90448 2011-09-01] (Research In Motion Limited)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [SearchSettings] - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1303360 2013-08-08] (Spigot, Inc.)
HKU\UpdatusUser\...\Run: [Power2GoExpress] - NA
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [247144 2012-08-30] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll [2691536 2013-07-26] ()
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.search.yahoo.com?type=937811&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
URLSearchHook: (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {06700C55-9E36-43E5-9965-55673A5C6308} URL = http://uk.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {06700C55-9E36-43E5-9965-55673A5C6308} URL = http://uk.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=0E4D9C4E36156211&affID=124001&tsp=4961
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: WebCake - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\Movdap\WebCakeIEClient.dll (Let Them Eat Web-Cake LLC)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Slick Savings - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\czekierap\AppData\Roaming\Slick Savings\Coupons.dll (Spigot, Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {DCC39ACE-709B-44EA-B062-5F6BE2774644} -  No File
BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
BHO-x32: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.4\ytdToolbarIE.dll (Spigot, Inc.)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\7.4\ytdToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1

FireFox:
========
FF ProfilePath: C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default
FF user.js: detected! => C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\user.js
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2571 - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1739 - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 - C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\czekierap\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF SearchPlugin: C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\searchplugins\babylon.xml
FF Extension: Lyrics-Pal - C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\Extensions\125
FF Extension: WebCake - C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\Extensions\plugin@getwebcake.com
FF Extension: Slick Savings - C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\Extensions\savingsslider@mybrowserbar.com
FF Extension: DownloadHelper - C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: IplextoALL - C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\Extensions\IplextoALL@ALLPlayer.org.xpi
FF Extension: ytd - C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\Extensions\ytd@mybrowserbar.com
FF Extension: No Name - C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: No Name - C:\Users\czekierap\AppData\Roaming\Mozilla\Firefox\Profiles\txqky2xq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on

Chrome: 
=======
CHR HomePage: hxxp://uk.search.yahoo.com?type=937811&fr=spigot-yhp-ch
CHR RestoreOnStartup: "hxxp://uk.search.yahoo.com?type=937811&fr=spigot-yhp-ch"
CHR Extension: (DealPly Shopping) - C:\Users\CZEKIE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmfnfnpmhcllokmkepffndflpnadjmma\3.5.3.0_0
CHR Extension: (Lyrics-Pal) - C:\Users\CZEKIE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmiopbgcekanlhpjkonogoljpfmhpkhf\1.125
CHR HKLM-x32\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files (x86)\Movdap\WebCakeLayers.crx
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Users\czekierap\AppData\Local\Slick Savings\coupons.crx
CHR HKLM-x32\...\Chrome\Extension: [nohfdhapjjlndfgjnmdlcabloeembdkj] - C:\Users\czekierap\AppData\Roaming\BabSolution\CR\delta2.crx
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [945440 2012-02-01] (Broadcom Corporation.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
S2 NSDSvc; C:\Windows\System32\NSDSvc.exe [120160 2011-12-23] (Lenovo)
R2 VC10SecS; C:\Program Files (x86)\Virtual CD v10\System\VC10SecS.exe [144712 2010-04-14] (H+H Software GmbH)
R2 WebCakeUpdater; C:\Program Files (x86)\Movdap\WBDesktop.Updater.1.0.0.16.exe [51992 2013-08-15] (cake bake)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-02] (Broadcom Corporation.)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()
S3 HH10Help.sys; C:\Windows\system32\drivers\HH10Help.sys [24088 2009-07-09] (H+H Software GmbH)
S3 HH10Help.sys; C:\Windows\system32\drivers\HH10Help.sys [24088 2009-07-09] (H+H Software GmbH)
R3 hswpan; C:\Windows\System32\DRIVERS\hswpan.sys [109056 2012-01-27] (Ozmo Inc)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2012-07-20] (ITE                      )
S3 L6UX2; C:\Windows\System32\Drivers\L6UX264.sys [772224 2012-08-21] (Line 6)
R0 NSD; C:\Windows\System32\drivers\nsd.sys [24160 2011-12-23] (Lenovo Corporation")
R1 Nsdfltr; C:\Windows\System32\drivers\Nsdfltr.sys [59488 2011-12-21] (Lenovo Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [74752 2011-07-25] (Research In Motion Limited)
R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44032 2011-07-20] (Research in Motion Ltd)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8208488 2011-09-06] (Realtek Semiconductor Corp.)
S3 USBMULCD; C:\Windows\System32\drivers\CM10664.sys [1310720 2010-08-12] (C-Media Electronics Inc)
R1 vdrv1000; C:\Windows\System32\DRIVERS\vdrv1000.sys [223256 2010-03-25] (H+H Software GmbH)
U3 BcmSqlStartupSvc; 
U2 CLKMSVC10_3A60B698; 
U2 CLKMSVC10_C3B3B687; 
U2 DriverService; 
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
U2 iATAgentService; 
U2 idealife Update Service; 
U3 IGRS; 
U2 IviRegMgr; 
U2 Oasis2Service; 
U2 PCCarerService; 
U2 ReadyComm.DirectRouter; 
U2 RichVideo; 
U2 RtLedService; 
U2 SeaPort; 
U2 SoftwareService; 
U3 SQLWriter; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-11 08:33 - 2013-09-11 08:33 - 00139854 _____ C:\Users\czekierap\Desktop\OTL.Txt
2013-09-11 08:33 - 2013-09-11 08:33 - 00103582 _____ C:\Users\czekierap\Desktop\Extras.Txt
2013-09-11 08:24 - 2013-09-11 08:24 - 00602112 _____ (OldTimer Tools) C:\Users\czekierap\Desktop\OTL.scr
2013-09-11 08:18 - 2013-09-11 08:18 - 01949408 _____ (Farbar) C:\Users\czekierap\Desktop\FRST64.exe
2013-09-10 19:42 - 2013-09-10 20:58 - 00047616 _____ C:\Users\czekierap\Desktop\Heathrow RotaV48(9.9).xls
2013-08-29 23:16 - 2013-08-29 23:35 - 732885202 _____ C:\Users\czekierap\Desktop\Cialo.2003.DVDRip.XviD.PL.rar
2013-08-29 01:49 - 2013-09-11 08:06 - 00000000 ____D C:\Users\czekierap\AppData\Roaming\Betcat
2013-08-28 00:30 - 2013-08-28 00:40 - 00000000 ____D C:\Users\czekierap\AppData\OICE_15_974FA576_32C1D314_1330
2013-08-24 19:09 - 2013-08-24 19:09 - 00000011 _____ C:\Users\czekierap\Desktop\Ubezpiecznie auta UK telefon.txt
2013-08-24 15:36 - 2013-08-24 15:40 - 00000000 ____D C:\Users\czekierap\AppData\OICE_15_974FA576_32C1D314_1159
2013-08-21 18:47 - 2013-08-21 18:48 - 00000000 ____D C:\Users\czekierap\AppData\OICE_15_974FA576_32C1D314_392A
2013-08-20 23:15 - 2013-08-20 23:15 - 00000000 ____D C:\Users\czekierap\Desktop\Antykwariat (Nizam & Zachar) - 2013
2013-08-20 23:00 - 2013-08-25 22:15 - 00000000 ____D C:\Users\czekierap\Desktop\Z neta nternetu fotki uzyteczne
2013-08-20 23:00 - 2013-08-20 23:00 - 00000000 ____D C:\Users\czekierap\Desktop\Notatnikowe info itp NEW
2013-08-20 22:59 - 2013-08-20 22:59 - 00000000 ____D C:\Users\czekierap\Desktop\Projekty PS Rap All Plyty Plakaty itp
2013-08-17 11:31 - 2013-08-17 22:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-09-11 08:54 - 2013-09-11 08:54 - 00000000 ____D C:\FRST
2013-09-11 08:54 - 2012-07-18 09:57 - 00000000 ____D C:\Users\czekierap\AppData\Roaming\Skype
2013-09-11 08:48 - 2012-05-20 20:21 - 01703505 _____ C:\Windows\WindowsUpdate.log
2013-09-11 08:33 - 2013-09-11 08:33 - 00139854 _____ C:\Users\czekierap\Desktop\OTL.Txt
2013-09-11 08:33 - 2013-09-11 08:33 - 00103582 _____ C:\Users\czekierap\Desktop\Extras.Txt
2013-09-11 08:29 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-11 08:29 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-11 08:24 - 2013-09-11 08:24 - 00602112 _____ (OldTimer Tools) C:\Users\czekierap\Desktop\OTL.scr
2013-09-11 08:18 - 2013-09-11 08:18 - 01949408 _____ (Farbar) C:\Users\czekierap\Desktop\FRST64.exe
2013-09-11 08:16 - 2012-07-21 19:11 - 00000944 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2610805142-2915838027-2830732470-1002UA.job
2013-09-11 08:16 - 2012-07-18 09:40 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-11 08:15 - 2012-07-18 13:27 - 00000000 ____D C:\Users\CZEKIE~1\AppData\Local\Adobe
2013-09-11 08:10 - 2012-05-20 21:10 - 00002194 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-11 08:10 - 2012-05-20 21:10 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-11 08:06 - 2013-08-29 01:49 - 00000000 ____D C:\Users\czekierap\AppData\Roaming\Betcat
2013-09-11 08:06 - 2012-05-20 21:11 - 00178733 _____ C:\Windows\system32\fastboot.set
2013-09-11 08:05 - 2013-07-11 09:54 - 00013016 _____ C:\Windows\setupact.log
2013-09-11 08:05 - 2013-06-22 22:38 - 00349587 _____ C:\FaceProv.log
2013-09-11 08:05 - 2012-05-20 21:10 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-11 08:05 - 2012-05-20 21:09 - 00000000 ____D C:\ProgramData\VeriFace
2013-09-11 08:05 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-10 21:16 - 2012-07-18 09:40 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-10 21:16 - 2012-07-18 09:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-10 21:16 - 2012-07-18 09:40 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-10 20:58 - 2013-09-10 19:42 - 00047616 _____ C:\Users\czekierap\Desktop\Heathrow RotaV48(9.9).xls
2013-09-10 20:16 - 2012-07-21 19:11 - 00000922 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2610805142-2915838027-2830732470-1002Core.job
2013-09-10 19:42 - 2012-05-21 06:09 - 00742606 _____ C:\Windows\system32\perfh015.dat
2013-09-10 19:42 - 2012-05-21 06:09 - 00156592 _____ C:\Windows\system32\perfc015.dat
2013-09-10 19:42 - 2009-07-14 06:13 - 01674932 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-10 19:40 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-08-29 23:35 - 2013-08-29 23:16 - 732885202 _____ C:\Users\czekierap\Desktop\Cialo.2003.DVDRip.XviD.PL.rar
2013-08-29 19:58 - 2012-07-18 09:46 - 00000000 ____D C:\Users\czekierap\AppData\Roaming\AIMP3
2013-08-29 08:42 - 2013-08-10 17:01 - 00000000 ____D C:\Users\czekierap\AppData\Roaming\Movdap
2013-08-28 00:40 - 2013-08-28 00:30 - 00000000 ____D C:\Users\czekierap\AppData\OICE_15_974FA576_32C1D314_1330
2013-08-25 22:16 - 2013-06-30 11:30 - 00000000 ____D C:\Users\czekierap\Desktop\Bity sprzedaż loop Karas
2013-08-25 22:15 - 2013-08-20 23:00 - 00000000 ____D C:\Users\czekierap\Desktop\Z neta nternetu fotki uzyteczne
2013-08-25 22:15 - 2013-03-15 12:31 - 00000000 ____D C:\Users\czekierap\Desktop\stuudio
2013-08-24 19:09 - 2013-08-24 19:09 - 00000011 _____ C:\Users\czekierap\Desktop\Ubezpiecznie auta UK telefon.txt
2013-08-24 15:40 - 2013-08-24 15:36 - 00000000 ____D C:\Users\czekierap\AppData\OICE_15_974FA576_32C1D314_1159
2013-08-23 22:07 - 2012-08-12 12:24 - 00000000 ____D C:\Users\czekierap\Desktop\CV inne do wysyslki
2013-08-22 16:44 - 2013-08-06 16:44 - 00000921 _____ C:\Windows\Cm106.ini.imi
2013-08-21 18:48 - 2013-08-21 18:47 - 00000000 ____D C:\Users\czekierap\AppData\OICE_15_974FA576_32C1D314_392A
2013-08-21 16:02 - 2012-07-18 10:02 - 00000000 ____D C:\Users\czekierap\AppData\Roaming\GG
2013-08-20 23:15 - 2013-08-20 23:15 - 00000000 ____D C:\Users\czekierap\Desktop\Antykwariat (Nizam & Zachar) - 2013
2013-08-20 23:00 - 2013-08-20 23:00 - 00000000 ____D C:\Users\czekierap\Desktop\Notatnikowe info itp NEW
2013-08-20 22:59 - 2013-08-20 22:59 - 00000000 ____D C:\Users\czekierap\Desktop\Projekty PS Rap All Plyty Plakaty itp
2013-08-20 22:59 - 2013-08-08 11:48 - 00000000 ____D C:\Users\czekierap\Desktop\Photo S4
2013-08-18 10:42 - 2012-07-18 09:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-17 22:29 - 2013-08-17 11:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 20:22 - 2013-08-10 17:01 - 00000000 ____D C:\Program Files (x86)\Movdap
2013-08-13 22:01 - 2013-08-01 23:01 - 00000000 ____D C:\Program Files (x86)\Web Cake

Files to move or delete:
====================
C:\Users\CZEKIE~1\AppData\Local\Temp\appshat-distribution.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\DeltaTB.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\dp.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\ICReinstall_setup.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\installstats.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\LyricsPal_1060-8101_v122.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\R116101.EXE
C:\Users\CZEKIE~1\AppData\Local\Temp\SkypeSetup.exe
C:\Users\CZEKIE~1\AppData\Local\Temp\UpdateCheckerSetup.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-25 00:49

==================== End Of Log ============================