Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-11-2013 Ran by Administrator (administrator) on XXX on 25-11-2013 14:29:58 Running from D:\SIEĆ Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (Creative Technology Ltd) C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (PowerISO Computing, Inc.) C:\Program Files\PowerISO\PWRISOVM.EXE (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe () C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe (Realtek Semiconductor Corp.) C:\WINDOWS\SoundMan.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\rapimgr.exe (Dropbox, Inc.) C:\Documents and Settings\Administrator\Dane aplikacji\Dropbox\bin\Dropbox.exe (Creative Technology Ltd) C:\WINDOWS\system32\CTSVCCDA.EXE (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe () C:\WINDOWS\system32\PnkBstrA.exe (Skype Technologies S.A.) C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe (OldTimer Tools) D:\Downloads\OTL.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [VolPanel] - C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [180224 2007-02-28] (Creative Technology Ltd) HKLM\...\Run: [P17Helper] - Rundll32 SPIRun.dll,RunDLLEntry HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [32768 2003-10-31] (Cyberlink Corp.) HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [155648 2006-01-12] (Nero AG) HKLM\...\Run: [pdfFactory Pro Dyspozytor v3] - C:\WINDOWS\system32\spool\drivers\w32x86\3\fppdis3a.exe [573440 2008-10-28] (FinePrint Software, LLC) HKLM\...\Run: [PWRISOVM.EXE] - C:\Program Files\PowerISO\PWRISOVM.EXE [180224 2009-11-09] (PowerISO Computing, Inc.) HKLM\...\Run: [avast5] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4858968 2013-08-30] (AVAST Software) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit HKLM\...\Run: [HTC Sync Loader] - C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] () HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [QuickTime Task] - D:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.exe [16126464 2007-03-21] (Realtek Semiconductor Corp.) HKLM\...\Run: [SkyTel] - C:\WINDOWS\SkyTel.exe [1822720 2007-03-16] (Realtek Semiconductor Corp.) HKLM\...\Run: [SoundMan] - C:\WINDOWS\SoundMan.exe [86016 2006-07-21] (Realtek Semiconductor Corp.) HKLM\...\Run: [AlcWzrd] - C:\WINDOWS\alcwzrd.exe [2808832 2006-05-04] (RealTek Semicoductor Corp.) HKLM\...\Run: [Alcmtr] - C:\WINDOWS\Alcmtr.exe [69632 2005-05-03] (Realtek Semiconductor Corp.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [20131121] - C:\Program Files\Alwil Software\Avast5\Setup\emupdate\c8754499-fe71-4dfe-af8f-2bfb69fdf34c.exe [180184 2013-11-23] (AVAST Software) HKCU\...\Run: [H/PC Connection Agent] - C:\Program Files\Microsoft ActiveSync\wcescomm.exe [1204224 2005-11-15] (Microsoft Corporation) HKCU\...\Run: [Google Update] - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [136176 2011-10-24] (Google Inc.) HKCU\...\Policies\Explorer: [NoDriveAutoRun] 0xFFFFFFFF HKU\Default User\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32 HKU\Default User\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N AppInit_DLLs: C:\Windows\System32\ [ ] () Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Documents and Settings\Administrator\Dane aplikacji\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\AutoCAD Startup Accelerator.lnk ShortcutTarget: AutoCAD Startup Accelerator.lnk -> C:\Program Files\Common Files\Autodesk Shared\acstart16.exe (Autodesk, Inc) ==================== Internet (Whitelisted) ==================== ProxyServer: 5.199.166.250:8080 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/ SearchScopes: HKLM - DefaultScope value is missing. BHO: IE7Pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - &Google - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\36x2zgqu.default-1365534699500 FF Homepage: https://www.facebook.com/home.php|hxxp://www.kwestiasmaku.com/tapety/index.html FF NetworkProxy: "backup.ftp", "" FF NetworkProxy: "backup.ftp_port", 0 FF NetworkProxy: "backup.socks", "" FF NetworkProxy: "backup.socks_port", 0 FF NetworkProxy: "backup.ssl", "" FF NetworkProxy: "backup.ssl_port", 0 FF NetworkProxy: "ftp", "w3cache.pl" FF NetworkProxy: "ftp_port", 8080 FF NetworkProxy: "http", "w3cache.pl" FF NetworkProxy: "http_port", 8080 FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "w3cache.pl" FF NetworkProxy: "socks_port", 8080 FF NetworkProxy: "ssl", "w3cache.pl" FF NetworkProxy: "ssl_port", 8080 FF NetworkProxy: "type", 4 FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Extension: jid1-F9UJ2thwoAm5gQ - C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\36x2zgqu.default-1365534699500\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi FF Extension: Adblock Plus - C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\36x2zgqu.default-1365534699500\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF Chrome: ======= CHR HomePage: hxxp://www.gazeta.pl/ CHR Plugin: (Shockwave Flash) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\31.0.1650.57\pdf.dll () CHR Plugin: (Screen Capture Plugin) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.4.5_0\plugins/screen_capture.dll No File CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Plugin: (QuickTime Plug-in 7.7.4) - D:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - D:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - D:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - D:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - D:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Bloglovin') - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\agcgnofbabeggkbjcogfmjfaojpdnehm\1.1_0 CHR Extension: (Awesome Screenshot: Capture & Annotate) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.5.2_0 CHR Extension: (YouTube) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Timer) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\edebbhkhcaafmolanelponjjanocpacd\1.8.0.4_0 CHR Extension: (Notepad) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\efgpgbcidmnhkoeceikdacelidndbfgl\1.3_0 CHR Extension: (AdBlock) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.14_0 CHR Extension: (Ptasie Radio) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gijligoemhhgfdldpnhfpbacahbjafpo\1.3_0 CHR Extension: (Pinterest) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic\1.1_0 CHR Extension: (Dropbox) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl\3.0.8_0 CHR Extension: (BBC Good Food) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jnkffnoliaheoidfeejcmnidkkgilkja\5_0 CHR Extension: (Image Properties Context Menu) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\khagclindddokccfbmfmckaflngbmpon\0.7.6_0 CHR Extension: (Google Wallet) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Docs PDF/PowerPoint Viewer (by Google)) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn\3.10_0 CHR Extension: (Diigo Web Collector - Capture and Annotate) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\oojbgadfejifecebmdnhhkbhdjaphole\3.0.3_0 CHR Extension: (Gmail) - C:\DOCUME~1\ADMINI~1\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx CHR StartMenuInternet: Google Chrome - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe ========================== Services (Whitelisted) ================= R2 6to4; C:\Windows\System32\6to4svc.dll [100864 2010-02-12] (Microsoft Corporation) R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [46808 2013-08-30] (AVAST Software) R2 Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [44032 1999-12-12] (Creative Technology Ltd) R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [3622912 2010-03-25] (Native Instruments GmbH) R2 NwSapAgent; C:\Windows\System32\ipxsap.dll [66560 2001-10-26] (Microsoft Corporation) R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] () R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [66872 2008-12-03] () R2 Skype C2C Service; C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-08-13] (Skype Technologies S.A.) R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [327808 2005-07-20] (Aladdin Knowledge Systems Ltd.) S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [100096 2005-07-20] (Aladdin Knowledge Systems Ltd.) S3 alcan5wn; C:\Windows\System32\DRIVERS\alcan5wn.sys [53600 2003-12-08] (THOMSON) S3 alcaudsl; C:\Windows\System32\DRIVERS\alcaudsl.sys [70688 2003-12-08] (THOMSON) R1 Amfilter; C:\Windows\System32\DRIVERS\Amfilter.sys [8704 2007-01-24] (A4Tech Co.,Ltd.) S3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbprt.sys [13824 2007-02-11] (A4Tech Co.,Ltd.) R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [49760 2013-08-30] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] () R3 AtcL001; C:\Windows\System32\DRIVERS\atl01_xp.sys [38656 2007-03-15] (Attansic Technology corporation.) R3 CTUSFSYN; C:\Windows\System32\drivers\ctusfsyn.sys [162176 2006-08-07] (Creative Technology Ltd.) R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [25280 2008-05-26] (LogMeIn, Inc.) R2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [685056 2005-07-28] (Aladdin Knowledge Systems Ltd.) R2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2008-05-11] (Aladdin Knowledge Systems) R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [22560 2013-11-01] (REALiX(tm)) S2 IWPORT; C:\WINDOWS\SYSTEM32\DRIVERS\IWPORT.SYS [7896 2007-07-06] (Sven Goers Software) S3 k750bus; C:\Windows\System32\DRIVERS\k750bus.sys [55216 2005-07-07] (MCCI) S3 k750mdfl; C:\Windows\System32\DRIVERS\k750mdfl.sys [6576 2005-07-07] (MCCI) S3 k750mdm; C:\Windows\System32\DRIVERS\k750mdm.sys [89872 2005-07-07] (MCCI) S3 k750mgmt; C:\Windows\System32\DRIVERS\k750mgmt.sys [81728 2005-07-07] (MCCI) S3 k750obex; C:\Windows\System32\DRIVERS\k750obex.sys [79488 2005-07-07] (MCCI) S2 KeyP; C:\Windows\SYSTEM32\DRIVERS\KeyP.sys [14176 2007-07-06] (Microsoft Corporation) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] () R2 NwlnkIpx; C:\Windows\System32\DRIVERS\nwlnkipx.sys [88320 2008-04-13] (Microsoft Corporation) R2 NwlnkNb; C:\Windows\System32\DRIVERS\nwlnknb.sys [63232 2001-08-17] (Microsoft Corporation) R2 NwlnkSpx; C:\Windows\System32\DRIVERS\nwlnkspx.sys [55936 2001-08-17] (Microsoft Corporation) R3 P17xfi; C:\Windows\System32\drivers\P17xfi.sys [1173504 2006-09-25] (Creative Technology Ltd.) R3 p17xfilt; C:\Windows\System32\drivers\p17xfilt.sys [1659008 2007-03-22] (Sensaura) S3 SE27bus; C:\Windows\System32\DRIVERS\SE27bus.sys [61600 2006-09-18] (MCCI) S3 SE27mdfl; C:\Windows\System32\DRIVERS\SE27mdfl.sys [9360 2006-09-18] (MCCI) S3 SE27mdm; C:\Windows\System32\DRIVERS\SE27mdm.sys [97184 2006-09-18] (MCCI) S3 SE27mgmt; C:\Windows\System32\DRIVERS\SE27mgmt.sys [88688 2006-09-18] (MCCI) S3 se27nd5; C:\Windows\System32\DRIVERS\se27nd5.sys [18704 2006-09-18] (MCCI) S3 SE27obex; C:\Windows\System32\DRIVERS\SE27obex.sys [86560 2006-09-18] (MCCI) S3 se27unic; C:\Windows\System32\DRIVERS\se27unic.sys [90800 2006-09-18] (MCCI) S3 se46bus; C:\Windows\System32\DRIVERS\se46bus.sys [61536 2006-11-30] (MCCI) S3 se46mdfl; C:\Windows\System32\DRIVERS\se46mdfl.sys [9360 2006-11-30] (MCCI) S3 se46mdm; C:\Windows\System32\DRIVERS\se46mdm.sys [97088 2006-11-30] (MCCI) S3 se46mgmt; C:\Windows\System32\DRIVERS\se46mgmt.sys [88624 2006-11-30] (MCCI) S3 se46nd5; C:\Windows\System32\DRIVERS\se46nd5.sys [18704 2006-11-30] (MCCI) S3 se46obex; C:\Windows\System32\DRIVERS\se46obex.sys [86432 2006-11-30] (MCCI) S3 se46unic; C:\Windows\System32\DRIVERS\se46unic.sys [90800 2006-11-30] (MCCI) R1 Tcpip6; C:\Windows\System32\DRIVERS\tcpip6.sys [226880 2010-02-11] (Microsoft Corporation) S3 w300bus; C:\Windows\System32\DRIVERS\w300bus.sys [60800 2006-03-13] (MCCI) S3 w300mdfl; C:\Windows\System32\DRIVERS\w300mdfl.sys [9264 2006-03-13] (MCCI) S3 w300mdm; C:\Windows\System32\DRIVERS\w300mdm.sys [96352 2006-03-13] (MCCI) S3 w300mgmt; C:\Windows\System32\DRIVERS\w300mgmt.sys [87824 2006-03-13] (MCCI) S3 w300obex; C:\Windows\System32\DRIVERS\w300obex.sys [85696 2006-03-13] (MCCI) S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [104576 2005-06-14] (Microsoft Corporation) S4 IntelIde; No ImagePath U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-25 14:29 - 2013-11-25 14:29 - 00000000 ____D C:\FRST 2013-11-22 08:18 - 2013-11-22 08:18 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat 2013-11-22 08:17 - 2013-11-22 08:17 - 00000000 ____D C:\WINDOWS\CSC 2013-11-22 08:15 - 2013-11-22 08:15 - 00000000 ____D C:\WINDOWS\pss 2013-11-20 15:42 - 2013-11-21 10:25 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-11 22:07 - 2013-11-11 22:07 - 00000129 _____ C:\Documents and Settings\All Users\Dokumenty\Skrót do FLASH DRIVE (I).lnk 2013-11-01 20:12 - 2013-11-01 20:12 - 00022560 _____ (REALiX(tm)) C:\WINDOWS\system32\Drivers\HWiNFO32.SYS 2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\HWiNFO32 ==================== One Month Modified Files and Folders ======= 2013-11-25 14:29 - 2013-11-25 14:29 - 00000000 ____D C:\FRST 2013-11-25 13:58 - 2011-06-03 17:19 - 00001050 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-25 13:56 - 2011-12-11 17:34 - 00001164 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-583907252-1715567821-839522115-500UA.job 2013-11-25 12:22 - 2012-07-09 19:53 - 00000366 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job 2013-11-25 10:45 - 2008-04-12 12:09 - 01290593 _____ C:\WINDOWS\WindowsUpdate.log 2013-11-25 08:40 - 2013-07-30 16:34 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Dropbox 2013-11-25 08:39 - 2012-04-18 10:26 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Htc 2013-11-25 08:39 - 2011-06-03 17:19 - 00001046 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-25 08:39 - 2008-05-06 20:14 - 08405015 _____ C:\WINDOWS\TempFile 2013-11-25 08:39 - 2008-04-12 13:50 - 00000159 _____ C:\WINDOWS\wiadebug.log 2013-11-25 08:39 - 2008-04-12 13:50 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-11-25 08:39 - 2008-04-12 12:14 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-11-24 23:17 - 2008-04-12 12:14 - 00032524 _____ C:\WINDOWS\SchedLgU.Txt 2013-11-24 23:17 - 2008-04-12 12:14 - 00000292 ___SH C:\Documents and Settings\Administrator\ntuser.ini 2013-11-22 08:18 - 2013-11-22 08:18 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat 2013-11-22 08:17 - 2013-11-22 08:17 - 00000000 ____D C:\WINDOWS\CSC 2013-11-22 08:15 - 2013-11-22 08:15 - 00000000 ____D C:\WINDOWS\pss 2013-11-21 18:57 - 2010-02-01 09:51 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie 2013-11-21 14:56 - 2011-12-11 17:34 - 00001112 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-583907252-1715567821-839522115-500Core.job 2013-11-21 11:52 - 2008-06-12 19:40 - 01001425 _____ C:\WINDOWS\setupapi.log 2013-11-21 11:22 - 2008-04-12 13:39 - 00000000 ____D C:\WINDOWS\system32\ias 2013-11-21 10:25 - 2013-11-20 15:42 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-21 10:25 - 2012-07-17 10:31 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-11-20 20:55 - 2008-04-12 12:14 - 00000000 ____D C:\Documents and Settings\Administrator\Pulpit 2013-11-20 08:30 - 2001-07-21 23:17 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl 2013-11-17 23:26 - 2011-12-11 17:36 - 00002368 _____ C:\Documents and Settings\Administrator\Pulpit\Google Chrome.lnk 2013-11-13 09:01 - 2008-05-06 20:40 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe 2013-11-13 08:56 - 2012-04-26 13:09 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-11-13 08:56 - 2011-05-19 06:34 - 00071048 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-11-12 00:37 - 2013-10-15 19:51 - 00433616 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat 2013-11-12 00:37 - 2008-04-12 12:14 - 00000000 ___HD C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji 2013-11-11 22:07 - 2013-11-11 22:07 - 00000129 _____ C:\Documents and Settings\All Users\Dokumenty\Skrót do FLASH DRIVE (I).lnk 2013-11-11 22:07 - 2008-04-12 13:48 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty 2013-11-06 17:19 - 2008-04-29 16:00 - 00000116 ____C C:\WINDOWS\NeroDigital.ini 2013-11-06 00:33 - 2008-04-12 13:48 - 01125794 ____C C:\WINDOWS\system32\PerfStringBackup.INI 2013-11-06 00:33 - 2001-10-26 17:15 - 00503602 _____ C:\WINDOWS\system32\perfh015.dat 2013-11-06 00:33 - 2001-10-26 17:15 - 00090302 _____ C:\WINDOWS\system32\perfc015.dat 2013-11-05 21:04 - 2009-10-13 09:20 - 00000526 _____ C:\Documents and Settings\Administrator\Pulpit\Napi-projekt.lnk 2013-11-01 20:12 - 2013-11-01 20:12 - 00022560 _____ (REALiX(tm)) C:\WINDOWS\system32\Drivers\HWiNFO32.SYS 2013-11-01 20:12 - 2013-11-01 20:12 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\HWiNFO32 2013-11-01 20:12 - 2008-04-12 13:48 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy 2013-10-27 22:55 - 2001-07-21 23:16 - 00000700 _____ C:\WINDOWS\win.ini Some content of TEMP: ==================== C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\ICReinstall_aimp_Downloader.exe C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\ICReinstall_K-Lite_Codec_Pack_Full_Downloader.exe C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\jre-7u45-windows-i586-iftw.exe C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\{53377A12-C254-4236-93C3-56CC74F97E57}-31.0.1650.57_30.0.1599.101_chrome_updater.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2008-01-24 10:59] - [2008-04-14 21:51] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\Windows\System32\winlogon.exe [2004-08-04 00:44] - [2008-04-14 21:51] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\Windows\System32\svchost.exe [2004-08-04 00:44] - [2008-04-14 21:51] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2004-08-04 00:44] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\Windows\System32\User32.dll [2008-01-24 10:57] - [2008-04-14 21:50] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\Windows\System32\userinit.exe [2004-08-04 00:44] - [2008-04-14 21:51] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2004-08-04 00:36] - [2008-04-14 20:31] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================