Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-12-2013
Ran by Janusz (administrator) on JANUSZ-PC on 27-12-2013 10:55:59
Running from C:\Users\Janusz\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe
(Vimicro) C:\Windows\vmsnap3.exe
() C:\Windows\Domino.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
( ) C:\Program Files\ChomikBox\chomikbox.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(GG Network S.A.) C:\Users\Janusz\AppData\Local\GG\Application\gghub.exe
(Barracuda Networks, Inc.) C:\Users\Janusz\AppData\Roaming\Copy\CopyAgent.exe
(GG Network S.A.) C:\Users\Janusz\AppData\Local\GG\Application\ggapp.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(GG Network S.A.) C:\Users\Janusz\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(Marek Jasinski - www.FreeCommander.com) C:\Program Files\FreeCommander\FreeCommander.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4702208 2007-10-31] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Windows\SkyTel.exe [1826816 2007-10-11] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [VMSnap3] - C:\Windows\vmsnap3.exe [49152 2006-07-18] (Vimicro)
HKLM\...\Run: [Domino] - C:\Windows\Domino.exe [49152 2006-07-04] ()
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5078504 2013-03-21] (ESET)
HKCU\...\Run: [ChomikBox] - C:\Program Files\ChomikBox\chomikbox.exe [5979648 2012-11-15] ( )
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [GG] - C:\Users\Janusz\AppData\Local\GG\Application\gghub.exe [4047424 2013-12-10] (GG Network S.A.)
HKCU\...\Run: [Copy] - C:\Users\Janusz\AppData\Roaming\Copy\CopyAgent.exe [13472400 2013-12-13] (Barracuda Networks, Inc.)
MountPoints2: H - H:\Startme.exe
MountPoints2: {695c7370-8f40-11e0-af6e-8eeb2282bde0} - H:\Startme.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.gry.jeja.pl/47,pryskajace-banki.html
http://www.klikplej.pl/gra-online/97-pasjans
URLSearchHook: HKCU - (No Name) - {e5a1e26f-0d1d-4307-868f-fbd9a374ab54} -  No File
SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = 
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2976575
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: IEPluginBHO Class - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\System32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\System32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Janusz\AppData\Roaming\Mozilla\Firefox\Profiles\3udmmr1k.od27gru13
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Janusz\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Janusz\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome: 
=======
CHR HomePage: hxxp://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP&dt=071313
CHR RestoreOnStartup: "hxxp://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP&dt=071313"
CHR DefaultSearchKeyword: bing.com
CHR DefaultSearchProvider: Bing
CHR DefaultSearchURL: http://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=071313&q={searchTerms}&src=IE-SearchBox
CHR Extension: (YouTube) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0
CHR Extension: (Google Search) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0
CHR Extension: (SweetIM for Facebook) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0
CHR Extension: (SweetPacks Chrome Extension) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.0.0.1_0
CHR Extension: (Gmail) - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0
CHR HKLM\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Janusz\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1341664 2013-03-21] (ESET)
S3 FDR; C:\Program Files\Microsoft Logo\Software Certification Toolkit\FDRAgent.exe [806792 2010-05-12] (Microsoft Corp.)

==================== Drivers (Whitelisted) ====================

S2 E4LOADER; C:\Windows\System32\Drivers\e4ldr.sys [69656 2007-01-04] (Analog Deivces)
S3 e4usbaw; C:\Windows\System32\DRIVERS\e4usbaw.sys [104344 2007-01-04] (Analog Devices Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [171680 2013-02-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [122240 2013-01-10] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [150080 2013-01-10] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [46056 2013-01-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [47568 2013-02-14] (ESET)
R3 ip100Avista; C:\Windows\System32\DRIVERS\ipfnd51.sys [31232 2010-11-23] (IC Plus Corp.                                                                                                                                                                                                                                                )
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2006-10-18] ()
S3 PortTalk; C:\Windows\System32\Drivers\PortTalk.sys [3567 2002-01-12] (Beyond Logic http://www.beyondlogic.org)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2009-11-19] (MCCI Corporation)
R0 SysTrace; C:\Windows\System32\Drivers\SysTrace.sys [92800 2011-09-19] (Microsoft Corp.)
R3 vvftav303; C:\Windows\System32\drivers\vvftav303.sys [480128 2007-06-23] (Vimicro Corporation)
R3 ZSMC0303; C:\Windows\System32\Drivers\usbVM303.sys [1472768 2007-05-15] (Vimicro Corporation)
S4 DUMeterDrv; \??\C:\Program Files\DU Meter\DUMETR32.SYS [x]
S4 IpInIp; system32\DRIVERS\ipinip.sys [x]
S4 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S4 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-27 10:55 - 2013-12-27 10:56 - 00011431 _____ C:\Users\Janusz\Downloads\FRST.txt
2013-12-27 10:54 - 2013-12-27 10:54 - 00000000 ____D C:\FRST
2013-12-27 10:53 - 2013-12-27 10:53 - 00891200 _____ C:\Users\Janusz\Downloads\SecurityCheck.exe
2013-12-27 10:52 - 2013-12-27 10:52 - 00602112 _____ (OldTimer Tools) C:\Users\Janusz\Downloads\OTL.exe
2013-12-27 10:51 - 2013-12-27 10:51 - 01061649 _____ (Farbar) C:\Users\Janusz\Downloads\FRST.exe
2013-12-27 10:46 - 2013-12-27 10:46 - 00000000 ____D C:\Users\Janusz\Downloads\27 gru 13
2013-12-27 10:45 - 2013-12-27 10:48 - 00000000 ____D C:\Users\Janusz\Downloads\Raporty everest hdtune cpuid
2013-12-27 10:40 - 2013-12-27 10:40 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\NVIDIA
2013-12-27 09:55 - 2013-12-27 09:55 - 00099813 _____ C:\Users\Janusz\Downloads\27xii13FFbookmarks.html
2013-12-27 08:30 - 2013-12-27 08:31 - 08016168 _____ C:\Users\Janusz\Downloads\PORZUCONY27GRU13pgiixl2g.od9gru13.7z
2013-12-09 13:41 - 2013-12-09 13:41 - 00000000 ____D C:\Users\Janusz\Desktop\My Shared Folder
2013-12-09 13:05 - 2013-12-27 10:25 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Copy
2013-12-09 13:05 - 2013-12-09 13:05 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin
2013-12-09 13:05 - 2013-12-09 13:05 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Copy
2013-12-09 12:14 - 2013-12-09 12:14 - 00000824 _____ C:\Users\Public\Desktop\MozBackup.lnk
2013-12-09 12:14 - 2013-12-09 12:14 - 00000000 ____D C:\Program Files\MozBackup
2013-12-09 11:30 - 2013-12-09 11:30 - 00000870 _____ C:\Users\Janusz\Desktop\Mozilla Firefox.lnk
2013-12-09 11:30 - 2013-12-09 11:30 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

==================== One Month Modified Files and Folders =======

2013-12-27 10:56 - 2013-12-27 10:55 - 00011431 _____ C:\Users\Janusz\Downloads\FRST.txt
2013-12-27 10:54 - 2013-12-27 10:54 - 00000000 ____D C:\FRST
2013-12-27 10:53 - 2013-12-27 10:53 - 00891200 _____ C:\Users\Janusz\Downloads\SecurityCheck.exe
2013-12-27 10:53 - 2010-06-29 13:53 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Skype
2013-12-27 10:52 - 2013-12-27 10:52 - 00602112 _____ (OldTimer Tools) C:\Users\Janusz\Downloads\OTL.exe
2013-12-27 10:51 - 2013-12-27 10:51 - 01061649 _____ (Farbar) C:\Users\Janusz\Downloads\FRST.exe
2013-12-27 10:48 - 2013-12-27 10:45 - 00000000 ____D C:\Users\Janusz\Downloads\Raporty everest hdtune cpuid
2013-12-27 10:46 - 2013-12-27 10:46 - 00000000 ____D C:\Users\Janusz\Downloads\27 gru 13
2013-12-27 10:40 - 2013-12-27 10:40 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\NVIDIA
2013-12-27 10:38 - 2006-11-02 13:47 - 00003760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-27 10:38 - 2006-11-02 13:47 - 00003760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-27 10:37 - 2010-06-29 08:18 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-12-27 10:36 - 2010-06-29 13:49 - 00000000 ____D C:\Program Files\ipla
2013-12-27 10:35 - 2010-06-29 13:50 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\ipla
2013-12-27 10:33 - 2012-10-26 17:05 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Windows Performance Toolkit
2013-12-27 10:33 - 2012-10-26 17:05 - 00000000 ____D C:\Program Files\Microsoft Windows Performance Toolkit
2013-12-27 10:25 - 2013-12-09 13:05 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Copy
2013-12-27 10:00 - 2012-01-30 10:39 - 00000000 ____D C:\Users\Janusz\AppData\Local\ChomikBox
2013-12-27 09:55 - 2013-12-27 09:55 - 00099813 _____ C:\Users\Janusz\Downloads\27xii13FFbookmarks.html
2013-12-27 08:31 - 2013-12-27 08:30 - 08016168 _____ C:\Users\Janusz\Downloads\PORZUCONY27GRU13pgiixl2g.od9gru13.7z
2013-12-27 08:02 - 2013-07-18 10:03 - 00000000 ____D C:\Users\Janusz\Downloads\OK
2013-12-27 07:43 - 2009-04-13 09:02 - 01609052 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-27 07:43 - 2009-04-13 09:01 - 00712332 _____ C:\Windows\system32\perfh015.dat
2013-12-27 07:43 - 2009-04-13 09:01 - 00150308 _____ C:\Windows\system32\perfc015.dat
2013-12-27 07:41 - 2010-06-29 07:52 - 00000000 ____D C:\Users\Janusz
2013-12-27 07:38 - 2012-11-18 15:13 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\GG
2013-12-27 07:38 - 2010-12-03 19:13 - 00000000 ____D C:\Users\Janusz\.gstreamer-0.10
2013-12-27 07:37 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-27 00:14 - 2006-11-02 14:01 - 00032532 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-25 00:57 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\tracing
2013-12-22 07:57 - 2013-02-03 22:08 - 00000000 ___RD C:\Program Files\Skype
2013-12-22 07:57 - 2010-06-29 13:53 - 00000000 ____D C:\ProgramData\Skype
2013-12-12 15:05 - 2012-11-18 15:13 - 00000000 ____D C:\Users\Janusz\AppData\Local\GG
2013-12-09 18:49 - 2008-01-21 03:47 - 00147378 _____ C:\Windows\PFRO.log
2013-12-09 14:36 - 2013-10-11 13:06 - 00000000 ___HD C:\Users\Janusz\Downloads\16 11 2012
2013-12-09 13:46 - 2012-11-18 15:18 - 00000000 ___SD C:\Users\Janusz\GG dysk
2013-12-09 13:41 - 2013-12-09 13:41 - 00000000 ____D C:\Users\Janusz\Desktop\My Shared Folder
2013-12-09 13:05 - 2013-12-09 13:05 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin
2013-12-09 13:05 - 2013-12-09 13:05 - 00000000 ____D C:\Users\Janusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Copy
2013-12-09 12:14 - 2013-12-09 12:14 - 00000824 _____ C:\Users\Public\Desktop\MozBackup.lnk
2013-12-09 12:14 - 2013-12-09 12:14 - 00000000 ____D C:\Program Files\MozBackup
2013-12-09 11:42 - 2013-10-24 06:53 - 00000064 _____ C:\Users\Janusz\Desktop\mms.cfg
2013-12-09 11:39 - 2013-09-24 11:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-09 11:39 - 2013-09-24 11:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-09 11:30 - 2013-12-09 11:30 - 00000870 _____ C:\Users\Janusz\Desktop\Mozilla Firefox.lnk
2013-12-09 11:30 - 2013-12-09 11:30 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-09 11:30 - 2013-09-24 10:12 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-09 08:55 - 2010-06-29 08:31 - 00078336 _____ C:\Users\Janusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-09 08:26 - 2010-09-15 11:22 - 00000000 ____D C:\Windows\pss

Some content of TEMP:
====================
C:\Users\Janusz\AppData\Local\Temp\2.exe
C:\Users\Janusz\AppData\Local\Temp\2A2B.exe
C:\Users\Janusz\AppData\Local\Temp\ApnStub.exe
C:\Users\Janusz\AppData\Local\Temp\AskSLib.dll
C:\Users\Janusz\AppData\Local\Temp\AutoMapaPPCInterface.dll
C:\Users\Janusz\AppData\Local\Temp\bassmod.dll
C:\Users\Janusz\AppData\Local\Temp\conduit.exe
C:\Users\Janusz\AppData\Local\Temp\ffunzip.exe
C:\Users\Janusz\AppData\Local\Temp\FP_PL_PFS_INSTALLER-1.exe
C:\Users\Janusz\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\Janusz\AppData\Local\Temp\gg10.upgr.exe
C:\Users\Janusz\AppData\Local\Temp\gg10_upgr_to_11790_from_11119.exe
C:\Users\Janusz\AppData\Local\Temp\gg10_upgr_to_12096_from_11119.exe
C:\Users\Janusz\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\Janusz\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\Janusz\AppData\Local\Temp\InstallPlugin.exe
C:\Users\Janusz\AppData\Local\Temp\installstats.exe
C:\Users\Janusz\AppData\Local\Temp\InstHelper.exe
C:\Users\Janusz\AppData\Local\Temp\lisxc9zm.dll
C:\Users\Janusz\AppData\Local\Temp\mdwzby71.dll
C:\Users\Janusz\AppData\Local\Temp\nvStInst.exe
C:\Users\Janusz\AppData\Local\Temp\ooVooTBC.exe
C:\Users\Janusz\AppData\Local\Temp\SearchWithGoogleUpdate.exe
C:\Users\Janusz\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Janusz\AppData\Local\Temp\sfextra.dll
C:\Users\Janusz\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Janusz\AppData\Local\Temp\tbooVo.dll
C:\Users\Janusz\AppData\Local\Temp\wmpfirefoxplugin.exe
C:\Users\Janusz\AppData\Local\Temp\_is2B53.exe
C:\Users\Janusz\AppData\Local\Temp\_is4135.exe
C:\Users\Janusz\AppData\Local\Temp\_is7963.exe
C:\Users\Janusz\AppData\Local\Temp\_isEFF9.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-27 07:44

==================== End Of Log ============================