Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014
Ran by tomek (administrator) on RANCZO-E4FDC022 on 28-04-2014 20:59:21
Running from C:\Documents and Settings\tomek\Pulpit\OTL-fixitpc.pl
Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files\Intel\AMT\atchksrv.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe
(OptionNV) C:\Program Files\Option\GlobeTrotter Connect\GtDetectSc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Intel Corporation) C:\Program Files\Intel\AMT\LMS.exe
(O2Micro International) C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
(Intel Corporation) C:\Program Files\Intel\AMT\UNS.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Microsoft Corporation) C:\WINDOWS\system32\taskmgr.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [3159744 2013-10-07] (ESET)
HKLM\...\Run: [SpyHunter Security Suite] => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe [6434176 2014-04-28] (Enigma Software Group USA, LLC.)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\.DEFAULT\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\.DEFAULT\...\RunOnce: [Del295328] - cmd.exe /Q /D /c del "C:\WINDOWS\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del432531] - cmd.exe /Q /D /c del "C:\WINDOWS\TEMP\0.del"
HKU\S-1-5-21-448539723-790525478-1417001333-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [20924576 2014-02-10] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {67771B8E-AA58-4E02-A4AF-60B2CF333E72} URL = http://www.sweet-page.com/web/?type=ds&ts=1394470207&from=cor&uid=HitachiXHTS542525K9SA00_080225BB0F00WDHTKGHAX&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 - D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird
FF Extension: ESET Endpoint Security Extension - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird [2014-04-18]

Chrome: 
=======
CHR HomePage: hxxp://google.pl/
CHR StartupUrls: "hxxp://pl.msn.com/?pc=UP97&ocid=UP97DHP", "hxxp://google.pl/"
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-28]
CHR Extension: (Dysk Google) - C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-28]
CHR Extension: (YouTube) - C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-28]
CHR Extension: (Adblock Plus) - C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-18]
CHR Extension: (Szukaj w Google) - C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-28]
CHR Extension: (Google Wallet) - C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-28]
CHR Extension: (Gmail) - C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-28]

========================== Services (Whitelisted) =================

R2 atchksrv; C:\Program Files\Intel\AMT\atchksrv.exe [183064 2007-04-20] (Intel Corporation)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [34296 2013-10-07] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe [1025584 2013-10-07] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [185104 2013-10-07] (ESET)
R2 GtDetectSc; C:\Program Files\Option\GlobeTrotter Connect\GtDetectSc.exe [200704 2008-04-30] (OptionNV)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-03-08] (Oracle Corporation)
R2 NwSapAgent; C:\WINDOWS\System32\ipxsap.dll [66560 2001-10-26] (Microsoft Corporation)
R2 o2flash; C:\Program Files\O2Micro Oz128 Driver\o2flash.exe [65536 2007-02-12] (O2Micro International)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2014-01-09] (Enigma Software Group USA, LLC.)
R2 UNS; C:\Program Files\Intel\AMT\UNS.exe [1489688 2007-04-20] (Intel Corporation)

==================== Drivers (Whitelisted) ====================

S3 BrScnUsb; C:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R1 eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [166672 2013-10-25] (ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [128056 2013-09-09] (ESET)
R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [110552 2013-09-09] (ESET)
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [12288 2014-01-07] ()
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
S3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [60104 2010-08-24] (FTDI Ltd.)
R3 ITEIRDA; C:\WINDOWS\System32\DRIVERS\ITEirda.sys [23552 2007-04-28] (ITE Tech. Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 NETw4x32; C:\WINDOWS\System32\DRIVERS\NETw4x32.sys [2203520 2007-02-25] (Intel Corporation)
R3 NETwLx32; C:\WINDOWS\System32\DRIVERS\NETwLx32.sys [6616816 2013-05-02] (Intel Corporation)
R2 NwlnkIpx; C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys [88320 2008-04-13] (Microsoft Corporation)
R2 NwlnkNb; C:\WINDOWS\System32\DRIVERS\nwlnknb.sys [63232 2001-08-17] (Microsoft Corporation)
R2 NwlnkSpx; C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys [55936 2001-08-17] (Microsoft Corporation)
R3 Rasirda; C:\WINDOWS\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
R3 SNP2UVC; C:\WINDOWS\System32\DRIVERS\snp2uvc.sys [1729152 2007-06-12] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [26840 2012-08-21] (GEAR Software Inc.)
S4 IntelIde; No ImagePath
U3 awqcrpog; \??\C:\DOCUME~1\tomek\USTAWI~1\Temp\awqcrpog.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-28 22:49 - 2014-04-28 22:49 - 00006421 _____ () C:\spyhunter.log
2014-04-28 20:58 - 2014-04-28 20:59 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\OTL-fixitpc.pl
2014-04-28 20:53 - 2014-04-28 20:55 - 00000000 ____D () C:\FRST
2014-04-28 20:50 - 2014-04-28 20:50 - 00001654 _____ () C:\sh4_service.log
2014-04-28 20:21 - 2014-04-28 20:21 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\Nowy folder (2)
2014-04-28 20:14 - 2014-04-28 20:14 - 00000000 ____D () C:\WINDOWS\pss
2014-04-28 20:10 - 2014-04-28 20:10 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\Nowy folder
2014-04-28 19:37 - 2014-04-28 19:37 - 00001969 _____ () C:\Documents and Settings\tomek\Pulpit\SpyHunter.lnk
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\sh4ldr
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\Documents and Settings\tomek\Menu Start\Programy\SpyHunter
2014-04-28 19:32 - 2014-04-28 19:32 - 00000000 ____D () C:\Program Files\7-Zip
2014-04-28 19:32 - 2014-04-28 19:32 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\7-Zip
2014-04-21 07:22 - 2014-04-21 07:22 - 00002720 _____ () C:\TP-LINK  34F3BC.p10
2014-04-18 19:36 - 2014-04-18 19:36 - 00000000 ____D () C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\ESET
2014-04-18 19:34 - 2014-04-18 19:34 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
2014-04-18 19:33 - 2014-04-18 19:36 - 00000000 ____D () C:\AdwCleaner
2014-04-18 19:26 - 2014-04-18 19:26 - 00000000 ____D () C:\Program Files\ESET
2014-04-18 19:26 - 2014-04-18 19:26 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\ESET
2014-04-18 19:26 - 2014-04-18 19:26 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\ESET
2014-04-18 19:13 - 2014-04-18 19:13 - 00017416 _____ () C:\ComboFix.txt
2014-04-18 19:10 - 2014-04-28 19:12 - 00000443 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.ics
2014-04-18 19:08 - 2014-04-18 19:08 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2014-04-18 19:08 - 2014-04-18 19:08 - 00000000 ____H () C:\WINDOWS\system32\config\system.tmp.LOG
2014-04-18 19:08 - 2014-04-18 19:08 - 00000000 ____H () C:\WINDOWS\system32\config\software.tmp.LOG
2014-04-18 19:08 - 2014-04-18 19:08 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.tmp.LOG
2014-04-18 19:08 - 2014-04-18 19:08 - 00000000 ____H () C:\WINDOWS\system32\config\default.tmp.LOG
2014-04-18 03:48 - 2014-04-28 19:10 - 00000000 ____D () C:\Qoobox
2014-04-18 03:48 - 2014-04-18 19:12 - 00000000 ____D () C:\WINDOWS\erdnt
2014-04-18 03:48 - 2014-04-18 03:48 - 00000000 ___RD () C:\Documents and Settings\tomek\Menu Start\Programy\Narzędzia administracyjne
2014-04-18 03:47 - 2014-04-18 18:58 - 05195154 ____R (Swearware) C:\Documents and Settings\tomek\Pulpit\ComboFix.exe
2014-04-13 09:11 - 2014-04-28 19:12 - 00000379 _____ () C:\WINDOWS\nsw.log
2014-04-13 08:27 - 2013-05-02 15:23 - 06616816 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\NETwLx32.sys
2014-04-13 08:27 - 2013-05-02 15:23 - 02763504 _____ (Intel Corporation) C:\WINDOWS\system32\NETwLr32.dll
2014-04-13 08:27 - 2013-05-02 15:23 - 00682736 _____ (Intel Corporation) C:\WINDOWS\system32\NETwLc32.dll
2014-04-13 07:26 - 2014-04-13 07:26 - 00000000 __SHD () C:\Documents and Settings\tomek\PrivacIE
2014-04-13 07:06 - 2014-04-13 07:06 - 00000764 _____ () C:\Documents and Settings\tomek\Pulpit\TP-LINK Modem Router Settings.txt
2014-04-13 06:46 - 2014-04-13 06:46 - 00000405 _____ () C:\WSC_PROFILE.txt
2014-04-08 06:15 - 2014-04-08 06:15 - 00000000 ____D () C:\Program Files\Dropbox
2014-04-08 06:15 - 2014-04-08 06:15 - 00000000 ____D () C:\Documents and Settings\tomek\Menu Start\Programy\Dropbox
2014-04-08 06:15 - 2014-04-08 06:15 - 00000000 ____D () C:\Documents and Settings\tomek\Dane aplikacji\DropboxMaster
2014-04-08 06:14 - 2014-04-08 06:15 - 00000000 ____D () C:\Documents and Settings\tomek\Dane aplikacji\Dropbox
2014-04-06 09:19 - 2014-04-06 09:19 - 00001880 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk
2014-04-06 09:19 - 2014-04-06 09:19 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-04-06 09:19 - 2014-04-06 09:19 - 00000000 ____D () C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Skype
2014-04-06 09:19 - 2014-04-06 09:19 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Skype
2014-04-03 23:42 - 2014-04-07 23:11 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\matura
2014-04-03 19:48 - 2014-04-03 19:48 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\gilow112

==================== One Month Modified Files and Folders =======

2014-04-28 22:49 - 2014-04-28 22:49 - 00006421 _____ () C:\spyhunter.log
2014-04-28 22:49 - 2014-01-28 23:31 - 00000000 ____D () C:\Program Files\DriverToolkit
2014-04-28 20:59 - 2014-04-28 20:58 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\OTL-fixitpc.pl
2014-04-28 20:58 - 2014-01-27 21:18 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit
2014-04-28 20:55 - 2014-04-28 20:53 - 00000000 ____D () C:\FRST
2014-04-28 20:51 - 2014-01-27 21:11 - 01993799 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-28 20:50 - 2014-04-28 20:50 - 00001654 _____ () C:\sh4_service.log
2014-04-28 20:50 - 2014-01-28 23:24 - 00001030 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-28 20:50 - 2014-01-27 22:02 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-04-28 20:50 - 2014-01-27 22:02 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-04-28 20:50 - 2014-01-27 21:17 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-28 20:48 - 2014-01-27 21:18 - 00000188 ___SH () C:\Documents and Settings\tomek\ntuser.ini
2014-04-28 20:48 - 2014-01-27 21:17 - 00032526 _____ () C:\WINDOWS\SchedLgU.Txt
2014-04-28 20:28 - 2014-01-28 21:36 - 00000000 ____D () C:\WINDOWS\system32\ReinstallBackups
2014-04-28 20:28 - 2014-01-27 21:58 - 01208371 _____ () C:\WINDOWS\setupapi.log
2014-04-28 20:21 - 2014-04-28 20:21 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\Nowy folder (2)
2014-04-28 20:16 - 2014-01-28 23:24 - 00001034 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-28 20:14 - 2014-04-28 20:14 - 00000000 ____D () C:\WINDOWS\pss
2014-04-28 20:14 - 2014-01-27 21:57 - 00000211 ___SH () C:\boot.ini
2014-04-28 20:14 - 2001-07-21 20:16 - 00000507 _____ () C:\WINDOWS\win.ini
2014-04-28 20:14 - 2001-07-21 20:15 - 00000227 _____ () C:\WINDOWS\system.ini
2014-04-28 20:12 - 2014-01-27 21:32 - 00261784 _____ () C:\WINDOWS\DPINST.LOG
2014-04-28 20:10 - 2014-04-28 20:10 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\Nowy folder
2014-04-28 20:08 - 2014-03-10 18:51 - 00000000 ____D () C:\Documents and Settings\tomek\Dane aplikacji\Skype
2014-04-28 19:45 - 2014-01-27 21:58 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-04-28 19:42 - 2014-01-27 21:18 - 00001599 _____ () C:\Documents and Settings\tomek\Menu Start\Programy\Pomoc zdalna.lnk
2014-04-28 19:41 - 2014-01-27 21:12 - 00001607 _____ () C:\Documents and Settings\All Users\Menu Start\Określ dostęp do programów i ich ustawienia domyślne.lnk
2014-04-28 19:41 - 2014-01-27 21:12 - 00001599 _____ () C:\Documents and Settings\Default User\Menu Start\Programy\Pomoc zdalna.lnk
2014-04-28 19:41 - 2014-01-27 21:12 - 00001507 _____ () C:\Documents and Settings\All Users\Menu Start\Windows Update.lnk
2014-04-28 19:37 - 2014-04-28 19:37 - 00001969 _____ () C:\Documents and Settings\tomek\Pulpit\SpyHunter.lnk
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\sh4ldr
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-04-28 19:37 - 2014-04-28 19:37 - 00000000 ____D () C:\Documents and Settings\tomek\Menu Start\Programy\SpyHunter
2014-04-28 19:37 - 2014-01-27 21:18 - 00000000 ___RD () C:\Documents and Settings\tomek\Menu Start\Programy
2014-04-28 19:32 - 2014-04-28 19:32 - 00000000 ____D () C:\Program Files\7-Zip
2014-04-28 19:32 - 2014-04-28 19:32 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\7-Zip
2014-04-28 19:18 - 2014-03-08 18:29 - 00000284 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2014-04-28 19:12 - 2014-04-18 19:10 - 00000443 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.ics
2014-04-28 19:12 - 2014-04-13 09:11 - 00000379 _____ () C:\WINDOWS\nsw.log
2014-04-28 19:10 - 2014-04-18 03:48 - 00000000 ____D () C:\Qoobox
2014-04-28 19:08 - 2014-01-28 20:26 - 00000000 ____D () C:\Program Files\Intel
2014-04-28 16:13 - 2014-03-03 12:47 - 00000000 __SHD () C:\Documents and Settings\tomek\wc
2014-04-28 12:15 - 2001-07-21 20:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-04-21 07:22 - 2014-04-21 07:22 - 00002720 _____ () C:\TP-LINK  34F3BC.p10
2014-04-21 07:22 - 2014-01-27 21:18 - 00000000 __RHD () C:\Documents and Settings\tomek\Dane aplikacji
2014-04-18 19:36 - 2014-04-18 19:36 - 00000000 ____D () C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\ESET
2014-04-18 19:36 - 2014-04-18 19:33 - 00000000 ____D () C:\AdwCleaner
2014-04-18 19:36 - 2014-01-28 23:25 - 00000923 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-04-18 19:36 - 2014-01-28 23:25 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome
2014-04-18 19:36 - 2014-01-27 21:58 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-04-18 19:36 - 2014-01-27 21:18 - 00000000 ___HD () C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji
2014-04-18 19:35 - 2014-01-27 21:58 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-04-18 19:34 - 2014-04-18 19:34 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
2014-04-18 19:34 - 2014-01-27 21:17 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji
2014-04-18 19:26 - 2014-04-18 19:26 - 00000000 ____D () C:\Program Files\ESET
2014-04-18 19:26 - 2014-04-18 19:26 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\ESET
2014-04-18 19:26 - 2014-04-18 19:26 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\ESET
2014-04-18 19:21 - 2014-01-27 21:17 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2014-04-18 19:13 - 2014-04-18 19:13 - 00017416 _____ () C:\ComboFix.txt
2014-04-18 19:13 - 2014-01-27 21:17 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne
2014-04-18 19:12 - 2014-04-18 03:48 - 00000000 ____D () C:\WINDOWS\erdnt
2014-04-18 19:09 - 2014-01-27 21:57 - 21495808 _____ () C:\WINDOWS\system32\config\software.bak
2014-04-18 19:09 - 2014-01-27 21:57 - 04456448 _____ () C:\WINDOWS\system32\config\system.bak
2014-04-18 19:09 - 2014-01-27 21:57 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY.bak
2014-04-18 19:09 - 2014-01-27 21:57 - 00262144 _____ () C:\WINDOWS\system32\config\SAM.bak
2014-04-18 19:09 - 2014-01-27 21:57 - 00262144 _____ () C:\WINDOWS\system32\config\default.bak
2014-04-18 19:08 - 2014-04-18 19:08 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2014-04-18 19:08 - 2014-04-18 19:08 - 00000000 ____H () C:\WINDOWS\system32\config\system.tmp.LOG
2014-04-18 19:08 - 2014-04-18 19:08 - 00000000 ____H () C:\WINDOWS\system32\config\software.tmp.LOG
2014-04-18 19:08 - 2014-04-18 19:08 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.tmp.LOG
2014-04-18 19:08 - 2014-04-18 19:08 - 00000000 ____H () C:\WINDOWS\system32\config\default.tmp.LOG
2014-04-18 18:58 - 2014-04-18 03:47 - 05195154 ____R (Swearware) C:\Documents and Settings\tomek\Pulpit\ComboFix.exe
2014-04-18 03:48 - 2014-04-18 03:48 - 00000000 ___RD () C:\Documents and Settings\tomek\Menu Start\Programy\Narzędzia administracyjne
2014-04-13 07:27 - 2014-01-30 20:38 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
2014-04-13 07:26 - 2014-04-13 07:26 - 00000000 __SHD () C:\Documents and Settings\tomek\PrivacIE
2014-04-13 07:26 - 2014-01-27 21:18 - 00000000 ____D () C:\Documents and Settings\tomek
2014-04-13 07:06 - 2014-04-13 07:06 - 00000764 _____ () C:\Documents and Settings\tomek\Pulpit\TP-LINK Modem Router Settings.txt
2014-04-13 06:46 - 2014-04-13 06:46 - 00000405 _____ () C:\WSC_PROFILE.txt
2014-04-10 19:37 - 2014-01-27 21:59 - 01089416 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-10 19:37 - 2001-10-26 14:15 - 00491314 _____ () C:\WINDOWS\system32\perfh015.dat
2014-04-10 19:37 - 2001-10-26 14:15 - 00084526 _____ () C:\WINDOWS\system32\perfc015.dat
2014-04-08 06:15 - 2014-04-08 06:15 - 00000000 ____D () C:\Program Files\Dropbox
2014-04-08 06:15 - 2014-04-08 06:15 - 00000000 ____D () C:\Documents and Settings\tomek\Menu Start\Programy\Dropbox
2014-04-08 06:15 - 2014-04-08 06:15 - 00000000 ____D () C:\Documents and Settings\tomek\Dane aplikacji\DropboxMaster
2014-04-08 06:15 - 2014-04-08 06:14 - 00000000 ____D () C:\Documents and Settings\tomek\Dane aplikacji\Dropbox
2014-04-07 23:11 - 2014-04-03 23:42 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\matura
2014-04-06 09:19 - 2014-04-06 09:19 - 00001880 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk
2014-04-06 09:19 - 2014-04-06 09:19 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-04-06 09:19 - 2014-04-06 09:19 - 00000000 ____D () C:\Documents and Settings\tomek\Ustawienia lokalne\Dane aplikacji\Skype
2014-04-06 09:19 - 2014-04-06 09:19 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Skype
2014-04-06 09:19 - 2014-03-10 18:51 - 00000000 ___RD () C:\Program Files\Skype
2014-04-06 09:19 - 2014-03-10 18:51 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Skype
2014-04-03 19:48 - 2014-04-03 19:48 - 00000000 ____D () C:\Documents and Settings\tomek\Pulpit\gilow112
2014-04-03 18:54 - 2014-01-27 21:18 - 00000000 ___RD () C:\Documents and Settings\tomek\Moje dokumenty\Moje obrazy
2014-04-01 21:18 - 2014-01-29 21:49 - 00000093 _____ () C:\Documents and Settings\tomek\Dane aplikacji\WB.CFG
2014-04-01 21:12 - 2014-01-27 21:58 - 00205408 _____ () C:\WINDOWS\setupact.log
2014-03-30 12:18 - 2014-01-31 17:48 - 00000123 _____ () C:\Documents and Settings\NetworkService\Dane aplikacji\WB.CFG

==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2008-04-14 18:51] - [2008-04-14 18:51] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\WINDOWS\system32\winlogon.exe
[2008-04-14 18:51] - [2008-04-14 18:51] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2008-04-14 18:51] - [2008-04-14 18:51] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2008-04-14 18:51] - [2009-02-09 13:19] - 0111104 ____A (Microsoft Corporation) 8816e60bf654353e8e0d35ed98875445 

C:\WINDOWS\system32\User32.dll
[2008-04-14 18:50] - [2008-04-14 18:50] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2008-04-14 18:51] - [2008-04-14 18:51] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2008-04-14 18:50] - [2009-02-09 13:00] - 0401408 ____A (Microsoft Corporation) c9e5ac78d9a00b1de8ce2ad1bdde7e42 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2008-04-14 17:31] - [2008-04-14 17:31] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================