Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-06-2014
Ran by OLA (administrator) on OLA-KOMPUTER on 06-06-2014 20:09:19
Running from C:\Users\OLA\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Fuyu LIMITED) C:\ProgramData\WindowsProtectManger\wprotectmanager.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Broadcom Corporation.) C:\Program Files (x86)\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(Acer Incorporated) C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
(NTI, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Program Files (x86)\RightSurf\updateRightSurf.exe
() C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerEvent.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(GG Network S.A.) C:\Program Files (x86)\Gadu-Gadu 10\gg.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIJCE.EXE
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Broadcom Corporation.) C:\Program Files (x86)\WIDCOMM\Oprogramowanie interfejsu Bluetooth\BTTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
(SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
() C:\Program Files (x86)\fst_pl_116\fst_pl_116.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(OldTimer Tools) C:\Users\OLA\Desktop\OTL.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-29] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324608 2010-06-10] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe [860040 2011-01-06] (Acer Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [9454920 2011-12-21] (COMODO)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-04-27] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-11] (Dritek System Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [OrangeDeamon] => C:\Program Files (x86)\Orange\Orange.exe [20336640 2008-05-16] ()
HKLM-x32\...\Run: [SweetIM] => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Sweetpacks Communicator] => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1935824 2014-05-16] (APN)
HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-05-05] (Comodo Security Solutions, Inc.)
HKLM-x32\...\Run: [fst_pl_116] => C:\Program Files (x86)\fst_pl_116\fst_pl_116.exe [3984848 2014-05-16] ()
HKU\S-1-5-21-2328238471-3418155455-2242720404-1000\...\Run: [Google Update] => C:\Users\OLA\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-07] (Google Inc.)
HKU\S-1-5-21-2328238471-3418155455-2242720404-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG)
HKU\S-1-5-21-2328238471-3418155455-2242720404-1000\...\Run: [Gadu-Gadu 10] => C:\Program Files (x86)\Gadu-Gadu 10\gg.exe [13374048 2011-07-04] (GG Network S.A.)
HKU\S-1-5-21-2328238471-3418155455-2242720404-1000\...\Run: [Facebook Update] => C:\Users\OLA\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-10] (Facebook Inc.)
HKU\S-1-5-21-2328238471-3418155455-2242720404-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIJCE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2328238471-3418155455-2242720404-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\Program Files (x86)\SupTab\SearchProtect64.dll [102512 2014-05-08] (Skytech Co., Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => C:\Program Files (x86)\SupTab\SearchProtect32.dll [91248 2014-05-08] (Skytech Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files (x86)\WIDCOMM\Oprogramowanie interfejsu Bluetooth\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/?pc=UP97&ocid=UP97DHP
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-pl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
URLSearchHook: HKLM-x32 - WhiteSmoke New Toolbar - {739df940-c5ee-4bab-9d7e-270894ae687a} - C:\Program Files (x86)\WhiteSmoke_New\prxtbWhit.dll (Conduit Ltd.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=3.1030000.103000&st=12&q={searchTerms}&barid={BF1EB7A9-1111-4AE3-8B30-E672E9C3D18B}
SearchScopes: HKCU - 41D27FC352B7445EB28C8594C3163E85 URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3289847&CUI=UN36705644172166228&UM=2
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119370&babsrc=SP_ss&mntrId=a4366488000000000000d6af7830aaaa
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=3.1030000.103000&st=12&q={searchTerms}&barid={BF1EB7A9-1111-4AE3-8B30-E672E9C3D18B}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: WhiteSmoke New Toolbar - {739df940-c5ee-4bab-9d7e-270894ae687a} - C:\Program Files (x86)\WhiteSmoke_New\prxtbWhit.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - WhiteSmoke New Toolbar - {739df940-c5ee-4bab-9d7e-270894ae687a} - C:\Program Files (x86)\WhiteSmoke_New\prxtbWhit.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {739DF940-C5EE-4BAB-9D7E-270894AE687A} -  No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default
FF NewTab: hxxp://home.sweetim.com/?src=97&barid={BF1EB7A9-1111-4AE3-8B30-E672E9C3D18B}
FF DefaultSearchEngine: webssearches
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://istart.webssearches.com/?type=hppp&ts=1401947566&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289847&SearchSource=2&CUI=UN14871567931677125&UM=2&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\OLA\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\OLA\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\OLA\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\OLA\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\searchplugins\whitesmoke-new-customized-web-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml
FF Extension: Quick Start - C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\Extensions\quick_start@gmail.com [2014-05-28]
FF Extension: WhiteSmoke New  - C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\Extensions\{739df940-c5ee-4bab-9d7e-270894ae687a} [2013-12-12]
FF Extension: Ask Toolbar - C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2013-11-09]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2012-10-07]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [ntfdsaftsfdfdxx@mozilla.org] - C:\Users\OLA\AppData\Roaming\iPumper\extension_firefox.xpi
FF Extension: SharaGet download helper - C:\Users\OLA\AppData\Roaming\iPumper\extension_firefox.xpi [2013-03-15]
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\extensions\quick_start@gmail.com
FF Extension: Quick Start - C:\Users\OLA\AppData\Roaming\Mozilla\Firefox\Profiles\ge6civrp.default\extensions\quick_start@gmail.com [2014-05-28]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
CHR HomePage: hxxp://istart.webssearches.com/?type=hp&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521
CHR StartupUrls: "hxxp://istart.webssearches.com/?type=hp&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521"
CHR DefaultSearchKeyword: webssearches
CHR DefaultSearchProvider: webssearches
CHR DefaultSearchURL: http://istart.webssearches.com/web/?type=ds&ts=1401124777&from=amt&uid=WDCXWD3200BPVT-22ZEST0_WD-WXD1A31D5521D5521&q={searchTerms}
CHR DefaultNewTabURL: 
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\OLA\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\OLA\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\OLA\AppData\Local\Google\Chrome\Application\35.0.1916.114\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Adobe Acrobat) - c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (WildTangent Games App Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\5\NP_wtapp.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\OLA\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-17]
CHR Extension: (Szukaj w Google) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-17]
CHR Extension: (Delta Toolbar) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde [2013-02-15]
CHR Extension: (CursorMania) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gchljcfaonjffjifnjlcalnhgdmjckhg [2014-04-17]
CHR Extension: (VideoDownloadConverter) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\hefdopkjddeacfpjlhnnikdibknmdepg [2014-03-17]
CHR Extension: (SweetIM for Facebook) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2012-10-07]
CHR Extension: (SharaGet download helper) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\kekfoodhbhpjhjcdecjngamojfhknooc [2013-03-15]
CHR Extension: (goSupermodel) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgbclcgjehnbcmgfdekbldeiemdilnco [2012-06-16]
CHR Extension: (Google Wallet) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (SweetPacks Chrome Extension) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2012-10-07]
CHR Extension: (Gmail) - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-17]
CHR HKCU\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\OLA\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2013-03-12]
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\OLA\AppData\Roaming\Delta\delta.crx [2012-11-25]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-10-07]
CHR HKLM-x32\...\Chrome\Extension: [kekfoodhbhpjhjcdecjngamojfhknooc] - C:\Users\OLA\AppData\Roaming\iPumper\extension_chrome.crx [2013-03-15]
CHR HKLM-x32\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\OLA\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2013-03-12]
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\OLA\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx [2012-10-07]
CHR StartMenuInternet: Google Chrome - C:\Users\OLA\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-05-16] (APN LLC.)
R2 btwdins; C:\Program Files (x86)\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe [258103 2006-05-12] (Broadcom Corporation.)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70864 2014-05-05] (Comodo Security Solutions, Inc.)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2779416 2011-12-19] (COMODO)
R2 ePowerSvc; C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe [867712 2011-01-06] (Acer Incorporated)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-13] (WildTangent)
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-05-05] (Comodo Security Solutions, Inc.)
R2 GREGService; C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED)
R2 Live Updater Service; C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [244624 2011-01-31] (Acer Incorporated)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2010-04-17] (NTI, Inc.)
R2 Update RightSurf; C:\Program Files (x86)\RightSurf\updateRightSurf.exe [317728 2014-06-04] ()
R2 Util RightSurf; C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe [317728 2014-06-02] ()
R2 WindowsProtectManger; C:\ProgramData\WindowsProtectManger\wprotectmanager.exe [573344 2014-05-26] (Fuyu LIMITED)

==================== Drivers (Whitelisted) ====================

S2 BTSERIAL; C:\Windows\SysWOW64\drivers\btserial.sys [23271 2006-05-12] (Broadcom Corporation.)
S2 BTSLBCSP; C:\Windows\SysWOW64\drivers\btslbcsp.sys [222876 2006-05-12] (Broadcom Corporation.)
S1 CFRMD; C:\Windows\SysWOW64\DRIVERS\CFRMD.sys [37976 2012-09-03] (Windows (R) Win 7 DDK provider)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [22696 2011-12-19] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [577824 2012-01-17] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [43248 2011-12-19] (COMODO)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [93200 2011-12-19] (COMODO)
R1 wStLibG64; C:\Windows\System32\drivers\wStLibG64.sys [61112 2014-03-14] (StdLib)
R1 {b9a19c25-a741-47e5-91a2-0b62bef307ff}w64; C:\Windows\System32\drivers\{b9a19c25-a741-47e5-91a2-0b62bef307ff}w64.sys [61112 2014-05-22] (StdLib)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-06 20:09 - 2014-06-06 20:10 - 00027496 _____ () C:\Users\OLA\Desktop\FRST.txt
2014-06-06 20:08 - 2014-06-06 20:09 - 00000000 ____D () C:\FRST
2014-06-06 20:07 - 2014-06-06 20:07 - 02072576 _____ (Farbar) C:\Users\OLA\Desktop\FRST64.exe
2014-06-06 19:09 - 2014-06-06 19:09 - 00130644 _____ () C:\Users\OLA\Desktop\Extras.Txt
2014-06-06 19:03 - 2014-06-06 19:03 - 00118598 _____ () C:\Users\OLA\Desktop\OTL.Txt
2014-06-06 18:24 - 2014-06-06 18:24 - 00602112 _____ (OldTimer Tools) C:\Users\OLA\Desktop\OTL.exe
2014-06-06 18:15 - 2014-06-06 18:15 - 00000000 ____D () C:\Users\OLA\Desktop\backups
2014-06-06 18:05 - 2014-06-06 18:05 - 00014580 _____ () C:\Users\OLA\Desktop\hijackthis.log
2014-06-06 18:04 - 2010-03-25 18:42 - 00388096 _____ (Trend Micro Inc.) C:\Users\OLA\Desktop\HiJackThis.exe
2014-06-03 19:59 - 2014-06-03 19:59 - 00000000 _____ () C:\Windows\KA.ini
2014-06-02 16:10 - 2014-06-02 16:11 - 00961704 _____ () C:\Users\OLA\Documents\wrozki.xps
2014-05-29 22:00 - 2014-06-06 18:13 - 00000000 ____D () C:\Users\OLA\AppData\Local\Genesis_05292000
2014-05-29 16:06 - 2014-05-29 16:06 - 00000000 ____D () C:\Users\OLA\AppData\Local\{AF2C297D-3369-4561-B77A-0E9C447B193B}
2014-05-28 21:00 - 2014-05-28 21:00 - 00333312 _____ () C:\Windows\SysWOW64\WindowsUpdater12695__7428_il1045631.exe
2014-05-27 10:45 - 2014-05-22 18:15 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{b9a19c25-a741-47e5-91a2-0b62bef307ff}w64.sys
2014-05-26 19:21 - 2014-05-26 19:21 - 00000000 ____D () C:\Users\OLA\AppData\Local\Genesis_05261721
2014-05-26 19:20 - 2014-05-26 19:20 - 00000000 ____D () C:\Users\OLA\AppData\Roaming\SupTab
2014-05-26 19:20 - 2014-05-26 19:20 - 00000000 ____D () C:\ProgramData\WindowsProtectManger
2014-05-26 19:20 - 2014-05-26 19:20 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-05-26 19:20 - 2014-05-26 19:20 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-26 19:19 - 2014-05-27 14:22 - 00000000 ____D () C:\Users\OLA\AppData\Local\fst_pl_116
2014-05-26 19:19 - 2014-05-26 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeSoftToday
2014-05-26 19:19 - 2014-05-26 19:19 - 00000000 ____D () C:\Program Files (x86)\fst_pl_116
2014-05-26 19:18 - 2014-05-26 19:18 - 00000000 ____D () C:\Users\OLA\AppData\Local\22379
2014-05-17 10:34 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-17 10:34 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-17 10:34 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-17 10:34 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-17 10:34 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-17 10:34 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 14:48 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 14:48 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 14:48 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 14:48 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 14:47 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 14:47 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 14:47 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 14:47 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 14:47 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 14:47 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 14:47 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 14:47 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 14:47 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 14:47 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 14:47 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 14:47 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 14:47 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 14:47 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 14:47 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 14:47 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 14:47 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 14:47 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 14:47 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 14:47 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 14:47 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 14:47 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 14:47 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 14:47 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 14:47 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 14:47 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 14:47 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 14:47 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 14:47 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 14:47 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-11 19:25 - 2014-05-11 19:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 14:17 - 2014-05-10 14:18 - 00000000 ____D () C:\Users\OLA\AppData\Local\{259DC21D-333C-47AF-91F6-085577EC771B}
2014-05-08 15:56 - 2014-05-17 20:00 - 00000000 ___SD () C:\Windows\system32\CompatTel

==================== One Month Modified Files and Folders =======

2014-06-06 20:10 - 2014-06-06 20:09 - 00027496 _____ () C:\Users\OLA\Desktop\FRST.txt
2014-06-06 20:10 - 2011-11-07 15:07 - 00000000 ____D () C:\Users\OLA\AppData\Local\Temp
2014-06-06 20:09 - 2014-06-06 20:08 - 00000000 ____D () C:\FRST
2014-06-06 20:07 - 2014-06-06 20:07 - 02072576 _____ (Farbar) C:\Users\OLA\Desktop\FRST64.exe
2014-06-06 20:06 - 2013-02-10 15:01 - 00000920 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2328238471-3418155455-2242720404-1000UA.job
2014-06-06 20:06 - 2011-07-19 14:29 - 01939496 _____ () C:\Windows\WindowsUpdate.log
2014-06-06 19:42 - 2013-02-23 16:32 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-06 19:21 - 2011-11-07 16:33 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2328238471-3418155455-2242720404-1000UA.job
2014-06-06 19:09 - 2014-06-06 19:09 - 00130644 _____ () C:\Users\OLA\Desktop\Extras.Txt
2014-06-06 19:03 - 2014-06-06 19:03 - 00118598 _____ () C:\Users\OLA\Desktop\OTL.Txt
2014-06-06 18:29 - 2009-07-14 06:45 - 00024656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-06 18:29 - 2009-07-14 06:45 - 00024656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-06 18:24 - 2014-06-06 18:24 - 00602112 _____ (OldTimer Tools) C:\Users\OLA\Desktop\OTL.exe
2014-06-06 18:24 - 2011-12-05 19:57 - 00000000 ____D () C:\Users\OLA\AppData\Local\CrashDumps
2014-06-06 18:21 - 2011-11-07 17:12 - 00000000 ____D () C:\Users\OLA\AppData\Roaming\Skype
2014-06-06 18:20 - 2013-03-15 18:55 - 00000334 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-06-06 18:18 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-06 18:18 - 2009-07-14 06:51 - 00132223 _____ () C:\Windows\setupact.log
2014-06-06 18:16 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-06 18:15 - 2014-06-06 18:15 - 00000000 ____D () C:\Users\OLA\Desktop\backups
2014-06-06 18:13 - 2014-05-29 22:00 - 00000000 ____D () C:\Users\OLA\AppData\Local\Genesis_05292000
2014-06-06 18:05 - 2014-06-06 18:05 - 00014580 _____ () C:\Users\OLA\Desktop\hijackthis.log
2014-06-06 18:04 - 2011-11-07 15:08 - 00000000 ____D () C:\Users\OLA\AppData\Local\VirtualStore
2014-06-05 21:24 - 2013-01-05 16:07 - 00000000 ___RD () C:\Users\OLA\Downloads\gry
2014-06-05 21:20 - 2011-07-19 15:21 - 00740688 _____ () C:\Windows\system32\perfh015.dat
2014-06-05 21:20 - 2011-07-19 15:21 - 00156230 _____ () C:\Windows\system32\perfc015.dat
2014-06-05 21:20 - 2009-07-14 07:13 - 01670590 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-03 23:43 - 2014-01-31 18:05 - 00000000 ____D () C:\Program Files (x86)\RightSurf
2014-06-03 23:26 - 2013-03-15 18:52 - 00000000 ____D () C:\Users\OLA\AppData\Roaming\iPumper
2014-06-03 20:00 - 2011-12-05 22:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Play
2014-06-03 20:00 - 2011-12-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Play
2014-06-03 19:59 - 2014-06-03 19:59 - 00000000 _____ () C:\Windows\KA.ini
2014-06-03 19:58 - 2012-05-12 09:29 - 00000000 _____ () C:\Program Files\path2.ini
2014-06-03 19:58 - 2012-05-12 08:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Komputerowa Gratka
2014-06-03 19:57 - 2013-01-14 23:19 - 00000000 ____D () C:\Program Files (x86)\Alawar.pl
2014-06-03 19:57 - 2012-05-13 15:57 - 00000000 ____D () C:\Program Files (x86)\Pluszaki Rozrabiaki
2014-06-03 19:57 - 2012-05-13 15:57 - 00000000 _____ () C:\Program Files\path5.ini
2014-06-03 19:48 - 2013-01-14 19:22 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-06-03 19:38 - 2010-11-21 05:47 - 00380940 _____ () C:\Windows\PFRO.log
2014-06-03 19:37 - 2009-07-14 04:34 - 00000580 _____ () C:\Windows\win.ini
2014-06-03 19:27 - 2014-01-31 18:06 - 00000000 ____D () C:\Users\OLA\AppData\Roaming\Opera Software
2014-06-03 19:27 - 2014-01-31 18:06 - 00000000 ____D () C:\Users\OLA\AppData\Local\Opera Software
2014-06-03 19:27 - 2014-01-31 18:05 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-03 19:26 - 2011-11-07 15:10 - 00001656 _____ () C:\Users\OLA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-03 17:52 - 2014-04-12 10:41 - 00000000 ____D () C:\Users\OLA\Downloads\programy i pliki
2014-06-03 17:51 - 2013-02-10 15:01 - 00000898 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2328238471-3418155455-2242720404-1000Core.job
2014-06-03 17:49 - 2011-11-07 16:33 - 00000998 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2328238471-3418155455-2242720404-1000Core.job
2014-06-02 16:11 - 2014-06-02 16:10 - 00961704 _____ () C:\Users\OLA\Documents\wrozki.xps
2014-05-30 13:27 - 2014-04-12 10:30 - 00000000 ____D () C:\Users\OLA\Downloads\obrazki
2014-05-30 13:27 - 2013-03-25 17:57 - 00919040 ___SH () C:\Users\OLA\Downloads\Thumbs.db
2014-05-30 12:55 - 2013-03-15 18:55 - 00000000 ____D () C:\Users\OLA\AppData\Local\Conduit
2014-05-29 16:06 - 2014-05-29 16:06 - 00000000 ____D () C:\Users\OLA\AppData\Local\{AF2C297D-3369-4561-B77A-0E9C447B193B}
2014-05-28 22:56 - 2013-01-14 19:19 - 00000000 ____D () C:\ProgramData\Comodo
2014-05-28 21:00 - 2014-05-28 21:00 - 00333312 _____ () C:\Windows\SysWOW64\WindowsUpdater12695__7428_il1045631.exe
2014-05-27 14:22 - 2014-05-26 19:19 - 00000000 ____D () C:\Users\OLA\AppData\Local\fst_pl_116
2014-05-26 19:21 - 2014-05-26 19:21 - 00000000 ____D () C:\Users\OLA\AppData\Local\Genesis_05261721
2014-05-26 19:20 - 2014-05-26 19:20 - 00000000 ____D () C:\Users\OLA\AppData\Roaming\SupTab
2014-05-26 19:20 - 2014-05-26 19:20 - 00000000 ____D () C:\ProgramData\WindowsProtectManger
2014-05-26 19:20 - 2014-05-26 19:20 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-05-26 19:20 - 2014-05-26 19:20 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-26 19:19 - 2014-05-26 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeSoftToday
2014-05-26 19:19 - 2014-05-26 19:19 - 00000000 ____D () C:\Program Files (x86)\fst_pl_116
2014-05-26 19:19 - 2011-11-07 16:36 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-26 19:18 - 2014-05-26 19:18 - 00000000 ____D () C:\Users\OLA\AppData\Local\22379
2014-05-26 19:18 - 2013-03-15 18:55 - 00003350 _____ () C:\Windows\System32\Tasks\AmiUpdXp
2014-05-25 16:06 - 2014-03-24 17:12 - 00000000 ___RD () C:\Users\OLA\Downloads\różne programy
2014-05-22 18:15 - 2014-05-27 10:45 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{b9a19c25-a741-47e5-91a2-0b62bef307ff}w64.sys
2014-05-17 21:48 - 2013-01-14 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-05-17 21:35 - 2012-10-09 15:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-17 21:35 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-17 20:16 - 2013-03-15 15:08 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-17 20:05 - 2011-11-07 15:07 - 00000000 ___RD () C:\Users\OLA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-17 20:05 - 2011-11-07 15:07 - 00000000 ___RD () C:\Users\OLA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 20:00 - 2014-05-08 15:56 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-17 13:50 - 2014-04-12 10:20 - 00000000 ____D () C:\Users\OLA\Downloads\muzyka
2014-05-17 10:34 - 2011-11-07 22:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-17 10:26 - 2013-07-21 10:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-17 10:15 - 2011-11-07 18:00 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 14:43 - 2013-02-23 16:32 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-15 14:42 - 2013-02-23 16:32 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-15 14:42 - 2011-11-07 17:00 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-11 19:25 - 2014-05-11 19:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 14:18 - 2014-05-10 14:17 - 00000000 ____D () C:\Users\OLA\AppData\Local\{259DC21D-333C-47AF-91F6-085577EC771B}
2014-05-09 08:14 - 2014-05-14 14:48 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 14:48 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\OLA\AppData\Local\Temp\APNSetup.exe
C:\Users\OLA\AppData\Local\Temp\AskSLib.dll
C:\Users\OLA\AppData\Local\Temp\GCSetup_mk.exe
C:\Users\OLA\AppData\Local\Temp\htmlayout.dll
C:\Users\OLA\AppData\Local\Temp\iPumperUpdater__3338_i538491327_il3269574.exe
C:\Users\OLA\AppData\Local\Temp\iPumperUpdater__7428_il2177516.exe
C:\Users\OLA\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\OLA\AppData\Local\Temp\ose00000.exe
C:\Users\OLA\AppData\Local\Temp\Shockwave_Installer_Slim.exe
C:\Users\OLA\AppData\Local\Temp\SPStub.exe
C:\Users\OLA\AppData\Local\Temp\tmp1.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp1902.exe
C:\Users\OLA\AppData\Local\Temp\tmp2CE0.exe
C:\Users\OLA\AppData\Local\Temp\tmp33B6.exe
C:\Users\OLA\AppData\Local\Temp\tmp3DB7.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp3E2B.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp42D7.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp42DB.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp432.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp4F90.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp4FC9.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp5948.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp6107.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp63CD.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp6E33.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp7F94.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp8377.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp8450.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp8AB3.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp8DA2.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp92C5.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp9444.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp99FD.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmp9C18.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpA043.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpA3F4.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpA6E1.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpAE90.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpB2EE.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpB31A.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpB334.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpB55A.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpB5B8.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpB88D.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpC97B.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpCB10.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpCBAF.exe
C:\Users\OLA\AppData\Local\Temp\tmpCDED.exe
C:\Users\OLA\AppData\Local\Temp\tmpE87F.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpF1CC.tmp.exe
C:\Users\OLA\AppData\Local\Temp\tmpF8E3.tmp.exe
C:\Users\OLA\AppData\Local\Temp\Updater.exe
C:\Users\OLA\AppData\Local\Temp\WindowsUpdateKB12692__7428_il1606877.exe
C:\Users\OLA\AppData\Local\Temp\WindowsUpdateKB12693__7428_il3397191.exe
C:\Users\OLA\AppData\Local\Temp\WindowsUpdateKB12694__7428_il4556233.exe
C:\Users\OLA\AppData\Local\Temp\WindowsUpdaterKB12695__7428_il748712.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-02-25 14:51

==================== End Of Log ============================