Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-07-2014
Ran by Administrator (administrator) on KOMPUTER on 05-07-2014 10:19:28
Running from C:\Documents and Settings\Administrator\Pulpit
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(France Telecom SA) C:\Program Files\Common Files\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgui.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
() C:\Program Files\OSCAR Editor X7\OscarEditor.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgwdsvc.exe
(France Telecom SA) C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ORAHSSSessionManager] => C:\Program Files\Livebox\SessionManager\SessionManager.exe [107248 2008-06-10] (France Telecom SA)
HKLM\...\Run: [NvCplDaemon] => C:\WINDOWS\system32\NvCpl.dll [15512424 2012-09-23] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] => C:\WINDOWS\system32\NvMCTray.dll [108392 2012-09-23] (NVIDIA Corporation)
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1634112 2012-09-23] ()
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [296096 2012-10-20] (RealNetworks, Inc.)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [19523616 2010-04-30] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2013\avgui.exe [4411952 2014-01-21] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-10-14] (Hewlett-Packard)
HKLM\...\Run: [UnlockerAssistant] => "C:\Program Files\Unlocker\UnlockerAssistant.exe"
Winlogon\Notify\avgrsstarter: C:\WINDOWS\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
HKU\.DEFAULT\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\.DEFAULT\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\.DEFAULT\...\Policies\Explorer: [NoSMMyPictures] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoStartBanner] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\.DEFAULT\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoSMMyPictures] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoStartBanner] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-19\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoSMMyPictures] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoStartBanner] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-20\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\Policies\Explorer: [NoSMMyPictures] 1
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\Policies\Explorer: [NoStartBanner] 1
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-789336058-1275210071-839522115-1004\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Run: [IPLA!] => C:\Program Files\ipla\ipla.exe [21360736 2014-06-17] (Redefine Sp z o.o.)
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Run: [OscarEditor] => C:\Program Files\OSCAR Editor X7\OscarEditor.exe [3340288 2012-03-20] ()
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Policies\Explorer: [NoStartBanner] 1
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-789336058-1275210071-839522115-500\...\Policies\Explorer: [NoResolveSearch] 1
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2013\avgrsx.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Livebox\SearchURLHook\SearchPageURL.dll ()
SearchScopes: HKCU - DefaultScope {194E6D17-B12F-4c39-8E03-07F49FE499E8} URL = 
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = 
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - No Name - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} -  No File
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1386281137390
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_13-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_13-windows-i586.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\kshr0bgm.default-1403378614937
FF Homepage: https://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nppl3260;version=15.0.6.14 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nppl3260.dll No File
FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nppl3260.dll No File
FF Plugin: @real.com/nprjplug;version=15.0.6.14 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nprpjplug.dll No File
FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nprpjplug.dll No File
FF Plugin: @real.com/nprpplugin;version=15.0.6.14 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml
FF Extension: DownloadHelper - C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\kshr0bgm.default-1403378614937\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-06-21]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\kshr0bgm.default-1403378614937\Extensions\elemhidehelper@adblockplus.org.xpi [2014-06-21]
FF Extension: Adblock Plus - C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\kshr0bgm.default-1403378614937\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-21]
FF Extension: QuickStores-Toolbar - C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de [2014-06-18]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-10-19]
FF HKLM\...\Firefox\Extensions: [{3f963a5b-e555-4543-90e2-c3908898db71}] - C:\Program Files\AVG\AVG8\Firefox
FF Extension: AVG Safe Search - C:\Program Files\AVG\AVG8\Firefox [2013-07-28]

Chrome: 
=======
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-08]
CHR Extension: (Dysk Google) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-08]
CHR Extension: (YouTube) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-08]
CHR Extension: (Szukaj w Google) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-08]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-08]
CHR Extension: (Gmail) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-08]

========================== Services (Whitelisted) =================

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [257712 2014-05-14] (Adobe Systems Incorporated) [File not signed]
R2 avgfws; C:\Program Files\AVG\AVG2013\avgfws.exe [1432080 2013-10-23] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [65536 2008-06-20] (France Telecom SA) [File not signed]
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-11-06] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [139264 2007-11-06] (Hewlett-Packard Co.) [File not signed]
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-05-27] (Oracle Corporation) [File not signed]
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
S2 ERSvc; %SystemRoot%\System32\ersvc.dll [X]

==================== Drivers (Whitelisted) ====================

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R3 Avgfwdx; C:\WINDOWS\System32\DRIVERS\avgfwdx.sys [30944 2012-01-12] (AVG Technologies CZ, s.r.o.)
S3 Avgfwfd; C:\WINDOWS\System32\DRIVERS\avgfwdx.sys [30944 2012-01-12] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\WINDOWS\System32\DRIVERS\avgidsdriverx.sys [208184 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [22328 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 AvgLdx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AvgMfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 AvgRkx86; C:\WINDOWS\System32\Drivers\avgrkx86.sys [39224 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 AvgTdiX; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [182072 2014-04-15] (AVG Technologies CZ, s.r.o.)
R3 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [242240 2012-11-26] (DT Soft Ltd)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-10-30] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-10-30] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-10-30] (HP)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [70912 2010-03-04] (NVIDIA Corporation)
R0 nvgts; C:\WINDOWS\System32\DRIVERS\nvgts.sys [168040 2010-04-08] (NVIDIA Corporation)
R3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [124264 2012-07-03] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [13824 2010-03-04] (NVIDIA Corporation)
S3 PCAMPR5; C:\WINDOWS\system32\PCAMPR5.SYS [34688 2003-09-23] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 PCANDIS5; C:\WINDOWS\system32\PCANDIS5.SYS [32128 2006-03-01] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R3 pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [47360 2013-02-15] (VSO Software) [File not signed]
R2 rspndr; C:\WINDOWS\System32\DRIVERS\rspndr.sys [62336 2006-11-08] (Microsoft Corporation) [File not signed]
R0 Si3112; C:\WINDOWS\system32\Drivers\Si3112.sys [62208 2007-07-28] (Silicon Image, Inc.) [File not signed]
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [477240 2012-10-20] (Duplex Secure Ltd.)
U3 ag7aww5n; C:\WINDOWS\system32\Drivers\ag7aww5n.sys [0 ] (Silicon Image, Inc.) [File not signed]
U4 Alerter; 
S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 gdrv; \??\C:\WINDOWS\gdrv.sys [X]
S4 IntelIde; No ImagePath
U4 Messenger; %SystemRoot%\system32\svchost.exe -k netsvcs
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-05 10:19 - 2014-07-05 10:19 - 00020764 _____ () C:\Documents and Settings\Administrator\Pulpit\FRST.txt
2014-07-05 10:16 - 2014-07-05 10:19 - 00000000 ____D () C:\FRST
2014-07-05 10:13 - 2014-07-05 10:13 - 00096242 _____ () C:\Documents and Settings\Administrator\Pulpit\OTL.Txt
2014-07-05 10:13 - 2014-07-05 10:13 - 00041330 _____ () C:\Documents and Settings\Administrator\Pulpit\Extras.Txt
2014-07-05 10:04 - 2014-07-05 10:04 - 01074688 _____ (Farbar) C:\Documents and Settings\Administrator\Pulpit\FRST.exe
2014-07-05 10:04 - 2014-07-05 10:04 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Administrator\Pulpit\OTL.exe
2014-07-01 16:22 - 2014-07-01 16:22 - 00000000 ____D () C:\Documents and Settings\UpdatusUser\Ustawienia lokalne\temp
2014-07-01 16:22 - 2014-07-01 16:22 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp
2014-07-01 16:22 - 2014-07-01 16:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\temp
2014-07-01 16:22 - 2014-07-01 16:22 - 00000000 ____D () C:\Documents and Settings\Default User\Ustawienia lokalne\temp
2014-07-01 16:16 - 2014-07-01 16:16 - 00000000 _RSHD () C:\cmdcons
2014-07-01 16:16 - 2004-08-03 23:00 - 00262400 __RSH () C:\cmldr
2014-07-01 16:13 - 2014-07-01 16:22 - 00000000 ____D () C:\WINDOWS\erdnt
2014-07-01 16:13 - 2008-04-14 22:51 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cisvc.exe
2014-07-01 16:13 - 2008-04-14 22:51 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cisvc.exe
2014-07-01 00:22 - 2014-07-01 00:22 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start\Programy\Narzędzia administracyjne
2014-06-23 19:52 - 2014-06-23 19:52 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-06-21 21:31 - 2014-06-21 21:31 - 00000000 ____D () C:\Documents and Settings\Administrator\Moje dokumenty\Pobrane
2014-06-18 10:46 - 2014-06-18 15:32 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-17 15:03 - 2014-06-17 15:03 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG
2014-06-14 16:01 - 2014-06-14 16:06 - 00001544 _____ () C:\Documents and Settings\Administrator\Pulpit\Metin2 PL.lnk
2014-06-14 16:00 - 2014-06-14 16:00 - 00000846 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
2014-06-14 15:53 - 2014-06-26 14:15 - 00000000 ____D () C:\Program Files\Metin2

==================== One Month Modified Files and Folders =======

2014-07-05 10:19 - 2014-07-05 10:19 - 00020764 _____ () C:\Documents and Settings\Administrator\Pulpit\FRST.txt
2014-07-05 10:19 - 2014-07-05 10:16 - 00000000 ____D () C:\FRST
2014-07-05 10:19 - 2012-10-19 21:00 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp
2014-07-05 10:19 - 2012-10-19 21:00 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit
2014-07-05 10:13 - 2014-07-05 10:13 - 00096242 _____ () C:\Documents and Settings\Administrator\Pulpit\OTL.Txt
2014-07-05 10:13 - 2014-07-05 10:13 - 00041330 _____ () C:\Documents and Settings\Administrator\Pulpit\Extras.Txt
2014-07-05 10:04 - 2014-07-05 10:04 - 01074688 _____ (Farbar) C:\Documents and Settings\Administrator\Pulpit\FRST.exe
2014-07-05 10:04 - 2014-07-05 10:04 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Administrator\Pulpit\OTL.exe
2014-07-05 09:54 - 2014-05-25 10:52 - 00000000 ____D () C:\Documents and Settings\Administrator\Menu Start\Programy
2014-07-05 09:54 - 2012-12-29 01:39 - 00000000 ____D () C:\Program Files\Unlocker
2014-07-05 09:50 - 2014-03-15 21:59 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-05 09:50 - 2014-03-08 02:28 - 00001050 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-05 09:50 - 2014-03-08 02:28 - 00001046 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-05 09:40 - 2013-07-28 23:09 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\MFAData
2014-07-05 08:56 - 2012-10-19 22:51 - 01273170 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-05 08:56 - 2001-10-26 20:15 - 00562076 _____ () C:\WINDOWS\system32\perfh015.dat
2014-07-05 08:56 - 2001-10-26 20:15 - 00107638 _____ () C:\WINDOWS\system32\perfc015.dat
2014-07-05 08:54 - 2013-06-07 19:03 - 00093433 _____ () C:\Documents and Settings\Administrator\debug.log
2014-07-05 08:53 - 2012-10-20 20:47 - 01987072 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-05 08:52 - 2012-10-21 14:59 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\ipla
2014-07-05 08:52 - 2012-10-19 22:53 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-07-05 08:52 - 2012-10-19 22:53 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-07-05 08:52 - 2012-10-19 21:00 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-05 00:02 - 2012-10-19 21:00 - 00032610 _____ () C:\WINDOWS\SchedLgU.Txt
2014-07-05 00:02 - 2012-10-19 21:00 - 00000188 ___SH () C:\Documents and Settings\Administrator\ntuser.ini
2014-07-04 16:11 - 2013-11-25 18:05 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\vlc
2014-07-04 13:31 - 2012-10-27 21:58 - 00000032 _____ () C:\Documents and Settings\Administrator\Pulpit\Piosenki.txt
2014-07-04 12:21 - 2012-10-20 21:47 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\GG
2014-07-04 11:42 - 2001-07-22 02:17 - 00002184 _____ () C:\WINDOWS\system32\wpa.dbl
2014-07-02 15:59 - 2012-10-20 21:25 - 00000302 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-789336058-1275210071-839522115-500.job
2014-07-01 20:26 - 2012-10-20 21:14 - 00029560 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2014-07-01 20:24 - 2012-10-19 22:48 - 00169096 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-01 19:58 - 2012-10-19 22:47 - 00000268 ___SH () C:\boot.ini
2014-07-01 16:26 - 2012-10-19 21:00 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start
2014-07-01 16:26 - 2012-10-19 21:00 - 00000000 ____D () C:\Documents and Settings\Administrator
2014-07-01 16:22 - 2014-07-01 16:22 - 00000000 ____D () C:\Documents and Settings\UpdatusUser\Ustawienia lokalne\temp
2014-07-01 16:22 - 2014-07-01 16:22 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp
2014-07-01 16:22 - 2014-07-01 16:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\temp
2014-07-01 16:22 - 2014-07-01 16:22 - 00000000 ____D () C:\Documents and Settings\Default User\Ustawienia lokalne\temp
2014-07-01 16:22 - 2014-07-01 16:13 - 00000000 ____D () C:\WINDOWS\erdnt
2014-07-01 16:22 - 2012-10-20 21:07 - 00000000 ___HD () C:\Documents and Settings\UpdatusUser\Ustawienia lokalne
2014-07-01 16:22 - 2012-10-19 22:50 - 00000000 __RHD () C:\Documents and Settings\Default User\Ustawienia lokalne
2014-07-01 16:22 - 2012-10-19 21:00 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne
2014-07-01 16:22 - 2012-10-19 21:00 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne
2014-07-01 16:22 - 2001-07-22 02:15 - 00000227 _____ () C:\WINDOWS\system.ini
2014-07-01 16:21 - 2012-10-19 21:00 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji
2014-07-01 16:18 - 2012-10-19 21:00 - 00000000 __RHD () C:\Documents and Settings\Administrator\Dane aplikacji
2014-07-01 16:16 - 2014-07-01 16:16 - 00000000 _RSHD () C:\cmdcons
2014-07-01 00:22 - 2014-07-01 00:22 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start\Programy\Narzędzia administracyjne
2014-06-30 23:40 - 2012-10-19 21:33 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-06-30 23:35 - 2012-10-19 22:50 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy
2014-06-30 23:34 - 2013-02-11 20:54 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\inkscape
2014-06-30 23:34 - 2012-10-19 22:50 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-06-30 23:33 - 2014-03-02 01:27 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Skype
2014-06-28 22:01 - 2012-11-03 18:40 - 00036864 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-26 14:15 - 2014-06-14 15:53 - 00000000 ____D () C:\Program Files\Metin2
2014-06-25 21:57 - 2013-09-27 18:41 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\ipla
2014-06-25 13:53 - 2012-10-20 21:47 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GG
2014-06-23 21:38 - 2013-07-29 08:42 - 00000000 ____D () C:\WINDOWS\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2014-06-23 19:52 - 2014-06-23 19:52 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-06-23 19:52 - 2012-10-19 22:48 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-06-23 18:38 - 2012-10-19 21:00 - 00000000 ___RD () C:\Documents and Settings\Administrator\Moje dokumenty\Moje obrazy
2014-06-21 21:31 - 2014-06-21 21:31 - 00000000 ____D () C:\Documents and Settings\Administrator\Moje dokumenty\Pobrane
2014-06-21 21:31 - 2012-10-19 21:00 - 00000000 ___RD () C:\Documents and Settings\Administrator\Moje dokumenty
2014-06-18 15:32 - 2014-06-18 10:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-17 15:03 - 2014-06-17 15:03 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG
2014-06-17 15:03 - 2013-07-28 23:11 - 00000732 _____ () C:\Documents and Settings\All Users\Pulpit\AVG 2013.lnk
2014-06-14 16:06 - 2014-06-14 16:01 - 00001544 _____ () C:\Documents and Settings\Administrator\Pulpit\Metin2 PL.lnk
2014-06-14 16:00 - 2014-06-14 16:00 - 00000846 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
2014-06-14 16:00 - 2013-05-20 20:43 - 00000000 ____D () C:\Documents and Settings\Administrator\.gimp-2.8
2014-06-14 14:39 - 2013-12-08 19:43 - 00000000 ____D () C:\Documents and Settings\Administrator\Moje dokumenty\Gameforge Live
2014-06-13 16:45 - 2014-03-08 02:29 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk

==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================