Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-10-2014
Ran by Gosiek (administrator) on LENUŚ on 25-10-2014 17:47:31
Running from D:\Antywirusowe
Loaded Profile: Gosiek (Available profiles: Gosiek)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files\Atomic Alarm Clock\AtomicAlarmClock.exe
() C:\Program Files\Atomic Alarm Clock\timeserv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5223016 2014-10-25] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3465656265-2745628705-1748951394-1000\...\Run: [AtomicAlarmClock6] => C:\Program Files\Atomic Alarm Clock\AtomicAlarmClock.exe [5380608 2013-09-22] ()
HKU\S-1-5-21-3465656265-2745628705-1748951394-1000\...\Run: [GmailNotifierPro] => C:\Program Files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe [2804544 2013-08-25] (IntelliBreeze Software)
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - %SystemRoot%\system32\wpdshserviceobj.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} =>  No File
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: No Name -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} ->  No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Gosiek\AppData\Roaming\Mozilla\Firefox\Profiles\uq83jut3.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @ogplanet.com/npOGPPlugin -> C:\Windows\system32\npOGPPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Gosiek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome: 
=======
CHR HomePage: Default -> 
CHR Profile: C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (little owl) - C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\alopfckdopopebdogneaajhpajfbkane [2014-02-01]
CHR Extension: (Dokumenty Google) - C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-29]
CHR Extension: (Dysk Google) - C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-29]
CHR Extension: (YouTube) - C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-29]
CHR Extension: (Szukaj w Google) - C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-29]
CHR Extension: (AdBlock) - C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-06-06]
CHR Extension: (Google Wallet) - C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Gosiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-29]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtomicAlarmClock; C:\Program Files\Atomic Alarm Clock\timeserv.exe [2007040 2013-04-24] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-25] (AVAST Software)
S2 SAService; C:\Windows\system32\SAsrv.exe [445496 2010-03-25] (Conexant Systems, Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-10-25] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [82768 2014-10-25] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-10-25] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-10-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049920 2014-10-25] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-10-25] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-10-25] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-10-25] ()
S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] ()
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32496 2013-12-14] (Synaptics Incorporated)
S3 zte_cdc_acm; C:\Windows\System32\DRIVERS\zte_cdc_acm.sys [79872 2011-08-10] (ZTE) [File not signed]
S3 zte_cpo; C:\Windows\System32\DRIVERS\zte_cpo.sys [14336 2011-08-10] (ZTE) [File not signed]
S3 ATP; system32\DRIVERS\cmdatp.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-25 17:47 - 2014-10-25 17:47 - 00000000 ____D () C:\FRST
2014-10-25 14:18 - 2014-10-25 14:18 - 00000017 _____ () C:\Users\Gosiek\Desktop\Wrus.txt
2014-10-25 12:50 - 2014-10-25 12:51 - 00000085 _____ () C:\Windows\wininit.ini
2014-10-25 11:26 - 2014-10-25 11:39 - 00001968 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-10-25 11:26 - 2014-10-25 11:26 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-10-25 11:26 - 2014-10-25 11:26 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-10-10 10:07 - 2014-10-25 16:53 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-10-10 10:07 - 2014-10-25 12:50 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-10 10:07 - 2014-10-10 10:07 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-10-10 09:06 - 2014-10-10 09:06 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-10-02 12:56 - 2014-10-02 12:56 - 00000000 ____D () C:\ProgramData\Softland
2014-10-01 10:57 - 2014-10-01 10:57 - 00000000 ____D () C:\Users\Gosiek\Documents\AutomaticSolution Software
2014-09-30 12:12 - 2014-09-30 12:12 - 01178374 _____ () C:\Users\Gosiek\Desktop\podpis 2.psd

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-25 17:37 - 2013-04-10 17:12 - 01686454 _____ () C:\Windows\WindowsUpdate.log
2014-10-25 17:36 - 2013-11-15 19:31 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-25 17:36 - 2013-09-13 14:37 - 00000000 ____D () C:\Users\Gosiek\AppData\Roaming\GmailNotifierPro
2014-10-25 17:26 - 2013-05-24 15:36 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-25 17:03 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-25 17:03 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-25 16:55 - 2013-05-24 15:36 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-25 16:54 - 2013-09-13 14:36 - 00000000 ____D () C:\Program Files (x86)\Gmail Notifier Pro
2014-10-25 16:54 - 2013-04-24 17:43 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2014-10-25 16:54 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-25 16:54 - 2009-07-14 06:51 - 00089426 _____ () C:\Windows\setupact.log
2014-10-25 16:53 - 2010-11-21 05:47 - 00649262 _____ () C:\Windows\PFRO.log
2014-10-25 14:36 - 2013-08-25 21:06 - 00000000 ____D () C:\Users\Gosiek\AppData\Roaming\uTorrent
2014-10-25 11:26 - 2014-08-06 18:34 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-10-25 11:26 - 2014-02-23 11:42 - 01049920 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-10-25 11:26 - 2014-02-23 11:42 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-10-25 11:26 - 2014-02-23 11:42 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-10-25 11:26 - 2014-02-23 11:42 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-10-25 11:26 - 2014-02-23 11:42 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-10-25 11:26 - 2014-02-23 11:42 - 00082768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-10-25 11:26 - 2014-02-23 11:42 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-10-25 11:26 - 2014-02-23 11:42 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-10-17 09:33 - 2013-05-29 13:55 - 00002189 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-16 12:54 - 2011-04-12 15:21 - 00740672 _____ () C:\Windows\system32\perfh015.dat
2014-10-16 12:54 - 2011-04-12 15:21 - 00156214 _____ () C:\Windows\system32\perfc015.dat
2014-10-16 12:54 - 2009-07-14 07:13 - 01670518 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-15 16:46 - 2014-09-19 15:37 - 00000082 _____ () C:\Users\Gosiek\Desktop\Nowy dokument tekstowy.txt
2014-10-11 11:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-10-10 09:40 - 2013-04-10 17:18 - 00000000 ____D () C:\Users\Gosiek
2014-10-10 09:40 - 2009-07-14 04:34 - 66322432 _____ () C:\Windows\system32\config\software.rcbak
2014-10-10 09:40 - 2009-07-14 04:34 - 14942208 _____ () C:\Windows\system32\config\system.rcbak
2014-10-10 09:40 - 2009-07-14 04:34 - 00294912 _____ () C:\Windows\system32\config\default.rcbak
2014-10-10 09:40 - 2009-07-14 04:34 - 00028672 _____ () C:\Windows\system32\config\sam.rcbak
2014-10-10 09:40 - 2009-07-14 04:34 - 00024576 _____ () C:\Windows\system32\config\security.rcbak
2014-10-10 09:33 - 2014-09-21 01:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-10 09:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-08 13:02 - 2014-09-09 09:09 - 00011546 _____ () C:\Users\Gosiek\Desktop\Nowy Arkusz programu Microsoft Excel.xlsx
2014-10-02 21:59 - 2014-08-11 22:33 - 00000000 ____D () C:\Users\Gosiek\Desktop\Lil
2014-10-02 13:00 - 2013-05-31 09:25 - 00000000 ____D () C:\Users\Gosiek\AppData\Roaming\Softland
2014-09-30 12:16 - 2014-08-11 22:39 - 00000000 ____D () C:\Users\Gosiek\AppData\Local\Adobe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-16 10:14

==================== End Of Log ============================