Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-11-2014
Ran by Gosia (administrator) on GOSIA-PC on 23-11-2014 21:17:12
Running from C:\Users\Gosia\Downloads
Loaded Profile: Gosia (Available profiles: Gosia)
Platform: Microsoft® Windows Vista™ Home Basic  (X86) OS Language: Polski (Polska)
Internet Explorer Version 7
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(BIT LEADER) C:\Program Files\lg_swupdate\GiljabiStart.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(MSI) C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(ArcticLine Software) C:\Program Files\Jet Screenshot\jetScreenshot.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Redefine Sp z o.o.) C:\Program Files\ipla\ipla.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
() C:\Program Files\LG Software\System Control Manager\edd.exe
(O2Micro International) C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1006264 2013-01-22] (Microsoft Corporation)
HKLM\...\Run: [iPlusManager] => C:\Program Files\iPlus\iPlusChecker.exe [446464 2009-12-21] ()
HKLM\...\Run: [LG Intelligent Update] => C:\Program Files\lg_swupdate\giljabistart.exe [247088 2007-09-28] (BIT LEADER)
HKLM\...\Run: [MGSysCtrl] => C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe [565248 2007-07-06] (MSI)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-04-03] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1603152 2007-04-03] (CANON INC.)
HKLM\...\Run: [SSBkgdUpdate] => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM\...\Run: [OpwareSE4] => C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-559585761-812252448-234664116-1000\...\Run: [Jet Screenshot] => C:\Program Files\Jet Screenshot\jetScreenshot.exe [1954056 2013-01-11] (ArcticLine Software)
HKU\S-1-5-21-559585761-812252448-234664116-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-08-17] (Google Inc.)
HKU\S-1-5-21-559585761-812252448-234664116-1000\...\Run: [IPLA!] => C:\Program Files\ipla\ipla.exe [21421664 2014-08-12] (Redefine Sp z o.o.)
HKU\S-1-5-21-559585761-812252448-234664116-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-559585761-812252448-234664116-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62

FireFox:
========

Chrome: 
=======
CHR Profile: C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-23]
CHR Extension: (Dokumenty Google) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-10]
CHR Extension: (Dysk Google) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-10]
CHR Extension: (YouTube) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-10]
CHR Extension: (Szukaj w Google) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-10]
CHR Extension: (Arkusze Google) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-23]
CHR Extension: (Google Wallet) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-23]
CHR Extension: (Gmail) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-10]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [97432 2007-04-13] () [File not signed]
R2 NishService; C:\Program Files\LG Software\System Control Manager\edd.exe [40960 2006-03-02] () [File not signed]
R2 o2flash; C:\Program Files\O2Micro Oz128 Driver\o2flash.exe [65536 2007-02-12] (O2Micro International) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 E4LOADER; C:\Windows\System32\Drivers\e4ldr.sys [69656 2007-01-04] (Analog Deivces)
S3 e4usbaw; C:\Windows\System32\DRIVERS\e4usbaw.sys [104344 2007-01-04] (Analog Devices Inc.)
R3 MGHwCtrl; C:\Windows\system32\drivers\MGHwCtrl.sys [9088 2006-07-03] (Windows (R) 2000 DDK provider) [File not signed]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-23 21:02 - 2014-11-23 21:02 - 00000000 ____D () C:\Users\Gosia\Downloads\FRST-OlderVersion
2014-11-23 00:42 - 2014-11-23 00:55 - 00637301 _____ () C:\Users\Gosia\Downloads\avgremover.log
2014-11-23 00:20 - 2014-11-23 00:20 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Gosia\Downloads\avg_remover_stf_x86_2015_5501.exe
2014-11-22 23:58 - 2014-11-22 23:58 - 00896048 _____ () C:\Users\Gosia\Downloads\Norton_Removal_Tool.exe
2014-11-22 23:37 - 2014-11-23 21:02 - 01110016 _____ (Farbar) C:\Users\Gosia\Downloads\FRST.exe
2014-11-18 18:55 - 2014-11-18 18:55 - 00138504 _____ () C:\Windows\Minidump\Mini111814-01.dmp
2014-10-28 20:12 - 2014-11-23 00:15 - 00000000 ____D () C:\Users\Gosia\Desktop\diagnostyka
2014-10-28 18:47 - 2014-10-28 18:47 - 00039970 _____ () C:\Users\Gosia\Downloads\Extras.Txt
2014-10-28 18:44 - 2014-10-28 18:44 - 00162042 _____ () C:\Users\Gosia\Downloads\OTL.Txt
2014-10-28 18:28 - 2014-10-28 18:28 - 00053093 _____ () C:\Users\Gosia\Downloads\Shortcut.txt
2014-10-28 18:27 - 2014-10-28 18:28 - 00077355 _____ () C:\Users\Gosia\Downloads\Addition.txt
2014-10-28 18:26 - 2014-11-23 21:17 - 00008780 _____ () C:\Users\Gosia\Downloads\FRST.txt
2014-10-28 18:24 - 2014-11-23 21:17 - 00000000 ____D () C:\FRST

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-23 21:17 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\tracing
2014-11-23 21:13 - 2013-07-10 21:42 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-23 21:12 - 2013-01-22 10:43 - 01758300 _____ () C:\Windows\WindowsUpdate.log
2014-11-23 21:10 - 2013-01-22 23:32 - 00000000 ____D () C:\Users\Gosia\AppData\Roaming\Skype
2014-11-23 21:09 - 2013-07-10 21:42 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-23 21:09 - 2013-06-23 23:33 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-11-23 21:09 - 2013-02-04 00:02 - 00000000 ____D () C:\Users\Gosia\AppData\Roaming\ipla
2014-11-23 21:09 - 2006-11-02 13:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-23 21:09 - 2006-11-02 13:45 - 00003072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-23 21:09 - 2006-11-02 13:45 - 00003072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-23 21:08 - 2007-02-04 04:32 - 00000012 _____ () C:\Windows\bthservsdp.dat
2014-11-23 21:08 - 2006-11-02 13:58 - 00032508 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-23 20:58 - 2014-02-06 15:41 - 00000000 ____D () C:\ProgramData\ipla
2014-11-23 01:49 - 2013-01-22 02:30 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-23 00:54 - 2013-01-22 02:17 - 00248190 _____ () C:\Windows\PFRO.log
2014-11-23 00:48 - 2013-01-23 09:20 - 00000000 ____D () C:\Users\Gosia\Desktop\Programy
2014-11-23 00:48 - 2013-01-22 01:55 - 00000000 ____D () C:\Users\Gosia
2014-11-22 23:46 - 2014-08-26 15:30 - 00000000 ____D () C:\Users\Gosia\AppData\Local\Adobe
2014-11-22 23:46 - 2013-01-24 18:58 - 00000000 ____D () C:\ProgramData\Adobe
2014-11-22 23:46 - 2013-01-22 02:01 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-11-22 23:46 - 2013-01-22 02:01 - 00000000 ____D () C:\Program Files\Adobe
2014-11-22 23:36 - 2013-03-17 21:32 - 00000000 ____D () C:\Users\Gosia\AppData\Roaming\vlc
2014-11-19 19:59 - 2013-01-22 04:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-19 19:57 - 2013-07-11 04:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-19 19:47 - 2006-11-02 11:24 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-11-18 18:55 - 2013-09-06 07:28 - 00000000 ____D () C:\Windows\Minidump
2014-11-18 18:55 - 2013-09-06 07:27 - 202131909 _____ () C:\Windows\MEMORY.DMP
2014-11-18 18:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\spool
2014-11-18 18:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\registration
2014-11-18 18:46 - 2006-11-02 11:22 - 29097984 _____ () C:\Windows\system32\config\software_previous
2014-11-18 18:46 - 2006-11-02 11:22 - 23068672 _____ () C:\Windows\system32\config\components_previous
2014-11-18 18:46 - 2006-11-02 11:22 - 14680064 _____ () C:\Windows\system32\config\system_previous
2014-11-18 18:46 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\default_previous
2014-11-18 18:46 - 2006-11-02 11:22 - 00053248 _____ () C:\Windows\system32\config\sam_previous
2014-11-18 18:46 - 2006-11-02 11:22 - 00020480 _____ () C:\Windows\system32\config\security_previous
2014-11-12 23:49 - 2013-01-22 02:30 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-12 23:49 - 2013-01-22 02:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-12 08:09 - 2007-02-03 11:20 - 00535568 _____ () C:\Windows\system32\perfh015.dat
2014-11-12 08:09 - 2007-02-03 11:20 - 00086416 _____ () C:\Windows\system32\perfc015.dat
2014-11-12 08:09 - 2006-11-02 11:33 - 01326240 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-10 20:31 - 2014-09-29 06:03 - 00001983 _____ () C:\Users\Gosia\Desktop\Google Chrome.lnk
2014-11-09 05:23 - 2014-09-29 21:39 - 00000000 ___RD () C:\Program Files\Skype
2014-11-09 05:23 - 2014-09-29 06:03 - 00000000 ____D () C:\Users\Gosia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-09 05:23 - 2014-09-29 05:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-09 05:23 - 2014-09-29 05:28 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-11-09 05:23 - 2013-10-05 23:13 - 00000000 ____D () C:\Program Files\Java
2014-11-09 05:23 - 2013-07-10 21:41 - 00000000 ____D () C:\Users\Gosia\AppData\Local\Google
2014-11-09 05:23 - 2013-07-10 21:41 - 00000000 ____D () C:\Program Files\Google
2014-11-09 05:23 - 2006-11-02 12:18 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-09 05:10 - 2013-01-22 01:55 - 00001356 _____ () C:\Users\Gosia\AppData\Local\d3d9caps.dat
2014-11-09 04:25 - 2013-02-04 00:01 - 00000000 ____D () C:\Program Files\ipla
2014-11-04 05:50 - 2013-09-06 11:29 - 00000000 ____D () C:\Users\Gosia\Documents\Zdjęcia
2014-11-04 05:49 - 2013-02-25 10:29 - 00000000 ____D () C:\Users\Gosia\Documents\Kościół
2014-11-02 22:28 - 2013-01-22 02:01 - 00000000 ____D () C:\Users\Gosia\Documents\Dokumenty moje
2014-10-28 17:31 - 2013-10-05 23:16 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-28 15:19 - 2013-03-04 12:12 - 00000000 ____D () C:\ProgramData\CanonIJPLM

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-23 21:16

==================== End Of Log ============================