Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-01-2015
Ran by Madga (administrator) on MADGA-PC on 05-01-2015 15:04:45
Running from G:\Służbowe
Loaded Profile: Madga (Available profiles: Madga)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polski (Polska)
Internet Explorer Version 9 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\AEstSrv.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
() C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [450652 2009-06-03] (IDT, Inc.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [HP Health Check Scheduler] => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [WirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [432432 2008-12-08] (Hewlett-Packard)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [224128 2014-03-18] (Oracle Corporation)
HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [914224 2008-11-18] (Hewlett-Packard)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1843016 2014-01-29] (Bitdefender)
HKU\S-1-5-21-894316807-4337371-2112429552-1000\...\Run: [Agent aplikacji Portfel Bitdefender] => C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe [614232 2014-01-29] (Bitdefender)
HKU\S-1-5-21-894316807-4337371-2112429552-1000\...\Run: [Agent Portfela Bitdefender] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [481880 2014-02-03] (Bitdefender)
HKU\S-1-5-18\...\Run: [Agent Portfela Bitdefender] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [481880 2014-02-03] (Bitdefender)
HKU\S-1-5-18\...\Run: [Portfel Bitdefender] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [901096 2014-02-03] (Bitdefender)
HKU\S-1-5-18\...\Run: [Agent aplikacji Portfel Bitdefender] => C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe [614232 2014-01-29] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-894316807-4337371-2112429552-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-894316807-4337371-2112429552-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope value is missing.
SearchScopes: HKLM -> {6A780C7A-0F2C-4D40-A032-BAEF07C1C686} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
SearchScopes: HKU\S-1-5-21-894316807-4337371-2112429552-1000 -> DefaultScope {6A780C7A-0F2C-4D40-A032-BAEF07C1C686} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
SearchScopes: HKU\S-1-5-21-894316807-4337371-2112429552-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-894316807-4337371-2112429552-1000 -> {6A780C7A-0F2C-4D40-A032-BAEF07C1C686} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
SearchScopes: HKU\S-1-5-21-894316807-4337371-2112429552-1000 -> {EC5E52F7-FFE4-43FA-8109-14461CB08DA5} URL = http://www.google.com/search?q={searchTerms}
BHO: Portfel Bitdefender -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Winsock: Missing Catalog5 entry, broken internet access. <===== ATTENTION.
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Madga\AppData\Roaming\Mozilla\Firefox\Profiles\emi0gcsm.default-1400330218256
FF Homepage: www.google.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Adblock Plus - C:\Users\Madga\AppData\Roaming\Mozilla\Firefox\Profiles\emi0gcsm.default-1400330218256\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-28]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-06-02]
FF HKLM\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\ffpwdman
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\ffpwdman [2014-12-31]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2014-12-31]

Chrome: 
=======
CHR Profile: C:\Users\Madga\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Madga\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-07]
CHR Extension: (Dysk Google) - C:\Users\Madga\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-07]
CHR Extension: (YouTube) - C:\Users\Madga\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-07]
CHR Extension: (Szukaj w Google) - C:\Users\Madga\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-07]
CHR Extension: (Google Wallet) - C:\Users\Madga\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-07]
CHR Extension: (Gmail) - C:\Users\Madga\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-07]
CHR HKLM\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\pmbxcr.crx [2014-12-31]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\aestsrv.exe [81920 2009-03-02] (Andrea Electronics Corporation)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [69880 2013-11-21] (Bitdefender)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [File not signed]
R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard) [File not signed]
R3 hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [223232 2008-10-23] (Hewlett-Packard Development Company, L.P.) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [File not signed]
S4 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-12-17] ()
S4 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734 2008-09-15] () [File not signed]
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [81704 2013-07-08] (Bitdefender)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\STacSV.exe [217170 2009-06-03] (IDT, Inc.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [54424 2013-10-07] (Bitdefender)
R2 vsserv; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1235304 2014-01-29] (Bitdefender)
S2 Apple Mobile Device; "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" [X]
S3 BBSvc; "C:\Program Files\Microsoft\BingBar\BBSvc.EXE" [X]
S2 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [X]
S4 HWDeviceService.exe; "C:\ProgramData\DatacardService\HWDeviceService.exe" -/service [X]
S3 iPod Service; "C:\Program Files\iPod\bin\iPodService.exe" [X]
S2 SeaPort; "C:\Program Files\Microsoft\BingBar\SeaPort.EXE" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [778032 2013-12-02] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [242504 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [516936 2013-12-02] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [78144 2013-02-22] (BitDefender LLC)
R1 bdftdif; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdftdif.sys [130640 2011-11-14] (BitDefender LLC)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [66832 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [72704 2012-04-17] (BitDefender)
S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [102784 2010-07-27] (Huawei Technologies Co., Ltd.) [File not signed]
R3 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [165744 2013-08-23] (BitDefender LLC)
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [89856 2011-09-09] (Huawei Technologies Co., Ltd.) [File not signed]
S3 huawei_cdcecm; C:\Windows\System32\DRIVERS\ew_jucdcecm.sys [66688 2011-09-09] (Huawei Technologies Co., Ltd.) [File not signed]
S3 huawei_enumerator; C:\Windows\System32\DRIVERS\ew_jubusenum.sys [73984 2011-09-09] (Huawei Technologies Co., Ltd.) [File not signed]
U0 sptd; C:\Windows\System32\Drivers\sptd.sys [320120 2015-01-05] (Duplex Secure Ltd.)
R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [360376 2013-08-07] (BitDefender S.R.L.)
R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl [87536 2008-11-28] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
U5 bdselfpr; C:\Program Files\Bitdefender\Bitdefender\bdselfpr.sys [135600 2013-07-26] (BitDefender LLC)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 GEARAspiWDM; system32\DRIVERS\GEARAspiWDM.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 Netaapl; system32\DRIVERS\netaapl.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 USBAAPL; System32\Drivers\usbaapl.sys [X]
S3 WDC_SAM; system32\DRIVERS\wdcsam.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-05 15:03 - 2015-01-05 15:04 - 00000000 ____D () C:\FRST
2015-01-05 14:52 - 2015-01-05 14:52 - 00320120 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2015-01-03 22:21 - 2015-01-03 22:21 - 00145456 _____ () C:\Windows\Minidump\Mini010315-01.dmp
2015-01-03 20:26 - 2015-01-03 20:26 - 00001048 _____ () C:\DelFix.txt
2015-01-03 19:40 - 2015-01-03 19:47 - 00004916 _____ () C:\Users\Madga\Desktop\ESETSirefefCleaner.exe_20150103.194056.2008.log
2015-01-03 19:37 - 2015-01-03 03:09 - 00294948 _____ () C:\Users\Madga\Desktop\SharedAccess.reg
2015-01-03 19:36 - 2015-01-03 03:09 - 00001378 _____ () C:\Users\Madga\Desktop\mpsdrv.reg
2015-01-03 19:35 - 2015-01-03 03:09 - 00172952 _____ () C:\Users\Madga\Desktop\BFE.reg
2015-01-03 19:20 - 2015-01-03 22:21 - 00000808 _____ () C:\Windows\system32\spsys.log
2015-01-03 19:19 - 2015-01-03 19:19 - 00001242 _____ () C:\Windows\PFRO.log
2015-01-03 18:58 - 2015-01-03 20:16 - 00000000 ____D () C:\Users\Madga\Desktop\Antyvir
2015-01-03 18:36 - 2015-01-03 18:36 - 00093778 _____ () C:\sfc.txt
2015-01-03 17:23 - 2012-09-10 22:25 - 00454056 _____ (Helge Klein) C:\SetACL.exe
2015-01-03 17:06 - 2015-01-03 17:07 - 00004916 _____ () C:\ESETSirefefCleaner.exe_20150103.170634.1456.log
2015-01-03 17:03 - 2015-01-03 17:03 - 00524762 _____ () C:\ESETSirefefCleaner.exe_20150103.170329.1316.log
2015-01-03 16:51 - 2015-01-03 14:48 - 00368992 _____ (ESET) C:\Users\Madga\Desktop\ESETSirefefCleaner.exe
2015-01-03 16:41 - 2015-01-03 03:09 - 00007500 _____ () C:\Users\Madga\Desktop\MpsSvc.reg
2015-01-03 13:45 - 2015-01-03 13:45 - 00035992 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2015-01-03 04:05 - 2015-01-03 19:48 - 00003885 _____ () C:\Users\Madga\Desktop\fix.reg
2015-01-03 03:31 - 2015-01-03 17:34 - 00001798 _____ () C:\fix.txt
2015-01-03 03:29 - 2015-01-03 03:29 - 00000773 _____ () C:\Users\Madga\Documents\SetACL — skrót.lnk
2015-01-03 03:25 - 2012-09-10 22:25 - 00454056 _____ (Helge Klein) C:\Windows\SetACL.exe
2015-01-03 01:06 - 2015-01-03 01:06 - 00000000 ____D () C:\Program Files\ESET
2015-01-03 00:40 - 2015-01-03 22:00 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-01-03 00:40 - 2015-01-03 00:40 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-01-03 00:39 - 2015-01-03 00:39 - 00052440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\iavtnu.sys
2015-01-02 23:12 - 2015-01-03 00:11 - 00000000 ____D () C:\Windows\erdnt
2015-01-02 22:53 - 2015-01-03 00:23 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-02 22:53 - 2015-01-02 22:53 - 00000000 ____D () C:\Users\Madga\AppData\Roaming\Malwarebytes
2015-01-02 21:58 - 2015-01-03 01:02 - 00000000 ____D () C:\ProgramData\HitmanPro
2015-01-02 21:55 - 2015-01-02 22:33 - 00048067 _____ () C:\Windows\bcmwl.log
2015-01-02 21:55 - 2015-01-02 21:57 - 00051154 _____ () C:\Windows\bcmwl.log.1
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 ____D () C:\Users\Madga\AppData\Roaming\InstallShield
2014-12-31 18:23 - 2015-01-03 01:20 - 00000211 _____ () C:\WirelessDiagLog.csv
2014-12-31 16:41 - 2014-12-31 16:41 - 00000000 ____D () C:\Users\Madga\AppData\Roaming\Intel
2014-12-31 16:41 - 2014-12-31 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-12-31 16:41 - 2014-12-31 16:41 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-12-31 16:41 - 2014-12-31 16:41 - 00000000 ____D () C:\Program Files\Cisco
2014-12-31 16:40 - 2014-12-31 16:40 - 00000000 ____D () C:\ProgramData\Intel
2014-12-31 16:30 - 2014-12-31 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2014-12-31 16:30 - 2014-12-31 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcecm_01007.Wdf
2014-12-31 16:30 - 2014-12-31 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2014-12-31 16:29 - 2014-12-31 16:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-12-31 16:28 - 2011-09-09 11:50 - 00089856 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2014-12-31 16:28 - 2011-09-09 11:50 - 00073984 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2014-12-31 16:28 - 2011-09-09 11:50 - 00066688 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2014-12-31 16:28 - 2011-08-16 16:40 - 01112288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2014-12-31 16:28 - 2010-07-27 09:52 - 00102784 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2014-12-31 16:26 - 2015-01-03 01:56 - 00000000 ____D () C:\ProgramData\DatacardService
2014-12-31 16:26 - 2014-12-31 16:41 - 00013426 _____ () C:\Windows\DPINST.LOG
2014-12-31 16:05 - 2014-12-31 17:16 - 00000311 ____H () C:\bdr-cf01
2014-12-31 16:04 - 2014-12-31 16:11 - 00000000 ____D () C:\Users\Madga\AppData\Roaming\Bitdefender
2014-12-31 16:04 - 2014-12-31 16:05 - 00253404 ____H () C:\bdr-ld01
2014-12-31 16:04 - 2014-12-31 16:05 - 00009216 ____H () C:\bdr-ld01.mbr
2014-12-31 16:04 - 2014-12-31 16:04 - 00001862 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-12-31 16:04 - 2014-12-31 16:04 - 00001814 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-12-31 16:04 - 2014-12-31 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender
2014-12-31 16:04 - 2013-09-24 15:38 - 36728084 ____H () C:\bdr-im01.gz
2014-12-31 16:04 - 2013-08-23 11:48 - 00165744 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2014-12-31 16:04 - 2013-08-07 11:46 - 00360376 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2014-12-31 16:04 - 2012-08-15 14:28 - 02294848 ____H () C:\bdr-bz01

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-05 14:49 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-05 14:49 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-04 22:23 - 2011-10-30 22:46 - 01249060 _____ () C:\Windows\WindowsUpdate.log
2015-01-04 20:33 - 2009-03-03 11:54 - 00714932 _____ () C:\Windows\system32\perfh015.dat
2015-01-04 20:33 - 2009-03-03 11:54 - 00151772 _____ () C:\Windows\system32\perfc015.dat
2015-01-04 20:33 - 2006-11-02 11:33 - 01616158 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-03 22:21 - 2014-09-09 20:25 - 304170345 _____ () C:\Windows\MEMORY.DMP
2015-01-03 22:21 - 2011-07-05 14:14 - 00000000 ____D () C:\Windows\Minidump
2015-01-03 19:14 - 2006-11-02 12:18 - 00000000 ___RD () C:\Users\Public
2015-01-03 19:12 - 2006-11-02 11:23 - 00000215 _____ () C:\Windows\system.ini
2015-01-03 17:19 - 2009-09-12 14:44 - 00000000 ____D () C:\Program Files\PLAY ONLINE
2015-01-03 17:09 - 2014-09-06 18:48 - 00000000 ____D () C:\Users\Madga\AppData\Local\Adobe
2015-01-03 17:08 - 2014-05-18 15:16 - 00325016 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-03 16:56 - 2011-08-20 17:23 - 00007512 _____ () C:\Users\Madga\AppData\Local\d3d9caps.dat
2015-01-03 16:41 - 2014-06-08 22:18 - 00000000 ____D () C:\Users\Madga\Desktop\Magda
2015-01-03 04:21 - 2014-05-17 20:43 - 00000000 ____D () C:\Users\Madga\AppData\Temp
2015-01-03 02:07 - 2014-05-18 15:21 - 00079960 _____ () C:\Users\Madga\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-03 00:39 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Provisioning
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-TW
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-CN
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\tr-TR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\th-TH
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sv-SE
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sl-SI
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sk-SK
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ru-RU
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ro-RO
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pt-PT
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pt-BR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pl-PL
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\nl-NL
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\nb-NO
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\lv-LV
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\lt-LT
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ko-KR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ja-JP
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\it-IT
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\hu-HU
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\hr-HR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\he-IL
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\fr-FR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\fi-FI
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\et-EE
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\el-GR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\de-DE
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\bg-BG
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ar-SA
2015-01-02 22:32 - 2009-04-06 02:32 - 00006656 _____ () C:\Windows\system32\bcmwlrc.dll
2015-01-02 22:04 - 2013-04-19 11:36 - 00000000 ____D () C:\Windows\pss
2015-01-02 21:56 - 2009-06-27 13:37 - 00000000 ____D () C:\Users\Madga
2015-01-02 21:55 - 2009-04-06 02:32 - 03862528 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv.dll
2015-01-02 21:55 - 2009-04-06 02:32 - 03551232 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui.dll
2015-01-02 21:55 - 2009-04-06 02:32 - 02438648 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL6.SYS
2015-01-02 21:55 - 2009-04-06 02:32 - 00091376 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2015-01-02 21:55 - 2009-04-06 02:32 - 00000000 ____D () C:\Windows\system32\no-NO
2015-01-02 09:20 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-12-31 16:40 - 2009-04-06 02:33 - 00000000 ____D () C:\Program Files\Intel
2014-12-31 16:31 - 2014-05-21 17:14 - 00018564 _____ () C:\Windows\setupact.log
2014-12-31 16:11 - 2014-05-17 18:17 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-12-31 16:04 - 2014-05-22 11:21 - 00000000 ____D () C:\Program Files\Bitdefender
2014-12-31 16:04 - 2014-05-17 18:15 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender

ZeroAccess:
C:\Users\Madga\AppData\Local\1cf6efbe
C:\Users\Madga\AppData\Local\1cf6efbe\@

Some content of TEMP:
====================
C:\Users\Madga\AppData\Local\temp\dllnt_dump.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-03 22:29

==================== End Of Log ============================