Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-02-2015
Ran by hp (administrator) on HP-PC on 17-02-2015 13:50:02
Running from C:\Users\hp\Downloads
Loaded Profiles: hp & UpdatusUser (Available profiles: hp & UpdatusUser)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 7 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(IDT, Inc.) C:\WINDOWS\System32\DriverStore\FileRepository\stwrt.inf_030ac640\stacsv.exe
(Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe
(Hewlett-Packard Corporation) C:\WINDOWS\System32\hpservice.exe
(Validity Sensors, Inc.) C:\WINDOWS\System32\vfsFPService.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(CyberLink Corp.) C:\Program Files\HP\QuickPlay\QPService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\WINDOWS\System32\wpcumi.exe
(Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\rec_pl_12\rec_pl_12.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Super PC Tools Ltd) C:\ProgramData\{e08b3aa0-5d5a-2bf1-e08b-b3aa05d5ea81}\superpc_soft_partner.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\WINDOWS\ehome\ehmsas.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Andrea Electronics Corporation) C:\WINDOWS\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
() C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
() C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
() C:\WINDOWS\SMINST\BLService.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Word Proser) C:\Program Files\WordProser_1.10.0.9\Service\wpsvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\WINDOWS\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\WINDOWS\System32\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\ieuser.exe
(Adobe Systems Incorporated) C:\WINDOWS\System32\Macromed\Flash\FlashUtil32_16_0_0_305_ActiveX.exe
(Microsoft Corporation) C:\WINDOWS\System32\taskmgr.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\WINDOWS\System32\conime.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512 2008-01-18] (Synaptics, Inc.)
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [178712 2008-04-15] (Intel Corporation)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2007-12-24] (CyberLink Corp.)
HKLM\...\Run: [DpAgent] => C:\Program Files\DigitalPersona\Bin\dpagent.exe [699456 2008-03-12] (DigitalPersona, Inc.)
HKLM\...\Run: [QPService] => C:\Program Files\HP\QuickPlay\QPService.exe [468264 2008-04-23] (CyberLink Corp.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [442433 2008-04-15] (IDT, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [WPCUMI] => C:\Windows\system32\WpcUmi.exe [176128 2006-11-02] (Microsoft Corporation)
HKLM\...\Run: [NeroCheck] => C:\Windows\system32\\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [312376 2011-11-15] (Power Software Ltd)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [rec_pl_12] => C:\Program Files\rec_pl_12\rec_pl_12.exe [3977360 2015-02-09] ()
HKU\S-1-5-21-3814680480-1097625461-4125634967-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3814680480-1097625461-4125634967-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-07-20] (Google Inc.)
HKU\S-1-5-21-3814680480-1097625461-4125634967-1000\...\Run: [uTorrent] => "C:\Program Files\uTorrent\uTorrent.exe"  /MINIMIZED
HKU\S-1-5-21-3814680480-1097625461-4125634967-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3814680480-1097625461-4125634967-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3814680480-1097625461-4125634967-1001\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
Lsa: [Notification Packages] scecli DPPWDFLT
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\superpc_soft_partner.lnk
ShortcutTarget: superpc_soft_partner.lnk -> C:\ProgramData\{e08b3aa0-5d5a-2bf1-e08b-b3aa05d5ea81}\superpc_soft_partner.exe (Super PC Tools Ltd)
Startup: C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicyUsers\S-1-5-21-3814680480-1097625461-4125634967-1001\User: Group Policy restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3814680480-1097625461-4125634967-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3814680480-1097625461-4125634967-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3814680480-1097625461-4125634967-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-3814680480-1097625461-4125634967-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog9 01 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 02 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 03 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 04 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 05 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 06 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 07 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 08 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 20 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\zkrx748t.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: jid0wpCH2liWmuMjc8AV1VWejWvGjBIjetpack - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\zkrx748t.default\Extensions\jid0-wpCH2liWmuMjc8AV1VWejWvGjBI@jetpack [2015-02-14]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-05-21]
FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru

Chrome: 
=======
CHR HomePage: Default -> hxxp://isearch.omiga-plus.com/?type=hppp&ts=1199145468&from=obw&uid=FUJITSUXMJA2320BHXG2_K94QTA32LHL7
CHR StartupUrls: Default -> "hxxp://isearch.omiga-plus.com/?type=hppp&ts=1199145468&from=obw&uid=FUJITSUXMJA2320BHXG2_K94QTA32LHL7"
CHR DefaultSearchKeyword: Default -> omiga-plus
CHR DefaultSuggestURL: Default -> 
CHR Profile: C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ibiiaimghkbhffgkkdogldehnidojjga) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibiiaimghkbhffgkkdogldehnidojjga [2015-02-15]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\aestsrv.exe [73728 2008-02-12] (Andrea Electronics Corporation)
R2 DpHost; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [302144 2008-03-12] (DigitalPersona, Inc.) [File not signed]
R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-04-15] (Hewlett-Packard) [File not signed]
S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-03-12] (Hewlett-Packard Co.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2214504 2011-05-21] (NVIDIA Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
S2 pr2ak2qb; C:\Windows\system32\pr2ak2qb.exe [407168 2007-06-04] (Techland)
R2 QPCapSvc; C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [292232 2008-04-23] ()
R2 QPSched; C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [112008 2008-04-23] ()
R2 Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [341328 2008-03-26] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2007-01-09] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\STacSV.exe [221239 2008-04-15] (IDT, Inc.)
R3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
R2 wpsvc_1.10.0.9; C:\Program Files\WordProser_1.10.0.9\Service\wpsvc.exe [278608 2015-02-06] (Word Proser)
S2 22134214; "C:\Windows\system32\rundll32.exe" "c:\Program Files\Super Optimizer\SupOptStats.dll",ENT
S2 jipifety; C:\Users\hp\AppData\Roaming\VOPackage\VOsrv.exe [X] <==== ATTENTION

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [23040 2012-07-03] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [27776 2012-07-03] (LG Electronics Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2008-01-01] ()
S3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2008-01-01] ()
R0 pe3ak2qb; C:\Windows\System32\drivers\pe3ak2qb.sys [64904 2007-06-04] (Techland)
R1 prodrv06; C:\Windows\System32\drivers\prodrv06.sys [54368 2004-09-03] (Protection Technology) [File not signed]
R0 prohlp02; C:\Windows\System32\drivers\prohlp02.sys [115680 2004-09-03] (Protection Technology) [File not signed]
R0 prosync1; C:\Windows\System32\drivers\prosync1.sys [7040 2004-07-19] (Protection Technology) [File not signed]
R0 ps6ak2qb; C:\Windows\System32\drivers\ps6ak2qb.sys [55184 2007-06-04] (Techland)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [112096 2011-11-15] (Power Software Ltd)
R0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [63352 2006-07-05] (Protection Technology (StarForce))
R0 sfhlp01; C:\Windows\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sfsync04; C:\Windows\System32\drivers\sfsync04.sys [59776 2006-08-11] (Protection Technology (StarForce))
R2 webTinst; C:\Windows\system32\Drivers\webTinst.sys [43560 2008-01-01] ()
R1 wpnfd_1_10_0_9; C:\Windows\System32\drivers\wpnfd_1_10_0_9.sys [52736 2015-02-06] (Word Proser)
R2 {22D78859-9CE9-4B77-BF18-AC83E81A9263}; C:\Program Files\HP\QuickPlay\000.fcl [39408 2008-04-23] (Cyberlink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\Users\hp\AppData\Local\Temp\catchme.sys [X]
U1 eabfiltr; No ImagePath
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2040-05-19 14:45 - 2015-02-14 20:36 - 00000919 _____ () C:\Users\hp\Desktop\Launch Internet Explorer Browser.lnk
2040-05-19 14:39 - 2015-02-15 13:38 - 00000000 ____D () C:\gry
2015-02-17 13:50 - 2015-02-17 13:50 - 00018152 _____ () C:\Users\hp\Downloads\FRST.txt
2015-02-17 13:48 - 2015-02-17 13:50 - 00000000 ____D () C:\FRST
2015-02-17 09:14 - 2015-02-17 09:14 - 00154672 _____ () C:\Windows\Minidump\Mini021715-01.dmp
2015-02-17 08:26 - 2015-02-17 08:26 - 01125888 _____ (Farbar) C:\Users\hp\Downloads\FRST.exe
2015-02-17 08:18 - 2015-02-17 08:18 - 00602112 _____ (OldTimer Tools) C:\Users\hp\Downloads\OTL.exe
2015-02-15 13:09 - 2015-02-15 13:09 - 00008501 _____ () C:\ComboFix.txt
2015-02-15 12:58 - 2015-02-15 13:09 - 00000000 ____D () C:\Qoobox
2015-02-15 12:58 - 2015-02-15 13:09 - 00000000 ____D () C:\ComboFix
2015-02-15 12:58 - 2015-02-15 13:08 - 00000000 ____D () C:\Windows\erdnt
2015-02-15 12:58 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-02-15 12:58 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-02-15 12:58 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-02-15 12:58 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-02-15 12:58 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-02-15 12:58 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2015-02-15 12:58 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2015-02-15 12:58 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2015-02-15 12:28 - 2015-02-15 12:49 - 00000000 ____D () C:\AdwCleaner
2015-02-15 12:27 - 2015-02-15 12:27 - 00000807 _____ () C:\Users\hp\Desktop\AdwCleaner — skrót.lnk
2015-02-13 21:22 - 2015-02-15 13:43 - 00000000 ____D () C:\Users\hp\Desktop\JASIEK
2015-02-12 19:33 - 2015-02-12 19:33 - 00000000 ____D () C:\Users\hp\AppData\Local\rec_pl_12
2015-02-12 19:33 - 2015-02-12 19:33 - 00000000 ____D () C:\Program Files\rec_pl_12
2015-02-06 21:26 - 2015-02-06 21:26 - 00052736 _____ (Word Proser) C:\Windows\system32\Drivers\wpnfd_1_10_0_9.sys
2015-01-29 18:13 - 2015-01-29 18:13 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-17 13:45 - 2008-01-01 00:41 - 01119375 _____ () C:\Windows\WindowsUpdate.log
2015-02-17 13:35 - 2011-07-20 20:31 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-17 13:31 - 2008-01-01 01:01 - 00003586 _____ () C:\Users\Public\Documents\hpqp.ini
2015-02-17 13:29 - 2011-07-20 20:31 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-17 13:29 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-17 13:29 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-17 13:29 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-17 10:28 - 2008-01-01 00:42 - 00000836 _____ () C:\Windows\bthservsdp.dat
2015-02-17 10:28 - 2006-11-02 14:01 - 00032596 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-17 09:57 - 2014-10-22 19:21 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-17 09:14 - 2008-01-01 08:39 - 00000000 ____D () C:\Windows\Minidump
2015-02-17 09:13 - 2008-01-01 08:38 - 3186875251 _____ () C:\Windows\MEMORY.DMP
2015-02-17 08:10 - 2011-05-25 15:56 - 00000000 ____D () C:\programy2
2015-02-17 08:00 - 2012-01-17 11:39 - 00000000 ____D () C:\Users\hp\AppData\Roaming\foobar2000
2015-02-16 07:03 - 2008-01-21 03:47 - 00154406 _____ () C:\Windows\PFRO.log
2015-02-15 13:43 - 2008-01-02 05:46 - 00000000 ____D () C:\Users\hp\Desktop\JAGODA
2015-02-15 13:42 - 2008-01-02 23:30 - 00000000 ____D () C:\Users\hp\Desktop\GOsia
2015-02-15 13:40 - 2011-05-19 17:50 - 00000000 ____D () C:\Users\hp\Documents\My Games
2015-02-15 13:39 - 2008-07-03 01:58 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-02-15 13:38 - 2008-01-01 01:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
2015-02-15 13:36 - 2008-01-01 00:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2015-02-15 13:32 - 2011-07-27 05:46 - 00000000 ____D () C:\Users\hp\AppData\Roaming\uTorrent
2015-02-15 13:09 - 2006-11-02 12:18 - 00000000 ___RD () C:\Users\Public
2015-02-15 13:07 - 2006-11-02 11:23 - 00000215 _____ () C:\Windows\system.ini
2015-02-15 12:58 - 2011-05-19 13:51 - 00000000 ____D () C:\Users\hp\Documents\Bluetooth Exchange Folder
2015-02-14 20:36 - 2011-05-19 13:51 - 00000949 _____ () C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-14 20:36 - 2008-01-01 08:14 - 00000858 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-14 20:36 - 2008-01-01 08:14 - 00000846 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-13 21:34 - 2011-05-21 16:50 - 00000000 ____D () C:\Users\hp\AppData\Roaming\codeblocks
2015-02-13 21:28 - 2011-05-24 17:11 - 00002625 _____ () C:\Users\hp\Desktop\Microsoft Office Word 2007.lnk
2015-02-13 20:41 - 2011-05-29 07:26 - 00000000 ____D () C:\Users\hp\Documents\Eidos
2015-02-13 20:40 - 2008-01-01 16:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skoki narciarskie 2004
2015-02-11 21:53 - 2008-01-08 00:51 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 21:40 - 2006-11-02 11:24 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-02-11 21:39 - 2011-05-19 14:52 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-11 18:23 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2015-02-09 21:57 - 2014-10-22 19:21 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-09 21:57 - 2011-07-20 20:31 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-31 12:14 - 2008-01-02 00:44 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-29 00:53 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\LogFiles

==================== Files in the root of some directories =======

2011-05-23 11:08 - 2008-01-01 00:03 - 0007916 _____ () C:\Users\hp\AppData\Local\d3d9caps.dat
2011-05-29 05:48 - 2014-11-11 07:32 - 0015360 _____ () C:\Users\hp\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-05-24 17:25 - 2011-05-24 17:27 - 0000361 _____ () C:\ProgramData\hpzinstall.log
2008-01-01 00:56 - 2008-01-01 03:56 - 0042274 _____ () C:\ProgramData\nvModes.001
2008-01-01 00:55 - 2008-01-01 03:56 - 0042274 _____ () C:\ProgramData\nvModes.dat

Files to move or delete:
====================
C:\Users\hp\codeblocks-10.05-setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-17 13:37

==================== End Of Log ============================