Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-04-2015
Ran by operator (administrator) on NN-35F505A9FF00 on 15-04-2015 13:50:58
Running from C:\Documents and Settings\operator\Moje dokumenty
Loaded Profiles: operator &  (Available profiles: operator & Administrator)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(COMARCH S.A.) C:\Program Files\Serwer wydruków graficznych dla Comarch Klasyka\RpWinKla.exe
(Apple Inc.) C:\Program Files\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
(BlackBerry Limited) C:\Program Files\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
(BlackBerry Limited) C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
() C:\Program Files\Opera\28.0.1750.51\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1404928 2004-10-14] (Analog Devices, Inc.)
HKLM\...\Run: [igfxhkcmd] => C:\WINDOWS\system32\hkcmd.exe [77824 2006-03-23] (Intel Corporation)
HKLM\...\Run: [igfxpers] => C:\WINDOWS\system32\igfxpers.exe [118784 2006-03-23] (Intel Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Serwer wydruków graficznych dla Comarch Klasyka.lnk
ShortcutTarget: Serwer wydruków graficznych dla Comarch Klasyka.lnk -> C:\Program Files\Serwer wydruków graficznych dla Comarch Klasyka\RpWinKla.exe (COMARCH S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-220523388-1606980848-1905892399-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-220523388-1606980848-1905892399-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-220523388-1606980848-1905892399-1003 -> DefaultScope {6768B389-1EAB-4EFE-8FC6-F2EC1863E9E3} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKU\S-1-5-21-220523388-1606980848-1905892399-1003 -> {6768B389-1EAB-4EFE-8FC6-F2EC1863E9E3} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKU\S-1-5-21-220523388-1606980848-1905892399-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {6768B389-1EAB-4EFE-8FC6-F2EC1863E9E3} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKU\S-1-5-21-220523388-1606980848-1905892399-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {6768B389-1EAB-4EFE-8FC6-F2EC1863E9E3} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-15] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-15] (Oracle Corporation)
DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A41} https://www.pekaobiznes24.pl/components/1,3,0,82/SignActivXPEKAO.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-15] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-15] (Oracle Corporation)

Opera: 
=======
OPR Extension: (AdBlock) - C:\Documents and Settings\operator\Dane aplikacji\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2014-10-29]
OPR Extension: (Tłumacz) - C:\Documents and Settings\operator\Dane aplikacji\Opera Software\Opera Stable\Extensions\ibnombjmjocaccigcefonnipcnlaeaed [2014-10-16]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 6to4; C:\WINDOWS\System32\6to4svc.dll [100864 2010-02-12] (Microsoft Corporation)
R3 BlackBerry Device Manager; C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [588024 2014-09-04] (BlackBerry Limited)
R2 RIM MDNS; C:\Program Files\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [396024 2014-09-15] (Apple Inc.)
R2 RIM Tunnel Service; C:\Program Files\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1343224 2014-09-15] (BlackBerry Limited)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [327168 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [100096 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R3 blackberryncm; C:\WINDOWS\System32\DRIVERS\blackberryncm.sys [19456 2014-04-15] (BlackBerry)
R2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [693760 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2011-01-27] (Aladdin Knowledge Systems) [File not signed]
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [114904 2015-04-15] (Malwarebytes Corporation)
S3 PortTalk; C:\WINDOWS\System32\Drivers\PortTalk.sys [3567 2002-01-12] (Beyond Logic http://www.beyondlogic.org) [File not signed]
R3 RimUsb; C:\WINDOWS\System32\Drivers\RimUsb.sys [68608 2014-05-06] (BlackBerry Limited)
R3 rimvndis; C:\WINDOWS\System32\Drivers\rimvndis.sys [12800 2014-09-15] (Research in Motion Limited)
R1 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [226880 2010-02-11] (Microsoft Corporation)
R1 UserPort; C:\WINDOWS\System32\Drivers\UserPort.sys [21088 2008-07-09] () [File not signed]
S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-15 13:21 - 2015-04-15 13:21 - 00000000 ____D () C:\Documents and Settings\operator\Dane aplikacji\PDF Architect 3
2015-04-15 13:12 - 2015-04-15 13:12 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-04-15 13:12 - 2015-04-15 13:12 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-04-15 13:12 - 2015-04-15 13:12 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-04-15 13:12 - 2015-04-15 13:12 - 00000000 ____D () C:\Documents and Settings\operator\Dane aplikacji\Oracle
2015-04-15 13:12 - 2015-04-15 13:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Java
2015-04-15 13:11 - 2015-04-15 13:11 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Oracle
2015-04-15 13:09 - 2015-04-15 13:16 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-04-15 13:09 - 2015-04-15 13:09 - 00000000 ____D () C:\Documents and Settings\operator\Dane aplikacji\pdfforge
2015-04-15 13:09 - 2015-04-15 13:09 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator
2015-04-15 13:09 - 2015-04-15 13:09 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PDF Architect 3
2015-04-15 13:08 - 2015-04-01 19:47 - 00099208 _____ (pdfforge GmbH) C:\WINDOWS\system32\is-UEQF0.tmp
2015-04-15 12:34 - 2015-04-15 12:34 - 00000892 _____ () C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-04-15 12:01 - 2015-04-15 13:50 - 00000000 ____D () C:\Documents and Settings\operator\Moje dokumenty\FRST-OlderVersion
2015-04-13 15:34 - 2015-04-13 15:34 - 00027572 _____ () C:\Documents and Settings\operator\Moje dokumenty\Shortcut.txt
2015-04-13 15:32 - 2015-04-13 15:34 - 00020832 _____ () C:\Documents and Settings\operator\Moje dokumenty\Addition.txt
2015-04-13 15:31 - 2015-04-15 13:51 - 00009211 _____ () C:\Documents and Settings\operator\Moje dokumenty\FRST.txt
2015-04-13 15:30 - 2015-04-15 13:51 - 00000000 ____D () C:\FRST
2015-04-13 15:30 - 2015-04-15 13:50 - 01136640 _____ (Farbar) C:\Documents and Settings\operator\Moje dokumenty\FRST.exe
2015-04-09 14:33 - 2015-04-09 14:33 - 00078336 _____ () C:\Documents and Settings\operator\Pulpit\Sanit 2015.01.01 Cennik zakupowy IK.xls
2015-03-31 10:00 - 2015-03-31 10:00 - 00000513 _____ () C:\Documents and Settings\operator\Pulpit\Andrzej S.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-15 13:51 - 2011-01-27 16:06 - 00000000 ____D () C:\TEMP
2015-04-15 13:50 - 2010-10-21 08:49 - 00000000 ___RD () C:\Documents and Settings\operator\Moje dokumenty
2015-04-15 13:37 - 2014-08-04 14:00 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-04-15 13:33 - 2010-12-02 10:37 - 00065536 _____ () C:\WINDOWS\system32\config\Internet.evt
2015-04-15 13:33 - 2010-10-21 08:49 - 00000000 ____D () C:\Documents and Settings\operator
2015-04-15 13:21 - 2010-10-21 08:49 - 00000000 __RHD () C:\Documents and Settings\operator\Dane aplikacji
2015-04-15 13:21 - 2010-10-21 00:07 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2015-04-15 13:16 - 2015-01-15 13:47 - 00002228 _____ () C:\Documents and Settings\operator\Pulpit\Shoper Manager.lnk
2015-04-15 13:16 - 2015-01-15 13:47 - 00000000 ____D () C:\Documents and Settings\operator\Menu Start\Programy\Shoper Manager
2015-04-15 13:14 - 2015-01-15 13:40 - 00000000 ____D () C:\Program Files\Shoper Manager
2015-04-15 13:14 - 2015-01-15 13:40 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Shoper Manager
2015-04-15 13:11 - 2010-12-02 12:19 - 00000000 ____D () C:\Program Files\Java
2015-04-15 13:11 - 2010-10-21 00:06 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2015-04-15 13:09 - 2014-04-04 13:51 - 00000000 ____D () C:\Program Files\PDFCreator
2015-04-15 13:08 - 2015-01-20 09:02 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-15 12:55 - 2010-12-13 12:15 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\7-Zip
2015-04-15 12:55 - 2010-10-21 08:32 - 01706791 ____N () C:\WINDOWS\WindowsUpdate.log
2015-04-15 12:54 - 2014-05-23 14:29 - 00000159 ____N () C:\WINDOWS\wiadebug.log
2015-04-15 12:54 - 2014-05-23 14:29 - 00000050 ____N () C:\WINDOWS\wiaservc.log
2015-04-15 12:54 - 2008-04-15 14:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-04-15 12:53 - 2014-10-16 13:38 - 00000458 _____ () C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1413459512.job
2015-04-15 12:53 - 2010-10-21 08:49 - 00000188 ___SH () C:\Documents and Settings\operator\ntuser.ini
2015-04-15 12:53 - 2010-10-21 08:48 - 00032568 ____N () C:\WINDOWS\SchedLgU.Txt
2015-04-15 12:53 - 2010-10-21 08:48 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-15 12:52 - 2010-12-02 11:06 - 00000000 ____D () C:\WINDOWS\system32\LogFiles
2015-04-15 12:34 - 2012-07-09 10:38 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-04-15 12:34 - 2012-07-09 10:38 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-04-15 12:23 - 2012-01-03 12:57 - 00000444 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.ics
2015-04-15 12:21 - 2010-10-21 08:49 - 00000000 ___RD () C:\Documents and Settings\operator\Menu Start\Programy
2015-04-15 12:21 - 2010-10-21 08:30 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Gry
2015-04-15 12:21 - 2010-10-21 00:07 - 01283710 ____C () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-15 12:21 - 2010-10-21 00:07 - 00000000 ___RD () C:\Documents and Settings\Default User\Menu Start\Programy
2015-04-15 12:21 - 2010-10-20 23:59 - 00000000 ____D () C:\WINDOWS\Help
2015-04-15 12:21 - 2008-04-15 14:00 - 00565768 _____ () C:\WINDOWS\system32\perfh015.dat
2015-04-15 12:21 - 2008-04-15 14:00 - 00110208 _____ () C:\WINDOWS\system32\perfc015.dat
2015-04-15 12:06 - 2012-02-15 15:47 - 00000000 ____D () C:\Documents and Settings\operator\Dane aplikacji\FileZilla
2015-04-15 12:02 - 2010-10-21 08:49 - 00000000 __RHD () C:\Documents and Settings\operator\Moje dokumenty\Moje obrazy
2015-04-15 11:57 - 2010-10-21 08:49 - 00000000 ____D () C:\Documents and Settings\operator\Pulpit
2015-04-15 11:57 - 2010-10-21 00:07 - 00000000 ___HD () C:\Documents and Settings\All Users\Szablony
2015-04-15 09:41 - 2014-10-16 11:55 - 00000000 ____D () C:\Program Files\Opera Mail
2015-04-15 08:09 - 2010-12-02 10:10 - 125832184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-13 10:58 - 2014-01-14 13:51 - 00121344 __SHC () C:\Documents and Settings\operator\Pulpit\Thumbs.db
2015-04-08 14:06 - 2014-10-16 13:38 - 00000000 ____D () C:\Program Files\Opera
2015-04-07 14:23 - 2015-01-15 13:47 - 00000000 ____D () C:\Documents and Settings\operator\.shoperManager
2015-04-02 08:04 - 2012-02-10 17:29 - 00000000 ____D () C:\WINDOWS\Minidump
2015-03-27 14:56 - 2010-12-13 12:19 - 00000000 ____D () C:\Documents and Settings\operator\Pulpit\IGS

==================== Files in the root of some directories =======

2010-10-21 08:51 - 2015-03-13 12:44 - 0192000 ____C () C:\Documents and Settings\operator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-12-03 09:46 - 2010-12-03 09:46 - 0000133 ____C () C:\Documents and Settings\operator\Ustawienia lokalne\Dane aplikacji\fusioncache.dat

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================