Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-06-2015
Ran by pikus (administrator) on PIKUS-PC on 25-06-2015 19:38:41
Running from C:\Users\pikus\Desktop\logi\FRST
Loaded Profiles: pikus (Available Profiles: pikus)
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 7 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(brother Industries Ltd) C:\Windows\System32\brsvc01a.exe
(brother Industries Ltd) C:\Windows\System32\brss01a.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
(InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(HVDC) C:\Program Files\HVDC Lmgr\WinNT\lmgrd-hvdc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Google) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe
() C:\Program Files\Winamp\winampa.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Google Inc.) C:\Users\pikus\AppData\Local\Google\Update\GoogleUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Realtek Semiconductor Corp.) C:\Users\pikus\AppData\Local\Temp\RtkBtMnt.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerEvent.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-09-01] (Google)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6724128 2009-02-11] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-02-11] (Realtek Semiconductor Corp.)
HKLM\...\Run: [WarReg_PopUp] => C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe [57344 2008-11-04] (eMachines)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1418536 2009-01-09] (Synaptics, Inc.)
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [862728 2009-02-12] (Dritek System Inc.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe [698912 2009-04-03] (Acer Incorporated)
HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [37888 2009-07-01] ()
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [Plus Internet] => C:\Program Files\Plus Internet\PlusInternetChecker.exe [645040 2012-09-28] ()
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft anti-malware\a2guard.exe [4923832 2015-05-26] (Emsisoft Ltd)
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\...\Run: [ALLUpdate] => C:\Program Files\ALLPlayer\ALLUpdate.exe [870400 2009-11-11] ()
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\...\Run: [Google Update] => C:\Users\pikus\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-12-01] (Google Inc.)
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\...\MountPoints2: {8e19a11f-4047-11e2-9a25-00235aeb9396} - F:\sources\sperr32.exe x64
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\...\MountPoints2: {b8e8e5c4-ac2e-11e2-b628-00a0c6000000} - F:\AutoRun.exe
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\...\MountPoints2: {bfdea1c3-c3de-11e4-ab98-e2054a8b0a50} - G:\sources\sperr32.exe x64
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Aurora.scr [1370624 2008-01-21] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-09-01] (Google)
ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2010-02-10] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=128
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=0415&s=2&o=vb32&d=0909&m=e725
HKU\S-1-5-21-3383955824-2591044982-1744693773-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-03] (Oracle Corporation)
BHO: Pomocnik rejestracji usługi Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-03] (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 193.203.206.1 91.210.245.1

FireFox:
========
FF ProfilePath: C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default
FF Homepage: hxxp://pl.investing.com/currencies/usd-pln-technical
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_190.dll [2015-06-24] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-03] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-03] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2008-12-04] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-23] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-23] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3383955824-2591044982-1744693773-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\pikus\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3383955824-2591044982-1744693773-1000: @talk.google.com/O1DPlugin -> C:\Users\pikus\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3383955824-2591044982-1744693773-1000: @tools.google.com/Google Update;version=3 -> C:\Users\pikus\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-23] (Google Inc.)
FF Plugin HKU\S-1-5-21-3383955824-2591044982-1744693773-1000: @tools.google.com/Google Update;version=9 -> C:\Users\pikus\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-23] (Google Inc.)
FF Plugin HKU\S-1-5-21-3383955824-2591044982-1744693773-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\pikus\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2009-11-30] (Unity Technologies ApS)
FF user.js: detected! => C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default\user.js [2012-04-15]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll [2011-10-27] (LiveVDO )
FF Plugin ProgramFiles/Appdata: C:\Users\pikus\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\pikus\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Extension: Zestaw Narzędzi Pożyczkodawcy - C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default\Extensions\znpd@rogers-design.net [2015-06-04]
FF Extension: Eliminator Slajdów - C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default\Extensions\jid0-GaZOxvWNYcafEsmayJDIG3XXVi8@jetpack.xpi [2015-06-20]
FF Extension: Przelewy24 - C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default\Extensions\p24ext@przelewy24.pl.xpi [2013-01-13]
FF Extension: Google Translator for Firefox - C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default\Extensions\translator@zoli.bod.xpi [2015-03-25]
FF Extension: ReloadEvery - C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2012-07-04]
FF Extension: Video DownloadHelper - C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-14]
FF Extension: Adblock Plus - C:\Users\pikus\AppData\Roaming\Mozilla\Firefox\Profiles\nxkq2psm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-08]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-03-16]

Chrome: 
=======
CHR Profile: C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-19]
CHR Extension: (Google Docs) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-19]
CHR Extension: (Google Drive) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-19]
CHR Extension: (YouTube) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-19]
CHR Extension: (Google Search) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-19]
CHR Extension: (Google Sheets) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-19]
CHR Extension: (Google Wallet) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-19]
CHR Extension: (LiveVDO plugin) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp [2014-09-19]
CHR Extension: (Gmail) - C:\Users\pikus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-19]
CHR HKLM\...\Chrome\Extension: [pbiamblgmkgbcgbcgejjgebalncpmhnp] - C:\Program Files\StartSearch plugin\vshareplg.crx [Not Found]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [5155576 2015-05-26] (Emsisoft Ltd)
R2 Brother XP spl Service; C:\Windows\system32\brsvc01a.exe [57344 2002-04-12] (brother Industries Ltd) [File not signed]
R2 ePowerSvc; C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe [723488 2009-04-03] (Acer Incorporated)
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-09-01] (Google)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 lmgrd-hvdc; C:\Program Files\HVDC Lmgr\WinNT\lmgrd-hvdc.exe [524288 2007-03-23] (HVDC) [File not signed]
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144632 2008-09-23] (NewTech Infosystems, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
S2 AntiVirSchedulerService; "C:\Program Files\Avira\AntiVir Desktop\sched.exe" [X]
S2 AntiVirService; "C:\Program Files\Avira\AntiVir Desktop\avguard.exe" [X]
S4 AntiVirWebService; "C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [66952 2010-02-05] (CSR, plc)
R1 DritekPortIO; C:\Program Files\Launch Manager\DPortIO.sys [20112 2006-11-02] (Dritek System Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-12-07] (DT Soft Ltd)
R1 epp32; C:\Windows\System32\DRIVERS\epp32.sys [111368 2015-03-24] (Emsisoft GmbH)
R1 ISODrive; C:\Program Files\UltraISO\drivers\ISODrive.sys [82168 2013-11-21] (EZB Systems, Inc.)
R3 L1C; C:\Windows\System32\DRIVERS\L1C60x86.sys [49664 2009-01-15] (Atheros Communications, Inc.)
S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9216 2012-09-28] (MBB Incorporated)
R1 networx; C:\Windows\System32\drivers\networx.sys [54648 2014-05-09] (NetFilterSDK.com)
R1 prodrv06; C:\Windows\System32\drivers\prodrv06.sys [51744 2003-09-06] (Protection Technology) [File not signed]
R0 prohlp02; C:\Windows\System32\drivers\prohlp02.sys [62656 2003-09-06] (Protection Technology) [File not signed]
R0 prosync1; C:\Windows\System32\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R0 sfhlp01; C:\Windows\System32\drivers\sfhlp01.sys [4832 2003-09-06] (Protection Technology) [File not signed]
S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [130048 2012-09-28] (ZTE Corporation)
S3 andnetadb; System32\Drivers\lgandnetadb.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 19:38 - 2015-06-25 19:38 - 00415232 _____ (Farbar) C:\Users\pikus\Desktop\FSS.exe
2015-06-25 19:12 - 2015-06-25 19:13 - 00138816 _____ C:\Windows\Minidump\Mini062515-01.dmp
2015-06-25 09:49 - 2015-06-25 19:11 - 00000000 ____D C:\Users\pikus\Desktop\logi
2015-06-25 09:49 - 2015-06-25 09:50 - 00000000 ____D C:\Users\pikus\Desktop\AZ egzamin
2015-06-25 08:43 - 2015-06-25 19:38 - 00000000 ____D C:\FRST
2015-06-24 11:31 - 2015-06-24 11:31 - 00002670 _____ C:\EamClean.log
2015-06-24 11:29 - 2015-06-24 11:29 - 00000000 ____D C:\ProgramData\Emsisoft
2015-06-24 11:16 - 2015-06-24 11:16 - 00000850 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-06-24 11:16 - 2015-06-24 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-06-24 11:15 - 2015-06-25 19:36 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2015-06-24 11:15 - 2015-03-24 00:17 - 00111368 _____ (Emsisoft GmbH) C:\Windows\system32\Drivers\epp32.sys
2015-06-24 11:01 - 2015-06-24 11:12 - 167504288 _____ C:\Users\pikus\Desktop\avira_free_antivirus_en.exe
2015-06-22 16:25 - 2015-06-22 16:27 - 00000000 ____D C:\Users\pikus\Desktop\kokos
2015-06-13 19:19 - 2015-06-14 23:29 - 00000000 ____D C:\Users\pikus\Desktop\Do nauki
2015-06-12 12:22 - 2015-06-12 12:22 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-02 22:17 - 2015-06-03 07:56 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 19:40 - 2010-09-28 18:38 - 00000418 ____H C:\Windows\Tasks\User_Feed_Synchronization-{FD385677-FC1C-4231-BC47-D1753311A0CA}.job
2015-06-25 19:38 - 2009-09-05 18:42 - 01076781 _____ C:\Windows\WindowsUpdate.log
2015-06-25 19:35 - 2010-07-30 22:05 - 00000436 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-06-25 19:34 - 2010-12-09 22:51 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-25 19:34 - 2006-11-02 14:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-25 19:34 - 2006-11-02 14:45 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-25 19:34 - 2006-11-02 14:45 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-25 19:29 - 2009-11-29 21:39 - 00000012 _____ C:\Windows\bthservsdp.dat
2015-06-25 19:29 - 2006-11-02 14:58 - 00032546 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-25 19:12 - 2010-12-16 00:31 - 00000000 ____D C:\Windows\Minidump
2015-06-25 19:12 - 2010-12-16 00:30 - 221247615 _____ C:\Windows\MEMORY.DMP
2015-06-25 19:11 - 2012-09-30 09:16 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-25 19:09 - 2014-12-16 00:19 - 00048128 _____ C:\Users\pikus\Desktop\Nowy Arkusz programu Microsoft Excel.xls
2015-06-25 15:18 - 2010-12-09 22:51 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-25 08:39 - 2015-03-02 21:00 - 00000000 ____D C:\Users\pikus\Desktop\Studia
2015-06-25 08:39 - 2008-01-21 08:21 - 01790070 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-25 08:39 - 2008-01-21 08:20 - 00777020 _____ C:\Windows\system32\perfh015.dat
2015-06-25 08:39 - 2008-01-21 08:20 - 00174064 _____ C:\Windows\system32\perfc015.dat
2015-06-24 15:14 - 2012-09-30 09:16 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-06-24 15:14 - 2011-12-15 19:02 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-06-24 11:31 - 2008-01-21 05:02 - 00719012 _____ C:\Windows\PFRO.log
2015-06-23 21:05 - 2012-09-01 22:06 - 00000000 ____D C:\Users\pikus\Desktop\programy
2015-06-23 20:18 - 2013-12-30 22:22 - 00001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3383955824-2591044982-1744693773-1000Core.job
2015-06-23 13:18 - 2009-09-13 21:08 - 00000000 ____D C:\Users\pikus\AppData\Roaming\Winamp
2015-06-13 13:40 - 2012-10-06 12:28 - 00000000 ____D C:\Users\pikus\Documents\DOKUMENTY
2015-06-12 12:21 - 2009-03-20 01:42 - 00000000 ____D C:\Program Files\Google
2015-06-09 21:18 - 2010-03-27 19:42 - 00000000 ____D C:\Users\pikus\AppData\Roaming\uTorrent
2015-06-09 20:26 - 2010-09-01 23:32 - 00000000 ____D C:\torrenty
2015-06-06 19:19 - 2009-09-07 22:04 - 00059392 _____ C:\Users\pikus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-03 07:56 - 2014-12-13 23:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-06-02 22:32 - 2012-10-22 19:22 - 00000227 _____ C:\Windows\wininit.ini

==================== Files in the root of some directories =======

2009-09-13 22:42 - 2015-04-21 21:38 - 0010637 _____ () C:\Users\pikus\AppData\Roaming\mainhst.zgh
2010-02-09 20:56 - 2010-02-09 20:56 - 0000552 _____ () C:\Users\pikus\AppData\Local\d3d8caps.dat
2009-12-03 20:26 - 2013-04-24 09:14 - 0000680 _____ () C:\Users\pikus\AppData\Local\d3d9caps.dat
2009-09-07 22:04 - 2015-06-06 19:19 - 0059392 _____ () C:\Users\pikus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-14 16:03 - 2015-04-14 16:03 - 0004096 ____H () C:\Users\pikus\AppData\Local\keyfile3.drm
2010-11-27 23:03 - 2010-11-27 23:03 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

Some files in TEMP:
====================
C:\Users\pikus\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-25 19:41

==================== End of log ============================