Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-09-2013 Ran by Właściciel (administrator) on SICIAK-EF1F1335 on 06-09-2013 11:04:03 Running from C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Pulpit\dezyn Microsoft Windows XP Home Edition Dodatek Service Pack 2 (X86) OS Language: Polish Internet Explorer Version 6 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Adobe Systems Incorporated) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Macrovision) C:\WINDOWS\system32\drivers\CDAC11BA.EXE () C:\Program Files\Dokan\DokanLibrary\mounter.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\WINDOWS\system32\PnkBstrA.exe (Skype Technologies) C:\Program Files\Skype\Updater\Updater.exe () C:\Program Files\Tor\tor.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] - C:\WINDOWS\system32\NvCpl.dll [15512424 2012-09-23] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] - C:\Windows\System32\NvMCTray.dll [108392 2012-09-23] (NVIDIA Corporation) HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1634112 2012-09-23] () HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [20065936 2012-06-06] (Realtek Semiconductor Corp.) HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-03-11] (Hewlett-Packard Co.) HKCU\...\Run: [ALLUpdate] - C:\Program Files\ALLPlayer\ALLUpdate.exe [2995712 2013-01-23] (ALLPlayer Group Ltd.) HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.) HKCU\...\Run: [ati2avxx] - C:\WINDOWS\system32\ati2avxx.exe [x] HKU\Właściciel\...\Run: [Google Update] - C:\Documents and Settings\Właściciel\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [ 2012-04-23] (Google Inc.) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm SearchScopes: HKLM - DefaultScope value is missing. BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.) BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.) Toolbar: HKCU -&Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU -&Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2210608 2006-10-27] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Chrome: ======= ========================== Services (Whitelisted) ================= R2 C-DillaCdaC11BA; C:\WINDOWS\system32\drivers\CDAC11BA.EXE [54784 2012-11-09] (Macrovision) R2 DokanMounter; C:\Program Files\Dokan\DokanLibrary\mounter.exe [25088 2011-01-10] () R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76888 2013-06-13] () R2 tor; C:\Program Files\Tor\tor.exe [3233806 2013-09-03] () R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" [x] ==================== Drivers (Whitelisted) ==================== S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative) R2 CdaC15BA; C:\WINDOWS\system32\drivers\CDAC15BA.SYS [12464 2012-11-09] (Macrovision Europe Ltd) R2 Dokan; C:\WINDOWS\system32\drivers\dokan.sys [91904 2011-01-10] (Windows (R) Win 7 DDK provider) S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2007-03-08] (HP) S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2007-03-08] (HP) S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2007-03-08] (HP) R3 Mach3; C:\Windows\System32\Drivers\Mach3.sys [108640 2010-05-02] (Your Corporation) S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.) S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2004-08-03] (Microsoft Corporation) R3 NVENETFD; C:\Windows\System32\DRIVERS\NVENETFD.sys [45824 2007-06-28] (NVIDIA Corporation) R3 nvnetbus; C:\Windows\System32\DRIVERS\nvnetbus.sys [20480 2007-06-28] (NVIDIA Corporation) S3 Secdrv; C:\Windows\System32\DRIVERS\secdrv.sys [27440 2006-03-02] () R0 sfsync03; C:\Windows\System32\drivers\sfsync03.sys [35328 2005-10-13] (Protection Technology) S4 IntelIde; No ImagePath U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-06 10:57 - 2013-09-06 11:02 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat 2013-09-06 04:07 - 2013-09-06 04:07 - 00004881 _____ C:\UsbFix [Listing 2 ] SICIAK-EF1F1335.txt 2013-09-06 03:55 - 2013-09-06 04:46 - 00000035 _RSHT C:\eabja 2013-09-06 03:50 - 2013-09-06 04:07 - 00000000 ____D C:\UsbFix 2013-09-06 03:50 - 2013-09-06 03:51 - 00006994 _____ C:\UsbFix [Listing 1 ] SICIAK-EF1F1335.txt 2013-09-05 23:24 - 2002-08-30 14:00 - 00235824 _____ C:\NTLDR 2013-09-05 22:43 - 2013-09-05 22:43 - 00000000 ____D C:\_OTL 2013-09-05 19:25 - 2013-09-05 19:25 - 00000000 _____ C:\WINDOWS\setuperr.log 2013-09-05 17:57 - 2013-09-06 10:57 - 00000000 ____D C:\FRST 2013-09-05 17:30 - 2013-09-06 10:58 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Pulpit\dezyn 2013-09-04 11:10 - 2013-09-04 11:10 - 00017912 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT DLAMNIE3.dxf 2013-09-04 09:37 - 2013-09-04 09:37 - 00018310 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT DLA SIEBIE.dxf 2013-09-03 20:48 - 2013-09-03 20:48 - 00000000 ____D C:\Program Files\Tor 2013-09-03 17:50 - 2013-09-03 17:50 - 00016098 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT JANUSZ GASKI.dxf 2013-09-02 16:09 - 2013-09-02 16:09 - 00015734 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT TADEK K 00999.dxf 2013-08-30 16:33 - 2013-08-30 16:33 - 00017932 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT PRZYMOZE 80.dxf 2013-08-26 19:37 - 2013-08-27 22:04 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Dane aplikacji\HD FILMY 2013-08-23 10:44 - 2013-08-31 15:54 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Dane aplikacji\WinZipper 2013-08-21 09:25 - 2012-01-05 12:08 - 00843892 _____ (PythonLabs at Zope Corporation) C:\WINDOWS\system32\python22.dll 2013-08-19 14:43 - 2013-08-19 14:43 - 00016608 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT PROBA WOJTEK 99.dxf 2013-08-19 14:15 - 2013-08-19 14:15 - 00036284 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT WOJTEK KOTALA.00.dxf 2013-08-19 13:37 - 2013-08-19 13:37 - 00016611 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT PROBA WOJTEK.dxf 2013-08-14 14:18 - 2013-08-14 14:18 - 00020873 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT KAZIK B.dxf 2013-08-13 13:04 - 2013-08-13 13:05 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\PRZEKRÓJ PIECA 2013-08-10 22:18 - 2013-08-13 12:06 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\CENNIK NOWY ==================== One Month Modified Files and Folders ======= 2013-09-06 11:02 - 2013-09-06 10:57 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat 2013-09-06 11:02 - 2012-11-21 23:37 - 00001040 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-06 11:02 - 2012-04-23 17:12 - 00000159 _____ C:\WINDOWS\wiadebug.log 2013-09-06 11:02 - 2012-04-23 17:12 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-09-06 11:02 - 2012-04-23 15:27 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-09-06 11:01 - 2013-09-06 11:00 - 00000000 ____D C:\AdwCleaner 2013-09-06 11:01 - 2012-11-21 21:38 - 00000188 ___SH C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\ntuser.ini 2013-09-06 11:01 - 2012-11-21 21:38 - 00000188 ___SH C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\ntuser.ini 2013-09-06 11:01 - 2012-04-23 15:27 - 00032542 _____ C:\WINDOWS\SchedLgU.Txt 2013-09-06 11:01 - 2012-04-23 15:21 - 00431101 _____ C:\WINDOWS\WindowsUpdate.log 2013-09-06 10:59 - 2012-11-21 21:38 - 00000000 ___RD C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Menu Start\Programy 2013-09-06 10:58 - 2013-09-05 17:30 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Pulpit\dezyn 2013-09-06 10:57 - 2013-09-05 17:57 - 00000000 ____D C:\FRST 2013-09-06 10:57 - 2012-04-23 17:00 - 00000000 ____D C:\WINDOWS\system 2013-09-06 10:56 - 2012-11-21 21:38 - 00000000 __RHD C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Dane aplikacji 2013-09-06 10:56 - 2012-11-21 21:38 - 00000000 __RHD C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Dane aplikacji 2013-09-06 10:56 - 2012-04-23 15:27 - 00000000 ____D C:\Documents and Settings\LocalService\Dane aplikacji 2013-09-06 10:44 - 2012-11-21 21:38 - 00000000 ___RD C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Menu Start\Programy\Autostart 2013-09-06 10:43 - 2006-03-02 14:00 - 00013758 _____ C:\WINDOWS\system32\wpa.dbl 2013-09-06 05:11 - 2012-11-21 18:37 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-09-06 05:08 - 2012-04-23 16:52 - 00001152 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-448539723-838170752-839522115-1003UA.job 2013-09-06 04:46 - 2013-09-06 03:55 - 00000035 _RSHT C:\eabja 2013-09-06 04:07 - 2013-09-06 04:07 - 00004881 _____ C:\UsbFix [Listing 2 ] SICIAK-EF1F1335.txt 2013-09-06 04:07 - 2013-09-06 03:50 - 00000000 ____D C:\UsbFix 2013-09-06 03:58 - 2012-04-23 17:09 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-09-06 03:58 - 2012-04-23 17:07 - 00935468 _____ C:\WINDOWS\setupapi.log 2013-09-06 03:54 - 2012-11-21 21:38 - 00000188 __SHC C:\Documents and Settings\LocalService.ZARZĄDZANIE NT\ntuser.ini 2013-09-06 03:53 - 2012-11-21 21:38 - 00000188 __SHC C:\Documents and Settings\NetworkService.ZARZĄDZANIE NT\ntuser.ini 2013-09-06 03:51 - 2013-09-06 03:50 - 00006994 _____ C:\UsbFix [Listing 1 ] SICIAK-EF1F1335.txt 2013-09-05 22:43 - 2013-09-05 22:43 - 00000000 ____D C:\_OTL 2013-09-05 19:55 - 2012-04-23 17:09 - 00774440 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-09-05 19:50 - 2012-11-21 22:18 - 00000188 __SHC C:\Documents and Settings\UpdatusUser\ntuser.ini 2013-09-05 19:25 - 2013-09-05 19:25 - 00000000 _____ C:\WINDOWS\setuperr.log 2013-09-05 19:25 - 2013-05-06 11:38 - 00000000 ____D C:\Program Files\QType 2013-09-05 19:25 - 2012-04-23 17:07 - 00174548 _____ C:\WINDOWS\setupact.log 2013-09-05 18:08 - 2012-04-23 16:52 - 00001100 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-448539723-838170752-839522115-1003Core.job 2013-09-05 17:55 - 2012-04-23 17:07 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2013-09-05 17:54 - 2012-11-21 23:39 - 00000917 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Pulpit\Google Chrome.lnk 2013-09-05 17:54 - 2012-11-21 21:38 - 00000919 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Menu Start\Programy\Internet Explorer.lnk 2013-09-05 17:54 - 2012-11-21 21:38 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Pulpit 2013-09-05 17:54 - 2012-11-21 21:38 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Pulpit 2013-09-04 21:21 - 2013-01-27 15:18 - 00000000 ____D C:\Program Files\NapiProjekt 2013-09-04 11:11 - 2012-11-26 14:37 - 00000000 ____D C:\Mach3 2013-09-04 11:10 - 2013-09-04 11:10 - 00017912 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT DLAMNIE3.dxf 2013-09-04 11:10 - 2012-11-21 21:38 - 00000000 ___RD C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty 2013-09-04 11:10 - 2012-11-21 21:38 - 00000000 ___RD C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty 2013-09-04 09:37 - 2013-09-04 09:37 - 00018310 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT DLA SIEBIE.dxf 2013-09-03 20:48 - 2013-09-03 20:48 - 00000000 ____D C:\Program Files\Tor 2013-09-03 20:48 - 2012-11-21 21:38 - 00000000 ____D C:\Documents and Settings\LocalService.ZARZĄDZANIE NT\Dane aplikacji 2013-09-03 17:50 - 2013-09-03 17:50 - 00016098 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT JANUSZ GASKI.dxf 2013-09-02 17:33 - 2012-11-29 20:08 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\NOWE POPRAWIONE 22.03 2013 2013-09-02 16:09 - 2013-09-02 16:09 - 00015734 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT TADEK K 00999.dxf 2013-08-31 15:54 - 2013-08-23 10:44 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Dane aplikacji\WinZipper 2013-08-30 16:33 - 2013-08-30 16:33 - 00017932 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT PRZYMOZE 80.dxf 2013-08-27 22:07 - 2013-07-11 13:17 - 00000000 ____D C:\Program Files\DivX 2013-08-27 22:04 - 2013-08-26 19:37 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Dane aplikacji\HD FILMY 2013-08-23 10:44 - 2013-04-28 13:58 - 00773800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100.dll 2013-08-23 10:44 - 2013-04-28 13:58 - 00421032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp100.dll 2013-08-20 21:42 - 2012-11-21 22:17 - 01101436 _____ C:\WINDOWS\system32\nvdrsdb1.bin 2013-08-20 21:42 - 2012-11-21 22:17 - 00000001 _____ C:\WINDOWS\system32\nvdrssel.bin 2013-08-20 21:41 - 2012-11-21 22:17 - 01101436 _____ C:\WINDOWS\system32\nvdrsdb0.bin 2013-08-19 14:43 - 2013-08-19 14:43 - 00016608 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT PROBA WOJTEK 99.dxf 2013-08-19 14:15 - 2013-08-19 14:15 - 00036284 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT WOJTEK KOTALA.00.dxf 2013-08-19 13:37 - 2013-08-19 13:37 - 00016611 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT PROBA WOJTEK.dxf 2013-08-14 14:18 - 2013-08-14 14:18 - 00020873 _____ C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KLIJENT KAZIK B.dxf 2013-08-13 13:05 - 2013-08-13 13:04 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\PRZEKRÓJ PIECA 2013-08-13 12:06 - 2013-08-10 22:18 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\CENNIK NOWY 2013-08-12 17:57 - 2012-11-21 21:38 - 00000000 ___RD C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\Moje obrazy 2013-08-12 11:57 - 2013-02-08 17:51 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\OGOLNY PIECY 2013-08-12 11:35 - 2013-02-12 12:43 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\KOLANA OKRAGLE 2013-08-10 23:00 - 2013-04-26 19:33 - 00065536 _____ C:\WINDOWS\system32\config\ODiag.evt 2013-08-10 22:44 - 2013-07-04 17:42 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Moje dokumenty\Moje zeskanowane obrazy 2013-08-09 13:34 - 2013-07-11 13:49 - 00000000 ____D C:\Documents and Settings\Właściciel.SICIAK-EF1F1335\Dane aplikacji\DivX 2013-08-09 13:25 - 2012-04-23 17:00 - 00000000 ____D C:\WINDOWS\Help Files to move or delete: ==================== C:\DOCUME~1\WACICI~1.SIC\USTAWI~1\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2006-03-02 14:00] - [2006-03-02 14:00] - 1033728 ____A (Microsoft Corporation) 379098a96e6c165b659de7e4328010ea C:\Windows\System32\winlogon.exe [2006-03-02 14:00] - [2006-03-02 14:00] - 0504832 ____A (Microsoft Corporation) 0344407089b08548d4feba62bb0f32d0 C:\Windows\System32\svchost.exe [2006-03-02 14:00] - [2006-03-02 14:00] - 0014336 ____A (Microsoft Corporation) ba98327e90022dbd6ee76490e0622e2e C:\Windows\System32\services.exe [2006-03-02 14:00] - [2006-03-02 14:00] - 0108544 ____A (Microsoft Corporation) 3da8d964d2cc12ef8e8c342471a37917 C:\Windows\System32\User32.dll [2006-03-02 14:00] - [2006-03-02 14:00] - 0578560 ____A (Microsoft Corporation) 0c81764f50f32d376e6e4b9e9f4b01a0 C:\Windows\System32\userinit.exe [2012-11-21 21:18] - [2004-08-04 02:44] - 0025088 ____A (Microsoft Corporation) bd768099b4c44aa631728cb74eb54396 C:\Windows\System32\Drivers\volsnap.sys [2006-03-02 14:00] - [2006-03-02 14:00] - 0052864 ___AC (Microsoft Corporation) ecd173739b8ec10a814cc18653df5a36 ==================== End Of Log ============================