Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-09-2013 Ran by Patryk (administrator) on BARBARA on 18-09-2013 21:37:28 Running from C:\Documents and Settings\Patryk\Moje dokumenty\Pobieranie Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ABBYY) C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe ( ) C:\WINDOWS\system32\lxeacoms.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe (Cognizance Corporation) C:\Program Files\HPQ\IAM\bin\asghost.exe (Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\WINDOWS\system32\igfxtray.exe (Intel Corporation) C:\WINDOWS\system32\hkcmd.exe (Intel Corporation) C:\WINDOWS\system32\igfxpers.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe () C:\WINDOWS\SMINST\Scheduler.exe (Hewlett-Packard) C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe () C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe () C:\Program Files\Lexmark S300-S400 Series\ezprint.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE () C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe (TeamViewer GmbH) c:\program files\teamviewer\version8\TeamViewer_Desktop.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SoundMAXPnP] - C:\Program Files\Analog Devices\Core\smax4pnp.exe [925696 2005-05-20] (Analog Devices, Inc.) HKLM\...\Run: [SoundMAX] - C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [716800 2005-05-06] (Analog Devices, Inc.) HKLM\...\Run: [PTHOSTTR] - C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE [122880 2006-02-14] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [761945 2005-11-10] (Synaptics, Inc.) HKLM\...\Run: [igfxhkcmd] - C:\WINDOWS\system32\hkcmd.exe [ ] () HKLM\...\Run: [igfxpers] - C:\WINDOWS\system32\igfxpers.exe [118784 2006-03-23] (Intel Corporation) HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe [454656 2006-02-14] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [CognizanceTS] - rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule HKLM\...\Run: [QlbCtrl] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [131072 2006-03-02] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [Cpqset] - C:\Program Files\HPQ\Default Settings\cpqset.exe [40960 2006-02-22] () HKLM\...\Run: [Scheduler] - C:\WINDOWS\SMINST\Scheduler.exe [892928 2006-02-15] () HKLM\...\Run: [FaxCenterServer] - "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM\...\Run: [lxeamon.exe] - C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe [770728 2010-01-18] () HKLM\...\Run: [EzPrint] - C:\Program Files\Lexmark S300-S400 Series\ezprint.exe [139944 2010-01-18] () HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software) HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software) Winlogon\Notify\OneCard: C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll (Cognizance Corporation) HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG) HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe HKU\Administrator\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) HKU\Administrator\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe [ 2007-06-27] (Nero AG) HKU\Default User\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe [ 2007-06-27] (Nero AG) Lsa: [Notification Packages] scecli AsWlnPkg Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\Documents and Settings\Patryk\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie BHO: Lexmark Pasek narzêdzi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL (Sonic Solutions) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Lexmark - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll () BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll (Infineon Technologies AG) Toolbar: HKLM - Lexmark Pasek narzêdzi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU -&Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU -&Lacza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1224799505531 DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\Patryk\Dane aplikacji\Mozilla\Firefox\Profiles\bdg7bxol.default FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF ========================== Services (Whitelisted) ================= R2 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY) R2 ASChannel; C:\Program Files\HPQ\IAM\Bin\ASChnl.dll [117248 2005-06-01] (Cognizance Corporation) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software) S2 lxeaCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxeaserv.exe [98984 2010-01-07] (Lexmark International, Inc.) R2 lxea_device; C:\WINDOWS\system32\lxeacoms.exe [598696 2010-01-07] ( ) S2 PCA; C:\WINDOWS\SMINST\PCAngel.exe [294912 2006-01-12] (SoftThinks) S3 WmcCds; c:\program files\windows media connect\mswmccds.exe [483328 2004-08-11] (Microsoft Corporation) S3 WmcCdsLs; C:\Program Files\Windows Media Connect\mswmcls.exe [28160 2004-08-10] (Microsoft Corporation) S2 aswUpdSv; "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe" [x] ==================== Drivers (Whitelisted) ==================== R3 AEAudioService; C:\Windows\System32\drivers\AEAudio.sys [152960 2005-06-07] (Andrea Electronics Corporation) R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software) R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-08-30] (AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [49376 2013-08-30] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [177864 2013-08-30] () S3 btaudio; C:\Windows\System32\drivers\btaudio.sys [401664 2006-02-15] (Broadcom Corporation.) S3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [30363 2006-02-15] (Broadcom Corporation.) R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [1342570 2006-02-15] (Broadcom Corporation.) S3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [148168 2006-02-15] (Broadcom Corporation.) S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [57096 2006-02-15] (Broadcom Corporation.) R2 DLABOIOM; C:\Windows\System32\DLA\DLABOIOM.SYS [25628 2005-08-31] (Sonic Solutions) R1 DLACDBHM; C:\Windows\System32\Drivers\DLACDBHM.SYS [5628 2005-08-25] (Sonic Solutions) R2 DLADResN; C:\Windows\System32\DLA\DLADResN.SYS [2496 2005-08-31] (Sonic Solutions) R2 DLAIFS_M; C:\Windows\System32\DLA\DLAIFS_M.SYS [86524 2005-08-31] (Sonic Solutions) R2 DLAOPIOM; C:\Windows\System32\DLA\DLAOPIOM.SYS [14684 2005-08-31] (Sonic Solutions) R2 DLAPoolM; C:\Windows\System32\DLA\DLAPoolM.SYS [6364 2005-08-31] (Sonic Solutions) R1 DLARTL_N; C:\Windows\System32\Drivers\DLARTL_N.SYS [22684 2005-08-25] (Sonic Solutions) R2 DLAUDFAM; C:\Windows\System32\DLA\DLAUDFAM.SYS [94332 2005-08-31] (Sonic Solutions) R2 DLAUDF_M; C:\Windows\System32\DLA\DLAUDF_M.SYS [87036 2005-08-31] (Sonic Solutions) R2 DRVNDDM; C:\Windows\System32\Drivers\DRVNDDM.SYS [40544 2005-08-12] (Sonic Solutions) R1 eabfiltr; C:\Windows\System32\DRIVERS\eabfiltr.sys [7808 2005-09-19] (Hewlett-Packard Development Company, L.P.) S3 eabusb; C:\Windows\System32\DRIVERS\eabusb.sys [5760 2005-09-19] (Hewlett-Packard Development Company, L.P.) R3 ialm; C:\Windows\System32\DRIVERS\ialmnt5.sys [1166972 2006-03-23] (Intel Corporation) S3 Rasirda; C:\Windows\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation) S3 SMCIRDA; C:\Windows\System32\DRIVERS\smcirda.sys [36425 2001-10-26] (SMC) S3 w39n51; C:\Windows\System32\DRIVERS\w39n51.sys [1428096 2006-01-19] (Intel® Corporation) U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U5 Sdbus; C:\Windows\System32\Drivers\Sdbus.sys [79232 2008-04-13] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-18 21:33 - 2013-09-18 21:33 - 00000132 _____ C:\WINDOWS\system32\lsass.log 2013-09-18 21:28 - 2013-09-18 21:27 - 00869456 _____ C:\Documents and Settings\Patryk\Pulpit\Norton_Removal_Tool.exe 2013-09-18 21:25 - 2013-09-18 21:25 - 00052514 _____ C:\Documents and Settings\Patryk\Pulpit\Extras.Txt 2013-09-18 21:23 - 2013-09-18 21:23 - 00055786 _____ C:\Documents and Settings\Patryk\Pulpit\Addition-Patryk.txt 2013-09-18 21:06 - 2013-09-18 21:06 - 00000000 __SHD C:\Documents and Settings\Patryk\PrivacIE 2013-09-18 21:00 - 2013-09-18 21:05 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-17 16:47 - 2013-09-18 21:37 - 00000000 ____D C:\Documents and Settings\Patryk\Moje dokumenty\Pobieranie 2013-09-17 16:24 - 2013-09-18 21:16 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-09-17 16:24 - 2013-09-17 16:24 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-09-17 16:24 - 2013-09-17 16:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-09-17 15:59 - 2013-09-17 15:59 - 00001689 _____ C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk 2013-09-17 15:59 - 2013-09-17 15:59 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus 2013-09-17 15:59 - 2013-08-30 09:48 - 00770344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2013-09-17 15:59 - 2013-08-30 09:48 - 00369584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2013-09-17 15:59 - 2013-08-30 09:48 - 00066336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2013-09-17 15:59 - 2013-08-30 09:48 - 00056080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys 2013-09-17 15:59 - 2013-08-30 09:48 - 00049760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys 2013-09-17 15:59 - 2013-08-30 09:48 - 00029816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys 2013-09-17 15:59 - 2013-08-30 09:47 - 00229648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2013-09-17 14:52 - 2013-09-17 14:52 - 00000815 _____ C:\Documents and Settings\All Users\Pulpit\TeamViewer 8.lnk 2013-09-17 14:52 - 2013-09-17 14:52 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\TeamViewer 8 2013-09-17 14:51 - 2013-09-17 14:51 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-17 13:55 - 2013-09-17 13:57 - 00000000 ____D C:\AdwCleaner 2013-09-17 13:30 - 2013-09-18 21:33 - 00000380 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job 2013-09-17 11:21 - 2013-09-17 11:21 - 00000000 ____D C:\Program Files\VS Revo Group 2013-09-16 23:13 - 2013-09-18 21:19 - 00000000 ____D C:\FRST 2013-09-16 21:51 - 2013-09-16 21:51 - 00000000 ____D C:\Documents and Settings\Patryk\Dane aplikacji\AVAST Software 2013-09-16 21:51 - 2013-09-16 21:51 - 00000000 _____ C:\Documents and Settings\Patryk\debug.log 2013-09-16 15:32 - 2013-09-16 15:32 - 00001799 _____ C:\Documents and Settings\All Users\Pulpit\avast! SafeZone.lnk 2013-09-16 15:11 - 2013-09-16 15:32 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Avast 2013-09-16 15:10 - 2013-08-30 09:48 - 00177864 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys 2013-09-16 15:10 - 2013-08-30 09:48 - 00049376 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys 2013-09-16 15:10 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2013-09-16 15:09 - 2013-09-17 15:58 - 00000000 ____D C:\Program Files\AVAST Software 2013-09-16 15:09 - 2013-09-17 15:58 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software 2013-09-16 14:22 - 2013-09-18 21:37 - 00000480 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{50E30FE6-5893-442E-A306-98052F6165CA}.job 2013-09-13 03:16 - 2013-09-13 03:16 - 00012507 _____ C:\WINDOWS\KB2870699-IE8.log 2013-09-13 03:14 - 2013-09-13 03:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$ 2013-09-13 03:14 - 2013-09-13 03:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$ 2013-09-13 03:13 - 2013-09-13 03:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$ 2013-09-13 00:03 - 2013-09-13 03:14 - 00010485 _____ C:\WINDOWS\KB2876315.log 2013-09-13 00:03 - 2013-09-13 03:14 - 00009558 _____ C:\WINDOWS\KB2876217.log 2013-09-13 00:03 - 2013-09-13 03:14 - 00009428 _____ C:\WINDOWS\KB2864063.log 2013-08-28 02:19 - 2013-08-28 02:19 - 00005025 _____ C:\WINDOWS\KB2834902-v2.log 2013-08-28 02:19 - 2013-08-28 02:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834902-v2_WM10$ 2013-08-23 04:45 - 2013-08-23 04:46 - 00012065 _____ C:\WINDOWS\KB2862772-IE8.log 2013-08-23 04:41 - 2013-09-13 03:06 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-08-23 04:37 - 2013-08-23 04:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$ 2013-08-23 04:37 - 2013-08-23 04:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$ 2013-08-23 04:36 - 2013-08-23 04:37 - 00005260 _____ C:\WINDOWS\KB2863058.log 2013-08-23 04:36 - 2013-08-23 04:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$ 2013-08-23 04:36 - 2013-08-23 04:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$ 2013-08-23 04:24 - 2013-08-23 04:37 - 00010890 _____ C:\WINDOWS\KB2859537.log 2013-08-23 04:24 - 2013-08-23 04:37 - 00009230 _____ C:\WINDOWS\KB2850869.log ==================== One Month Modified Files and Folders ======= 2013-09-18 21:37 - 2013-09-17 16:47 - 00000000 ____D C:\Documents and Settings\Patryk\Moje dokumenty\Pobieranie 2013-09-18 21:37 - 2013-09-16 14:22 - 00000480 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{50E30FE6-5893-442E-A306-98052F6165CA}.job 2013-09-18 21:37 - 2007-09-18 21:02 - 00000000 ___RD C:\Documents and Settings\Patryk\Moje dokumenty 2013-09-18 21:35 - 2004-09-20 10:31 - 01972557 _____ C:\WINDOWS\WindowsUpdate.log 2013-09-18 21:33 - 2013-09-18 21:33 - 00000132 _____ C:\WINDOWS\system32\lsass.log 2013-09-18 21:33 - 2013-09-17 13:30 - 00000380 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job 2013-09-18 21:33 - 2012-05-07 21:07 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-18 21:33 - 2010-11-02 20:36 - 00136215 _____ C:\Documents and Settings\All Users\lxeascan.log 2013-09-18 21:33 - 2007-09-19 05:44 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2013-09-18 21:33 - 2007-09-19 05:44 - 00000000 ____D C:\WINDOWS\SMINST 2013-09-18 21:33 - 2004-09-20 12:12 - 00000159 _____ C:\WINDOWS\wiadebug.log 2013-09-18 21:33 - 2004-09-20 12:12 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-09-18 21:33 - 2004-09-20 10:31 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-09-18 21:32 - 2007-09-18 21:02 - 00000188 ___SH C:\Documents and Settings\Patryk\ntuser.ini 2013-09-18 21:32 - 2007-09-18 21:02 - 00000000 ____D C:\Documents and Settings\Patryk 2013-09-18 21:32 - 2006-08-20 20:07 - 00524288 _____ C:\WINDOWS\system32\config\Credenti.evt 2013-09-18 21:32 - 2004-09-20 10:31 - 00032566 _____ C:\WINDOWS\SchedLgU.Txt 2013-09-18 21:28 - 2007-09-18 21:02 - 00000000 ____D C:\Documents and Settings\Patryk\Pulpit 2013-09-18 21:27 - 2013-09-18 21:28 - 00869456 _____ C:\Documents and Settings\Patryk\Pulpit\Norton_Removal_Tool.exe 2013-09-18 21:25 - 2013-09-18 21:25 - 00052514 _____ C:\Documents and Settings\Patryk\Pulpit\Extras.Txt 2013-09-18 21:23 - 2013-09-18 21:23 - 00055786 _____ C:\Documents and Settings\Patryk\Pulpit\Addition-Patryk.txt 2013-09-18 21:19 - 2013-09-16 23:13 - 00000000 ____D C:\FRST 2013-09-18 21:19 - 2007-09-18 21:02 - 00000000 __RHD C:\Documents and Settings\Patryk\Dane aplikacji 2013-09-18 21:16 - 2013-09-17 16:24 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-09-18 21:06 - 2013-09-18 21:06 - 00000000 __SHD C:\Documents and Settings\Patryk\PrivacIE 2013-09-18 21:05 - 2013-09-18 21:00 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-18 20:55 - 2004-09-20 10:31 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl 2013-09-17 16:24 - 2013-09-17 16:24 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-09-17 16:24 - 2013-09-17 16:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-09-17 15:59 - 2013-09-17 15:59 - 00001689 _____ C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk 2013-09-17 15:59 - 2013-09-17 15:59 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus 2013-09-17 15:59 - 2007-09-19 05:44 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2013-09-17 15:59 - 2007-09-19 05:44 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-09-17 15:59 - 2007-09-19 05:44 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-09-17 15:59 - 2004-09-20 10:18 - 00002596 _____ C:\WINDOWS\system32\CONFIG.NT 2013-09-17 15:58 - 2013-09-16 15:09 - 00000000 ____D C:\Program Files\AVAST Software 2013-09-17 15:58 - 2013-09-16 15:09 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software 2013-09-17 14:55 - 2004-09-20 10:22 - 00297256 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-09-17 14:54 - 2007-09-19 17:35 - 00000000 ____D C:\Documents and Settings\Barbara Postek 2013-09-17 14:52 - 2013-09-17 14:52 - 00000815 _____ C:\Documents and Settings\All Users\Pulpit\TeamViewer 8.lnk 2013-09-17 14:52 - 2013-09-17 14:52 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\TeamViewer 8 2013-09-17 14:51 - 2013-09-17 14:51 - 00000000 ____D C:\Program Files\TeamViewer 2013-09-17 13:57 - 2013-09-17 13:55 - 00000000 ____D C:\AdwCleaner 2013-09-17 13:50 - 2007-09-18 21:02 - 00000000 ___RD C:\Documents and Settings\Patryk\Menu Start\Programy\Autostart 2013-09-17 13:08 - 2007-11-14 18:10 - 00074954 _____ C:\WINDOWS\setupapi.log 2013-09-17 11:58 - 2004-09-21 03:31 - 00000215 __RSH C:\boot.ini 2013-09-17 11:21 - 2013-09-17 11:21 - 00000000 ____D C:\Program Files\VS Revo Group 2013-09-16 23:10 - 2011-10-27 12:57 - 00001017 _____ C:\WINDOWS\wincmd.ini 2013-09-16 21:54 - 2007-10-15 22:12 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help 2013-09-16 21:51 - 2013-09-16 21:51 - 00000000 ____D C:\Documents and Settings\Patryk\Dane aplikacji\AVAST Software 2013-09-16 21:51 - 2013-09-16 21:51 - 00000000 _____ C:\Documents and Settings\Patryk\debug.log 2013-09-16 21:35 - 2007-10-21 22:53 - 00000000 ____D C:\Program Files\Winamp 2013-09-16 15:32 - 2013-09-16 15:32 - 00001799 _____ C:\Documents and Settings\All Users\Pulpit\avast! SafeZone.lnk 2013-09-16 15:32 - 2013-09-16 15:11 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Avast 2013-09-16 14:42 - 2007-11-23 01:42 - 01245184 _____ C:\WINDOWS\system32\config\Antivirus.Evt 2013-09-16 14:33 - 2011-06-22 09:12 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-16 14:33 - 2007-09-19 05:44 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Adobe 2013-09-16 14:32 - 2007-11-21 20:13 - 00000000 ____D C:\Program Files\Ashampoo 2013-09-16 14:17 - 2012-03-31 16:03 - 00000759 _____ C:\Documents and Settings\All Users\Pulpit\Picasa 3.lnk 2013-09-16 14:12 - 2007-09-19 05:44 - 00000000 ____D C:\Program Files\Adobe 2013-09-16 13:23 - 2007-09-19 05:44 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy\Autostart 2013-09-13 03:16 - 2013-09-13 03:16 - 00012507 _____ C:\WINDOWS\KB2870699-IE8.log 2013-09-13 03:16 - 2009-05-29 22:17 - 00000000 ____D C:\WINDOWS\ie8updates 2013-09-13 03:16 - 2006-08-20 19:46 - 00404594 _____ C:\WINDOWS\updspapi.log 2013-09-13 03:16 - 2004-09-20 10:30 - 01102674 _____ C:\WINDOWS\tsoc.log 2013-09-13 03:16 - 2004-09-20 10:30 - 00453861 _____ C:\WINDOWS\iis6.log 2013-09-13 03:16 - 2004-09-20 10:21 - 00936690 _____ C:\WINDOWS\comsetup.log 2013-09-13 03:16 - 2004-09-20 10:21 - 00567642 _____ C:\WINDOWS\ntdtcsetup.log 2013-09-13 03:16 - 2004-09-20 10:21 - 00174517 _____ C:\WINDOWS\ocmsn.log 2013-09-13 03:16 - 2004-09-20 10:21 - 00001374 _____ C:\WINDOWS\imsins.log 2013-09-13 03:16 - 2004-09-20 10:15 - 02860521 _____ C:\WINDOWS\FaxSetup.log 2013-09-13 03:16 - 2004-09-20 10:15 - 01379449 _____ C:\WINDOWS\ocgen.log 2013-09-13 03:16 - 2004-09-20 10:15 - 00143423 _____ C:\WINDOWS\msgsocm.log 2013-09-13 03:14 - 2013-09-13 03:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$ 2013-09-13 03:14 - 2013-09-13 03:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$ 2013-09-13 03:14 - 2013-09-13 03:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$ 2013-09-13 03:14 - 2013-09-13 00:03 - 00010485 _____ C:\WINDOWS\KB2876315.log 2013-09-13 03:14 - 2013-09-13 00:03 - 00009558 _____ C:\WINDOWS\KB2876217.log 2013-09-13 03:14 - 2013-09-13 00:03 - 00009428 _____ C:\WINDOWS\KB2864063.log 2013-09-13 03:14 - 2004-09-20 10:21 - 00001374 _____ C:\WINDOWS\imsins.BAK 2013-09-13 03:06 - 2013-08-23 04:41 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-09-13 03:01 - 2007-09-20 18:59 - 76725432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-09-13 00:13 - 2013-05-28 01:12 - 09430408 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-08-30 09:48 - 2013-09-17 15:59 - 00770344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2013-08-30 09:48 - 2013-09-17 15:59 - 00369584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2013-08-30 09:48 - 2013-09-17 15:59 - 00066336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2013-08-30 09:48 - 2013-09-17 15:59 - 00056080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys 2013-08-30 09:48 - 2013-09-17 15:59 - 00049760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys 2013-08-30 09:48 - 2013-09-17 15:59 - 00029816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys 2013-08-30 09:48 - 2013-09-16 15:10 - 00177864 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys 2013-08-30 09:48 - 2013-09-16 15:10 - 00049376 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys 2013-08-30 09:47 - 2013-09-17 15:59 - 00229648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2013-08-30 09:47 - 2013-09-16 15:10 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2013-08-28 02:19 - 2013-08-28 02:19 - 00005025 _____ C:\WINDOWS\KB2834902-v2.log 2013-08-28 02:19 - 2013-08-28 02:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834902-v2_WM10$ 2013-08-23 04:46 - 2013-08-23 04:45 - 00012065 _____ C:\WINDOWS\KB2862772-IE8.log 2013-08-23 04:40 - 2007-09-19 05:44 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-08-23 04:37 - 2013-08-23 04:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$ 2013-08-23 04:37 - 2013-08-23 04:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$ 2013-08-23 04:37 - 2013-08-23 04:36 - 00005260 _____ C:\WINDOWS\KB2863058.log 2013-08-23 04:37 - 2013-08-23 04:24 - 00010890 _____ C:\WINDOWS\KB2859537.log 2013-08-23 04:37 - 2013-08-23 04:24 - 00009230 _____ C:\WINDOWS\KB2850869.log 2013-08-23 04:37 - 2007-09-20 18:56 - 00768634 _____ C:\WINDOWS\system32\TZLog.log 2013-08-23 04:36 - 2013-08-23 04:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$ 2013-08-23 04:36 - 2013-08-23 04:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$ 2013-08-23 04:35 - 2004-09-20 10:26 - 01081126 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-08-23 04:35 - 2004-09-20 10:26 - 00504036 _____ C:\WINDOWS\system32\perfh015.dat 2013-08-23 04:35 - 2004-09-20 10:26 - 00090630 _____ C:\WINDOWS\system32\perfc015.dat ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2004-08-04 10:00] - [2008-04-14 19:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\Windows\System32\winlogon.exe [2004-08-04 10:00] - [2008-04-14 19:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\Windows\System32\svchost.exe [2004-08-04 10:00] - [2008-04-14 19:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2004-08-04 10:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\Windows\System32\User32.dll [2004-08-04 10:00] - [2008-04-14 19:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\Windows\System32\userinit.exe [2004-08-04 10:00] - [2008-04-14 19:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2004-08-04 10:00] - [2008-04-14 18:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================