Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-09-2013 01 Ran by xp (administrator) on XP on 01-10-2013 20:37:42 Running from C:\Documents and Settings\xp\Moje dokumenty\Pobieranie Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 6 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (VIA Technologies, Inc.) C:\Program Files\VIAudioi\SBADeck\ADeck.exe (UASSOFT.COM) C:\Program Files\Mouse Driver\StartAutorun.exe (UASSOFT.COM) C:\Program Files\Mouse Driver\KMConfig.exe (Microsoft Corporation) C:\WINDOWS\system32\OSK.exe (Microsoft Corporation) C:\WINDOWS\system32\MSSWCHX.EXE (UASSOFT.COM) C:\Program Files\Mouse Driver\KMProcess.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (UASSOFT.COM) C:\Program Files\Mouse Driver\KMWDSrv.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AudioDeck] - C:\Program Files\VIAudioi\SBADeck\ADeck.exe [450560 2005-09-06] (VIA Technologies, Inc.) HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [nwiz] - nwiz.exe /install HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit HKLM\...\Run: [KMCONFIG] - C:\Program Files\Mouse Driver\StartAutorun.exe [212992 2007-03-06] (UASSOFT.COM) Winlogon\Notify\Antiwpa: C:\Windows\system32\antiwpa.dll () HKCU\...\Run: [DU Meter] - "C:\Program Files\DU Meter\DUMeter.exe" /autostart HKCU\...\Policies\Explorer: [ForceClassicControlPanel] 1 HKCU\...\Policies\Explorer: [NoSMConfigurePrograms] 1 HKCU\...\Policies\Explorer: [NoSMHelp] 1 HKU\Administrator\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe [ 2007-03-12] (Nero AG) HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe [ 2007-03-12] (Nero AG) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU -&Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU -&Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\70m9f0in.default FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: DownloadHelper - C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\70m9f0in.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: artur.dubovoy - C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\70m9f0in.default\Extensions\artur.dubovoy@gmail.com.xpi FF Extension: jid1-MVBjD3PCN9WVIQ - C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\70m9f0in.default\Extensions\jid1-MVBjD3PCN9WVIQ@jetpack.xpi FF Extension: webmail-notifier - C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\70m9f0in.default\Extensions\webmail-notifier@poczta.interia.pl.xpi FF Extension: No Name - C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\70m9f0in.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\70m9f0in.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi FF Extension: No Name - C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\70m9f0in.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird ========================== Services (Whitelisted) ================= R2 KMWDSERVICE; C:\Program Files\Mouse Driver\KMWDSrv.exe [208896 2007-04-05] (UASSOFT.COM) R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== R1 AmdK8; C:\Windows\System32\DRIVERS\AmdK8.sys [43008 2005-03-09] (Advanced Micro Devices) R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc. ) R3 KMWDFilter; C:\WINDOWS\System32\Drivers\KMWDFilter.SYS [17024 2007-03-29] (Windows (R) Codename Longhorn DDK provider) S3 rtl8185; C:\Windows\System32\DRIVERS\rtl8185.sys [823936 2009-10-27] (Realtek Semiconductor Corporation ) R0 viamraid; C:\Windows\System32\DRIVERS\viamraid.sys [102912 2006-11-08] (VIA Technologies inc,.ltd) R3 VIAudio; C:\Windows\System32\drivers\vinyl97.sys [202112 2005-08-03] (VIA Technologies, Inc.) R0 videX32; C:\Windows\System32\DRIVERS\videX32.sys [9216 2006-10-17] (VIA Technologies, Inc.) S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation) S3 catchme; \??\C:\DOCUME~1\xp\USTAWI~1\Temp\catchme.sys [x] S3 DUMeterDrv; \??\C:\Program Files\DU Meter\DUM_XP32.SYS [x] S4 IntelIde; No ImagePath U5 Messenger; C:\Windows\system32\svchost.exe [14336 2008-04-15] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-01 20:37 - 2013-10-01 20:37 - 00000000 ____D C:\FRST 2013-09-30 21:37 - 2013-10-01 20:29 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-29 23:31 - 2013-09-29 23:31 - 00000000 ____D C:\WINDOWS\system32\PreInstall 2013-09-29 23:30 - 2013-09-29 23:31 - 00006959 _____ C:\WINDOWS\KB898461.log 2013-09-29 23:30 - 2013-09-29 23:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB898461$ 2013-09-29 23:30 - 2013-09-29 23:30 - 00000000 ___HD C:\WINDOWS\$hf_mig$ 2013-09-29 15:30 - 2013-09-29 15:30 - 00000000 ____D C:\WINDOWS\pss 2013-09-29 15:26 - 2013-09-29 15:27 - 00000000 ____D C:\Documents and Settings\xp\Dane aplikacji\EurekaLog 2013-09-29 15:17 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe 2013-09-29 15:17 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe 2013-09-29 15:17 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe 2013-09-29 15:17 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe 2013-09-29 15:17 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe 2013-09-29 15:17 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe 2013-09-29 15:17 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe 2013-09-29 15:17 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe 2013-09-29 15:17 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe 2013-09-29 15:16 - 2013-09-29 15:17 - 00000000 ____D C:\Qoobox 2013-09-29 15:16 - 2013-09-29 15:16 - 00000000 ___RD C:\Documents and Settings\xp\Menu Start\Programy\Narzędzia administracyjne 2013-09-29 15:16 - 2013-09-29 15:16 - 00000000 ____D C:\WINDOWS\erdnt 2013-09-28 20:09 - 2013-09-28 20:09 - 00000000 ____D C:\Program Files\NAPI-PROJEKT 2013-09-28 20:09 - 2013-09-28 20:09 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\NapiProjekt 2013-09-28 20:05 - 2013-09-28 20:05 - 00000047 _____ C:\WINDOWS\NeroDigital.ini 2013-09-28 19:32 - 2013-09-28 19:32 - 00000000 ____D C:\Documents and Settings\xp\Moje dokumenty\ChomikBox 2013-09-28 19:31 - 2013-09-29 09:23 - 00000000 ____D C:\Documents and Settings\xp\.gstreamer-0.10 2013-09-22 12:37 - 2013-09-22 12:39 - 00000000 ____D C:\Program Files\AcGasSynchro 2013-09-22 12:37 - 2013-09-22 12:37 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\AcGasSynchro 2013-09-22 12:37 - 2003-01-14 07:45 - 00122368 _____ () C:\WINDOWS\system32\UNZDLL.dll 2013-09-22 12:37 - 2003-01-14 07:37 - 00138752 _____ () C:\WINDOWS\system32\ZipDLL.dll 2013-09-22 12:37 - 2002-10-23 17:15 - 00036864 _____ C:\WINDOWS\system32\dzsfxnl.bin 2013-09-22 12:37 - 2002-10-23 17:15 - 00036352 _____ C:\WINDOWS\system32\dzsfxus.bin 2013-09-22 12:37 - 2002-10-23 17:15 - 00036352 _____ C:\WINDOWS\system32\dzsfxit.bin 2013-09-22 12:37 - 2002-10-23 17:15 - 00036352 _____ C:\WINDOWS\system32\dzsfxes.bin 2013-09-22 12:37 - 2002-10-23 17:15 - 00036352 _____ C:\WINDOWS\system32\dzsfxde.bin 2013-09-22 12:37 - 2002-10-23 17:15 - 00036352 _____ C:\WINDOWS\system32\dzsfxcat.bin 2013-09-22 12:37 - 2002-08-09 17:00 - 04082688 _____ (Borland Software Corporation) C:\WINDOWS\system32\qtintf70.dll 2013-09-22 12:37 - 2000-10-31 18:00 - 00040448 _____ C:\WINDOWS\system32\ZipSFX.bin.old 2013-09-22 12:10 - 2013-09-22 12:12 - 00002347 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader 9.lnk 2013-09-22 12:09 - 2013-09-22 12:09 - 00000000 ____D C:\Program Files\Adobe 2013-09-15 11:44 - 2013-09-29 09:27 - 00000000 ____D C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\ChomikBox 2013-09-15 11:44 - 2013-09-15 11:44 - 00000461 _____ C:\Documents and Settings\All Users\Pulpit\ChomikBox.lnk 2013-09-15 11:44 - 2013-09-15 11:44 - 00000000 ____D C:\Program Files\ChomikBox 2013-09-15 11:44 - 2013-09-15 11:44 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Chomikuj.pl 2013-09-15 10:39 - 2013-09-15 10:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallXPSEPSCLP$ 2013-09-15 10:38 - 2013-09-15 10:38 - 00064200 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat 2013-09-15 10:37 - 2013-09-15 10:39 - 00000000 ____D C:\WINDOWS\system32\XPSViewer 2013-09-15 10:37 - 2013-09-15 10:37 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-09-15 10:37 - 2013-09-15 10:37 - 00000000 ____D C:\Program Files\MSBuild 2013-09-15 10:37 - 2006-06-29 13:07 - 00014048 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg2.dll 2013-09-13 22:28 - 2013-09-15 11:01 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-09-13 22:28 - 2013-09-13 22:28 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-09-13 21:52 - 2008-04-14 00:26 - 00030592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rndismpx.sys 2013-09-13 21:52 - 2008-04-14 00:26 - 00030592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismpx.sys 2013-09-13 21:52 - 2008-04-14 00:26 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys 2013-09-13 21:52 - 2008-04-14 00:26 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023x.sys 2013-09-13 21:51 - 2013-09-13 21:51 - 00002528 _____ C:\Documents and Settings\xp\Dane aplikacji\$_hpcst$.hpc 2013-09-13 21:51 - 2013-09-13 21:51 - 00001808 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft ActiveSync.lnk 2013-09-13 21:51 - 2013-09-13 21:51 - 00000000 ____D C:\Program Files\Microsoft ActiveSync 2013-09-07 19:49 - 2013-09-07 19:49 - 00000000 ___RD C:\Documents and Settings\xp\Moje dokumenty\Moje wideo 2013-09-07 19:49 - 2013-09-07 19:49 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty\Moje wideo 2013-09-03 23:42 - 2013-09-03 23:42 - 00007230 _____ C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\recently-used.xbel 2013-09-03 23:25 - 2013-09-03 23:42 - 00000000 ____D C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\gtk-2.0 2013-09-03 23:22 - 2013-09-03 23:43 - 00000000 ____D C:\Documents and Settings\xp\.gimp-2.8 2013-09-03 23:22 - 2013-09-03 23:22 - 00000000 ____D C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\gegl-0.2 2013-09-03 23:22 - 2013-09-03 23:22 - 00000000 ____D C:\Documents and Settings\xp\.thumbnails 2013-09-03 23:16 - 2013-09-03 23:16 - 00000734 _____ C:\Documents and Settings\All Users\Menu Start\Programy\GIMP 2.lnk 2013-09-03 22:47 - 2013-09-03 22:47 - 00000000 ____D C:\WINDOWS\Sun 2013-09-03 22:21 - 2013-09-03 22:21 - 00002385 _____ C:\Documents and Settings\All Users\Pulpit\Nero StartSmart.lnk 2013-09-03 22:21 - 2013-09-03 22:21 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Nero 7 Ultra Edition 2013-09-03 22:17 - 2013-09-03 22:17 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Nero 2013-09-03 22:16 - 2013-09-03 23:16 - 00000000 ____D C:\Program Files\GIMP 2 2013-09-03 21:52 - 2013-09-28 20:07 - 00006144 _____ C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-09-03 21:22 - 2013-09-03 22:59 - 00000000 ____D C:\Documents and Settings\xp\Pulpit\Nowy folder (2) 2013-09-03 21:21 - 2008-04-14 00:15 - 00026368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbstor.sys 2013-09-03 21:21 - 2008-04-14 00:15 - 00026368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2013-09-01 12:44 - 2013-09-01 12:47 - 00000000 ____D C:\Documents and Settings\xp\dwhelper ==================== One Month Modified Files and Folders ======= 2013-10-01 20:37 - 2013-10-01 20:37 - 00000000 ____D C:\FRST 2013-10-01 20:36 - 2013-08-24 20:50 - 00000000 ____D C:\Documents and Settings\xp\Moje dokumenty\Pobieranie 2013-10-01 20:34 - 2013-08-24 20:37 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy\DU Meter 2013-10-01 20:34 - 2013-08-24 20:37 - 00000000 ____D C:\Program Files\DU Meter 2013-10-01 20:29 - 2013-09-30 21:37 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-10-01 20:29 - 2013-08-24 20:49 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-10-01 20:29 - 2013-08-24 20:27 - 00032520 _____ C:\WINDOWS\SchedLgU.Txt 2013-10-01 20:29 - 2013-08-24 20:27 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-01 20:29 - 2013-08-24 20:22 - 00324494 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-01 20:20 - 2013-08-24 21:01 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-01 20:15 - 2013-08-24 20:39 - 00182038 _____ C:\WINDOWS\system32\nvapps.xml 2013-09-30 22:27 - 2013-08-24 20:28 - 00000188 ___SH C:\Documents and Settings\xp\ntuser.ini 2013-09-30 20:22 - 2008-04-15 14:00 - 00002228 _____ C:\WINDOWS\system32\wpa.dbl 2013-09-29 23:31 - 2013-09-29 23:31 - 00000000 ____D C:\WINDOWS\system32\PreInstall 2013-09-29 23:31 - 2013-09-29 23:30 - 00006959 _____ C:\WINDOWS\KB898461.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00089600 _____ C:\WINDOWS\iis6.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00048667 _____ C:\WINDOWS\FaxSetup.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00030645 _____ C:\WINDOWS\ocgen.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00028278 _____ C:\WINDOWS\comsetup.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00027849 _____ C:\WINDOWS\tsoc.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00022152 _____ C:\WINDOWS\msmqinst.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00015452 _____ C:\WINDOWS\ntdtcsetup.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00008659 _____ C:\WINDOWS\netfxocm.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00003201 _____ C:\WINDOWS\ocmsn.log 2013-09-29 23:31 - 2013-08-24 22:15 - 00001374 _____ C:\WINDOWS\imsins.log 2013-09-29 23:30 - 2013-09-29 23:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB898461$ 2013-09-29 23:30 - 2013-09-29 23:30 - 00000000 ___HD C:\WINDOWS\$hf_mig$ 2013-09-29 15:33 - 2013-08-24 20:28 - 00000000 ____D C:\Documents and Settings\xp\Pulpit 2013-09-29 15:31 - 2008-04-15 14:00 - 00000507 _____ C:\WINDOWS\win.ini 2013-09-29 15:31 - 2008-04-15 14:00 - 00000227 _____ C:\WINDOWS\system.ini 2013-09-29 15:30 - 2013-09-29 15:30 - 00000000 ____D C:\WINDOWS\pss 2013-09-29 15:28 - 2013-08-24 20:28 - 00000000 __RHD C:\Documents and Settings\xp\Dane aplikacji 2013-09-29 15:27 - 2013-09-29 15:26 - 00000000 ____D C:\Documents and Settings\xp\Dane aplikacji\EurekaLog 2013-09-29 15:27 - 2013-08-24 20:28 - 00000000 ___RD C:\Documents and Settings\xp\Moje dokumenty 2013-09-29 15:25 - 2013-08-24 22:15 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2013-09-29 15:25 - 2013-08-24 22:14 - 00413950 _____ C:\WINDOWS\setupapi.log 2013-09-29 15:17 - 2013-09-29 15:16 - 00000000 ____D C:\Qoobox 2013-09-29 15:16 - 2013-09-29 15:16 - 00000000 ___RD C:\Documents and Settings\xp\Menu Start\Programy\Narzędzia administracyjne 2013-09-29 15:16 - 2013-09-29 15:16 - 00000000 ____D C:\WINDOWS\erdnt 2013-09-29 15:16 - 2013-08-24 20:28 - 00000000 ___RD C:\Documents and Settings\xp\Menu Start\Programy 2013-09-29 09:27 - 2013-09-15 11:44 - 00000000 ____D C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\ChomikBox 2013-09-29 09:23 - 2013-09-28 19:31 - 00000000 ____D C:\Documents and Settings\xp\.gstreamer-0.10 2013-09-28 20:09 - 2013-09-28 20:09 - 00000000 ____D C:\Program Files\NAPI-PROJEKT 2013-09-28 20:09 - 2013-09-28 20:09 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\NapiProjekt 2013-09-28 20:07 - 2013-09-03 21:52 - 00006144 _____ C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-09-28 20:05 - 2013-09-28 20:05 - 00000047 _____ C:\WINDOWS\NeroDigital.ini 2013-09-28 19:32 - 2013-09-28 19:32 - 00000000 ____D C:\Documents and Settings\xp\Moje dokumenty\ChomikBox 2013-09-28 19:31 - 2013-08-24 20:28 - 00000000 ___HD C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji 2013-09-28 19:31 - 2013-08-24 20:28 - 00000000 ____D C:\Documents and Settings\xp 2013-09-23 20:59 - 2013-08-24 22:08 - 00000000 ____D C:\WINDOWS\Help 2013-09-22 12:39 - 2013-09-22 12:37 - 00000000 ____D C:\Program Files\AcGasSynchro 2013-09-22 12:37 - 2013-09-22 12:37 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\AcGasSynchro 2013-09-22 12:37 - 2013-08-24 20:49 - 00000670 _____ C:\Documents and Settings\xp\Pulpit\AcGasSynchro 1.14.1.0.lnk 2013-09-22 12:12 - 2013-09-22 12:10 - 00002347 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader 9.lnk 2013-09-22 12:12 - 2013-08-24 22:15 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-09-22 12:10 - 2013-08-24 20:32 - 00000000 ____D C:\Program Files\Common Files\Adobe 2013-09-22 12:10 - 2013-08-24 20:32 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Adobe 2013-09-22 12:09 - 2013-09-22 12:09 - 00000000 ____D C:\Program Files\Adobe 2013-09-22 12:09 - 2013-08-24 20:40 - 00000000 ____D C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\Adobe 2013-09-15 19:46 - 2013-08-24 22:14 - 00096664 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-09-15 11:44 - 2013-09-15 11:44 - 00000461 _____ C:\Documents and Settings\All Users\Pulpit\ChomikBox.lnk 2013-09-15 11:44 - 2013-09-15 11:44 - 00000000 ____D C:\Program Files\ChomikBox 2013-09-15 11:44 - 2013-09-15 11:44 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Chomikuj.pl 2013-09-15 11:01 - 2013-09-13 22:28 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-09-15 10:42 - 2013-08-25 20:53 - 00012328 _____ C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2013-09-15 10:39 - 2013-09-15 10:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallXPSEPSCLP$ 2013-09-15 10:39 - 2013-09-15 10:37 - 00000000 ____D C:\WINDOWS\system32\XPSViewer 2013-09-15 10:39 - 2013-08-24 22:15 - 00001374 _____ C:\WINDOWS\imsins.BAK 2013-09-15 10:39 - 2013-08-24 22:08 - 00000000 ____D C:\WINDOWS\system32\pl-pl 2013-09-15 10:38 - 2013-09-15 10:38 - 00064200 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat 2013-09-15 10:38 - 2013-08-24 22:15 - 01246616 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-09-15 10:38 - 2013-08-24 22:08 - 00000000 ____D C:\WINDOWS\system32\mui 2013-09-15 10:38 - 2013-08-24 20:27 - 00000000 ___HD C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji 2013-09-15 10:38 - 2008-04-15 14:00 - 00554386 _____ C:\WINDOWS\system32\perfh015.dat 2013-09-15 10:38 - 2008-04-15 14:00 - 00104100 _____ C:\WINDOWS\system32\perfc015.dat 2013-09-15 10:37 - 2013-09-15 10:37 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-09-15 10:37 - 2013-09-15 10:37 - 00000000 ____D C:\Program Files\MSBuild 2013-09-15 10:37 - 2013-08-24 22:08 - 00000000 ____D C:\WINDOWS\system32\spool 2013-09-15 10:36 - 2013-08-24 22:08 - 00000000 ____D C:\WINDOWS\pchealth 2013-09-15 10:36 - 2013-08-24 20:21 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-09-13 22:28 - 2013-09-13 22:28 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-09-13 21:51 - 2013-09-13 21:51 - 00002528 _____ C:\Documents and Settings\xp\Dane aplikacji\$_hpcst$.hpc 2013-09-13 21:51 - 2013-09-13 21:51 - 00001808 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft ActiveSync.lnk 2013-09-13 21:51 - 2013-09-13 21:51 - 00000000 ____D C:\Program Files\Microsoft ActiveSync 2013-09-10 23:21 - 2013-08-24 21:01 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-09-10 23:21 - 2013-08-24 21:01 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-09-07 19:49 - 2013-09-07 19:49 - 00000000 ___RD C:\Documents and Settings\xp\Moje dokumenty\Moje wideo 2013-09-07 19:49 - 2013-09-07 19:49 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty\Moje wideo 2013-09-07 19:49 - 2013-08-24 22:15 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty 2013-09-07 19:49 - 2013-08-24 20:28 - 00000788 _____ C:\Documents and Settings\xp\Menu Start\Programy\Windows Media Player.lnk 2013-09-07 19:49 - 2013-08-24 20:20 - 00012018 _____ C:\WINDOWS\wmsetup.log 2013-09-03 23:48 - 2013-08-24 22:18 - 00000216 _____ C:\WINDOWS\wiadebug.log 2013-09-03 23:48 - 2013-08-24 22:18 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-09-03 23:43 - 2013-09-03 23:22 - 00000000 ____D C:\Documents and Settings\xp\.gimp-2.8 2013-09-03 23:42 - 2013-09-03 23:42 - 00007230 _____ C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\recently-used.xbel 2013-09-03 23:42 - 2013-09-03 23:25 - 00000000 ____D C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\gtk-2.0 2013-09-03 23:22 - 2013-09-03 23:22 - 00000000 ____D C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\gegl-0.2 2013-09-03 23:22 - 2013-09-03 23:22 - 00000000 ____D C:\Documents and Settings\xp\.thumbnails 2013-09-03 23:16 - 2013-09-03 23:16 - 00000734 _____ C:\Documents and Settings\All Users\Menu Start\Programy\GIMP 2.lnk 2013-09-03 23:16 - 2013-09-03 22:16 - 00000000 ____D C:\Program Files\GIMP 2 2013-09-03 22:59 - 2013-09-03 21:22 - 00000000 ____D C:\Documents and Settings\xp\Pulpit\Nowy folder (2) 2013-09-03 22:47 - 2013-09-03 22:47 - 00000000 ____D C:\WINDOWS\Sun 2013-09-03 22:21 - 2013-09-03 22:21 - 00002385 _____ C:\Documents and Settings\All Users\Pulpit\Nero StartSmart.lnk 2013-09-03 22:21 - 2013-09-03 22:21 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Nero 7 Ultra Edition 2013-09-03 22:20 - 2013-08-24 22:25 - 00000000 ____D C:\Documents and Settings\xp\Dane aplikacji\Ahead 2013-09-03 22:19 - 2013-08-24 22:21 - 00000000 ____D C:\Program Files\Common Files\Ahead 2013-09-03 22:17 - 2013-09-03 22:17 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Nero 2013-09-03 22:17 - 2013-08-24 22:14 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2013-09-01 12:47 - 2013-09-01 12:44 - 00000000 ____D C:\Documents and Settings\xp\dwhelper ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\Windows\System32\winlogon.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\Windows\System32\svchost.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 0109056 ____A (Microsoft Corporation) 3e3ae424e27c4cefe4cab368c7b570ea C:\Windows\System32\User32.dll [2008-04-15 14:00] - [2008-04-15 14:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\Windows\System32\userinit.exe [2008-04-15 14:00] - [2008-04-15 14:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2008-04-15 14:00] - [2008-04-15 14:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================