Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-10-2013 Ran by Administrator (administrator) on PC on 29-10-2013 18:00:27 Running from C:\Documents and Settings\Administrator\Moje dokumenty Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== () C:\WINDOWS\system32\Ati2evxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\WINDOWS\system32\Ati2evxx.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (ATI Technologies, Inc.) C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe (Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Ralink Technology, Corp.) C:\Program Files\RALINK\Common\RaUI.exe (Opera Software) C:\Program Files\Opera\17.0.1241.53_0\opera.exe () C:\Program Files\Opera\17.0.1241.53_0\opera_crashreporter.exe (Opera Software) C:\Program Files\Opera\17.0.1241.53_0\opera.exe (Opera Software) C:\Program Files\Opera\17.0.1241.53_0\opera.exe (Opera Software) C:\Program Files\Opera\17.0.1241.53_0\opera.exe (Opera Software) C:\Program Files\Opera\17.0.1241.53_0\opera.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ATIPTA] - C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [335872 2003-09-12] (ATI Technologies, Inc.) HKLM\...\Run: [Smapp] - C:\Program Files\Analog Devices\SoundMAX\SMTray.exe [143360 2003-05-05] (Analog Devices, Inc.) HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [KernelFaultCheck] - %systemroot%\system32\dumprep 0 -k Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll () HKLM\...\Policies\Explorer: [NoDesktopCleanupWizard] 1 HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1 HKCU\...\Run: [AQQ] - C:\Program Files\WapSter\WapSter AQQ\AQQ.exe [8174592 2013-10-16] (AQQ Sp. z o.o.) HKCU\...\Policies\Explorer: [NoSMHelp] 1 HKCU\...\Policies\Explorer: [ForceClassicControlPanel] 1 HKCU\...\Policies\Explorer: [NoSMMyPictures] 1 HKCU\...\Policies\Explorer: [NoSMConfigurePrograms] 1 HKCU\...\Policies\Explorer: [NoSaveSettings] 0 HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N AppInit_DLLs: c:\progra~1\ss-hel~1\psupport.dll [ 2013-10-06] () Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Ralink Wireless Utility.lnk ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.) BootExecute: ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.google.pl/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.google.pl/ HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.google.pl/ HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.google.pl/ HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: No Name - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - No File BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - QT Breadcrumbs Address Bar - {af83e43c-dd2b-4787-826b-31b17dee52ed} - C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation) Toolbar: HKLM - QT TabBar - {d2bf470e-ed1c-487f-a333-2bd8835eb6ce} - C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation) Toolbar: HKLM - QT Tab Standard Buttons - {D2BF470E-ED1C-487F-A666-2BD8835EB6CE} - C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation) Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {EEF280F3-B6ED-46D8-A8FD-57BD0C4A9ECF} - No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.88.1 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\0cg0prn5.default FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", ""); FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", ""); FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", ""); FF Keyword.URL: user_pref("keyword.URL", ""); FF Homepage: user_pref("browser.startup.homepage", ""); FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF ========================== Services (Whitelisted) ================= R2 Ati HotKey Poller; C:\Windows\system32\Ati2evxx.exe [376832 2003-09-12] () S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [114688 2003-09-12] () R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software) R2 SoundMAX Agent Service (default); C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [45056 2002-09-20] (Analog Devices, Inc.) R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== R2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [20747 2013-08-12] (Meetinghouse Data Communications) R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software) R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-08-30] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] () R3 FET5X86V; C:\Windows\System32\DRIVERS\fetnd5bv.sys [47104 2013-03-03] (VIA Technologies, Inc. ) R3 gameenum; C:\Windows\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation) S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2007-03-08] (HP) S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2007-03-08] (HP) S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2007-03-08] (HP) R3 HSFHWBS2; C:\Windows\System32\DRIVERS\HSFBS2S2.sys [220032 2008-04-13] (Conexant Systems, Inc.) R3 HSF_DP; C:\Windows\System32\DRIVERS\HSFDPSP2.sys [1041536 2008-04-13] (Conexant Systems, Inc.) R3 RT73; C:\Windows\System32\DRIVERS\rt73.sys [255232 2006-03-08] (Ralink Technology, Corp.) S0 Si3114r5; C:\Windows\System32\Drivers\Si3114r5.sys [211496 2013-03-03] (Silicon Image, Inc) R0 Si3132; C:\Windows\System32\Drivers\Si3132.sys [80424 2013-03-03] (Silicon Image, Inc) S0 SscRdBus; C:\Windows\System32\DRIVERS\SscRdBus.sys [124080 2011-01-26] (SuperSpeed LLC) R0 videX32; C:\Windows\System32\DRIVERS\videX32.sys [13976 2013-03-03] (VIA Technologies, Inc.) R3 winachsf; C:\Windows\System32\DRIVERS\HSFCXTS2.sys [685056 2008-04-13] (Conexant Systems, Inc.) S4 IntelIde; No ImagePath S0 mv61xx; No ImagePath S0 mv64xx; No ImagePath U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-05] () U4 WinRM; U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-29 17:59 - 2013-10-29 17:59 - 01089183 _____ (Farbar) C:\Documents and Settings\Administrator\Moje dokumenty\FRST.exe 2013-10-29 17:53 - 2013-10-29 17:53 - 00073894 _____ C:\Documents and Settings\Administrator\Moje dokumenty\OTL.Txt 2013-10-29 17:53 - 2013-10-29 17:53 - 00032308 _____ C:\Documents and Settings\Administrator\Moje dokumenty\Extras.Txt 2013-10-29 17:46 - 2013-10-29 17:46 - 00000000 ____D C:\_OTL 2013-10-28 13:01 - 2013-10-28 13:01 - 00007891 _____ C:\Documents and Settings\Administrator\Moje dokumenty\[kickass.to]grid.2.reloaded.torrent 2013-10-28 12:21 - 2013-10-28 12:21 - 00015801 _____ C:\Documents and Settings\Administrator\Moje dokumenty\[kickass.to]grid.2.2013.reloaded.multi.8.torrent 2013-10-28 12:06 - 2013-10-28 12:18 - 166387069 _____ C:\Documents and Settings\Administrator\Moje dokumenty\spolszczenie.rar 2013-10-28 12:02 - 2013-10-28 12:02 - 00020438 _____ C:\Documents and Settings\Administrator\Moje dokumenty\[www.tnt24.info] GRID 2 (2013) POLiSH REPACK O22y.torrent 2013-10-27 20:43 - 2013-10-27 20:43 - 00243722 _____ C:\Documents and Settings\Administrator\Moje dokumenty\The_Witcher_2_avatars.zip 2013-10-27 20:43 - 2013-10-27 20:43 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\The_Witcher_2_avatars 2013-10-27 20:38 - 2013-10-27 20:38 - 00029686 _____ C:\Documents and Settings\Administrator\Pulpit\FRST.txt 2013-10-27 20:38 - 2013-10-27 20:38 - 00012125 _____ C:\Documents and Settings\Administrator\Pulpit\Addition.txt 2013-10-27 20:36 - 2013-10-27 20:36 - 00000000 ____D C:\FRST 2013-10-27 17:18 - 2013-10-27 17:18 - 00046635 _____ C:\Documents and Settings\Administrator\Pulpit\GMER.txt 2013-10-27 15:43 - 2013-10-27 15:43 - 00377856 _____ C:\Documents and Settings\Administrator\Moje dokumenty\ferqrbsk.exe 2013-10-27 15:16 - 2013-10-27 15:16 - 00072394 _____ C:\Documents and Settings\Administrator\Pulpit\OTL.Txt 2013-10-27 15:16 - 2013-10-27 15:16 - 00032214 _____ C:\Documents and Settings\Administrator\Pulpit\Extras.Txt 2013-10-27 15:11 - 2013-10-27 15:11 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Administrator\Moje dokumenty\OTL.exe 2013-10-27 13:46 - 2013-10-27 13:46 - 01722272 _____ C:\Documents and Settings\Administrator\Moje dokumenty\drivers_urz0086_v1.2.7_soft.7z 2013-10-27 13:46 - 2013-10-27 13:46 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\drivers_urz0086_v1.2.7_soft 2013-10-27 11:56 - 2013-10-27 11:56 - 00000846 _____ C:\Documents and Settings\Administrator\Pulpit\µTorrent.lnk 2013-10-27 11:56 - 2013-10-27 11:56 - 00000846 _____ C:\Documents and Settings\Administrator\Menu Start\µTorrent.lnk 2013-10-27 11:55 - 2013-10-27 11:55 - 00020448 _____ C:\Documents and Settings\Administrator\Moje dokumenty\[torrent.pl] GRID 2 (2013) [PL] [REPACK] [O22y].torrent 2013-10-27 11:52 - 2013-10-27 11:53 - 01141328 _____ (BitTorrent Inc.) C:\Documents and Settings\Administrator\Moje dokumenty\utorrent.exe 2013-10-26 16:29 - 2013-10-26 16:32 - 00000000 ____D C:\Documents and Settings\Administrator\Pulpit\Nowy folder 2013-10-26 12:21 - 2013-10-26 14:23 - 736470458 _____ C:\Documents and Settings\Administrator\Moje dokumenty\After.Earth.2013.PL.BDRip.XviD-BiDA.avi 2013-10-24 15:20 - 2013-10-29 17:12 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-24 15:20 - 2013-10-24 15:20 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-10-24 15:20 - 2013-10-24 15:20 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-10-24 15:01 - 2013-10-24 15:13 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie 2013-10-24 09:59 - 2013-10-24 09:59 - 00000651 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk 2013-10-24 09:49 - 2013-10-24 09:49 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Opera 2013-10-24 09:47 - 2013-10-24 09:47 - 00761896 _____ () C:\Documents and Settings\Administrator\Moje dokumenty\opera_idg_downloader_19920_pc.exe 2013-10-24 09:29 - 2013-10-24 09:29 - 01851544 _____ (Adobe Systems Incorporated) C:\Documents and Settings\Administrator\Moje dokumenty\SoftwarePatch.pl-install_flash_player1001236.exe 2013-10-24 09:18 - 2013-10-24 09:18 - 00000730 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk 2013-10-24 09:18 - 2013-10-24 09:18 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-10-24 09:18 - 2013-10-24 09:18 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Mozilla 2013-10-24 09:18 - 2013-10-24 09:18 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla 2013-10-23 19:04 - 2013-10-23 19:04 - 00090112 _____ C:\WINDOWS\Minidump\Mini102313-01.dmp 2013-10-23 19:04 - 2013-10-23 19:04 - 00000000 ____D C:\WINDOWS\Minidump 2013-10-23 18:52 - 2013-10-23 18:52 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\fp_10.3.183.67_archive 2013-10-22 16:25 - 2013-10-22 16:25 - 00000000 ____D C:\Program Files\Common Files\Java 2013-10-22 16:24 - 2013-10-22 16:24 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java 2013-10-22 16:24 - 2013-10-08 06:50 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-10-22 16:24 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2013-10-22 16:24 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2013-10-22 16:24 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2013-10-22 16:24 - 2013-10-08 06:29 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2013-10-22 16:23 - 2013-10-22 16:24 - 00004676 _____ C:\WINDOWS\system32\jupdate-1.7.0_45-b18.log 2013-10-20 17:21 - 2013-10-20 17:21 - 00000130 _____ C:\Documents and Settings\Administrator\Pulpit\link.txt 2013-10-20 14:05 - 2013-10-20 14:05 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Xentient 2013-10-20 14:03 - 2013-10-20 14:03 - 00000000 ____D C:\Program Files\Yamicsoft 2013-10-13 10:15 - 2013-10-27 15:03 - 00000088 _____ C:\Documents and Settings\Administrator\128199231062767162.log 2013-10-13 10:13 - 2013-10-27 15:41 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\SearchNewTab 2013-10-13 10:12 - 2013-10-13 10:13 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\SummerSoft 2013-10-13 10:11 - 2013-10-13 10:11 - 00000000 ____D C:\Program Files\Ss-Helper 2013-10-13 10:10 - 2013-10-13 10:18 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\DowwnLoad keEper 2013-10-13 10:10 - 2013-10-13 10:13 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\InstallMate 2013-10-12 17:48 - 2013-10-20 14:07 - 00000000 ____D C:\Program Files\Steam 2013-10-12 17:48 - 2013-10-12 17:48 - 00000000 ____D C:\Program Files\Common Files\Steam 2013-10-12 17:48 - 2013-10-12 17:48 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Steam 2013-10-09 20:29 - 2013-10-09 20:29 - 17226632 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-03 14:27 - 2013-10-29 17:47 - 00006996 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-03 12:50 - 2013-10-27 20:29 - 00044880 _____ C:\WINDOWS\setupapi.log 2013-10-03 12:50 - 2013-10-08 14:57 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\DMCache 2013-10-03 12:50 - 2013-10-03 12:50 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\IDM 2013-09-30 17:46 - 2013-09-30 17:46 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\PRO100 i NR Demo 2013-09-30 17:41 - 2013-09-30 17:46 - 00000000 ____D C:\Program Files\PRO100 i NR Demo 2013-09-30 17:31 - 2013-09-30 17:31 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\pro100_v4.42-lekarstwo 2013-09-30 12:53 - 2013-09-30 12:53 - 00000000 ___RD C:\Documents and Settings\Administrator\Menu Start\Programy\Narzędzia administracyjne 2013-09-30 12:21 - 2013-09-30 12:21 - 00000000 ____D C:\Program Files\CCleaner 2013-09-30 12:21 - 2013-09-30 12:21 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner 2013-09-29 17:34 - 2013-09-29 17:34 - 00000000 ____D C:\WINDOWS\Sun ==================== One Month Modified Files and Folders ======= 2013-10-29 18:00 - 2013-08-12 21:32 - 01273170 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-29 18:00 - 2013-08-12 19:39 - 00000000 ____D C:\TMP 2013-10-29 18:00 - 2008-04-15 12:00 - 00562076 _____ C:\WINDOWS\system32\perfh015.dat 2013-10-29 18:00 - 2008-04-15 12:00 - 00107638 _____ C:\WINDOWS\system32\perfc015.dat 2013-10-29 17:59 - 2013-10-29 17:59 - 01089183 _____ (Farbar) C:\Documents and Settings\Administrator\Moje dokumenty\FRST.exe 2013-10-29 17:59 - 2013-08-12 19:46 - 00000000 ___RD C:\Documents and Settings\Administrator\Moje dokumenty 2013-10-29 17:56 - 2013-08-12 22:12 - 00000316 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job 2013-10-29 17:56 - 2013-08-12 21:35 - 00000159 _____ C:\WINDOWS\wiadebug.log 2013-10-29 17:56 - 2013-08-12 21:35 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-10-29 17:55 - 2013-08-12 19:46 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-29 17:54 - 2013-08-12 19:44 - 00021758 _____ C:\WINDOWS\notepad.ini 2013-10-29 17:53 - 2013-10-29 17:53 - 00073894 _____ C:\Documents and Settings\Administrator\Moje dokumenty\OTL.Txt 2013-10-29 17:53 - 2013-10-29 17:53 - 00032308 _____ C:\Documents and Settings\Administrator\Moje dokumenty\Extras.Txt 2013-10-29 17:47 - 2013-10-03 14:27 - 00006996 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-29 17:47 - 2013-08-12 19:46 - 00032634 _____ C:\WINDOWS\SchedLgU.Txt 2013-10-29 17:47 - 2013-08-12 19:46 - 00000188 ___SH C:\Documents and Settings\Administrator\ntuser.ini 2013-10-29 17:47 - 2013-08-12 19:45 - 00000188 ___SH C:\Documents and Settings\LocalService\ntuser.ini 2013-10-29 17:46 - 2013-10-29 17:46 - 00000000 ____D C:\_OTL 2013-10-29 17:45 - 2013-08-12 19:46 - 00000000 ____D C:\Documents and Settings\Administrator\Pulpit 2013-10-29 17:12 - 2013-10-24 15:20 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-29 16:53 - 2008-04-15 12:00 - 00002184 _____ C:\WINDOWS\system32\wpa.dbl 2013-10-28 20:49 - 2013-08-12 19:46 - 00000000 ____D C:\Documents and Settings\Administrator 2013-10-28 20:34 - 2013-09-06 16:13 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\uTorrent 2013-10-28 13:01 - 2013-10-28 13:01 - 00007891 _____ C:\Documents and Settings\Administrator\Moje dokumenty\[kickass.to]grid.2.reloaded.torrent 2013-10-28 12:21 - 2013-10-28 12:21 - 00015801 _____ C:\Documents and Settings\Administrator\Moje dokumenty\[kickass.to]grid.2.2013.reloaded.multi.8.torrent 2013-10-28 12:18 - 2013-10-28 12:06 - 166387069 _____ C:\Documents and Settings\Administrator\Moje dokumenty\spolszczenie.rar 2013-10-28 12:02 - 2013-10-28 12:02 - 00020438 _____ C:\Documents and Settings\Administrator\Moje dokumenty\[www.tnt24.info] GRID 2 (2013) POLiSH REPACK O22y.torrent 2013-10-27 20:53 - 2013-08-28 08:30 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\vlc 2013-10-27 20:48 - 2013-09-15 12:53 - 00000069 _____ C:\WINDOWS\NeroDigital.ini 2013-10-27 20:43 - 2013-10-27 20:43 - 00243722 _____ C:\Documents and Settings\Administrator\Moje dokumenty\The_Witcher_2_avatars.zip 2013-10-27 20:43 - 2013-10-27 20:43 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\The_Witcher_2_avatars 2013-10-27 20:40 - 2013-08-12 19:44 - 00021760 _____ C:\WINDOWS\system32\notepad.ini 2013-10-27 20:38 - 2013-10-27 20:38 - 00029686 _____ C:\Documents and Settings\Administrator\Pulpit\FRST.txt 2013-10-27 20:38 - 2013-10-27 20:38 - 00012125 _____ C:\Documents and Settings\Administrator\Pulpit\Addition.txt 2013-10-27 20:36 - 2013-10-27 20:36 - 00000000 ____D C:\FRST 2013-10-27 20:29 - 2013-10-03 12:50 - 00044880 _____ C:\WINDOWS\setupapi.log 2013-10-27 17:18 - 2013-10-27 17:18 - 00046635 _____ C:\Documents and Settings\Administrator\Pulpit\GMER.txt 2013-10-27 15:43 - 2013-10-27 15:43 - 00377856 _____ C:\Documents and Settings\Administrator\Moje dokumenty\ferqrbsk.exe 2013-10-27 15:41 - 2013-10-13 10:13 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\SearchNewTab 2013-10-27 15:16 - 2013-10-27 15:16 - 00072394 _____ C:\Documents and Settings\Administrator\Pulpit\OTL.Txt 2013-10-27 15:16 - 2013-10-27 15:16 - 00032214 _____ C:\Documents and Settings\Administrator\Pulpit\Extras.Txt 2013-10-27 15:11 - 2013-10-27 15:11 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Administrator\Moje dokumenty\OTL.exe 2013-10-27 15:08 - 2013-08-12 20:36 - 00000000 ____D C:\Program Files\Google 2013-10-27 15:07 - 2013-08-12 21:31 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy 2013-10-27 15:03 - 2013-10-13 10:15 - 00000088 _____ C:\Documents and Settings\Administrator\128199231062767162.log 2013-10-27 13:46 - 2013-10-27 13:46 - 01722272 _____ C:\Documents and Settings\Administrator\Moje dokumenty\drivers_urz0086_v1.2.7_soft.7z 2013-10-27 13:46 - 2013-10-27 13:46 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\drivers_urz0086_v1.2.7_soft 2013-10-27 11:56 - 2013-10-27 11:56 - 00000846 _____ C:\Documents and Settings\Administrator\Pulpit\µTorrent.lnk 2013-10-27 11:56 - 2013-10-27 11:56 - 00000846 _____ C:\Documents and Settings\Administrator\Menu Start\µTorrent.lnk 2013-10-27 11:56 - 2013-08-12 19:46 - 00000000 ___RD C:\Documents and Settings\Administrator\Menu Start 2013-10-27 11:55 - 2013-10-27 11:55 - 00020448 _____ C:\Documents and Settings\Administrator\Moje dokumenty\[torrent.pl] GRID 2 (2013) [PL] [REPACK] [O22y].torrent 2013-10-27 11:53 - 2013-10-27 11:52 - 01141328 _____ (BitTorrent Inc.) C:\Documents and Settings\Administrator\Moje dokumenty\utorrent.exe 2013-10-26 16:32 - 2013-10-26 16:29 - 00000000 ____D C:\Documents and Settings\Administrator\Pulpit\Nowy folder 2013-10-26 14:23 - 2013-10-26 12:21 - 736470458 _____ C:\Documents and Settings\Administrator\Moje dokumenty\After.Earth.2013.PL.BDRip.XviD-BiDA.avi 2013-10-24 15:20 - 2013-10-24 15:20 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-10-24 15:20 - 2013-10-24 15:20 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-10-24 15:13 - 2013-10-24 15:01 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie 2013-10-24 10:24 - 2013-08-12 21:31 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-10-24 09:59 - 2013-10-24 09:59 - 00000651 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk 2013-10-24 09:59 - 2013-08-12 20:51 - 00000000 ____D C:\Program Files\Opera 2013-10-24 09:49 - 2013-10-24 09:49 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Opera 2013-10-24 09:49 - 2013-08-12 19:46 - 00000000 __RHD C:\Documents and Settings\Administrator\Dane aplikacji 2013-10-24 09:47 - 2013-10-24 09:47 - 00761896 _____ () C:\Documents and Settings\Administrator\Moje dokumenty\opera_idg_downloader_19920_pc.exe 2013-10-24 09:29 - 2013-10-24 09:29 - 01851544 _____ (Adobe Systems Incorporated) C:\Documents and Settings\Administrator\Moje dokumenty\SoftwarePatch.pl-install_flash_player1001236.exe 2013-10-24 09:18 - 2013-10-24 09:18 - 00000730 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk 2013-10-24 09:18 - 2013-10-24 09:18 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-10-24 09:18 - 2013-10-24 09:18 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Mozilla 2013-10-24 09:18 - 2013-10-24 09:18 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla 2013-10-24 09:18 - 2013-08-21 14:03 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-10-24 09:18 - 2013-08-12 21:28 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2013-10-23 19:04 - 2013-10-23 19:04 - 00090112 _____ C:\WINDOWS\Minidump\Mini102313-01.dmp 2013-10-23 19:04 - 2013-10-23 19:04 - 00000000 ____D C:\WINDOWS\Minidump 2013-10-23 18:52 - 2013-10-23 18:52 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\fp_10.3.183.67_archive 2013-10-23 18:47 - 2013-08-21 13:53 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Adobe 2013-10-22 16:25 - 2013-10-22 16:25 - 00000000 ____D C:\Program Files\Common Files\Java 2013-10-22 16:24 - 2013-10-22 16:24 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java 2013-10-22 16:24 - 2013-10-22 16:23 - 00004676 _____ C:\WINDOWS\system32\jupdate-1.7.0_45-b18.log 2013-10-22 16:24 - 2013-08-12 21:41 - 00000000 ____D C:\Program Files\Java 2013-10-20 17:29 - 2013-08-12 20:08 - 00000000 ___RD C:\Documents and Settings\Administrator\Moje dokumenty\Moje obrazy 2013-10-20 17:21 - 2013-10-20 17:21 - 00000130 _____ C:\Documents and Settings\Administrator\Pulpit\link.txt 2013-10-20 14:23 - 2013-08-20 17:13 - 00000000 ____D C:\Documents and Settings\Administrator\Menu Start\Programy\Gothic PL 2013-10-20 14:22 - 2013-08-12 20:17 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-10-20 14:12 - 2013-08-12 20:08 - 00000000 ___RD C:\Documents and Settings\Administrator\Moje dokumenty\Muzyka 2013-10-20 14:07 - 2013-10-12 17:48 - 00000000 ____D C:\Program Files\Steam 2013-10-20 14:05 - 2013-10-20 14:05 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Xentient 2013-10-20 14:04 - 2013-08-12 20:09 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\NARZĘDZIA 2013-10-20 14:03 - 2013-10-20 14:03 - 00000000 ____D C:\Program Files\Yamicsoft 2013-10-13 10:18 - 2013-10-13 10:10 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\DowwnLoad keEper 2013-10-13 10:13 - 2013-10-13 10:12 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\SummerSoft 2013-10-13 10:13 - 2013-10-13 10:10 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\InstallMate 2013-10-13 10:11 - 2013-10-13 10:11 - 00000000 ____D C:\Program Files\Ss-Helper 2013-10-12 17:48 - 2013-10-12 17:48 - 00000000 ____D C:\Program Files\Common Files\Steam 2013-10-12 17:48 - 2013-10-12 17:48 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Steam 2013-10-09 20:29 - 2013-10-09 20:29 - 17226632 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-08 14:57 - 2013-10-03 12:50 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\DMCache 2013-10-08 14:57 - 2013-08-12 19:46 - 00000000 ___RD C:\Documents and Settings\Administrator\Menu Start\Programy 2013-10-08 06:50 - 2013-10-22 16:24 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-10-08 06:46 - 2013-10-22 16:24 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2013-10-08 06:46 - 2013-10-22 16:24 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2013-10-08 06:46 - 2013-10-22 16:24 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2013-10-08 06:29 - 2013-10-22 16:24 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2013-10-03 12:50 - 2013-10-03 12:50 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\IDM 2013-09-30 17:46 - 2013-09-30 17:46 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\PRO100 i NR Demo 2013-09-30 17:46 - 2013-09-30 17:41 - 00000000 ____D C:\Program Files\PRO100 i NR Demo 2013-09-30 17:31 - 2013-09-30 17:31 - 00000000 ____D C:\Documents and Settings\Administrator\Moje dokumenty\pro100_v4.42-lekarstwo 2013-09-30 13:14 - 2013-08-12 19:40 - 00002596 _____ C:\WINDOWS\system32\CONFIG.NT 2013-09-30 12:53 - 2013-09-30 12:53 - 00000000 ___RD C:\Documents and Settings\Administrator\Menu Start\Programy\Narzędzia administracyjne 2013-09-30 12:24 - 2013-08-13 13:48 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools Lite 2013-09-30 12:21 - 2013-09-30 12:21 - 00000000 ____D C:\Program Files\CCleaner 2013-09-30 12:21 - 2013-09-30 12:21 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner 2013-09-29 17:34 - 2013-09-29 17:34 - 00000000 ____D C:\WINDOWS\Sun Files to move or delete: ==================== C:\Documents and Settings\Administrator\trial_setup.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2011-07-31 17:09] - [2011-07-31 17:09] - 2549760 ____A (Microsoft Corporation) dca5a6ef20d7ac2b0214c1d7fd4aae5f C:\Windows\System32\winlogon.exe [2009-02-27 10:15] - [2009-02-27 10:15] - 0559616 ____A (Microsoft Corporation) cef41b7f252c18d841769d72ea33d086 C:\Windows\System32\svchost.exe [2008-04-15 12:00] - [2008-04-15 12:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2012-01-07 14:10] - [2012-01-07 14:10] - 0111104 ____A (Microsoft Corporation) 8816e60bf654353e8e0d35ed98875445 C:\Windows\System32\User32.dll [2009-05-20 14:25] - [2009-05-20 14:25] - 0631296 ____A (Microsoft Corporation) eff0eb33111c9cb9ee5244a6b270f856 C:\Windows\System32\userinit.exe [2008-04-15 12:00] - [2008-04-15 12:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2008-04-15 12:00] - [2008-04-15 12:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================