Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-12-2013 03 Ran by Administrator (administrator) on JACA on 09-12-2013 10:48:12 Running from F:\logi Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Safe Mode (minimal) ==================== Processes (Whitelisted) =================== ==================== Registry (Whitelisted) ================== HKLM\...\Run: [TWCU] - C:\Program Files\TP-LINK\TL-WN821N\TWCU.exe [557186 2008-10-20] (TP-LINK) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [RegisterDropHandler] - C:\Program Files\ScannerU\TBridge\Bin\RegisterDropHandler.exe [22528 1998-07-08] () HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [nwiz] - nwiz.exe /install HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup HKLM\...\Run: [NeroFilterCheck] - C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM\...\Run: [iPlusManager] - C:\Program Files\iPlus\iPlusChecker.exe [446464 2009-12-21] () HKLM\...\Run: [IntelliType] - C:\Program Files\Microsoft Hardware\Keyboard\type32.exe [94208 2002-03-22] (Microsoft Corporation) HKLM\...\Run: [InstantAccess] - C:\Program Files\ScannerU\TBridge\Bin\InstantAccess.exe [37376 1998-07-08] () HKLM\...\Run: [HPDJ Taskbar Utility] - C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe [188416 2002-07-11] (HP) HKLM\...\Run: [EM_EXEC] - C:\Program Files\Logitech\MouseWare\system\EM_EXEC.EXE [35328 2001-12-20] (Logitech Inc. ) HKLM\...\Run: [C-Media Mixer] - Mixer.exe /startup HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated) HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation) HKU\Gość\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [ 2013-05-01] (Apple Inc.) HKU\jaca\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) HKU\jaca\...\Run: [AnyDVD] - C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe [ 2010-01-22] (SlySoft, Inc.) HKU\Konrad\...\Run: [Google Update] - C:\Documents and Settings\Konrad\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [ 2011-10-23] (Google Inc.) HKU\x\...\Run: [NVIEW] - rundll32.exe nview.dll,nViewLoadHook Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Action Manager 32.lnk ShortcutTarget: Action Manager 32.lnk -> C:\Program Files\ScannerU\AM32.exe () Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\WinZip Quick Pick.lnk ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.encyklopedia.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) Handler: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 62.233.233.233 87.204.204.204 Chrome: ======= CHR DefaultSearchKeyword: google.com CHR DefaultSearchProvider: Google CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter} CHR Extension: (Docs) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0 CHR Extension: (Google Drive) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0 CHR Extension: (YouTube) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 CHR Extension: (Google Search) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 CHR Extension: (Gmail) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ========================== Services (Whitelisted) ================= S2 ACS; C:\WINDOWS\system32\acs.exe [467029 2008-05-27] (Atheros) S2 ScsiAccess; C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe [181312 2013-12-05] () S2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [104512 2009-12-19] (SlySoft, Inc.) S3 arusb(TP-LINK); C:\Windows\System32\DRIVERS\arusb.sys [451584 2008-10-22] (TP-LINK TECHNOLOGIES CO., LTD.) S2 Aspi32; C:\Windows\System32\Drivers\Aspi32.sys [16877 2002-07-17] (Adaptec) S3 basic2; C:\Windows\System32\DRIVERS\HSF_BSC2.sys [67167 2001-08-17] (Conexant) S2 BulkUsb; C:\Windows\System32\DRIVERS\usbscan.sys [14976 2013-07-03] (Microsoft Corporation) S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation) R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [13567 2004-03-08] (B.H.A Corporation) S3 cmpci; C:\Windows\System32\drivers\cmaudio.sys [280782 2001-10-30] (C-Media Inc) S3 EL90XBC; C:\Windows\System32\DRIVERS\el90xbc5.sys [66591 2001-08-17] (3Com Corporation) S1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2009-12-17] (Elaborate Bytes AG) S2 Fallback; C:\Windows\System32\DRIVERS\HSF_FALL.sys [289887 2001-08-17] (Conexant) S2 Fsks; C:\Windows\System32\DRIVERS\HSF_FSKS.sys [115807 2001-08-17] (Conexant) S3 gameenum; C:\Windows\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation) S3 HSFHWBS2; C:\Windows\System32\DRIVERS\HSFBS2S2.sys [220032 2004-08-04] (Conexant Systems, Inc.) S3 HSF_DP; C:\Windows\System32\DRIVERS\HSFDPSP2.sys [1041536 2004-08-04] (Conexant Systems, Inc.) S3 hsf_msft; C:\Windows\System32\DRIVERS\HSF_MSFT.sys [542879 2001-08-17] (Conexant) S2 K56; C:\Windows\System32\DRIVERS\HSF_K56K.sys [391199 2001-08-17] (Conexant) S3 l8042pr2; C:\Windows\System32\DRIVERS\L8042Pr2.sys [50990 2001-12-19] (Logitech) S3 LHidUsb; C:\Windows\System32\drivers\LHidUsb.Sys [39932 2001-12-19] (Logitech) R3 LKbdFlt2; C:\Windows\System32\DRIVERS\LKbdFlt2.sys [5838 2001-12-19] (Logitech) S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) S3 Rksample; C:\Windows\System32\DRIVERS\HSF_SAMP.sys [57471 2001-08-17] (Conexant) S3 rtl8029; C:\Windows\System32\DRIVERS\RTL8029.SYS [19017 2001-08-17] (Realtek Semiconductor Corporation) S2 SoftFax; C:\Windows\System32\DRIVERS\HSF_FAXX.sys [199711 2001-08-17] (Conexant) S3 SONYPVU1; C:\Windows\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation) S2 Tones; C:\Windows\System32\DRIVERS\HSF_TONE.sys [50751 2001-08-17] (Conexant) S2 V124; C:\Windows\System32\DRIVERS\HSF_V124.sys [488383 2001-08-17] (Conexant) S1 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Corporation) S3 winachsf; C:\Windows\System32\DRIVERS\HSFCXTS2.sys [685056 2004-08-04] (Conexant Systems, Inc.) S3 BS_DEF; \??\C:\WINDOWS\system32\drivers\BS_DEF.sys [x] S3 catchme; \??\C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\catchme.sys [x] S4 hpt3xx; No ImagePath S1 kbdhid; system32\DRIVERS\kbdhid.sys [x] S3 P0230bBK; System32\DRIVERS\P0230bbk.sys [x] S3 P0230bVD; System32\DRIVERS\P0230bvd.sys [x] U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U5 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2006-07-24] () S3 USBAAPL; System32\Drivers\usbaapl.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-09 10:47 - 2013-12-09 10:47 - 00000000 ___DC C:\FRST 2013-12-09 09:41 - 2013-12-09 09:41 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google 2013-12-09 09:40 - 2013-12-09 09:40 - 00000075 _____ C:\WINDOWS\setupact.log 2013-12-09 09:40 - 2013-12-09 09:40 - 00000000 _____ C:\WINDOWS\setuperr.log 2013-12-06 16:01 - 2013-12-09 09:40 - 00016566 _____ C:\WINDOWS\setupapi.log 2013-12-06 13:59 - 2013-12-06 14:13 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0 2013-12-06 11:36 - 2013-12-06 11:36 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe 2013-12-06 11:35 - 2013-12-06 11:35 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Adobe 2013-12-06 11:29 - 2013-12-06 11:29 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Apple Computer 2013-12-06 11:28 - 2013-12-06 12:30 - 00003128 _____ C:\WINDOWS\SchedLgU.Txt 2013-12-06 11:28 - 2013-12-06 11:28 - 00025080 _____ C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2013-12-06 11:23 - 2013-12-06 11:23 - 00268752 _____ C:\Documents and Settings\Administrator\Moje dokumenty\cc_20131206_112330.reg 2013-12-06 11:19 - 2013-12-06 11:19 - 00000000 __SHD C:\Documents and Settings\Administrator\PrivacIE 2013-12-06 11:12 - 2013-12-09 09:42 - 00001819 _____ C:\Documents and Settings\Administrator\Pulpit\Google Chrome.lnk 2013-12-06 10:40 - 2013-12-06 10:43 - 00000000 ___DC C:\AdwCleaner 2013-12-06 10:37 - 2013-12-06 10:37 - 00010598 ____C C:\ComboFix.txt 2013-12-06 09:05 - 2013-12-06 09:05 - 00000000 ___RD C:\Documents and Settings\Administrator\Moje dokumenty\Moje wideo 2013-12-06 09:05 - 2013-12-06 09:05 - 00000000 ___RD C:\Documents and Settings\Administrator\Menu Start\Programy\Narzędzia administracyjne 2013-12-06 09:05 - 2010-11-07 18:20 - 00208896 _____ C:\WINDOWS\MBR.exe 2013-12-06 09:03 - 2013-12-06 09:01 - 01110034 _____ C:\Documents and Settings\Administrator\Pulpit\AdwCleaner.exe 2013-12-06 09:02 - 2013-12-06 09:02 - 00000000 __SHD C:\Documents and Settings\Administrator\IETldCache 2013-12-06 09:02 - 2013-12-06 09:00 - 05153080 ____R (Swearware) C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe 2013-12-05 11:34 - 2013-12-05 11:34 - 00000015 _____ C:\Documents and Settings\jaca\Moje dokumenty\PDVD_MediaDisc.PlayList 2013-12-05 10:06 - 2013-12-05 10:06 - 00001747 _____ C:\Documents and Settings\jaca\Pulpit\ProShow Gold.lnk 2013-12-04 02:23 - 2008-04-13 19:45 - 00017152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbohci.sys 2013-12-04 02:23 - 2008-04-13 19:45 - 00017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys 2013-11-28 18:03 - 2013-11-28 18:03 - 00000000 ____D C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji\Google 2013-11-28 18:03 - 2013-11-28 18:03 - 00000000 ____D C:\Documents and Settings\Gość\Dane aplikacji\Apple Computer 2013-11-28 18:03 - 2013-11-28 18:03 - 00000000 _____ C:\Documents and Settings\Gość\Pulpit\Google Chrome.lnk 2013-11-22 19:36 - 2013-11-22 19:36 - 00000000 ____D C:\Documents and Settings\LocalService\Dane aplikacji\McAfee 2013-11-20 06:09 - 2013-11-20 06:09 - 00001807 _____ C:\Documents and Settings\jaca\Moje dokumenty\McAfee Security Scan Plus.lnk 2013-11-19 19:19 - 2013-11-21 08:12 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-18 18:45 - 2013-11-18 18:45 - 00001542 _____ C:\Documents and Settings\All Users\Pulpit\iTunes.lnk 2013-11-18 18:45 - 2013-11-18 18:45 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\iTunes 2013-11-18 18:43 - 2013-11-18 18:45 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\188F1432-103A-4ffb-80F1-36B633C5C9E1 2013-11-18 18:43 - 2013-11-18 18:43 - 00000000 ____D C:\Program Files\iPod 2013-11-14 17:09 - 2013-11-14 17:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$ 2013-11-14 17:09 - 2013-11-14 17:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$ 2013-11-14 17:09 - 2013-11-14 17:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$ 2013-11-14 17:09 - 2013-11-14 17:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$ ==================== One Month Modified Files and Folders ======= 2013-12-09 10:47 - 2013-12-09 10:47 - 00000000 ___DC C:\FRST 2013-12-09 09:42 - 2013-12-06 11:12 - 00001819 _____ C:\Documents and Settings\Administrator\Pulpit\Google Chrome.lnk 2013-12-09 09:41 - 2013-12-09 09:41 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google 2013-12-09 09:41 - 2003-12-17 18:39 - 00000000 ___HD C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji 2013-12-09 09:40 - 2013-12-09 09:40 - 00000075 _____ C:\WINDOWS\setupact.log 2013-12-09 09:40 - 2013-12-09 09:40 - 00000000 _____ C:\WINDOWS\setuperr.log 2013-12-09 09:40 - 2013-12-06 16:01 - 00016566 _____ C:\WINDOWS\setupapi.log 2013-12-09 09:37 - 2013-09-02 17:49 - 00001028 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-09 09:37 - 2005-04-26 12:08 - 01470338 _____ C:\WINDOWS\WindowsUpdate.log 2013-12-09 09:37 - 2003-04-07 09:44 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-12-09 09:36 - 2003-04-07 08:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-12-09 09:25 - 2009-11-11 16:24 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-12-09 09:25 - 2009-07-17 19:31 - 00000460 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{BA7CC04A-B2FA-4DC7-A491-290397742563}.job 2013-12-09 09:23 - 2003-04-07 09:44 - 00000157 _____ C:\WINDOWS\wiadebug.log 2013-12-09 09:16 - 2009-10-07 18:04 - 00524288 _____ C:\WINDOWS\system32\config\ACS.evt 2013-12-09 09:16 - 2003-12-17 18:39 - 00000188 __SHC C:\Documents and Settings\Administrator\ntuser.ini 2013-12-09 09:11 - 2005-04-26 15:22 - 00000000 ____D C:\WINDOWS\system32\appmgmt 2013-12-09 09:07 - 2001-07-21 23:17 - 00002262 _____ C:\WINDOWS\system32\wpa.dbl 2013-12-06 14:13 - 2013-12-06 13:59 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0 2013-12-06 12:30 - 2013-12-06 11:28 - 00003128 _____ C:\WINDOWS\SchedLgU.Txt 2013-12-06 11:36 - 2013-12-06 11:36 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe 2013-12-06 11:36 - 2003-12-17 18:39 - 00000000 ____D C:\Documents and Settings\Administrator\Pulpit 2013-12-06 11:35 - 2013-12-06 11:35 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Adobe 2013-12-06 11:35 - 2003-12-17 18:39 - 00000000 __RHD C:\Documents and Settings\Administrator\Dane aplikacji 2013-12-06 11:29 - 2013-12-06 11:29 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Apple Computer 2013-12-06 11:28 - 2013-12-06 11:28 - 00025080 _____ C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2013-12-06 11:28 - 2003-04-07 09:41 - 00142832 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-12-06 11:27 - 2003-04-07 09:07 - 00000188 __SHC C:\Documents and Settings\LocalService\ntuser.ini 2013-12-06 11:26 - 2003-04-07 09:42 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2013-12-06 11:23 - 2013-12-06 11:23 - 00268752 _____ C:\Documents and Settings\Administrator\Moje dokumenty\cc_20131206_112330.reg 2013-12-06 11:23 - 2003-12-17 18:39 - 00000000 ___RD C:\Documents and Settings\Administrator\Moje dokumenty 2013-12-06 11:23 - 2003-04-24 17:48 - 00000000 ____D C:\Program Files\Lavasoft Ad-Aware 2013-12-06 11:23 - 2003-04-24 17:48 - 00000000 ____D C:\Documents and Settings\x\Menu Start\Programy\Lavasoft Ad-aware 2013-12-06 11:22 - 2009-01-18 10:38 - 00000000 ____D C:\WINDOWS\Minidump 2013-12-06 11:22 - 2003-12-17 18:39 - 00000000 ____D C:\Documents and Settings\Administrator 2013-12-06 11:21 - 2005-04-26 13:43 - 00000000 ____D C:\WINDOWS\pss 2013-12-06 11:21 - 2003-04-07 10:41 - 00000281 _RSHC C:\boot.ini 2013-12-06 11:21 - 2003-04-07 09:42 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy\Autostart 2013-12-06 11:21 - 2001-07-21 23:16 - 00000876 _____ C:\WINDOWS\win.ini 2013-12-06 11:21 - 2001-07-21 23:15 - 00000280 ____C C:\WINDOWS\system.ini 2013-12-06 11:19 - 2013-12-06 11:19 - 00000000 __SHD C:\Documents and Settings\Administrator\PrivacIE 2013-12-06 11:12 - 2003-12-17 18:40 - 00000803 _____ C:\Documents and Settings\Administrator\Menu Start\Programy\Internet Explorer.lnk 2013-12-06 11:12 - 2003-12-17 18:39 - 00000792 _____ C:\Documents and Settings\Administrator\Menu Start\Programy\Windows Media Player.lnk 2013-12-06 11:12 - 2003-12-17 18:39 - 00000738 ____C C:\Documents and Settings\Administrator\Menu Start\Programy\Outlook Express.lnk 2013-12-06 11:12 - 2003-12-17 18:39 - 00000000 ___RD C:\Documents and Settings\Administrator\Ulubione 2013-12-06 11:12 - 2003-12-17 18:39 - 00000000 ___RD C:\Documents and Settings\Administrator\Moje dokumenty\Moje obrazy 2013-12-06 11:12 - 2003-12-17 18:39 - 00000000 ___RD C:\Documents and Settings\Administrator\Moje dokumenty\Moja muzyka 2013-12-06 11:12 - 2003-12-17 18:39 - 00000000 ___RD C:\Documents and Settings\Administrator\Menu Start\Programy\Akcesoria 2013-12-06 11:12 - 2003-12-17 18:39 - 00000000 ___RD C:\Documents and Settings\Administrator\Menu Start\Programy 2013-12-06 11:11 - 2003-12-17 18:52 - 00000292 ___SH C:\Documents and Settings\jaca\ntuser.ini 2013-12-06 11:10 - 2003-04-07 08:49 - 00000000 ____D C:\WINDOWS\system32\Restore 2013-12-06 10:44 - 2003-04-07 09:07 - 00000000 __SHD C:\Documents and Settings\LocalService 2013-12-06 10:43 - 2013-12-06 10:40 - 00000000 ___DC C:\AdwCleaner 2013-12-06 10:37 - 2013-12-06 10:37 - 00010598 ____C C:\ComboFix.txt 2013-12-06 10:37 - 2011-02-28 18:54 - 00000000 ___HD C:\Documents and Settings\Gość\Ustawienia lokalne 2013-12-06 10:37 - 2009-07-17 07:53 - 00000000 ____D C:\Qoobox 2013-12-06 10:37 - 2003-12-17 18:39 - 00000000 ___HD C:\Documents and Settings\Administrator\Ustawienia lokalne 2013-12-06 10:37 - 2003-04-07 09:42 - 00000000 __RHD C:\Documents and Settings\Default User\Ustawienia lokalne 2013-12-06 10:37 - 2003-04-07 09:07 - 00000000 __SHD C:\Documents and Settings\NetworkService 2013-12-06 10:37 - 2003-04-07 09:07 - 00000000 ___HD C:\Documents and Settings\x\Ustawienia lokalne 2013-12-06 10:37 - 2003-04-07 09:07 - 00000000 ___HD C:\Documents and Settings\NetworkService\Ustawienia lokalne 2013-12-06 10:35 - 2009-07-17 07:54 - 00000000 ____D C:\WINDOWS\ERDNT 2013-12-06 10:31 - 2009-07-16 13:58 - 00000000 ____D C:\Documents and Settings\Konrad 2013-12-06 10:31 - 2003-12-17 18:52 - 00000000 ____D C:\Documents and Settings\jaca 2013-12-06 10:31 - 2003-04-07 09:07 - 00000000 ____D C:\Documents and Settings\x 2013-12-06 09:05 - 2013-12-06 09:05 - 00000000 ___RD C:\Documents and Settings\Administrator\Moje dokumenty\Moje wideo 2013-12-06 09:05 - 2013-12-06 09:05 - 00000000 ___RD C:\Documents and Settings\Administrator\Menu Start\Programy\Narzędzia administracyjne 2013-12-06 09:02 - 2013-12-06 09:02 - 00000000 __SHD C:\Documents and Settings\Administrator\IETldCache 2013-12-06 09:01 - 2013-12-06 09:03 - 01110034 _____ C:\Documents and Settings\Administrator\Pulpit\AdwCleaner.exe 2013-12-06 09:00 - 2013-12-06 09:02 - 05153080 ____R (Swearware) C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe 2013-12-05 11:36 - 2010-01-28 15:41 - 00000085 ___SH C:\Documents and Settings\All Users\Dane aplikacji\.zreglib 2013-12-05 11:34 - 2013-12-05 11:34 - 00000015 _____ C:\Documents and Settings\jaca\Moje dokumenty\PDVD_MediaDisc.PlayList 2013-12-05 11:34 - 2003-12-17 18:52 - 00000000 ___RD C:\Documents and Settings\jaca\Moje dokumenty 2013-12-05 10:22 - 2011-10-23 13:42 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1202660629-1482476501-725345543-1006UA.job 2013-12-05 10:17 - 2003-04-07 09:42 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-12-05 10:14 - 2003-12-17 18:52 - 00000000 ___RD C:\Documents and Settings\jaca\Moje dokumenty\Moje obrazy 2013-12-05 10:12 - 2013-04-20 06:45 - 00000000 ____D C:\Documents and Settings\jaca\Pulpit\zdjęcia 2013 2013-12-05 10:09 - 2003-12-17 18:52 - 00000000 ____D C:\Documents and Settings\jaca\Pulpit 2013-12-05 10:06 - 2013-12-05 10:06 - 00001747 _____ C:\Documents and Settings\jaca\Pulpit\ProShow Gold.lnk 2013-12-05 10:06 - 2007-08-23 14:55 - 00001367 ____C C:\photodex-presenter-install.log 2013-12-05 10:04 - 2007-08-23 14:53 - 00000000 ____D C:\Documents and Settings\jaca\Moje dokumenty\ProShow.Gold.v3.0.1906 2013-12-05 10:03 - 2003-12-17 18:52 - 00000000 ___HD C:\Documents and Settings\jaca\Ustawienia lokalne 2013-12-05 10:00 - 2013-09-02 17:49 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-04 23:37 - 2011-11-13 09:22 - 00000000 ____D C:\Documents and Settings\jaca\Moje dokumenty\Pobieranie 2013-12-04 23:15 - 2005-04-27 14:33 - 00002525 _____ C:\Documents and Settings\jaca\Pulpit\Microsoft Word.lnk 2013-11-28 19:18 - 2003-04-07 09:42 - 01071640 ____C C:\WINDOWS\system32\PerfStringBackup.INI 2013-11-28 19:18 - 2001-10-26 17:15 - 00484680 ____C C:\WINDOWS\system32\perfh015.dat 2013-11-28 19:18 - 2001-10-26 17:15 - 00081352 ____C C:\WINDOWS\system32\perfc015.dat 2013-11-28 18:03 - 2013-11-28 18:03 - 00000000 ____D C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji\Google 2013-11-28 18:03 - 2013-11-28 18:03 - 00000000 ____D C:\Documents and Settings\Gość\Dane aplikacji\Apple Computer 2013-11-28 18:03 - 2013-11-28 18:03 - 00000000 _____ C:\Documents and Settings\Gość\Pulpit\Google Chrome.lnk 2013-11-28 18:03 - 2011-02-28 18:54 - 00000000 __RHD C:\Documents and Settings\Gość\Dane aplikacji 2013-11-28 18:03 - 2011-02-28 18:54 - 00000000 ___HD C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji 2013-11-28 18:03 - 2011-02-28 18:54 - 00000000 ____D C:\Documents and Settings\Gość\Pulpit 2013-11-28 17:46 - 2005-04-27 14:52 - 00000000 ___RD C:\Documents and Settings\jaca\Pulpit\Jola 2013-11-28 17:38 - 2005-04-27 14:33 - 00002543 _____ C:\Documents and Settings\jaca\Pulpit\Microsoft Excel.lnk 2013-11-28 17:03 - 2009-07-17 07:52 - 00002525 _____ C:\Documents and Settings\Konrad\Pulpit\Microsoft Word.lnk 2013-11-28 06:43 - 2005-04-27 14:32 - 00000000 ___RD C:\Documents and Settings\jaca\Pulpit\Nowy folder 2013-11-24 13:25 - 2009-03-25 17:16 - 00000972 _____ C:\WINDOWS\Tasks\Google Software Updater.job 2013-11-22 19:36 - 2013-11-22 19:36 - 00000000 ____D C:\Documents and Settings\LocalService\Dane aplikacji\McAfee 2013-11-21 17:44 - 2012-06-11 17:46 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-11-21 17:03 - 2012-05-14 11:43 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-11-21 08:12 - 2013-11-19 19:19 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-20 06:15 - 2009-02-27 14:15 - 00000000 ____D C:\Documents and Settings\jaca\Ustawienia lokalne\Dane aplikacji\Adobe 2013-11-20 06:09 - 2013-11-20 06:09 - 00001807 _____ C:\Documents and Settings\jaca\Moje dokumenty\McAfee Security Scan Plus.lnk 2013-11-20 06:09 - 2012-06-11 17:46 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-11-20 06:09 - 2012-06-11 17:46 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-11-20 06:09 - 2003-04-07 09:42 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2013-11-20 06:01 - 2009-07-16 13:58 - 00000292 ___SH C:\Documents and Settings\Konrad\ntuser.ini 2013-11-19 19:22 - 2011-10-23 13:42 - 00001084 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1202660629-1482476501-725345543-1006Core.job 2013-11-18 18:45 - 2013-11-18 18:45 - 00001542 _____ C:\Documents and Settings\All Users\Pulpit\iTunes.lnk 2013-11-18 18:45 - 2013-11-18 18:45 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\iTunes 2013-11-18 18:45 - 2013-11-18 18:43 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\188F1432-103A-4ffb-80F1-36B633C5C9E1 2013-11-18 18:45 - 2012-10-14 13:38 - 00000000 ____D C:\Program Files\iTunes 2013-11-18 18:43 - 2013-11-18 18:43 - 00000000 ____D C:\Program Files\iPod 2013-11-18 18:38 - 2003-04-11 18:33 - 00000000 ____D C:\WINDOWS\system32\ReinstallBackups 2013-11-18 18:34 - 2005-07-20 16:37 - 00025080 ____C C:\Documents and Settings\jaca\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2013-11-14 17:09 - 2013-11-14 17:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$ 2013-11-14 17:09 - 2013-11-14 17:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$ 2013-11-14 17:09 - 2013-11-14 17:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$ 2013-11-14 17:09 - 2013-11-14 17:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$ 2013-11-14 17:03 - 2013-08-14 05:41 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-11-14 16:58 - 2009-01-15 19:37 - 80340640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-11-11 07:19 - 2009-04-16 18:27 - 00000000 ___RD C:\Documents and Settings\jaca\Pulpit\JACEK Some content of TEMP: ==================== C:\Documents and Settings\jaca\Ustawienia lokalne\temp\DataCard_Setup.exe C:\Documents and Settings\jaca\Ustawienia lokalne\temp\ResetDevice.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2001-10-26 18:29] - [2008-04-14 18:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\Windows\System32\winlogon.exe [2001-10-26 18:30] - [2008-04-14 18:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\Windows\System32\svchost.exe [2001-10-26 18:30] - [2008-04-14 18:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2001-10-26 18:30] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\Windows\System32\User32.dll [2001-10-26 18:29] - [2008-04-14 18:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\Windows\System32\userinit.exe [2001-10-26 18:30] - [2008-04-14 18:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2001-10-26 17:57] - [2008-04-14 17:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================