Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-12-2013 01 Ran by palikot (administrator) on TOONG on 31-12-2013 09:47:18 Running from C:\Documents and Settings\palikot\Pulpit Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Teruten) C:\WINDOWS\system32\FsUsbExService.Exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe (LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe () C:\Program Files\Marvell\61xx\svc\mvraidsvc.exe (Apache Software Foundation) C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (Apache Software Foundation) C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe (Nullsoft, Inc.) C:\Program Files\Winamp\winamp.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1012000 2013-05-16] (NVIDIA Corporation) Winlogon\Notify\Antiwpa: C:\Windows\system32\antiwpa.dll () HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd) HKCU\...\Policies\Explorer: [NoThumbnailCache] 1 ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\programy\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\programy\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt FireFox: ======== FF ProfilePath: C:\Documents and Settings\palikot\Dane aplikacji\Mozilla\Firefox\Profiles\i7u040ve.default-1388479198031 FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - D:\programy\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - D:\programy\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin: @real.com/nppl3260;version=16.0.1.18 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=16.0.1.18 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wolnelektury-pl.xml FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\staged FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ Chrome: ======= CHR HomePage: hxxp://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP CHR RestoreOnStartup: "hxxp://www.google.pl/" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.)) CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Plugin: (Facebook Video Calling Plugin) - C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) CHR Plugin: (GanymedeNet.Detector) - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () CHR Plugin: (Microsoft Office 2010) - D:\programy\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - D:\programy\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Extension: (AdBlock) - C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 ========================== Services (Whitelisted) ================= R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S2 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team) R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1664336 2013-11-29] (LogMeIn Inc.) S4 KMService; C:\WINDOWS\system32\srvany.exe [8192 2012-02-03] () R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151744 2013-12-13] (IObit) R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2013-10-11] (LogMeIn, Inc.) R2 Marvell RAID; C:\Program Files\Marvell\61xx\svc\mvraidsvc.exe [114688 2006-07-26] () S3 Microsoft SharePoint Workspace Audit Service; D:\programy\Microsoft Office\Office14\GROOVE.EXE [30785672 2012-09-20] (Microsoft Corporation) R2 MRUWebService; C:\Program Files\Marvell\61xx\Apache2\bin\Apache.exe [20541 2006-06-26] (Apache Software Foundation) S3 npggsvc; C:\WINDOWS\system32\GameMon.des [4581296 2012-09-10] (INCA Internet Co., Ltd.) R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) ==================== Drivers (Whitelisted) ==================== R3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.) S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative) R1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2012-09-02] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-09-30] (Disc Soft Ltd) R3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2010-06-14] () R2 GenPort; C:\Windows\System32\Drivers\GenPort.sys [4832 1997-10-08] (3Dfx Interactive, Inc.) R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2007-03-08] (HP) R3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2007-03-08] (HP) R3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2007-03-08] (HP) R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [21624 2013-03-23] (REALiX(tm)) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2012-09-02] () R2 MapMem; C:\Windows\System32\Drivers\MapMem.sys [6816 1997-10-08] (3Dfx Interactive, Inc.) S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.) R2 NTRemap; C:\Windows\System32\Drivers\NTRemap.sys [6336 1997-10-08] (3Dfx Interactive, Inc.) S3 PSI; C:\Windows\System32\DRIVERS\psi_mf.sys [15544 2011-12-16] (Secunia) S3 se59bus; C:\Windows\System32\DRIVERS\se59bus.sys [61536 2006-09-05] (MCCI) S3 se59mdfl; C:\Windows\System32\DRIVERS\se59mdfl.sys [9360 2006-09-05] (MCCI) S3 se59mdm; C:\Windows\System32\DRIVERS\se59mdm.sys [97088 2006-09-05] (MCCI) S3 se59obex; C:\Windows\System32\DRIVERS\se59obex.sys [86432 2006-09-05] (MCCI) R3 SG762_XP; C:\Windows\System32\DRIVERS\WlanBZXP.sys [402432 2006-01-19] (ZyDAS Technology Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [466008 2012-11-28] (Duplex Secure Ltd.) S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2013-02-13] (AnchorFree Inc) U3 arynq4pn; C:\Windows\System32\Drivers\arynq4pn.sys [0 ] (Microsoft Corporation) U3 atbccd7l; C:\Windows\System32\Drivers\atbccd7l.sys [0 ] (Microsoft Corporation) U5 ap139eov; C:\Windows\System32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) S4 IntelIde; No ImagePath U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-31 09:47 - 2013-12-31 09:47 - 00015040 _____ C:\Documents and Settings\palikot\Pulpit\FRST.txt 2013-12-31 09:40 - 2013-12-31 09:40 - 00000000 ____D C:\Documents and Settings\palikot\Pulpit\Stare dane programu Firefox 2013-12-31 09:38 - 2013-12-31 09:38 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\newnext.me 2013-12-31 09:37 - 2013-12-31 09:37 - 01064199 _____ (Farbar) C:\Documents and Settings\palikot\Pulpit\FRST.exe 2013-12-30 13:19 - 2011-12-29 15:08 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Ivona 2013-12-27 15:20 - 2013-12-27 15:20 - 00000000 ____D C:\FRST 2013-12-26 16:18 - 2013-12-26 16:18 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\Landwirt2014 2013-12-26 16:17 - 2013-12-26 16:17 - 00000862 _____ C:\Documents and Settings\All Users\Pulpit\Professional Farmer 2014.lnk 2013-12-26 16:17 - 2013-12-26 16:17 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\UIG Entertainment 2013-12-26 15:12 - 2013-12-30 11:38 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\uTorrent 2013-12-26 15:12 - 2013-12-26 15:12 - 00000826 _____ C:\Documents and Settings\palikot\Pulpit\µTorrent.lnk 2013-12-26 15:12 - 2013-12-26 15:12 - 00000826 _____ C:\Documents and Settings\palikot\Menu Start\µTorrent.lnk 2013-12-26 10:34 - 2013-12-26 11:30 - 64153826 _____ C:\Documents and Settings\palikot\Pulpit\Hardstyle mix 1 (2013).wmv 2013-12-25 19:08 - 2013-12-25 19:18 - 01142864 _____ (BitTorrent Inc.) C:\Documents and Settings\palikot\Pulpit\utorrent.exe 2013-12-24 13:45 - 2013-12-24 13:45 - 00000041 _____ C:\Documents and Settings\palikot\Pulpit\Nowy Dokument tekstowy.txt 2013-12-24 12:55 - 2013-12-24 12:55 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\Autodesk 2013-12-24 12:55 - 2013-12-24 12:55 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Autodesk 2013-12-23 16:55 - 2013-12-23 16:55 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\TrackMania 2013-12-23 16:53 - 2013-12-23 16:55 - 00000000 ____D C:\Documents and Settings\palikot\Moje dokumenty\TrackMania 2013-12-23 16:52 - 2013-12-23 16:52 - 00000582 _____ C:\Documents and Settings\All Users\Pulpit\TmUnitedForever.lnk 2013-12-23 16:52 - 2013-12-23 16:52 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\TmUnitedForever 2013-12-23 16:11 - 2013-12-23 16:53 - 00236961 _____ C:\WINDOWS\DirectX.log 2013-12-20 18:36 - 2013-12-31 09:37 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-16 20:24 - 2013-12-16 20:26 - 00000000 ____D C:\AdwCleaner 2013-12-14 19:33 - 2013-12-14 19:33 - 00000000 ____D C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google 2013-12-14 18:25 - 2013-12-26 15:36 - 00026833 _____ C:\WINDOWS\setupapi.log 2013-12-13 21:48 - 2013-12-31 09:45 - 00014300 _____ C:\WINDOWS\AutoKMS.log 2013-12-13 21:47 - 2013-12-31 09:45 - 00119455 _____ C:\WINDOWS\WindowsUpdate.log 2013-12-13 15:48 - 2013-12-13 15:48 - 00000831 _____ C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\recently-used.xbel 2013-12-13 13:09 - 2013-12-13 13:09 - 00000546 _____ C:\Documents and Settings\palikot\Pulpit\Counter-Strike 1.6.lnk 2013-12-13 13:08 - 2013-12-13 13:08 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Counter-Strike 1.6 NonSteam 2013-12-13 12:04 - 2013-12-28 08:22 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\ProductData 2013-12-13 12:04 - 2013-12-13 12:04 - 00000866 _____ C:\Documents and Settings\palikot\Menu Start\Uninstall Programs.lnk 2013-12-13 12:04 - 2013-12-13 12:04 - 00000866 _____ C:\Documents and Settings\All Users\Pulpit\IObit Uninstaller.lnk 2013-12-13 11:47 - 2013-12-13 11:47 - 00000000 __SHD C:\AI_RecycleBin 2013-12-12 21:03 - 2013-12-14 18:25 - 00000082 _____ C:\WINDOWS\setupact.log 2013-12-12 21:03 - 2013-12-12 21:03 - 00000000 _____ C:\WINDOWS\setuperr.log 2013-12-11 11:26 - 2013-12-11 14:26 - 09272200 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-12-03 17:16 - 2013-12-03 17:16 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi ==================== One Month Modified Files and Folders ======= 2013-12-31 09:47 - 2013-12-31 09:47 - 00015040 _____ C:\Documents and Settings\palikot\Pulpit\FRST.txt 2013-12-31 09:47 - 2011-12-28 19:42 - 00000000 ____D C:\Documents and Settings\palikot\Pulpit 2013-12-31 09:45 - 2013-12-13 21:48 - 00014300 _____ C:\WINDOWS\AutoKMS.log 2013-12-31 09:45 - 2013-12-13 21:47 - 00119455 _____ C:\WINDOWS\WindowsUpdate.log 2013-12-31 09:45 - 2013-08-02 18:02 - 00000000 ____D C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi 2013-12-31 09:45 - 2013-05-15 13:14 - 00078848 _____ C:\WINDOWS\KMSEmulator.exe 2013-12-31 09:45 - 2013-05-15 13:14 - 00000204 _____ C:\WINDOWS\Tasks\AutoKMS.job 2013-12-31 09:45 - 2013-05-15 13:14 - 00000202 _____ C:\WINDOWS\Tasks\AutoKMSDaily.job 2013-12-31 09:45 - 2013-03-24 13:10 - 00000237 _____ C:\WINDOWS\wiadebug.log 2013-12-31 09:45 - 2013-03-24 13:10 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-12-31 09:45 - 2013-03-21 11:35 - 00027918 _____ C:\WINDOWS\system32\nvAppTimestamps 2013-12-31 09:44 - 2011-12-28 19:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-12-31 09:43 - 2011-12-28 19:42 - 00000188 ___SH C:\Documents and Settings\palikot\ntuser.ini 2013-12-31 09:43 - 2011-12-28 19:41 - 00032540 _____ C:\WINDOWS\SchedLgU.Txt 2013-12-31 09:42 - 2012-05-01 13:43 - 00000000 ___RD C:\Documents and Settings\palikot\Moje dokumenty\Pobieranie 2013-12-31 09:40 - 2013-12-31 09:40 - 00000000 ____D C:\Documents and Settings\palikot\Pulpit\Stare dane programu Firefox 2013-12-31 09:39 - 2011-12-28 20:29 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2013-12-31 09:39 - 2011-12-28 20:29 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-12-31 09:39 - 2011-12-28 20:27 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2013-12-31 09:38 - 2013-12-31 09:38 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\newnext.me 2013-12-31 09:38 - 2011-12-28 19:42 - 00000000 __RHD C:\Documents and Settings\palikot\Dane aplikacji 2013-12-31 09:37 - 2013-12-31 09:37 - 01064199 _____ (Farbar) C:\Documents and Settings\palikot\Pulpit\FRST.exe 2013-12-31 09:37 - 2013-12-20 18:36 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-31 09:37 - 2011-12-28 19:42 - 00000000 ___RD C:\Documents and Settings\palikot\Moje dokumenty 2013-12-31 09:37 - 2011-12-28 19:42 - 00000000 ___HD C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji 2013-12-31 09:37 - 2011-12-28 19:42 - 00000000 ____D C:\Documents and Settings\palikot 2013-12-31 09:32 - 2012-02-24 22:09 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\TS3Client 2013-12-30 11:38 - 2013-12-26 15:12 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\uTorrent 2013-12-29 13:12 - 2006-03-02 13:00 - 00002300 _____ C:\WINDOWS\system32\wpa.dbl 2013-12-28 08:22 - 2013-12-13 12:04 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\ProductData 2013-12-27 15:20 - 2013-12-27 15:20 - 00000000 ____D C:\FRST 2013-12-26 19:52 - 2013-01-20 16:12 - 00000000 ____D C:\Documents and Settings\palikot\Moje dokumenty\FIFA 10 2013-12-26 16:18 - 2013-12-26 16:18 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\Landwirt2014 2013-12-26 16:18 - 2012-08-21 21:25 - 00000000 ____D C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\SKIDROW 2013-12-26 16:17 - 2013-12-26 16:17 - 00000862 _____ C:\Documents and Settings\All Users\Pulpit\Professional Farmer 2014.lnk 2013-12-26 16:17 - 2013-12-26 16:17 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\UIG Entertainment 2013-12-26 15:36 - 2013-12-14 18:25 - 00026833 _____ C:\WINDOWS\setupapi.log 2013-12-26 15:12 - 2013-12-26 15:12 - 00000826 _____ C:\Documents and Settings\palikot\Pulpit\µTorrent.lnk 2013-12-26 15:12 - 2013-12-26 15:12 - 00000826 _____ C:\Documents and Settings\palikot\Menu Start\µTorrent.lnk 2013-12-26 15:12 - 2011-12-28 19:42 - 00000000 ___RD C:\Documents and Settings\palikot\Menu Start 2013-12-26 11:30 - 2013-12-26 10:34 - 64153826 _____ C:\Documents and Settings\palikot\Pulpit\Hardstyle mix 1 (2013).wmv 2013-12-26 00:16 - 2012-01-03 18:32 - 00131072 _____ C:\WINDOWS\system32\config\WindowsPowerShell.evt 2013-12-25 19:18 - 2013-12-25 19:08 - 01142864 _____ (BitTorrent Inc.) C:\Documents and Settings\palikot\Pulpit\utorrent.exe 2013-12-25 19:13 - 2011-12-28 19:42 - 00000000 ___RD C:\Documents and Settings\palikot\Menu Start\Programy 2013-12-25 19:07 - 2011-12-28 20:29 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start 2013-12-25 15:47 - 2012-12-23 15:54 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\GG 2013-12-25 15:47 - 2012-12-23 15:53 - 00000000 ____D C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\GG 2013-12-25 14:23 - 2013-02-03 13:19 - 00000000 ____D C:\Documents and Settings\palikot\.rainlendar2 2013-12-24 13:45 - 2013-12-24 13:45 - 00000041 _____ C:\Documents and Settings\palikot\Pulpit\Nowy Dokument tekstowy.txt 2013-12-24 12:55 - 2013-12-24 12:55 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\Autodesk 2013-12-24 12:55 - 2013-12-24 12:55 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Autodesk 2013-12-23 22:35 - 2011-12-29 18:52 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\Skype 2013-12-23 16:55 - 2013-12-23 16:55 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\TrackMania 2013-12-23 16:55 - 2013-12-23 16:53 - 00000000 ____D C:\Documents and Settings\palikot\Moje dokumenty\TrackMania 2013-12-23 16:53 - 2013-12-23 16:11 - 00236961 _____ C:\WINDOWS\DirectX.log 2013-12-23 16:53 - 2011-12-28 19:37 - 00000000 ____D C:\WINDOWS\system32\DirectX 2013-12-23 16:52 - 2013-12-23 16:52 - 00000582 _____ C:\Documents and Settings\All Users\Pulpit\TmUnitedForever.lnk 2013-12-23 16:52 - 2013-12-23 16:52 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\TmUnitedForever 2013-12-23 16:05 - 2011-12-28 21:04 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\DAEMON Tools Lite 2013-12-18 17:23 - 2011-12-29 01:13 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\Media Player Classic 2013-12-17 23:27 - 2011-12-29 01:18 - 00131072 _____ C:\WINDOWS\system32\config\OAlerts.evt 2013-12-16 20:26 - 2013-12-16 20:24 - 00000000 ____D C:\AdwCleaner 2013-12-16 18:55 - 2013-01-31 17:43 - 00000000 ____D C:\Program Files\Image-Line 2013-12-16 18:55 - 2013-01-31 17:43 - 00000000 ____D C:\Documents and Settings\palikot\Menu Start\Programy\Image-Line 2013-12-14 19:33 - 2013-12-14 19:33 - 00000000 ____D C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google 2013-12-14 19:33 - 2011-12-28 19:41 - 00000000 ___HD C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji 2013-12-14 18:25 - 2013-12-12 21:03 - 00000082 _____ C:\WINDOWS\setupact.log 2013-12-14 10:59 - 2011-12-30 17:44 - 00000000 ____D C:\WINDOWS\pss 2013-12-14 10:59 - 2011-12-28 20:29 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy\Autostart 2013-12-14 10:58 - 2013-08-02 18:03 - 00000000 ____D C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi 2013-12-13 22:13 - 2013-02-21 17:47 - 00000000 ____D C:\Program Files\Steam 2013-12-13 15:48 - 2013-12-13 15:48 - 00000831 _____ C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\recently-used.xbel 2013-12-13 15:48 - 2013-05-15 14:00 - 00000000 ____D C:\Documents and Settings\palikot\.gimp-2.8 2013-12-13 13:09 - 2013-12-13 13:09 - 00000546 _____ C:\Documents and Settings\palikot\Pulpit\Counter-Strike 1.6.lnk 2013-12-13 13:08 - 2013-12-13 13:08 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Counter-Strike 1.6 NonSteam 2013-12-13 12:25 - 2013-01-27 10:38 - 00000000 ___RD C:\Documents and Settings\palikot\Moje dokumenty\Moje obrazy 2013-12-13 12:19 - 2012-07-16 21:33 - 00000000 ____D C:\WINDOWS\ie8updates 2013-12-13 12:19 - 2011-12-29 18:46 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Skype 2013-12-13 12:16 - 2013-08-09 16:54 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\.minecraft 2013-12-13 12:11 - 2013-05-21 18:44 - 00000000 ____D C:\Documents and Settings\palikot\Pulpit\Muzyka Nowa 2013-12-13 12:11 - 2011-12-28 20:56 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\IObit 2013-12-13 12:07 - 2011-12-28 20:28 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-12-13 12:04 - 2013-12-13 12:04 - 00000866 _____ C:\Documents and Settings\palikot\Menu Start\Uninstall Programs.lnk 2013-12-13 12:04 - 2013-12-13 12:04 - 00000866 _____ C:\Documents and Settings\All Users\Pulpit\IObit Uninstaller.lnk 2013-12-13 12:04 - 2012-01-03 16:41 - 00000000 ____D C:\Program Files\IObit 2013-12-13 12:04 - 2011-12-28 20:56 - 00000000 ____D C:\Documents and Settings\palikot\Dane aplikacji\IObit 2013-12-13 12:04 - 2011-12-28 19:42 - 00000000 ___HD C:\Documents and Settings\palikot\Szablony 2013-12-13 11:59 - 2011-12-28 20:20 - 00000000 ____D C:\WINDOWS\system 2013-12-13 11:53 - 2012-10-25 11:10 - 00000000 ____D C:\Games 2013-12-13 11:47 - 2013-12-13 11:47 - 00000000 __SHD C:\AI_RecycleBin 2013-12-13 11:43 - 2012-03-21 20:44 - 00000000 ____D C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\ChomikBox 2013-12-13 11:42 - 2012-03-21 20:44 - 00000000 ____D C:\Documents and Settings\palikot\.gstreamer-0.10 2013-12-13 11:31 - 2011-12-28 23:23 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Camtasia Studio 7 2013-12-12 21:03 - 2013-12-12 21:03 - 00000000 _____ C:\WINDOWS\setuperr.log 2013-12-11 14:26 - 2013-12-11 11:26 - 09272200 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-12-11 14:26 - 2012-04-10 17:11 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-12-11 14:26 - 2011-12-28 19:56 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-12-05 19:06 - 2011-12-28 20:29 - 01622066 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-12-05 19:06 - 2006-03-02 13:00 - 00694974 _____ C:\WINDOWS\system32\perfh015.dat 2013-12-05 19:06 - 2006-03-02 13:00 - 00156248 _____ C:\WINDOWS\system32\perfc015.dat 2013-12-03 17:16 - 2013-12-03 17:16 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi 2013-12-03 17:16 - 2013-08-02 18:02 - 00000685 _____ C:\Documents and Settings\All Users\Pulpit\LogMeIn Hamachi.lnk 2013-12-03 17:16 - 2013-02-07 16:06 - 00000000 ____D C:\Program Files\LogMeIn Hamachi ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2006-03-02 13:00] - [2008-04-14 22:51] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\Windows\System32\winlogon.exe [2006-03-02 13:00] - [2008-04-14 22:51] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\Windows\System32\svchost.exe [2006-03-02 13:00] - [2008-04-14 22:51] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2006-03-02 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\Windows\System32\User32.dll [2006-03-02 13:00] - [2008-04-14 22:50] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\Windows\System32\userinit.exe [2006-03-02 13:00] - [2008-04-14 22:51] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2006-03-02 13:00] - [2008-04-14 21:31] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================