Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2014 03
Ran by Wlasciciel (administrator) on NOSALIN-0379FA2 on 12-01-2014 13:07:48
Running from C:\Documents and Settings\Wlasciciel\Moje dokumenty\Pobieranie
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [itype] - C:\Program Files\Microsoft IntelliType Pro\itype.exe [1505144 2009-11-05] (Microsoft Corporation)
HKLM\...\Run: [FullBarre (http://www.laboitakados.com)] - C:\Program Files\Full Web\FullBarre\LaBoitaKadosBarre (www.laboitakados.com)\start.exe [569344 2013-06-18] (Full Web SARL)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5078504 2013-03-21] (ESET)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
IFEO\chrome.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\quickcam.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKLM - DefaultScope value is missing.
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Przelewy24.BHO - {8a194578-81ea-4850-9911-13ba2d71efbd} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 secure.tune-up.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{C86328B3-5D7B-4EC0-8902-D85A104E855A}: [NameServer]87.204.204.204,62.233.233.233

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\lr0xbl0e.default-1389525198296
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-20]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-08-31]

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Google Wallet) - C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-30]

========================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1341664 2013-03-21] (ESET)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-01-09] (Oracle Corporation)
S4 LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [186904 2007-07-20] (Logitech Inc.)
S4 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [141848 2007-07-20] (Logitech Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-31] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R1 eamon; C:\Windows\System32\DRIVERS\eamon.sys [161368 2013-01-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [122240 2013-01-10] (ESET)
R1 epfwtdir; C:\Windows\System32\DRIVERS\epfwtdir.sys [105784 2013-01-10] (ESET)
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2007-10-30] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2007-10-30] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2007-10-30] (HP)
S3 LVcKap; C:\Windows\System32\DRIVERS\LVcKap.sys [2109592 2007-07-20] (Logitech Inc.)
S3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2142488 2007-07-20] (Logitech Inc.)
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25624 2007-07-18] ()
R3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2007-07-19] (Logitech Inc.)
S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [1278104 2007-07-19] (Logitech Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S4 IntelIde; No ImagePath
U3 TlntSvr; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-12 12:49 - 2014-01-12 12:51 - 00000000 ____D C:\AdwCleaner
2014-01-12 12:13 - 2014-01-12 12:13 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Pulpit\Stare dane programu Firefox
2014-01-12 12:08 - 2014-01-12 12:08 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Dane aplikacji\newnext.me
2014-01-11 18:10 - 2014-01-11 18:10 - 00000000 ____D C:\FRST
2014-01-09 15:11 - 2014-01-09 15:11 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-09 15:11 - 2014-01-09 15:10 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-09 15:11 - 2014-01-09 15:10 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-09 15:10 - 2014-01-09 15:10 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-09 15:10 - 2014-01-09 15:10 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-09 15:10 - 2014-01-09 15:10 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-09 15:10 - 2014-01-09 15:10 - 00000000 ____D C:\Program Files\Java
2014-01-09 15:10 - 2014-01-09 15:10 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java
2013-12-20 12:12 - 2013-12-20 12:12 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-01-12 13:08 - 2012-07-23 08:00 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-12 13:07 - 2011-12-01 08:50 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Moje dokumenty\Pobieranie
2014-01-12 12:55 - 2011-11-30 14:14 - 01340867 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-12 12:53 - 2011-11-30 15:05 - 00000159 _____ C:\WINDOWS\wiadebug.log
2014-01-12 12:53 - 2011-11-30 15:05 - 00000050 _____ C:\WINDOWS\wiaservc.log
2014-01-12 12:53 - 2011-11-30 14:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-12 12:52 - 2013-09-19 16:13 - 00065536 _____ C:\WINDOWS\system32\config\TuneUp.evt
2014-01-12 12:52 - 2013-08-27 15:39 - 00001044 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-12 12:52 - 2013-08-27 15:39 - 00001040 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-12 12:52 - 2011-11-30 14:19 - 00000188 ___SH C:\Documents and Settings\Wlasciciel\ntuser.ini
2014-01-12 12:52 - 2011-11-30 14:18 - 00032598 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-12 12:51 - 2014-01-12 12:49 - 00000000 ____D C:\AdwCleaner
2014-01-12 12:43 - 2013-09-03 10:23 - 00000000 ____D C:\Program Files\TunesBarre
2014-01-12 12:43 - 2011-11-30 15:03 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2014-01-12 12:43 - 2011-11-30 15:03 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy
2014-01-12 12:43 - 2011-11-30 14:19 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Pulpit
2014-01-12 12:43 - 2011-11-30 14:19 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Menu Start\Programy
2014-01-12 12:40 - 2013-02-18 00:05 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\Deployment
2014-01-12 12:13 - 2014-01-12 12:13 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Pulpit\Stare dane programu Firefox
2014-01-12 12:08 - 2014-01-12 12:08 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Dane aplikacji\newnext.me
2014-01-12 12:08 - 2011-11-30 15:03 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2014-01-12 12:08 - 2011-11-30 14:19 - 00000000 __RHD C:\Documents and Settings\Wlasciciel\Dane aplikacji
2014-01-12 12:08 - 2011-11-30 14:19 - 00000000 ___RD C:\Documents and Settings\Wlasciciel\Moje dokumenty
2014-01-12 12:08 - 2011-11-30 14:19 - 00000000 ___HD C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji
2014-01-12 12:08 - 2011-11-30 14:19 - 00000000 ____D C:\Documents and Settings\Wlasciciel
2014-01-11 23:26 - 2012-11-09 08:36 - 00065536 _____ C:\WINDOWS\system32\config\WindowsPowerShell.evt
2014-01-11 22:35 - 2011-12-02 16:46 - 00000000 ____D C:\Program Files\Logitech
2014-01-11 22:35 - 2011-12-02 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Logitech
2014-01-11 22:35 - 2011-11-30 15:03 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
2014-01-11 18:10 - 2014-01-11 18:10 - 00000000 ____D C:\FRST
2014-01-10 19:05 - 2011-11-30 14:19 - 00000000 ___RD C:\Documents and Settings\Wlasciciel\Menu Start
2014-01-09 15:11 - 2014-01-09 15:11 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-09 15:10 - 2014-01-09 15:11 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-09 15:10 - 2014-01-09 15:11 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-09 15:10 - 2014-01-09 15:10 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-09 15:10 - 2014-01-09 15:10 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-09 15:10 - 2014-01-09 15:10 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-09 15:10 - 2014-01-09 15:10 - 00000000 ____D C:\Program Files\Java
2014-01-09 15:10 - 2014-01-09 15:10 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java
2014-01-08 14:03 - 2013-05-01 19:33 - 00000000 ____D C:\agia3d
2014-01-07 12:47 - 2008-04-15 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-06 11:21 - 2012-09-04 08:24 - 00000000 ____D C:\Program Files\Z-Barre.com
2014-01-04 15:06 - 2011-12-04 12:22 - 00003716 _____ C:\Documents and Settings\Wlasciciel\Pulpit\wypłaty z carmen.txt
2013-12-30 00:51 - 2013-08-27 15:42 - 00001819 _____ C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2013-12-22 11:15 - 2012-06-20 21:24 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-20 12:12 - 2013-12-20 12:12 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-17 17:48 - 2011-11-30 14:19 - 00000000 ___RD C:\Documents and Settings\Wlasciciel\Ulubione

Some content of TEMP:
====================
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\75981uninstall.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\nsj4B6.tmp.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\nsv474.tmp.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\OpenCL.dll
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\prefetch.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\Quarantine.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\Setup1.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\Sqlite3.dll
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\UninstallRC-8876480.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2008-04-15 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\Windows\System32\User32.dll
[2008-04-15 13:00] - [2008-04-15 13:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\rpcss.dll
[2008-04-15 13:00] - [2009-02-09 11:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 

C:\Windows\System32\Drivers\volsnap.sys
[2008-04-15 13:00] - [2008-04-15 13:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================