Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01 Ran by Andrzej Jankowski (administrator) on ANDRZEJ on 16-03-2014 07:33:15 Running from C:\Documents and Settings\Andrzej Jankowski\Pulpit Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe () C:\WINDOWS\System32\WLTRYSVC.EXE (Broadcom Corporation) C:\WINDOWS\System32\bcmwltry.exe (Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe () C:\WINDOWS\system32\dmwu.exe (InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Broadcom Corporation) C:\WINDOWS\system32\WLTRAY.exe (Hewlett-Packard Co.) C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe (Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\smax4.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe (Microsoft Corporation) C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Skype Technologies S.A.) C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe () C:\WINDOWS\system32\jmdp\stij.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) C:\Program Files\Internet Explorer\IEXPLORE.EXE (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [QlbCtrl] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [177456 2007-11-06] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\WINDOWS\system32\WLTRAY.exe [1499136 2008-02-01] (Broadcom Corporation) HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [472632 2007-05-11] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [HP Software Update] - c:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49152 2005-02-16] (Hewlett-Packard Co.) HKLM\...\Run: [Cpqset] - C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe [61440 2007-09-20] () HKLM\...\Run: [SoundMax] - C:\Program Files\Analog Devices\SoundMAX\smax4.exe [729088 2006-07-13] (Analog Devices, Inc.) HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-10-03] (Intel Corporation) HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Java\jre6\bin\jusched.exe" HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1040384 2008-03-28] (Synaptics, Inc.) HKLM\...\Run: [MSConfig] - C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE [171520 2008-04-14] (Microsoft Corporation) Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.) Winlogon\Notify\DeviceNP: C:\WINDOWS\system32\DeviceNP.dll (Hewlett-Packard Limited) HKU\.DEFAULT\...\Run: [DWQueuedReporting] - C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation) HKU\S-1-5-21-839522115-1960408961-725345543-1004\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [455968 2007-10-18] (Hewlett-Packard Company) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Windows Search.lnk ShortcutTarget: Windows Search.lnk -> C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation) Startup: C:\Documents and Settings\Andrzej Jankowski\Menu Start\Programy\Autostart\Skrót do msseces.lnk ShortcutTarget: Skrót do msseces.lnk -> C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={20349920-CFB8-4131-8282-4C6F85F87FC6}&&st=23 BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll [304128 2009-05-24] (Microsoft Corporation) Tcpip\..\Interfaces\{0781E40C-7641-4A1C-AD6A-C0950C18589F}: [NameServer]80.51.84.1,194.204.159.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\Andrzej Jankowski\Dane aplikacji\Mozilla\Firefox\Profiles\d4uz8cfl.default-1347300870218 FF NewTab: www.google.pl FF Homepage: www.google.pl FF Keyword.URL: www.google.pl FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.) FF SearchPlugin: C:\Documents and Settings\Andrzej Jankowski\Dane aplikacji\Mozilla\Firefox\Profiles\d4uz8cfl.default-1347300870218\searchplugins\SweetIM Search.xml FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-15] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2012-03-14] ========================== Services (Whitelisted) ================= S3 FLCDLOCK; C:\WINDOWS\system32\flcdlock.exe [172131 2007-04-30] (Hewlett-Packard Ltd) R2 IBUpdaterService; C:\WINDOWS\system32\dmwu.exe [1633072 2014-03-11] () R2 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2012-03-14] (Sun Microsystems, Inc.) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation) R2 Skype C2C Service; C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) R2 wltrysvc; C:\WINDOWS\System32\bcmwltry.exe [1265664 2008-02-01] (Broadcom Corporation) ==================== Drivers (Whitelisted) ==================== R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [868298 2007-02-14] (Broadcom Corporation.) S3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [67960 2007-02-14] (Broadcom Corporation.) S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation) S3 DAMDrv; C:\WINDOWS\System32\DRIVERS\DAMDrv.sys [30008 2007-04-23] (Hewlett-Packard Development Company L.P.) R0 MpFilter; C:\WINDOWS\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation) S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) S3 NETw4x32; C:\WINDOWS\System32\DRIVERS\NETw4x32.sys [2236032 2007-09-26] (Intel Corporation) R3 NETw5x32; C:\WINDOWS\System32\DRIVERS\NETw5x32.sys [3636864 2008-11-17] (Intel Corporation) S2 ADILOADER; System32\Drivers\adildr.sys [X] S3 adiusbaw; system32\DRIVERS\adiusbaw.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] U1 eabfiltr; S4 IntelIde; No ImagePath U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U3 TlntSvr; S3 UIUSys; system32\DRIVERS\UIUSYS.SYS [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-16 07:33 - 2014-03-16 07:33 - 00012060 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\FRST.txt 2014-03-16 07:31 - 2014-03-16 07:33 - 00000000 ____D () C:\FRST 2014-03-16 07:30 - 2014-03-16 07:30 - 00380416 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\ft7rptmg.exe 2014-03-16 07:28 - 2014-03-16 07:29 - 01145856 _____ (Farbar) C:\Documents and Settings\Andrzej Jankowski\Pulpit\FRST.exe 2014-03-15 20:46 - 2014-03-15 20:46 - 00075876 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\OTL.Txt 2014-03-15 20:46 - 2014-03-15 20:46 - 00040932 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\Extras.Txt 2014-03-15 20:37 - 2014-03-15 20:37 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Andrzej Jankowski\Pulpit\OTL.exe 2014-03-15 20:27 - 2014-03-15 20:27 - 00280204 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\WindowsUpdateDiagnostic.diagcab 2014-03-15 20:16 - 2014-03-15 20:16 - 00000348 _____ () C:\WINDOWS\spupdsvc.log 2014-03-15 20:16 - 2014-03-15 20:16 - 00000000 __HDC () C:\WINDOWS\$NtUninstallXPSEPSCLP$ 2014-03-15 20:16 - 2014-03-15 20:16 - 00000000 ____D () C:\WINDOWS\LastGood 2014-03-15 20:16 - 2006-06-29 13:07 - 00014048 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg2.dll 2014-03-15 19:57 - 2014-03-15 19:57 - 00000000 ____D () C:\WINDOWS\system32\jmdp 2014-03-15 19:53 - 2014-03-15 19:53 - 00001472 _____ () C:\WINDOWS\COM+.log 2014-03-15 19:47 - 2014-03-15 19:47 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB963093$ 2014-03-15 19:46 - 2014-03-15 19:47 - 00011660 _____ () C:\WINDOWS\KB963093.log 2014-03-15 19:46 - 2014-03-15 19:46 - 00000142 _____ () C:\Documents and Settings\Andrzej Jankowski\Ustawienia lokalne\Dane aplikacji\fusioncache.dat 2014-03-15 19:19 - 2014-03-15 19:19 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2808679$ 2014-03-15 19:14 - 2014-03-15 19:14 - 00017566 _____ () C:\WINDOWS\KB2632503-IE8.log 2014-03-15 19:13 - 2014-03-15 19:14 - 00016798 _____ () C:\WINDOWS\KB2598845-IE8.log 2014-03-15 18:52 - 2014-03-15 18:52 - 00017445 _____ () C:\WINDOWS\KB2492386.log 2014-03-15 18:52 - 2014-03-15 18:52 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2492386$ 2014-03-15 18:51 - 2014-03-15 19:22 - 00065536 _____ () C:\WINDOWS\system32\config\WindowsPowerShell.evt 2014-03-15 18:51 - 2014-03-15 19:22 - 00065536 _____ () C:\WINDOWS\system32\config\EventForwarding-Operational.Evt 2014-03-15 18:51 - 2014-03-15 18:51 - 00011327 _____ () C:\WINDOWS\basecsp.log 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 __HDC () C:\WINDOWS\$NtUninstallbasecsp$ 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 __HDC () C:\WINDOWS\$968930Uinstall_KB968930$ 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 ____D () C:\WINDOWS\system32\winrm 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 ____D () C:\WINDOWS\system32\WindowsPowerShell 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 ____D () C:\WINDOWS\$NtUninstallKB968930$ 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 ____D () C:\Program Files\LSI SoftModem 2014-03-15 18:49 - 2014-03-15 18:49 - 00001799 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Windows Search.lnk 2014-03-15 18:49 - 2014-03-15 18:49 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Dane aplikacji\Windows Desktop Search 2014-03-15 18:48 - 2014-03-15 19:54 - 00000000 ____D () C:\Program Files\Windows Desktop Search 2014-03-15 18:48 - 2014-03-15 18:49 - 00029405 _____ () C:\WINDOWS\KB940157.log 2014-03-15 18:48 - 2014-03-15 18:48 - 00009477 _____ () C:\WINDOWS\KB915800-v4.log 2014-03-15 18:48 - 2014-03-15 18:48 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB940157$ 2014-03-15 18:48 - 2014-03-15 18:48 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB915800-v4$ 2014-03-15 18:48 - 2014-03-15 18:48 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy 2014-03-15 18:48 - 2008-03-07 18:02 - 00192000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\offfilt.dll 2014-03-15 18:48 - 2008-03-07 18:02 - 00098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nlhtml.dll 2014-03-15 18:48 - 2008-03-07 18:02 - 00029696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mimefilt.dll 2014-03-15 18:44 - 2014-03-15 19:19 - 00024437 _____ () C:\WINDOWS\KB2808679.log 2014-03-15 18:43 - 2011-03-11 15:11 - 00225262 ____C () C:\WINDOWS\system32\dllcache\msimain.sdb 2014-03-15 16:07 - 2008-04-14 19:20 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidserv.dll 2014-03-15 16:07 - 2008-04-14 19:20 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidserv.dll 2014-03-13 20:27 - 2014-03-15 19:47 - 00005539 _____ () C:\WINDOWS\updspapi.log 2014-03-13 20:27 - 2014-03-15 18:24 - 00141654 _____ () C:\WINDOWS\KB2925418-IE8.log 2014-03-13 20:27 - 2014-03-13 20:27 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2930275$ 2014-03-13 20:27 - 2014-03-13 20:27 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2929961$ 2014-03-13 19:38 - 2014-03-13 20:27 - 00132462 _____ () C:\WINDOWS\KB2930275.log 2014-03-13 19:38 - 2014-03-13 20:27 - 00129318 _____ () C:\WINDOWS\KB2929961.log 2014-03-06 18:25 - 2014-03-15 20:07 - 00000246 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2014-03-06 18:25 - 2014-03-08 21:28 - 00000240 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job 2014-03-05 19:47 - 2014-03-15 20:16 - 00086560 _____ () C:\WINDOWS\FaxSetup.log 2014-03-05 19:47 - 2014-03-15 20:16 - 00041384 _____ () C:\WINDOWS\ocgen.log 2014-03-05 19:47 - 2014-03-15 20:16 - 00033138 _____ () C:\WINDOWS\tsoc.log 2014-03-05 19:47 - 2014-03-15 20:16 - 00028717 _____ () C:\WINDOWS\comsetup.log 2014-03-05 19:47 - 2014-03-15 20:16 - 00017404 _____ () C:\WINDOWS\ntdtcsetup.log 2014-03-05 19:47 - 2014-03-15 20:16 - 00013831 _____ () C:\WINDOWS\iis6.log 2014-03-05 19:47 - 2014-03-15 20:16 - 00005404 _____ () C:\WINDOWS\ocmsn.log 2014-03-05 19:47 - 2014-03-15 20:16 - 00004326 _____ () C:\WINDOWS\msgsocm.log 2014-03-05 19:47 - 2014-03-15 20:16 - 00001374 _____ () C:\WINDOWS\imsins.log 2014-03-05 19:47 - 2014-03-15 19:47 - 00001374 _____ () C:\WINDOWS\imsins.BAK 2014-03-05 19:47 - 2014-03-15 18:49 - 00000116 _____ () C:\WINDOWS\setupact.log 2014-03-05 19:47 - 2014-03-05 19:47 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2934207$ 2014-03-05 19:47 - 2014-03-05 19:47 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-03-05 19:46 - 2014-03-05 19:47 - 00004975 _____ () C:\WINDOWS\KB2934207.log 2014-03-05 19:05 - 2014-02-27 00:28 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe 2014-03-05 19:05 - 2014-02-27 00:28 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe 2014-02-27 10:59 - 2014-03-15 20:16 - 00072627 _____ () C:\WINDOWS\setupapi.log 2014-02-26 21:42 - 2014-03-11 20:37 - 00001209 _____ () C:\WINDOWS\wmsetup.log 2014-02-26 17:07 - 2014-02-26 17:07 - 00026884 _____ () C:\Documents and Settings\Andrzej Jankowski\Moje dokumenty\cc_20140226_170714.reg 2014-02-26 16:58 - 2014-02-11 18:49 - 00000426 _____ () C:\AVScanner.ini 2014-02-15 16:38 - 2014-02-15 16:39 - 00000000 ____D () C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2014-03-16 07:33 - 2014-03-16 07:33 - 00012060 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\FRST.txt 2014-03-16 07:33 - 2014-03-16 07:31 - 00000000 ____D () C:\FRST 2014-03-16 07:33 - 2008-02-01 01:37 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Pulpit 2014-03-16 07:32 - 2010-07-28 09:06 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Moje dokumenty\Pobieranie 2014-03-16 07:30 - 2014-03-16 07:30 - 00380416 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\ft7rptmg.exe 2014-03-16 07:29 - 2014-03-16 07:28 - 01145856 _____ (Farbar) C:\Documents and Settings\Andrzej Jankowski\Pulpit\FRST.exe 2014-03-15 22:32 - 2008-02-01 02:20 - 00000327 __RSH () C:\boot.ini 2014-03-15 22:32 - 2008-02-01 01:32 - 01655472 _____ () C:\WINDOWS\WindowsUpdate.log 2014-03-15 22:32 - 2006-03-02 12:00 - 00000603 _____ () C:\WINDOWS\win.ini 2014-03-15 22:32 - 2006-03-02 12:00 - 00000239 _____ () C:\WINDOWS\system.ini 2014-03-15 22:20 - 2008-02-01 01:37 - 00000000 ___RD () C:\Documents and Settings\Andrzej Jankowski\Moje dokumenty\Moje obrazy 2014-03-15 22:03 - 2010-06-05 20:54 - 00001058 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-15 21:55 - 2012-04-21 19:03 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-03-15 21:41 - 2008-02-01 01:44 - 00000000 ____D () C:\WINDOWS\Microsoft.NET 2014-03-15 20:46 - 2014-03-15 20:46 - 00075876 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\OTL.Txt 2014-03-15 20:46 - 2014-03-15 20:46 - 00040932 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\Extras.Txt 2014-03-15 20:37 - 2014-03-15 20:37 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Andrzej Jankowski\Pulpit\OTL.exe 2014-03-15 20:27 - 2014-03-15 20:27 - 00280204 _____ () C:\Documents and Settings\Andrzej Jankowski\Pulpit\WindowsUpdateDiagnostic.diagcab 2014-03-15 20:24 - 2006-03-02 12:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl 2014-03-15 20:17 - 2013-12-23 21:17 - 00000406 ____H () C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job 2014-03-15 20:16 - 2014-03-15 20:16 - 00000348 _____ () C:\WINDOWS\spupdsvc.log 2014-03-15 20:16 - 2014-03-15 20:16 - 00000000 __HDC () C:\WINDOWS\$NtUninstallXPSEPSCLP$ 2014-03-15 20:16 - 2014-03-15 20:16 - 00000000 ____D () C:\WINDOWS\LastGood 2014-03-15 20:16 - 2014-03-05 19:47 - 00086560 _____ () C:\WINDOWS\FaxSetup.log 2014-03-15 20:16 - 2014-03-05 19:47 - 00041384 _____ () C:\WINDOWS\ocgen.log 2014-03-15 20:16 - 2014-03-05 19:47 - 00033138 _____ () C:\WINDOWS\tsoc.log 2014-03-15 20:16 - 2014-03-05 19:47 - 00028717 _____ () C:\WINDOWS\comsetup.log 2014-03-15 20:16 - 2014-03-05 19:47 - 00017404 _____ () C:\WINDOWS\ntdtcsetup.log 2014-03-15 20:16 - 2014-03-05 19:47 - 00013831 _____ () C:\WINDOWS\iis6.log 2014-03-15 20:16 - 2014-03-05 19:47 - 00005404 _____ () C:\WINDOWS\ocmsn.log 2014-03-15 20:16 - 2014-03-05 19:47 - 00004326 _____ () C:\WINDOWS\msgsocm.log 2014-03-15 20:16 - 2014-03-05 19:47 - 00001374 _____ () C:\WINDOWS\imsins.log 2014-03-15 20:16 - 2014-02-27 10:59 - 00072627 _____ () C:\WINDOWS\setupapi.log 2014-03-15 20:16 - 2009-08-15 17:17 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer 2014-03-15 20:16 - 2008-02-01 02:37 - 00000000 ____D () C:\WINDOWS\system32\pl-pl 2014-03-15 20:10 - 2012-09-06 09:22 - 00000436 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.ics 2014-03-15 20:08 - 2008-02-01 02:24 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-03-15 20:08 - 2008-02-01 02:24 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-03-15 20:07 - 2014-03-06 18:25 - 00000246 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2014-03-15 20:07 - 2013-06-07 18:43 - 00000350 _____ () C:\WINDOWS\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job 2014-03-15 20:07 - 2013-06-03 18:40 - 00000350 _____ () C:\WINDOWS\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job 2014-03-15 20:07 - 2010-06-05 20:54 - 00001054 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-15 20:07 - 2008-02-01 01:37 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-03-15 20:06 - 2008-02-01 01:37 - 00032534 _____ () C:\WINDOWS\SchedLgU.Txt 2014-03-15 20:06 - 2008-02-01 01:37 - 00000292 ___SH () C:\Documents and Settings\Andrzej Jankowski\ntuser.ini 2014-03-15 19:57 - 2014-03-15 19:57 - 00000000 ____D () C:\WINDOWS\system32\jmdp 2014-03-15 19:54 - 2014-03-15 18:48 - 00000000 ____D () C:\Program Files\Windows Desktop Search 2014-03-15 19:53 - 2014-03-15 19:53 - 00001472 _____ () C:\WINDOWS\COM+.log 2014-03-15 19:47 - 2014-03-15 19:47 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB963093$ 2014-03-15 19:47 - 2014-03-15 19:46 - 00011660 _____ () C:\WINDOWS\KB963093.log 2014-03-15 19:47 - 2014-03-13 20:27 - 00005539 _____ () C:\WINDOWS\updspapi.log 2014-03-15 19:47 - 2014-03-05 19:47 - 00001374 _____ () C:\WINDOWS\imsins.BAK 2014-03-15 19:46 - 2014-03-15 19:46 - 00000142 _____ () C:\Documents and Settings\Andrzej Jankowski\Ustawienia lokalne\Dane aplikacji\fusioncache.dat 2014-03-15 19:46 - 2008-02-01 01:37 - 00000000 ___HD () C:\Documents and Settings\Andrzej Jankowski\Ustawienia lokalne\Dane aplikacji 2014-03-15 19:46 - 2008-02-01 01:30 - 00000000 ____D () C:\WINDOWS\Registration 2014-03-15 19:45 - 2008-02-01 02:22 - 01236242 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-03-15 19:45 - 2006-03-02 12:00 - 00568272 _____ () C:\WINDOWS\system32\perfh015.dat 2014-03-15 19:45 - 2006-03-02 12:00 - 00110226 _____ () C:\WINDOWS\system32\perfc015.dat 2014-03-15 19:27 - 2013-06-02 11:16 - 00000000 ____D () C:\WINDOWS\system32\WNLT 2014-03-15 19:27 - 2013-06-02 11:16 - 00000000 ____D () C:\WINDOWS\system32\ARFC 2014-03-15 19:23 - 2008-02-09 23:22 - 00000000 ____D () C:\Program Files\Creative 2014-03-15 19:22 - 2014-03-15 18:51 - 00065536 _____ () C:\WINDOWS\system32\config\WindowsPowerShell.evt 2014-03-15 19:22 - 2014-03-15 18:51 - 00065536 _____ () C:\WINDOWS\system32\config\EventForwarding-Operational.Evt 2014-03-15 19:19 - 2014-03-15 19:19 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2808679$ 2014-03-15 19:19 - 2014-03-15 18:44 - 00024437 _____ () C:\WINDOWS\KB2808679.log 2014-03-15 19:14 - 2014-03-15 19:14 - 00017566 _____ () C:\WINDOWS\KB2632503-IE8.log 2014-03-15 19:14 - 2014-03-15 19:13 - 00016798 _____ () C:\WINDOWS\KB2598845-IE8.log 2014-03-15 19:14 - 2010-09-04 19:09 - 00000000 ____D () C:\WINDOWS\ie8updates 2014-03-15 19:14 - 2008-02-01 01:33 - 00000000 ___HD () C:\WINDOWS\$hf_mig$ 2014-03-15 18:58 - 2008-02-01 02:13 - 00000000 ____D () C:\WINDOWS\security 2014-03-15 18:52 - 2014-03-15 18:52 - 00017445 _____ () C:\WINDOWS\KB2492386.log 2014-03-15 18:52 - 2014-03-15 18:52 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2492386$ 2014-03-15 18:52 - 2008-02-01 01:29 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Akcesoria 2014-03-15 18:51 - 2014-03-15 18:51 - 00011327 _____ () C:\WINDOWS\basecsp.log 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 __HDC () C:\WINDOWS\$NtUninstallbasecsp$ 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 __HDC () C:\WINDOWS\$968930Uinstall_KB968930$ 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 ____D () C:\WINDOWS\system32\winrm 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 ____D () C:\WINDOWS\system32\WindowsPowerShell 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 ____D () C:\WINDOWS\$NtUninstallKB968930$ 2014-03-15 18:51 - 2014-03-15 18:51 - 00000000 ____D () C:\Program Files\LSI SoftModem 2014-03-15 18:51 - 2008-02-01 02:13 - 00000000 ____D () C:\WINDOWS\Help 2014-03-15 18:51 - 2008-02-01 01:39 - 00000000 ____D () C:\WINDOWS\system32\ReinstallBackups 2014-03-15 18:49 - 2014-03-15 18:49 - 00001799 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Windows Search.lnk 2014-03-15 18:49 - 2014-03-15 18:49 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Dane aplikacji\Windows Desktop Search 2014-03-15 18:49 - 2014-03-15 18:48 - 00029405 _____ () C:\WINDOWS\KB940157.log 2014-03-15 18:49 - 2014-03-05 19:47 - 00000116 _____ () C:\WINDOWS\setupact.log 2014-03-15 18:49 - 2008-02-01 02:22 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Autostart 2014-03-15 18:49 - 2008-02-01 02:22 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-03-15 18:49 - 2008-02-01 01:37 - 00000000 __RHD () C:\Documents and Settings\Andrzej Jankowski\Dane aplikacji 2014-03-15 18:48 - 2014-03-15 18:48 - 00009477 _____ () C:\WINDOWS\KB915800-v4.log 2014-03-15 18:48 - 2014-03-15 18:48 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB940157$ 2014-03-15 18:48 - 2014-03-15 18:48 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB915800-v4$ 2014-03-15 18:48 - 2014-03-15 18:48 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy 2014-03-15 18:47 - 2008-02-01 02:13 - 00000000 ____D () C:\WINDOWS\system32\mui 2014-03-15 18:47 - 2008-02-01 01:30 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Narzędzia administracyjne 2014-03-15 18:26 - 2013-08-15 08:31 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-03-15 18:24 - 2014-03-13 20:27 - 00141654 _____ () C:\WINDOWS\KB2925418-IE8.log 2014-03-15 18:24 - 2008-02-01 02:35 - 87350280 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-03-15 17:16 - 2008-02-01 03:58 - 00000000 ____D () C:\Program Files\Microsoft.NET 2014-03-15 17:10 - 2011-04-25 18:08 - 00000000 ____D () C:\Program Files\CCleaner 2014-03-15 16:54 - 2008-02-01 02:21 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-03-15 16:52 - 2008-02-01 02:22 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start 2014-03-15 16:52 - 2008-02-01 02:22 - 00000000 ___HD () C:\Documents and Settings\All Users\Szablony 2014-03-15 16:50 - 2008-04-25 19:25 - 00000000 ____D () C:\Program Files\Java 2014-03-15 16:50 - 2008-04-25 19:22 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-03-15 16:49 - 2010-06-05 20:54 - 00000000 ____D () C:\Program Files\Google 2014-03-15 16:49 - 2010-06-05 20:54 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Ustawienia lokalne\Dane aplikacji\Google 2014-03-15 16:48 - 2008-02-09 23:38 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Creative 2014-03-15 16:48 - 2008-02-09 23:23 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Creative 2014-03-15 16:46 - 2008-02-09 23:31 - 00000000 ____D () C:\WINDOWS\CtDrvInstall 2014-03-15 16:44 - 2008-02-01 03:46 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-03-15 16:44 - 2008-02-01 03:46 - 00000000 ____D () C:\Program Files\Adobe 2014-03-15 16:44 - 2008-02-01 03:46 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Ustawienia lokalne\Dane aplikacji\Adobe 2014-03-15 16:44 - 2008-02-01 03:46 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Adobe 2014-03-15 16:42 - 2008-02-01 03:46 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Dane aplikacji\Adobe 2014-03-15 16:36 - 2008-02-01 03:43 - 00000000 ____D () C:\Program Files\SubEdit-Player 2014-03-15 16:34 - 2008-02-01 01:37 - 00000000 ___RD () C:\Documents and Settings\Andrzej Jankowski\Menu Start\Programy 2014-03-15 16:29 - 2008-02-01 01:37 - 00000000 ___RD () C:\Documents and Settings\Andrzej Jankowski\Ulubione 2014-03-15 16:14 - 2008-02-10 10:32 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Dane aplikacji\Skype 2014-03-14 19:25 - 2012-11-22 18:34 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk 2014-03-14 10:23 - 2010-02-14 10:10 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-14 10:23 - 2008-02-01 02:21 - 00267800 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-03-13 20:27 - 2014-03-13 20:27 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2930275$ 2014-03-13 20:27 - 2014-03-13 20:27 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2929961$ 2014-03-13 20:27 - 2014-03-13 19:38 - 00132462 _____ () C:\WINDOWS\KB2930275.log 2014-03-13 20:27 - 2014-03-13 19:38 - 00129318 _____ () C:\WINDOWS\KB2929961.log 2014-03-13 20:26 - 2010-06-03 23:17 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight 2014-03-13 19:55 - 2012-04-21 19:03 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2014-03-13 19:55 - 2011-06-25 19:02 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2014-03-11 20:37 - 2014-02-26 21:42 - 00001209 _____ () C:\WINDOWS\wmsetup.log 2014-03-11 10:36 - 2013-06-02 11:16 - 01633072 _____ () C:\WINDOWS\system32\dmwu.exe 2014-03-11 10:31 - 2013-06-02 11:16 - 00027136 _____ (IncrediMail, Ltd.) C:\WINDOWS\system32\ImHttpComm.dll 2014-03-11 10:27 - 2013-06-02 11:16 - 00632656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr80.dll 2014-03-11 10:27 - 2013-06-02 11:16 - 00554832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp80.dll 2014-03-11 10:27 - 2013-06-02 11:16 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcm80.dll 2014-03-11 10:27 - 2013-06-02 11:16 - 00001870 _____ () C:\WINDOWS\system32\Microsoft.VC80.CRT.manifest 2014-03-09 17:53 - 2011-04-23 10:56 - 00029696 _____ () C:\Documents and Settings\Andrzej Jankowski\Moje dokumenty\WL 97076.xls 2014-03-09 17:53 - 2008-02-01 01:37 - 00000000 ___RD () C:\Documents and Settings\Andrzej Jankowski\Moje dokumenty 2014-03-08 21:28 - 2014-03-06 18:25 - 00000240 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job 2014-03-05 19:47 - 2014-03-05 19:47 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2934207$ 2014-03-05 19:47 - 2014-03-05 19:47 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-03-05 19:47 - 2014-03-05 19:46 - 00004975 _____ () C:\WINDOWS\KB2934207.log 2014-03-01 11:46 - 2011-06-28 20:26 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski\Moje dokumenty\Takie różne 2014-02-27 00:28 - 2014-03-05 19:05 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe 2014-02-27 00:28 - 2014-03-05 19:05 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe 2014-02-26 17:13 - 2013-12-23 21:07 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-02-26 17:13 - 2008-02-01 01:37 - 00000000 ___RD () C:\Documents and Settings\Andrzej Jankowski\Menu Start\Programy\Autostart 2014-02-26 17:07 - 2014-02-26 17:07 - 00026884 _____ () C:\Documents and Settings\Andrzej Jankowski\Moje dokumenty\cc_20140226_170714.reg 2014-02-26 17:04 - 2008-02-01 01:37 - 00000000 ____D () C:\Documents and Settings\Andrzej Jankowski 2014-02-26 16:58 - 2008-02-01 02:22 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-02-26 16:45 - 2013-12-23 21:07 - 00001917 _____ () C:\WINDOWS\epplauncher.mif 2014-02-26 16:41 - 2011-01-18 18:13 - 00000000 ____D () C:\WINDOWS\pss 2014-02-24 17:05 - 2007-08-13 18:54 - 00920064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wininet.dll 2014-02-24 17:05 - 2006-03-02 12:00 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-02-24 12:35 - 2012-06-14 12:01 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll 2014-02-24 12:35 - 2010-09-04 19:02 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll 2014-02-24 12:35 - 2010-09-04 19:02 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll 2014-02-24 12:35 - 2010-09-04 19:02 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll 2014-02-24 12:35 - 2008-03-07 20:17 - 11113472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll 2014-02-24 12:35 - 2008-03-07 20:17 - 02006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll 2014-02-24 12:35 - 2008-03-07 20:17 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll 2014-02-24 12:35 - 2008-03-07 20:17 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 11113472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 06022144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtml.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 01216000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\urlmon.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 00611840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 00184320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iepeers.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 00067072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtmled.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2014-02-24 12:35 - 2007-08-13 18:54 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsproxy.dll 2014-02-24 12:35 - 2007-08-13 18:45 - 01469440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcpl.cpl 2014-02-24 12:35 - 2007-08-13 18:44 - 00206848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\occache.dll 2014-02-24 12:35 - 2007-08-13 18:44 - 00105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\url.dll 2014-02-24 12:35 - 2007-08-13 18:44 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licmgr10.dll 2014-02-24 12:35 - 2007-08-13 18:42 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll 2014-02-24 12:35 - 2007-08-13 18:39 - 00387584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedkcs32.dll 2014-02-24 12:35 - 2007-08-13 18:34 - 02006016 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-02-24 12:35 - 2007-07-13 00:32 - 00759296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 06022144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 01469440 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-24 12:35 - 2006-03-02 12:00 - 01216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00611840 ____N (Microsoft Corporation) C:\WINDOWS\system32\mstime.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00206848 ____N (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-24 12:35 - 2006-03-02 12:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\corpol.dll 2014-02-24 11:59 - 2007-08-13 18:39 - 00174592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ie4uinit.exe 2014-02-24 11:59 - 2006-03-02 12:00 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2014-02-24 11:59 - 2006-03-02 12:00 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-02-16 19:41 - 2012-04-29 13:03 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-02-15 16:39 - 2014-02-15 16:38 - 00000000 ____D () C:\Program Files\Mozilla Firefox Files to move or delete: ==================== C:\Documents and Settings\All Users\issetup.exe C:\Documents and Settings\All Users\sdsetup.exe Some content of TEMP: ==================== C:\Documents and Settings\Andrzej Jankowski\Ustawienia lokalne\temp\UNINSTALL.EXE ==================== Bamital & volsnap Check ================= C:\WINDOWS\explorer.exe [2006-03-02 12:00] - [2008-04-14 18:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\WINDOWS\system32\winlogon.exe [2006-03-02 12:00] - [2008-04-14 18:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\WINDOWS\system32\svchost.exe [2006-03-02 12:00] - [2008-04-14 18:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\WINDOWS\system32\services.exe [2006-03-02 12:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\WINDOWS\system32\User32.dll [2006-03-02 12:00] - [2008-04-14 18:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\WINDOWS\system32\userinit.exe [2006-03-02 12:00] - [2008-04-14 18:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\WINDOWS\system32\rpcss.dll [2006-03-02 12:00] - [2009-02-09 11:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected. C:\WINDOWS\system32\Drivers\volsnap.sys [2006-03-02 12:00] - [2008-04-14 17:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================