Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:14-05-2014
Ran by Maciek (administrator) on MACIEK-71D41B98 on 14-05-2014 21:50:34
Running from C:\Documents and Settings\Maciek\Pulpit
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 6
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(Cherished Technololgy LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgwdsvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgemcx.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Creative Technology Ltd) C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
(Leadtek Research Inc.) C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [GBB36X Configure] => C:\WINDOWS\system32\JMRaidTool.exe [356352 2006-07-12] (Gigabyte Technology Corp.)
HKLM\...\Run: [CTSysVol] => C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe [57344 2003-09-17] (Creative Technology Ltd)
HKLM\...\Run: [NvCplDaemon] => C:\WINDOWS\system32\NvCpl.dll [15517472 2013-01-31] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] => C:\WINDOWS\system32\NvMCTray.dll [108832 2013-01-31] (NVIDIA Corporation)
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1982312 2013-01-31] ()
HKLM\...\Run: [WinFast Schedule] => C:\Program Files\WinFast\WFTVFM\WFWIZ.exe [368640 2006-08-24] (Leadtek Research Inc.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2013\avgui.exe [4411952 2014-01-21] (AVG Technologies CZ, s.r.o.)
HKLM\...\runonceex: [Flag] - 2
AppInit_DLLs: C:\PROGRA~1\SupTab\SEARCH~1.DLL => C:\Program Files\SupTab\SearchProtect32.dll [85504 2014-03-05] (Skytech Co., Ltd.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1395339708&from=cor&uid=_
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1395339708&from=cor&uid=_&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1395339708&from=cor&uid=_
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1395339708&from=cor&uid=_&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1395339708&from=cor&uid=_
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1395339708&from=cor&uid=_&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1395339708&from=cor&uid=_&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1395339708&from=cor&uid=_
SearchScopes: HKLM - DefaultScope value is missing.
BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.100

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.2321 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.1483 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

========================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 IePluginService; C:\Documents and Settings\All Users\Dane aplikacji\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-03-01] (Oracle Corporation)
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2004-12-13] (Ulead Systems, Inc.)
R2 Wpm; C:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe [496640 2014-03-20] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

R1 AVGIDSDriver; C:\WINDOWS\System32\DRIVERS\avgidsdriverx.sys [208184 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [22328 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [39224 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [182072 2014-04-15] (AVG Technologies CZ, s.r.o.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S3 cpuz135; C:\Program Files\CPUID\PC Wizard 2012\pcwiz_x32.sys [24880 2012-08-11] (CPUID)
S3 ctdvda2k; C:\WINDOWS\System32\drivers\ctdvda2k.sys [332800 2003-10-14] (Creative Technology Ltd)
R3 dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [223128 2014-02-27] ()
R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-14] (Microsoft Corporation)
R3 ha10kx2k; C:\WINDOWS\System32\drivers\ha10kx2k.sys [904496 2003-10-21] (Creative Technology Ltd)
R3 hap16v2k; C:\WINDOWS\System32\drivers\hap16v2k.sys [148432 2003-10-21] (Creative Technology Ltd)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51088 2004-06-22] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2004-06-22] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2004-06-22] (HP)
R0 JGOGO; C:\WINDOWS\System32\DRIVERS\JGOGO.sys [6912 2006-02-07] (JMicron )
R0 JRAID; C:\WINDOWS\System32\DRIVERS\jraid.sys [41728 2006-07-20] (JMicron Technology Corp.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R2 PfDetNT; C:\WINDOWS\system32\drivers\PfModNT.sys [15840 2003-03-05] (Creative Technology Ltd.)
R3 SNDM360; C:\WINDOWS\System32\DRIVERS\sndm360.sys [229760 2003-12-08] ()
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [642560 2014-02-27] ()
R0 viamraid; C:\WINDOWS\System32\DRIVERS\viamraid.sys [117248 2008-07-09] (VIA Technologies inc,.ltd)
R3 WFIOCTL; C:\Program Files\WinFast\WFTVFM\WFIOCTL.SYS [9446 2005-01-06] (Leadtek Research Inc.)
R3 WFPVRBAR; C:\WINDOWS\System32\drivers\WFPVRBAR.sys [9728 2006-04-10] (Copyright @2000-2006 Leadtek Research Inc.)
R2 WFPVRENC; C:\WINDOWS\System32\drivers\wfpvrenc.sys [299392 2006-04-10] (Copyright @2000-2006 Leadtek Research Inc.)
R2 WFPVRTUNER; C:\WINDOWS\System32\drivers\wfpvrtun.sys [33408 2006-04-10] (Copyright @2000-2006 Leadtek Research Inc.)
R2 WFPVRVIDEO; C:\WINDOWS\System32\drivers\wfpvrcap.sys [162816 2006-04-10] (Copyright @2000-2006 Leadtek Research Inc.)
R3 yukonwxp; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [248192 2006-07-12] (Marvell)
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-14 21:50 - 2014-05-14 21:50 - 00010329 _____ () C:\Documents and Settings\Maciek\Pulpit\FRST.txt
2014-05-14 21:49 - 2014-05-14 21:50 - 00000000 ____D () C:\FRST
2014-05-14 21:48 - 2014-05-14 21:49 - 01056256 _____ (Farbar) C:\Documents and Settings\Maciek\Pulpit\FRST.exe
2014-05-08 22:28 - 2014-05-08 22:28 - 00013392 _____ () C:\Documents and Settings\Maciek\Moje dokumenty\cc_20140508_222823.reg
2014-05-07 17:42 - 2014-05-07 17:42 - 00000579 _____ () C:\Documents and Settings\Ania\Pulpit\Skrót do Catz.lnk
2014-05-07 16:34 - 2014-05-07 16:34 - 00000571 _____ () C:\Documents and Settings\Maciek\Pulpit\Planet Horse.lnk
2014-04-25 20:22 - 2014-04-25 20:22 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\GG
2014-04-25 18:19 - 2014-04-25 18:19 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG
2014-04-22 16:42 - 2014-04-22 16:42 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft
2014-04-20 21:35 - 2014-04-20 21:35 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Avg_Update_0414b
2014-04-17 11:39 - 2014-05-14 17:44 - 00000998 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-73586283-527237240-725345543-1004UA.job
2014-04-17 11:39 - 2014-05-11 11:44 - 00000976 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-73586283-527237240-725345543-1004Core.job
2014-04-17 11:39 - 2014-04-17 11:40 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Facebook
2014-04-15 18:22 - 2014-04-15 18:22 - 02868256 _____ () C:\Documents and Settings\Ania\Moje dokumenty\Architektura.pptx

==================== One Month Modified Files and Folders =======

2014-05-14 21:50 - 2014-05-14 21:50 - 00010329 _____ () C:\Documents and Settings\Maciek\Pulpit\FRST.txt
2014-05-14 21:50 - 2014-05-14 21:49 - 00000000 ____D () C:\FRST
2014-05-14 21:50 - 2014-02-25 21:58 - 00000000 ____D () C:\Documents and Settings\Maciek\Pulpit
2014-05-14 21:49 - 2014-05-14 21:48 - 01056256 _____ (Farbar) C:\Documents and Settings\Maciek\Pulpit\FRST.exe
2014-05-14 21:17 - 2014-03-20 23:37 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-05-14 21:16 - 2014-02-25 21:53 - 01113899 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-14 21:15 - 2014-02-25 22:48 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-05-14 21:15 - 2014-02-25 22:48 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-05-14 21:15 - 2014-02-25 21:57 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-05-14 19:12 - 2014-02-26 01:01 - 00000188 ___SH () C:\Documents and Settings\Ania\ntuser.ini
2014-05-14 19:12 - 2014-02-25 22:44 - 00001080 _____ () C:\WINDOWS\system32\settingsbkup.sfm
2014-05-14 19:12 - 2014-02-25 22:44 - 00001080 _____ () C:\WINDOWS\system32\settings.sfm
2014-05-14 19:12 - 2014-02-25 22:43 - 00000384 _____ () C:\WINDOWS\system32\DVCStateBkp-{00000005-00000000-00000001-00001102-00000004-20021102}.dat
2014-05-14 19:12 - 2014-02-25 22:43 - 00000384 _____ () C:\WINDOWS\system32\DVCState-{00000005-00000000-00000001-00001102-00000004-20021102}.dat
2014-05-14 19:12 - 2014-02-25 21:57 - 00032382 _____ () C:\WINDOWS\SchedLgU.Txt
2014-05-14 18:26 - 2014-02-27 14:43 - 00000000 ____D () C:\Documents and Settings\Ania\Dane aplikacji\.minecraft
2014-05-14 17:48 - 2014-02-25 21:58 - 00000188 ___SH () C:\Documents and Settings\Maciek\ntuser.ini
2014-05-14 17:44 - 2014-04-17 11:39 - 00000998 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-73586283-527237240-725345543-1004UA.job
2014-05-14 17:10 - 2014-04-07 21:00 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\MFAData
2014-05-13 20:18 - 2014-02-26 20:01 - 00000000 ____D () C:\Documents and Settings\Maciek\Dane aplikacji\GG
2014-05-13 17:33 - 2001-12-24 12:41 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-05-11 11:44 - 2014-04-17 11:39 - 00000976 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-73586283-527237240-725345543-1004Core.job
2014-05-08 22:29 - 2014-02-25 22:44 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-05-08 22:28 - 2014-05-08 22:28 - 00013392 _____ () C:\Documents and Settings\Maciek\Moje dokumenty\cc_20140508_222823.reg
2014-05-08 22:28 - 2014-02-25 21:58 - 00000000 ___RD () C:\Documents and Settings\Maciek\Moje dokumenty
2014-05-08 22:27 - 2014-03-01 13:30 - 00000000 ____D () C:\WINDOWS\Minidump
2014-05-08 22:27 - 2014-02-25 21:58 - 00000000 ____D () C:\Documents and Settings\Maciek
2014-05-07 17:42 - 2014-05-07 17:42 - 00000579 _____ () C:\Documents and Settings\Ania\Pulpit\Skrót do Catz.lnk
2014-05-07 17:42 - 2014-02-26 01:01 - 00000000 ____D () C:\Documents and Settings\Ania\Pulpit
2014-05-07 16:37 - 2014-02-25 21:52 - 00000000 ____D () C:\WINDOWS\system32\DirectX
2014-05-07 16:34 - 2014-05-07 16:34 - 00000571 _____ () C:\Documents and Settings\Maciek\Pulpit\Planet Horse.lnk
2014-05-07 16:34 - 2014-03-07 17:36 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\City Interactive
2014-04-30 22:20 - 2014-02-26 00:57 - 00000781 _____ () C:\WINDOWS\wincmd.ini
2014-04-30 21:31 - 2014-02-26 00:31 - 00000000 ____D () C:\Documents and Settings\Maciek\Dane aplikacji\foobar2000
2014-04-29 22:28 - 2014-02-26 20:01 - 00000000 ____D () C:\Documents and Settings\Maciek\Ustawienia lokalne\Dane aplikacji\GG
2014-04-25 20:22 - 2014-04-25 20:22 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\GG
2014-04-25 20:22 - 2014-02-25 22:44 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-04-25 18:19 - 2014-04-25 18:19 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG
2014-04-22 16:42 - 2014-04-22 16:42 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft
2014-04-20 21:35 - 2014-04-20 21:35 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Avg_Update_0414b
2014-04-17 11:40 - 2014-04-17 11:39 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Facebook
2014-04-17 11:39 - 2014-02-26 01:01 - 00000000 ___HD () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji
2014-04-15 21:40 - 2014-02-25 21:58 - 00000000 ___RD () C:\Documents and Settings\Maciek\Moje dokumenty\Moje obrazy
2014-04-15 18:28 - 2014-02-26 01:01 - 00000000 ___RD () C:\Documents and Settings\Ania\Moje dokumenty
2014-04-15 18:22 - 2014-04-15 18:22 - 02868256 _____ () C:\Documents and Settings\Ania\Moje dokumenty\Architektura.pptx
2014-04-15 13:35 - 2013-03-21 03:08 - 00182072 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgtdix.sys

Some content of TEMP:
====================
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\AdNaganAdvert.dll
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\A~NSISu_.exe
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\Bit32.tmp.exe
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\Tsu21A0B9D2.dll
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\Tsu29BCACD2.dll


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2004-08-04 00:44] - [2008-04-14 23:51] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\WINDOWS\system32\winlogon.exe
[2004-08-04 00:44] - [2008-04-14 23:51] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2004-08-04 00:44] - [2008-04-14 23:51] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2004-08-04 00:44] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\WINDOWS\system32\User32.dll
[2004-08-04 00:44] - [2008-04-14 23:50] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2004-08-04 00:44] - [2008-04-14 23:51] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2004-08-04 00:44] - [2009-02-09 12:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2004-08-04 00:36] - [2008-04-14 22:31] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================