Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:12-06-2014 02
Ran by Maciek (administrator) on MACIEK-71D41B98 on 13-06-2014 17:46:29
Running from C:\Documents and Settings\Maciek\Pulpit
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 6
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe
(Creative Technology Ltd) C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
(Leadtek Research Inc.) C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgwdsvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgemcx.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [CTSysVol] => C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe [57344 2003-09-17] (Creative Technology Ltd)
HKLM\...\Run: [NvCplDaemon] => C:\WINDOWS\system32\NvCpl.dll [15517472 2013-01-31] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] => C:\WINDOWS\system32\NvMCTray.dll [108832 2013-01-31] (NVIDIA Corporation)
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1982312 2013-01-31] ()
HKLM\...\Run: [WinFast Schedule] => C:\Program Files\WinFast\WFTVFM\WFWIZ.exe [368640 2006-08-24] (Leadtek Research Inc.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2013\avgui.exe [4411952 2014-01-21] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKLM\...\runonceex: [Flag] - 2
BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2013\avgrsx.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.100

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.2321 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.1483 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

========================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-03-01] (Oracle Corporation)
S3 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [65536 2004-03-18] (HP) [File not signed]
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2004-12-13] (Ulead Systems, Inc.) [File not signed]

==================== Drivers (Whitelisted) ====================

R1 AVGIDSDriver; C:\WINDOWS\System32\DRIVERS\avgidsdriverx.sys [208184 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [22328 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [39224 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [182072 2014-04-15] (AVG Technologies CZ, s.r.o.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S3 cpuz135; C:\Program Files\CPUID\PC Wizard 2012\pcwiz_x32.sys [24880 2012-08-11] (CPUID)
S3 ctdvda2k; C:\WINDOWS\System32\drivers\ctdvda2k.sys [332800 2003-10-14] (Creative Technology Ltd)
R3 dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [223128 2014-02-27] () [File not signed]
R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-14] (Microsoft Corporation)
R3 ha10kx2k; C:\WINDOWS\System32\drivers\ha10kx2k.sys [904496 2003-10-21] (Creative Technology Ltd)
R3 hap16v2k; C:\WINDOWS\System32\drivers\hap16v2k.sys [148432 2003-10-21] (Creative Technology Ltd)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51088 2004-06-22] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2004-06-22] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2004-06-22] (HP)
R0 JGOGO; C:\WINDOWS\System32\DRIVERS\JGOGO.sys [6912 2006-02-07] (JMicron )
R0 JRAID; C:\WINDOWS\System32\DRIVERS\jraid.sys [41728 2006-07-20] (JMicron Technology Corp.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R2 PfDetNT; C:\WINDOWS\system32\drivers\PfModNT.sys [15840 2003-03-05] (Creative Technology Ltd.)
R3 SNDM360; C:\WINDOWS\System32\DRIVERS\sndm360.sys [229760 2003-12-08] ()
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [642560 2014-02-27] () [File not signed]
R0 viamraid; C:\WINDOWS\System32\DRIVERS\viamraid.sys [117248 2008-07-09] (VIA Technologies inc,.ltd)
R3 WFIOCTL; C:\Program Files\WinFast\WFTVFM\WFIOCTL.SYS [9446 2005-01-06] (Leadtek Research Inc.) [File not signed]
R3 WFPVRBAR; C:\WINDOWS\System32\drivers\WFPVRBAR.sys [9728 2006-04-10] (Copyright @2000-2006 Leadtek Research Inc.) [File not signed]
R2 WFPVRENC; C:\WINDOWS\System32\drivers\wfpvrenc.sys [299392 2006-04-10] (Copyright @2000-2006 Leadtek Research Inc.) [File not signed]
R2 WFPVRTUNER; C:\WINDOWS\System32\drivers\wfpvrtun.sys [33408 2006-04-10] (Copyright @2000-2006 Leadtek Research Inc.) [File not signed]
R2 WFPVRVIDEO; C:\WINDOWS\System32\drivers\wfpvrcap.sys [162816 2006-04-10] (Copyright @2000-2006 Leadtek Research Inc.) [File not signed]
R3 yukonwxp; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [248192 2006-07-12] (Marvell)
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-13 17:46 - 2014-06-13 17:46 - 00009185 _____ () C:\Documents and Settings\Maciek\Pulpit\FRST.txt
2014-06-13 17:39 - 2014-06-13 17:40 - 00000000 ____D () C:\AdwCleaner
2014-06-13 17:39 - 2014-06-13 17:39 - 01333465 _____ () C:\Documents and Settings\Maciek\Pulpit\adwcleaner_3.212.exe
2014-06-13 17:24 - 2014-06-13 17:24 - 01073152 _____ (Farbar) C:\Documents and Settings\Maciek\Pulpit\FRST.exe
2014-06-13 17:07 - 2014-06-13 17:07 - 00000000 __SHD () C:\WINDOWS\CSC
2014-06-11 23:32 - 2014-06-11 23:34 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-07 22:27 - 2014-06-07 22:28 - 00065536 _____ () C:\WINDOWS\Minidump\Mini060714-01.dmp
2014-06-02 20:31 - 2014-06-02 20:39 - 00019612 _____ () C:\WINDOWS\setupapi.log
2014-06-02 20:28 - 2014-06-02 20:28 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Apple Computer
2014-05-31 12:46 - 2014-05-31 12:46 - 00011576 _____ () C:\Documents and Settings\Maciek\Moje dokumenty\cc_20140531_124602.reg
2014-05-29 16:14 - 2014-05-29 16:14 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG
2014-05-27 22:11 - 2014-05-27 22:11 - 02443471 _____ () C:\Documents and Settings\Ania\Pulpit\ponton.mht
2014-05-25 21:24 - 2014-06-12 18:42 - 00102400 ___SH () C:\Documents and Settings\Maciek\Pulpit\Thumbs.db
2014-05-23 17:44 - 2014-05-23 17:44 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB961118$
2014-05-23 16:56 - 2009-01-09 21:19 - 01089883 ____C () C:\WINDOWS\system32\dllcache\ntprint.cat
2014-05-22 10:06 - 2014-05-30 09:09 - 00000000 ____D () C:\Documents and Settings\Ania\Pulpit\RA2
2014-05-22 09:48 - 2014-05-22 09:48 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Mentalmeisters
2014-05-22 09:41 - 2014-05-22 09:41 - 00000000 __HDC () C:\WINDOWS\$NtUninstallXPSEPSCLP$
2014-05-22 09:41 - 2006-06-29 13:07 - 00014048 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg2.dll
2014-05-22 09:39 - 2014-05-23 17:28 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-05-22 09:39 - 2014-05-22 09:39 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-05-22 09:39 - 2014-05-22 09:39 - 00000000 ____D () C:\Program Files\MSBuild
2014-05-22 09:38 - 2008-07-06 14:06 - 01676288 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll
2014-05-22 09:38 - 2008-07-06 14:06 - 01676288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpssvcs.dll
2014-05-22 09:38 - 2008-07-06 14:06 - 00575488 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsshhdr.dll
2014-05-22 09:38 - 2008-07-06 14:06 - 00575488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpsshhdr.dll
2014-05-22 09:38 - 2008-07-06 14:06 - 00117760 ____N (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2014-05-22 09:38 - 2008-07-06 14:06 - 00089088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\filterpipelineprintproc.dll
2014-05-22 09:38 - 2008-07-06 12:50 - 00597504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\printfilterpipelinesvc.exe
2014-05-21 20:30 - 2014-05-21 20:30 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Microsoft Help
2014-05-21 16:02 - 2014-05-21 16:02 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Westwood
2014-05-14 21:49 - 2014-06-13 17:46 - 00000000 ____D () C:\FRST

==================== One Month Modified Files and Folders =======

2014-06-13 17:46 - 2014-06-13 17:46 - 00009185 _____ () C:\Documents and Settings\Maciek\Pulpit\FRST.txt
2014-06-13 17:46 - 2014-05-14 21:49 - 00000000 ____D () C:\FRST
2014-06-13 17:46 - 2014-02-25 21:58 - 00000000 ____D () C:\Documents and Settings\Maciek\Ustawienia lokalne\Temp
2014-06-13 17:46 - 2014-02-25 21:58 - 00000000 ____D () C:\Documents and Settings\Maciek\Pulpit
2014-06-13 17:44 - 2014-04-17 11:39 - 00000998 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-73586283-527237240-725345543-1004UA.job
2014-06-13 17:44 - 2014-02-25 21:53 - 01920961 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-13 17:43 - 2014-04-03 15:03 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-06-13 17:43 - 2014-02-25 22:48 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-06-13 17:43 - 2014-02-25 22:48 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-06-13 17:42 - 2014-02-25 21:57 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-13 17:41 - 2014-02-25 22:44 - 00001080 _____ () C:\WINDOWS\system32\settingsbkup.sfm
2014-06-13 17:41 - 2014-02-25 22:44 - 00001080 _____ () C:\WINDOWS\system32\settings.sfm
2014-06-13 17:41 - 2014-02-25 22:43 - 00000384 _____ () C:\WINDOWS\system32\DVCStateBkp-{00000005-00000000-00000001-00001102-00000004-20021102}.dat
2014-06-13 17:41 - 2014-02-25 22:43 - 00000384 _____ () C:\WINDOWS\system32\DVCState-{00000005-00000000-00000001-00001102-00000004-20021102}.dat
2014-06-13 17:41 - 2014-02-25 21:58 - 00000188 ___SH () C:\Documents and Settings\Maciek\ntuser.ini
2014-06-13 17:41 - 2014-02-25 21:57 - 00032518 _____ () C:\WINDOWS\SchedLgU.Txt
2014-06-13 17:40 - 2014-06-13 17:39 - 00000000 ____D () C:\AdwCleaner
2014-06-13 17:40 - 2014-02-25 22:44 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-06-13 17:40 - 2014-02-25 21:58 - 00000000 __RHD () C:\Documents and Settings\Maciek\Dane aplikacji
2014-06-13 17:39 - 2014-06-13 17:39 - 01333465 _____ () C:\Documents and Settings\Maciek\Pulpit\adwcleaner_3.212.exe
2014-06-13 17:24 - 2014-06-13 17:24 - 01073152 _____ (Farbar) C:\Documents and Settings\Maciek\Pulpit\FRST.exe
2014-06-13 17:07 - 2014-06-13 17:07 - 00000000 __SHD () C:\WINDOWS\CSC
2014-06-13 16:35 - 2014-02-26 01:01 - 00000188 ___SH () C:\Documents and Settings\Ania\ntuser.ini
2014-06-13 16:31 - 2014-02-26 01:01 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Temp
2014-06-13 15:58 - 2014-04-07 21:00 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\MFAData
2014-06-12 18:42 - 2014-05-25 21:24 - 00102400 ___SH () C:\Documents and Settings\Maciek\Pulpit\Thumbs.db
2014-06-11 23:34 - 2014-06-11 23:32 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-10 23:08 - 2014-02-27 19:32 - 92708840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-10 22:30 - 2001-12-24 12:41 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-06-07 22:28 - 2014-06-07 22:27 - 00065536 _____ () C:\WINDOWS\Minidump\Mini060714-01.dmp
2014-06-07 22:27 - 2014-02-25 22:40 - 136429568 _____ () C:\WINDOWS\MEMORY.DMP
2014-06-03 21:44 - 2014-03-01 19:41 - 00692400 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-06-03 21:44 - 2014-03-01 19:41 - 00070832 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-06-02 20:39 - 2014-06-02 20:31 - 00019612 _____ () C:\WINDOWS\setupapi.log
2014-06-02 20:39 - 2014-02-26 01:01 - 00000000 ____D () C:\Documents and Settings\Ania\Pulpit
2014-06-02 20:28 - 2014-06-02 20:28 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Apple Computer
2014-06-02 20:28 - 2014-02-26 01:01 - 00000000 ___HD () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji
2014-06-01 18:06 - 2014-02-27 14:43 - 00000000 ____D () C:\Documents and Settings\Ania\Dane aplikacji\.minecraft
2014-05-31 12:46 - 2014-05-31 12:46 - 00011576 _____ () C:\Documents and Settings\Maciek\Moje dokumenty\cc_20140531_124602.reg
2014-05-31 12:46 - 2014-02-25 21:58 - 00000000 ___RD () C:\Documents and Settings\Maciek\Moje dokumenty
2014-05-31 12:45 - 2014-03-01 13:30 - 00000000 ____D () C:\WINDOWS\Minidump
2014-05-31 12:45 - 2014-02-25 21:58 - 00000000 ____D () C:\Documents and Settings\Maciek
2014-05-30 09:09 - 2014-05-22 10:06 - 00000000 ____D () C:\Documents and Settings\Ania\Pulpit\RA2
2014-05-29 16:14 - 2014-05-29 16:14 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG
2014-05-29 16:14 - 2014-02-25 22:44 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-05-28 21:33 - 2014-02-27 22:43 - 00000000 ____D () C:\Documents and Settings\Ania\Dane aplikacji\.minecraftzyczu
2014-05-27 22:11 - 2014-05-27 22:11 - 02443471 _____ () C:\Documents and Settings\Ania\Pulpit\ponton.mht
2014-05-25 21:31 - 2014-02-25 23:38 - 00068840 _____ () C:\Documents and Settings\Maciek\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2014-05-23 17:54 - 2014-02-25 22:45 - 01130926 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-05-23 17:54 - 2001-12-24 12:38 - 00526714 _____ () C:\WINDOWS\system32\perfh015.dat
2014-05-23 17:54 - 2001-12-24 12:38 - 00092636 _____ () C:\WINDOWS\system32\perfc015.dat
2014-05-23 17:44 - 2014-05-23 17:44 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB961118$
2014-05-23 17:29 - 2014-02-25 21:57 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji
2014-05-23 17:28 - 2014-05-22 09:39 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-05-22 13:28 - 2014-02-25 22:44 - 02144584 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-05-22 11:44 - 2014-04-17 11:39 - 00000976 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-73586283-527237240-725345543-1004Core.job
2014-05-22 10:05 - 2014-02-26 01:01 - 00000000 ___HD () C:\Documents and Settings\Ania\Ustawienia lokalne
2014-05-22 09:54 - 2014-02-25 22:44 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-05-22 09:48 - 2014-05-22 09:48 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Mentalmeisters
2014-05-22 09:48 - 2014-02-27 22:38 - 00068840 _____ () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2014-05-22 09:45 - 2014-02-25 21:58 - 00000000 ___RD () C:\Documents and Settings\Maciek\Menu Start\Programy
2014-05-22 09:41 - 2014-05-22 09:41 - 00000000 __HDC () C:\WINDOWS\$NtUninstallXPSEPSCLP$
2014-05-22 09:41 - 2014-02-26 20:58 - 00000000 ____D () C:\WINDOWS\system32\pl-pl
2014-05-22 09:40 - 2014-02-25 22:40 - 00000000 ____D () C:\WINDOWS\system32\mui
2014-05-22 09:39 - 2014-05-22 09:39 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-05-22 09:39 - 2014-05-22 09:39 - 00000000 ____D () C:\Program Files\MSBuild
2014-05-22 09:39 - 2014-02-25 22:40 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-05-21 20:49 - 2014-02-26 20:01 - 00000000 ____D () C:\Documents and Settings\Maciek\Dane aplikacji\GG
2014-05-21 20:30 - 2014-05-21 20:30 - 00000000 ____D () C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Microsoft Help
2014-05-21 16:25 - 2014-02-26 21:50 - 00000000 ____D () C:\Documents and Settings\Maciek\Menu Start\Programy\Westwood
2014-05-21 16:02 - 2014-05-21 16:02 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Westwood
2014-05-19 15:11 - 2014-02-26 01:01 - 00000000 ___RD () C:\Documents and Settings\Ania\Menu Start\Programy
2014-05-15 20:40 - 2014-02-27 19:32 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-05-14 22:32 - 2014-04-07 21:00 - 00000000 ____D () C:\Documents and Settings\Maciek\Ustawienia lokalne\Dane aplikacji\Avg2013

Some content of TEMP:
====================
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\AdNaganAdvert.dll
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\A~NSISu_.exe
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\Bit32.tmp.exe
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\Tsu21A0B9D2.dll
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\Tsu29BCACD2.dll
C:\Documents and Settings\Maciek\Ustawienia lokalne\Temp\Quarantine.exe
C:\Documents and Settings\Maciek\Ustawienia lokalne\Temp\Uninst.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================