Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:03-07-2014 Ran by Administrator (administrator) on PC-56702FC7D226 on 03-07-2014 20:51:35 Running from E:\!!Archiwum\!!!Diagnostyka systemu Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (Google Inc.) C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe (IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe (HP) C:\WINDOWS\system32\HPZipm12.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.) C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1956760 2014-06-24] (APN) Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.) ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2014\avgrsx.exe /sync /restart ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gwww.google.pl HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.searchgol.com/?babsrc=HP_ss&mntrId=3C8D0016E642E11B&affID=119357&tt=240913_246&tsp=5020 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dosearches.com/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=hp&from=cor&uid=WDCXWD800JB-00JJC0_WD-WCAM9F80673906739&ts=1384246570 URLSearchHook: HKCU - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.) SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=WDCXWD800JB-00JJC0_WD-WCAM9F80673906739&ts=1384246570&type=default&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=WDCXWD800JB-00JJC0_WD-WCAM9F80673906739&ts=1384246570&type=default&q={searchTerms} SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=WDCXWD800JB-00JJC0_WD-WCAM9F80673906739&ts=1384246570&type=default&q={searchTerms} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=3C8D0016E642E11B&affID=119357&tt=240913_246&tsp=5020 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=WDCXWD800JB-00JJC0_WD-WCAM9F80673906739&ts=1384246570&type=default&q={searchTerms} BHO: Ask Toolbar - {4F524A2D-5637-4300-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll (APN LLC.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File Toolbar: HKLM - Ask Toolbar - {4F524A2D-5637-4300-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll (APN LLC.) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.) FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-06-02] Chrome: ======= CHR HomePage: hxxp://www.google.pl/ CHR StartupUrls: "hxxp://www.google.pl/" CHR Extension: (uTorrentControl_v6) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp [2014-04-16] CHR Extension: (Web Cake) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh [2014-04-16] CHR Extension: (Google Wallet) - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-16] CHR HKLM\...\Chrome\Extension: [cflheckfmhopnialghigdlggahiomebp] - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\CRE\cflheckfmhopnialghigdlggahiomebp.crx [2013-03-26] CHR HKLM\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files\Betcat\WebCakeLayers.crx [2013-08-13] CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-11-12] CHR HKLM\...\Chrome\Extension: [lpadbdkobbgjgonnfnipfngifldcdfin] - C:\Documents and Settings\All Users\Dane aplikacji\AskPartnerNetwork\Toolbar\ORJ-V7-SAT\CRX\ToolbarCR.crx [2014-06-25] CHR HKLM\...\Chrome\Extension: [pljcgbedjplidkdjahbaalanadmjfgop] - C:\Documents and Settings\All Users\Dane aplikacji\AskPartnerNetwork\Toolbar\ORJ-V7C\CRX\ToolbarCR.crx [2014-06-25] CHR HKCU\...\Chrome\Extension: [cflheckfmhopnialghigdlggahiomebp] - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\CRE\cflheckfmhopnialghigdlggahiomebp.crx [2013-03-26] ========================== Services (Whitelisted) ================= R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit) R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [165784 2014-06-24] (APN LLC.) R2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [602112 2010-02-11] (ATI Technologies Inc.) [File not signed] S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] () [File not signed] S2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3644432 2014-05-13] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [292424 2014-05-13] (AVG Technologies CZ, s.r.o.) R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit) R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [69632 2004-09-29] (HP) [File not signed] S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) ==================== Drivers (Whitelisted) ==================== R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [4122368 2008-09-24] (Realtek Semiconductor Corp.) R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [43520 2006-07-01] (Advanced Micro Devices) R3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [3565056 2010-02-11] (ATI Technologies Inc.) [File not signed] R1 Avgdiskx; C:\WINDOWS\System32\DRIVERS\avgdiskx.sys [122136 2014-05-13] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\WINDOWS\System32\DRIVERS\avgidsdriverx.sys [198936 2014-05-13] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [149784 2014-05-13] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [21272 2014-05-13] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [192280 2014-05-13] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [237848 2014-05-13] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [107288 2014-05-13] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [27416 2014-05-13] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [210200 2014-05-13] (AVG Technologies CZ, s.r.o.) S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation) R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-14] (Microsoft Corporation) S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51120 2005-03-08] (HP) S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2005-03-08] (HP) S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2005-03-08] (HP) S3 LVUSBSta; C:\WINDOWS\System32\drivers\lvusbsta.sys [22016 2004-10-11] (Labtec Inc.) S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation) S3 PID_0928; C:\WINDOWS\System32\DRIVERS\LV561AV.SYS [211712 2004-10-11] (Labtec Inc.) R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2008-04-14] (Realtek Semiconductor Corporation) R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed] R0 uliagpkx; C:\WINDOWS\System32\DRIVERS\agpkx.sys [45056 2005-05-03] (ULi Electronics Inc.) U4 Avgfwdx; system32\DRIVERS\avgfwdx.sys [X] S3 catchme; \??\C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\catchme.sys [X] S4 IntelIde; No ImagePath S2 zumbus; system32\DRIVERS\zumbus.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-03 20:47 - 2014-07-03 20:51 - 00000000 ____D () C:\FRST 2014-07-03 20:35 - 2014-07-03 20:35 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\AskPartnerNetwork 2014-06-27 15:19 - 2014-07-03 20:52 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\temp 2014-06-27 15:19 - 2014-06-27 15:19 - 00018159 _____ () C:\ComboFix.txt 2014-06-27 15:19 - 2014-06-27 15:19 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp 2014-06-27 15:19 - 2014-06-27 15:19 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\temp 2014-06-27 15:11 - 2014-06-27 14:41 - 00000211 _____ () C:\Boot.bak 2014-06-27 15:10 - 2014-06-27 15:11 - 00000000 _RSHD () C:\cmdcons 2014-06-27 15:10 - 2004-08-03 23:00 - 00262400 __RSH () C:\cmldr 2014-06-27 15:08 - 2011-06-26 08:45 - 00256000 _____ () C:\WINDOWS\PEV.exe 2014-06-27 15:08 - 2010-11-07 19:20 - 00208896 _____ () C:\WINDOWS\MBR.exe 2014-06-27 15:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe 2014-06-27 15:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe 2014-06-27 15:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe 2014-06-27 15:08 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe 2014-06-27 15:08 - 2000-08-31 02:00 - 00098816 _____ () C:\WINDOWS\sed.exe 2014-06-27 15:08 - 2000-08-31 02:00 - 00080412 _____ () C:\WINDOWS\grep.exe 2014-06-27 15:08 - 2000-08-31 02:00 - 00068096 _____ () C:\WINDOWS\zip.exe 2014-06-27 15:07 - 2014-06-27 15:19 - 00000000 ____D () C:\Qoobox 2014-06-27 15:06 - 2014-06-27 15:18 - 00000000 ____D () C:\WINDOWS\erdnt 2014-06-27 15:02 - 2014-06-27 15:02 - 00000356 _____ () C:\Documents and Settings\Administrator\Pulpit\Skrót do Z internetu.lnk 2014-06-27 14:48 - 2014-06-27 14:48 - 00000611 _____ () C:\Documents and Settings\Administrator\Menu Start\Skrót do procexp.lnk 2014-06-27 14:46 - 2014-06-27 14:46 - 00000293 _____ () C:\Documents and Settings\Administrator\Pulpit\Skrót do Dysk lokalny (C).lnk 2014-06-27 14:46 - 2014-06-27 14:46 - 00000275 _____ () C:\Documents and Settings\Administrator\Pulpit\Skrót do Dysk lokalny (E).lnk 2014-06-27 14:46 - 2014-06-27 14:46 - 00000275 _____ () C:\Documents and Settings\Administrator\Pulpit\Skrót do Dysk lokalny (D).lnk 2014-06-27 14:39 - 2014-06-27 14:41 - 00000000 ____D () C:\WINDOWS\pss 2014-06-27 14:33 - 2014-06-27 14:33 - 00000348 _____ () C:\WINDOWS\spupdsvc.log 2014-06-27 14:33 - 2014-06-27 14:33 - 00000000 __SHD () C:\Documents and Settings\NetworkService\IETldCache 2014-06-27 14:33 - 2014-06-27 14:33 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Windows Genuine Advantage 2014-06-27 14:31 - 2014-06-27 14:33 - 00006787 _____ () C:\WINDOWS\WgaNotify.log 2014-06-27 14:27 - 2014-07-03 20:33 - 00024206 _____ () C:\WINDOWS\setupapi.log 2014-06-27 14:27 - 2008-04-14 21:41 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\i8042prt.sys 2014-06-27 14:27 - 2008-04-14 21:41 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys 2014-06-18 15:26 - 2014-06-18 15:26 - 00013556 _____ () C:\WINDOWS\DPINST.LOG 2014-06-11 11:06 - 2014-06-27 14:32 - 00000397 _____ () C:\WINDOWS\setupact.log 2014-06-11 11:06 - 2014-06-11 11:06 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-06-06 20:07 - 2014-07-03 20:27 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-06-06 20:07 - 2014-07-03 20:27 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-06-06 20:07 - 2014-06-06 20:07 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log 2014-06-06 20:05 - 2014-07-03 20:23 - 00032628 _____ () C:\WINDOWS\SchedLgU.Txt ==================== One Month Modified Files and Folders ======= 2014-07-03 20:52 - 2014-06-27 15:19 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\temp 2014-07-03 20:51 - 2014-07-03 20:47 - 00000000 ____D () C:\FRST 2014-07-03 20:36 - 2013-05-31 12:54 - 01941320 _____ () C:\WINDOWS\WindowsUpdate.log 2014-07-03 20:35 - 2014-07-03 20:35 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\AskPartnerNetwork 2014-07-03 20:35 - 2013-05-31 13:00 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji 2014-07-03 20:33 - 2014-06-27 14:27 - 00024206 _____ () C:\WINDOWS\setupapi.log 2014-07-03 20:27 - 2014-06-06 20:07 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-07-03 20:27 - 2014-06-06 20:07 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-07-03 20:27 - 2014-04-10 14:00 - 00000284 _____ () C:\WINDOWS\Tasks\ASC7_PerformanceMonitor.job 2014-07-03 20:27 - 2014-03-07 19:06 - 00000238 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2014-07-03 20:27 - 2013-06-01 07:46 - 00001046 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-03 20:27 - 2013-05-31 12:59 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-07-03 20:27 - 2001-07-22 02:17 - 00002262 _____ () C:\WINDOWS\system32\wpa.dbl 2014-07-03 20:23 - 2014-06-06 20:05 - 00032628 _____ () C:\WINDOWS\SchedLgU.Txt 2014-07-03 20:23 - 2013-05-31 13:00 - 00000188 ___SH () C:\Documents and Settings\Administrator\ntuser.ini 2014-07-03 20:23 - 2013-05-31 13:00 - 00000000 ____D () C:\Documents and Settings\Administrator 2014-07-03 20:22 - 2013-06-01 12:59 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-07-03 20:21 - 2013-06-01 07:46 - 00001050 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-27 17:04 - 2013-05-31 14:28 - 00004444 _____ () C:\WINDOWS\system32\pid.PNF 2014-06-27 15:37 - 2013-05-31 12:59 - 00000000 __SHD () C:\Documents and Settings\LocalService 2014-06-27 15:33 - 2013-05-31 13:00 - 00000000 ___RD () C:\Documents and Settings\Administrator\Moje dokumenty 2014-06-27 15:33 - 2013-05-31 13:00 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit 2014-06-27 15:19 - 2014-06-27 15:19 - 00018159 _____ () C:\ComboFix.txt 2014-06-27 15:19 - 2014-06-27 15:19 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp 2014-06-27 15:19 - 2014-06-27 15:19 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\temp 2014-06-27 15:19 - 2014-06-27 15:07 - 00000000 ____D () C:\Qoobox 2014-06-27 15:19 - 2013-05-31 13:00 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne 2014-06-27 15:19 - 2013-05-31 12:59 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne 2014-06-27 15:19 - 2013-05-31 12:58 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne 2014-06-27 15:18 - 2014-06-27 15:06 - 00000000 ____D () C:\WINDOWS\erdnt 2014-06-27 15:17 - 2013-05-31 14:21 - 00000000 ___HD () C:\Documents and Settings\All Users\Dane aplikacji 2014-06-27 15:17 - 2013-05-31 13:00 - 00000000 __RHD () C:\Documents and Settings\Administrator\Dane aplikacji 2014-06-27 15:17 - 2001-07-22 02:15 - 00000227 _____ () C:\WINDOWS\system.ini 2014-06-27 15:11 - 2014-06-27 15:10 - 00000000 _RSHD () C:\cmdcons 2014-06-27 15:11 - 2013-05-31 14:20 - 00000327 __RSH () C:\boot.ini 2014-06-27 15:02 - 2014-06-27 15:02 - 00000356 _____ () C:\Documents and Settings\Administrator\Pulpit\Skrót do Z internetu.lnk 2014-06-27 14:48 - 2014-06-27 14:48 - 00000611 _____ () C:\Documents and Settings\Administrator\Menu Start\Skrót do procexp.lnk 2014-06-27 14:48 - 2013-05-31 13:00 - 00000000 ___RD () C:\Documents and Settings\Administrator\Menu Start 2014-06-27 14:46 - 2014-06-27 14:46 - 00000293 _____ () C:\Documents and Settings\Administrator\Pulpit\Skrót do Dysk lokalny (C).lnk 2014-06-27 14:46 - 2014-06-27 14:46 - 00000275 _____ () C:\Documents and Settings\Administrator\Pulpit\Skrót do Dysk lokalny (E).lnk 2014-06-27 14:46 - 2014-06-27 14:46 - 00000275 _____ () C:\Documents and Settings\Administrator\Pulpit\Skrót do Dysk lokalny (D).lnk 2014-06-27 14:45 - 2013-05-31 14:22 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-06-27 14:43 - 2013-05-31 14:22 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start 2014-06-27 14:42 - 2013-06-01 14:27 - 00524288 _____ () C:\WINDOWS\system32\config\ACEEvent.evt 2014-06-27 14:41 - 2014-06-27 15:11 - 00000211 _____ () C:\Boot.bak 2014-06-27 14:41 - 2014-06-27 14:39 - 00000000 ____D () C:\WINDOWS\pss 2014-06-27 14:41 - 2013-06-01 13:10 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\GG 2014-06-27 14:41 - 2013-05-31 14:22 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Autostart 2014-06-27 14:41 - 2001-07-22 02:16 - 00000532 _____ () C:\WINDOWS\win.ini 2014-06-27 14:33 - 2014-06-27 14:33 - 00000348 _____ () C:\WINDOWS\spupdsvc.log 2014-06-27 14:33 - 2014-06-27 14:33 - 00000000 __SHD () C:\Documents and Settings\NetworkService\IETldCache 2014-06-27 14:33 - 2014-06-27 14:33 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Windows Genuine Advantage 2014-06-27 14:33 - 2014-06-27 14:31 - 00006787 _____ () C:\WINDOWS\WgaNotify.log 2014-06-27 14:33 - 2013-05-31 12:58 - 00000000 __SHD () C:\Documents and Settings\NetworkService 2014-06-27 14:32 - 2014-06-11 11:06 - 00000397 _____ () C:\WINDOWS\setupact.log 2014-06-27 14:31 - 2013-05-31 14:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\MFAData 2014-06-27 14:27 - 2014-04-10 14:00 - 00001846 _____ () C:\Documents and Settings\All Users\Pulpit\Advanced SystemCare 7.lnk 2014-06-21 09:59 - 2013-06-01 14:07 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\uTorrent 2014-06-21 09:59 - 2013-06-01 13:14 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\Winamp 2014-06-20 18:14 - 2014-04-10 14:14 - 28925952 _____ () C:\WINDOWS\system32\config\software.iobit 2014-06-20 18:14 - 2014-04-10 14:14 - 00315392 _____ () C:\WINDOWS\system32\config\default.iobit 2014-06-20 18:14 - 2014-04-10 14:14 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iobit 2014-06-20 18:14 - 2014-04-10 14:14 - 00024576 _____ () C:\WINDOWS\system32\config\SAM.iobit 2014-06-20 18:05 - 2013-05-31 15:39 - 00241664 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-06-20 17:52 - 2013-06-01 20:02 - 00000222 _____ () C:\Documents and Settings\Administrator\default.pls 2014-06-20 17:52 - 2013-06-01 15:28 - 00000069 _____ () C:\WINDOWS\NeroDigital.ini 2014-06-18 15:26 - 2014-06-18 15:26 - 00013556 _____ () C:\WINDOWS\DPINST.LOG 2014-06-11 21:34 - 2013-06-01 07:47 - 00002125 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2014-06-11 17:56 - 2014-01-17 10:01 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-06-11 17:53 - 2014-01-17 10:01 - 92708840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-06-11 11:06 - 2014-06-11 11:06 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-06-08 19:31 - 2014-03-07 19:06 - 00000232 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job 2014-06-06 20:07 - 2014-06-06 20:07 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log ==================== Bamital & volsnap Check ================= C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================