Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:12-08-2014 Ran by Pawel005 (administrator) on PAWEL on 12-08-2014 11:07:09 Running from D:\Pobierane Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () C:\WINDOWS\system\svchost.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe (Nullsoft, Inc.) D:\Progamy\Winamp\winamp.exe (Mozilla Corporation) D:\Progamy\Mozilla Firefox\firefox.exe (Mozilla Corporation) D:\Progamy\Mozilla Firefox\plugin-container.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Winlogon: [Userinit] userinit.exe,C:\WINDOWS\system\svchost.exe HKU\S-1-5-21-527237240-484061587-1801674531-1003\...\Run: [DAEMON Tools Lite] => D:\Progamy\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-527237240-484061587-1801674531-1003\...\Run: [WinThrusterReminder] => C:\Program Files\WinThruster\WinThruster.exe [7123376 2012-10-15] (Solvusoft Corporation) HKU\S-1-5-21-527237240-484061587-1801674531-1003\...\MountPoints2: {0f3393be-0d16-11e4-b802-6cf049dcf559} - J:\ HKU\S-1-5-21-527237240-484061587-1801674531-1003\...\MountPoints2: {12b53d4c-076c-11e4-b7e2-6cf049dcf559} - J:\ HKU\S-1-5-21-527237240-484061587-1801674531-1003\...\MountPoints2: {2f292c32-c005-11e3-b72d-6cf049dcf559} - L:\Startme.exe HKU\S-1-5-21-527237240-484061587-1801674531-1003\...\MountPoints2: {91518326-0155-11e4-b7c7-0060b3015a17} - J:\ ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => D:\Progamy\Microsoft office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => D:\Progamy\Microsoft office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => D:\Progamy\Microsoft office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => D:\Progamy\Microsoft office\Office14\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => D:\Progamy\Microsoft office\Office14\GROOVEEX.DLL (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp1 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp1 BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Progamy\Microsoft office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Progamy\Microsoft office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\Pawel005\Dane aplikacji\Mozilla\Firefox\Profiles\3ibj98ob.default-1406823569546 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> D:\Progamy\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\Progamy\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> D:\Progamy\AR\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF StartMenuInternet: FIREFOX.EXE - D:\Progamy\Mozilla Firefox\firefox.exe Chrome: ======= CHR HomePage: CHR Extension: (Dokumenty Google) - C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-29] CHR Extension: (Dysk Google) - C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-29] CHR Extension: (YouTube) - C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-29] CHR Extension: (Szukaj w Google) - C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-29] CHR Extension: (Play Games) - C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ncenaofgljgcmfgihjdbniieocahleba [2014-07-31] CHR Extension: (Google Wallet) - C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-29] CHR Extension: (Gmail) - C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-29] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 hpqcxs08; D:\Progamy\hp\Digital Imaging\bin\hpqcxs08.dll [217088 2007-06-04] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; D:\Progamy\hp\Digital Imaging\bin\hpqddsvc.dll [131072 2007-06-04] (Hewlett-Packard Co.) [File not signed] S3 idsvc; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [864256 2007-10-11] (Microsoft Corporation) [File not signed] R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-07-11] (Oracle Corporation) S3 Microsoft SharePoint Workspace Audit Service; D:\Progamy\Microsoft office\Office14\GROOVE.EXE [30969208 2010-03-25] (Microsoft Corporation) R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [45568 2011-04-13] (Hewlett-Packard) [File not signed] S4 NetTcpPortSharing; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [122880 2007-10-11] (Microsoft Corporation) [File not signed] R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation) R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [55808 2011-04-13] (Hewlett-Packard) [File not signed] S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) S2 c81eb536; "C:\WINDOWS\system32\rundll32.exe" "c:\docume~1\alluse~1\daneap~1\fastan~1\FastAndSafeSvc.dll",service ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative) S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation) R1 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2014-07-16] (Disc Soft Ltd) S3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-03-08] (HP) R3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-03-08] (HP) R3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-03-08] (HP) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.) S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation) S3 PCAMPR5; C:\WINDOWS\system32\PCAMPR5.SYS [34688 2003-09-23] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] S3 PCANDIS5; C:\WINDOWS\system32\PCANDIS5.SYS [32128 2006-03-01] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] S3 SG762_XP; C:\WINDOWS\System32\DRIVERS\WlanBZXP.sys [402432 2006-01-19] (ZyDAS Technology Corporation) S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 HWiNFO32; \??\C:\DOCUME~1\Pawel005\USTAWI~1\Temp\HWiNFO32.SYS [X] S4 IntelIde; No ImagePath U1 WS2IFSL; S3 ZDPSp50; System32\Drivers\ZDPSp50.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-12 10:54 - 2014-08-12 10:55 - 00000000 ____D () C:\Program Files\WinThruster 2014-08-12 10:54 - 2014-08-12 10:54 - 00008014 _____ () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\recently-used.xbel 2014-08-12 10:54 - 2014-08-12 10:54 - 00000718 _____ () C:\Documents and Settings\All Users\Pulpit\WinThruster.lnk 2014-08-12 10:54 - 2014-08-12 10:54 - 00000276 _____ () C:\WINDOWS\Tasks\WinThruster_UPDATES.job 2014-08-12 10:54 - 2014-08-12 10:54 - 00000268 _____ () C:\WINDOWS\Tasks\WinThruster_DEFAULT.job 2014-08-12 10:54 - 2014-08-12 10:54 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\WinThruster 2014-08-12 10:48 - 2014-08-12 10:48 - 00000000 ____H () C:\WINDOWS\system32\config\system.sav.LOG 2014-08-12 10:48 - 2014-08-12 10:48 - 00000000 ____H () C:\WINDOWS\system32\config\software.sav.LOG 2014-08-12 10:47 - 2014-08-12 10:47 - 00000000 ____H () C:\WINDOWS\system32\config\SECURITY.sav.LOG 2014-08-12 10:47 - 2014-08-12 10:47 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.sav.LOG 2014-08-12 10:45 - 2014-08-12 10:48 - 00002424 _____ () C:\WINDOWS\system32\ASOROSet.bin 2014-08-12 10:44 - 2014-08-12 10:59 - 00000000 ____D () C:\WINDOWS\system32\config\RCCBakup 2014-08-12 10:40 - 2014-08-12 10:54 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Solvusoft 2014-08-12 10:25 - 2012-10-15 17:02 - 00017840 _____ (solvusoft) C:\WINDOWS\system32\roboot.exe 2014-08-12 10:16 - 2014-08-12 10:16 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\inne 2014-08-10 16:15 - 2014-08-10 16:15 - 00044448 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0034.mp4.sfk 2014-08-10 16:14 - 2014-08-10 16:15 - 00055616 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0033.mp4.sfk 2014-08-10 16:13 - 2014-08-10 16:14 - 00051648 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0032.mp4.sfk 2014-08-10 16:11 - 2014-08-10 16:12 - 00063008 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0031.mp4.sfk 2014-08-10 16:09 - 2014-08-10 16:12 - 00029984 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0030.mp4.sfk 2014-08-10 16:06 - 2014-08-10 15:47 - 120012801 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0036.mp4 2014-08-10 16:06 - 2014-08-10 15:43 - 44094151 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0035.mp4 2014-08-10 16:06 - 2014-08-10 15:41 - 65275853 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0034.mp4 2014-08-10 16:05 - 2014-08-10 15:34 - 82091891 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0033.mp4 2014-08-10 16:05 - 2014-08-10 15:30 - 76200205 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0032.mp4 2014-08-10 16:05 - 2014-08-10 15:27 - 93100267 _____ () C:\Documents and Settings\Pawel005\Pulpit\1.mp4 2014-08-10 16:05 - 2014-08-10 15:19 - 44538797 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0030.mp4 2014-08-10 16:04 - 2014-08-10 16:06 - 218235230 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0017.mp4 2014-08-10 16:04 - 2014-08-10 15:14 - 113658545 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0029.mp4 2014-08-10 16:04 - 2014-08-10 15:12 - 31470627 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0028.mp4 2014-08-10 16:04 - 2014-08-10 14:33 - 20217099 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0027.mp4 2014-08-10 16:04 - 2014-08-10 10:27 - 08801693 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0025.mp4 2014-08-10 16:04 - 2014-07-22 17:18 - 42892717 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0024.mp4 2014-08-10 16:04 - 2014-07-13 17:35 - 105641541 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0019.mp4 2014-08-09 12:08 - 2014-08-10 08:52 - 00000988 _____ () C:\Documents and Settings\Pawel005\Pulpit\Serwer Zombie-Mod.lnk 2014-08-09 12:08 - 2014-08-10 08:51 - 00000618 _____ () C:\Documents and Settings\Pawel005\Pulpit\Serwer FFA.lnk 2014-08-09 12:07 - 2014-08-10 08:51 - 00000534 _____ () C:\Documents and Settings\Pawel005\Pulpit\Serwer Cod-Mod.lnk 2014-08-09 12:07 - 2014-08-10 08:51 - 00000529 _____ () C:\Documents and Settings\Pawel005\Pulpit\Serwer Deathrun.lnk 2014-08-09 12:05 - 2014-08-09 12:05 - 00554772 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-527237240-484061587-1801674531-1003-0.dat 2014-08-09 12:05 - 2014-08-09 12:05 - 00281610 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat 2014-08-09 12:04 - 2014-07-02 20:40 - 03826628 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-08-09 12:03 - 2014-07-02 22:43 - 01054552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco3234052.dll 2014-08-09 12:03 - 2014-07-02 22:43 - 00906584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco3234052.dll 2014-08-09 12:02 - 2014-08-09 12:02 - 00000000 ____D () C:\NVIDIA 2014-08-09 11:40 - 2014-08-09 11:40 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Nvidia Corporation 2014-08-09 11:35 - 2014-08-12 10:53 - 00277913 _____ () C:\WINDOWS\setupapi.log 2014-08-09 11:35 - 2014-08-09 11:35 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-08-09 11:35 - 2014-08-09 11:35 - 00000000 _____ () C:\WINDOWS\setupact.log 2014-08-09 11:29 - 2014-08-09 11:29 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\InstallShield 2014-08-09 11:29 - 2014-08-09 11:29 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\DriverEasy 2014-08-09 11:25 - 2014-04-28 15:38 - 00000426 _____ () C:\AVScanner.ini 2014-08-08 18:01 - 2014-08-08 18:01 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-08-08 10:54 - 2014-08-12 10:50 - 00006213 _____ () C:\WINDOWS\AutoKMS.log 2014-08-05 15:54 - 2008-04-14 22:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpusd.dll 2014-08-05 15:54 - 2001-10-26 17:29 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpusb.dll 2014-08-04 22:14 - 2014-08-04 22:14 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\YTD Video Downloader 2014-08-04 22:12 - 2014-08-04 22:12 - 00000000 ____D () C:\Program Files\GreenTree Applications 2014-08-04 15:05 - 2014-08-09 11:33 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\sabina 2014-08-02 21:42 - 2014-08-02 21:42 - 00000678 _____ () C:\Documents and Settings\All Users\Pulpit\Gothic II Złota Edycja.lnk 2014-07-31 18:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\system32\sqlite3.dll 2014-07-31 18:31 - 2014-07-31 18:37 - 00000000 ____D () C:\AdwCleaner 2014-07-31 16:02 - 2014-07-31 16:06 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\FileZilla 2014-07-31 15:01 - 2014-07-31 15:01 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\GHISLER 2014-07-31 14:59 - 2014-07-31 15:00 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\GHISLER 2014-07-31 14:59 - 2014-07-31 14:59 - 00000548 _____ () C:\Documents and Settings\Pawel005\Pulpit\Total Commander.lnk 2014-07-31 14:59 - 2014-07-31 14:59 - 00000000 ____D () C:\totalcmd 2014-07-31 14:59 - 2014-07-31 14:59 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\Total Commander 2014-07-31 14:59 - 2014-04-30 08:51 - 00000545 _____ () C:\WINDOWS\UC.PIF 2014-07-31 14:59 - 2014-04-30 08:51 - 00000545 _____ () C:\WINDOWS\RAR.PIF 2014-07-31 14:59 - 2014-04-30 08:51 - 00000545 _____ () C:\WINDOWS\PKZIP.PIF 2014-07-31 14:59 - 2014-04-30 08:51 - 00000545 _____ () C:\WINDOWS\PKUNZIP.PIF 2014-07-31 14:59 - 2014-04-30 08:51 - 00000545 _____ () C:\WINDOWS\LHA.PIF 2014-07-31 14:59 - 2014-04-30 08:51 - 00000545 _____ () C:\WINDOWS\ARJ.PIF 2014-07-31 14:55 - 2014-07-31 14:55 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\b26468bdefe1b73b 2014-07-31 14:27 - 2014-07-31 16:00 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Home Ftp Server 2014-07-30 16:31 - 2014-08-03 14:49 - 00000000 ____D () C:\Program Files\AMX Mod X 2014-07-30 16:31 - 2014-08-03 14:48 - 00000805 _____ () C:\Documents and Settings\Pawel005\Pulpit\AMX Mod X Studio.lnk 2014-07-30 16:31 - 2014-07-30 16:31 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\AMX Mod X 2014-07-30 16:28 - 2014-08-01 18:30 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\Serwer FFA 2014-07-30 13:00 - 2014-07-30 13:00 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\GG 2014-07-27 20:48 - 2014-07-27 20:48 - 00000212 _____ () C:\Documents and Settings\Pawel005\Pulpit\Counter-Strike.url 2014-07-27 18:23 - 2014-07-27 18:23 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\Pokemon Red Fire (PL), Gold (PL), Red (PL) + Emulator 2014-07-27 18:19 - 2014-07-27 18:19 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\LolClient 2014-07-27 16:47 - 2014-07-27 16:47 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Riot Games 2014-07-27 16:45 - 2014-08-02 15:09 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\PMB Files 2014-07-27 16:45 - 2014-07-29 14:32 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PMB Files 2014-07-27 16:45 - 2014-07-27 16:45 - 00001453 _____ () C:\Documents and Settings\All Users\Pulpit\Play League of Legends.lnk 2014-07-27 16:45 - 2014-07-27 16:45 - 00000000 __SHD () C:\WINDOWS\system32\AI_RecycleBin 2014-07-27 16:45 - 2014-07-27 16:45 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\League of Legends 2014-07-27 16:45 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2014-07-27 16:45 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2014-07-27 16:45 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2014-07-27 16:45 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2014-07-27 16:45 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2014-07-27 16:44 - 2014-07-27 16:44 - 00000000 ____D () C:\Program Files\Pando Networks 2014-07-27 16:43 - 2014-07-27 16:46 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Riot Games 2014-07-27 15:01 - 2014-08-10 22:26 - 00000000 ____D () C:\Program Files\Steam 2014-07-27 15:01 - 2014-07-27 15:01 - 00000638 _____ () C:\Documents and Settings\All Users\Pulpit\Steam.lnk 2014-07-27 15:01 - 2014-07-27 15:01 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Steam 2014-07-26 20:55 - 2014-07-26 20:55 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\LogMeIn 2014-07-26 20:55 - 2014-07-26 20:55 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\LogMeIn 2014-07-26 11:25 - 2014-07-26 11:26 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Notepad++ 2014-07-26 11:25 - 2014-07-26 11:25 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\Notepad++ 2014-07-26 11:25 - 2014-07-26 11:25 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Notepad++ 2014-07-24 11:29 - 2014-07-24 11:29 - 00000657 _____ () C:\Documents and Settings\All Users\Pulpit\Gothic II.lnk 2014-07-24 11:28 - 2014-08-02 21:39 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\JoWood 2014-07-18 11:07 - 2014-07-18 11:07 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-07-18 11:07 - 2014-07-18 11:07 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Oracle 2014-07-18 11:07 - 2014-07-18 11:07 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Java 2014-07-18 11:07 - 2014-07-11 03:02 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2014-07-18 11:07 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2014-07-18 11:07 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2014-07-18 11:07 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2014-07-18 11:07 - 2014-07-11 02:36 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2014-07-16 20:21 - 2014-07-16 20:48 - 00000000 ____D () C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP 2014-07-16 20:21 - 2014-07-16 20:21 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-07-16 20:21 - 2014-07-16 20:21 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard 2014-07-16 13:25 - 2014-07-16 13:25 - 00000000 ___RD () C:\Documents and Settings\LocalService\Ulubione 2014-07-16 12:34 - 2014-07-16 12:34 - 00004096 _____ () C:\WINDOWS\d3dx.dat 2014-07-16 12:31 - 2014-07-16 12:31 - 00000659 _____ () C:\Documents and Settings\All Users\Pulpit\Gothic.lnk 2014-07-16 12:31 - 2014-07-16 12:31 - 00000000 ____D () C:\Program Files\Adobe 2014-07-16 12:29 - 2014-07-16 12:29 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Piranha Bytes 2014-07-16 12:20 - 2014-08-07 19:41 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\DAEMON Tools Lite 2014-07-16 12:20 - 2014-07-17 10:15 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Genesis_07161020 2014-07-16 12:20 - 2014-07-16 12:20 - 00243128 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys 2014-07-16 12:20 - 2014-07-16 12:20 - 00000661 _____ () C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk 2014-07-16 12:20 - 2014-07-16 12:20 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\DAEMON Tools Lite 2014-07-16 12:19 - 2014-07-16 12:19 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite 2014-07-15 00:05 - 2014-07-27 20:49 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\Steam 2014-07-14 10:46 - 2014-08-05 15:13 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\gtk-2.0 2014-07-14 10:46 - 2014-07-14 10:46 - 00000000 ____D () C:\Documents and Settings\Pawel005\.thumbnails 2014-07-14 10:44 - 2014-08-12 10:54 - 00000000 ____D () C:\Documents and Settings\Pawel005\.gimp-2.8 2014-07-14 10:44 - 2014-07-14 10:44 - 00000600 _____ () C:\Documents and Settings\All Users\Pulpit\GIMP 2.lnk 2014-07-14 10:44 - 2014-07-14 10:44 - 00000600 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\GIMP 2.lnk 2014-07-14 10:44 - 2014-07-14 10:44 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\gegl-0.2 2014-07-14 10:44 - 2014-07-14 10:44 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\fontconfig 2014-07-14 10:31 - 2014-07-14 10:31 - 00000734 _____ () C:\Documents and Settings\Pawel005\Pulpit\HLC.lnk 2014-07-14 10:30 - 2014-07-14 10:30 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\Halflife Logo Creator ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-12 11:07 - 2014-03-22 22:10 - 00000000 ____D () C:\FRST 2014-08-12 11:07 - 2014-03-22 16:55 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Temp 2014-08-12 11:04 - 2014-03-22 20:59 - 00013382 _____ () C:\WINDOWS\system32\nvAppTimestamps 2014-08-12 10:59 - 2014-08-12 10:44 - 00000000 ____D () C:\WINDOWS\system32\config\RCCBakup 2014-08-12 10:55 - 2014-08-12 10:54 - 00000000 ____D () C:\Program Files\WinThruster 2014-08-12 10:55 - 2014-03-22 16:50 - 00353963 _____ () C:\WINDOWS\WindowsUpdate.log 2014-08-12 10:54 - 2014-08-12 10:54 - 00008014 _____ () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\recently-used.xbel 2014-08-12 10:54 - 2014-08-12 10:54 - 00000718 _____ () C:\Documents and Settings\All Users\Pulpit\WinThruster.lnk 2014-08-12 10:54 - 2014-08-12 10:54 - 00000276 _____ () C:\WINDOWS\Tasks\WinThruster_UPDATES.job 2014-08-12 10:54 - 2014-08-12 10:54 - 00000268 _____ () C:\WINDOWS\Tasks\WinThruster_DEFAULT.job 2014-08-12 10:54 - 2014-08-12 10:54 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\WinThruster 2014-08-12 10:54 - 2014-08-12 10:40 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Solvusoft 2014-08-12 10:54 - 2014-07-14 10:44 - 00000000 ____D () C:\Documents and Settings\Pawel005\.gimp-2.8 2014-08-12 10:54 - 2014-03-22 17:30 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-08-12 10:54 - 2014-03-22 17:30 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-08-12 10:54 - 2014-03-22 16:55 - 00000000 ___HD () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji 2014-08-12 10:53 - 2014-08-09 11:35 - 00277913 _____ () C:\WINDOWS\setupapi.log 2014-08-12 10:50 - 2014-08-08 10:54 - 00006213 _____ () C:\WINDOWS\AutoKMS.log 2014-08-12 10:50 - 2014-03-25 22:05 - 00078848 _____ () C:\WINDOWS\KMSEmulator.exe 2014-08-12 10:50 - 2014-03-25 22:05 - 00000206 _____ () C:\WINDOWS\Tasks\AutoKMS.job 2014-08-12 10:50 - 2014-03-25 22:05 - 00000202 _____ () C:\WINDOWS\Tasks\AutoKMSDaily.job 2014-08-12 10:50 - 2014-03-22 17:33 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-08-12 10:50 - 2014-03-22 17:33 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-08-12 10:49 - 2014-03-29 09:49 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-08-12 10:49 - 2014-03-22 16:54 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-08-12 10:48 - 2014-08-12 10:48 - 00000000 ____H () C:\WINDOWS\system32\config\system.sav.LOG 2014-08-12 10:48 - 2014-08-12 10:48 - 00000000 ____H () C:\WINDOWS\system32\config\software.sav.LOG 2014-08-12 10:48 - 2014-08-12 10:45 - 00002424 _____ () C:\WINDOWS\system32\ASOROSet.bin 2014-08-12 10:48 - 2014-03-22 17:28 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY.bak 2014-08-12 10:48 - 2014-03-22 17:27 - 34340864 _____ () C:\WINDOWS\system32\config\software.bak 2014-08-12 10:48 - 2014-03-22 17:27 - 05242880 _____ () C:\WINDOWS\system32\config\system.bak 2014-08-12 10:48 - 2014-03-22 16:55 - 00000000 ____D () C:\Documents and Settings\Pawel005 2014-08-12 10:48 - 2014-03-22 16:54 - 00000000 __SHD () C:\Documents and Settings\NetworkService 2014-08-12 10:48 - 2014-03-22 16:54 - 00000000 __SHD () C:\Documents and Settings\LocalService 2014-08-12 10:47 - 2014-08-12 10:47 - 00000000 ____H () C:\WINDOWS\system32\config\SECURITY.sav.LOG 2014-08-12 10:47 - 2014-08-12 10:47 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.sav.LOG 2014-08-12 10:46 - 2014-03-22 17:28 - 00262144 _____ () C:\WINDOWS\system32\config\SAM.bak 2014-08-12 10:46 - 2014-03-22 16:55 - 00000188 ___SH () C:\Documents and Settings\Pawel005\ntuser.ini 2014-08-12 10:46 - 2014-03-22 16:54 - 00032636 _____ () C:\WINDOWS\SchedLgU.Txt 2014-08-12 10:40 - 2014-03-22 16:55 - 00000000 __RHD () C:\Documents and Settings\Pawel005\Dane aplikacji 2014-08-12 10:20 - 2014-03-22 17:53 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-08-12 10:17 - 2014-03-22 16:55 - 00000000 ___RD () C:\Documents and Settings\Pawel005\Moje dokumenty 2014-08-12 10:16 - 2014-08-12 10:16 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\inne 2014-08-12 10:16 - 2014-03-29 09:49 - 00001040 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-08-12 10:16 - 2014-03-22 16:55 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit 2014-08-10 22:26 - 2014-07-27 15:01 - 00000000 ____D () C:\Program Files\Steam 2014-08-10 22:26 - 2014-04-05 07:33 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Skype 2014-08-10 21:41 - 2014-04-05 07:32 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk 2014-08-10 17:11 - 2014-03-22 20:56 - 01408400 _____ () C:\WINDOWS\system32\nvdrsdb1.bin 2014-08-10 17:11 - 2014-03-22 20:56 - 01408400 _____ () C:\WINDOWS\system32\nvdrsdb0.bin 2014-08-10 17:11 - 2014-03-22 20:56 - 00000001 _____ () C:\WINDOWS\system32\nvdrssel.bin 2014-08-10 16:15 - 2014-08-10 16:15 - 00044448 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0034.mp4.sfk 2014-08-10 16:15 - 2014-08-10 16:14 - 00055616 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0033.mp4.sfk 2014-08-10 16:14 - 2014-08-10 16:13 - 00051648 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0032.mp4.sfk 2014-08-10 16:12 - 2014-08-10 16:11 - 00063008 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0031.mp4.sfk 2014-08-10 16:12 - 2014-08-10 16:09 - 00029984 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0030.mp4.sfk 2014-08-10 16:06 - 2014-08-10 16:04 - 218235230 _____ () C:\Documents and Settings\Pawel005\Pulpit\MOV_0017.mp4 2014-08-10 15:47 - 2014-08-10 16:06 - 120012801 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0036.mp4 2014-08-10 15:43 - 2014-08-10 16:06 - 44094151 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0035.mp4 2014-08-10 15:41 - 2014-08-10 16:06 - 65275853 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0034.mp4 2014-08-10 15:34 - 2014-08-10 16:05 - 82091891 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0033.mp4 2014-08-10 15:30 - 2014-08-10 16:05 - 76200205 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0032.mp4 2014-08-10 15:27 - 2014-08-10 16:05 - 93100267 _____ () C:\Documents and Settings\Pawel005\Pulpit\1.mp4 2014-08-10 15:19 - 2014-08-10 16:05 - 44538797 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0030.mp4 2014-08-10 15:14 - 2014-08-10 16:04 - 113658545 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0029.mp4 2014-08-10 15:12 - 2014-08-10 16:04 - 31470627 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0028.mp4 2014-08-10 14:33 - 2014-08-10 16:04 - 20217099 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0027.mp4 2014-08-10 10:27 - 2014-08-10 16:04 - 08801693 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0025.mp4 2014-08-10 08:52 - 2014-08-09 12:08 - 00000988 _____ () C:\Documents and Settings\Pawel005\Pulpit\Serwer Zombie-Mod.lnk 2014-08-10 08:51 - 2014-08-09 12:08 - 00000618 _____ () C:\Documents and Settings\Pawel005\Pulpit\Serwer FFA.lnk 2014-08-10 08:51 - 2014-08-09 12:07 - 00000534 _____ () C:\Documents and Settings\Pawel005\Pulpit\Serwer Cod-Mod.lnk 2014-08-10 08:51 - 2014-08-09 12:07 - 00000529 _____ () C:\Documents and Settings\Pawel005\Pulpit\Serwer Deathrun.lnk 2014-08-09 12:10 - 2014-04-13 22:17 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\Muzyka 2014-08-09 12:05 - 2014-08-09 12:05 - 00554772 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-527237240-484061587-1801674531-1003-0.dat 2014-08-09 12:05 - 2014-08-09 12:05 - 00281610 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat 2014-08-09 12:05 - 2014-03-22 16:54 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji 2014-08-09 12:03 - 2014-03-22 20:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-08-09 12:02 - 2014-08-09 12:02 - 00000000 ____D () C:\NVIDIA 2014-08-09 11:40 - 2014-08-09 11:40 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Nvidia Corporation 2014-08-09 11:38 - 2014-03-22 20:59 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\NVIDIA 2014-08-09 11:37 - 2014-04-23 17:40 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Winamp 2014-08-09 11:35 - 2014-08-09 11:35 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-08-09 11:35 - 2014-08-09 11:35 - 00000000 _____ () C:\WINDOWS\setupact.log 2014-08-09 11:33 - 2014-08-04 15:05 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\sabina 2014-08-09 11:29 - 2014-08-09 11:29 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\InstallShield 2014-08-09 11:29 - 2014-08-09 11:29 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\DriverEasy 2014-08-09 11:29 - 2014-03-29 10:45 - 00000560 _____ () C:\Documents and Settings\All Users\Pulpit\DriverEasy.lnk 2014-08-09 11:29 - 2014-03-22 16:55 - 00000000 ___RD () C:\Documents and Settings\Pawel005\Menu Start\Programy 2014-08-09 11:28 - 2014-03-22 18:48 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-08-09 11:25 - 2014-03-22 17:28 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-08-09 11:23 - 2001-07-22 03:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2014-08-09 11:17 - 2014-07-05 13:00 - 00000000 ____D () C:\Program Files\SlimCleaner 2014-08-09 10:30 - 2014-03-25 19:12 - 00000000 ____D () C:\WINDOWS\system32\LogFiles 2014-08-09 10:29 - 2014-07-05 13:00 - 00002231 _____ () C:\Documents and Settings\All Users\Pulpit\SlimCleaner.lnk 2014-08-08 18:01 - 2014-08-08 18:01 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-08-08 18:01 - 2014-04-05 07:32 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Skype 2014-08-08 11:57 - 2014-03-25 22:56 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\HP 2014-08-07 19:41 - 2014-07-16 12:20 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\DAEMON Tools Lite 2014-08-07 19:41 - 2014-04-10 19:27 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\uTorrent 2014-08-07 17:47 - 2014-04-12 23:36 - 00000754 _____ () C:\WINDOWS\WORDPAD.INI 2014-08-05 15:13 - 2014-07-14 10:46 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\gtk-2.0 2014-08-04 22:15 - 2014-04-10 19:49 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\YTD Video Downloader 2014-08-04 22:14 - 2014-08-04 22:14 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\YTD Video Downloader 2014-08-04 22:14 - 2014-04-10 19:48 - 00000942 _____ () C:\Documents and Settings\All Users\Pulpit\YTD Video Downloader.lnk 2014-08-04 22:12 - 2014-08-04 22:12 - 00000000 ____D () C:\Program Files\GreenTree Applications 2014-08-03 23:24 - 2014-03-25 22:01 - 00065536 _____ () C:\WINDOWS\system32\config\OAlerts.evt 2014-08-03 14:49 - 2014-07-30 16:31 - 00000000 ____D () C:\Program Files\AMX Mod X 2014-08-03 14:48 - 2014-07-30 16:31 - 00000805 _____ () C:\Documents and Settings\Pawel005\Pulpit\AMX Mod X Studio.lnk 2014-08-03 00:35 - 2014-03-22 16:55 - 00000000 ___RD () C:\Documents and Settings\Pawel005\Moje dokumenty\Moje obrazy 2014-08-02 21:42 - 2014-08-02 21:42 - 00000678 _____ () C:\Documents and Settings\All Users\Pulpit\Gothic II Złota Edycja.lnk 2014-08-02 21:39 - 2014-07-24 11:28 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\JoWood 2014-08-02 15:09 - 2014-07-27 16:45 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\PMB Files 2014-08-01 18:30 - 2014-07-30 16:28 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\Serwer FFA 2014-07-31 18:37 - 2014-07-31 18:31 - 00000000 ____D () C:\AdwCleaner 2014-07-31 18:33 - 2001-07-22 03:16 - 00001041 _____ () C:\WINDOWS\win.ini 2014-07-31 16:06 - 2014-07-31 16:02 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\FileZilla 2014-07-31 16:00 - 2014-07-31 14:27 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Home Ftp Server 2014-07-31 15:01 - 2014-07-31 15:01 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\GHISLER 2014-07-31 15:00 - 2014-07-31 14:59 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\GHISLER 2014-07-31 14:59 - 2014-07-31 14:59 - 00000548 _____ () C:\Documents and Settings\Pawel005\Pulpit\Total Commander.lnk 2014-07-31 14:59 - 2014-07-31 14:59 - 00000000 ____D () C:\totalcmd 2014-07-31 14:59 - 2014-07-31 14:59 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\Total Commander 2014-07-31 14:55 - 2014-07-31 14:55 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\b26468bdefe1b73b 2014-07-31 14:28 - 2014-03-29 09:50 - 00001877 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2014-07-31 12:45 - 2014-04-26 12:49 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\GG 2014-07-31 12:45 - 2014-04-26 12:49 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\GG 2014-07-30 16:31 - 2014-07-30 16:31 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\AMX Mod X 2014-07-30 14:16 - 2014-03-22 17:36 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-07-30 13:00 - 2014-07-30 13:00 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\GG 2014-07-29 14:32 - 2014-07-27 16:45 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PMB Files 2014-07-27 20:49 - 2014-07-15 00:05 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\Steam 2014-07-27 20:48 - 2014-07-27 20:48 - 00000212 _____ () C:\Documents and Settings\Pawel005\Pulpit\Counter-Strike.url 2014-07-27 18:23 - 2014-07-27 18:23 - 00000000 ____D () C:\Documents and Settings\Pawel005\Pulpit\Pokemon Red Fire (PL), Gold (PL), Red (PL) + Emulator 2014-07-27 18:19 - 2014-07-27 18:19 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\LolClient 2014-07-27 16:47 - 2014-07-27 16:47 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Riot Games 2014-07-27 16:46 - 2014-07-27 16:43 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Riot Games 2014-07-27 16:45 - 2014-07-27 16:45 - 00001453 _____ () C:\Documents and Settings\All Users\Pulpit\Play League of Legends.lnk 2014-07-27 16:45 - 2014-07-27 16:45 - 00000000 __SHD () C:\WINDOWS\system32\AI_RecycleBin 2014-07-27 16:45 - 2014-07-27 16:45 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\League of Legends 2014-07-27 16:45 - 2014-03-22 16:50 - 00000000 ____D () C:\WINDOWS\system32\DirectX 2014-07-27 16:44 - 2014-07-27 16:44 - 00000000 ____D () C:\Program Files\Pando Networks 2014-07-27 15:01 - 2014-07-27 15:01 - 00000638 _____ () C:\Documents and Settings\All Users\Pulpit\Steam.lnk 2014-07-27 15:01 - 2014-07-27 15:01 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Steam 2014-07-26 20:55 - 2014-07-26 20:55 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\LogMeIn 2014-07-26 20:55 - 2014-07-26 20:55 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\LogMeIn 2014-07-26 11:26 - 2014-07-26 11:25 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Notepad++ 2014-07-26 11:25 - 2014-07-26 11:25 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\Notepad++ 2014-07-26 11:25 - 2014-07-26 11:25 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Notepad++ 2014-07-24 11:29 - 2014-07-24 11:29 - 00000657 _____ () C:\Documents and Settings\All Users\Pulpit\Gothic II.lnk 2014-07-22 17:18 - 2014-08-10 16:04 - 42892717 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0024.mp4 2014-07-22 13:16 - 2014-03-22 18:44 - 00027136 _____ () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-07-18 11:07 - 2014-07-18 11:07 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-07-18 11:07 - 2014-07-18 11:07 - 00000000 ____D () C:\Documents and Settings\Pawel005\Dane aplikacji\Oracle 2014-07-18 11:07 - 2014-07-18 11:07 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Java 2014-07-18 11:07 - 2014-03-23 00:55 - 00000000 ____D () C:\Program Files\Java 2014-07-17 10:15 - 2014-07-16 12:20 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\Genesis_07161020 2014-07-17 10:15 - 2014-03-22 16:55 - 00000000 ___RD () C:\Documents and Settings\Pawel005\Menu Start\Programy\Autostart 2014-07-16 20:48 - 2014-07-16 20:21 - 00000000 ____D () C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP 2014-07-16 20:30 - 2014-03-22 16:55 - 00001599 _____ () C:\Documents and Settings\Pawel005\Menu Start\Programy\Pomoc zdalna.lnk 2014-07-16 20:30 - 2014-03-22 16:51 - 00001607 _____ () C:\Documents and Settings\All Users\Menu Start\Określ dostęp do programów i ich ustawienia domyślne.lnk 2014-07-16 20:30 - 2014-03-22 16:51 - 00001599 _____ () C:\Documents and Settings\Default User\Menu Start\Programy\Pomoc zdalna.lnk 2014-07-16 20:30 - 2014-03-22 16:51 - 00001507 _____ () C:\Documents and Settings\All Users\Menu Start\Windows Update.lnk 2014-07-16 20:21 - 2014-07-16 20:21 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-07-16 20:21 - 2014-07-16 20:21 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard 2014-07-16 19:29 - 2014-03-22 17:30 - 01262776 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-07-16 19:29 - 2001-10-26 21:15 - 00558466 _____ () C:\WINDOWS\system32\perfh015.dat 2014-07-16 19:29 - 2001-10-26 21:15 - 00105530 _____ () C:\WINDOWS\system32\perfc015.dat 2014-07-16 13:25 - 2014-07-16 13:25 - 00000000 ___RD () C:\Documents and Settings\LocalService\Ulubione 2014-07-16 12:34 - 2014-07-16 12:34 - 00004096 _____ () C:\WINDOWS\d3dx.dat 2014-07-16 12:31 - 2014-07-16 12:31 - 00000659 _____ () C:\Documents and Settings\All Users\Pulpit\Gothic.lnk 2014-07-16 12:31 - 2014-07-16 12:31 - 00000000 ____D () C:\Program Files\Adobe 2014-07-16 12:29 - 2014-07-16 12:29 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Piranha Bytes 2014-07-16 12:20 - 2014-07-16 12:20 - 00243128 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys 2014-07-16 12:20 - 2014-07-16 12:20 - 00000661 _____ () C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk 2014-07-16 12:20 - 2014-07-16 12:20 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\DAEMON Tools Lite 2014-07-16 12:19 - 2014-07-16 12:19 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite 2014-07-14 11:46 - 2014-03-22 16:55 - 00000000 ___RD () C:\Documents and Settings\Pawel005\Moje dokumenty\Moja muzyka 2014-07-14 10:46 - 2014-07-14 10:46 - 00000000 ____D () C:\Documents and Settings\Pawel005\.thumbnails 2014-07-14 10:44 - 2014-07-14 10:44 - 00000600 _____ () C:\Documents and Settings\All Users\Pulpit\GIMP 2.lnk 2014-07-14 10:44 - 2014-07-14 10:44 - 00000600 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\GIMP 2.lnk 2014-07-14 10:44 - 2014-07-14 10:44 - 00000000 ____D () C:\Documents and Settings\Pawel005\Ustawienia lokalne\Dane aplikacji\gegl-0.2 2014-07-14 10:31 - 2014-07-14 10:31 - 00000734 _____ () C:\Documents and Settings\Pawel005\Pulpit\HLC.lnk 2014-07-14 10:30 - 2014-07-14 10:30 - 00000000 ____D () C:\Documents and Settings\Pawel005\Menu Start\Programy\Halflife Logo Creator 2014-07-13 17:35 - 2014-08-10 16:04 - 105641541 ____N () C:\Documents and Settings\Pawel005\Pulpit\MOV_0019.mp4 Some content of TEMP: ==================== C:\Documents and Settings\Pawel005\Ustawienia lokalne\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================