Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:19-08-2014 Ran by użytkownik (administrator) on U-3A475189979D4 on 21-08-2014 11:08:09 Running from F:\Pobierane pliki Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\WINDOWS\System32\nvsvc32.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation) C:\WINDOWS\System32\wscntfy.exe () C:\Program Files\Plus Internet\Plus Internet.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\WINDOWS\System32\cmd.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\plugin-nm-server.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [LXCFCATS] => rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16 (the data entry has 59 more characters). HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [18789920 2009-12-08] (Realtek Semiconductor Corp.) HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [AVP] => C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) Winlogon\Notify\klogon: C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO) HKU\S-1-5-21-1229272821-1993962763-839522115-1004\...\Policies\Explorer: [NoDriveAutoRun] 0xFFFFFFFF HKU\S-1-5-21-1229272821-1993962763-839522115-1004\...\MountPoints2: {23329f89-991e-11e2-891b-6cf0499e04d6} - H:\AutoRun.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm SearchScopes: HKCU - DefaultScope {8B4222EE-B3A6-4637-A06B-93E6A0C0A9FA} URL = SearchScopes: HKCU - {92DFA872-0185-40A2-86B7-82DDBD813DC1} URL = http://www.google.pl/search?hl=pl&q={searchTerms}&lr= BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> F:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO: JQSIEStartDetectorImpl Class -> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -> C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\..\Interfaces\{6641EE1E-EFA8-45D2-AA71-D4670B5C5F4E}: [NameServer]212.2.96.51 212.2.96.52 FireFox: ======== FF ProfilePath: C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default FF Homepage: hxxp://www.interia.pl FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=6.0.11.2088 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=1.0.2.2146 -> C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.1069 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Phoenity Classic - C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\Extensions\{069FB356-C69F-7349-D092-AB28AF882F01} [2010-03-21] FF Extension: DownloadHelper - C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-10] FF Extension: Iplex to ALLPlayer - C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2012-01-27] FF Extension: QuickJava - C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-08-27] FF Extension: Tab Mix Plus - C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2011-11-24] FF Extension: Flagfox - C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-03-08] FF Extension: Adblock Plus - C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-28] FF HKLM\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2012-10-07] FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2012-10-07] FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2012-10-07] FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2012-10-07] FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2012-10-07] FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2012-03-03] Chrome: ======= CHR HomePage: hxxp://www.interia.pl/ CHR StartupUrls: "hxxp://www.interia.pl/" CHR Extension: (Dokumenty Google) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-28] CHR Extension: (Blokowanie banerów) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-09-28] CHR Extension: (Kaspersky URL Advisor) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-09-28] CHR Extension: (Gmail) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-28] CHR Extension: (Dysk Google) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-28] CHR Extension: (Szukaj w Google) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-28] CHR Extension: (YouTube) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-28] CHR Extension: (Google Wallet) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-28] CHR Extension: (AdBlock Premium) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [2014-05-27] CHR Extension: (Kaspersky Protection) - C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2014-07-08] CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2012-08-29] CHR HKLM\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh [2012-08-29] CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2012-08-29] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO) R2 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2012-03-03] (Sun Microsystems, Inc.) S3 lxcf_device; C:\WINDOWS\system32\lxcfcoms.exe [491520 2005-07-25] ( ) R2 NVSvc; C:\WINDOWS\system32\nvsvc32.exe [168004 2009-08-06] (NVIDIA Corporation) [File not signed] R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2214504 2011-05-25] (NVIDIA Corporation) R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [129112 2013-07-08] (Sandboxie Holdings, LLC) S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [637952 2009-06-02] (Nokia.) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative) R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [43008 2005-03-09] (Advanced Micro Devices) S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation) S3 ENTECH; C:\WINDOWS\system32\DRIVERS\ENTECH.SYS [20400 1999-10-21] (EnTech Taiwan) [File not signed] S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [13896 2012-12-21] () S3 EuGdiDrv; C:\WINDOWS\system32\EuGdiDrv.sys [9160 2012-12-21] () S3 GVCplDrv; C:\WINDOWS\system32\Drivers\GVCplDrv.sys [23040 2004-05-02] () [File not signed] R3 huawei_cdcacm; C:\WINDOWS\System32\DRIVERS\ew_jucdcacm.sys [85248 2011-07-04] (Huawei Technologies Co., Ltd.) R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [135776 2013-12-12] (Kaspersky Lab ZAO) R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [595040 2014-05-20] (Kaspersky Lab ZAO) R3 klim5; C:\WINDOWS\System32\DRIVERS\klim5.sys [35672 2012-06-27] (Kaspersky Lab ZAO) R3 klkbdflt; C:\WINDOWS\System32\DRIVERS\klkbdflt.sys [24160 2013-10-10] (Kaspersky Lab ZAO) R3 klmouflt; C:\WINDOWS\System32\DRIVERS\klmouflt.sys [24672 2013-10-10] (Kaspersky Lab ZAO) R1 kltdi; C:\WINDOWS\System32\DRIVERS\kltdi.sys [44000 2013-06-20] (Kaspersky Lab ZAO) R1 kneps; C:\WINDOWS\System32\DRIVERS\kneps.sys [145040 2013-05-01] (Kaspersky Lab ZAO) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.) S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) R0 nvata; C:\WINDOWS\System32\DRIVERS\nvata.sys [100736 2006-04-24] (NVIDIA Corporation) R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [70272 2009-10-28] (NVIDIA Corporation) R3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [56992 2009-08-12] (NVIDIA Corporation) R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [13824 2009-10-28] (NVIDIA Corporation) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [159208 2013-07-08] (Sandboxie Holdings, LLC) R0 sfdrv01; C:\WINDOWS\System32\drivers\sfdrv01.sys [47616 2005-01-14] (Protection Technology) [File not signed] R0 sfhlp02; C:\WINDOWS\System32\drivers\sfhlp02.sys [6656 2004-10-28] (Protection Technology) [File not signed] S3 upperdev; C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys [8064 2008-06-06] (Windows (R) Codename Longhorn DDK provider) S3 UsbserFilt; C:\WINDOWS\System32\DRIVERS\usbser_lowerfltj.sys [8064 2008-05-07] (Windows (R) Codename Longhorn DDK provider) U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [117504 2011-07-04] (Huawei Technologies Co., Ltd.) S4 IntelIde; No ImagePath U5 klflt; C:\Windows\System32\Drivers\klflt.sys [74336 2014-05-20] (Kaspersky Lab ZAO) U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-21 11:01 - 2014-08-21 11:01 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-08-21 11:01 - 2014-08-21 11:01 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-08-21 11:01 - 2014-08-21 11:01 - 00000000 __SHD () C:\FOUND.006 2014-08-21 10:41 - 2014-08-21 11:03 - 00001641 _____ () C:\WINDOWS\setupapi.log 2014-08-20 19:15 - 2014-08-20 19:15 - 00000000 ____D () C:\FRST 2014-08-20 18:00 - 2014-08-20 18:22 - 00040776 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2014-08-20 17:22 - 2014-08-20 17:22 - 00000000 __SHD () C:\FOUND.005 2014-08-19 10:48 - 2014-08-19 10:48 - 00000218 _____ () C:\Documents and Settings\użytkownik\.recently-used.xbel 2014-08-19 10:48 - 2014-08-19 10:48 - 00000000 ____D () C:\Documents and Settings\użytkownik\Dane aplikacji\gtk-2.0 2014-08-19 09:33 - 2014-08-19 09:33 - 00001657 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\GSmartControl.lnk 2014-08-19 09:33 - 2014-08-19 09:33 - 00000000 ____D () C:\Program Files\GSmartControl 2014-08-19 09:33 - 2014-08-19 09:33 - 00000000 ____D () C:\Documents and Settings\użytkownik\Dane aplikacji\gsmartcontrol 2014-08-16 19:55 - 2014-08-16 19:55 - 00000000 __SHD () C:\FOUND.004 2014-08-16 19:55 - 2014-08-16 19:26 - 00114688 _____ () C:\WINDOWS\Minidump\Mini081614-01.dmp 2014-08-16 19:26 - 2014-08-21 10:57 - 00009404 _____ () C:\WINDOWS\SchedLgU.Txt 2014-08-15 19:44 - 2014-08-15 18:09 - 00114688 _____ () C:\WINDOWS\Minidump\Mini081514-01.dmp 2014-08-15 19:43 - 2014-08-15 19:43 - 00000000 __SHD () C:\FOUND.003 2014-07-31 11:27 - 2014-07-31 11:27 - 00000000 ____D () C:\WINDOWS\system32\drévers 2014-07-27 21:29 - 2014-07-22 18:58 - 00098304 _____ () C:\WINDOWS\Minidump\Mini072714-01.dmp ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-21 11:03 - 2014-08-21 10:41 - 00001641 _____ () C:\WINDOWS\setupapi.log 2014-08-21 11:01 - 2014-08-21 11:01 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-08-21 11:01 - 2014-08-21 11:01 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-08-21 11:01 - 2014-08-21 11:01 - 00000000 __SHD () C:\FOUND.006 2014-08-21 11:01 - 2014-07-08 20:48 - 00001040 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cf9add2b71ffd8.job 2014-08-21 11:01 - 2009-08-06 09:44 - 00244372 _____ () C:\WINDOWS\system32\NvApps.xml 2014-08-21 11:01 - 2007-02-01 18:04 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-08-21 10:57 - 2014-08-16 19:26 - 00009404 _____ () C:\WINDOWS\SchedLgU.Txt 2014-08-21 10:57 - 2013-11-23 11:00 - 00057903 _____ () C:\lxcf.log 2014-08-21 10:57 - 2007-02-01 18:25 - 00000188 ___SH () C:\Documents and Settings\użytkownik\ntuser.ini 2014-08-21 10:57 - 2007-02-01 18:16 - 02077345 _____ () C:\WINDOWS\WindowsUpdate.log 2014-08-21 10:54 - 2009-11-27 18:02 - 00000472 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{58FE7259-156D-4A15-8ECC-208AE088F07D}.job 2014-08-21 10:38 - 2013-09-01 12:46 - 00000426 _____ () C:\WINDOWS\Tasks\ReclaimerResumeInstall_użytkownik.job 2014-08-21 10:38 - 2013-05-31 08:30 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-08-20 19:15 - 2014-08-20 19:15 - 00000000 ____D () C:\FRST 2014-08-20 18:22 - 2014-08-20 18:00 - 00040776 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2014-08-20 17:22 - 2014-08-20 17:22 - 00000000 __SHD () C:\FOUND.005 2014-08-19 10:48 - 2014-08-19 10:48 - 00000218 _____ () C:\Documents and Settings\użytkownik\.recently-used.xbel 2014-08-19 10:48 - 2014-08-19 10:48 - 00000000 ____D () C:\Documents and Settings\użytkownik\Dane aplikacji\gtk-2.0 2014-08-19 09:33 - 2014-08-19 09:33 - 00001657 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\GSmartControl.lnk 2014-08-19 09:33 - 2014-08-19 09:33 - 00000000 ____D () C:\Program Files\GSmartControl 2014-08-19 09:33 - 2014-08-19 09:33 - 00000000 ____D () C:\Documents and Settings\użytkownik\Dane aplikacji\gsmartcontrol 2014-08-18 13:30 - 2006-03-02 12:00 - 00012598 _____ () C:\WINDOWS\system32\wpa.dbl 2014-08-16 19:55 - 2014-08-16 19:55 - 00000000 __SHD () C:\FOUND.004 2014-08-16 19:40 - 2013-09-28 22:15 - 00001732 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2014-08-16 19:26 - 2014-08-16 19:55 - 00114688 _____ () C:\WINDOWS\Minidump\Mini081614-01.dmp 2014-08-15 19:43 - 2014-08-15 19:43 - 00000000 __SHD () C:\FOUND.003 2014-08-15 18:09 - 2014-08-15 19:44 - 00114688 _____ () C:\WINDOWS\Minidump\Mini081514-01.dmp 2014-08-08 21:38 - 2014-05-31 20:58 - 00000806 _____ () C:\Documents and Settings\użytkownik\Pulpit\materac.txt 2014-08-06 15:30 - 2011-08-21 20:16 - 00000643 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk 2014-08-06 15:30 - 2011-08-21 19:49 - 00000637 _____ () C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk 2014-07-31 11:27 - 2014-07-31 11:27 - 00000000 ____D () C:\WINDOWS\system32\drévers 2014-07-22 18:58 - 2014-07-27 21:29 - 00098304 _____ () C:\WINDOWS\Minidump\Mini072714-01.dmp ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================