Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014 Ran by Artur (administrator) on KRZYCHO-B625ADA on 16-09-2014 00:10:15 Running from C:\Documents and Settings\Artur\Moje dokumenty\Pobrane\Nowy folder Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 6 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (Cherished Technololgy LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\IePluginServices\PluginService.exe (Fuyu LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect\ProtectWindowsManager.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe () C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-03-12] (Hewlett-Packard) HKLM\...\Run: [CM-SmWizard] => C:\WINDOWS\System\SmWizard.exe [1454080 2003-08-30] (C-Media Electronics Inc.) HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [nwiz] => nwiz.exe /install HKLM\...\Run: [NeroFilterCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [PennyBee] => C:\Program Files\PennyBee\PennyBeeW.exe HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-09-15] (AVAST Software) HKLM\...99B7938DA9E4}\LocalServer32: [Default-wmiprvse] <==== ATTENTION! Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DSLMON.lnk ShortcutTarget: DSLMON.lnk -> C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe () ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Tcpip\..\Interfaces\{68B93FA9-4A15-434A-9171-2A669833139C}: [NameServer] 194.204.152.34 194.204.159.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\tt4icu3n.default-1410815963828 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-09-15] Chrome: ======= CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-09-15] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-09-15] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [106488 2014-09-15] (AVAST Software) R2 IePluginServices; C:\Documents and Settings\All Users\Dane aplikacji\IePluginServices\PluginService.exe [715656 2014-09-15] (Cherished Technololgy LIMITED) R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-03-16] (Oracle Corporation) R2 WindowsMangerProtect; C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect\ProtectWindowsManager.exe [528896 2014-09-15] (Fuyu LIMITED) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 ADILOADER; C:\WINDOWS\System32\Drivers\adildr.sys [46167 2003-07-17] (Analog Deivces) R3 adiusbaw; C:\WINDOWS\System32\DRIVERS\adiusbaw.sys [127497 2003-06-24] (Analog Devices Inc.) R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-09-15] () R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [26136 2014-09-15] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-09-15] (AVAST Software) R0 aswNdis; C:\WINDOWS\System32\DRIVERS\aswNdis.sys [12112 2014-09-15] (ALWIL Software) R0 aswNdis2; C:\WINDOWS\system32\Drivers\aswNdis2.sys [252872 2014-09-15] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-09-15] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-09-15] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-09-15] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-09-15] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-09-15] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-09-15] () R3 cmuda; C:\WINDOWS\System32\drivers\cmuda.sys [754624 2003-09-20] (C-Media Inc) [File not signed] R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-04] (Realtek Semiconductor Corporation) U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) U1 WS2IFSL; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-15 23:30 - 2014-09-15 23:30 - 00000000 ____D () C:\WINDOWS\jumpshot.com 2014-09-15 23:30 - 2014-09-15 23:30 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\AVAST Software 2014-09-15 23:29 - 2014-09-15 23:41 - 00000362 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2014-09-15 23:29 - 2014-09-15 23:29 - 00001799 _____ () C:\Documents and Settings\All Users\Pulpit\avast! SafeZone.lnk 2014-09-15 23:29 - 2014-09-15 23:29 - 00001739 _____ () C:\Documents and Settings\All Users\Pulpit\avast! Internet Security.lnk 2014-09-15 23:29 - 2014-09-15 23:29 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Avast 2014-09-15 23:29 - 2014-09-15 23:28 - 00779536 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2014-09-15 23:29 - 2014-09-15 23:28 - 00192352 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-09-15 23:29 - 2014-09-15 23:28 - 00057800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys 2014-09-15 23:28 - 2014-09-15 23:29 - 00414520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00276432 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-09-15 23:28 - 2014-09-15 23:28 - 00252872 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdis2.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00055112 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-09-15 23:28 - 2014-09-15 23:28 - 00026136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00012112 _____ (ALWIL Software) C:\WINDOWS\system32\Drivers\aswNdis.sys 2014-09-15 23:25 - 2014-09-15 23:25 - 00000000 ____D () C:\Program Files\AVAST Software 2014-09-15 23:16 - 2014-09-15 23:19 - 00000000 ____D () C:\Documents and Settings\Artur\Pulpit\Stare dane programu Firefox 2014-09-15 23:00 - 2014-09-15 23:00 - 00095623 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410814783.bdinstall.bin 2014-09-15 22:58 - 2014-09-15 22:58 - 00274718 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-57989841-413027322-725345543-1004-0.dat 2014-09-15 22:56 - 2014-09-15 22:56 - 00058595 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410814527.bdinstall.bin 2014-09-15 22:56 - 2014-09-15 22:56 - 00031979 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410814607.bdinstall.bin 2014-09-15 22:55 - 2014-09-15 22:55 - 00037226 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410814524.bdinstall.bin 2014-09-15 22:46 - 2014-09-15 22:46 - 00177810 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410813345.bdinstall.bin 2014-09-15 22:39 - 2014-09-15 22:39 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji\QuickScan 2014-09-15 22:36 - 2014-09-15 22:36 - 00010472 _____ () C:\WINDOWS\Wdf01009Inst.log 2014-09-15 22:36 - 2014-09-15 22:36 - 00000000 __HDC () C:\WINDOWS\$NtUninstallWdf01009$ 2014-09-15 22:36 - 2014-09-15 22:36 - 00000000 ____H () C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf 2014-09-15 22:36 - 2014-09-15 22:36 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2014-09-15 22:36 - 2014-09-15 22:36 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Antivirus Free Edition 2014-09-15 22:36 - 2009-07-14 23:27 - 01461992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll 2014-09-15 22:36 - 2008-11-07 18:55 - 00016928 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsgXP_2k3.dll 2014-09-15 22:22 - 2014-09-15 22:22 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect 2014-09-15 22:22 - 2014-09-15 22:22 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\IePluginServices 2014-09-15 22:21 - 2014-09-15 23:05 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\sweet-page 2014-09-15 22:21 - 2014-09-15 22:21 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\PennyBee 2014-09-14 20:57 - 2014-09-14 20:57 - 00078848 _____ (Microsoft Corporation) C:\msiexec.exe 2014-09-13 13:19 - 2014-09-13 13:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-09-02 12:38 - 2014-09-16 00:10 - 00000000 ____D () C:\FRST ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-16 00:10 - 2014-09-02 12:38 - 00000000 ____D () C:\FRST 2014-09-16 00:10 - 2013-01-17 14:26 - 00000000 ____D () C:\Documents and Settings\Artur\Ustawienia lokalne\Temp 2014-09-15 23:46 - 2014-06-15 14:35 - 00000000 ____D () C:\Documents and Settings\Artur\Moje dokumenty\Pobrane 2014-09-15 23:42 - 2013-01-17 14:18 - 00461238 _____ () C:\WINDOWS\WindowsUpdate.log 2014-09-15 23:41 - 2014-09-15 23:29 - 00000362 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2014-09-15 23:36 - 2013-01-20 22:21 - 00177348 _____ () C:\WINDOWS\system32\nvapps.xml 2014-09-15 23:36 - 2013-01-17 15:11 - 00000157 _____ () C:\WINDOWS\wiadebug.log 2014-09-15 23:36 - 2013-01-17 15:11 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-09-15 23:36 - 2013-01-17 14:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-09-15 23:35 - 2013-01-17 14:27 - 00000188 ___SH () C:\Documents and Settings\Artur\ntuser.ini 2014-09-15 23:35 - 2013-01-17 14:22 - 00032620 _____ () C:\WINDOWS\SchedLgU.Txt 2014-09-15 23:30 - 2014-09-15 23:30 - 00000000 ____D () C:\WINDOWS\jumpshot.com 2014-09-15 23:30 - 2014-09-15 23:30 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\AVAST Software 2014-09-15 23:30 - 2013-01-17 14:27 - 00000000 ___HD () C:\Documents and Settings\Artur\Dane aplikacji 2014-09-15 23:29 - 2014-09-15 23:29 - 00001799 _____ () C:\Documents and Settings\All Users\Pulpit\avast! SafeZone.lnk 2014-09-15 23:29 - 2014-09-15 23:29 - 00001739 _____ () C:\Documents and Settings\All Users\Pulpit\avast! Internet Security.lnk 2014-09-15 23:29 - 2014-09-15 23:29 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Avast 2014-09-15 23:29 - 2014-09-15 23:28 - 00414520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys 2014-09-15 23:29 - 2013-01-17 15:09 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-09-15 23:29 - 2013-01-17 15:09 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-09-15 23:29 - 2013-01-17 15:08 - 00194605 _____ () C:\WINDOWS\setupapi.log 2014-09-15 23:28 - 2014-09-15 23:29 - 00779536 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2014-09-15 23:28 - 2014-09-15 23:29 - 00192352 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-09-15 23:28 - 2014-09-15 23:29 - 00057800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00276432 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-09-15 23:28 - 2014-09-15 23:28 - 00252872 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdis2.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00055112 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-09-15 23:28 - 2014-09-15 23:28 - 00026136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-09-15 23:28 - 2014-09-15 23:28 - 00012112 _____ (ALWIL Software) C:\WINDOWS\system32\Drivers\aswNdis.sys 2014-09-15 23:25 - 2014-09-15 23:25 - 00000000 ____D () C:\Program Files\AVAST Software 2014-09-15 23:25 - 2014-07-30 20:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software 2014-09-15 23:22 - 2013-01-17 14:27 - 00000000 ___RD () C:\Documents and Settings\Artur\Moje dokumenty\Moje obrazy 2014-09-15 23:19 - 2014-09-15 23:16 - 00000000 ____D () C:\Documents and Settings\Artur\Pulpit\Stare dane programu Firefox 2014-09-15 23:16 - 2013-01-17 14:27 - 00000000 ____D () C:\Documents and Settings\Artur\Pulpit 2014-09-15 23:05 - 2014-09-15 22:21 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\sweet-page 2014-09-15 23:05 - 2013-02-26 16:37 - 00000730 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk 2014-09-15 23:05 - 2013-02-26 16:37 - 00000724 _____ () C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk 2014-09-15 23:05 - 2013-01-17 15:01 - 00001498 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk 2014-09-15 23:05 - 2013-01-17 15:01 - 00001492 _____ () C:\Documents and Settings\All Users\Pulpit\Opera.lnk 2014-09-15 23:05 - 2013-01-17 14:27 - 00000767 _____ () C:\Documents and Settings\Artur\Menu Start\Programy\Internet Explorer.lnk 2014-09-15 23:00 - 2014-09-15 23:00 - 00095623 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410814783.bdinstall.bin 2014-09-15 22:59 - 2013-01-17 15:08 - 00000000 ___HD () C:\Documents and Settings\All Users\Dane aplikacji 2014-09-15 22:58 - 2014-09-15 22:58 - 00274718 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-57989841-413027322-725345543-1004-0.dat 2014-09-15 22:58 - 2014-07-31 15:28 - 00274718 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat 2014-09-15 22:56 - 2014-09-15 22:56 - 00058595 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410814527.bdinstall.bin 2014-09-15 22:56 - 2014-09-15 22:56 - 00031979 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410814607.bdinstall.bin 2014-09-15 22:55 - 2014-09-15 22:55 - 00037226 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410814524.bdinstall.bin 2014-09-15 22:46 - 2014-09-15 22:46 - 00177810 _____ () C:\Documents and Settings\All Users\Dane aplikacji\1410813345.bdinstall.bin 2014-09-15 22:39 - 2014-09-15 22:39 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji\QuickScan 2014-09-15 22:39 - 2013-01-17 14:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji 2014-09-15 22:36 - 2014-09-15 22:36 - 00010472 _____ () C:\WINDOWS\Wdf01009Inst.log 2014-09-15 22:36 - 2014-09-15 22:36 - 00000000 __HDC () C:\WINDOWS\$NtUninstallWdf01009$ 2014-09-15 22:36 - 2014-09-15 22:36 - 00000000 ____H () C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf 2014-09-15 22:36 - 2014-09-15 22:36 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2014-09-15 22:36 - 2014-09-15 22:36 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Antivirus Free Edition 2014-09-15 22:36 - 2013-01-17 15:09 - 00062150 _____ () C:\WINDOWS\FaxSetup.log 2014-09-15 22:36 - 2013-01-17 15:09 - 00043868 _____ () C:\WINDOWS\ocgen.log 2014-09-15 22:36 - 2013-01-17 15:09 - 00032001 _____ () C:\WINDOWS\comsetup.log 2014-09-15 22:36 - 2013-01-17 15:09 - 00029449 _____ () C:\WINDOWS\tsoc.log 2014-09-15 22:36 - 2013-01-17 15:09 - 00017783 _____ () C:\WINDOWS\ntdtcsetup.log 2014-09-15 22:36 - 2013-01-17 15:09 - 00007786 _____ () C:\WINDOWS\iis6.log 2014-09-15 22:36 - 2013-01-17 15:09 - 00003958 _____ () C:\WINDOWS\ocmsn.log 2014-09-15 22:36 - 2013-01-17 15:09 - 00003527 _____ () C:\WINDOWS\msgsocm.log 2014-09-15 22:36 - 2013-01-17 15:09 - 00001374 _____ () C:\WINDOWS\imsins.log 2014-09-15 22:36 - 2013-01-17 15:08 - 00186028 _____ () C:\WINDOWS\setupact.log 2014-09-15 22:22 - 2014-09-15 22:22 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect 2014-09-15 22:22 - 2014-09-15 22:22 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\IePluginServices 2014-09-15 22:21 - 2014-09-15 22:21 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\PennyBee 2014-09-14 20:57 - 2014-09-14 20:57 - 00078848 _____ (Microsoft Corporation) C:\msiexec.exe 2014-09-14 20:57 - 2004-08-04 14:00 - 00078848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiexec.exe 2014-09-14 20:57 - 2004-08-04 14:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2014-09-14 11:34 - 2013-02-26 16:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-09-14 11:34 - 2004-08-04 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl 2014-09-13 13:19 - 2014-09-13 13:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-09-08 00:32 - 2013-01-18 00:15 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\HP 2014-09-04 15:41 - 2013-01-17 14:26 - 00000000 ___SD () C:\Documents and Settings\Artur\Ustawienia lokalne\Historia 2014-09-04 15:41 - 2013-01-17 14:22 - 00000000 ___SD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Historia 2014-09-04 15:41 - 2013-01-17 14:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Temp 2014-09-04 15:41 - 2013-01-17 14:21 - 00000000 ___SD () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Historia 2014-09-04 15:37 - 2013-11-03 22:07 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia 2014-09-04 15:36 - 2013-01-17 15:09 - 00000000 ___SD () C:\Documents and Settings\Default User\Ustawienia lokalne\Historia 2014-09-04 15:36 - 2013-01-17 14:27 - 00000000 ___RD () C:\Documents and Settings\Artur\Menu Start\Programy\Autostart 2014-08-31 17:25 - 2013-01-17 14:27 - 00000000 ___RD () C:\Documents and Settings\Artur\Moje dokumenty 2014-08-27 16:11 - 2013-01-17 15:01 - 00000000 ____D () C:\Program Files\Opera 2014-08-25 00:43 - 2013-01-30 19:52 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\vlc 2014-08-18 15:40 - 2013-01-26 12:38 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\uTorrent 2014-08-17 18:08 - 2013-01-17 14:26 - 00000000 ____D () C:\Documents and Settings\Artur Some content of TEMP: ==================== C:\Documents and Settings\Artur\Ustawienia lokalne\Temp\ICReinstall_BitDefender Internet Security 2014 17.25.0.1074.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================