Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-11-2014 03
Ran by Krzych (administrator) on BRAKRZY-41D24F2 on 17-11-2014 19:05:42
Running from P:\
Loaded Profile: Krzych (Available profiles: Krzych & Gabi)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(NVIDIA Corporation) C:\WINDOWS\system32\sstray.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVerMedia Technologies, Inc.) C:\Program Files\AVerTV\QuickTV.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [nForce Tray Options] => sstray.exe /r
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2010-02-10] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [295072 2012-12-25] (RealNetworks, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-02] (AVAST Software)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-507921405-1078081533-725345543-1003\...\Run: [MSMSGS] => "C:\Program Files\Messenger\msmsgs.exe" /background
HKU\S-1-5-21-507921405-1078081533-725345543-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22067296 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-507921405-1078081533-725345543-1003\...\Run: [CTRegRun] => C:\WINDOWS\CTRegRun.EXE [53248 2006-10-06] (Creative Technology Ltd )
HKU\S-1-5-21-507921405-1078081533-725345543-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4826904 2014-10-30] (Piriform Ltd)
HKU\S-1-5-21-507921405-1078081533-725345543-1003\...\MountPoints2: {cdf60b7b-78f7-11e2-bb14-00112fa872b0} - P:\SETUP.exe
AppInit_DLLs: c:\docume~1\alluse~1\daneap~1\browse~1\261095~1.52\{c16c1~1\browse~1.dll => c:\docume~1\alluse~1\daneap~1\browse~1\261095~1.52\{c16c1~1\browse~1.dll File Not Found
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\QuickTV.lnk
ShortcutTarget: QuickTV.lnk -> C:\Program Files\AVerTV\QuickTV.exe (AVerMedia Technologies, Inc.)
Startup: C:\Documents and Settings\Krzych\Menu Start\Programy\Autostart\bytor.bmp ()
Startup: C:\Documents and Settings\Krzych\Menu Start\Programy\Autostart\msiexec.exe (Disc Soft Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-507921405-1078081533-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141110
HKU\S-1-5-21-507921405-1078081533-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-507921405-1078081533-725345543-1003\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.onet.pl/
HKU\S-1-5-21-507921405-1078081533-725345543-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.onet.pl/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141110
SearchScopes: HKCU - bProtectorDefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=84cfa29e00000000000000112fa872b0
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKU\S-1-5-21-507921405-1078081533-725345543-1003 -> &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-507921405-1078081533-725345543-1003 -> &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-507921405-1078081533-725345543-1003 -> DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll No File
Toolbar: HKU\S-1-5-21-507921405-1078081533-725345543-1003 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Krzych\Dane aplikacji\Mozilla\Firefox\Profiles\tcf7fn2e.default
FF SearchEngineOrder.3: Bing 
FF Homepage: www.wp.pl/?src01=dp220141110
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP22DF&PC=UP22&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.0.282 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.0 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.0 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.0 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.0.282 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CrazyTalk4Native.dll (C3D)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctdomemhelper.dll (Reallusion Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctframeplayerobject.dll (Reallusion Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctplayerobject.dll (Reallusion Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\imagickrt.dll (BEXTech)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npRLCT4Player.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\rlcontentclass.dll (Reallusion Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\RLMusicPacker.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\RLMusicUnpacker.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\RLVoicePacker.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\RLVoiceUnpacker.dll ()
FF SearchPlugin: C:\Documents and Settings\Krzych\Dane aplikacji\Mozilla\Firefox\Profiles\tcf7fn2e.default\searchplugins\bingp.xml
FF HKLM\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2012-12-25]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-12-10]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-02]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2012-11-29]
CHR HKLM\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\Documents and Settings\All Users\Dane aplikacji\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx [2013-02-17]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [602112 2010-02-11] (ATI Technologies Inc.) [File not signed]
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-02] (AVAST Software)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
S2 avast! Firewall; "C:\Program Files\AVAST Software\Avast\afwServ.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-08-02] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-08-02] (AVAST Software)
R0 aswNdis; C:\WINDOWS\System32\DRIVERS\aswNdis.sys [12112 2013-09-25] (ALWIL Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-08-02] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-08-02] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-08-02] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-08-02] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-08-02] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-08-02] ()
R3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [3565056 2010-02-11] (ATI Technologies Inc.) [File not signed]
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R2 CX23880; C:\WINDOWS\System32\drivers\cx88vid.sys [270336 2005-12-09] (AVerMedia Technologies, Inc.)
R2 CX88XBAR; C:\WINDOWS\System32\drivers\CX88XBAR.sys [9312 2005-12-09] (AVerMedia Technologies, Inc.)
R2 CXTUNE; C:\WINDOWS\System32\drivers\CX88TUNE.sys [32032 2005-12-09] (AVerMedia Technologies, Inc.)
R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-14] (Microsoft Corporation)
R2 IOPort; C:\WINDOWS\system32\DRIVERS\IOPORT.SYS [6144 2001-03-01] (Erik Salaj) [File not signed]
R3 ms_mpu401; C:\WINDOWS\System32\drivers\msmpu401.sys [2944 2001-08-17] (Microsoft Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 nvax; C:\WINDOWS\System32\drivers\nvax.sys [36864 2003-08-13] (NVIDIA Corporation)
R3 NVENET; C:\WINDOWS\System32\DRIVERS\NVENET.sys [70656 2003-06-06] (NVIDIA Corporation)
R3 nvnforce; C:\WINDOWS\System32\drivers\nvapu.sys [311552 2003-08-13] (NVIDIA Corporation)
R0 nv_agp; C:\WINDOWS\System32\DRIVERS\nv_agp.sys [18688 2003-03-19] (NVIDIA Corporation)
R0 si3112r; C:\WINDOWS\System32\drivers\si3112r.sys [89749 2003-05-09] (Silicon Image, Inc) [File not signed]
R0 SiFilter; C:\WINDOWS\System32\DRIVERS\SiWinAcc.sys [9600 2003-02-12] (Silicon Image, Inc.) [File not signed]
R0 SiWinAcc; C:\WINDOWS\System32\drivers\SiWinAcc.sys [9600 2003-02-12] (Silicon Image, Inc.) [File not signed]
R2 WIBUKEY; C:\WINDOWS\System32\DRIVERS\WibuKey.sys [78648 2009-12-03] (WIBU-SYSTEMS AG)
R3 yukonx86; C:\WINDOWS\System32\DRIVERS\yukonx86.sys [176256 2003-10-16] (Marvell Semiconductor Inc.) [File not signed]
S1 aswKbd; \??\C:\WINDOWS\system32\drivers\aswKbd.sys [X]
S3 CtClsFlt; system32\DRIVERS\CtClsFlt.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-17 17:32 - 2014-11-17 19:05 - 00000000 ____D () C:\FRST
2014-11-17 17:05 - 2014-11-17 17:11 - 00030484 _____ () C:\WINDOWS\setupapi.log
2014-11-17 17:05 - 2014-11-17 17:05 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-11-17 17:05 - 2014-11-17 17:05 - 00000000 _____ () C:\WINDOWS\setupact.log
2014-11-17 17:04 - 2014-11-17 17:04 - 00000000 ____D () C:\WINDOWS\CSC
2014-11-16 21:12 - 2014-11-16 21:12 - 00000000 ____D () C:\Documents and Settings\Gabi\Ustawienia lokalne\Dane aplikacji\Temp
2014-11-16 21:12 - 2014-11-16 21:12 - 00000000 ____D () C:\Documents and Settings\Gabi\Ustawienia lokalne\Dane aplikacji\Mozilla
2014-11-16 21:12 - 2014-11-16 21:12 - 00000000 ____D () C:\Documents and Settings\Gabi\Dane aplikacji\Mozilla
2014-11-16 21:02 - 2014-11-16 21:02 - 00000000 ____D () C:\Documents and Settings\Gabi\Dane aplikacji\AVAST Software
2014-11-14 13:51 - 2014-11-14 13:51 - 00401942 _____ () C:\Documents and Settings\Krzych\Dane aplikacji\bytor.bmp
2014-11-10 21:37 - 2014-11-10 21:37 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
2014-11-10 21:36 - 2014-11-10 21:36 - 04976456 _____ (Piriform Ltd) C:\Documents and Settings\Krzych\Moje dokumenty\ccsetup419.exe
2014-11-08 22:12 - 2014-11-17 17:36 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-17 19:06 - 2008-02-18 18:44 - 00000000 ____D () C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp
2014-11-17 19:05 - 2012-09-01 17:20 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-11-17 19:04 - 2014-04-05 21:02 - 00000280 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-507921405-1078081533-725345543-1003.job
2014-11-17 19:04 - 2005-09-02 10:37 - 00005438 _____ () C:\WINDOWS\AVerTV.ini
2014-11-17 19:03 - 2014-10-08 20:05 - 00000412 _____ () C:\WINDOWS\Tasks\RNUpgradeHelperLogonPrompt_Krzych.job
2014-11-17 19:03 - 2014-02-02 22:20 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-11-17 19:03 - 2014-02-02 22:20 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-11-17 19:03 - 2013-03-04 19:02 - 00000302 _____ () C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-507921405-1078081533-725345543-1003.job
2014-11-17 19:03 - 2008-02-18 18:43 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-17 19:03 - 2008-02-18 18:38 - 00365403 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-17 18:41 - 2008-02-18 20:38 - 00001635 _____ () C:\WINDOWS\WINCMD.INI
2014-11-17 18:41 - 2008-02-18 19:19 - 00984778 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-17 18:41 - 2001-10-26 15:15 - 00448004 _____ () C:\WINDOWS\system32\perfh015.dat
2014-11-17 18:41 - 2001-10-26 15:15 - 00074230 _____ () C:\WINDOWS\system32\perfc015.dat
2014-11-17 17:13 - 2001-07-21 21:15 - 00000231 _____ () C:\WINDOWS\system.ini
2014-11-17 17:11 - 2008-02-18 19:18 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-11-17 17:11 - 2008-02-18 19:18 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-11-16 23:35 - 2012-05-11 16:30 - 00000188 ___SH () C:\Documents and Settings\Gabi\ntuser.ini
2014-11-16 23:35 - 2008-02-18 19:24 - 00524288 _____ () C:\WINDOWS\system32\config\ACEEvent.evt
2014-11-16 23:35 - 2008-02-18 18:43 - 00032494 _____ () C:\WINDOWS\SchedLgU.Txt
2014-11-16 23:20 - 2014-10-08 20:04 - 00000402 _____ () C:\WINDOWS\Tasks\ReclaimerUpdateXML_Krzych.job
2014-11-16 22:36 - 2014-03-02 07:08 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-16 22:27 - 2012-05-11 16:30 - 00000000 ___HD () C:\Documents and Settings\Gabi\Ustawienia lokalne
2014-11-16 21:12 - 2012-05-11 16:30 - 00000000 __RHD () C:\Documents and Settings\Gabi\Dane aplikacji
2014-11-16 21:12 - 2012-05-11 16:30 - 00000000 ___HD () C:\Documents and Settings\Gabi\Ustawienia lokalne\Dane aplikacji
2014-11-16 21:12 - 2012-05-11 16:30 - 00000000 ____D () C:\Documents and Settings\Gabi\Ustawienia lokalne\Temp
2014-11-16 21:12 - 2008-02-18 18:36 - 00000000 ____D () C:\Program Files\Messenger
2014-11-16 21:08 - 2012-05-11 16:30 - 00000000 ____D () C:\Documents and Settings\Gabi\Pulpit
2014-11-16 21:08 - 2008-02-18 20:39 - 00000000 ____D () C:\totalcmd
2014-11-16 21:07 - 2012-05-11 16:30 - 00000000 ___RD () C:\Documents and Settings\Gabi\Menu Start\Programy\Akcesoria
2014-11-16 20:53 - 2001-07-21 21:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-11-16 20:52 - 2013-03-04 19:02 - 00000310 _____ () C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-507921405-1078081533-725345543-1003.job
2014-11-16 20:46 - 2008-02-18 19:12 - 00102400 _____ () C:\WINDOWS\DUMPa48d.tmp
2014-11-14 15:18 - 2008-02-18 18:44 - 00000188 ___SH () C:\Documents and Settings\Krzych\ntuser.ini
2014-11-14 15:15 - 2014-02-02 22:05 - 00000000 ____D () C:\Documents and Settings\Krzych\Dane aplikacji\Skype
2014-11-14 14:36 - 2012-11-20 21:44 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-11-14 14:36 - 2011-12-10 12:33 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-11-14 13:51 - 2008-02-18 18:44 - 00000000 __RHD () C:\Documents and Settings\Krzych\Dane aplikacji
2014-11-14 13:51 - 2008-02-18 18:44 - 00000000 ___RD () C:\Documents and Settings\Krzych\Menu Start\Programy\Autostart
2014-11-14 13:30 - 2013-03-20 22:54 - 00000000 ____D () C:\WSCAD55
2014-11-14 13:29 - 2014-02-05 07:27 - 00019460 _____ () C:\Documents and Settings\Krzych\Pulpit\Rachunki.xls.id-6069721714_decode@india.com
2014-11-14 13:29 - 2012-10-07 10:04 - 1835007498 _____ () C:\Documents and Settings\Krzych\Pulpit\Prometeusz 2012.PL.480p.WEBDL.XviD.AC3-BiDA.avi.id-6069721714_decode@india.com
2014-11-14 13:29 - 2012-09-02 21:29 - 00639492 _____ () C:\Documents and Settings\Krzych\Pulpit\Paliwo Schemat ver. 3.1.xls.id-6069721714_decode@india.com
2014-11-14 13:29 - 2012-08-01 16:56 - 01146884 _____ () C:\Documents and Settings\Krzych\Pulpit\P1000339.JPG.id-6069721714_decode@india.com
2014-11-14 13:29 - 2012-04-14 16:28 - 00034308 _____ () C:\Documents and Settings\Krzych\Pulpit\Podanie garaże.doc.id-6069721714_decode@india.com
2014-11-14 13:29 - 2012-01-23 21:46 - 00000000 ____D () C:\Documents and Settings\Krzych\Pulpit\Nowy folder (2)
2014-11-14 13:29 - 2012-01-23 21:46 - 00000000 ____D () C:\Documents and Settings\Krzych\Pulpit\Nowy folder
2014-11-14 13:29 - 2012-01-23 21:46 - 00000000 ____D () C:\Documents and Settings\Krzych\Pulpit\foto telefon
2014-11-14 13:29 - 2008-02-18 18:44 - 00000000 ___HD () C:\Documents and Settings\Krzych\Szablony
2014-11-14 13:29 - 2008-02-18 18:44 - 00000000 ____D () C:\Documents and Settings\Krzych\Pulpit
2014-11-14 13:28 - 2013-12-31 19:24 - 00000000 ____D () C:\Documents and Settings\Krzych\Moje dokumenty\Pobieranie
2014-11-14 13:28 - 2012-05-11 16:30 - 00000000 ___HD () C:\Documents and Settings\Gabi\Szablony
2014-11-14 13:28 - 2008-02-18 19:18 - 00000000 ___HD () C:\Documents and Settings\Default User\Szablony
2014-11-13 08:11 - 2008-02-18 19:12 - 00102400 _____ () C:\WINDOWS\DUMPfef1.tmp
2014-11-13 08:07 - 2008-02-18 19:12 - 00102400 _____ () C:\WINDOWS\DUMPa8b3.tmp
2014-11-13 08:05 - 2008-02-18 19:12 - 00102400 _____ () C:\WINDOWS\DUMPa7c9.tmp
2014-11-10 21:48 - 2014-04-30 20:21 - 00000000 ____D () C:\WINDOWS\Minidump
2014-11-10 21:48 - 2011-12-13 15:52 - 00000000 ____D () C:\Documents and Settings\Krzych\Dane aplikacji\TeamViewer
2014-11-10 21:48 - 2008-02-18 18:44 - 00000000 ____D () C:\Documents and Settings\Krzych
2014-11-10 21:37 - 2013-12-31 18:52 - 00000682 _____ () C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
2014-11-10 21:36 - 2013-12-31 18:52 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-10 21:36 - 2008-02-18 18:44 - 00000000 ___RD () C:\Documents and Settings\Krzych\Moje dokumenty
2014-11-10 20:34 - 2012-12-25 10:52 - 00000288 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-507921405-1078081533-725345543-1003.job
2014-11-10 20:31 - 2008-02-18 19:12 - 00102400 _____ () C:\WINDOWS\DUMP9e34.tmp
2014-11-09 13:13 - 2014-02-02 22:04 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Skype
2014-11-09 13:07 - 2013-12-31 19:13 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-08 17:36 - 2008-02-18 19:12 - 00102400 _____ () C:\WINDOWS\DUMPa46d.tmp
2014-11-08 17:33 - 2008-02-18 19:12 - 00102400 _____ () C:\WINDOWS\DUMPa2b8.tmp

Some content of TEMP:
====================
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\AVG.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\DeltaTB.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\DTLite4471-0333.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\fp_pl_pfs_installer-1.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\fp_pl_pfs_installer-2.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\fp_pl_pfs_installer.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\lowproc.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\PCPerformerSetup.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\SkypeSetup.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\stubhelper.dll
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\uninst1.exe
C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp\UNINSTALL.EXE


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================