Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-11-2014 03 Ran by Krzych (administrator) on BRAKRZY-41D24F2 on 18-11-2014 17:45:30 Running from P:\ Loaded Profile: Krzych (Available profiles: Krzych & Gabi) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe (Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe (NVIDIA Corporation) C:\WINDOWS\system32\sstray.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (AVerMedia Technologies, Inc.) C:\Program Files\AVerTV\QuickTV.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [nForce Tray Options] => sstray.exe /r HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2010-02-10] (Advanced Micro Devices, Inc.) HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [295072 2012-12-25] (RealNetworks, Inc.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-02] (AVAST Software) HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.) HKU\S-1-5-21-507921405-1078081533-725345543-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22067296 2014-10-01] (Skype Technologies S.A.) HKU\S-1-5-21-507921405-1078081533-725345543-1003\...\Run: [CTRegRun] => C:\WINDOWS\CTRegRun.EXE [53248 2006-10-06] (Creative Technology Ltd ) HKU\S-1-5-21-507921405-1078081533-725345543-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4826904 2014-10-30] (Piriform Ltd) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\QuickTV.lnk ShortcutTarget: QuickTV.lnk -> C:\Program Files\AVerTV\QuickTV.exe (AVerMedia Technologies, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-507921405-1078081533-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-507921405-1078081533-725345543-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.onet.pl/ BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll No File BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKU\S-1-5-21-507921405-1078081533-725345543-1003 -> &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKU\S-1-5-21-507921405-1078081533-725345543-1003 -> &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab FireFox: ======== FF ProfilePath: C:\Documents and Settings\Krzych\Dane aplikacji\Mozilla\Firefox\Profiles\tcf7fn2e.default FF SearchEngineOrder.3: Bing FF Homepage: www.wp.pl/?src01=dp220141110 FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP22DF&PC=UP22&q= FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=16.0.0.282 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.0 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.0 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.0 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=16.0.0.282 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CrazyTalk4Native.dll (C3D) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctdomemhelper.dll (Reallusion Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctframeplayerobject.dll (Reallusion Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctplayerobject.dll (Reallusion Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\imagickrt.dll (BEXTech) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npRLCT4Player.dll ( ) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\rlcontentclass.dll (Reallusion Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\RLMusicPacker.dll () FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\RLMusicUnpacker.dll () FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\RLVoicePacker.dll () FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\RLVoiceUnpacker.dll () FF SearchPlugin: C:\Documents and Settings\Krzych\Dane aplikacji\Mozilla\Firefox\Profiles\tcf7fn2e.default\searchplugins\bingp.xml FF HKLM\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2012-12-25] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-12-10] FF Extension: No Name - wrc@avast.com [Not Found] Chrome: ======= ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [602112 2010-02-11] (ATI Technologies Inc.) [File not signed] S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] () [File not signed] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-02] (AVAST Software) R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] () S2 avast! Firewall; "C:\Program Files\AVAST Software\Avast\afwServ.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-08-02] () R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-08-02] (AVAST Software) R0 aswNdis; C:\WINDOWS\System32\DRIVERS\aswNdis.sys [12112 2013-09-25] (ALWIL Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-08-02] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-08-02] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-08-02] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-08-02] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-08-02] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-08-02] () R3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [3565056 2010-02-11] (ATI Technologies Inc.) [File not signed] S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation) R2 CX23880; C:\WINDOWS\System32\drivers\cx88vid.sys [270336 2005-12-09] (AVerMedia Technologies, Inc.) R2 CX88XBAR; C:\WINDOWS\System32\drivers\CX88XBAR.sys [9312 2005-12-09] (AVerMedia Technologies, Inc.) R2 CXTUNE; C:\WINDOWS\System32\drivers\CX88TUNE.sys [32032 2005-12-09] (AVerMedia Technologies, Inc.) R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-14] (Microsoft Corporation) R2 IOPort; C:\WINDOWS\system32\DRIVERS\IOPORT.SYS [6144 2001-03-01] (Erik Salaj) [File not signed] R3 ms_mpu401; C:\WINDOWS\System32\drivers\msmpu401.sys [2944 2001-08-17] (Microsoft Corporation) S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation) R3 nvax; C:\WINDOWS\System32\drivers\nvax.sys [36864 2003-08-13] (NVIDIA Corporation) R3 NVENET; C:\WINDOWS\System32\DRIVERS\NVENET.sys [70656 2003-06-06] (NVIDIA Corporation) R3 nvnforce; C:\WINDOWS\System32\drivers\nvapu.sys [311552 2003-08-13] (NVIDIA Corporation) R0 nv_agp; C:\WINDOWS\System32\DRIVERS\nv_agp.sys [18688 2003-03-19] (NVIDIA Corporation) R0 si3112r; C:\WINDOWS\System32\drivers\si3112r.sys [89749 2003-05-09] (Silicon Image, Inc) [File not signed] R0 SiFilter; C:\WINDOWS\System32\DRIVERS\SiWinAcc.sys [9600 2003-02-12] (Silicon Image, Inc.) [File not signed] R0 SiWinAcc; C:\WINDOWS\System32\drivers\SiWinAcc.sys [9600 2003-02-12] (Silicon Image, Inc.) [File not signed] R2 WIBUKEY; C:\WINDOWS\System32\DRIVERS\WibuKey.sys [78648 2009-12-03] (WIBU-SYSTEMS AG) R3 yukonx86; C:\WINDOWS\System32\DRIVERS\yukonx86.sys [176256 2003-10-16] (Marvell Semiconductor Inc.) [File not signed] S1 aswKbd; \??\C:\WINDOWS\system32\drivers\aswKbd.sys [X] S4 IntelIde; No ImagePath U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) U1 WS2IFSL; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-18 17:33 - 2014-11-18 17:33 - 00102400 _____ () C:\WINDOWS\Minidump\Mini111814-01.dmp 2014-11-17 17:32 - 2014-11-18 17:45 - 00000000 ____D () C:\FRST 2014-11-17 17:05 - 2014-11-17 17:11 - 00030484 _____ () C:\WINDOWS\setupapi.log 2014-11-17 17:05 - 2014-11-17 17:05 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-11-17 17:05 - 2014-11-17 17:05 - 00000000 _____ () C:\WINDOWS\setupact.log 2014-11-17 17:04 - 2014-11-17 19:41 - 00000000 __SHD () C:\WINDOWS\CSC 2014-11-16 21:12 - 2014-11-16 21:12 - 00000000 ____D () C:\Documents and Settings\Gabi\Ustawienia lokalne\Dane aplikacji\Temp 2014-11-16 21:12 - 2014-11-16 21:12 - 00000000 ____D () C:\Documents and Settings\Gabi\Ustawienia lokalne\Dane aplikacji\Mozilla 2014-11-16 21:12 - 2014-11-16 21:12 - 00000000 ____D () C:\Documents and Settings\Gabi\Dane aplikacji\Mozilla 2014-11-16 21:02 - 2014-11-16 21:02 - 00000000 ____D () C:\Documents and Settings\Gabi\Dane aplikacji\AVAST Software 2014-11-10 21:37 - 2014-11-10 21:37 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner 2014-11-10 21:36 - 2014-11-10 21:36 - 04976456 _____ (Piriform Ltd) C:\Documents and Settings\Krzych\Moje dokumenty\ccsetup419.exe 2014-11-08 22:12 - 2014-11-17 17:36 - 00000000 ____D () C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-18 17:46 - 2012-09-01 17:20 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2014-11-18 17:45 - 2008-02-18 18:44 - 00000000 ____D () C:\Documents and Settings\Krzych\Ustawienia lokalne\Temp 2014-11-18 17:41 - 2014-10-08 20:05 - 00000412 _____ () C:\WINDOWS\Tasks\RNUpgradeHelperLogonPrompt_Krzych.job 2014-11-18 17:41 - 2014-04-05 21:02 - 00000280 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-507921405-1078081533-725345543-1003.job 2014-11-18 17:41 - 2014-02-02 22:20 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-11-18 17:41 - 2013-03-04 19:02 - 00000302 _____ () C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-507921405-1078081533-725345543-1003.job 2014-11-18 17:41 - 2008-02-18 18:44 - 00000000 __SHD () C:\Documents and Settings\Krzych\Ustawienia lokalne\Historia 2014-11-18 17:41 - 2008-02-18 18:43 - 00032510 _____ () C:\WINDOWS\SchedLgU.Txt 2014-11-18 17:41 - 2008-02-18 18:42 - 00000000 __SHD () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Historia 2014-11-18 17:41 - 2008-02-18 18:38 - 00369990 _____ () C:\WINDOWS\WindowsUpdate.log 2014-11-18 17:41 - 2005-09-02 10:37 - 00005438 _____ () C:\WINDOWS\AVerTV.ini 2014-11-18 17:40 - 2014-02-02 22:20 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-11-18 17:40 - 2008-02-18 18:43 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-11-18 17:40 - 2008-02-18 18:43 - 00000000 __SHD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Historia 2014-11-18 17:38 - 2008-02-18 19:24 - 00524288 _____ () C:\WINDOWS\system32\config\ACEEvent.evt 2014-11-18 17:38 - 2008-02-18 18:44 - 00000188 ___SH () C:\Documents and Settings\Krzych\ntuser.ini 2014-11-18 17:37 - 2012-05-11 16:30 - 00000000 __SHD () C:\Documents and Settings\Gabi\Ustawienia lokalne\Historia 2014-11-18 17:37 - 2012-05-11 16:30 - 00000000 ____D () C:\Documents and Settings\Gabi\Ustawienia lokalne\Temp 2014-11-18 17:37 - 2008-02-18 19:18 - 00000000 ___SD () C:\Documents and Settings\Default User\Ustawienia lokalne\Historia 2014-11-18 17:37 - 2008-02-18 18:43 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Temp 2014-11-18 17:36 - 2014-03-02 07:08 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-11-18 17:36 - 2008-02-18 19:18 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-11-18 17:36 - 2008-02-18 18:44 - 00000000 __RHD () C:\Documents and Settings\Krzych\Dane aplikacji 2014-11-18 17:36 - 2008-02-18 18:44 - 00000000 ___RD () C:\Documents and Settings\Krzych\Menu Start\Programy\Autostart 2014-11-18 17:35 - 2008-02-18 20:38 - 00001659 _____ () C:\WINDOWS\WINCMD.INI 2014-11-18 17:33 - 2014-04-30 20:21 - 00000000 ____D () C:\WINDOWS\Minidump 2014-11-17 19:18 - 2008-02-18 18:44 - 00000000 ____D () C:\Documents and Settings\Krzych 2014-11-17 18:41 - 2008-02-18 19:19 - 00984778 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-11-17 18:41 - 2001-10-26 15:15 - 00448004 _____ () C:\WINDOWS\system32\perfh015.dat 2014-11-17 18:41 - 2001-10-26 15:15 - 00074230 _____ () C:\WINDOWS\system32\perfc015.dat 2014-11-17 17:13 - 2001-07-21 21:15 - 00000231 _____ () C:\WINDOWS\system.ini 2014-11-17 17:11 - 2008-02-18 19:18 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-11-17 17:11 - 2008-02-18 19:18 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-11-16 23:35 - 2012-05-11 16:30 - 00000188 ___SH () C:\Documents and Settings\Gabi\ntuser.ini 2014-11-16 23:20 - 2014-10-08 20:04 - 00000402 _____ () C:\WINDOWS\Tasks\ReclaimerUpdateXML_Krzych.job 2014-11-16 22:27 - 2012-05-11 16:30 - 00000000 ___HD () C:\Documents and Settings\Gabi\Ustawienia lokalne 2014-11-16 21:12 - 2012-05-11 16:30 - 00000000 __RHD () C:\Documents and Settings\Gabi\Dane aplikacji 2014-11-16 21:12 - 2012-05-11 16:30 - 00000000 ___HD () C:\Documents and Settings\Gabi\Ustawienia lokalne\Dane aplikacji 2014-11-16 21:12 - 2008-02-18 18:36 - 00000000 ____D () C:\Program Files\Messenger 2014-11-16 21:08 - 2012-05-11 16:30 - 00000000 ____D () C:\Documents and Settings\Gabi\Pulpit 2014-11-16 21:08 - 2008-02-18 20:39 - 00000000 ____D () C:\totalcmd 2014-11-16 21:07 - 2012-05-11 16:30 - 00000000 ___RD () C:\Documents and Settings\Gabi\Menu Start\Programy\Akcesoria 2014-11-16 20:53 - 2001-07-21 21:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2014-11-16 20:52 - 2013-03-04 19:02 - 00000310 _____ () C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-507921405-1078081533-725345543-1003.job 2014-11-14 15:15 - 2014-02-02 22:05 - 00000000 ____D () C:\Documents and Settings\Krzych\Dane aplikacji\Skype 2014-11-14 14:36 - 2012-11-20 21:44 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2014-11-14 14:36 - 2011-12-10 12:33 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2014-11-14 13:30 - 2013-03-20 22:54 - 00000000 ____D () C:\WSCAD55 2014-11-14 13:29 - 2014-02-05 07:27 - 00019460 _____ () C:\Documents and Settings\Krzych\Pulpit\Rachunki.xls.id-6069721714_decode@india.com 2014-11-14 13:29 - 2012-10-07 10:04 - 1835007498 _____ () C:\Documents and Settings\Krzych\Pulpit\Prometeusz 2012.PL.480p.WEBDL.XviD.AC3-BiDA.avi.id-6069721714_decode@india.com 2014-11-14 13:29 - 2012-09-02 21:29 - 00639492 _____ () C:\Documents and Settings\Krzych\Pulpit\Paliwo Schemat ver. 3.1.xls.id-6069721714_decode@india.com 2014-11-14 13:29 - 2012-08-01 16:56 - 01146884 _____ () C:\Documents and Settings\Krzych\Pulpit\P1000339.JPG.id-6069721714_decode@india.com 2014-11-14 13:29 - 2012-04-14 16:28 - 00034308 _____ () C:\Documents and Settings\Krzych\Pulpit\Podanie garaże.doc.id-6069721714_decode@india.com 2014-11-14 13:29 - 2012-01-23 21:46 - 00000000 ____D () C:\Documents and Settings\Krzych\Pulpit\Nowy folder (2) 2014-11-14 13:29 - 2012-01-23 21:46 - 00000000 ____D () C:\Documents and Settings\Krzych\Pulpit\Nowy folder 2014-11-14 13:29 - 2012-01-23 21:46 - 00000000 ____D () C:\Documents and Settings\Krzych\Pulpit\foto telefon 2014-11-14 13:29 - 2008-02-18 18:44 - 00000000 ___HD () C:\Documents and Settings\Krzych\Szablony 2014-11-14 13:29 - 2008-02-18 18:44 - 00000000 ____D () C:\Documents and Settings\Krzych\Pulpit 2014-11-14 13:28 - 2013-12-31 19:24 - 00000000 ____D () C:\Documents and Settings\Krzych\Moje dokumenty\Pobieranie 2014-11-14 13:28 - 2012-05-11 16:30 - 00000000 ___HD () C:\Documents and Settings\Gabi\Szablony 2014-11-14 13:28 - 2008-02-18 19:18 - 00000000 ___HD () C:\Documents and Settings\Default User\Szablony 2014-11-10 21:48 - 2011-12-13 15:52 - 00000000 ____D () C:\Documents and Settings\Krzych\Dane aplikacji\TeamViewer 2014-11-10 21:37 - 2013-12-31 18:52 - 00000682 _____ () C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk 2014-11-10 21:36 - 2013-12-31 18:52 - 00000000 ____D () C:\Program Files\CCleaner 2014-11-10 21:36 - 2008-02-18 18:44 - 00000000 ___RD () C:\Documents and Settings\Krzych\Moje dokumenty 2014-11-10 20:34 - 2012-12-25 10:52 - 00000288 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-507921405-1078081533-725345543-1003.job 2014-11-09 13:13 - 2014-02-02 22:04 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Skype 2014-11-09 13:07 - 2013-12-31 19:13 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================