Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-12-2014
Ran by Agata (administrator) on TOSHIBA on 29-12-2014 08:46:10
Running from C:\Documents and Settings\Agata\Moje dokumenty\Downloads\2014-12-29\FRST
Loaded Profile: Agata (Available profiles: Agata & Administrator)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(COMPAL ELECTRONIC INC.) C:\Program Files\Toshiba\E-KEY\CeEKey.exe
(COMPAL ELECTRONIC INC.) C:\Program Files\Toshiba\TouchPad\TPTray.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA Direct Disc Writer\DDWMon.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSServ.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(TOSHIBA) C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(TOSHIBA Corporation) C:\WINDOWS\system32\TODDSrv.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(TeamViewer GmbH) C:\DOCUME~1\Agata\USTAWI~1\Temp\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\DOCUME~1\Agata\USTAWI~1\Temp\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\DOCUME~1\Agata\USTAWI~1\Temp\TeamViewer\TeamViewer_Desktop.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16377344 2007-06-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [69632 2005-05-04] (Realtek Semiconductor Corp.)
HKLM\...\Run: [CeEKEY] => C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe [651264 2007-07-06] (COMPAL ELECTRONIC INC.)
HKLM\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe [28672 2004-05-01] (TOSHIBA CO.,LTD.)
HKLM\...\Run: [SVPWUTIL] => C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe [65536 2006-05-25] (TOSHIBA)
HKLM\...\Run: [TPNF] => C:\Program Files\TOSHIBA\TouchPad\TPTray.exe [53248 2007-06-01] (COMPAL ELECTRONIC INC.)
HKLM\...\Run: [NDSTray.exe] => NDSTray.exe
HKLM\...\Run: [DDWMon] => C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe [495616 2007-04-26] (TOSHIBA Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2296600 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [CFSServ.exe] => CFSServ.exe -NoClient
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-27] (AVAST Software)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-2017020554-2505807170-1683698369-1005\...\Run: [TOSCDSPD] => C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe [65536 2005-04-12] (TOSHIBA)
HKU\S-1-5-21-2017020554-2505807170-1683698369-1005\...\MountPoints2: {e7b55b49-0e49-11e4-9f7c-001de095bad9} - G:\AutoRun.exe
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Przyspieszenie uruchomienia programu AutoCAD.lnk
ShortcutTarget: Przyspieszenie uruchomienia programu AutoCAD.lnk -> C:\Program Files\Common Files\Autodesk Shared\acstart16.exe (Autodesk, Inc)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk)
BootExecute: autocheck autochk * aswBoot.exe /M:1779a4484 /dir:"C:\Program Files\AVAST Software\Avast"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-2017020554-2505807170-1683698369-1005\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1398068056634
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1398068151400
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-04-21]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-27]

Chrome: 
=======
CHR DefaultSearchKeyword: Default -> 9AFE0C67E8E7511AE5AC1B67C54F654BBA090AC60570957BED3B40DFD7779E52
CHR DefaultSearchURL: Default -> C33343379DADA8322167CB52A0B90E41978F8114A995987570004D9262288988
CHR Profile: C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-05]
CHR Extension: (Dysk Google) - C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-05]
CHR Extension: (YouTube) - C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-05]
CHR Extension: (Szukaj w Google) - C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-05]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-27]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-05]
CHR Extension: (Gmail) - C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-05]
CHR Extension: (Unuisaloes) - C:\Documents and Settings\All Users\Dane aplikacji\pbphckkhomkgbgpgcgpkpncmdmkfkbnk\ [2014-05-05]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-27]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-27] (AVAST Software)
R2 CFSvcs; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2005-01-18] (TOSHIBA CORPORATION) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-10-23] (Oracle Corporation)
R2 TODDSrv; C:\WINDOWS\system32\TODDSrv.exe [114688 2006-05-25] (TOSHIBA Corporation) [File not signed]
S2 24c54e38; "C:\WINDOWS\system32\rundll32.exe" "c:\Program Files\DeltaFix\DeltaFix.dll",serv <==== ATTENTION

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-12-27] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-12-27] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-12-27] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-12-27] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-12-27] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2014-12-27] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-12-27] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-12-27] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S3 LEqdUsb; C:\WINDOWS\System32\Drivers\LEqdUsb.Sys [42264 2013-05-23] (Logitech, Inc.)
S3 LHidEqd; C:\WINDOWS\System32\Drivers\LHidEqd.Sys [10136 2013-05-23] (Logitech, Inc.)
S3 LUsbFilt; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [28312 2013-05-23] (Logitech, Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R2 Netdevio; C:\WINDOWS\System32\DRIVERS\netdevio.sys [12032 2003-01-29] (TOSHIBA Corporation.) [File not signed]
R3 NETw4x32; C:\WINDOWS\System32\DRIVERS\NETw4x32.sys [2203520 2007-04-27] (Intel Corporation)
R2 tdudf; C:\WINDOWS\System32\DRIVERS\tdudf.sys [105856 2007-03-26] (TOSHIBA Corporation)
R1 TPwSav; C:\WINDOWS\system32\drivers\TPwSav.sys [11264 2006-06-22] (TOSHIBA ) [File not signed]
R2 trudf; C:\WINDOWS\System32\DRIVERS\trudf.sys [134016 2007-02-19] (TOSHIBA Corporation)
R3 UVCFTR; C:\WINDOWS\System32\Drivers\UVCFTR_S.SYS [11776 2007-04-16] (Chicony Electronics Co., Ltd.)
S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Corporation)
S3 ALSysIO; \??\C:\DOCUME~1\Agata\USTAWI~1\Temp\ALSysIO.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 Tosrfcom; No ImagePath
S3 TpChoice; system32\DRIVERS\TpChoice.sys [X]
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-29 08:46 - 2014-12-29 08:46 - 00000000 ____D () C:\FRST
2014-12-27 20:55 - 2014-12-27 21:03 - 00000000 ____D () C:\Documents and Settings\Agata\Dane aplikacji\Dropbox
2014-12-27 20:53 - 2014-12-27 21:03 - 00000000 ____D () C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji\Temp
2014-12-27 20:46 - 2014-12-29 08:46 - 00000362 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-12-27 20:46 - 2014-12-27 20:46 - 00787800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-27 20:46 - 2014-12-27 20:46 - 00423784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-12-27 20:46 - 2014-12-27 20:46 - 00206248 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-27 20:46 - 2014-12-27 20:46 - 00070384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-27 20:46 - 2014-12-27 20:46 - 00057928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-12-27 20:46 - 2014-12-27 20:46 - 00055240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-12-27 20:46 - 2014-12-27 20:46 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-27 20:46 - 2014-12-27 20:46 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-27 20:46 - 2014-12-27 20:46 - 00001737 _____ () C:\Documents and Settings\All Users\Pulpit\Avast Free Antivirus.lnk
2014-12-27 20:46 - 2014-12-27 20:46 - 00000000 ____D () C:\WINDOWS\jumpshot.com
2014-12-27 20:46 - 2014-12-27 20:46 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVAST Software
2014-12-27 20:46 - 2014-12-27 20:46 - 00000000 ____D () C:\Documents and Settings\Agata\Dane aplikacji\AVAST Software
2014-12-27 20:46 - 2014-12-27 20:45 - 00291352 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-27 20:45 - 2014-12-27 20:45 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-27 20:40 - 2014-12-27 20:40 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-27 20:39 - 2014-12-27 20:40 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
2014-12-27 09:59 - 2014-12-27 10:02 - 00000000 ____D () C:\AdwCleaner
2014-12-26 21:17 - 2014-12-26 21:42 - 648991288 _____ () C:\Documents and Settings\Agata\Pulpit\123.mp4
2014-12-26 21:09 - 2014-12-26 21:09 - 00000000 ____D () C:\Program Files\YOutUbeAAdBlOcke
2014-12-26 21:09 - 2014-12-26 21:09 - 00000000 ____D () C:\Program Files\Streak for Gmail
2014-12-26 21:08 - 2014-12-29 08:34 - 00000000 ____D () C:\Program Files\uNisaliees
2014-12-26 21:08 - 2014-12-26 21:08 - 00000000 ____D () C:\Program Files\Unuisaloes
2014-12-26 21:08 - 2014-12-26 21:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\pbphckkhomkgbgpgcgpkpncmdmkfkbnk
2014-12-15 10:17 - 2014-12-15 10:17 - 00000578 _____ () C:\Documents and Settings\Agata\Pulpit\Skrót (2) do projekty.lnk
2014-12-04 12:05 - 2014-12-12 13:46 - 00000389 _____ () C:\Documents and Settings\Agata\Pulpit\Skrót do projekty.lnk
2014-12-02 09:40 - 2014-12-01 16:14 - 37377857 _____ () C:\Documents and Settings\Agata\Moje dokumenty\inwentaryzacja%20lokalu%20mieszkalnego%20Węgorzyno%20Podgórna%2011-2.doc_0odt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-29 08:46 - 2014-04-21 08:32 - 00000000 ____D () C:\Documents and Settings\Agata\Ustawienia lokalne\Temp
2014-12-29 08:35 - 2007-09-05 11:50 - 01978010 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-29 08:34 - 2014-04-21 19:00 - 00000462 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{6FC3905B-F2F2-4C4F-9D6A-EC411EF3D92E}.job
2014-12-29 08:17 - 2014-04-21 18:58 - 00000222 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2014-12-29 08:17 - 2014-04-21 09:17 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-29 08:17 - 2007-09-05 13:48 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-12-29 08:17 - 2007-09-05 13:48 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-12-29 08:17 - 2007-09-05 11:54 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-29 08:17 - 2007-09-05 11:41 - 00001158 _____ () C:\WINDOWS\system32\wpa.dbl
2014-12-28 23:00 - 2014-04-21 08:32 - 00000188 ___SH () C:\Documents and Settings\Agata\ntuser.ini
2014-12-28 23:00 - 2007-09-05 11:54 - 00032502 _____ () C:\WINDOWS\SchedLgU.Txt
2014-12-28 22:50 - 2014-04-21 09:17 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-28 22:30 - 2014-04-21 08:32 - 00000000 ____D () C:\Documents and Settings\Agata\Pulpit
2014-12-28 22:29 - 2007-09-05 13:47 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-12-28 22:27 - 2014-04-21 09:17 - 00000000 ____D () C:\Program Files\Google
2014-12-28 22:27 - 2007-09-05 13:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy
2014-12-28 22:26 - 2014-04-21 08:32 - 00000000 ___RD () C:\Documents and Settings\Agata\Menu Start\Programy
2014-12-28 12:42 - 2014-04-21 08:32 - 00000000 ____D () C:\Documents and Settings\Agata
2014-12-28 12:41 - 2014-04-28 23:02 - 00000000 ____D () C:\Documents and Settings\Agata\Dane aplikacji\vlc
2014-12-28 12:39 - 2007-09-05 13:46 - 01258009 _____ () C:\WINDOWS\setupapi.log
2014-12-27 20:55 - 2014-04-21 08:32 - 00000000 __RHD () C:\Documents and Settings\Agata\Dane aplikacji
2014-12-27 20:53 - 2014-04-21 08:32 - 00000000 ___HD () C:\Documents and Settings\Agata\Ustawienia lokalne\Dane aplikacji
2014-12-27 20:39 - 2007-09-05 13:46 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-12-27 10:02 - 2014-04-21 09:18 - 00000929 _____ () C:\Documents and Settings\All Users\Pulpit\Chrome.lnk
2014-12-27 10:02 - 2014-04-21 09:18 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome
2014-12-27 10:02 - 2014-04-21 08:32 - 00000751 _____ () C:\Documents and Settings\Agata\Menu Start\Programy\Internet Explorer.lnk
2014-12-22 11:08 - 2014-09-09 13:06 - 00000000 ____D () C:\M2Faktury
2014-12-22 09:05 - 2014-05-05 13:00 - 00016400 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2014-12-22 09:05 - 2014-05-05 13:00 - 00002500 _____ () C:\WINDOWS\LkmdfCoInst.log
2014-12-22 09:05 - 2007-09-05 13:46 - 00227719 _____ () C:\WINDOWS\setupact.log
2014-12-18 15:45 - 2014-05-08 12:45 - 00000000 ____D () C:\skany
2014-12-18 12:17 - 2014-06-04 15:04 - 00000000 ____D () C:\Documents and Settings\Agata\Pulpit\canon-skan
2014-12-18 12:14 - 2014-05-05 14:15 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\CanonIJPLM
2014-12-15 15:01 - 2014-04-28 23:09 - 00000000 ____D () C:\Documents and Settings\Agata\Dane aplikacji\Skype
2014-12-14 14:59 - 2014-04-28 23:09 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk
2014-12-13 08:44 - 2014-04-30 08:06 - 00022766 _____ () C:\Documents and Settings\Agata\Moje dokumenty\plot.log
2014-12-12 13:38 - 2014-04-29 15:19 - 00000000 ____D () C:\Documents and Settings\Agata\Pulpit\POCZTA
2014-12-11 09:15 - 2014-04-21 12:57 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-11 09:12 - 2014-04-21 12:51 - 109818608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-08 15:00 - 2014-04-21 18:58 - 00000216 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
2014-12-08 08:44 - 2014-05-15 10:58 - 00000000 ____D () C:\Documents and Settings\Agata\Pulpit\WAZNE-DO-SKOPIOWANIA
2014-12-02 09:40 - 2014-04-21 08:32 - 00000000 ___RD () C:\Documents and Settings\Agata\Moje dokumenty

Some content of TEMP:
====================
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\APNSetup.exe
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphtgszx.dll
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\jre-7u60-windows-i586-iftw.exe
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\jre-7u67-windows-i586-iftw.exe
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\jre-7u71-windows-i586-iftw.exe
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\MegaFakturka_setup.exe
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\MSETUP4.EXE
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\Quarantine.exe
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\sqlite3.dll
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\sSetup-se.exe
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\SymCCIS.dll
C:\Documents and Settings\Agata\Ustawienia lokalne\Temp\SymLCSVC.EXE


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================