Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-01-2015 Ran by Martyna1 (administrator) on MARTYNA on 02-01-2015 21:23:12 Running from C:\Documents and Settings\Martyna1\Pulpit Loaded Profile: Martyna1 (Available profiles: Martyna1) Platform: Microsoft Windows XP Professional Dodatek Service Pack 2 (X86) OS Language: Polski Internet Explorer Version 6 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Intel Corporation) C:\WINDOWS\system32\igfxtray.exe (Intel Corporation) C:\WINDOWS\system32\hkcmd.exe (Intel Corporation) C:\WINDOWS\system32\igfxpers.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe (Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe (Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe (AVAST Software) C:\Program Files\Alwil Software\Avast5\avastui.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe () C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe () C:\Documents and Settings\All Users\Dane aplikacji\PLAY ONLINE\OnlineUpdate\ouc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe () C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [hpWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2007-11-20] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [177456 2007-10-19] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [872448 2007-01-05] (Analog Devices, Inc.) HKLM\...\Run: [SoundMAX] => C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [729088 2006-07-13] (Analog Devices, Inc.) HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Run: [NeroCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4085896 2014-10-06] (AVAST Software) HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [455968 2007-08-23] (Hewlett-Packard Company) HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1667584 2004-08-03] (Microsoft Corporation) HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {03221bf2-100a-11e3-b20b-0018debcd5a2} - G:\AutoRun.exe HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {0a8baf24-e66b-11e3-b317-0018debcd5a2} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {25e235b4-0759-11e3-b1f9-0018debcd5a2} - G:\AutoRun.exe HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {42b05c5a-47dd-11e4-b3ab-0018debcd5a2} - G:\AutoRun.exe HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {4890cba8-019e-11e3-b1ee-0018debcd5a2} - G:\AutoRun.exe HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {4b56d226-a545-11e2-b163-0018debcd5a2} - G:\AutoRun.exe HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {4eb4d9fe-a9b4-11e2-b16a-0018debcd5a2} - G:\AutoRun.exe HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {8c066ce8-091f-11e4-b34d-0018debcd5a2} - I:\Launcher.exe HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {c207f542-027b-11e3-b1ef-0018debcd5a2} - G:\AutoRun.exe HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\MountPoints2: {e1b8bc5a-b0f0-11e2-b172-0018debcd5a2} - G:\AutoRun.exe Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll (AVAST Software) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKU\S-1-5-21-1343024091-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKU\S-1-5-21-1343024091-1336601894-839522115-1003 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation) URLSearchHook: HKU\S-1-5-21-1343024091-1336601894-839522115-1003 - BitTorrentControl_v12 Toolbar - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files\BitTorrentControl_v12\prxtbBit0.dll (Conduit Ltd.) HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "http://www.interia.pl/?utm_source=is" <======= ATTENTION SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: BitTorrentControl_v12 Toolbar -> {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} -> C:\Program Files\BitTorrentControl_v12\prxtbBit0.dll (Conduit Ltd.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - BitTorrentControl_v12 Toolbar - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files\BitTorrentControl_v12\prxtbBit0.dll (Conduit Ltd.) Toolbar: HKU\S-1-5-21-1343024091-1336601894-839522115-1003 -> BitTorrentControl_v12 Toolbar - {B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14} - C:\Program Files\BitTorrentControl_v12\prxtbBit0.dll (Conduit Ltd.) Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 FireFox: ======== FF ProfilePath: C:\Documents and Settings\Martyna1\Dane aplikacji\Mozilla\Firefox\Profiles\b0gsw8eq.default FF Homepage: www.wp.pl FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Extension: Faster Light 1.0.1 - C:\Documents and Settings\Martyna1\Dane aplikacji\Mozilla\Firefox\Profiles\b0gsw8eq.default\Extensions\{db4225e9-90b8-4ca5-99da-da423e504d3d}.xpi [2014-12-20] FF HKU\S-1-5-21-1343024091-1336601894-839522115-1003\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi FF Extension: McAfee Security Scan Plus - C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] Chrome: ======= CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-10-06] (AVAST Software) R2 HWDeviceService.exe; C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe [271712 2011-03-14] () R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [181664 2013-06-11] (Oracle Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.) S2 PLAY ONLINE. RunOuc; C:\Documents and Settings\Martyna1\Moje dokumenty\Downloads\PLAY ONLINE\UpdateDog\ouc.exe [246112 2013-08-11] () S3 NMIndexingService; "C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe" [X] S2 Update Faster Light; "C:\Program Files\Faster Light\updateFasterLight.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-10-06] () R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-10-06] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-10-06] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-10-06] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-11-21] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-10-06] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-10-06] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-10-06] () S3 huawei_cdcacm; C:\WINDOWS\System32\DRIVERS\ew_jucdcacm.sys [95616 2013-08-11] (Huawei Technologies Co., Ltd.) S3 huawei_cdcecm; C:\WINDOWS\System32\DRIVERS\ew_jucdcecm.sys [67584 2013-08-11] (Huawei Technologies Co., Ltd.) S3 huawei_ext_ctrl; C:\WINDOWS\System32\DRIVERS\ew_juextctrl.sys [27520 2013-08-11] (Huawei Technologies Co., Ltd.) R3 NETw4x32; C:\WINDOWS\System32\DRIVERS\NETw4x32.sys [2236544 2007-10-31] (Intel Corporation) S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [27440 2004-07-17] () S1 ccnfd_1_10_0_4; system32\drivers\ccnfd_1_10_0_4.sys [X] U1 eabfiltr; No ImagePath U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [245376 2013-08-11] (Huawei Technologies Co., Ltd.) U1 WS2IFSL; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-02 21:01 - 2015-01-02 21:01 - 00000000 ____D () C:\Documents and Settings\Martyna1\Pulpit\FRST-OlderVersion 2014-12-24 01:11 - 2014-12-24 02:40 - 00230400 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna 5.vproj 2014-12-24 01:11 - 2014-12-24 02:39 - 00230400 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna 5.vproj.bak 2014-12-24 00:09 - 2014-12-24 00:17 - 00112640 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna4.vproj 2014-12-24 00:09 - 2014-12-24 00:09 - 00101376 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna4.vproj.bak 2014-12-23 23:28 - 2014-12-23 23:28 - 00100864 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna3.vproj 2014-12-23 19:39 - 2014-12-23 19:39 - 00000855 _____ () C:\Documents and Settings\Martyna1\Pulpit\VSDC Free Video Editor.lnk 2014-12-23 19:39 - 2014-12-23 19:39 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\FlashIntegro 2014-12-22 20:45 - 2014-12-22 20:46 - 00028467 _____ () C:\Documents and Settings\Martyna1\Pulpit\Addition.txt 2014-12-22 20:44 - 2015-01-02 21:23 - 00012958 _____ () C:\Documents and Settings\Martyna1\Pulpit\FRST.txt 2014-12-22 20:44 - 2015-01-02 21:23 - 00000000 ____D () C:\FRST 2014-12-22 20:43 - 2015-01-02 21:01 - 01115136 _____ (Farbar) C:\Documents and Settings\Martyna1\Pulpit\FRST.exe 2014-12-22 20:35 - 2015-01-02 21:14 - 00000000 ____D () C:\AdwCleaner 2014-12-22 20:34 - 2014-12-22 20:34 - 02173952 _____ () C:\Documents and Settings\Martyna1\Pulpit\adwcleaner_4.106.exe 2014-12-22 20:32 - 2014-12-22 20:32 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Avast 2014-12-22 20:28 - 2014-12-22 20:28 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-12-22 20:27 - 2014-12-22 20:27 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy 2014-12-22 20:27 - 2014-12-22 20:27 - 00000000 ____D () C:\WINDOWS\SxsCaPendDel 2014-12-22 20:27 - 2014-12-22 20:27 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji\AVG 2014-12-22 20:26 - 2014-12-23 19:40 - 00000000 ____D () C:\Documents and Settings\Martyna1\Dane aplikacji\IHlpr 2014-12-22 20:26 - 2014-12-22 20:26 - 00000000 ____D () C:\Program Files\XP Codec Pack 2014-12-22 20:26 - 2014-12-22 20:26 - 00000000 ____D () C:\Documents and Settings\Martyna1\Dane aplikacji\AC3Filter 2014-12-22 20:26 - 2014-12-22 20:26 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Lightworks 2014-12-22 20:25 - 2014-12-22 20:25 - 00000000 ____D () C:\Documents and Settings\Martyna1\Ustawienia lokalne\Dane aplikacji\WMTools Downloaded Files 2014-12-22 19:45 - 2014-12-22 19:45 - 00000730 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk 2014-12-22 19:45 - 2014-12-22 19:45 - 00000724 _____ () C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk 2014-12-22 19:39 - 2014-12-22 19:39 - 00754240 _____ ( ) C:\Program Files\Firefox(13108)-dp.exe 2014-12-21 20:53 - 2014-12-23 20:49 - 00200704 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna2.vproj 2014-12-21 20:53 - 2014-12-23 20:45 - 00193536 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna2.vproj.bak 2014-12-21 18:14 - 2014-12-21 18:55 - 00184832 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna.vproj 2014-12-21 18:14 - 2014-12-21 18:14 - 00170496 _____ () C:\Documents and Settings\Martyna1\Pulpit\martyna.vproj.bak 2014-12-21 16:34 - 2014-12-21 16:34 - 00000472 __RSH () C:\Documents and Settings\All Users\ntuser.pol 2014-12-21 09:39 - 2014-12-21 09:39 - 00179712 _____ () C:\Documents and Settings\Martyna1\Pulpit\ostatni.vproj 2014-12-21 01:07 - 2014-12-21 02:41 - 00236544 _____ () C:\Documents and Settings\Martyna1\Pulpit\oo.vproj 2014-12-21 01:07 - 2014-12-21 02:04 - 00210432 _____ () C:\Documents and Settings\Martyna1\Pulpit\oo.vproj.bak 2014-12-20 21:07 - 2014-12-20 21:07 - 00144384 _____ () C:\Documents and Settings\Martyna1\Moje dokumenty\hh.vproj 2014-12-20 18:13 - 2014-12-20 21:09 - 00065536 _____ () C:\WINDOWS\system32\config\TuneUp.evt 2014-12-20 18:13 - 2014-12-20 18:13 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\AVG 2014-12-20 18:11 - 2014-12-20 18:11 - 00000000 ____D () C:\Documents and Settings\Martyna1\Dane aplikacji\AVG 2014-12-20 17:59 - 2014-12-20 17:59 - 00000000 ____D () C:\Documents and Settings\Martyna1\Ustawienia lokalne\Dane aplikacji\Avg 2014-12-20 17:54 - 2014-12-20 18:13 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVG 2014-12-20 16:04 - 2014-12-20 16:04 - 00143872 _____ () C:\Documents and Settings\Martyna1\Pulpit\mm.vproj 2014-12-20 14:49 - 2014-12-20 14:49 - 00000000 ____D () C:\Documents and Settings\Martyna1\Moje dokumenty\FlashIntegro 2014-12-20 14:49 - 2014-12-20 14:49 - 00000000 ____D () C:\Documents and Settings\Martyna1\Dane aplikacji\VideoEditor 2014-12-20 14:49 - 2014-12-20 14:49 - 00000000 ____D () C:\Documents and Settings\Martyna1\Dane aplikacji\FlashIntegro 2014-12-20 14:48 - 2014-12-23 19:39 - 00000000 ____D () C:\Program Files\FlashIntegro 2014-12-20 14:48 - 2014-12-20 14:48 - 00000000 ____D () C:\Program Files\Common Files\FlashIntegro 2014-12-20 14:48 - 2014-12-09 13:21 - 00081792 _____ (Flash-Integro LLC) C:\WINDOWS\system32\mslvddsfilter2.ax 2014-12-20 14:48 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\WINDOWS\system32\Lagarith.dll 2014-12-20 14:48 - 2005-08-01 19:43 - 00245760 _____ () C:\WINDOWS\system32\lame.ax 2014-12-20 14:48 - 2004-12-10 10:03 - 00438272 _____ (On2.com) C:\WINDOWS\system32\vp6vfw.dll 2014-12-20 14:48 - 2004-09-06 16:06 - 00053248 _____ () C:\WINDOWS\system32\xvid.ax 2014-12-20 14:48 - 2004-07-03 21:08 - 00139264 _____ () C:\WINDOWS\system32\xvidvfw.dll 2014-12-20 14:48 - 2004-07-03 20:59 - 00524288 _____ () C:\WINDOWS\system32\xvidcore.dll 2014-12-20 14:48 - 2004-02-04 21:11 - 00081920 _____ (fccHandler) C:\WINDOWS\system32\AC3ACM.acm 2014-12-20 14:48 - 2003-05-22 12:26 - 00638976 _____ (DivXNetworks, Inc.) C:\WINDOWS\system32\divx.dll 2014-12-20 14:48 - 2003-05-22 12:26 - 00221215 _____ (DivXNetworks, Inc.) C:\WINDOWS\system32\divxdec.ax 2014-12-20 14:48 - 2003-05-21 23:50 - 01700352 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-12-20 14:48 - 2003-05-21 23:50 - 00261632 _____ (MainConcept) C:\WINDOWS\system32\mcdvd_32.dll 2014-12-20 14:48 - 2003-05-21 23:50 - 00156910 _____ () C:\WINDOWS\WMSysPr8.prx 2014-12-20 14:48 - 2003-05-21 23:50 - 00082944 _____ (Voxware, Inc.) C:\WINDOWS\system32\vct3216.acm 2014-12-20 14:48 - 2003-05-21 23:50 - 00038912 _____ (NCT Company) C:\WINDOWS\system32\alf2cd.acm 2014-12-20 14:48 - 2003-05-21 23:50 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3a.dll 2014-12-20 14:48 - 2003-03-18 23:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll 2014-12-20 14:48 - 2002-08-20 00:41 - 00413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg4c32.dll 2014-12-20 14:48 - 2000-03-14 20:55 - 00013239 _____ (SHARP Corporation) C:\WINDOWS\system32\Scg726.acm 2014-12-20 14:03 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2014-12-20 14:03 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2014-12-20 14:03 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2014-12-20 14:03 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2014-12-20 14:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2014-12-20 14:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2014-12-20 14:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2014-12-20 14:03 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll 2014-12-20 13:59 - 2014-12-20 15:10 - 00000000 ____D () C:\WINDOWS\Microsoft.NET 2014-12-20 13:30 - 2014-12-22 20:25 - 00000000 __HDC () C:\WINDOWS\$MSI31Uninstall_KB893803v2$ 2014-12-20 13:30 - 2005-05-04 14:45 - 00015584 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg.dll 2014-12-20 12:45 - 2014-12-25 12:42 - 00000000 ___RD () C:\Documents and Settings\Martyna1\Moje dokumenty\Moje wideo 2014-12-09 15:45 - 2014-12-22 20:27 - 00000000 ____D () C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-02 21:23 - 2013-04-14 14:28 - 00000000 ____D () C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp 2015-01-02 21:23 - 2013-04-14 14:28 - 00000000 ____D () C:\Documents and Settings\Martyna1\Pulpit 2015-01-02 21:22 - 2013-04-14 14:22 - 00436010 _____ () C:\WINDOWS\WindowsUpdate.log 2015-01-02 21:21 - 2014-09-09 17:57 - 00000366 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2015-01-02 21:16 - 2013-05-03 11:44 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-02 21:16 - 2013-04-14 14:27 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-01-02 21:16 - 2013-04-14 00:26 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2015-01-02 21:16 - 2013-04-14 00:26 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2015-01-02 21:15 - 2013-04-14 14:28 - 00000188 ___SH () C:\Documents and Settings\Martyna1\ntuser.ini 2015-01-02 21:15 - 2013-04-14 14:27 - 00032412 _____ () C:\WINDOWS\SchedLgU.Txt 2015-01-02 21:11 - 2014-06-22 17:07 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-01-02 20:46 - 2013-04-14 00:23 - 00060930 _____ () C:\WINDOWS\setupapi.log 2015-01-02 20:38 - 2001-07-22 01:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2014-12-31 00:32 - 2013-05-03 11:44 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-12-23 19:39 - 2013-04-14 14:28 - 00000000 __RHD () C:\Documents and Settings\Martyna1\Dane aplikacji 2014-12-23 19:39 - 2013-04-14 00:24 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-12-23 19:39 - 2013-04-14 00:24 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-12-22 20:39 - 2013-04-14 14:28 - 00000000 ____D () C:\Documents and Settings\Martyna1 2014-12-22 20:38 - 2013-04-14 14:28 - 00000000 ___HD () C:\Documents and Settings\Martyna1\Ustawienia lokalne\Dane aplikacji 2014-12-22 20:38 - 2013-04-14 00:23 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-12-22 20:32 - 2013-04-14 14:31 - 00001744 _____ () C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk 2014-12-22 20:28 - 2014-06-22 17:29 - 00000000 ____D () C:\Documents and Settings\Martyna1\Ustawienia lokalne\Dane aplikacji\Adobe 2014-12-22 20:28 - 2013-04-14 15:33 - 00000000 ____D () C:\Program Files\Adobe 2014-12-22 20:28 - 2013-04-14 15:33 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Adobe 2014-12-22 20:28 - 2013-04-14 14:27 - 00000000 __SHD () C:\Documents and Settings\LocalService 2014-12-22 20:28 - 2013-04-14 14:26 - 00000000 __SHD () C:\Documents and Settings\NetworkService 2014-12-22 20:28 - 2013-04-14 14:18 - 00000000 ____D () C:\WINDOWS\Registration 2014-12-22 20:28 - 2013-04-14 00:24 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-12-22 20:27 - 2013-04-14 15:41 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-12-22 20:27 - 2013-04-14 14:27 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji 2014-12-22 20:26 - 2013-04-14 14:28 - 00000000 ___HD () C:\Documents and Settings\Martyna1\Ustawienia lokalne 2014-12-22 20:26 - 2013-04-14 14:28 - 00000000 ____D () C:\Documents and Settings\Martyna1\Menu Start\Programy 2014-12-22 20:26 - 2013-04-14 14:22 - 00000000 ____D () C:\WINDOWS\system32\DirectX 2014-12-22 20:25 - 2013-04-14 00:17 - 00000000 ____D () C:\WINDOWS\system32\mui 2014-12-22 19:32 - 2001-07-22 01:16 - 00000579 _____ () C:\WINDOWS\win.ini 2014-12-22 19:27 - 2013-04-14 14:58 - 00001498 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk 2014-12-22 19:27 - 2013-04-14 14:58 - 00001492 _____ () C:\Documents and Settings\All Users\Pulpit\Opera.lnk 2014-12-22 19:27 - 2013-04-14 14:28 - 00000767 _____ () C:\Documents and Settings\Martyna1\Menu Start\Programy\Internet Explorer.lnk 2014-12-21 17:22 - 2013-04-14 15:36 - 00000000 ____D () C:\Documents and Settings\Martyna1\Dane aplikacji\Winamp 2014-12-21 15:38 - 2013-04-18 18:27 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2014-12-20 21:07 - 2013-04-14 14:28 - 00000000 ___RD () C:\Documents and Settings\Martyna1\Moje dokumenty 2014-12-20 18:13 - 2013-04-14 14:27 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji 2014-12-20 14:49 - 2013-04-14 14:28 - 00000000 ___RD () C:\Documents and Settings\Martyna1\Moje dokumenty\Moje obrazy 2014-12-20 14:17 - 2013-04-14 00:24 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty 2014-12-20 14:03 - 2013-04-14 00:24 - 00867604 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-12-20 14:03 - 2001-10-26 19:15 - 00448586 _____ () C:\WINDOWS\system32\perfh015.dat 2014-12-20 14:03 - 2001-10-26 19:15 - 00074648 _____ () C:\WINDOWS\system32\perfc015.dat 2014-12-20 13:31 - 2013-04-14 00:24 - 00075614 _____ () C:\WINDOWS\iis6.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00036270 _____ () C:\WINDOWS\FaxSetup.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00026396 _____ () C:\WINDOWS\ocgen.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00024163 _____ () C:\WINDOWS\comsetup.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00021511 _____ () C:\WINDOWS\tsoc.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00018046 _____ () C:\WINDOWS\msmqinst.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00012948 _____ () C:\WINDOWS\ntdtcsetup.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00007122 _____ () C:\WINDOWS\netfxocm.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00003187 _____ () C:\WINDOWS\MedCtrOC.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00002536 _____ () C:\WINDOWS\tabletoc.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00002429 _____ () C:\WINDOWS\ocmsn.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00002107 _____ () C:\WINDOWS\msgsocm.log 2014-12-20 13:31 - 2013-04-14 00:24 - 00001393 _____ () C:\WINDOWS\imsins.log 2014-12-12 20:39 - 2013-05-04 20:21 - 00000520 _____ () C:\Documents and Settings\Martyna1\Moje dokumenty\spider.sav 2014-12-12 08:48 - 2014-11-09 19:27 - 00000000 ____D () C:\Documents and Settings\Martyna1\Pulpit\Nowy folder (2) 2014-12-10 16:12 - 2013-04-14 14:54 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2014-12-10 16:12 - 2013-04-14 14:54 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2014-12-06 22:20 - 2013-05-03 11:45 - 00000000 ____D () C:\Documents and Settings\Martyna1\Dane aplikacji\PhotoScape 2014-12-05 21:42 - 2013-09-06 06:50 - 00000000 ____D () C:\Documents and Settings\Martyna1\Pulpit\plener przygodzioków Some content of TEMP: ==================== C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\DataCard_Setup.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\DseShExt-x86.dll C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\GoogleUpdateSetup_1.3.21.169.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\ICReinstall_Shotcut(42274)-dp.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\ICReinstall_winamp563_Downloader.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\oi_{F9B6D7DA-FAC5-429C-BB7C-F9D10C92C87D}.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\ose00000.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\Quarantine.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\ResetDevice.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\SDShelEx-win32.dll C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\Softonic_PL_1-4-9.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\sqlite3.dll C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\uninst1.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\utt85.tmp.exe C:\Documents and Settings\Martyna1\Ustawienia lokalne\Temp\{69D96AFE-F5CD-4B32-BFC1-61A513BA201E}-37.0.2062.124_chrome_installer.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================