Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-02-2015 01
Ran by Dawid (administrator) on DAWID-PC on 26-02-2015 14:14:42
Running from C:\Documents and Settings\Dawid\Moje dokumenty\Downloads
Loaded Profiles: Dawid (Available profiles: Dawid & Administrator)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 7 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA) C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(NVIDIA) C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Opera Software) C:\Program Files\Opera\24.0.1558.61\opera.exe
() C:\Program Files\Opera\24.0.1558.61\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\24.0.1558.61\opera.exe
(Opera Software) C:\Program Files\Opera\24.0.1558.61\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20145368 2014-01-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvMediaCenter] => RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKU\S-1-5-19\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-20\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-21-606747145-1592454029-1417001333-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-18\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
Startup: C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart\HELP_DECRYPT.HTML ()
Startup: C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart\HELP_DECRYPT.PNG ()
Startup: C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart\HELP_DECRYPT.TXT ()
InternetURL: C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart\HELP_DECRYPT.URL -> hxxp://paytoc4gtpn5czl2.torconnectpaycom/h3zsjv

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com/?type=sc&ts=1387389562&from=cor&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default
FF DefaultSearchUrl: hxxp://websearch.searchsunmy.info/?pid=377&r=2013/12/24&hid=8686324548370343708&lg=EN&cc=PL&unqvl=45&l=1&q=
FF Homepage: search.protectedio.com
FF Homepage: search.protectedio.com
FF SelectedSearchEngineuser_pref("browser.search.selectedEngine","Search The Web (Only-Search)");: user_pref("browser.search.selectedEngine","Search The Web (Only-Search)");
FF DefaultSearchEngineuser_pref("browser.search.defaultenginename","Search The Web (Only-Search)");: user_pref("browser.search.defaultenginename","Search The Web (Only-Search)");
FF Keyword.URL: 
FF NewTab: 
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @ngm.nexoneu.com/NxGame -> C:\Documents and Settings\All Users\Dane aplikacji\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @t.garena.com/garenatalk -> C:\Program Files\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File
FF user.js: detected! => C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\user.js
FF SearchPlugin: C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\searchplugins\onlysearchkms.xml
FF SearchPlugin: C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\searchplugins\WebSearch.xml
FF Extension: Ads Removal - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\adsremoval@adsremoval.net [2014-01-21]
FF Extension: Fast Dial - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\fastdial@telega.phpnet.us [2013-12-22]
FF Extension: filelogging_seleniumideSamitBadle - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\file-logging_selenium-ide@Samit.Badle [2014-09-06]
FF Extension: YoutubeAdblocker - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\gbzjf@fpbxq.co.uk [2013-12-24]
FF Extension: {{EXT_NAME}} - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\gpum@mooz.github.com [2014-10-04]
FF Extension: ClickMovie1-Downloaderv10 - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\LPESNIOB27154074@RO39491085.com [2014-09-30]
FF Extension: SearchNewTab - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\p1nbmyoaua@mgaam.net [2013-12-24]
FF Extension: surf And keep - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\pfx7uhc@yoaxwmod.co.uk [2013-12-24]
FF Extension: GoHD - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\sonnypenn@aol.com [2014-09-05]
FF Extension: webranktoolbarprobcompcom - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\webrank-toolbar@probcomp.com [2014-09-06]
FF Extension: {{EXT_NAME}} - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\{8b86149f-01fb-4842-9dd8-4d7eb02fd055} [2014-10-04]
FF Extension: {{EXT_NAME}} - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8} [2014-09-21]
FF Extension: {{EXT_NAME}} - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8} [2014-10-04]
FF Extension: Adblock Plus - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-22]
FF Extension: ffChromeHelper - C:\Program Files\Mozilla Firefox\distribution\bundles\{538024123EC8DAFBD8C30CEDD1BC5D97} [2014-11-28]
FF Extension: Firefox Helper - C:\Program Files\Mozilla Firefox\distribution\bundles\{CF758DFFA859D86E59958E9A28919398} [2014-11-25]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-13]
FF Extension: No Name - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\extensions\ascsurfingprotection@iobit.com [Not Found]
FF Extension: No Name - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com [Not Found]
FF Extension: No Name - C:\Program Files\IObit Apps Toolbar\FF [Not Found]
FF Extension: No Name - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com [Not Found]
FF Extension: No Name - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com [Not Found]
FF Extension: No Name - C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Profiles\jgewe7rd.default\extensions\randlphtim@hotmail.com [Not Found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [fknfdieimobmimhdkfkheeejenmdjhoe] - C:\Program Files\pandasecuritytb\chrome-newtab-search.crx [Not Found]

Opera: 
=======
OPR Extension: (No Name) - C:\Documents and Settings\Dawid\Dane aplikacji\Opera Software\Opera Stable\Extensions\gkookgoofbomddkomagahpnpdcnebnad [2014-09-30]
OPR Extension: (Adblock Plus) - C:\Documents and Settings\Dawid\Dane aplikacji\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2014-06-30]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe http://isearch.omiga-plus.com/?type=sc&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2282272 2014-08-19] (IObit)
R2 nTuneService; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [192832 2011-09-19] (NVIDIA)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21361 2013-10-13] (Cisco Systems, Inc.) [File not signed]
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2014-01-21] (Creative)
R1 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2013-11-24] (Disc Soft Ltd)
R0 giveio; C:\WINDOWS\System32\giveio.sys [5248 1996-04-03] () [File not signed]
S3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2014-01-21] (Creative Technology Ltd.)
R3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [129184 2014-09-17] (NVIDIA Corporation)
S3 SCREAMINGBDRIVER; C:\WINDOWS\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC)
R0 speedfan; C:\WINDOWS\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361344 2008-05-08] (Microsoft Corporation) [File not signed]
S3 vhidmini; C:\WINDOWS\System32\DRIVERS\vjoy.sys [11168 2009-10-06] (Headsoft) [File not signed]
S3 WinRing0_1_2_0; C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [14416 2010-11-01] (OpenLibSys.org)
S4 IntelIde; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-26 13:48 - 2015-02-26 14:10 - 00001370 _____ () C:\WINDOWS\Tasks\QBSHXT.job
2015-02-26 13:48 - 2015-02-26 13:48 - 01863128 _____ (InstallMoonV26.02) C:\Documents and Settings\Dawid\Dane aplikacji\QBSHXT.exe
2015-02-25 23:35 - 2015-02-25 23:35 - 00000060 _____ () C:\WINDOWS\setupact.log
2015-02-25 23:35 - 2015-02-25 23:35 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-02-25 23:12 - 2015-02-25 23:15 - 00018705 _____ () C:\WINDOWS\setupapi.log
2015-02-25 00:03 - 2015-02-25 00:03 - 00018211 _____ () C:\Documents and Settings\Dawid\Moje dokumenty\DSA.TXT
2015-02-24 19:06 - 2015-02-24 19:06 - 00083254 _____ () C:\Documents and Settings\Dawid\Pulpit\Shortcut.txt
2015-02-24 19:05 - 2015-02-24 19:06 - 00053785 _____ () C:\Documents and Settings\Dawid\Pulpit\FRST.txt
2015-02-24 19:05 - 2015-02-24 19:06 - 00028911 _____ () C:\Documents and Settings\Dawid\Pulpit\Addition.txt
2015-02-24 18:52 - 2015-02-24 18:52 - 00024464 _____ () C:\Documents and Settings\Dawid\Pulpit\Skann.log
2015-02-24 18:36 - 2015-02-26 14:14 - 00000000 ____D () C:\FRST
2015-02-24 15:58 - 2015-02-26 11:49 - 00000132 _____ () C:\CE.txt
2015-02-23 23:55 - 2015-02-26 01:42 - 00000483 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-23 23:12 - 2015-02-23 23:12 - 00008604 _____ () C:\HELP_DECRYPT.HTML
2015-02-23 23:12 - 2015-02-23 23:12 - 00008604 _____ () C:\Documents and Settings\Dawid\Pulpit\HELP_DECRYPT.HTML
2015-02-23 23:12 - 2015-02-23 23:12 - 00004242 _____ () C:\HELP_DECRYPT.TXT
2015-02-23 23:12 - 2015-02-23 23:12 - 00004242 _____ () C:\Documents and Settings\Dawid\Pulpit\HELP_DECRYPT.TXT
2015-02-23 23:12 - 2015-02-23 23:12 - 00000288 _____ () C:\HELP_DECRYPT.URL
2015-02-23 23:12 - 2015-02-23 23:12 - 00000288 _____ () C:\Documents and Settings\Dawid\Pulpit\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\NetworkService\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\LocalService\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\Default User\Ustawienia lokalne\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\Default User\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00008604 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\NetworkService\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\LocalService\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\Default User\Ustawienia lokalne\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\Default User\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00004242 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\NetworkService\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\LocalService\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\Default User\Ustawienia lokalne\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\Default User\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\HELP_DECRYPT.URL
2015-02-23 20:54 - 2015-02-23 20:54 - 00000288 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.URL
2015-02-23 20:38 - 2015-02-23 20:38 - 00008604 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:38 - 2015-02-23 20:38 - 00004242 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:38 - 2015-02-23 20:38 - 00000288 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\HELP_DECRYPT.URL
2015-02-23 20:36 - 2015-02-23 20:36 - 00008604 _____ () C:\Documents and Settings\All Users\HELP_DECRYPT.HTML
2015-02-23 20:36 - 2015-02-23 20:36 - 00008604 _____ () C:\Documents and Settings\All Users\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:36 - 2015-02-23 20:36 - 00004242 _____ () C:\Documents and Settings\All Users\HELP_DECRYPT.TXT
2015-02-23 20:36 - 2015-02-23 20:36 - 00004242 _____ () C:\Documents and Settings\All Users\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:36 - 2015-02-23 20:36 - 00000288 _____ () C:\Documents and Settings\All Users\HELP_DECRYPT.URL
2015-02-23 20:36 - 2015-02-23 20:36 - 00000288 _____ () C:\Documents and Settings\All Users\Dane aplikacji\HELP_DECRYPT.URL
2015-02-23 20:33 - 2015-02-23 20:33 - 00008604 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\HELP_DECRYPT.HTML
2015-02-23 20:33 - 2015-02-23 20:33 - 00008604 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:33 - 2015-02-23 20:33 - 00008604 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:33 - 2015-02-23 20:33 - 00004242 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\HELP_DECRYPT.TXT
2015-02-23 20:33 - 2015-02-23 20:33 - 00004242 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:33 - 2015-02-23 20:33 - 00004242 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:33 - 2015-02-23 20:33 - 00000288 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\HELP_DECRYPT.URL
2015-02-23 20:33 - 2015-02-23 20:33 - 00000288 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.URL
2015-02-23 20:33 - 2015-02-23 20:33 - 00000288 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\HELP_DECRYPT.URL
2015-02-22 12:29 - 2015-02-22 12:29 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\666.bmp
2015-02-20 18:26 - 2015-02-20 18:26 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\6e6d0694000012a9
2015-02-20 18:24 - 2015-02-20 18:24 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\e6ca635800005e96
2015-02-20 18:22 - 2015-02-20 05:39 - 00055832 _____ (StdLib) C:\WINDOWS\system32\Drivers\{9652c7a7-7363-4f0e-bf03-3b32b55ea241}Gt.sys
2015-02-20 18:20 - 2015-02-21 10:30 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\{d00e78e3-431d-94b0-d00e-e78e3431e38d}
2015-02-20 18:19 - 2015-02-20 18:21 - 00000000 ____D () C:\Program Files\doctorpclab.com
2015-02-20 18:12 - 2015-02-21 10:30 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\{368b4672-9c59-d15d-368b-b46729c519ca}
2015-02-20 15:46 - 2015-02-20 01:41 - 00055872 _____ (StdLib) C:\WINDOWS\system32\Drivers\{e85a0e97-fa40-4dc4-a79e-e1c1cabe72eb}t.sys
2015-02-20 15:44 - 2015-02-20 15:44 - 00000000 ____D () C:\Program Files\7208fe53-6a12-4f5c-8449-0179fe1ab100
2015-02-20 15:44 - 2015-02-20 15:43 - 00613057 _____ (CMI Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsdC4.tmp
2015-02-20 15:43 - 2015-02-21 10:28 - 00000000 ____D () C:\Program Files\Cyti Web
2015-02-20 15:43 - 2015-02-20 15:43 - 00000000 ____D () C:\Program Files\AnyProtectEx
2015-02-20 15:37 - 2015-02-20 15:41 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\SmartWeb
2015-02-18 21:52 - 2015-02-18 21:52 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\Sevilla taktyka 2.bmp
2015-02-18 21:52 - 2015-02-18 21:52 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\Sevilla taktyka 1.bmp
2015-02-18 21:51 - 2015-02-18 21:51 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\SEVILLA.bmp
2015-02-15 14:07 - 2015-02-15 14:07 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\Dobry Sklad BPL 1.bmp
2015-02-14 22:22 - 2015-02-14 22:22 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\LOL AHAM.bmp
2015-02-13 13:33 - 2015-02-23 20:47 - 00000000 ____D () C:\Documents and Settings\Dawid\Pulpit\DOBRETRACKI
2015-02-12 22:15 - 2015-02-12 22:15 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\coins coins coins.bmp
2015-02-12 11:35 - 2015-02-12 11:56 - 00000000 ____D () C:\WINDOWS\system32\NtmsData
2015-02-10 12:48 - 2015-02-12 15:18 - 00000688 _____ () C:\Documents and Settings\Dawid\Pulpit\Cwiczenia.txt
2015-02-05 21:20 - 2015-02-05 21:20 - 02779170 _____ () C:\Documents and Settings\Dawid\Moje dokumenty\World War 2 Storm Over Europe 6.0a.w3x
2015-02-04 12:33 - 2015-02-04 12:33 - 00613057 _____ (CMI Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsl91.tmp
2015-02-04 12:32 - 2015-02-21 10:30 - 00004768 _____ () C:\WINDOWS\system32\OptimizerMonitor.ini
2015-02-04 12:32 - 2015-02-21 10:30 - 00002552 _____ () C:\WINDOWS\system32\OptimizerMonitorOff.ini
2015-02-01 17:02 - 2015-02-01 17:02 - 00000004 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\.lockfile
2015-01-30 17:01 - 2015-01-30 17:01 - 00000000 ____D () C:\Program Files\ChromeEnhancer
2015-01-28 20:11 - 2015-02-05 22:47 - 00000656 _____ () C:\Documents and Settings\Dawid\Pulpit\Lollo.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-26 14:15 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Temp
2015-02-26 14:13 - 2013-10-13 19:56 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Skype
2015-02-26 14:12 - 2014-07-16 12:51 - 00041712 _____ () C:\WINDOWS\system32\nvAppTimestamps
2015-02-26 14:11 - 2014-03-11 14:13 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk
2015-02-26 14:07 - 2014-09-05 14:40 - 00000008 __RSH () C:\Documents and Settings\All Users\ntuser.pol
2015-02-26 14:07 - 2013-10-13 14:53 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-26 14:04 - 2014-09-05 14:40 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2015-02-26 14:04 - 2013-10-13 14:54 - 00000000 ___RD () C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart
2015-02-26 14:03 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid\Pulpit
2015-02-26 14:01 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji
2015-02-26 13:53 - 2014-10-20 16:37 - 00032174 _____ () C:\WINDOWS\SchedLgU.Txt
2015-02-26 13:53 - 2013-10-13 15:08 - 00000000 ____D () C:\Program Files\Google
2015-02-26 13:52 - 2013-10-13 16:39 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2015-02-26 13:52 - 2013-10-13 16:39 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-02-26 13:50 - 2014-10-12 16:11 - 00000000 ____D () C:\Program Files\AdvanceElite
2015-02-26 13:50 - 2014-09-02 22:05 - 00000000 ____D () C:\Program Files\globalUpdate
2015-02-26 13:50 - 2014-01-24 17:46 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\systweak
2015-02-26 13:47 - 2013-10-13 14:54 - 00000000 ___HD () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji
2015-02-26 13:46 - 2014-04-14 13:32 - 00000000 _____ () C:\Documents and Settings\Dawid\TempWmicBatchFile.bat
2015-02-26 11:56 - 2013-12-18 19:00 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\newnext.me
2015-02-26 01:42 - 2013-10-13 14:54 - 00000188 ___SH () C:\Documents and Settings\Dawid\ntuser.ini
2015-02-25 23:35 - 2013-10-16 15:06 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Origin
2015-02-25 23:29 - 2013-10-16 15:22 - 00000000 ____D () C:\Program Files\Origin
2015-02-25 23:16 - 2015-01-06 17:13 - 00000658 _____ () C:\Documents and Settings\All Users\Pulpit\EA SPORTS FIFA World.lnk
2015-02-25 23:15 - 2013-10-13 14:48 - 00000000 ____D () C:\WINDOWS\system32\DirectX
2015-02-25 16:59 - 2014-10-26 16:59 - 00073728 _____ () C:\WINDOWS\system32\tasks.dll
2015-02-25 00:03 - 2013-10-13 14:54 - 00000000 ___RD () C:\Documents and Settings\Dawid\Moje dokumenty
2015-02-24 17:24 - 2014-07-16 12:48 - 01444568 _____ () C:\WINDOWS\system32\nvdrsdb1.bin
2015-02-24 17:24 - 2014-07-16 12:48 - 00000001 _____ () C:\WINDOWS\system32\nvdrssel.bin
2015-02-23 23:12 - 2014-07-31 20:23 - 00000000 ____D () C:\Riot Games
2015-02-23 21:58 - 2013-10-13 16:39 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty
2015-02-23 21:47 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid
2015-02-23 21:43 - 2014-07-24 14:44 - 00000000 ____D () C:\Documents and Settings\Administrator
2015-02-23 20:54 - 2014-07-23 23:55 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Sun
2015-02-23 20:54 - 2014-03-11 14:13 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Skype
2015-02-23 20:54 - 2014-01-21 00:00 - 00000000 ____D () C:\power point 2007
2015-02-23 20:54 - 2013-12-18 19:00 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi
2015-02-23 20:54 - 2013-11-01 09:55 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Overwolf
2015-02-23 20:54 - 2013-10-16 15:32 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Origin
2015-02-23 20:54 - 2013-10-13 16:39 - 00000000 __RHD () C:\Documents and Settings\Default User\Ustawienia lokalne
2015-02-23 20:54 - 2013-10-13 16:39 - 00000000 ___HD () C:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji
2015-02-23 20:54 - 2013-10-13 16:39 - 00000000 ___HD () C:\Documents and Settings\Default User\Szablony
2015-02-23 20:54 - 2013-10-13 14:54 - 00000000 ___HD () C:\Documents and Settings\Dawid\Ustawienia lokalne
2015-02-23 20:54 - 2013-10-13 14:53 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2015-02-23 20:54 - 2013-10-13 14:53 - 00000000 __SHD () C:\Documents and Settings\LocalService
2015-02-23 20:54 - 2013-10-13 14:53 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji
2015-02-23 20:54 - 2013-10-13 14:53 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne
2015-02-23 20:50 - 2013-12-18 19:00 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Mobogenie
2015-02-23 20:49 - 2014-02-09 15:52 - 00000000 ____D () C:\Documents and Settings\Dawid\Pulpit\Rapsy
2015-02-23 20:49 - 2013-10-13 15:08 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Google
2015-02-23 20:49 - 2013-10-13 14:54 - 00000000 ___HD () C:\Documents and Settings\Dawid\Szablony
2015-02-23 20:48 - 2014-03-02 17:09 - 00000000 ____D () C:\Documents and Settings\Dawid\Pulpit\PLAYLISTA
2015-02-23 20:46 - 2015-01-05 01:45 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\FIFA World
2015-02-23 20:46 - 2014-12-04 17:04 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\GTA San Andreas User Files
2015-02-23 20:46 - 2014-07-30 22:42 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\MKJogo
2015-02-23 20:46 - 2014-02-14 19:03 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\MK-LOL
2015-02-23 20:38 - 2014-12-14 20:35 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\FIFA MANAGER 13
2015-02-23 20:38 - 2014-04-19 14:26 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\pxgclient
2015-02-23 20:38 - 2014-03-30 18:23 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Opera Software
2015-02-23 20:38 - 2013-11-01 09:55 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\TS3Client
2015-02-23 20:38 - 2013-10-16 15:32 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Origin
2015-02-23 20:37 - 2014-06-26 19:20 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\OpenFM
2015-02-23 20:37 - 2013-12-30 19:04 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\OpenOffice.org2
2015-02-23 20:37 - 2013-12-23 17:34 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Moje pliki Bitwy o Śródziemie™ II
2015-02-23 20:37 - 2013-11-30 19:21 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla
2015-02-23 20:37 - 2013-11-30 19:21 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\GG
2015-02-23 20:37 - 2013-10-13 21:16 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\IObit
2015-02-23 20:36 - 2015-01-17 13:06 - 00000000 __SHD () C:\Documents and Settings\Dawid\Dane aplikacji\AnyProtectEx
2015-02-23 20:36 - 2014-03-03 13:23 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\AVS4YOU
2015-02-23 20:36 - 2013-10-13 17:01 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Adobe
2015-02-23 20:36 - 2013-10-13 16:39 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2015-02-23 20:36 - 2013-10-13 15:29 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\DAEMON Tools Lite
2015-02-23 20:36 - 2013-10-13 15:26 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\DAEMON Tools Pro
2015-02-23 20:33 - 2014-07-25 18:19 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\Opera Software
2015-02-23 20:33 - 2014-07-24 14:44 - 00000000 __RHD () C:\Documents and Settings\Administrator\Dane aplikacji
2015-02-23 20:33 - 2014-07-24 14:44 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji
2015-02-23 20:33 - 2014-07-24 14:44 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne
2015-02-23 20:33 - 2014-07-24 14:44 - 00000000 ___HD () C:\Documents and Settings\Administrator\Szablony
2015-02-23 20:33 - 2013-10-13 21:16 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\IObit
2015-02-23 20:33 - 2013-10-13 16:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\InstallMate
2015-02-23 17:18 - 2001-07-21 23:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-02-21 19:26 - 2013-10-13 15:20 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\foobar2000
2015-02-21 10:31 - 2014-07-16 12:48 - 01444504 _____ () C:\WINDOWS\system32\nvdrsdb0.bin
2015-02-20 18:25 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid\Menu Start\Programy
2015-02-20 18:23 - 2014-09-24 17:34 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2015-02-20 18:22 - 2001-07-21 23:16 - 00000746 _____ () C:\WINDOWS\win.ini
2015-02-20 18:19 - 2014-09-30 13:32 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Doctor_PC
2015-02-12 02:19 - 2014-01-21 00:34 - 00065536 _____ () C:\WINDOWS\system32\config\OAlerts.evt
2015-02-11 02:47 - 2013-11-03 01:28 - 00329346 ____C () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
2015-02-05 18:49 - 2013-10-16 15:20 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\FIFA 14

==================== Files in the root of some directories =======

2015-02-01 17:02 - 2015-02-01 17:02 - 0000004 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\.lockfile
2014-09-05 14:46 - 2014-09-17 19:24 - 0000322 ____C () C:\Documents and Settings\Dawid\Dane aplikacji\aps.uninstall.scan.results
2013-11-23 22:30 - 2013-11-23 22:30 - 0001056 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\Explorer.EXE_log.txt
2015-02-23 20:38 - 2015-02-23 20:38 - 0008604 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:38 - 2015-02-23 20:38 - 0010968 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\HELP_DECRYPT.PNG
2015-02-23 20:38 - 2015-02-23 20:38 - 0004242 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:38 - 2015-02-23 20:38 - 0000288 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\HELP_DECRYPT.URL
2013-11-23 22:30 - 2013-11-23 22:32 - 0001184 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\LiveSupport.exe_log.txt
2014-12-21 22:24 - 2014-12-21 22:24 - 1795552 _____ (Object Browser) C:\Documents and Settings\Dawid\Dane aplikacji\NGSFIZU.exe
2015-01-25 17:12 - 2015-01-25 17:12 - 0001248 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\QBSHXT
2015-02-26 13:48 - 2015-02-26 13:48 - 1863128 _____ (InstallMoonV26.02) C:\Documents and Settings\Dawid\Dane aplikacji\QBSHXT.exe
2013-11-23 22:30 - 2013-11-23 22:34 - 0000368 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\regsvr32.exe_log.txt
2014-01-23 14:43 - 2014-02-13 19:39 - 0045194 ____C () C:\Documents and Settings\Dawid\Dane aplikacji\room_v3.dat
2013-10-13 18:15 - 2014-12-04 17:09 - 0011776 ____C () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-02-23 20:54 - 2015-02-23 20:54 - 0008604 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.HTML
2015-02-23 20:54 - 2015-02-23 20:54 - 0010968 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.PNG
2015-02-23 20:54 - 2015-02-23 20:54 - 0004242 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.TXT
2015-02-23 20:54 - 2015-02-23 20:54 - 0000288 _____ () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\HELP_DECRYPT.URL
2014-09-05 14:43 - 2014-09-05 14:43 - 0616256 ____C (ClickMeIn Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsb61.tmp
2015-02-20 15:44 - 2015-02-20 15:43 - 0613057 _____ (CMI Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsdC4.tmp
2015-01-23 14:02 - 2015-01-23 14:01 - 0613057 _____ (CMI Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsj5A.tmp
2015-01-26 17:45 - 2015-01-26 17:45 - 0613057 _____ (CMI Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsk87.tmp
2015-02-04 12:33 - 2015-02-04 12:33 - 0613057 _____ (CMI Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsl91.tmp
2014-09-17 19:20 - 2014-09-17 19:20 - 0627440 ____C (ClickMeIn Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsr28C.tmp
2015-01-17 13:06 - 2015-01-17 13:05 - 0613057 _____ (CMI Limited) C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\nsu79.tmp
2014-09-29 22:40 - 2014-09-30 13:27 - 0000003 ____C () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\proxy.log
2015-02-23 20:36 - 2015-02-23 20:36 - 0008604 _____ () C:\Documents and Settings\All Users\HELP_DECRYPT.HTML
2015-02-23 20:36 - 2015-02-23 20:36 - 0010968 _____ () C:\Documents and Settings\All Users\HELP_DECRYPT.PNG
2015-02-23 20:36 - 2015-02-23 20:36 - 0004242 _____ () C:\Documents and Settings\All Users\HELP_DECRYPT.TXT
2015-02-23 20:36 - 2015-02-23 20:36 - 0000288 _____ () C:\Documents and Settings\All Users\HELP_DECRYPT.URL

Files to move or delete:
====================
C:\Documents and Settings\Dawid\TempWmicBatchFile.bat


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================