Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-02-2015 01 Ran by Dawid (administrator) on DAWID-PC on 26-02-2015 15:09:00 Running from C:\Documents and Settings\Dawid\Moje dokumenty\Downloads Loaded Profiles: Dawid (Available profiles: Dawid & Administrator) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 7 (Default browser: Opera) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (NVIDIA) C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (NVIDIA) C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (Opera Software) C:\Program Files\Opera\24.0.1558.61\opera.exe () C:\Program Files\Opera\24.0.1558.61\opera_crashreporter.exe (Opera Software) C:\Program Files\Opera\24.0.1558.61\opera.exe (Opera Software) C:\Program Files\Opera\24.0.1558.61\opera.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20145368 2014-01-21] (Realtek Semiconductor Corp.) HKLM\...\Run: [NvMediaCenter] => RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation) HKU\S-1-5-19\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32 HKU\S-1-5-20\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32 HKU\S-1-5-21-606747145-1592454029-1417001333-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-18\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32 ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Toolbar: HKLM - ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== Opera: ======= OPR Extension: (Adblock Plus) - C:\Documents and Settings\Dawid\Dane aplikacji\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2014-06-30] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2282272 2014-08-19] (IObit) R2 nTuneService; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [192832 2011-09-19] (NVIDIA) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21361 2013-10-13] (Cisco Systems, Inc.) [File not signed] S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2014-01-21] (Creative) R1 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2013-11-24] (Disc Soft Ltd) R0 giveio; C:\WINDOWS\System32\giveio.sys [5248 1996-04-03] () [File not signed] S3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2014-01-21] (Creative Technology Ltd.) R3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [129184 2014-09-17] (NVIDIA Corporation) S3 SCREAMINGBDRIVER; C:\WINDOWS\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC) R0 speedfan; C:\WINDOWS\System32\speedfan.sys [24184 2012-12-29] (Almico Software) R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361344 2008-05-08] (Microsoft Corporation) [File not signed] S3 vhidmini; C:\WINDOWS\System32\DRIVERS\vjoy.sys [11168 2009-10-06] (Headsoft) [File not signed] S3 WinRing0_1_2_0; C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [14416 2010-11-01] (OpenLibSys.org) S4 IntelIde; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-26 15:03 - 2015-02-26 15:03 - 00065536 _____ () C:\WINDOWS\system32\config\WindowsPowerShell.evt 2015-02-26 14:52 - 2015-02-26 14:52 - 00000000 ____D () C:\MATS 2015-02-26 14:49 - 2015-02-26 15:05 - 00001084 _____ () C:\WINDOWS\spupdsvc.log 2015-02-26 14:49 - 2015-02-26 15:01 - 00065536 _____ () C:\WINDOWS\system32\config\Windows .evt 2015-02-26 14:49 - 2015-02-26 14:49 - 00006710 _____ () C:\WINDOWS\iis6.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00006182 _____ () C:\WINDOWS\FaxSetup.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00003361 _____ () C:\WINDOWS\ocgen.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00002829 _____ () C:\WINDOWS\tsoc.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00002055 _____ () C:\WINDOWS\comsetup.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00001946 _____ () C:\WINDOWS\msmqinst.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00001374 _____ () C:\WINDOWS\imsins.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00001247 _____ () C:\WINDOWS\ntdtcsetup.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00001083 _____ () C:\WINDOWS\netfxocm.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00000425 _____ () C:\WINDOWS\MedCtrOC.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00000386 _____ () C:\WINDOWS\ocmsn.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00000319 _____ () C:\WINDOWS\tabletoc.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00000309 _____ () C:\WINDOWS\msgsocm.log 2015-02-26 14:49 - 2015-02-26 14:49 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Windows PowerShell 1.0 2015-02-26 14:48 - 2015-02-26 14:48 - 00000000 ____D () C:\WINDOWS\system32\windowspowershell 2015-02-26 14:47 - 2015-02-26 14:49 - 00030810 _____ () C:\WINDOWS\KB926139-v2.log 2015-02-26 14:47 - 2015-02-26 14:49 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB926139-v2$ 2015-02-26 14:45 - 2015-02-26 14:45 - 00347816 _____ (Microsoft Corporation) C:\Documents and Settings\Dawid\Moje dokumenty\MicrosoftFixit.ProgramInstallUninstall.RNP.1233484140856643.3.1.Run.exe 2015-02-26 13:48 - 2015-02-26 13:48 - 01863128 _____ (InstallMoonV26.02) C:\Documents and Settings\Dawid\Dane aplikacji\QBSHXT.exe 2015-02-25 23:35 - 2015-02-25 23:35 - 00000060 _____ () C:\WINDOWS\setupact.log 2015-02-25 23:35 - 2015-02-25 23:35 - 00000000 _____ () C:\WINDOWS\setuperr.log 2015-02-25 23:12 - 2015-02-25 23:15 - 00018705 _____ () C:\WINDOWS\setupapi.log 2015-02-25 00:03 - 2015-02-25 00:03 - 00018211 _____ () C:\Documents and Settings\Dawid\Moje dokumenty\DSA.TXT 2015-02-24 18:52 - 2015-02-24 18:52 - 00024464 _____ () C:\Documents and Settings\Dawid\Pulpit\Skann.log 2015-02-24 18:36 - 2015-02-26 15:09 - 00000000 ____D () C:\FRST 2015-02-24 15:58 - 2015-02-26 11:49 - 00000132 _____ () C:\CE.txt 2015-02-23 23:55 - 2015-02-26 15:01 - 00000561 _____ () C:\WINDOWS\WindowsUpdate.log 2015-02-22 12:29 - 2015-02-22 12:29 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\666.bmp 2015-02-18 21:52 - 2015-02-18 21:52 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\Sevilla taktyka 2.bmp 2015-02-18 21:52 - 2015-02-18 21:52 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\Sevilla taktyka 1.bmp 2015-02-18 21:51 - 2015-02-18 21:51 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\SEVILLA.bmp 2015-02-15 14:07 - 2015-02-15 14:07 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\Dobry Sklad BPL 1.bmp 2015-02-14 22:22 - 2015-02-14 22:22 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\LOL AHAM.bmp 2015-02-13 13:33 - 2015-02-26 14:58 - 00000000 ____D () C:\Documents and Settings\Dawid\Pulpit\DOBRETRACKI 2015-02-12 22:15 - 2015-02-12 22:15 - 02359350 _____ () C:\Documents and Settings\Dawid\Pulpit\coins coins coins.bmp 2015-02-12 11:35 - 2015-02-12 11:56 - 00000000 ____D () C:\WINDOWS\system32\NtmsData 2015-02-10 12:48 - 2015-02-12 15:18 - 00000688 _____ () C:\Documents and Settings\Dawid\Pulpit\Cwiczenia.txt 2015-02-05 21:20 - 2015-02-05 21:20 - 02779170 _____ () C:\Documents and Settings\Dawid\Moje dokumenty\World War 2 Storm Over Europe 6.0a.w3x 2015-01-28 20:11 - 2015-02-05 22:47 - 00000656 _____ () C:\Documents and Settings\Dawid\Pulpit\Lollo.txt ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-26 15:09 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Temp 2015-02-26 15:06 - 2014-07-16 12:51 - 00041926 _____ () C:\WINDOWS\system32\nvAppTimestamps 2015-02-26 15:06 - 2013-10-13 19:56 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Skype 2015-02-26 15:05 - 2014-03-11 14:13 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk 2015-02-26 15:04 - 2013-10-13 14:54 - 00000000 __SHD () C:\Documents and Settings\Dawid\Ustawienia lokalne\Historia 2015-02-26 15:03 - 2013-10-13 14:53 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-02-26 15:01 - 2014-10-20 16:37 - 00032174 _____ () C:\WINDOWS\SchedLgU.Txt 2015-02-26 15:01 - 2014-07-24 14:44 - 00000000 __SHD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia 2015-02-26 15:01 - 2014-07-24 14:44 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp 2015-02-26 15:01 - 2013-10-13 19:34 - 00000000 ____D () C:\WINDOWS\pss 2015-02-26 15:01 - 2013-10-13 16:39 - 00000000 __SHD () C:\Documents and Settings\Default User\Ustawienia lokalne\Historia 2015-02-26 15:01 - 2013-10-13 16:39 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2015-02-26 15:01 - 2013-10-13 16:39 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2015-02-26 15:01 - 2013-10-13 14:54 - 00000188 ___SH () C:\Documents and Settings\Dawid\ntuser.ini 2015-02-26 15:01 - 2013-10-13 14:54 - 00000000 ___HD () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji 2015-02-26 15:01 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid\Menu Start\Programy 2015-02-26 15:01 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji 2015-02-26 15:01 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid 2015-02-26 15:01 - 2013-10-13 14:53 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Historia 2015-02-26 15:01 - 2013-10-13 14:53 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Historia 2015-02-26 15:01 - 2013-10-13 14:53 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji 2015-02-26 15:01 - 2013-10-13 14:47 - 00000000 ____D () C:\Program Files\Common Files\System 2015-02-26 14:59 - 2014-07-31 20:23 - 00000000 ____D () C:\Riot Games 2015-02-26 14:59 - 2014-03-11 14:13 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Skype 2015-02-26 14:59 - 2014-01-21 00:00 - 00000000 ____D () C:\power point 2007 2015-02-26 14:59 - 2013-11-01 09:55 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Overwolf 2015-02-26 14:59 - 2013-10-16 15:32 - 00000000 ____D () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Origin 2015-02-26 14:59 - 2013-10-13 16:39 - 00000000 __RHD () C:\Documents and Settings\Default User\Ustawienia lokalne 2015-02-26 14:59 - 2013-10-13 16:39 - 00000000 ___HD () C:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji 2015-02-26 14:59 - 2013-10-13 16:39 - 00000000 ___HD () C:\Documents and Settings\Default User\Szablony 2015-02-26 14:59 - 2013-10-13 14:53 - 00000000 __SHD () C:\Documents and Settings\NetworkService 2015-02-26 14:59 - 2013-10-13 14:53 - 00000000 __SHD () C:\Documents and Settings\LocalService 2015-02-26 14:59 - 2013-10-13 14:53 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne 2015-02-26 14:58 - 2015-01-05 01:45 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\FIFA World 2015-02-26 14:58 - 2014-12-14 20:35 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\FIFA MANAGER 13 2015-02-26 14:58 - 2014-12-04 17:04 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\GTA San Andreas User Files 2015-02-26 14:58 - 2014-07-30 22:42 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\MKJogo 2015-02-26 14:58 - 2014-07-25 18:19 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\Opera Software 2015-02-26 14:58 - 2014-07-24 14:44 - 00000000 __RHD () C:\Documents and Settings\Administrator\Dane aplikacji 2015-02-26 14:58 - 2014-07-24 14:44 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji 2015-02-26 14:58 - 2014-07-24 14:44 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne 2015-02-26 14:58 - 2014-07-24 14:44 - 00000000 ___HD () C:\Documents and Settings\Administrator\Szablony 2015-02-26 14:58 - 2014-04-19 14:26 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\pxgclient 2015-02-26 14:58 - 2014-03-30 18:23 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Opera Software 2015-02-26 14:58 - 2014-03-02 17:09 - 00000000 ____D () C:\Documents and Settings\Dawid\Pulpit\PLAYLISTA 2015-02-26 14:58 - 2014-02-14 19:03 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\MK-LOL 2015-02-26 14:58 - 2014-02-09 15:52 - 00000000 ____D () C:\Documents and Settings\Dawid\Pulpit\Rapsy 2015-02-26 14:58 - 2013-12-23 17:34 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Moje pliki Bitwy o Śródziemie™ II 2015-02-26 14:58 - 2013-11-01 09:55 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\TS3Client 2015-02-26 14:58 - 2013-10-16 15:32 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Origin 2015-02-26 14:58 - 2013-10-16 15:06 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Origin 2015-02-26 14:58 - 2013-10-13 21:16 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\IObit 2015-02-26 14:58 - 2013-10-13 21:16 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\IObit 2015-02-26 14:58 - 2013-10-13 17:01 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\Adobe 2015-02-26 14:58 - 2013-10-13 15:29 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\DAEMON Tools Lite 2015-02-26 14:58 - 2013-10-13 15:26 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\DAEMON Tools Pro 2015-02-26 14:58 - 2013-10-13 14:54 - 00001019 _____ () C:\Documents and Settings\Dawid\Menu Start\Programy\Internet Explorer.lnk 2015-02-26 14:58 - 2013-10-13 14:54 - 00000000 ___RD () C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart 2015-02-26 14:58 - 2013-10-13 14:54 - 00000000 ___HD () C:\Documents and Settings\Dawid\Ustawienia lokalne 2015-02-26 14:58 - 2013-10-13 14:54 - 00000000 ___HD () C:\Documents and Settings\Dawid\Szablony 2015-02-26 14:58 - 2013-10-13 14:54 - 00000000 ____D () C:\Documents and Settings\Dawid\Pulpit 2015-02-26 14:52 - 2013-12-07 07:29 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard 2015-02-26 14:45 - 2013-10-13 14:54 - 00000000 ___RD () C:\Documents and Settings\Dawid\Moje dokumenty 2015-02-26 14:07 - 2014-09-05 14:40 - 00000008 __RSH () C:\Documents and Settings\All Users\ntuser.pol 2015-02-26 14:04 - 2014-09-05 14:40 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy 2015-02-26 13:52 - 2013-10-13 16:39 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2015-02-25 23:29 - 2013-10-16 15:22 - 00000000 ____D () C:\Program Files\Origin 2015-02-25 23:16 - 2015-01-06 17:13 - 00000658 _____ () C:\Documents and Settings\All Users\Pulpit\EA SPORTS FIFA World.lnk 2015-02-25 23:15 - 2013-10-13 14:48 - 00000000 ____D () C:\WINDOWS\system32\DirectX 2015-02-25 16:59 - 2014-10-26 16:59 - 00073728 _____ () C:\WINDOWS\system32\tasks.dll 2015-02-24 17:24 - 2014-07-16 12:48 - 01444568 _____ () C:\WINDOWS\system32\nvdrsdb1.bin 2015-02-24 17:24 - 2014-07-16 12:48 - 00000001 _____ () C:\WINDOWS\system32\nvdrssel.bin 2015-02-23 21:58 - 2013-10-13 16:39 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty 2015-02-23 21:43 - 2014-07-24 14:44 - 00000000 ____D () C:\Documents and Settings\Administrator 2015-02-23 17:18 - 2001-07-21 23:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2015-02-21 19:26 - 2013-10-13 15:20 - 00000000 ____D () C:\Documents and Settings\Dawid\Dane aplikacji\foobar2000 2015-02-21 10:31 - 2014-07-16 12:48 - 01444504 _____ () C:\WINDOWS\system32\nvdrsdb0.bin 2015-02-20 18:23 - 2014-09-24 17:34 - 00000000 ____D () C:\Program Files\AGEIA Technologies 2015-02-20 18:22 - 2001-07-21 23:16 - 00000746 _____ () C:\WINDOWS\win.ini 2015-02-12 02:19 - 2014-01-21 00:34 - 00065536 _____ () C:\WINDOWS\system32\config\OAlerts.evt 2015-02-11 02:47 - 2013-11-03 01:28 - 00329346 ____C () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat 2015-02-05 18:49 - 2013-10-16 15:20 - 00000000 ____D () C:\Documents and Settings\Dawid\Moje dokumenty\FIFA 14 ==================== Files in the root of some directories ======= 2015-01-25 17:12 - 2015-01-25 17:12 - 0001248 _____ () C:\Documents and Settings\Dawid\Dane aplikacji\QBSHXT 2015-02-26 13:48 - 2015-02-26 13:48 - 1863128 _____ (InstallMoonV26.02) C:\Documents and Settings\Dawid\Dane aplikacji\QBSHXT.exe 2014-01-23 14:43 - 2014-02-13 19:39 - 0045194 ____C () C:\Documents and Settings\Dawid\Dane aplikacji\room_v3.dat 2013-10-13 18:15 - 2014-12-04 17:09 - 0011776 ____C () C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================