Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-04-2015 04
Ran by Marzena (administrator) on BLACKV8 on 16-04-2015 19:24:58
Running from C:\Documents and Settings\Marzena\Moje dokumenty
Loaded Profiles: Marzena (Available profiles: Marzena & Administrator)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\WgaTray.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(artArmin) C:\Program Files\Vista Drive Icon\DrvIcon.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
() C:\Program Files\Opera\28.0.1750.51\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.51\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-03] (Avast Software s.r.o.)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16851456 2008-08-26] (Realtek Semiconductor Corp.)
HKLM\...\Run: [GEST] => ]
HKLM\...\Run: [DrvIcon] => C:\Program Files\Vista Drive Icon\DrvIcon.exe [49152 2008-04-13] (artArmin)
HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [57344 2008-06-19] (Realtek Semiconductor Corp.)
HKLM\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\a2b57e8f-c63b-4ec1-a9c2-40036a6fc19a.exe [183232 2015-04-16] (AVAST Software)
HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1
HKU\S-1-5-20\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-20\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-20\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-20\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Run: [Facebook Update] => C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2014-11-26] (Facebook Inc.)
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Run: [Clownfish] => [X]
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-18\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-18\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-18\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-18\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 1
Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Styler.lnk
ShortcutTarget: Styler.lnk -> C:\Documents and Settings\Marzena\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
Startup: C:\Documents and Settings\Administrator.BLACKV8\Menu Start\Programy\Autostart\Styler.lnk
ShortcutTarget: Styler.lnk -> C:\Documents and Settings\Marzena\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
Startup: C:\Documents and Settings\Administrator.BLACKV8.000\Menu Start\Programy\Autostart\Styler.lnk
ShortcutTarget: Styler.lnk -> C:\Documents and Settings\Marzena\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
Startup: C:\Documents and Settings\Default User\Menu Start\Programy\Autostart\Styler.lnk
ShortcutTarget: Styler.lnk -> C:\Documents and Settings\Marzena\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
Startup: C:\Documents and Settings\hjk\Menu Start\Programy\Autostart\Styler.lnk
ShortcutTarget: Styler.lnk -> C:\Documents and Settings\Marzena\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
Startup: C:\Documents and Settings\Marzena\Menu Start\Programy\Autostart\Styler.lnk
ShortcutTarget: Styler.lnk -> C:\Documents and Settings\Marzena\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
Startup: C:\Documents and Settings\Mateusz Wojno\Menu Start\Programy\Autostart\Styler.lnk
ShortcutTarget: Styler.lnk -> C:\Documents and Settings\Marzena\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Marzena\Dane aplikacji\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1085031214-1960408961-682003330-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie_rsearch.html
URLSearchHook: HKU\S-1-5-21-1085031214-1960408961-682003330-1002 - DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.)
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420820123&from=cor&uid=WDCXWD1600AAJS-00L7A0_WD-WMAV3505620256202&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1085031214-1960408961-682003330-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420820123&from=cor&uid=WDCXWD1600AAJS-00L7A0_WD-WMAV3505620256202&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1085031214-1960408961-682003330-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420820123&from=cor&uid=WDCXWD1600AAJS-00L7A0_WD-WMAV3505620256202&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1085031214-1960408961-682003330-1002 -> {FD63BF63-BFFF-4B8F-9D26-4267DF7F17DD} URL = http://www.google.com/custom?q={searchTerms}&sa.x=0&sa.y=0&safe=active&client=pub-3794288947762788&forid=1&channel=1975384696&ie=UTF-8&oe=UTF-8&hl=en&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-25] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-03] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-25] (Oracle Corporation)
Toolbar: HKLM - No Name - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} -  No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Marzena\Dane aplikacji\Mozilla\Firefox\Profiles\xwazqgws.default
FF Homepage: www.wp.pl/?src01=dp220141201
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll [2009-04-28] (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2015-02-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-25] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin HKU\S-1-5-21-1085031214-1960408961-682003330-1002: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-1085031214-1960408961-682003330-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll [2014-10-08] (Unity Technologies ApS)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-10-25]
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-03]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome: 
=======
CHR HomePage: Default -> hxxp://isearch.\u003C!--- Page(page_conn_problem_waiting)=[] --->\u003CHTML>\u003CHEAD>\u003CMETA HTTP-EQUIV=\
CHR DefaultSuggestURL: Default -> 
CHR Profile: C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-15]
CHR Extension: (Google Docs) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-15]
CHR Extension: (Google Drive) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-15]
CHR Extension: (YouTube) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-15]
CHR Extension: (Google Search) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-15]
CHR Extension: (Avast SafePrice) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-10]
CHR Extension: (AdBlock) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-17]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-15]
CHR Extension: (Clock Hand) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nhhfhndnffkcemhlnkoldboggfnjglnd [2015-02-07]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-15]
CHR Extension: (Gmail) - C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-15]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-03]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-03]

Opera: 
=======
OPR Extension: (Adblock Plus) - C:\Documents and Settings\Marzena\Dane aplikacji\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-04-03]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-03] (Avast Software s.r.o.)
S4 ClipSrv; C:\WINDOWS\system32\clipsrv.exe [43008 2010-01-17] (Microsoft Corporation) [File not signed]
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S3 MSDTC; C:\WINDOWS\system32\msdtc.exe [30720 2010-01-17] (Microsoft Corporation) [File not signed]
S3 MSIServer; C:\WINDOWS\System32\msiexec.exe [99840 2009-12-24] (Microsoft Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [43520 2006-07-01] (Advanced Micro Devices)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-04-03] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [73440 2015-04-03] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-04-03] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-04-03] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [788272 2015-04-03] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [427736 2015-04-03] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-04-03] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [208024 2015-04-03] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S4 exFat; C:\WINDOWS\system32\Drivers\exFat.sys [136192 2008-01-21] (Microsoft Corporation) [File not signed]
S3 gdrv; C:\WINDOWS\gdrv.sys [16608 2014-10-25] (Windows (R) 2000 DDK provider)
S3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [26176 2015-02-16] (LogMeIn, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R3 RTHDMIAzAudService; C:\WINDOWS\System32\drivers\RtHDMI.sys [3684352 2008-08-26] (Realtek Semiconductor Corp.)
R0 Si3112; C:\WINDOWS\system32\Drivers\Si3112.sys [62208 2010-01-17] (Silicon Image, Inc.) [File not signed]
S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X]
S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-16 19:24 - 2015-04-16 19:25 - 00018650 _____ () C:\Documents and Settings\Marzena\Moje dokumenty\FRST.txt
2015-04-16 19:22 - 2015-04-16 19:24 - 00000000 ____D () C:\FRST
2015-04-16 19:20 - 2015-04-16 19:20 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Marzena\Moje dokumenty\OTL.com
2015-04-16 19:20 - 2015-04-16 19:20 - 00370943 _____ () C:\Documents and Settings\Marzena\Moje dokumenty\gmer.zip
2015-04-16 19:19 - 2015-04-16 19:19 - 01137152 _____ (Farbar) C:\Documents and Settings\Marzena\Moje dokumenty\FRST.exe
2015-04-16 19:14 - 2015-04-16 19:14 - 17189552 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-04-16 19:06 - 2015-04-03 19:29 - 00788272 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw234.tmp
2015-04-16 19:06 - 2015-04-03 19:29 - 00427736 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw239.tmp
2015-04-16 19:06 - 2015-04-03 19:29 - 00291312 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-04-16 19:06 - 2015-04-03 19:29 - 00208024 _____ () C:\WINDOWS\system32\Drivers\asw23A.tmp
2015-04-16 19:06 - 2015-04-03 19:29 - 00073440 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw237.tmp
2015-04-16 19:06 - 2015-04-03 19:29 - 00057888 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw23B.tmp
2015-04-16 19:06 - 2015-04-03 19:29 - 00055200 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw235.tmp
2015-04-16 19:06 - 2015-04-03 19:29 - 00049904 _____ () C:\WINDOWS\system32\Drivers\asw238.tmp
2015-04-16 19:06 - 2015-04-03 19:29 - 00024144 _____ () C:\WINDOWS\system32\Drivers\asw236.tmp
2015-04-16 19:00 - 2015-04-16 19:00 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.tmp
2015-04-16 18:59 - 2015-04-16 18:59 - 00002409 _____ () C:\WINDOWS\system32\servers.def.vpx
2015-04-16 18:57 - 2015-04-16 18:57 - 05481344 _____ (Avast Software s.r.o.) C:\Documents and Settings\Marzena\Moje dokumenty\avast_free_antivirus_setup_online_dobreprogramy.exe
2015-04-10 18:57 - 2015-04-10 19:18 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-04-10 18:56 - 2015-04-10 18:56 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-04-10 18:56 - 2015-04-10 18:56 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes Anti-Malware
2015-04-10 18:56 - 2015-04-10 18:56 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2015-04-10 18:56 - 2015-03-17 06:15 - 00120024 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-04-10 18:56 - 2015-03-17 06:15 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-04-10 18:55 - 2015-04-10 18:56 - 21540440 _____ (Malwarebytes Corporation ) C:\Documents and Settings\Marzena\Moje dokumenty\mbam-setup-2.1.4.1018.exe
2015-04-10 18:31 - 2015-04-10 19:11 - 00000000 ____D () C:\Program Files\VS Revo Group
2015-04-10 18:31 - 2015-04-10 18:31 - 02623656 _____ (VS Revo Group Ltd.) C:\Documents and Settings\Marzena\Moje dokumenty\revosetup (1).exe
2015-04-10 18:30 - 2015-04-10 18:31 - 02623656 _____ (VS Revo Group Ltd.) C:\Documents and Settings\Marzena\Moje dokumenty\revosetup.exe
2015-04-10 18:19 - 2015-04-10 18:19 - 00017576 _____ () C:\Documents and Settings\Marzena\servers.def.lkg
2015-04-10 18:19 - 2015-04-10 18:19 - 00017576 _____ () C:\Documents and Settings\Marzena\servers.def
2015-04-10 18:19 - 2015-04-10 18:19 - 00002391 _____ () C:\Documents and Settings\Marzena\servers.def.vpx
2015-04-03 23:21 - 2015-04-16 19:00 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-04-03 23:21 - 2015-04-16 19:00 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-04-03 23:21 - 2015-04-16 18:58 - 00032394 _____ () C:\WINDOWS\SchedLgU.Txt
2015-04-03 23:21 - 2015-04-03 23:21 - 00000000 ____N () C:\WINDOWS\Sti_Trace.log
2015-04-03 23:20 - 2015-04-03 23:20 - 00000000 ____D () C:\Program Files\Dropbox
2015-04-03 23:19 - 2015-04-16 19:01 - 00361037 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-03 23:11 - 2015-04-03 23:11 - 05481352 _____ (Avast Software s.r.o.) C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\avast_free_antivirus_setup_online.exe
2015-04-03 23:11 - 2015-04-03 23:11 - 05481352 _____ (Avast Software s.r.o.) C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\avast_free_antivirus_setup_online (1).exe
2015-04-03 22:56 - 2015-04-03 23:20 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000\Dane aplikacji\Dropbox
2015-04-03 22:49 - 2015-04-03 22:52 - 189746552 _____ (Avast Software s.r.o.) C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\avast_pro_antivirus_setup.exe
2015-04-03 20:18 - 2015-04-03 20:18 - 00000000 ____D () C:\Documents and Settings\Marzena\New
2015-04-03 20:14 - 2015-04-03 20:19 - 00000000 ____D () C:\be8188dd6117fe1d95ee04208ac02c
2015-04-03 20:13 - 2015-04-04 11:02 - 00000000 ____D () C:\WINDOWS\SxsCaPendDel
2015-04-03 19:32 - 2015-04-16 18:59 - 00017599 _____ () C:\WINDOWS\system32\servers.def.lkg
2015-04-03 19:32 - 2015-04-16 18:59 - 00017599 _____ () C:\WINDOWS\system32\servers.def
2015-04-03 19:31 - 2015-04-03 19:31 - 00000000 ____D () C:\WINDOWS\jumpshot.com
2015-04-03 19:31 - 2015-04-03 19:31 - 00000000 ____D () C:\Documents and Settings\Marzena\Dane aplikacji\AVAST Software
2015-04-03 19:30 - 2015-04-16 19:06 - 00001689 _____ () C:\Documents and Settings\All Users\Pulpit\Avast Free Antivirus.lnk
2015-04-03 19:30 - 2015-04-16 19:06 - 00000318 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-04-03 19:30 - 2015-04-03 19:30 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVAST Software
2015-04-03 19:30 - 2015-04-03 19:29 - 00788272 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-03 19:30 - 2015-04-03 19:29 - 00427736 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-03 19:30 - 2015-04-03 19:29 - 00208024 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-03 19:30 - 2015-04-03 19:29 - 00073440 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-03 19:30 - 2015-04-03 19:29 - 00057888 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswTdi.sys
2015-04-03 19:30 - 2015-04-03 19:29 - 00055200 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr.sys
2015-04-03 19:30 - 2015-04-03 19:29 - 00049904 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-03 19:30 - 2015-04-03 19:29 - 00024144 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-03 19:29 - 2015-04-03 19:29 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-04-03 19:28 - 2015-04-03 19:28 - 00000000 ____D () C:\Program Files\AVAST Software
2015-04-03 19:27 - 2015-04-03 19:27 - 05481352 _____ (Avast Software s.r.o.) C:\Documents and Settings\Marzena\Moje dokumenty\avast_free_antivirus_setup_online.exe
2015-04-03 00:14 - 2015-04-03 00:14 - 00001008 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
2015-03-31 20:50 - 2015-03-31 20:50 - 00429531 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\10979501_796971240379582_1556959340_n.mp4
2015-03-28 12:37 - 2015-03-28 12:37 - 00102509 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\aku_kamu.zip
2015-03-28 12:36 - 2015-03-28 12:36 - 00033908 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\sweetly_broken.zip
2015-03-28 12:30 - 2015-03-28 12:30 - 00046555 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\a_little_sunshine.zip
2015-03-28 12:30 - 2015-03-28 12:30 - 00012261 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\sabrina2.zip
2015-03-28 12:20 - 2015-03-28 12:20 - 00050096 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\because_i_am_happy.zip
2015-03-28 12:20 - 2015-03-28 12:20 - 00050016 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\penelope_anne.zip
2015-03-28 12:20 - 2015-03-28 12:20 - 00045847 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\the_million_mile_man.zip
2015-03-28 12:20 - 2015-03-28 12:20 - 00020889 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\kg_defying_gravity.zip
2015-03-28 12:17 - 2015-03-28 12:17 - 00005745 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\secret_code.zip
2015-03-28 12:12 - 2015-03-28 12:12 - 01213893 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\barlow_by_thunderpanda.zip
2015-03-28 12:07 - 2015-03-28 12:07 - 00056391 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\dirty_bowl_86.zip
2015-03-28 12:01 - 2015-03-28 12:01 - 01929200 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\atlantic_cruise.zip
2015-03-28 11:22 - 2015-03-28 11:22 - 00098326 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\dk_thievery.zip
2015-03-28 11:14 - 2015-03-28 11:14 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000\Dane aplikacji\Notepad++
2015-03-28 11:12 - 2015-03-28 11:12 - 00887240 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\hello_goodbye.zip
2015-03-28 10:25 - 2015-03-28 10:25 - 01322875 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\moon_flower.zip
2015-03-28 10:25 - 2015-03-28 10:25 - 00305471 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\a_day_without_sun.zip
2015-03-28 10:25 - 2015-03-28 10:25 - 00080638 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\always_forever.zip
2015-03-28 10:23 - 2015-03-28 10:23 - 01036741 _____ () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\denne_freakshow.zip
2015-03-28 10:13 - 2015-03-28 10:13 - 00740115 _____ (Program ) C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty\pobierz_Gimp_V2.8.14.1.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-16 19:25 - 2014-10-25 18:30 - 00000000 ____D () C:\Documents and Settings\Marzena\Ustawienia lokalne\Temp
2015-04-16 19:24 - 2014-10-25 18:30 - 00000000 ___RD () C:\Documents and Settings\Marzena\Moje dokumenty
2015-04-16 19:14 - 2015-02-25 09:54 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-16 19:04 - 2014-10-25 20:03 - 01108418 ____C () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-16 19:04 - 2014-10-25 20:03 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty
2015-04-16 19:04 - 2001-10-26 21:15 - 00498020 ____C () C:\WINDOWS\system32\perfh015.dat
2015-04-16 19:04 - 2001-10-26 21:15 - 00087678 ____C () C:\WINDOWS\system32\perfc015.dat
2015-04-16 19:01 - 2015-01-15 22:55 - 00001036 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-16 19:00 - 2015-01-16 21:17 - 00000428 _____ () C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1421435848.job
2015-04-16 19:00 - 2015-01-15 22:55 - 00001032 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-16 19:00 - 2014-10-25 18:34 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat
2015-04-16 19:00 - 2014-10-25 18:30 - 00000000 ___HD () C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji
2015-04-16 19:00 - 2001-07-22 03:17 - 00002206 ____C () C:\WINDOWS\system32\wpa.dbl
2015-04-16 18:59 - 2014-10-25 18:30 - 00000006 ___HC () C:\WINDOWS\Tasks\SA.DAT
2015-04-16 18:58 - 2014-10-25 22:29 - 00458752 _____ () C:\WINDOWS\system32\config\ACEEvent.evt
2015-04-16 18:58 - 2014-10-25 18:31 - 00000188 __SHC () C:\Documents and Settings\Marzena\ntuser.ini
2015-04-16 18:55 - 2015-02-23 21:08 - 00000000 ____D () C:\WINDOWS\Minidump
2015-04-16 18:55 - 2014-10-25 18:30 - 00000000 ____D () C:\Documents and Settings\Marzena
2015-04-10 19:37 - 2015-02-05 21:37 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\0c3a7392-abfa-41f5-95a9-5e339ac76b7b
2015-04-10 19:37 - 2015-01-09 18:15 - 00000000 ____D () C:\Program Files\XTab
2015-04-10 19:37 - 2014-10-26 09:56 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2929961$
2015-04-10 19:36 - 2015-01-09 17:48 - 00000000 __RHD () C:\Documents and Settings\Administrator.BLACKV8.000\Dane aplikacji
2015-04-10 19:36 - 2015-01-09 17:48 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000\Moje dokumenty
2015-04-10 19:36 - 2014-10-25 20:02 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2015-04-10 19:36 - 2001-07-22 03:16 - 00000630 ____C () C:\WINDOWS\win.ini
2015-04-10 19:30 - 2014-11-26 14:25 - 00001010 ____C () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1085031214-1960408961-682003330-1002UA.job
2015-04-10 19:15 - 2014-10-25 18:30 - 00000000 __SHD () C:\WINDOWS\CSC
2015-04-10 19:11 - 2014-10-25 18:30 - 00000000 ___RD () C:\Documents and Settings\Marzena\Menu Start\Programy
2015-04-10 19:11 - 2014-10-25 18:30 - 00000000 ____D () C:\Documents and Settings\Marzena\Pulpit
2015-04-10 18:56 - 2014-10-25 20:03 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy
2015-04-10 18:52 - 2014-10-25 18:12 - 00000000 ____D () C:\WINDOWS\system32\Restore
2015-04-10 18:24 - 2010-05-26 17:55 - 00090934 ____C () C:\WINDOWS\system32\langs.xml
2015-04-10 18:07 - 2014-10-26 10:53 - 00000000 ____D () C:\Program Files\Opera
2015-04-06 20:37 - 2014-10-25 20:01 - 00000207 ___SH () C:\boot.ini
2015-04-06 20:37 - 2001-07-22 03:15 - 00000227 ____C () C:\WINDOWS\system.ini
2015-04-04 18:05 - 2015-01-09 17:48 - 00000188 __SHC () C:\Documents and Settings\Administrator.BLACKV8.000\ntuser.ini
2015-04-04 18:05 - 2015-01-09 17:48 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000\Ustawienia lokalne\Temp
2015-04-04 18:04 - 2015-01-09 17:48 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000\Pulpit
2015-04-04 11:21 - 2015-01-09 18:18 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000\Dane aplikacji\PhotoScape
2015-04-03 23:19 - 2015-01-09 17:48 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000
2015-04-03 23:14 - 2015-01-09 17:48 - 00000000 ___RD () C:\Documents and Settings\Administrator.BLACKV8.000\Menu Start\Programy
2015-04-03 20:16 - 2014-11-26 12:00 - 00000000 ____D () C:\WINDOWS\pss
2015-04-03 20:16 - 2014-10-25 18:30 - 00000000 ___RD () C:\Documents and Settings\Marzena\Menu Start\Programy\Autostart
2015-04-03 20:14 - 2015-02-25 09:54 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-04-03 20:14 - 2015-02-25 09:54 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-04-03 20:14 - 2015-02-25 09:54 - 00000892 _____ () C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-04-03 20:14 - 2014-10-26 10:58 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-03 20:14 - 2014-10-26 10:57 - 119837696 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-03 19:54 - 2014-10-25 18:11 - 00000000 ____D () C:\WINDOWS\Registration
2015-04-03 19:31 - 2014-10-25 18:30 - 00000000 __RHD () C:\Documents and Settings\Marzena\Dane aplikacji
2015-04-03 19:30 - 2014-10-25 20:03 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-04-03 19:28 - 2015-01-15 22:56 - 00001819 ____C () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2015-04-03 19:27 - 2014-10-25 23:06 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
2015-04-03 19:26 - 2014-10-26 08:47 - 00000000 ____D () C:\Documents and Settings\Marzena\Dane aplikacji\Skype
2015-04-03 00:14 - 2015-03-03 15:05 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000\Ustawienia lokalne\Dane aplikacji\gtk-2.0
2015-04-03 00:14 - 2015-03-03 15:04 - 00000000 ____D () C:\Documents and Settings\Administrator.BLACKV8.000\.gimp-2.8
2015-04-03 00:14 - 2015-01-09 17:48 - 00000000 ___HD () C:\Documents and Settings\Administrator.BLACKV8.000\Ustawienia lokalne\Dane aplikacji
2015-04-02 19:31 - 2015-01-09 18:48 - 00091136 ___HC () C:\Documents and Settings\Administrator.BLACKV8.000\Pulpit\photothumb.db
2015-03-28 10:25 - 2015-03-03 14:59 - 00000736 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\GIMP 2.lnk

==================== Files in the root of some directories =======

2014-11-09 18:55 - 2015-02-18 12:35 - 0009216 ____C () C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-26 12:00 - 2014-11-26 12:00 - 0000132 ____C () C:\Documents and Settings\Marzena\Ustawienia lokalne\Dane aplikacji\fusioncache.dat

Some content of TEMP:
====================
C:\Documents and Settings\Administrator.BLACKV8.000\Ustawienia lokalne\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpja7yh8.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe
[2009-12-09 15:40] - [2009-12-09 15:40] - 1705984 ____A (Microsoft Corporation) a9bd5f368966ea709a4bff992f583f07  

C:\WINDOWS\system32\winlogon.exe
[2010-01-17 16:29] - [2010-01-17 16:29] - 0549888 ____A (Microsoft Corporation) 335813eacd16e84f3047a3326f6e5473  

C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll
[2009-06-26 10:30] - [2009-06-26 10:30] - 0642560 ____A (Microsoft Corporation) 946665fa0cc98f57e1023cd21f149d8b  

C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================