Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-06-2020 Ran by SYSTEM on REATOGO (06-07-2020 09:44:20) Running from D:\albert do ogłoszenia Platform: WIN_XP (X86) Language: English (United States) Boot Mode: Recovery ATTENTION: Could not load system hive. Error: The process cannot access the file because it is being used by another process. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) ATTENTION: Software hive is not loaded. GroupPolicy: Restriction ? <==== ATTENTION ==================== Scheduled Tasks============================= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d588c83b9ec06f.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\PMTask.job => C:\PROGRA~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE Task: C:\Windows\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job => C:\WINDOWS\system32\xp_eos.exe Task: C:\Windows\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job => C:\WINDOWS\system32\xp_eos.exe Task: C:\Windows\Tasks\SDMsgUpdate (TE).job => C:\PROGRA~1\SMARTD~1\Messages\SDNotify.exeX-PTE -V1810 -SSDU.ini -A -Mhxxp:/www.smartdraw.com/msgs/messagecheck.asp Task: C:\Windows\Tasks\Sprawdź aktualizacje paska narzędzi Windows Live Toolbar.job => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) =================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-07-06 09:44 - 2020-07-06 09:44 - 000000000 ____D C:\FRST 2020-07-05 23:04 - 2020-07-05 23:04 - 000116664 _____ C:\OTL.Txt 2020-07-04 19:27 - 2008-04-14 18:50 - 001000960 _____ (Microsoft Corporation) C:\Windows\System32\msgina.dll 2020-07-04 19:27 - 2008-04-14 18:50 - 000343040 _____ (Microsoft Corporation) C:\Windows\System32\msvcrt.dll 2020-06-30 12:43 - 2020-07-04 18:50 - 000995650 _____ C:\Windows\ntbtlog.txt 2020-06-24 10:54 - 2020-06-24 10:54 - 000025899 _____ C:\Windows\ESView Setup Log.txt 2020-06-24 10:54 - 2020-06-24 10:54 - 000000000 ____D C:\Windows\ESView ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-07-02 04:50 - 2008-09-20 12:32 - 000000000 ____D C:\SWSHARE 2020-07-01 08:58 - 2008-12-24 21:30 - 000000000 ___RD C:\Documents and Settings\Myrek.LENOVO\Moje dokumenty 2020-07-01 07:43 - 2008-09-20 19:42 - 001781118 ____C C:\Windows\System32\PerfStringBackup.INI 2020-07-01 07:43 - 2008-09-20 19:42 - 000740510 _____ C:\Windows\System32\perfh015.dat 2020-07-01 07:43 - 2008-09-20 19:42 - 000199338 _____ C:\Windows\System32\perfc015.dat 2020-07-01 07:40 - 2010-02-05 16:45 - 000001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2020-06-27 13:42 - 2017-05-09 09:36 - 000000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job 2020-06-27 13:42 - 2008-09-20 19:41 - 000000000 ____D C:\Windows\System32\Macromed 2020-06-27 10:56 - 2008-12-24 23:38 - 000000254 _____ C:\Windows\Tasks\Sprawdź aktualizacje paska narzędzi Windows Live Toolbar.job 2020-06-24 11:01 - 2015-01-12 03:53 - 000000000 ____D C:\Program Files\ESView 2020-06-16 14:51 - 2008-09-20 12:09 - 000000316 _____ C:\Windows\Tasks\PMTask.job 2020-06-16 14:50 - 2019-10-22 07:02 - 000001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d588c83b9ec06f.job 2020-06-16 14:50 - 2014-07-25 06:38 - 000000222 _____ C:\Windows\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2020-06-16 14:50 - 2010-02-21 17:48 - 000000464 _____ C:\Windows\Tasks\SDMsgUpdate (TE).job 2020-06-16 14:50 - 2010-02-05 16:45 - 000001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job ==================== KnownDLLs (Whitelisted) ========================= ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe [2008-09-20 19:43] - [2008-04-14 13:21] - 001035264 ____N (Microsoft Corporation) C791ED9EAC5E76D9525E157B1D7A599A C:\Windows\System32\winlogon.exe [2008-04-14 13:21] - [2008-04-14 13:21] - 000510464 _____ (Microsoft Corporation) 51FD2E13D723857B9CA239AE77150F48 C:\Windows\System32\svchost.exe [2008-09-20 19:44] - [2008-04-14 13:21] - 000014336 ____N (Microsoft Corporation) 8607D35D92528E2DF386F19A960D23CE C:\Windows\System32\services.exe [2008-09-20 19:44] - [2009-02-09 07:25] - 000111104 ____N (Microsoft Corporation) 02A467E27AF55F7064C5B251E587315F C:\Windows\System32\User32.dll [2008-09-20 19:43] - [2008-04-14 13:20] - 000580096 ____N (Microsoft Corporation) A435C5C069AFD901751AC323AD238793 C:\Windows\System32\userinit.exe [2008-09-20 19:44] - [2008-04-14 13:21] - 000026624 ____N (Microsoft Corporation) 2A5B37D520508BE6570A3EA79695F5B5 C:\Windows\System32\rpcss.dll [2008-09-20 19:43] - [2009-02-09 06:53] - 000401408 ____N (Microsoft Corporation) A37311D9D628C1042A2836731787F0F3 C:\Windows\System32\dnsapi.dll [2008-09-20 19:43] - [2011-03-03 02:55] - 000149504 _____ (Microsoft Corporation) 6599CFCB40329C37282E4E80E813E799 C:\Windows\System32\dllhost.exe [2008-09-20 19:43] - [2008-04-14 13:21] - 000005120 ____N (Microsoft Corporation) EDD19F93679C098429160C8866E8B1C2 C:\Windows\System32\Drivers\volsnap.sys [2008-09-20 19:44] - [2008-04-14 12:01] - 000052864 ____N (Microsoft Corporation) 56B191AC5FC0DF219949C95A6C87AFE7 ==================== Restore Points (XP) ===================== RP: -> 2020-06-27 10:20 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1273 RP: -> 2020-06-24 10:47 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1272 RP: -> 2020-06-08 09:41 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1271 RP: -> 2020-06-06 09:45 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1270 RP: -> 2020-06-04 12:32 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1269 RP: -> 2020-06-02 11:00 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1268 RP: -> 2020-05-23 06:18 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1267 RP: -> 2020-05-20 17:07 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1266 RP: -> 2020-05-16 04:24 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1265 RP: -> 2020-05-05 06:13 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1264 RP: -> 2020-05-04 07:36 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1263 RP: -> 2020-05-04 06:00 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1262 RP: -> 2020-05-04 06:00 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1261 RP: -> 2020-05-04 05:55 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1260 RP: -> 2020-05-04 05:53 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1259 RP: -> 2020-05-04 05:52 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1258 RP: -> 2020-05-04 04:52 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1257 RP: -> 2020-05-02 18:06 - 028672 _restore{AC0D9841-49EE-4DDC-A46D-FCBBD5B77654}\RP1256 ==================== Memory info =========================== Percentage of memory in use: 13% Total physical RAM: 3046.23 MB Available physical RAM: 2642.5 MB Total Virtual: 2871.06 MB Available Virtual: 2747.4 MB ==================== Drives ================================ Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS Drive c: (Preload) (Fixed) (Total:142.49 GB) (Free:1.57 GB) NTFS ==>[drive with boot components (Windows XP)] Drive d: (USB DISK) (Removable) (Total:3.73 GB) (Free:0.39 GB) FAT32 Drive x: (ReatogoPE) (CDROM) (Total:0.28 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ==================== ========================================================== Disk: 0 (Size: 149.1 GB) (Disk ID: CEF59932) Partition 1: (Active) - (Size=142.5 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=6.6 GB) - (Type=12) ========================================================== Disk: 1 (Size: 3.7 GB) (Disk ID: ECE163E2) Partition 1: (Active) - (Size=3.7 GB) - (Type=0C) ==================== End of FRST.txt ========================