Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-08-2013
Ran by Tomek (administrator) on 30-08-2013 06:26:41
Running from C:\Documents and Settings\Tomek\Moje dokumenty\Downloads
Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\WLKeeper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(IDT, Inc.) c:\program files\idt\wdm\stacsv.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Microsoft Corporation) C:\WINDOWS\System32\SCardSvr.exe
(Dell Inc.) C:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe
(Dell Inc.) C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Nitro PDF Software) C:\Program Files\Nitro PDF\Professional\NitroPDFDriverService.exe
(Nalpeiron Ltd.) C:\WINDOWS\system32\NLSSRV32.EXE
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Acresso) C:\PROGRA~1\VIVIDW~1\WORKSH~1.EXE
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Sun Microsystems, Inc.) C:\Program Files\Vivid WorkshopData ATI\jre\bin\java.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() C:\Program Files\Gemplus\GemSafe Libraries\BIN\RegTool.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apntex.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidFind.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dell Inc.) C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe
(Intel Corporation) C:\WINDOWS\system32\igfxext.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Logitech, Inc.) C:\Program Files\SetPoint\SetPoint.exe
(Microsoft Corporation) C:\Program Files\Windows Desktop Search\WindowsSearch.exe
(Broadcom Corporation.) C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
() C:\Program Files\Ericsson\Wireless Manager\WirelessManager.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelZeroConfig] - C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [1400832 2010-07-19] (Intel(R) Corporation)
HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1206544 2010-07-19] (Intel(R) Corporation)
HKLM\...\Run: [RegTool] - C:\Program Files\Gemplus\GemSafe Libraries\BIN\RegTool.exe [172032 2007-04-03] ()
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [278528 2010-02-17] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [495708 2010-03-10] (IDT, Inc.)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4767304 2013-03-07] (AVAST Software)
HKLM\...\Run: [KernelFaultCheck] - %systemroot%\system32\dumprep 0 -k [x]
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\crrss.exe
Winlogon\Notify\gemsafe: C:\Program Files\Gemplus\GemSafe Libraries\BIN\WLEventNotify.dll [X]
Winlogon\Notify\WgaLogon: WgaLogon.dll (Microsoft Corporation)
HKCU\...\Winlogon: [Shell] explorer.exe "C:\Documents and Settings\Tomek\winlogon.exe" [0 2010-02-10] () <==== ATTENTION 
MountPoints2: {118df6aa-7cab-11e1-9957-00234ed25cd7} - F:\NokiaPCIA_Autorun.exe
MountPoints2: {1b58c97d-5c72-11e1-993e-00234ed25cd7} - F:\AutoRun.exe
MountPoints2: {1b58c980-5c72-11e1-993e-00234ed25cd7} - F:\AutoRun.exe
MountPoints2: {92bc0003-7978-11e1-9956-0022fb1b3932} - F:\Install.exe
MountPoints2: {987b3007-a63e-11e1-996c-00234ed25cd7} - E:\Startme.exe
MountPoints2: {d088f67f-b9cc-11e0-98e8-0022fb1b3932} - E:\AutoRun.exe
MountPoints2: {e8401a46-bc28-11e0-98ea-00234ed25cd7} - E:\AutoRun.exe
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Dell System Manager.lnk
ShortcutTarget: Dell System Manager.lnk -> C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe (Dell Inc.)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\SetPoint.lnk
ShortcutTarget: SetPoint.lnk -> C:\Program Files\SetPoint\SetPoint.exe (Logitech, Inc.)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Windows Search.lnk
ShortcutTarget: Windows Search.lnk -> C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

ProxyServer: proxy.google.pl:92
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1298965595484
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://10.0.0.10/videocache/0/microsoft/MsStkPrp.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: ipp - No CLSID Value - 
Handler: msdaipp - No CLSID Value - 
ShellExecuteHooks: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [304128 2009-05-24] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.158.199.1 213.158.199.5
Tcpip\..\Interfaces\{D47B73A6-A3F5-4767-B644-A694EC767EE6}: [NameServer]8.8.8.8,8.8.4.4

Chrome: 
=======
CHR HomePage: hxxp://search.conduit.com/?SearchSource=10&ctid=CT2475029
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\nppdf32.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (vShare.tv plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll No File
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Radio) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\agljkoinmcdnopnlbhhjibjiablccgoh\1.0.56_0
CHR Extension: (Angry Birds) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0
CHR Extension: (Google Docs) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Facebook) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm\1.0.3_0
CHR Extension: (Google Search) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Multiple Account Checker for Gmail\u2122) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dnimhgelcnggigekhdjlifjpndgmnglm\1.2_0
CHR Extension: (Rapidox.pl) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\edcglcbdmnbogjhcendmmgipekenjicn\1.0_0
CHR Extension: (Grepolis Report Converter) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\eediamimojgbnjfaalcnlonenfdcogop\2.1.9_0
CHR Extension: (Google Calendar) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0
CHR Extension: (RMFon) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\fmimndodhalboaeakkpfbophcagcelnn\1.1.1.0_0
CHR Extension: (Google Maps) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\DOCUME~1\Tomek\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\StartSearch plugin\vshareplg.crx

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [45248 2013-03-07] (AVAST Software)
R2 buttonsvc32; C:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe [293968 2009-04-27] (Dell Inc.)
R2 Credential Vault Host Control Service; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [812448 2010-03-24] (Broadcom Corporation)
R2 Credential Vault Host Storage; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [27040 2010-03-24] (Broadcom Corporation)
R2 dcpsysmgrsvc; C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe [378224 2010-08-24] (Dell Inc.)
S2 KMService; C:\WINDOWS\system32\srvany.exe [8192 2011-10-06] ()
R2 NitroDriverReadSpool; C:\Program Files\Nitro PDF\Professional\NitroPDFDriverService.exe [196928 2010-10-20] (Nitro PDF Software)
R2 S24EventMonitor; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [966656 2010-07-19] (Intel(R) Corporation)
S3 Samsung UPD Service; C:\WINDOWS\system32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)
R2 STacSV; c:\program files\idt\wdm\stacsv.exe [229458 2010-03-10] (IDT, Inc.)
R2 WLANKEEPER; C:\Program Files\Intel\WiFi\bin\WLKeeper.exe [364544 2010-07-19] (Intel(R) Corporation)
R2 WorkshopDBService; C:\PROGRA~1\VIVIDW~1\WORKSH~1.EXE [114688 2011-11-12] (Acresso)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" [x]

==================== Drivers (Whitelisted) ====================

R3 AESTAud; C:\Windows\System32\drivers\AESTAud.sys [113664 2009-04-21] (Andrea Electronics Corporation)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-03-07] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [49760 2013-03-07] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49248 2013-03-07] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [765736 2013-03-07] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [368176 2013-03-07] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [62376 2013-03-07] (AVAST Software)
S3 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [164736 2013-03-07] ()
R3 btaudio; C:\Windows\System32\drivers\btaudio.sys [533024 2009-09-30] (Broadcom Corporation.)
R3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [37160 2009-09-30] (Broadcom Corporation.)
R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [991264 2009-09-30] (Broadcom Corporation.)
R3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [156816 2009-09-30] (Broadcom Corporation.)
R3 btwhid; C:\Windows\System32\DRIVERS\btwhid.sys [56992 2009-09-30] (Broadcom Corporation.)
R3 btwmodem; C:\Windows\System32\DRIVERS\btwmodem.sys [37032 2009-09-30] (Broadcom Corporation.)
R3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [45984 2009-09-30] (Broadcom Corporation.)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [33832 2009-11-03] (Broadcom Corporation)
R3 d553bus; C:\Windows\System32\DRIVERS\d553bus.sys [281216 2008-12-19] (MCCI Corporation)
R3 d553card; C:\Windows\System32\DRIVERS\d553card.sys [356352 2008-12-19] (MCCI Corporation)
R3 d553gps; C:\Windows\System32\DRIVERS\d553gps.sys [77352 2009-01-08] (Dell)
R3 d553mdfl; C:\Windows\System32\DRIVERS\d553mdfl.sys [14976 2008-12-19] (MCCI Corporation)
R3 d553mdfl2; C:\Windows\System32\DRIVERS\d553mdfl2.sys [14976 2008-12-19] (MCCI Corporation)
R3 d553mdm; C:\Windows\System32\DRIVERS\d553mdm.sys [365312 2008-12-19] (MCCI Corporation)
R3 d553mdm2; C:\Windows\System32\DRIVERS\d553mdm2.sys [409216 2008-12-19] (MCCI Corporation)
R3 d553nd5; C:\Windows\System32\DRIVERS\d553nd5.sys [25984 2008-12-19] (MCCI Corporation)
R3 d553scard; C:\Windows\System32\DRIVERS\d553scard.sys [49192 2009-04-06] (Dell)
R3 d553unic; C:\Windows\System32\DRIVERS\d553unic.sys [375424 2008-12-19] (MCCI Corporation)
R3 DroidCam; C:\Windows\System32\drivers\droidcam.sys [21376 2013-02-04] (Dev47Apps)
R3 e1yexpress; C:\Windows\System32\DRIVERS\e1y5132.sys [240344 2009-08-04] (Intel Corporation)
R3 NETwNx32; C:\Windows\System32\DRIVERS\NETwNx32.sys [6650752 2010-07-14] (Intel Corporation)
R1 NetworkX; C:\Windows\system32\ckldrv.sys [21638 2008-08-22] ()
R0 PBADRV; C:\Windows\System32\DRIVERS\PBADRV.sys [26608 2008-06-04] (Dell Inc)
S3 PcaSp50; C:\Windows\System32\DRIVERS\PcaSp50.sys [28160 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA))
R2 s24trans; C:\Windows\System32\DRIVERS\s24trans.sys [13952 2010-05-19] (Intel Corporation)
R0 Si3112; C:\Windows\System32\Drivers\Si3112.sys [62336 2010-02-10] (Silicon Image, Inc.)
S0 Si3114r5; C:\Windows\System32\Drivers\Si3114r5.sys [195072 2010-02-10] (Silicon Image, Inc)
R0 Si3124; C:\Windows\System32\Drivers\Si3124.sys [69248 2010-02-10] (Silicon Image, Inc.)
R0 Si3132; C:\Windows\System32\Drivers\Si3132.sys [74672 2010-02-10] (Silicon Image, Inc.)
R0 Si3132r5; C:\Windows\System32\Drivers\Si3132r5.sys [215856 2010-02-10] (Silicon Image, Inc)
R0 Si3531; C:\Windows\System32\Drivers\Si3531.sys [212520 2010-02-10] (Silicon Image, Inc)
R3 STHDA; C:\Windows\System32\drivers\sthda.sys [1656499 2010-03-10] (IDT, Inc.)
S4 IntelIde; No ImagePath
U1 WS2IFSL; 
U3 uwrcruob; \??\C:\DOCUME~1\Tomek\USTAWI~1\Temp\uwrcruob.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-29 21:06 - 2013-08-30 06:21 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\logi
2013-08-29 20:15 - 2013-08-29 20:17 - 00000000 ____D C:\AdwCleaner
2013-08-29 20:09 - 2013-08-29 20:17 - 00002754 _____ C:\Documents and Settings\Tomek\Pulpit\Rkill.txt
2013-08-29 13:39 - 2013-08-29 13:39 - 00010846 _____ C:\WINDOWS\DPINST.LOG
2013-08-29 12:28 - 2013-08-29 12:28 - 00000404 _____ C:\WINDOWS\Tasks\Registry Winner Schedule.job
2013-08-29 12:27 - 2013-08-29 14:46 - 00000000 ____D C:\Program Files\Registry Winner
2013-08-29 12:21 - 2013-08-29 12:21 - 00000000 ____D C:\MUZYKA
2013-08-29 12:19 - 2013-08-29 12:21 - 00000000 ____D C:\ZDJECIA
2013-08-29 07:12 - 2013-08-29 07:12 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-08-29 07:11 - 2013-08-29 07:12 - 00004188 _____ C:\WINDOWS\KB2834904-v2.log
2013-08-28 17:29 - 2013-08-28 17:44 - 00000000 ____D C:\Documents and Settings\Tomek\Dane aplikacji\FontCreator
2013-08-28 17:29 - 2013-08-28 17:42 - 00000153 _____ C:\WINDOWS\fcp7.cfg
2013-08-28 17:29 - 2013-08-28 17:29 - 00000899 _____ C:\Documents and Settings\Tomek\Pulpit\High-Logic FontCreator.lnk
2013-08-28 17:29 - 2013-08-28 17:29 - 00000000 ____D C:\Program Files\High-Logic FontCreator
2013-08-28 17:29 - 2013-08-28 17:29 - 00000000 ____D C:\Documents and Settings\Tomek\Moje dokumenty\FontCreator
2013-08-28 17:29 - 2013-01-22 16:05 - 01415352 _____ (High-Logic B.V.) C:\WINDOWS\system32\FontInstaller2.dll
2013-08-27 15:47 - 2013-08-27 15:47 - 00000881 _____ C:\Documents and Settings\Tomek\.recently-used.xbel
2013-08-24 11:21 - 2008-01-29 11:18 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\DSS_2.5.1.0
2013-08-16 10:40 - 2013-08-16 10:40 - 00020757 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-16 10:11 - 2013-08-16 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-16 10:11 - 2013-08-16 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-16 10:10 - 2013-08-16 10:10 - 00013356 _____ C:\WINDOWS\KB2863058.log
2013-08-16 10:10 - 2013-08-16 10:10 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-16 10:10 - 2013-08-16 10:10 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-14 08:36 - 2013-08-16 10:11 - 00027332 _____ C:\WINDOWS\KB2859537.log
2013-08-14 08:36 - 2013-08-16 10:11 - 00026270 _____ C:\WINDOWS\KB2850869.log
2013-08-13 10:09 - 2013-08-29 14:10 - 00000179 _____ C:\WINDOWS\fileinfo.ini
2013-08-01 00:35 - 2013-08-01 00:35 - 00045568 _____ C:\Documents and Settings\Tomek\Pulpit\gift.xlt
2013-07-31 21:08 - 2013-07-31 21:08 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\GIFT

==================== One Month Modified Files and Folders =======

2013-08-30 06:25 - 2013-08-30 06:25 - 00000000 ____D C:\FRST
2013-08-30 06:25 - 2011-02-28 21:50 - 01533489 _____ C:\WINDOWS\WindowsUpdate.log
2013-08-30 06:24 - 2013-04-10 22:00 - 00200282 _____ C:\WINDOWS\KB2481109.log
2013-08-30 06:21 - 2013-08-29 21:06 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\logi
2013-08-30 06:14 - 2013-04-10 23:43 - 00413043 _____ C:\WINDOWS\setupapi.log
2013-08-30 06:14 - 2012-11-01 10:07 - 00001034 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-30 06:13 - 2012-11-09 10:38 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-08-29 21:06 - 2011-02-28 22:06 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit
2013-08-29 20:43 - 2013-04-10 21:55 - 00000314 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-08-29 20:42 - 2012-11-01 10:07 - 00001030 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-29 20:42 - 2011-02-28 22:36 - 03577616 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-08-29 20:42 - 2008-04-15 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-08-29 20:39 - 2013-04-10 21:57 - 00003315 _____ C:\WINDOWS\errord.log
2013-08-29 20:39 - 2011-02-28 22:39 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-08-29 20:39 - 2011-02-28 22:39 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-08-29 20:39 - 2011-02-28 21:58 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-08-29 20:38 - 2011-02-28 22:06 - 00000188 ___SH C:\Documents and Settings\Tomek\ntuser.ini
2013-08-29 20:38 - 2011-02-28 21:58 - 00032548 _____ C:\WINDOWS\SchedLgU.Txt
2013-08-29 20:30 - 2011-02-28 21:49 - 00000000 ____D C:\WINDOWS\system32\Restore
2013-08-29 20:17 - 2013-08-29 20:15 - 00000000 ____D C:\AdwCleaner
2013-08-29 20:17 - 2013-08-29 20:09 - 00002754 _____ C:\Documents and Settings\Tomek\Pulpit\Rkill.txt
2013-08-29 14:46 - 2013-08-29 12:27 - 00000000 ____D C:\Program Files\Registry Winner
2013-08-29 14:10 - 2013-08-13 10:09 - 00000179 _____ C:\WINDOWS\fileinfo.ini
2013-08-29 13:43 - 2012-03-22 10:58 - 00000000 ____D C:\WINDOWS\SxsCaPendDel
2013-08-29 13:42 - 2011-03-01 17:51 - 00131072 _____ C:\WINDOWS\system32\config\OAlerts.evt
2013-08-29 13:39 - 2013-08-29 13:39 - 00010846 _____ C:\WINDOWS\DPINST.LOG
2013-08-29 13:36 - 2012-01-27 12:22 - 00000000 ____D C:\Documents and Settings\Tomek\Dane aplikacji\Skype
2013-08-29 13:36 - 2011-03-05 14:35 - 00000000 ____D C:\Program Files\QuickTime
2013-08-29 13:34 - 2012-04-02 16:36 - 00000000 ____D C:\Program Files\Nokia
2013-08-29 13:34 - 2011-02-28 23:43 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2013-08-29 13:25 - 2013-04-16 19:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-29 13:25 - 2011-03-01 13:24 - 00000000 ____D C:\Documents and Settings\Tomek\Dane aplikacji\Mozilla
2013-08-29 13:18 - 2011-02-28 22:06 - 00000000 __RHD C:\Documents and Settings\Tomek\Dane aplikacji
2013-08-29 13:18 - 2011-02-28 22:06 - 00000000 ___RD C:\Documents and Settings\Tomek\Moje dokumenty
2013-08-29 13:17 - 2011-03-09 11:00 - 00000000 ____D C:\Program Files\Google
2013-08-29 13:16 - 2011-06-01 16:31 - 00000000 ____D C:\Program Files\Bonjour
2013-08-29 13:15 - 2011-08-24 12:24 - 00000000 ____D C:\Program Files\Adobe
2013-08-29 13:14 - 2011-02-28 22:37 - 00000000 __RHD C:\Documents and Settings\Default User\Dane aplikacji
2013-08-29 12:54 - 2011-08-24 12:19 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-08-29 12:36 - 2011-02-28 22:37 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2013-08-29 12:29 - 2012-06-09 16:41 - 00000000 ____D C:\Documents and Settings\Tomek\Menu Start\Programy\Gadu-Gadu
2013-08-29 12:28 - 2013-08-29 12:28 - 00000404 _____ C:\WINDOWS\Tasks\Registry Winner Schedule.job
2013-08-29 12:21 - 2013-08-29 12:21 - 00000000 ____D C:\MUZYKA
2013-08-29 12:21 - 2013-08-29 12:19 - 00000000 ____D C:\ZDJECIA
2013-08-29 07:12 - 2013-08-29 07:12 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-08-29 07:12 - 2013-08-29 07:11 - 00004188 _____ C:\WINDOWS\KB2834904-v2.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00140209 _____ C:\WINDOWS\iis6.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00129839 _____ C:\WINDOWS\FaxSetup.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00074130 _____ C:\WINDOWS\ocgen.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00059409 _____ C:\WINDOWS\tsoc.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00043433 _____ C:\WINDOWS\comsetup.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00040384 _____ C:\WINDOWS\msmqinst.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00026292 _____ C:\WINDOWS\ntdtcsetup.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00022743 _____ C:\WINDOWS\netfxocm.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00008925 _____ C:\WINDOWS\MedCtrOC.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00008106 _____ C:\WINDOWS\ocmsn.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00006699 _____ C:\WINDOWS\tabletoc.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00006489 _____ C:\WINDOWS\msgsocm.log
2013-08-29 07:12 - 2013-04-11 00:38 - 00001374 _____ C:\WINDOWS\imsins.log
2013-08-28 23:04 - 2011-03-02 09:48 - 00000000 ____D C:\Documents and Settings\Tomek\Moje dokumenty\Pliki programu Outlook
2013-08-28 17:44 - 2013-08-28 17:29 - 00000000 ____D C:\Documents and Settings\Tomek\Dane aplikacji\FontCreator
2013-08-28 17:42 - 2013-08-28 17:29 - 00000153 _____ C:\WINDOWS\fcp7.cfg
2013-08-28 17:29 - 2013-08-28 17:29 - 00000899 _____ C:\Documents and Settings\Tomek\Pulpit\High-Logic FontCreator.lnk
2013-08-28 17:29 - 2013-08-28 17:29 - 00000000 ____D C:\Program Files\High-Logic FontCreator
2013-08-28 17:29 - 2013-08-28 17:29 - 00000000 ____D C:\Documents and Settings\Tomek\Moje dokumenty\FontCreator
2013-08-28 17:08 - 2011-04-27 18:30 - 00000000 ____D C:\Documents and Settings\Tomek\.gimp-2.6
2013-08-27 15:47 - 2013-08-27 15:47 - 00000881 _____ C:\Documents and Settings\Tomek\.recently-used.xbel
2013-08-27 15:47 - 2011-02-28 22:06 - 00000000 ____D C:\Documents and Settings\Tomek
2013-08-25 07:55 - 2013-04-10 21:58 - 00009920 _____ C:\WINDOWS\error.log
2013-08-23 11:29 - 2012-06-26 12:41 - 00001364 _____ C:\Documents and Settings\Tomek\Pulpit\stop.txt
2013-08-22 18:27 - 2011-04-06 08:47 - 00301568 ___SH C:\Documents and Settings\Tomek\Pulpit\Thumbs.db
2013-08-22 18:26 - 2013-05-19 20:46 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\fotki egon impreza
2013-08-22 18:25 - 2013-07-03 16:40 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\bedlocki
2013-08-22 18:25 - 2013-05-10 11:28 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\104PHOTO
2013-08-22 18:25 - 2012-08-09 12:43 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\avery aneksy
2013-08-22 09:07 - 2012-11-09 10:38 - 00692104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-08-22 09:07 - 2011-06-26 07:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-08-20 21:03 - 2011-03-03 10:36 - 00000000 ____D C:\Documents and Settings\Tomek\Menu Start\Programy\IrfanView
2013-08-20 13:47 - 2011-03-01 00:41 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-08-16 10:40 - 2013-08-16 10:40 - 00020757 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-16 10:40 - 2013-07-13 08:10 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-16 10:40 - 2013-04-11 00:45 - 00018240 _____ C:\WINDOWS\updspapi.log
2013-08-16 10:40 - 2013-04-11 00:38 - 00001374 _____ C:\WINDOWS\imsins.BAK
2013-08-16 10:40 - 2011-03-02 09:09 - 00000000 ____D C:\WINDOWS\ie8updates
2013-08-16 10:23 - 2011-03-02 09:14 - 75778376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-08-16 10:17 - 2011-02-28 22:38 - 01294314 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-16 10:17 - 2008-04-15 14:00 - 00581976 _____ C:\WINDOWS\system32\perfh015.dat
2013-08-16 10:17 - 2008-04-15 14:00 - 00115594 _____ C:\WINDOWS\system32\perfc015.dat
2013-08-16 10:11 - 2013-08-16 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-16 10:11 - 2013-08-16 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-16 10:11 - 2013-08-14 08:36 - 00027332 _____ C:\WINDOWS\KB2859537.log
2013-08-16 10:11 - 2013-08-14 08:36 - 00026270 _____ C:\WINDOWS\KB2850869.log
2013-08-16 10:10 - 2013-08-16 10:10 - 00013356 _____ C:\WINDOWS\KB2863058.log
2013-08-16 10:10 - 2013-08-16 10:10 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-16 10:10 - 2013-08-16 10:10 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-16 10:10 - 2011-02-28 21:51 - 00036802 _____ C:\WINDOWS\system32\TZLog.log
2013-08-03 01:48 - 2010-02-10 21:01 - 01543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmvdecod.dll
2013-08-01 00:35 - 2013-08-01 00:35 - 00045568 _____ C:\Documents and Settings\Tomek\Pulpit\gift.xlt
2013-08-01 00:35 - 2011-04-27 09:41 - 00000823 _____ C:\Documents and Settings\Tomek\Pulpit\newcamd.txt
2013-07-31 21:08 - 2013-07-31 21:08 - 00000000 ____D C:\Documents and Settings\Tomek\Pulpit\GIFT

Files to move or delete:
====================
C:\Documents and Settings\Tomek\uidsave.dat
C:\Documents and Settings\Tomek\winlogon.exe
C:\DOCUME~1\Tomek\USTAWI~1\Temp\KMP_3.2.0.0.exe
C:\DOCUME~1\Tomek\USTAWI~1\Temp\NOSEventMessages.dll
C:\DOCUME~1\Tomek\USTAWI~1\Temp\Quarantine.exe
C:\DOCUME~1\Tomek\USTAWI~1\Temp\SkypeSetup.exe
C:\DOCUME~1\Tomek\USTAWI~1\Temp\{4F93ABBE-5A1D-4D56-94CB-022F109FDE4D}\adobe_epic.dll
C:\DOCUME~1\Tomek\USTAWI~1\Temp\{4F93ABBE-5A1D-4D56-94CB-022F109FDE4D}\FNP_Act_Installer.dll
C:\DOCUME~1\Tomek\USTAWI~1\Temp\Programer\faktura_s.exe
C:\DOCUME~1\Tomek\USTAWI~1\Temp\MSS\3.0.318.3\mcbrwsr2.dll
C:\DOCUME~1\Tomek\USTAWI~1\Temp\MSS\3.0.318.3\McInstallerRes.dll
C:\DOCUME~1\Tomek\USTAWI~1\Temp\MSS\3.0.318.3\McInstallerRes_LD.dll
C:\DOCUME~1\Tomek\USTAWI~1\Temp\MSS\3.0.318.3\McInstallerStartup.dll
C:\DOCUME~1\Tomek\USTAWI~1\Temp\MSS\3.0.318.3\McUICnt.exe
C:\DOCUME~1\Tomek\USTAWI~1\Temp\MSS\3.0.318.3\SecurityScanner.dll
C:\DOCUME~1\Tomek\USTAWI~1\Temp\is1890775716\DeltaTB.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-04-15 14:00] - [2008-04-15 14:00] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2008-04-15 14:00] - [2008-04-15 14:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2008-04-15 14:00] - [2008-04-15 14:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2010-02-10 21:03] - [2010-02-10 21:03] - 0111104 ____A (Microsoft Corporation) 8816e60bf654353e8e0d35ed98875445 

C:\Windows\System32\User32.dll
[2008-04-15 14:00] - [2008-04-15 14:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2008-04-15 14:00] - [2008-04-15 14:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\Drivers\volsnap.sys
[2008-04-15 14:00] - [2008-04-15 14:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================