Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-09-2013 01 Ran by User (administrator) on USER-66CCF93770 on 20-09-2013 20:32:26 Running from C:\Documents and Settings\User\Moje dokumenty\Pobieranie Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe (Privacyware/PWI, Inc.) C:\Program Files\Privacyware\Privatefirewall 7.0\pfsvc.exe (Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe (ArpanTECH) C:\Program Files\ArpanTECH\iKill Service v1.1\iKillSrv.exe (Zemana Ltd.) C:\Program Files\Zemana AntiLogger Free\AntiLogger Free.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (Privacyware/PWI, Inc.) C:\Program Files\Privacyware\Privatefirewall 7.0\PFGUI.exe () C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe () C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe (Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Farbar) C:\Documents and Settings\User\Moje dokumenty\Pobieranie\FRST(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [ZALFree] - C:\Program Files\Zemana AntiLogger Free\AntiLogger Free.exe [12999984 2013-07-18] (Zemana Ltd.) HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [20143688 2000-01-01] (Realtek Semiconductor Corp.) HKLM\...\Run: [Privatefirewall] - C:\Program Files\Privacyware\Privatefirewall 7.0\PFGUI.exe [3011400 2013-01-14] (Privacyware/PWI, Inc.) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKCU\...\Run: [Odkurzacz] - C:\Program Files\Odkurzacz\odkurzacz.exe [905216 2013-09-18] (FranmoSoftware) HKCU\...\Policies\Explorer: [NoDriveAutoRun] 0xFFFFFFFF Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\TL-WN321G Wireless Utility.lnk ShortcutTarget: TL-WN321G Wireless Utility.lnk -> C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe () ==================== Internet (Whitelisted) ==================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm SearchScopes: HKLM - DefaultScope value is missing. BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) Toolbar: HKCU -&Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU -&Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab ShellExecuteHooks: - {4F07DA45-8170-4859-9B5F-037EF2970034} - No File [ ] Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\zobe1nfd.default-1377033305078 FF SearchEngineOrder.1: Hola Search FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", ""); FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.) FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\zobe1nfd.default-1377033305078\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ Chrome: ======= CHR HomePage: hxxp://pl.yahoo.com?fr=fpc-comodo CHR RestoreOnStartup: "hxxp://pl.yahoo.com?fr=fpc-comodo" CHR DefaultSearchURL: (Google) - {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?client=chrome&output=chrome&hl={language}&q={searchTerms} CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx ========================== Services (Whitelisted) ================= R2 gzserv; C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe [54424 2013-09-07] (Bitdefender) R2 iKillSrv; C:\Program Files\ArpanTECH\iKill Service v1.1\iKillSrv.exe [28672 2009-12-27] (ArpanTECH) R2 PFNet; C:\Program Files\Privacyware\Privatefirewall 7.0\pfsvc.exe [374600 2013-01-14] (Privacyware/PWI, Inc.) R2 RalinkRegistryWriter; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [69632 2009-01-05] () R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [x] ==================== Drivers (Whitelisted) ==================== R2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [21361 2010-09-08] (Cisco Systems, Inc.) S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2000-01-01] (Creative) S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [486536 2013-04-17] (BitDefender) R1 bdselfpr; C:\Program Files\Bitdefender\Antivirus Free Edition\bdselfpr.sys [135472 2013-09-08] (BitDefender LLC) S3 gdrv; C:\WINDOWS\gdrv.sys [15600 2010-11-23] (Windows (R) 2000 DDK provider) R3 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [164952 2013-04-22] (BitDefender LLC) S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2007-03-08] (HP) S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2007-03-08] (HP) S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2007-03-08] (HP) R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [65024 2007-09-29] (JMicron Technology Corp.) R3 keycrypt; C:\Windows\System32\DRIVERS\KeyCrypt32.sys [24520 2013-07-18] (Zemana Ltd.) S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28944 2008-02-29] (Logitech, Inc.) S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\mbamswissarmy.sys [40776 2013-07-23] (Malwarebytes Corporation) S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2000-01-01] (Creative Technology Ltd.) S3 nm; C:\Windows\System32\DRIVERS\NMnt.sys [40320 2008-04-14] (Microsoft Corporation) R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [84200 2013-05-29] (Panda Security, S.L.) R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [126184 2013-05-29] (Panda Security, S.L.) R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [107752 2013-05-29] (Panda Security, S.L.) R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [124648 2013-05-29] (Panda Security, S.L.) R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [95464 2013-05-29] (Panda Security, S.L.) S4 NNSPIHS; C:\Windows\System32\DRIVERS\NNSPihs.sys [52328 2013-05-29] (Panda Security, S.L.) R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [106344 2013-05-29] (Panda Security, S.L.) R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [287336 2013-05-29] (Panda Security, S.L.) R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [161384 2013-05-29] (Panda Security, S.L.) R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [108904 2013-05-29] (Panda Security, S.L.) R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [230376 2013-05-29] (Panda Security, S.L.) R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [93928 2013-05-29] (Panda Security, S.L.) S3 NPF; C:\Windows\System32\drivers\npf.sys [32000 2004-10-29] (NetGroup - Politecnico di Torino) R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [145128 2013-05-28] (Panda Security, S.L.) R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [103400 2013-05-28] (Panda Security, S.L.) R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [179688 2013-05-28] (Panda Security, S.L.) R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [114920 2013-05-28] (Panda Security, S.L.) R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [128104 2013-05-29] (Panda Security, S.L.) S3 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [97768 2013-05-28] (Panda Security, S.L.) S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.) R3 pwipf6; C:\Windows\System32\DRIVERS\pwipf6.sys [135272 2012-05-25] (Privacyware/PWI, Inc.) R3 RT73; C:\Windows\System32\DRIVERS\rt73.sys [476544 2009-07-17] (Ralink Technology, Corp.) R2 Scutum50; C:\Windows\System32\Drivers\Scutum50.sys [19072 2009-04-21] (Printing Communications Assoc., Inc. (PCAUSA)) R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [355744 2013-05-28] (BitDefender S.R.L.) R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [299424 2012-03-27] (Marvell) U0 avc3; S4 IntelIde; No ImagePath S3 rootrepeal; \??\C:\WINDOWS\system32\drivers\rootrepeal.sys [x] U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) S3 TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [x] U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () S2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; \??\D:\PowerDVD11\Common\NavFilter\000.fcl [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-19 22:05 - 2013-09-19 22:05 - 00092652 _____ C:\Documents and Settings\User\Pulpit\OTL.Txt1.txt 2013-09-19 22:05 - 2013-09-19 22:05 - 00062204 _____ C:\Documents and Settings\User\Pulpit\Extras.Txt1.txt 2013-09-19 20:49 - 2013-09-19 20:49 - 00097504 _____ C:\Documents and Settings\User\Pulpit\OTL.Txt 2013-09-19 20:20 - 2013-09-19 20:20 - 00020651 _____ C:\Documents and Settings\User\Pulpit\Addition.txt- frs.txt 2013-09-19 20:14 - 2013-09-19 20:14 - 00000000 ____D C:\FRST 2013-09-12 20:04 - 2013-09-12 20:04 - 00001878 _____ C:\sc-cleaner.txt 2013-09-12 19:25 - 2013-09-12 19:35 - 00000000 ____D C:\AdwCleaner 2013-09-11 21:43 - 2013-09-19 23:41 - 00000418 _____ C:\WINDOWS\Tasks\At1.job 2013-09-11 21:39 - 2013-09-11 21:39 - 00000000 ____D C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\avgchrome 2013-09-11 21:07 - 2013-09-11 21:07 - 00745328 _____ C:\Documents and Settings\User\Moje dokumenty\ZipOpenerSetup.exe 2013-09-08 10:57 - 2013-09-08 10:57 - 00242504 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys 2013-09-07 16:21 - 2013-09-07 16:21 - 00633344 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys 2013-09-07 16:17 - 2013-09-07 16:17 - 00164493 _____ C:\Documents and Settings\All Users\Dane aplikacji\1378563118.bdinstall.bin 2013-09-07 16:15 - 2013-09-07 16:17 - 00002842 _____ C:\WINDOWS\system32\lic2.xml8970 2013-09-07 08:44 - 2013-09-07 08:44 - 00043148 _____ C:\Documents and Settings\All Users\Dane aplikacji\1378536086.bdinstall.bin 2013-09-07 08:41 - 2013-09-07 08:41 - 00022307 _____ C:\Documents and Settings\All Users\Dane aplikacji\1378536070.bdinstall.bin 2013-09-05 19:03 - 2013-09-05 19:24 - 00000000 ___SD C:\Documents and Settings\TEMP.ZARZĄDZANIE NT.000 2013-09-05 19:03 - 2013-09-05 19:24 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT.000\Ustawienia lokalne 2013-09-05 19:03 - 2013-09-05 19:03 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT.000\Ustawienia lokalne\Dane aplikacji 2013-09-05 19:03 - 2009-12-02 20:01 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT.000\IETldCache 2013-09-05 18:55 - 2013-09-05 19:24 - 00000000 ___SD C:\Documents and Settings\TEMP.ZARZĄDZANIE NT 2013-09-05 18:55 - 2013-09-05 19:24 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT\Ustawienia lokalne 2013-09-05 18:55 - 2013-09-05 18:55 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT\Ustawienia lokalne\Dane aplikacji 2013-09-05 18:55 - 2009-12-02 20:01 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT\IETldCache 2013-09-05 18:20 - 2013-09-05 19:24 - 00000000 ____D C:\Documents and Settings\TEMP\Ustawienia lokalne 2013-09-05 18:20 - 2013-09-05 18:20 - 00000000 ____D C:\Documents and Settings\TEMP\Ustawienia lokalne\Dane aplikacji 2013-09-05 18:20 - 2009-12-02 20:01 - 00000000 ____D C:\Documents and Settings\TEMP\IETldCache 2013-09-01 01:49 - 2013-09-01 01:49 - 00000000 ____D C:\CCE_Quarantine 2013-08-31 20:13 - 2013-09-01 10:30 - 00000000 ____D C:\Documents and Settings\User\Pulpit\CCE 2013-08-31 19:57 - 2013-08-31 19:57 - 23732069 _____ C:\Documents and Settings\User\Pulpit\cce_2.5.242177.201_x32.zip 2013-08-30 22:40 - 2013-09-20 19:59 - 00000276 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-515967899-329068152-725345543-1003.job 2013-08-30 22:40 - 2013-09-05 17:58 - 00000284 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-515967899-329068152-725345543-1003.job 2013-08-30 22:39 - 2013-08-30 22:39 - 00000000 ____D C:\Documents and Settings\User\Dane aplikacji\RealNetworks 2013-08-30 22:37 - 2013-08-30 22:37 - 00000000 ____D C:\Program Files\RealNetworks 2013-08-30 22:37 - 2013-08-30 22:37 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks 2013-08-30 22:36 - 2013-08-30 22:38 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\RealNetworks 2013-08-30 22:36 - 2013-08-30 22:36 - 00201872 _____ (RealNetworks, Inc.) C:\WINDOWS\system32\rmoc3260.dll 2013-08-30 22:33 - 2013-09-05 21:16 - 00000000 ____D C:\Documents and Settings\User\Dane aplikacji\Real 2013-08-30 22:31 - 2013-08-30 22:41 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Real 2013-08-30 22:21 - 2013-08-30 23:58 - 00000000 ____D C:\Documents and Settings\User\Pulpit\bt 2013-08-30 22:08 - 2013-08-30 22:08 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer 2013-08-30 21:57 - 2013-08-30 21:57 - 00001830 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Apple Software Update.lnk 2013-08-30 21:56 - 2013-08-30 21:57 - 00000000 ____D C:\Program Files\Apple Software Update 2013-08-28 22:19 - 2013-08-28 22:19 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\bdch 2013-08-25 00:47 - 2013-08-25 00:47 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\MetaQuotes 2013-08-23 22:25 - 2013-08-23 22:25 - 00000008 ___RH C:\Documents and Settings\User\hwid 2013-08-23 22:25 - 2001-09-07 15:48 - 00026624 _____ C:\WINDOWS\GetIe.dll ==================== One Month Modified Files and Folders ======= 2013-09-20 20:32 - 2009-08-11 23:05 - 00000000 ____D C:\Documents and Settings\User\Moje dokumenty\Pobieranie 2013-09-20 20:20 - 2010-03-27 09:55 - 01241888 _____ C:\WINDOWS\WindowsUpdate.log 2013-09-20 19:59 - 2013-08-30 22:40 - 00000276 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-515967899-329068152-725345543-1003.job 2013-09-20 19:59 - 2013-04-30 20:13 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-09-20 19:59 - 2010-03-27 09:55 - 00000159 _____ C:\WINDOWS\wiadebug.log 2013-09-20 19:59 - 2008-06-04 14:36 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-09-19 23:53 - 2012-05-27 11:55 - 00311134 ____C C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat 2013-09-19 23:53 - 2008-06-04 14:37 - 00000188 ___SH C:\Documents and Settings\User\ntuser.ini 2013-09-19 23:53 - 2008-06-04 14:36 - 00032216 _____ C:\WINDOWS\SchedLgU.Txt 2013-09-19 23:41 - 2013-09-11 21:43 - 00000418 _____ C:\WINDOWS\Tasks\At1.job 2013-09-19 22:54 - 2008-06-04 14:37 - 00000000 ____D C:\Documents and Settings\User\Pulpit 2013-09-19 22:08 - 2012-05-27 11:55 - 00617318 ____C C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-515967899-329068152-725345543-1003-0.dat 2013-09-19 22:05 - 2013-09-19 22:05 - 00092652 _____ C:\Documents and Settings\User\Pulpit\OTL.Txt1.txt 2013-09-19 22:05 - 2013-09-19 22:05 - 00062204 _____ C:\Documents and Settings\User\Pulpit\Extras.Txt1.txt 2013-09-19 20:49 - 2013-09-19 20:49 - 00097504 _____ C:\Documents and Settings\User\Pulpit\OTL.Txt 2013-09-19 20:20 - 2013-09-19 20:20 - 00020651 _____ C:\Documents and Settings\User\Pulpit\Addition.txt- frs.txt 2013-09-19 20:14 - 2013-09-19 20:14 - 00000000 ____D C:\FRST 2013-09-19 18:59 - 2008-09-16 23:54 - 00000000 ____D C:\Documents and Settings\User\Dane aplikacji\DeepBurner 2013-09-17 21:36 - 2013-01-14 20:55 - 00000000 ____D C:\Program Files\The KMPlayer 2013-09-15 22:38 - 2008-08-18 16:33 - 00114176 _____ C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-09-15 15:34 - 2008-06-04 14:36 - 00000188 ___SH C:\Documents and Settings\LocalService\ntuser.ini 2013-09-12 20:04 - 2013-09-12 20:04 - 00001878 _____ C:\sc-cleaner.txt 2013-09-12 19:35 - 2013-09-12 19:25 - 00000000 ____D C:\AdwCleaner 2013-09-12 19:35 - 2013-08-17 15:27 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-12 19:35 - 2008-06-04 14:37 - 00000000 __RHD C:\Documents and Settings\User\Dane aplikacji 2013-09-12 19:35 - 2008-06-04 14:37 - 00000000 ___HD C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji 2013-09-12 19:35 - 2008-06-04 14:19 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2013-09-12 18:42 - 2008-06-04 14:37 - 00000000 ___RD C:\Documents and Settings\User\Menu Start\Programy 2013-09-11 21:58 - 2008-06-04 14:19 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2013-09-11 21:58 - 2008-06-04 14:19 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-09-11 21:39 - 2013-09-11 21:39 - 00000000 ____D C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\avgchrome 2013-09-11 21:07 - 2013-09-11 21:07 - 00745328 _____ C:\Documents and Settings\User\Moje dokumenty\ZipOpenerSetup.exe 2013-09-11 21:07 - 2008-06-04 14:37 - 00000000 ___RD C:\Documents and Settings\User\Moje dokumenty 2013-09-11 19:04 - 2013-08-09 20:25 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-09-11 18:57 - 2008-06-20 15:32 - 76725432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-09-11 18:51 - 2009-08-26 23:22 - 00000000 ____D C:\Documents and Settings\User\Dane aplikacji\BitTorrent 2013-09-10 20:14 - 2009-03-20 11:53 - 00000000 ____D C:\Documents and Settings\User\Pulpit\Nieużywane skróty pulpitu 2013-09-10 17:38 - 2013-03-30 13:10 - 00002347 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader XI.lnk 2013-09-08 10:57 - 2013-09-08 10:57 - 00242504 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys 2013-09-07 16:52 - 2008-06-04 15:18 - 38535168 _____ C:\WINDOWS\system32\config\SOFTWARE.rcbak 2013-09-07 16:52 - 2008-06-04 15:18 - 09175040 _____ C:\WINDOWS\system32\config\SYSTEM.rcbak 2013-09-07 16:52 - 2008-06-04 15:18 - 03768320 _____ C:\WINDOWS\system32\config\DEFAULT.rcbak 2013-09-07 16:52 - 2008-06-04 15:18 - 00057344 _____ C:\WINDOWS\system32\config\SECURITY.rcbak 2013-09-07 16:52 - 2008-06-04 15:18 - 00028672 _____ C:\WINDOWS\system32\config\SAM.rcbak 2013-09-07 16:51 - 2008-06-04 14:36 - 00000000 __SHD C:\Documents and Settings\LocalService 2013-09-07 16:51 - 2008-06-04 14:33 - 00000000 __SHD C:\Documents and Settings\NetworkService 2013-09-07 16:21 - 2013-09-07 16:21 - 00633344 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys 2013-09-07 16:17 - 2013-09-07 16:17 - 00164493 _____ C:\Documents and Settings\All Users\Dane aplikacji\1378563118.bdinstall.bin 2013-09-07 16:17 - 2013-09-07 16:15 - 00002842 _____ C:\WINDOWS\system32\lic2.xml8970 2013-09-07 08:44 - 2013-09-07 08:44 - 00043148 _____ C:\Documents and Settings\All Users\Dane aplikacji\1378536086.bdinstall.bin 2013-09-07 08:41 - 2013-09-07 08:41 - 00022307 _____ C:\Documents and Settings\All Users\Dane aplikacji\1378536070.bdinstall.bin 2013-09-05 21:16 - 2013-08-30 22:33 - 00000000 ____D C:\Documents and Settings\User\Dane aplikacji\Real 2013-09-05 19:31 - 2001-07-21 23:17 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl 2013-09-05 19:28 - 2010-01-22 04:37 - 00000000 ____D C:\Documents and Settings\Administrator 2013-09-05 19:27 - 2008-06-04 14:24 - 00000000 ____D C:\WINDOWS\Registration 2013-09-05 19:24 - 2013-09-05 19:03 - 00000000 ___SD C:\Documents and Settings\TEMP.ZARZĄDZANIE NT.000 2013-09-05 19:24 - 2013-09-05 19:03 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT.000\Ustawienia lokalne 2013-09-05 19:24 - 2013-09-05 18:55 - 00000000 ___SD C:\Documents and Settings\TEMP.ZARZĄDZANIE NT 2013-09-05 19:24 - 2013-09-05 18:55 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT\Ustawienia lokalne 2013-09-05 19:24 - 2013-09-05 18:20 - 00000000 ____D C:\Documents and Settings\TEMP\Ustawienia lokalne 2013-09-05 19:03 - 2013-09-05 19:03 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT.000\Ustawienia lokalne\Dane aplikacji 2013-09-05 18:55 - 2013-09-05 18:55 - 00000000 ____D C:\Documents and Settings\TEMP.ZARZĄDZANIE NT\Ustawienia lokalne\Dane aplikacji 2013-09-05 18:20 - 2013-09-05 18:20 - 00000000 ____D C:\Documents and Settings\TEMP\Ustawienia lokalne\Dane aplikacji 2013-09-05 17:58 - 2013-08-30 22:40 - 00000284 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-515967899-329068152-725345543-1003.job 2013-09-01 10:30 - 2013-08-31 20:13 - 00000000 ____D C:\Documents and Settings\User\Pulpit\CCE 2013-09-01 01:49 - 2013-09-01 01:49 - 00000000 ____D C:\CCE_Quarantine 2013-08-31 22:48 - 2013-06-20 19:23 - 00066851 _____ C:\WINDOWS\setupapi.log 2013-08-31 19:57 - 2013-08-31 19:57 - 23732069 _____ C:\Documents and Settings\User\Pulpit\cce_2.5.242177.201_x32.zip 2013-08-30 23:58 - 2013-08-30 22:21 - 00000000 ____D C:\Documents and Settings\User\Pulpit\bt 2013-08-30 22:41 - 2013-08-30 22:31 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Real 2013-08-30 22:39 - 2013-08-30 22:39 - 00000000 ____D C:\Documents and Settings\User\Dane aplikacji\RealNetworks 2013-08-30 22:38 - 2013-08-30 22:36 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\RealNetworks 2013-08-30 22:37 - 2013-08-30 22:37 - 00000000 ____D C:\Program Files\RealNetworks 2013-08-30 22:37 - 2013-08-30 22:37 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks 2013-08-30 22:37 - 2008-09-23 23:37 - 00000000 ____D C:\Program Files\Real 2013-08-30 22:36 - 2013-08-30 22:36 - 00201872 _____ (RealNetworks, Inc.) C:\WINDOWS\system32\rmoc3260.dll 2013-08-30 22:36 - 2008-09-23 23:44 - 00006656 _____ (RealNetworks, Inc.) C:\WINDOWS\system32\pndx5016.dll 2013-08-30 22:36 - 2008-09-23 23:44 - 00005632 _____ (RealNetworks, Inc.) C:\WINDOWS\system32\pndx5032.dll 2013-08-30 22:36 - 2008-06-04 15:03 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll 2013-08-30 22:36 - 2008-06-04 15:03 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll 2013-08-30 22:12 - 2010-09-18 12:53 - 00000000 ____D C:\Program Files\QuickTime 2013-08-30 22:12 - 2010-09-18 12:53 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\QuickTime 2013-08-30 22:08 - 2013-08-30 22:08 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer 2013-08-30 21:57 - 2013-08-30 21:57 - 00001830 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Apple Software Update.lnk 2013-08-30 21:57 - 2013-08-30 21:56 - 00000000 ____D C:\Program Files\Apple Software Update 2013-08-30 21:47 - 2008-06-04 15:08 - 00000000 ____D C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Adobe 2013-08-30 21:46 - 2012-04-19 19:23 - 00692104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-08-30 21:46 - 2012-01-20 20:14 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-08-30 16:31 - 2012-11-23 21:57 - 00131072 _____ C:\WINDOWS\system32\config\TuneUp.evt 2013-08-28 22:19 - 2013-08-28 22:19 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\bdch 2013-08-28 21:36 - 2008-06-04 15:21 - 00002481 _____ C:\Documents and Settings\All Users\Menu Start\Nowy dokument pakietu Microsoft Office.lnk 2013-08-27 19:47 - 2013-06-12 14:46 - 00042214 _____ C:\WINDOWS\FaxSetup.log 2013-08-27 19:47 - 2013-06-12 14:46 - 00025178 _____ C:\WINDOWS\msmqinst.log 2013-08-27 19:47 - 2013-06-12 14:46 - 00021377 _____ C:\WINDOWS\tsoc.log 2013-08-27 19:47 - 2013-06-12 14:46 - 00019133 _____ C:\WINDOWS\comsetup.log 2013-08-27 19:47 - 2013-06-12 14:46 - 00015208 _____ C:\WINDOWS\iis6.log 2013-08-27 19:47 - 2013-06-12 14:46 - 00012438 _____ C:\WINDOWS\ntdtcsetup.log 2013-08-27 19:47 - 2013-06-12 14:46 - 00001664 _____ C:\WINDOWS\ocgen.log 2013-08-27 19:47 - 2013-06-12 14:46 - 00000584 _____ C:\WINDOWS\imsins.log 2013-08-26 19:40 - 2008-06-04 14:37 - 00000000 ___RD C:\Documents and Settings\User\Menu Start 2013-08-25 00:47 - 2013-08-25 00:47 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\MetaQuotes 2013-08-23 22:25 - 2013-08-23 22:25 - 00000008 ___RH C:\Documents and Settings\User\hwid Files to move or delete: ==================== C:\Windows\Tasks\At1.job ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2007-03-10 01:31] - [2008-04-14 22:51] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\Windows\System32\winlogon.exe [2004-08-03 23:44] - [2008-04-14 22:51] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\Windows\System32\svchost.exe [2004-08-03 23:44] - [2008-04-14 22:51] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2004-08-03 23:44] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\Windows\System32\User32.dll [2007-03-10 01:32] - [2008-04-14 22:50] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\Windows\System32\userinit.exe [2004-08-03 23:44] - [2008-04-14 22:51] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2004-08-03 23:36] - [2008-04-14 21:31] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================