Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013 Ran by pawel (administrator) on HOME-D2DF22E6A3 on 17-10-2013 18:52:52 Running from C:\Documents and Settings\pawel\Pulpit Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe ( ) C:\WINDOWS\system32\lxdecoms.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (LogMeIn Inc.) E:\Program Files\LogMeIn Hamachi\hamachi-2.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (ATI Technologies Inc.) C:\WINDOWS\SYSTEM32\Ati2evxx.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (Onet.pl) C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe () C:\Program Files\Lexmark 4800 Series\lxdemon.exe () C:\Program Files\Lexmark 4800 Series\lxdeamon.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (LogMeIn Inc.) E:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (Logitech Inc.) D:\Program Files\Logitech\Profiler\lwemon.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (LogMeIn, Inc.) E:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe (Mozilla Corporation) E:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe (Farbar) C:\Documents and Settings\pawel\Pulpit\FRST(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NeroFilterCheck] - C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [32768 2003-11-30] (Cyberlink Corp.) HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [16342528 2007-05-10] (Realtek Semiconductor Corp.) HKLM\...\Run: [Onet.pl AutoUpdate] - C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe [260096 2005-07-27] (Onet.pl) HKLM\...\Run: [lxdemon.exe] - C:\Program Files\Lexmark 4800 Series\lxdemon.exe [455600 2007-06-11] () HKLM\...\Run: [lxdeamon] - C:\Program Files\Lexmark 4800 Series\lxdeamon.exe [20480 2007-06-01] () HKLM\...\Run: [FaxCenterServer] - C:\Program Files\Lexmark Fax Solutions\fm3032.exe [316336 2007-06-11] () HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2010-02-10] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [LogMeIn Hamachi Ui] - E:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.) Winlogon\Notify\AtiExtEvent: C:\Windows\SYSTEM32\Ati2evxx.dll (ATI Technologies Inc.) HKCU\...\Run: [DAEMON Tools] - "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 HKCU\...\Run: [Start WingMan Profiler] - D:\Program Files\Logitech\Profiler\lwemon.exe [73728 2005-04-18] (Logitech Inc.) HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.) HKCU\...\Run: [AVG-Secure-Search-Update_0913b] - C:\Documents and Settings\pawel\Dane aplikacji\AVG 0913b Campaign\AVG-Secure-Search-Update-0913b.exe /PROMPT --mid 04678a1ccd9d47d3b864d15fa0810e26-06ce4fc639803a2e3563922518183d8e94088cb9 --CMPID 0913b Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation) BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2014\avgrsx.exe /sync /restart ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - URL ${SEARCH_URL}{searchTerms} SearchScopes: HKCU - URL http://startsear.ch/?src=sp&aff=51&cf=9b0f3952-17c4-11e2-9a7a-0016e665e7d5&q={searchTerms} BHO: Lexmark Pasek narzędzi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - C:\Documents and Settings\pawel\Ustawienia lokalne\Dane aplikacji\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll No File BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: IEPluginBHO Class - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\pawel\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll No File Toolbar: HKLM - Lexmark Pasek narzędzi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () Toolbar: HKCU -&Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU -&Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) Toolbar: HKCU -Lexmark Pasek narzędzi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Documents and Settings\pawel\Dane aplikacji\Mozilla\Firefox\Profiles\0ycpaezz.default-1378223770458 FF Homepage: hxxp://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=6.0.11.2571 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.1739 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Documents and Settings\pawel\Dane aplikacji\Mozilla\Firefox\Profiles\0ycpaezz.default-1378223770458\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF StartMenuInternet: FIREFOX.EXE - E:\Program Files\Mozilla Firefox\firefox.exe Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.pl/" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\pdf.dll () CHR Plugin: (Microsoft DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.)) CHR Plugin: (Microsoft DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\WINDOWS\system32\npDeployJava1.dll No File CHR Extension: (YouTube) - C:\DOCUME~1\pawel\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\DOCUME~1\pawel\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.5_0 CHR Extension: (Google Search) - C:\DOCUME~1\pawel\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\pawel\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 CHR Extension: (Gmail) - C:\DOCUME~1\pawel\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ========================== Services (Whitelisted) ================= S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] () R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.) R2 Hamachi2Svc; E:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1612112 2013-10-01] (LogMeIn Inc.) S2 lxdeCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdeserv.exe [99248 2007-05-29] (Lexmark International, Inc.) R2 lxde_device; C:\WINDOWS\system32\lxdecoms.exe [598960 2007-05-29] ( ) R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== R2 Aspi32; C:\Windows\System32\Drivers\Aspi32.sys [16877 2002-07-17] (Adaptec) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2008-07-25] () R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120632 2013-09-25] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209208 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [145720 2013-09-02] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [223032 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102200 2013-08-20] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-08] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.) S3 ENTECH; C:\WINDOWS\system32\DRIVERS\ENTECH.sys [21664 2004-10-25] (EnTech Taiwan) R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2008-07-25] () S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) S3 PortTalk; C:\Windows\System32\Drivers\PortTalk.sys [3567 2002-01-12] (Beyond Logic http://www.beyondlogic.org) R0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [63352 2006-07-05] (Protection Technology (StarForce)) R0 sfsync03; C:\Windows\System32\drivers\sfsync03.sys [35328 2005-12-06] (Protection Technology) R3 WmBEnum; C:\Windows\System32\drivers\WmBEnum.sys [10144 2005-04-12] (Logitech Inc.) S3 WmFilter; C:\Windows\System32\drivers\WmFilter.sys [22240 2005-04-12] (Logitech Inc.) S3 WmHidLo; C:\Windows\System32\drivers\WmHidLo.sys [17632 2005-04-12] (Logitech Inc.) S3 WmVirHid; C:\Windows\System32\drivers\WmVirHid.sys [5600 2005-04-12] (Logitech Inc.) R3 WmXlCore; C:\Windows\System32\drivers\WmXlCore.sys [45504 2005-04-12] (Logitech Inc.) S4 IntelIde; No ImagePath S3 PCANDIS5; \??\C:\WINDOWS\system32\PCANDIS5.SYS [x] S3 RkPavproc1; \??\C:\WINDOWS\system32\drivers\RkPavproc1.sys [x] U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) S3 SliceDisk5; \??\C:\DOCUME~1\pawel\USTAWI~1\Temp\HBCD\PartitionFindAndMount\slicedisk.sys [x] S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [x] U3 TlntSvr; S3 ZDCndis5; \??\C:\WINDOWS\system32\ZDCndis5.SYS [x] S3 ZDPSp50; System32\Drivers\ZDPSp50.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-17 18:52 - 2013-10-17 18:52 - 01087213 _____ (Farbar) C:\Documents and Settings\pawel\Pulpit\FRST(1).exe 2013-10-17 18:15 - 2013-10-17 18:15 - 00000000 ____D C:\FRST 2013-10-17 16:46 - 2013-10-17 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java 2013-10-17 16:46 - 2013-10-08 07:50 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-10-17 16:46 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2013-10-17 16:46 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2013-10-17 16:46 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2013-10-17 16:46 - 2013-10-08 07:29 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2013-10-17 16:45 - 2013-10-17 16:46 - 00004113 _____ C:\WINDOWS\system32\jupdate-1.7.0_45-b18.log 2013-10-14 21:59 - 2013-10-14 21:59 - 00000000 __SHD C:\Documents and Settings\NetworkService\IETldCache 2013-10-14 20:01 - 2013-10-14 20:05 - 00000135 _____ C:\Documents and Settings\pawel\Pulpit\testy.txt 2013-10-11 14:01 - 2013-10-11 14:01 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\AVG 2013-10-11 07:30 - 2013-10-11 07:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-11 07:30 - 2013-10-11 07:30 - 00010584 _____ C:\WINDOWS\KB2868038.log 2013-10-11 07:30 - 2013-10-11 07:30 - 00009818 _____ C:\WINDOWS\KB2862335.log 2013-10-11 07:30 - 2013-10-11 07:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-11 07:30 - 2013-10-11 07:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-11 07:29 - 2013-10-11 07:30 - 00011788 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-11 07:29 - 2013-10-11 07:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-11 07:29 - 2013-10-11 07:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-11 07:08 - 2013-10-11 07:31 - 00014150 _____ C:\WINDOWS\KB2847311.log 2013-10-11 07:08 - 2013-07-03 04:12 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys 2013-10-11 07:08 - 2013-07-03 03:59 - 00014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys 2013-10-11 07:07 - 2013-07-17 02:58 - 00123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys 2013-10-11 07:07 - 2013-07-17 02:58 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys 2013-10-11 07:06 - 2013-08-09 02:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys 2013-10-11 07:06 - 2013-08-09 02:55 - 00032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys 2013-10-11 07:06 - 2013-08-09 02:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys 2013-10-11 07:06 - 2009-03-18 13:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys 2013-10-10 19:49 - 2013-10-10 21:51 - 00000154 _____ C:\Documents and Settings\pawel\Pulpit\asd.txt 2013-10-08 20:19 - 2013-10-09 11:19 - 17750408 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-03 17:41 - 2013-10-03 17:41 - 00000000 ____D C:\Documents and Settings\pawel\Ustawienia lokalne\Dane aplikacji\LogMeIn 2013-10-03 17:41 - 2013-10-03 17:41 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\LogMeIn 2013-10-03 17:40 - 2013-10-03 17:40 - 00000000 ____D C:\Documents and Settings\pawel\Dane aplikacji\AVG2014 2013-10-03 17:37 - 2013-10-11 14:01 - 00000732 _____ C:\Documents and Settings\All Users\Pulpit\AVG 2014.lnk 2013-10-03 17:35 - 2013-10-17 17:34 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AVG2014 2013-10-03 17:34 - 2013-10-03 17:34 - 00000000 ____D C:\Program Files\AVG 2013-10-03 17:27 - 2013-10-17 17:14 - 00000000 ____D C:\Documents and Settings\pawel\Ustawienia lokalne\Dane aplikacji\Avg2014 2013-10-03 17:04 - 2013-10-03 17:04 - 00756566 _____ C:\Documents and Settings\pawel\Pulpit\bez tytułu1.bmp 2013-10-02 22:49 - 2013-10-02 22:49 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi 2013-09-30 14:57 - 2013-09-30 14:58 - 33905294 _____ C:\Documents and Settings\pawel\Pulpit\bez tytułu.bmp 2013-09-25 17:48 - 2013-09-25 17:48 - 00007334 _____ C:\Documents and Settings\pawel\Pulpit\Nowy OpenDocument Dokument tekstowy.odt 2013-09-22 16:26 - 2013-09-22 17:00 - 00041538 _____ C:\Documents and Settings\pawel\Pulpit\Nowy OpenDocument Dokument tekstowy (3).odt 2013-09-19 18:04 - 2013-09-19 18:04 - 37508644 _____ C:\Documents and Settings\All Users\SPL326.tmp 2013-09-19 17:51 - 2013-09-19 17:51 - 00000134 ____H C:\Documents and Settings\pawel\Pulpit\.~lock.tp.jpg# 2013-09-17 22:45 - 2013-09-17 22:45 - 00000000 ____D C:\Program Files\Common Files\Java 2013-09-17 22:43 - 2013-10-17 16:46 - 00000000 ____D C:\Program Files\Java ==================== One Month Modified Files and Folders ======= 2013-10-17 18:53 - 2012-07-08 16:58 - 00001034 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-17 18:52 - 2013-10-17 18:52 - 01087213 _____ (Farbar) C:\Documents and Settings\pawel\Pulpit\FRST(1).exe 2013-10-17 18:52 - 2007-03-23 18:36 - 00000000 ____D C:\Documents and Settings\pawel\Pulpit 2013-10-17 18:51 - 2012-07-08 16:23 - 00000000 ____D C:\Documents and Settings\pawel\Dane aplikacji\Skype 2013-10-17 18:50 - 2013-06-24 14:04 - 00000290 _____ C:\WINDOWS\Tasks\Express FilesUpdate.job 2013-10-17 18:50 - 2013-02-20 20:25 - 00000000 ____D C:\Documents and Settings\pawel\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi 2013-10-17 18:50 - 2013-02-20 20:25 - 00000000 ____D C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi 2013-10-17 18:50 - 2012-07-08 16:58 - 00001030 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-17 18:50 - 2007-03-23 17:25 - 01971129 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-17 18:49 - 2007-03-23 18:36 - 00000188 ___SH C:\Documents and Settings\pawel\ntuser.ini 2013-10-17 18:39 - 2007-03-23 18:20 - 00000159 _____ C:\WINDOWS\wiadebug.log 2013-10-17 18:39 - 2007-03-23 18:20 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-10-17 18:38 - 2007-03-23 18:36 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-17 18:37 - 2007-03-24 00:49 - 00524288 _____ C:\WINDOWS\system32\config\ACEEvent.evt 2013-10-17 18:37 - 2007-03-23 18:36 - 00032530 _____ C:\WINDOWS\SchedLgU.Txt 2013-10-17 18:26 - 2006-03-02 14:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl 2013-10-17 18:24 - 2007-03-23 18:18 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2013-10-17 18:24 - 2007-03-23 18:18 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-10-17 18:23 - 2007-03-23 18:17 - 00201384 _____ C:\WINDOWS\setupapi.log 2013-10-17 18:18 - 2013-08-06 15:40 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-17 18:15 - 2013-10-17 18:15 - 00000000 ____D C:\FRST 2013-10-17 17:34 - 2013-10-03 17:35 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AVG2014 2013-10-17 17:19 - 2013-06-22 23:58 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\MFAData 2013-10-17 17:14 - 2013-10-03 17:27 - 00000000 ____D C:\Documents and Settings\pawel\Ustawienia lokalne\Dane aplikacji\Avg2014 2013-10-17 16:46 - 2013-10-17 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java 2013-10-17 16:46 - 2013-10-17 16:45 - 00004113 _____ C:\WINDOWS\system32\jupdate-1.7.0_45-b18.log 2013-10-17 16:46 - 2013-09-17 22:43 - 00000000 ____D C:\Program Files\Java 2013-10-17 16:45 - 2013-08-06 15:40 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-10-17 16:45 - 2013-08-06 15:40 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-10-17 16:45 - 2007-03-24 00:52 - 00000000 ____D C:\Documents and Settings\pawel\Ustawienia lokalne\Dane aplikacji\Adobe 2013-10-17 16:45 - 2007-03-23 18:18 - 01089352 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-17 16:45 - 2006-03-02 14:00 - 00491064 _____ C:\WINDOWS\system32\perfh015.dat 2013-10-17 16:45 - 2006-03-02 14:00 - 00084316 _____ C:\WINDOWS\system32\perfc015.dat 2013-10-17 12:58 - 2012-07-08 17:45 - 00001813 _____ C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2013-10-16 22:04 - 2007-07-14 15:37 - 00004096 _____ C:\WINDOWS\system32\crash 2013-10-15 21:20 - 2012-09-12 19:48 - 00005586 _____ C:\Documents and Settings\All Users\lxde 2013-10-15 21:20 - 2008-12-27 20:26 - 00000000 ____D C:\Documents and Settings\All Users\Lx_cats 2013-10-15 19:29 - 2013-02-20 17:42 - 00000000 ____D C:\Documents and Settings\pawel\Dane aplikacji\uTorrent 2013-10-14 21:59 - 2013-10-14 21:59 - 00000000 __SHD C:\Documents and Settings\NetworkService\IETldCache 2013-10-14 21:59 - 2007-03-23 17:28 - 00000000 __SHD C:\Documents and Settings\NetworkService 2013-10-14 20:05 - 2013-10-14 20:01 - 00000135 _____ C:\Documents and Settings\pawel\Pulpit\testy.txt 2013-10-13 23:25 - 2007-07-30 17:14 - 00001324 _____ C:\WINDOWS\system32\d3d9caps.dat 2013-10-13 21:44 - 2013-01-29 07:57 - 00000000 ___RD C:\Program Files\Skype 2013-10-13 21:44 - 2012-07-08 16:23 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Skype 2013-10-13 10:27 - 2007-03-23 19:07 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-10-11 14:01 - 2013-10-11 14:01 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\AVG 2013-10-11 14:01 - 2013-10-03 17:37 - 00000732 _____ C:\Documents and Settings\All Users\Pulpit\AVG 2014.lnk 2013-10-11 14:00 - 2013-06-23 00:02 - 00000000 ___HD C:\$AVG 2013-10-11 13:48 - 2007-03-23 18:17 - 00157952 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-11 07:31 - 2013-10-11 07:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-11 07:31 - 2013-10-11 07:08 - 00014150 _____ C:\WINDOWS\KB2847311.log 2013-10-11 07:31 - 2007-07-05 22:20 - 00259147 _____ C:\WINDOWS\updspapi.log 2013-10-11 07:31 - 2007-03-23 18:18 - 02226279 _____ C:\WINDOWS\FaxSetup.log 2013-10-11 07:31 - 2007-03-23 18:18 - 01071028 _____ C:\WINDOWS\ocgen.log 2013-10-11 07:31 - 2007-03-23 18:18 - 00857899 _____ C:\WINDOWS\tsoc.log 2013-10-11 07:31 - 2007-03-23 18:18 - 00610821 _____ C:\WINDOWS\comsetup.log 2013-10-11 07:31 - 2007-03-23 18:18 - 00368753 _____ C:\WINDOWS\ntdtcsetup.log 2013-10-11 07:31 - 2007-03-23 18:18 - 00350478 _____ C:\WINDOWS\iis6.log 2013-10-11 07:31 - 2007-03-23 18:18 - 00112424 _____ C:\WINDOWS\ocmsn.log 2013-10-11 07:31 - 2007-03-23 18:18 - 00111677 _____ C:\WINDOWS\msgsocm.log 2013-10-11 07:31 - 2007-03-23 18:18 - 00001393 _____ C:\WINDOWS\imsins.log 2013-10-11 07:30 - 2013-10-11 07:30 - 00010584 _____ C:\WINDOWS\KB2868038.log 2013-10-11 07:30 - 2013-10-11 07:30 - 00009818 _____ C:\WINDOWS\KB2862335.log 2013-10-11 07:30 - 2013-10-11 07:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-11 07:30 - 2013-10-11 07:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-11 07:30 - 2013-10-11 07:29 - 00011788 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-11 07:30 - 2007-03-23 18:18 - 00001393 _____ C:\WINDOWS\imsins.BAK 2013-10-11 07:29 - 2013-10-11 07:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-11 07:29 - 2013-10-11 07:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-11 07:29 - 2013-07-02 13:21 - 00000000 ____D C:\WINDOWS\ie8updates 2013-10-10 21:51 - 2013-10-10 19:49 - 00000154 _____ C:\Documents and Settings\pawel\Pulpit\asd.txt 2013-10-09 19:18 - 2008-12-18 18:56 - 00026320 _____ C:\Documents and Settings\pawel\Dane aplikacji\GDIPFONTCACHEV1.DAT 2013-10-09 11:19 - 2013-10-08 20:19 - 17750408 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-08 07:50 - 2013-10-17 16:46 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-10-08 07:46 - 2013-10-17 16:46 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2013-10-08 07:46 - 2013-10-17 16:46 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2013-10-08 07:46 - 2013-10-17 16:46 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2013-10-08 07:29 - 2013-10-17 16:46 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2013-10-05 21:19 - 2012-07-08 16:23 - 00002267 _____ C:\Documents and Settings\All Users\Pulpit\Skype.lnk 2013-10-03 17:42 - 2007-03-23 18:36 - 00000000 ___HD C:\Documents and Settings\pawel\Ustawienia lokalne\Dane aplikacji 2013-10-03 17:41 - 2013-10-03 17:41 - 00000000 ____D C:\Documents and Settings\pawel\Ustawienia lokalne\Dane aplikacji\LogMeIn 2013-10-03 17:41 - 2013-10-03 17:41 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\LogMeIn 2013-10-03 17:41 - 2007-03-23 18:17 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2013-10-03 17:40 - 2013-10-03 17:40 - 00000000 ____D C:\Documents and Settings\pawel\Dane aplikacji\AVG2014 2013-10-03 17:40 - 2007-03-23 18:36 - 00000000 __RHD C:\Documents and Settings\pawel\Dane aplikacji 2013-10-03 17:39 - 2013-06-23 00:02 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AVG2013 2013-10-03 17:34 - 2013-10-03 17:34 - 00000000 ____D C:\Program Files\AVG 2013-10-03 17:04 - 2013-10-03 17:04 - 00756566 _____ C:\Documents and Settings\pawel\Pulpit\bez tytułu1.bmp 2013-10-02 22:49 - 2013-10-02 22:49 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi 2013-10-02 22:49 - 2013-02-20 20:23 - 00000557 _____ C:\Documents and Settings\All Users\Pulpit\LogMeIn Hamachi.lnk 2013-09-30 14:58 - 2013-09-30 14:57 - 33905294 _____ C:\Documents and Settings\pawel\Pulpit\bez tytułu.bmp 2013-09-25 20:57 - 2013-08-01 16:06 - 00120632 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgdiskx.sys 2013-09-25 17:48 - 2013-09-25 17:48 - 00007334 _____ C:\Documents and Settings\pawel\Pulpit\Nowy OpenDocument Dokument tekstowy.odt 2013-09-23 23:55 - 2013-07-02 12:43 - 11113472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll 2013-09-23 23:55 - 2009-03-08 04:39 - 11113472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-09-23 20:25 - 2013-07-03 13:26 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll 2013-09-23 20:25 - 2013-07-02 12:43 - 02006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll 2013-09-23 20:25 - 2013-07-02 12:43 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll 2013-09-23 20:25 - 2013-07-02 12:43 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll 2013-09-23 20:25 - 2013-07-02 12:43 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll 2013-09-23 20:25 - 2013-07-02 12:43 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2013-09-23 20:25 - 2013-07-02 12:43 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll 2013-09-23 20:25 - 2009-03-08 04:32 - 02006016 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-09-23 20:25 - 2009-03-08 04:32 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2013-09-23 20:25 - 2009-03-08 04:31 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2013-09-23 20:25 - 2007-03-23 17:24 - 00759296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 06017536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtml.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 06017536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 01469440 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2013-09-23 20:25 - 2006-03-02 14:00 - 01469440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcpl.cpl 2013-09-23 20:25 - 2006-03-02 14:00 - 01215488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\urlmon.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 01215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00920064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wininet.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00611840 ____N (Microsoft Corporation) C:\WINDOWS\system32\mstime.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00611840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00387584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedkcs32.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00206848 ____N (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00206848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\occache.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00184320 ____N (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00184320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iepeers.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\url.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00067072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtmled.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licmgr10.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsproxy.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll 2013-09-23 20:25 - 2006-03-02 14:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\corpol.dll 2013-09-23 20:07 - 2006-03-02 14:00 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec 2013-09-23 20:07 - 2006-03-02 14:00 - 00174592 ____N (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2013-09-23 20:07 - 2006-03-02 14:00 - 00174592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ie4uinit.exe 2013-09-22 17:00 - 2013-09-22 16:26 - 00041538 _____ C:\Documents and Settings\pawel\Pulpit\Nowy OpenDocument Dokument tekstowy (3).odt 2013-09-19 18:04 - 2013-09-19 18:04 - 37508644 _____ C:\Documents and Settings\All Users\SPL326.tmp 2013-09-19 17:51 - 2013-09-19 17:51 - 00000134 ____H C:\Documents and Settings\pawel\Pulpit\.~lock.tp.jpg# 2013-09-19 13:35 - 2013-03-10 01:40 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-09-18 14:28 - 2013-03-10 01:40 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight 2013-09-18 08:43 - 2013-08-22 13:40 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-17 22:45 - 2013-09-17 22:45 - 00000000 ____D C:\Program Files\Common Files\Java Some content of TEMP: ==================== C:\Documents and Settings\pawel\Ustawienia lokalne\temp\14714179-4C73-4E6D-AE18-61DC9A7D7D92.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\appshat-distribution.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\bitool.dll C:\Documents and Settings\pawel\Ustawienia lokalne\temp\drm_dialogs.dll C:\Documents and Settings\pawel\Ustawienia lokalne\temp\drm_dyndata_7330014.dll C:\Documents and Settings\pawel\Ustawienia lokalne\temp\ggdrive-menu.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\ggdrive-overlay.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\GoogleSetup.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\htmlayout.dll C:\Documents and Settings\pawel\Ustawienia lokalne\temp\ICReinstall_photoscape.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\installstats.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\jre-7u21-windows-i586-iftw.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\SkypeSetup.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\toolbar15786984.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\toolbar15788078.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\toolbar15801687.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\uninst1.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\uninstall15918875.exe C:\Documents and Settings\pawel\Ustawienia lokalne\temp\uninstall15927109.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2006-03-02 14:00] - [2008-04-14 19:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\Windows\System32\winlogon.exe [2006-03-02 14:00] - [2008-04-14 19:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\Windows\System32\svchost.exe [2006-03-02 14:00] - [2008-04-14 19:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2006-03-02 14:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\Windows\System32\User32.dll [2006-03-02 14:00] - [2008-04-14 19:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\Windows\System32\userinit.exe [2006-03-02 14:00] - [2008-04-14 19:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2006-03-02 14:00] - [2008-04-14 18:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================