Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-12-2013 02 Ran by user (administrator) on SERWIS-E2A2FACC on 04-12-2013 14:34:09 Running from C:\ Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Safe Mode (minimal) ==================== Processes (Whitelisted) =================== (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [159744 2007-07-02] (Alps Electric Co., Ltd.) HKLM\...\Run: [SigmatelSysTrayApp] - C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe [405504 2007-05-10] (SigmaTel, Inc.) HKLM\...\Run: [Dell QuickSet] - C:\Program Files\Dell\QuickSet\quickset.exe [1228800 2007-07-20] (Dell Inc.) HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] () HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\WINDOWS\system32\WLTRAY.EXE [2498560 2010-10-29] (Dell Inc.) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKCU\...\Run: [VkontakteDJ] - C:\VkontakteDJ\VkontakteDJ.exe /H HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation) HKCU\...\Run: [Google Update] - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [116648 2013-05-11] (Google Inc.) MountPoints2: {34b56be7-01ac-11e2-b8b7-001c23275115} - E:\AutoRun.exe MountPoints2: {8fefc104-081a-11e2-b8cb-001c23275115} - E:\AutoRun.exe AppInit_DLLs: C:\Documents and Settings\All Users\Dane aplikacji\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll [ 2013-11-18] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=119816&tt=070313_9105&babsrc=HP_ss&mntrId=b8ed7069000000000000001c23275115 SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119816&tt=070313_9105&babsrc=SP_ss&mntrId=b8ed7069000000000000001c23275115 SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://yandex.ru/yandsearch?win=47&clid=1946476-10005&text={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119816&tt=070313_9105&babsrc=SP_ss&mntrId=b8ed7069000000000000001c23275115 BHO: No Name - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - No File BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1347886657356 Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\system32\shell32.dll [8491520 2012-06-08] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\en922hms.default FF user.js: detected! => C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\en922hms.default\user.js FF SearchEngineOrder.1: Delta Search FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", ""); FF Homepage: https://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Documents and Settings\user\Dane aplikacji\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Documents and Settings\user\Dane aplikacji\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Documents and Settings\user\Dane aplikacji\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\en922hms.default\searchplugins\babylon.xml FF SearchPlugin: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\en922hms.default\searchplugins\BitGuard.xml FF SearchPlugin: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\en922hms.default\searchplugins\BrowserProtect.xml FF SearchPlugin: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\en922hms.default\searchplugins\delta.xml FF SearchPlugin: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\en922hms.default\searchplugins\yandex.ru-114940.xml FF SearchPlugin: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\en922hms.default\searchplugins\yqs-barff-yandex.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ Chrome: ======= ========================== Services (Whitelisted) ================= S2 BitGuard; C:\Documents and Settings\All Users\Dane aplikacji\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [3780064 2013-11-18] () S2 CCALib8; C:\Program Files\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.) S2 NICCONFIGSVC; C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe [475136 2007-07-20] (Dell Inc.) S2 STacSV; C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe [94208 2007-05-10] (SigmaTel, Inc.) S2 wltrysvc; C:\Windows\System32\bcmwltry.exe [2232320 2010-10-29] (Dell Inc.) ==================== Drivers (Whitelisted) ==================== S1 APPDRV; C:\Windows\SYSTEM32\DRIVERS\APPDRV.SYS [16128 2005-08-12] (Dell Inc) S3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl5.sys [2649216 2010-10-29] (Broadcom Corporation) S3 guardian2; C:\Windows\System32\Drivers\oz776.sys [68696 2007-12-23] (O2Micro) S3 HSFHWAZL; C:\Windows\System32\DRIVERS\HSFHWAZL.sys [211200 2007-08-02] (Conexant Systems, Inc.) S3 HSF_DPV; C:\Windows\System32\DRIVERS\HSF_DPV.sys [989952 2007-08-02] (Conexant Systems, Inc.) S3 STHDA; C:\Windows\System32\drivers\sthda.sys [1222840 2007-05-10] (SigmaTel, Inc.) S4 IntelIde; No ImagePath U3 TlntSvr; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-04 14:34 - 2013-12-04 14:34 - 00008366 _____ C:\FRST.txt 2013-12-04 14:33 - 2013-12-04 14:33 - 00000000 ____D C:\FRST 2013-12-04 14:19 - 2013-12-04 14:19 - 00038908 _____ C:\Extras.Txt 2013-12-04 14:18 - 2013-12-04 14:18 - 00069514 _____ C:\OTL.Txt 2013-12-04 13:57 - 2013-12-04 13:57 - 01092545 _____ (Farbar) C:\FRST.exe 2013-12-04 13:55 - 2013-12-04 13:55 - 00602112 _____ (OldTimer Tools) C:\OTL.exe 2013-12-02 10:28 - 2013-12-02 10:28 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Nieużywane skróty pulpitu 2013-11-29 22:51 - 2013-11-29 22:51 - 00000000 ____D C:\foto- Yvorne 2013-11-29 00:10 - 2013-11-29 00:10 - 00018533 _____ C:\Documents and Settings\user\Pulpit\Women's education in Central Asia a forgotten crisis _ openDemocracy.htm 2013-11-27 22:42 - 2013-11-27 22:55 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Kaukaz 2004 2013-11-25 14:03 - 2013-11-25 14:03 - 00000000 ____D C:\Documents and Settings\user\Menu Start\Programy\BitGuard 2013-11-19 11:37 - 2013-11-19 19:36 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-11-19 11:37 - 2013-11-19 19:36 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-11-14 21:31 - 2013-11-26 22:11 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Eastern Partnership - teksty 2013-11-13 22:11 - 2013-11-13 22:11 - 07029766 _____ C:\Documents and Settings\user\Moje dokumenty\Хор В.Минина поздравляет Иосифа Кобзона - Многая лета.mp4 2013-11-13 22:08 - 2013-11-13 22:08 - 06359710 _____ C:\Documents and Settings\user\Moje dokumenty\Многая лета.mp4 2013-11-13 13:15 - 2013-11-13 13:15 - 00011903 _____ C:\WINDOWS\KB2888505-IE8.log 2013-11-13 13:15 - 2013-11-13 13:15 - 00009449 _____ C:\WINDOWS\KB2900986.log 2013-11-13 13:15 - 2013-11-13 13:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$ 2013-11-13 13:15 - 2013-11-13 13:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$ 2013-11-13 13:15 - 2013-11-13 13:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$ 2013-11-13 13:15 - 2013-11-13 13:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$ 2013-11-13 12:21 - 2013-11-13 13:15 - 00015084 _____ C:\WINDOWS\KB2868626.log 2013-11-13 12:21 - 2013-11-13 13:15 - 00014061 _____ C:\WINDOWS\KB2862152.log 2013-11-13 12:21 - 2013-11-13 13:15 - 00013570 _____ C:\WINDOWS\KB2876331.log 2013-11-06 22:23 - 2013-11-06 22:24 - 14604147 _____ C:\Documents and Settings\user\Moje dokumenty\Многая лета русской земли -Любэ.flv 2013-11-06 21:55 - 2013-11-06 21:55 - 03152452 _____ C:\Documents and Settings\user\Moje dokumenty\mr Freeman Славяне - Иван дурак.flv ==================== One Month Modified Files and Folders ======= 2013-12-04 14:34 - 2013-12-04 14:34 - 00008366 _____ C:\FRST.txt 2013-12-04 14:34 - 2012-08-30 11:28 - 01089352 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-12-04 14:34 - 2008-09-06 13:00 - 00490712 _____ C:\WINDOWS\system32\perfh015.dat 2013-12-04 14:34 - 2008-09-06 13:00 - 00084088 _____ C:\WINDOWS\system32\perfc015.dat 2013-12-04 14:33 - 2013-12-04 14:33 - 00000000 ____D C:\FRST 2013-12-04 14:29 - 2012-11-15 12:30 - 00000188 ___SH C:\Documents and Settings\Administrator\ntuser.ini 2013-12-04 14:29 - 2012-08-30 11:16 - 01147640 _____ C:\WINDOWS\WindowsUpdate.log 2013-12-04 14:20 - 2012-08-30 11:28 - 00000188 ___SH C:\Documents and Settings\user\ntuser.ini 2013-12-04 14:19 - 2013-12-04 14:19 - 00038908 _____ C:\Extras.Txt 2013-12-04 14:18 - 2013-12-04 14:18 - 00069514 _____ C:\OTL.Txt 2013-12-04 14:00 - 2012-10-10 09:56 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-04 14:00 - 2012-08-30 11:30 - 00000216 _____ C:\WINDOWS\wiadebug.log 2013-12-04 14:00 - 2012-08-30 11:30 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-12-04 14:00 - 2012-08-30 11:20 - 00032586 _____ C:\WINDOWS\SchedLgU.Txt 2013-12-04 14:00 - 2012-08-30 11:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-12-04 13:59 - 2012-10-05 20:58 - 00000000 ____D C:\Documents and Settings\user\Dane aplikacji\Skype 2013-12-04 13:57 - 2013-12-04 13:57 - 01092545 _____ (Farbar) C:\FRST.exe 2013-12-04 13:55 - 2013-12-04 13:55 - 00602112 _____ (OldTimer Tools) C:\OTL.exe 2013-12-04 13:11 - 2013-05-12 07:28 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-73586283-299502267-1801674531-1004UA.job 2013-12-04 12:22 - 2012-10-10 09:56 - 00001028 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-04 12:22 - 2008-09-06 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl 2013-12-03 22:11 - 2013-05-12 07:28 - 00001076 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-73586283-299502267-1801674531-1004Core.job 2013-12-03 19:50 - 2012-08-30 11:28 - 00000000 ____D C:\Documents and Settings\user\Pulpit 2013-12-02 12:55 - 2012-10-08 20:13 - 00000000 ____D C:\Documents and Settings\user\Dane aplikacji\vlc 2013-12-02 12:18 - 2013-10-23 08:36 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Animacja 2013-12-02 10:28 - 2013-12-02 10:28 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Nieużywane skróty pulpitu 2013-12-02 10:28 - 2012-08-30 11:27 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2013-11-29 22:51 - 2013-11-29 22:51 - 00000000 ____D C:\foto- Yvorne 2013-11-29 21:29 - 2013-10-12 20:58 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Foto do podcastów 2013-11-29 11:10 - 2013-02-21 07:13 - 00000000 ___RD C:\Program Files\Skype 2013-11-29 11:10 - 2012-10-05 20:58 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Skype 2013-11-29 00:10 - 2013-11-29 00:10 - 00018533 _____ C:\Documents and Settings\user\Pulpit\Women's education in Central Asia a forgotten crisis _ openDemocracy.htm 2013-11-28 13:35 - 2013-03-13 21:33 - 00456416 _____ C:\WINDOWS\setupapi.log 2013-11-27 22:55 - 2013-11-27 22:42 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Kaukaz 2004 2013-11-26 22:11 - 2013-11-14 21:31 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Eastern Partnership - teksty 2013-11-26 08:47 - 2013-09-13 22:39 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\BitGuard 2013-11-25 14:03 - 2013-11-25 14:03 - 00000000 ____D C:\Documents and Settings\user\Menu Start\Programy\BitGuard 2013-11-25 14:03 - 2012-08-30 11:28 - 00000000 ___RD C:\Documents and Settings\user\Menu Start\Programy 2013-11-19 19:36 - 2013-11-19 11:37 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-11-19 19:36 - 2013-11-19 11:37 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-11-19 19:36 - 2012-09-22 21:16 - 00000000 ____D C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Adobe 2013-11-16 00:18 - 2013-03-08 13:29 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-16 00:18 - 2012-08-31 09:28 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-11-14 22:07 - 2013-03-19 20:31 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Dokumenty bieżące 2013-11-13 22:11 - 2013-11-13 22:11 - 07029766 _____ C:\Documents and Settings\user\Moje dokumenty\Хор В.Минина поздравляет Иосифа Кобзона - Многая лета.mp4 2013-11-13 22:11 - 2012-08-30 11:28 - 00000000 ___RD C:\Documents and Settings\user\Moje dokumenty 2013-11-13 22:08 - 2013-11-13 22:08 - 06359710 _____ C:\Documents and Settings\user\Moje dokumenty\Многая лета.mp4 2013-11-13 22:08 - 2013-02-05 22:58 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\YTD Video Downloader 2013-11-13 13:19 - 2013-08-19 06:10 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-11-13 13:15 - 2013-11-13 13:15 - 00011903 _____ C:\WINDOWS\KB2888505-IE8.log 2013-11-13 13:15 - 2013-11-13 13:15 - 00009449 _____ C:\WINDOWS\KB2900986.log 2013-11-13 13:15 - 2013-11-13 13:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$ 2013-11-13 13:15 - 2013-11-13 13:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$ 2013-11-13 13:15 - 2013-11-13 13:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$ 2013-11-13 13:15 - 2013-11-13 13:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$ 2013-11-13 13:15 - 2013-11-13 12:21 - 00015084 _____ C:\WINDOWS\KB2868626.log 2013-11-13 13:15 - 2013-11-13 12:21 - 00014061 _____ C:\WINDOWS\KB2862152.log 2013-11-13 13:15 - 2013-11-13 12:21 - 00013570 _____ C:\WINDOWS\KB2876331.log 2013-11-13 13:15 - 2012-09-18 17:06 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help 2013-11-13 13:15 - 2012-08-31 08:16 - 00246311 _____ C:\WINDOWS\updspapi.log 2013-11-13 13:15 - 2012-08-30 11:28 - 01254273 _____ C:\WINDOWS\FaxSetup.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00608881 _____ C:\WINDOWS\ocgen.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00484758 _____ C:\WINDOWS\tsoc.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00429038 _____ C:\WINDOWS\comsetup.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00258243 _____ C:\WINDOWS\ntdtcsetup.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00197921 _____ C:\WINDOWS\iis6.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00078471 _____ C:\WINDOWS\ocmsn.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00062980 _____ C:\WINDOWS\msgsocm.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00001393 _____ C:\WINDOWS\imsins.log 2013-11-13 13:15 - 2012-08-30 11:28 - 00001393 _____ C:\WINDOWS\imsins.BAK 2013-11-13 13:12 - 2012-08-31 08:48 - 80340640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-11-12 14:17 - 2013-10-02 09:48 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Doktorat - publikacja 2013-11-12 10:11 - 2012-08-31 09:28 - 00000000 ____D C:\Documents and Settings\user\Dane aplikacji\Mozilla 2013-11-06 22:24 - 2013-11-06 22:23 - 14604147 _____ C:\Documents and Settings\user\Moje dokumenty\Многая лета русской земли -Любэ.flv 2013-11-06 21:55 - 2013-11-06 21:55 - 03152452 _____ C:\Documents and Settings\user\Moje dokumenty\mr Freeman Славяне - Иван дурак.flv 2013-11-05 21:34 - 2012-08-30 11:27 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2013-11-05 21:29 - 2013-05-08 19:57 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Księgarnia Akademicka 2013-11-05 02:04 - 2013-04-15 12:34 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Elza - autoreferat 2013-11-05 02:03 - 2013-03-19 20:31 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Obrona Some content of TEMP: ==================== C:\Documents and Settings\user\Ustawienia lokalne\Temp\BI_RunOnce.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\DeltaTB.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\fp_pl_pfs_installer-1.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\fp_pl_pfs_installer.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\OptimizerPro.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\restorer1.0.0.1.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\Setup-yabrowser.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\setup.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\setup_fsu_cid.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\SkypeSetup.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\somoto-master.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\uninst1.exe C:\Documents and Settings\user\Ustawienia lokalne\Temp\yupdate-exec-yabrowser.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2008-09-06 13:00] - [2008-09-06 13:00] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\Windows\System32\winlogon.exe [2008-09-06 13:00] - [2008-09-06 13:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\Windows\System32\svchost.exe [2008-09-06 13:00] - [2008-09-06 13:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\Windows\System32\services.exe [2008-09-06 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\Windows\System32\User32.dll [2008-09-06 13:00] - [2008-09-06 13:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\Windows\System32\userinit.exe [2008-09-06 13:00] - [2008-09-06 13:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\Windows\System32\Drivers\volsnap.sys [2008-09-06 13:00] - [2008-09-06 13:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================