Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-01-2014
Ran by user (administrator) on SERWIS-E2A2FACC on 29-01-2014 09:48:10
Running from C:\
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) ===================

() C:\WINDOWS\system32\WLTRYSVC.EXE
(Dell Inc.) C:\WINDOWS\system32\BCMWLTRY.EXE
(Microsoft Corporation) C:\WINDOWS\system32\scardsvr.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\NicConfigSvc.exe
(SigmaTel, Inc.) C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\stacsv.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Canon Inc.) C:\Program Files\Canon\CAL\CALMAIN.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(SigmaTel, Inc.) C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Dell Inc.) C:\WINDOWS\system32\WLTRAY.EXE
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [159744 2007-07-02] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SigmatelSysTrayApp] - C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe [405504 2007-05-10] (SigmaTel, Inc.)
HKLM\...\Run: [Dell QuickSet] - C:\Program Files\Dell\QuickSet\quickset.exe [1228800 2007-07-20] (Dell Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\WINDOWS\system32\WLTRAY.exe [2498560 2010-10-29] (Dell Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKCU\...\Run: [Google Update] - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [116648 2013-05-11] (Google Inc.)
MountPoints2: {34b56be7-01ac-11e2-b8b7-001c23275115} - E:\AutoRun.exe
MountPoints2: {8fefc104-081a-11e2-b8cb-001c23275115} - E:\AutoRun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1347886657356
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\qweewnba.default-1386181276703
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=1.6.0_45 - C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Documents and Settings\user\Dane aplikacji\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Documents and Settings\user\Dane aplikacji\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Documents and Settings\user\Dane aplikacji\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\user\Dane aplikacji\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\user\Dane aplikacji\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\user\Dane aplikacji\mozilla\plugins\npo1d.dll (Google)
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2013-12-21]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2013-12-15]

========================== Services (Whitelisted) =================

R2 CCALib8; C:\Program Files\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.)
R2 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [158128 2013-12-15] (Sun Microsystems, Inc.)
R2 NICCONFIGSVC; C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe [475136 2007-07-20] (Dell Inc.)
R2 STacSV; C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe [94208 2007-05-10] (SigmaTel, Inc.)
R2 wltrysvc; C:\WINDOWS\System32\bcmwltry.exe [2232320 2010-10-29] (Dell Inc.)

==================== Drivers (Whitelisted) ====================

R1 APPDRV; C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS [16128 2005-08-12] (Dell Inc)
R3 BCM43XX; C:\WINDOWS\System32\DRIVERS\bcmwl5.sys [2649216 2010-10-29] (Broadcom Corporation)
R3 guardian2; C:\WINDOWS\System32\Drivers\oz776.sys [68696 2007-12-23] (O2Micro)
R3 HSFHWAZL; C:\WINDOWS\System32\DRIVERS\HSFHWAZL.sys [211200 2007-08-02] (Conexant Systems, Inc.)
R3 HSF_DPV; C:\WINDOWS\System32\DRIVERS\HSF_DPV.sys [989952 2007-08-02] (Conexant Systems, Inc.)
R3 STHDA; C:\WINDOWS\System32\drivers\sthda.sys [1222840 2007-05-10] (SigmaTel, Inc.)
S4 IntelIde; No ImagePath
U3 TlntSvr; 
S3 tosporte; system32\DRIVERS\tosporte.sys [x]
S1 Tosrfcom; System32\Drivers\tosrfcom.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-29 09:47 - 2014-01-29 09:47 - 00000000 ____D C:\FRST-OlderVersion
2014-01-28 15:19 - 2014-01-28 15:19 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Macromedia
2014-01-28 14:31 - 2014-01-28 14:32 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla
2014-01-28 14:31 - 2014-01-28 14:31 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Mozilla
2014-01-28 11:29 - 2014-01-28 11:29 - 00069588 _____ C:\OTL.Txt
2014-01-28 11:29 - 2014-01-28 11:29 - 00038408 _____ C:\Extras.Txt
2014-01-28 11:16 - 2014-01-28 11:16 - 00602112 _____ (OldTimer Tools) C:\OTL.exe
2014-01-28 10:49 - 2014-01-28 10:52 - 00032141 _____ C:\Addition.txt
2014-01-28 10:48 - 2014-01-29 09:48 - 00008045 _____ C:\FRST.txt
2014-01-28 10:46 - 2014-01-29 09:48 - 00000000 ____D C:\FRST
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Adobe
2014-01-28 10:32 - 2014-01-29 09:47 - 01137152 _____ (Farbar) C:\FRST.exe
2014-01-16 00:36 - 2014-01-16 00:37 - 00004810 _____ C:\WINDOWS\KB2914368.log
2014-01-16 00:36 - 2014-01-16 00:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2914368$
2014-01-11 18:37 - 2014-01-20 08:44 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Jan Sowa - publikacje
2014-01-08 22:05 - 2014-01-08 22:06 - 90138227 _____ C:\Documents and Settings\user\Moje dokumenty\Натали, Басков. Николай. Голубой огонек на Шаболовке 2014.mp4
2014-01-08 21:59 - 2014-01-08 22:04 - 356302741 _____ C:\Documents and Settings\user\Moje dokumenty\Новогодний Голубой Огонёк-2014 на Шаболовке. София Ротару.mp4
2014-01-08 21:36 - 2014-01-08 21:38 - 118247545 _____ C:\Documents and Settings\user\Moje dokumenty\(2014) НАТАЛИ _О Боже Какой Мужчина_ _))) 20 Лучших Песен - Красная Звезда (02.01.2014) HD.mp4
2014-01-01 21:34 - 2014-01-01 21:42 - 698460898 _____ C:\Documents and Settings\user\Moje dokumenty\Бременские музыканты (1969, 1973). Все серии (HD).mp4

==================== One Month Modified Files and Folders =======

2014-01-29 09:48 - 2014-01-28 10:48 - 00008045 _____ C:\FRST.txt
2014-01-29 09:48 - 2014-01-28 10:46 - 00000000 ____D C:\FRST
2014-01-29 09:47 - 2014-01-29 09:47 - 00000000 ____D C:\FRST-OlderVersion
2014-01-29 09:47 - 2014-01-28 10:32 - 01137152 _____ (Farbar) C:\FRST.exe
2014-01-29 09:47 - 2012-10-05 20:58 - 00000000 ____D C:\Documents and Settings\user\Dane aplikacji\Skype
2014-01-29 09:47 - 2012-08-30 11:16 - 01214585 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-29 09:46 - 2013-03-13 21:33 - 00582145 _____ C:\WINDOWS\setupapi.log
2014-01-29 09:45 - 2012-10-10 09:56 - 00001028 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-29 09:45 - 2012-08-30 11:30 - 00000159 _____ C:\WINDOWS\wiadebug.log
2014-01-29 09:45 - 2012-08-30 11:30 - 00000050 _____ C:\WINDOWS\wiaservc.log
2014-01-29 09:45 - 2012-08-30 11:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-29 09:45 - 2008-09-06 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-29 09:44 - 2012-08-30 11:28 - 00000188 ___SH C:\Documents and Settings\user\ntuser.ini
2014-01-29 09:43 - 2012-08-30 11:28 - 00000000 ___RD C:\Documents and Settings\user\Menu Start\Programy\Autostart
2014-01-29 09:43 - 2012-08-30 11:27 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2014-01-29 09:41 - 2012-11-15 12:30 - 00000188 ___SH C:\Documents and Settings\Administrator\ntuser.ini
2014-01-28 15:19 - 2014-01-28 15:19 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Macromedia
2014-01-28 15:19 - 2012-11-15 12:30 - 00000000 __RHD C:\Documents and Settings\Administrator\Dane aplikacji
2014-01-28 14:32 - 2014-01-28 14:31 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla
2014-01-28 14:31 - 2014-01-28 14:31 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Mozilla
2014-01-28 14:31 - 2012-11-15 12:30 - 00000000 ___HD C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji
2014-01-28 11:29 - 2014-01-28 11:29 - 00069588 _____ C:\OTL.Txt
2014-01-28 11:29 - 2014-01-28 11:29 - 00038408 _____ C:\Extras.Txt
2014-01-28 11:16 - 2014-01-28 11:16 - 00602112 _____ (OldTimer Tools) C:\OTL.exe
2014-01-28 11:09 - 2012-08-30 11:20 - 00032460 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-28 11:05 - 2012-10-10 09:56 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-28 10:52 - 2014-01-28 10:49 - 00032141 _____ C:\Addition.txt
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D C:\Documents and Settings\Administrator\Dane aplikacji\Adobe
2014-01-28 10:17 - 2013-05-12 07:28 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-73586283-299502267-1801674531-1004UA.job
2014-01-28 10:04 - 2013-12-12 13:44 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-28 00:56 - 2012-08-30 11:28 - 00000000 ____D C:\Documents and Settings\user\Pulpit
2014-01-27 15:17 - 2013-05-12 07:28 - 00001076 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-73586283-299502267-1801674531-1004Core.job
2014-01-26 19:19 - 2012-08-31 09:28 - 00000000 ____D C:\Documents and Settings\user\Dane aplikacji\Mozilla
2014-01-24 23:26 - 2013-12-14 12:03 - 00000000 ____D C:\Documents and Settings\user\Pulpit\IRiEW
2014-01-22 23:05 - 2013-12-14 12:01 - 00000000 ____D C:\Documents and Settings\user\Pulpit\NEW
2014-01-20 08:57 - 2012-09-22 21:16 - 00000000 ____D C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Adobe
2014-01-20 08:45 - 2013-11-19 11:37 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-01-20 08:45 - 2013-11-19 11:37 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-01-20 08:44 - 2014-01-11 18:37 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Jan Sowa - publikacje
2014-01-20 08:32 - 2012-08-30 11:28 - 01089352 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-20 08:32 - 2008-09-06 13:00 - 00491314 _____ C:\WINDOWS\system32\perfh015.dat
2014-01-20 08:32 - 2008-09-06 13:00 - 00084526 _____ C:\WINDOWS\system32\perfc015.dat
2014-01-16 10:00 - 2012-11-17 00:06 - 00002347 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader XI.lnk
2014-01-16 10:00 - 2012-08-30 11:27 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy
2014-01-16 00:39 - 2013-08-19 06:10 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-16 00:39 - 2012-09-18 17:06 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2014-01-16 00:37 - 2014-01-16 00:36 - 00004810 _____ C:\WINDOWS\KB2914368.log
2014-01-16 00:37 - 2012-08-31 08:48 - 83425928 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-16 00:37 - 2012-08-30 11:28 - 01297553 _____ C:\WINDOWS\FaxSetup.log
2014-01-16 00:37 - 2012-08-30 11:28 - 00629573 _____ C:\WINDOWS\ocgen.log
2014-01-16 00:37 - 2012-08-30 11:28 - 00501328 _____ C:\WINDOWS\tsoc.log
2014-01-16 00:37 - 2012-08-30 11:28 - 00443397 _____ C:\WINDOWS\comsetup.log
2014-01-16 00:37 - 2012-08-30 11:28 - 00266949 _____ C:\WINDOWS\ntdtcsetup.log
2014-01-16 00:37 - 2012-08-30 11:28 - 00204835 _____ C:\WINDOWS\iis6.log
2014-01-16 00:37 - 2012-08-30 11:28 - 00081173 _____ C:\WINDOWS\ocmsn.log
2014-01-16 00:37 - 2012-08-30 11:28 - 00065143 _____ C:\WINDOWS\msgsocm.log
2014-01-16 00:37 - 2012-08-30 11:28 - 00001374 _____ C:\WINDOWS\imsins.log
2014-01-16 00:36 - 2014-01-16 00:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2914368$
2014-01-13 00:33 - 2013-12-14 12:01 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Artkuł - międzynarodowa rola Uzbekistanu
2014-01-10 11:44 - 2013-03-19 20:31 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Dokumenty bieżące
2014-01-08 22:06 - 2014-01-08 22:05 - 90138227 _____ C:\Documents and Settings\user\Moje dokumenty\Натали, Басков. Николай. Голубой огонек на Шаболовке 2014.mp4
2014-01-08 22:06 - 2012-08-30 11:28 - 00000000 ___RD C:\Documents and Settings\user\Moje dokumenty
2014-01-08 22:04 - 2014-01-08 21:59 - 356302741 _____ C:\Documents and Settings\user\Moje dokumenty\Новогодний Голубой Огонёк-2014 на Шаболовке. София Ротару.mp4
2014-01-08 21:38 - 2014-01-08 21:36 - 118247545 _____ C:\Documents and Settings\user\Moje dokumenty\(2014) НАТАЛИ _О Боже Какой Мужчина_ _))) 20 Лучших Песен - Красная Звезда (02.01.2014) HD.mp4
2014-01-06 20:47 - 2012-10-08 20:13 - 00000000 ____D C:\Documents and Settings\user\Dane aplikacji\vlc
2014-01-01 21:42 - 2014-01-01 21:34 - 698460898 _____ C:\Documents and Settings\user\Moje dokumenty\Бременские музыканты (1969, 1973). Все серии (HD).mp4

==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2008-09-06 13:00] - [2008-09-06 13:00] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\WINDOWS\system32\winlogon.exe
[2008-09-06 13:00] - [2008-09-06 13:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2008-09-06 13:00] - [2008-09-06 13:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2008-09-06 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\WINDOWS\system32\User32.dll
[2008-09-06 13:00] - [2008-09-06 13:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2008-09-06 13:00] - [2008-09-06 13:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2008-09-06 13:00] - [2009-02-09 11:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2008-09-06 13:00] - [2008-09-06 13:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================