Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-12-2014 Ran by Artur (administrator) on HP on 04-12-2014 00:21:41 Running from C:\Documents and Settings\Artur\Pulpit\frst Loaded Profile: Artur (Available profiles: Artur & Administrator) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe () C:\WINDOWS\system32\WLTRYSVC.EXE (Broadcom Corporation) C:\WINDOWS\system32\BCMWLTRY.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe (InterVideo Inc.) C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe () C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe () C:\Documents and Settings\All Users\Dane aplikacji\MobileBrServ\mbbService.exe (InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe () C:\Program Files\CDBurnerXP\NMSAccessU.exe () C:\Program Files\CyberLink\Shared files\RichVideo.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe () C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-04] (AVAST Software) HKU\S-1-5-21-1645522239-1454471165-839522115-1003\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe [94208 2005-10-28] (Nero AG) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-1645522239-1454471165-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) BHO: JQSIEStartDetectorImpl Class -> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -> C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll No File DPF: {A9ED6AA2-D9D4-4D71-9586-E293E2E3580B} http://download.gamedesire.com/g_bin/pl/marbles_2_0_0_32.cab DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} http://game03.zylom.com/activex/zylomgamesplayer.cab Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.99.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\djca7onj.default FF Homepage: https://www.google.pl/?gws_rd=ssl FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-06] FF Extension: No Name - wrc@avast.com [Not Found] Chrome: ======= CHR Plugin: (Widevine Content Decryption Module) - C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.)) CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Profile: C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default CHR Extension: (YouTube) - C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-10-24] CHR Extension: (Szukaj w Google) - C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-10-24] CHR Extension: (avast! Online Security) - C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-07] CHR Extension: (Google Wallet) - C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-26] CHR Extension: (Gmail) - C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-10-24] CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-04] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-04] (AVAST Software) R2 btwdins; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [266295 2007-02-06] (Broadcom Corporation.) [File not signed] R2 Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.) R2 CLCapSvc; C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe [278608 2007-02-09] () [File not signed] R2 CLSched; C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe [110677 2007-02-09] () [File not signed] R2 Huawei E3272; C:\Documents and Settings\All Users\Dane aplikacji\MobileBrServ\mbbservice.exe [240720 2013-12-03] () R2 NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] () R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [262247 2007-02-09] () [File not signed] S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [637952 2009-06-02] (Nokia.) [File not signed] R2 wltrysvc; C:\WINDOWS\System32\bcmwltry.exe [1613824 2008-09-27] (Broadcom Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 Afc; C:\WINDOWS\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.) R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-12-04] () R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-12-04] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-12-04] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-12-04] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-12-04] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2014-12-04] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-12-04] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-12-04] () R3 BCM43XX; C:\WINDOWS\System32\DRIVERS\bcmwl5.sys [1287552 2008-09-26] (Broadcom Corporation) R3 btaudio; C:\WINDOWS\System32\drivers\btaudio.sys [530861 2007-02-14] (Broadcom Corporation.) R3 BTDriver; C:\WINDOWS\System32\DRIVERS\btport.sys [30459 2007-02-14] (Broadcom Corporation.) R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [868298 2007-02-14] (Broadcom Corporation.) S3 BTWDNDIS; C:\WINDOWS\System32\DRIVERS\btwdndis.sys [149123 2007-02-14] (Broadcom Corporation.) R3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [67960 2007-02-14] (Broadcom Corporation.) S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation) S3 hwdatacard; C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys [101120 2008-01-24] (Huawei Technologies Co., Ltd.) [File not signed] S3 MPE; C:\WINDOWS\System32\DRIVERS\MPE.sys [15232 2008-04-13] (Microsoft Corporation) S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) S3 NPF; C:\WINDOWS\System32\drivers\npf.sys [32512 2005-08-02] (CACE Technologies) [File not signed] R0 PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [36528 2006-08-25] (Sonic Solutions) [File not signed] S3 SONYPVU1; C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation) S3 ss_bbus; C:\WINDOWS\System32\DRIVERS\ss_bbus.sys [98432 2010-07-28] (MCCI) S3 ss_bmdfl; C:\WINDOWS\System32\DRIVERS\ss_bmdfl.sys [14848 2010-07-28] (MCCI Corporation) S3 ss_bmdm; C:\WINDOWS\System32\DRIVERS\ss_bmdm.sys [123648 2010-07-28] (MCCI Corporation) S3 ss_bserd; C:\WINDOWS\System32\DRIVERS\ss_bserd.sys [100224 2010-07-28] (MCCI Corporation) R2 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [File not signed] S3 u3kh; C:\WINDOWS\System32\DRIVERS\u3kh.sys [1719808 2007-07-31] (DiBcom) [File not signed] S3 u3khrc; C:\WINDOWS\System32\DRIVERS\u3khrc.sys [13568 2007-05-16] (DiBcom S.A.) [File not signed] S3 USB28xxBGA; C:\WINDOWS\System32\DRIVERS\emBDA.sys [479744 2007-08-31] (eMPIA Technology, Inc.) [File not signed] S3 USB28xxOEM; C:\WINDOWS\System32\DRIVERS\emOEM.sys [38656 2007-08-31] (eMPIA Technology, Inc.) [File not signed] S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Corporation) S4 IntelIde; No ImagePath U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U1 WS2IFSL; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-04 00:19 - 2014-12-04 00:21 - 00000000 ____D () C:\Documents and Settings\Artur\Pulpit\frst 2014-12-04 00:11 - 2014-12-04 00:11 - 00000000 ____D () C:\WINDOWS\jumpshot.com 2014-12-04 00:04 - 2014-12-04 00:04 - 00001737 _____ () C:\Documents and Settings\All Users\Pulpit\Avast Free Antivirus.lnk 2014-12-04 00:03 - 2014-12-04 00:03 - 00291352 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-12-04 00:03 - 2014-12-04 00:03 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-12-04 00:00 - 2014-12-04 00:00 - 00000000 ____D () C:\Documents and Settings\Artur\Moje dokumenty\Pobrane 2014-12-03 23:59 - 2014-12-03 23:59 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\Mozilla 2014-12-03 23:58 - 2014-12-03 23:58 - 00000736 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk 2014-12-03 23:58 - 2014-12-03 23:58 - 00000730 _____ () C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk 2014-12-03 23:58 - 2014-12-03 23:58 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Mozilla 2014-12-03 23:57 - 2014-12-03 23:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-12-03 23:56 - 2014-12-03 23:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-12-03 23:50 - 2014-12-03 23:50 - 00683488 _____ (Opera Software) C:\Documents and Settings\Artur\Moje dokumenty\Opera_NI_stable (1).exe 2014-12-03 23:46 - 2014-12-03 23:46 - 00683520 _____ (Opera Software) C:\Documents and Settings\Artur\Moje dokumenty\Opera_NI_stable.exe 2014-12-03 23:40 - 2014-12-03 23:40 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-12-03 23:40 - 2014-12-03 23:40 - 00000000 ____D () C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Sun 2014-12-03 23:40 - 2014-12-03 23:40 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Java 2014-12-03 23:40 - 2014-12-03 23:38 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2014-12-03 23:40 - 2014-12-03 23:38 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2014-12-03 23:36 - 2014-12-03 23:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Oracle 2014-12-03 23:33 - 2014-12-03 23:33 - 00000000 ____D () C:\Program Files\Java 2014-12-03 01:12 - 2014-12-03 01:12 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit\new-frst 2014-12-02 02:07 - 2014-12-04 00:21 - 00000000 ____D () C:\FRST 2014-12-02 02:03 - 2014-12-02 02:41 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google 2014-12-02 01:43 - 2014-12-02 01:43 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\Notepad++ 2014-12-02 01:15 - 2014-12-02 01:15 - 00000075 _____ () C:\WINDOWS\setupact.log 2014-12-02 01:15 - 2014-12-02 01:15 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-12-02 01:14 - 2014-12-02 02:04 - 00004505 _____ () C:\WINDOWS\setupapi.log 2014-11-30 21:37 - 2014-11-30 21:37 - 00032480 _____ () C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2014-11-23 14:36 - 2014-11-23 14:36 - 00158752 _____ () C:\WINDOWS\system32\FNTCACHE.DAT ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-04 00:22 - 2014-01-08 11:23 - 00000000 ____D () C:\Documents and Settings\Artur\Ustawienia lokalne\temp 2014-12-04 00:20 - 2008-09-26 19:23 - 00000000 ____D () C:\Documents and Settings\Artur\Pulpit 2014-12-04 00:14 - 2008-09-26 21:08 - 01071640 ____C () C:\WINDOWS\system32\PerfStringBackup.INI 2014-12-04 00:14 - 2001-10-26 17:15 - 00485282 _____ () C:\WINDOWS\system32\perfh015.dat 2014-12-04 00:14 - 2001-10-26 17:15 - 00081790 _____ () C:\WINDOWS\system32\perfc015.dat 2014-12-04 00:13 - 2008-09-26 19:17 - 01952228 _____ () C:\WINDOWS\WindowsUpdate.log 2014-12-04 00:11 - 2014-02-06 23:59 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2014-12-04 00:09 - 2008-09-26 21:10 - 00000159 ____C () C:\WINDOWS\wiadebug.log 2014-12-04 00:09 - 2008-09-26 21:10 - 00000050 ____C () C:\WINDOWS\wiaservc.log 2014-12-04 00:04 - 2014-02-06 23:59 - 00787800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2014-12-04 00:04 - 2014-02-06 23:59 - 00423784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys 2014-12-04 00:04 - 2008-09-26 21:08 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-12-04 00:04 - 2008-09-26 21:08 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-12-04 00:04 - 2008-09-26 19:23 - 00000292 ___SH () C:\Documents and Settings\Artur\ntuser.ini 2014-12-04 00:03 - 2014-04-22 11:32 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-12-04 00:03 - 2014-02-06 23:59 - 00206248 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-12-04 00:03 - 2014-02-06 23:59 - 00070384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys 2014-12-04 00:03 - 2014-02-06 23:59 - 00057928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys 2014-12-04 00:03 - 2014-02-06 23:59 - 00055240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys 2014-12-04 00:03 - 2014-02-06 23:59 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-12-04 00:00 - 2008-09-26 19:23 - 00000000 ___RD () C:\Documents and Settings\Artur\Moje dokumenty 2014-12-03 23:59 - 2008-09-26 19:23 - 00000000 __RHD () C:\Documents and Settings\Artur\Dane aplikacji 2014-12-03 23:58 - 2008-09-26 21:07 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-12-03 23:50 - 2014-06-12 15:50 - 00000414 _____ () C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1399557511.job 2014-12-03 23:50 - 2014-05-08 14:58 - 00000000 ____D () C:\Program Files\Opera 2014-12-03 23:40 - 2008-09-26 19:23 - 00000000 ___HD () C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji 2014-12-03 23:21 - 2008-09-26 19:23 - 00000000 __SHD () C:\Documents and Settings\Artur\Ustawienia lokalne\Historia 2014-12-03 23:20 - 2008-09-26 19:22 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Historia 2014-12-03 23:14 - 2009-08-18 20:37 - 00000000 __SHD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia 2014-12-03 23:14 - 2009-08-18 20:37 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp 2014-12-03 23:12 - 2008-09-26 19:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Temp 2014-12-03 23:12 - 2008-09-26 19:21 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Historia 2014-12-03 23:11 - 2012-03-02 22:58 - 00000000 ____D () C:\WINDOWS\pss 2014-12-03 23:11 - 2008-09-26 21:08 - 00000000 __SHD () C:\Documents and Settings\Default User\Ustawienia lokalne\Historia 2014-12-03 23:08 - 2009-08-18 20:37 - 00000188 __SHC () C:\Documents and Settings\Administrator\ntuser.ini 2014-12-03 01:12 - 2009-08-18 20:37 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit 2014-12-02 02:06 - 2009-08-18 20:37 - 00000000 ___RD () C:\Documents and Settings\Administrator\Moje dokumenty 2014-12-02 02:03 - 2009-08-18 20:37 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji 2014-12-02 01:43 - 2014-01-07 17:56 - 00089600 ___SH () C:\Documents and Settings\Artur\Moje dokumenty\Thumbs.db 2014-12-02 01:35 - 2008-09-27 21:23 - 00001248 ____C () C:\WINDOWS\wincmd.ini 2014-12-02 01:35 - 2008-09-26 21:08 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Autostart 2014-12-02 01:35 - 2008-09-26 21:06 - 00000211 ___SH () C:\boot.ini 2014-12-02 01:35 - 2001-07-21 23:16 - 00000608 _____ () C:\WINDOWS\win.ini 2014-12-02 01:35 - 2001-07-21 23:15 - 00000227 _____ () C:\WINDOWS\system.ini 2014-12-02 01:03 - 2009-11-02 21:00 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat 2014-12-01 11:17 - 2014-01-07 18:17 - 00000000 __SHD () C:\WINDOWS\CSC 2014-11-29 18:02 - 2001-07-21 23:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2014-11-23 12:33 - 2009-06-30 23:56 - 00065536 _____ () C:\WINDOWS\system32\config\Internet.evt 2014-11-23 12:33 - 2008-09-26 19:23 - 00000000 ____D () C:\Documents and Settings\Artur 2014-11-14 14:39 - 2013-07-15 02:00 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-11-14 14:34 - 2008-10-11 21:39 - 100445232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-11-09 13:05 - 2008-12-18 22:45 - 00000000 ____D () C:\Documents and Settings\Artur\Dane aplikacji\TeamViewer 2014-11-09 07:50 - 2010-04-17 20:29 - 00052224 ____C () C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================