Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-02-2015
Ran by SysOp (administrator) on WINDT_09 on 16-02-2015 16:31:13
Running from C:\Documents and Settings\SysOp\Moje dokumenty\Pobrane
Loaded Profiles: SysOp (Available profiles: SysOp & Administrator)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) D:\PROGRAMY\Avast\AvastSvc.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(AVAST Software) D:\PROGRAMY\Avast\avastui.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Dropbox, Inc.) C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
() C:\WINDOWS\system32\PnkBstrA.exe
() C:\WINDOWS\system32\PnkBstrB.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(AVAST Software) D:\PROGRAMY\Avast\avastui.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => D:\PROGRAMY\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Winlogon: [UIHost] C:\WINDOWS\system32\\logonui.exe [1433600 2009-03-15] (Microsoft Corporation)
Winlogon\Notify\crypt32chain: C:\WINDOWS\system32\\crypt32.dll (Microsoft Corporation)
Winlogon\Notify\cryptnet: C:\WINDOWS\system32\\cryptnet.dll (Microsoft Corporation)
Winlogon\Notify\cscdll: C:\WINDOWS\system32\\cscdll.dll (Microsoft Corporation)
Winlogon\Notify\ScCertProp: C:\WINDOWS\system32\\wlnotify.dll (Microsoft Corporation)
Winlogon\Notify\Schedule: C:\WINDOWS\system32\\wlnotify.dll (Microsoft Corporation)
Winlogon\Notify\sclgntfy: C:\WINDOWS\system32\\sclgntfy.dll (Microsoft Corporation)
Winlogon\Notify\SensLogn: C:\WINDOWS\system32\\WlNotify.dll (Microsoft Corporation)
Winlogon\Notify\termsrv: C:\WINDOWS\system32\\wlnotify.dll (Microsoft Corporation)
Winlogon\Notify\wlballoon: C:\WINDOWS\system32\\wlnotify.dll (Microsoft Corporation)
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKLM\...\Policies\Explorer: [NoDriveTypeAutoRun ] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu ] 0
HKU\S-1-5-19\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-19\...\Policies\Explorer: [NoSMHelp] 1
HKU\S-1-5-19\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoSMMyPictures] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-20\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-20\...\Policies\Explorer: [NoSMHelp] 1
HKU\S-1-5-20\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoSMMyPictures] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Run: [Clownfish] => [X]
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Run: [DAEMON Tools Lite] => D:\PROGRAMY\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Policies\Explorer: [NoSMHelp] 1
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Policies\Explorer: [NoSMMyPictures] 1
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\MountPoints2: {5cdb3e4a-5c7b-11e4-9ea6-00241d9ca875} - G:\Startme.exe
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\MountPoints2: {9be1495a-43b8-11e2-9f3d-00241d9ca875} - G:\Startme.exe
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\MountPoints2: {cfeeacae-cf9f-11de-ad53-00241d9ca875} - G:\6ruaqx.exe
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\MountPoints2: {dadfb676-26de-11df-af10-00241d9ca875} - H:\USBAutoRun.exe
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\MountPoints2: {e3eb836b-1686-11e0-b404-00241d9ca875} - J:\setupSNK.exe
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\...\MountPoints2: {f5fd46cd-b643-11e1-a3be-00241d9ca875} - G:\Startme.exe
HKU\S-1-5-18\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-18\...\Policies\Explorer: [NoSMHelp] 1
HKU\S-1-5-18\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoSMMyPictures] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoRecentDocsHistory] 1
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\PROGRAMY\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} =>  No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://forum.winmod.net
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://forum.winmod.net
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://forum.winmod.net
HKU\S-1-5-21-1409082233-651377827-1177238915-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKLM - SHOUTcast Toolbar Search Class - {14f0d511-36a2-41ca-ae01-ba4f87282c97} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC)
URLSearchHook: [S-1-5-21-1409082233-651377827-1177238915-1001] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKU\S-1-5-21-1409082233-651377827-1177238915-1001 - SHOUTcast Toolbar Search Class - {14f0d511-36a2-41ca-ae01-ba4f87282c97} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC)
URLSearchHook: HKU\S-1-5-21-1409082233-651377827-1177238915-1001 - ST-Polska Toolbar - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Softonic-Polska\prxtbSof2.dll (ClientConnect Ltd.)
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: No Name -> {37B85A21-692B-4205-9CAD-2626E4993404} ->  No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\PROGRAMY\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: ST-Polska Toolbar -> {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} -> C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Softonic-Polska\prxtbSof2.dll (ClientConnect Ltd.)
BHO: SHOUTcast Loader -> {ccec60fc-2608-4e58-9659-3ffc159e8ea9} -> C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
BHO: IEPluginBHO Class -> {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} -> C:\Documents and Settings\SysOp\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
BHO: Internet Program -> {ff0021ad-2cc3-4e0d-8e3c-b4153a64a495} -> C:\Program Files\Internet Program\Extensions\ff0021ad-2cc3-4e0d-8e3c-b4153a64a495.dll ()
Toolbar: HKLM - No Name - {37B85A29-692B-4205-9CAD-2626E4993404} -  No File
Toolbar: HKLM - ST-Polska Toolbar - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Softonic-Polska\prxtbSof2.dll (ClientConnect Ltd.)
Toolbar: HKLM - SHOUTcast Radio Toolbar - {0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC)
Toolbar: HKU\S-1-5-21-1409082233-651377827-1177238915-1001 -> No Name - {37B85A29-692B-4205-9CAD-2626E4993404} -  No File
Toolbar: HKU\S-1-5-21-1409082233-651377827-1177238915-1001 -> ST-Polska Toolbar - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Softonic-Polska\prxtbSof2.dll (ClientConnect Ltd.)
Toolbar: HKU\S-1-5-21-1409082233-651377827-1177238915-1001 -> SHOUTcast Radio Toolbar - {0457331D-8CA6-4F97-9C26-6A9EF2B2DBA8} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\\mscoree.dll (Microsoft Corporation)
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\\mscoree.dll (Microsoft Corporation)
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\\mscoree.dll (Microsoft Corporation)
Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [94208] (Apple Computer, Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 195.238.181.164 8.8.8.8

FireFox:
========
FF ProfilePath: C:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\nukl7zsu.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1409082233-651377827-1177238915-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Extension: Adblock Plus - C:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\nukl7zsu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-16]
FF Extension: QuickStores-Toolbar - C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de [2012-03-02]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2011-06-16]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-03]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - D:\PROGRAMY\Avast\WebRep\FF
FF Extension: Avast Online Security - D:\PROGRAMY\Avast\WebRep\FF [2014-12-21]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://google.pl/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\40.0.2214.111\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\40.0.2214.111\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (vShare.tv plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll No File
CHR Plugin: (Winamp Application Detector) - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Microsoft DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\\npsitesafety.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw.dll No File
CHR Profile: C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-02]
CHR Extension: (YouTube) - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-02]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-21]
CHR Extension: (Opel Zafira OPC Tomaszw Lubelski  Tablica.pl) - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ncpbefljncjmeoplfgljfkbiibpjkeme [2013-07-11]
CHR Extension: (Google Wallet) - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\PROGRAMY\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-21]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 6to4; C:\WINDOWS\System32\6to4svc.dll [100352 2008-04-14] (Microsoft Corporation)
R2 avast! Antivirus; D:\PROGRAMY\Avast\AvastSvc.exe [50344 2014-12-21] (AVAST Software)
S4 Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S4 ClipSrv; C:\WINDOWS\system32\clipsrv.exe [43008 2009-07-12] (Microsoft Corporation) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2010-05-08] (Macrovision Europe Ltd.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
S3 MSIServer; C:\WINDOWS\System32\msiexec.exe [99840 2009-07-12] (Microsoft Corporation) [File not signed]
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [66872 2011-05-01] ()
R2 PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [103736 2011-05-01] ()
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [575488 2008-09-08] (Nokia.) [File not signed]
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-12-21] ()
R0 aswKbd; C:\WINDOWS\system32\Drivers\aswKbd.sys [21576 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-12-21] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-12-21] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-12-21] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-12-21] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2014-12-21] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-12-21] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-12-21] ()
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [281760 2009-10-22] ()
R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx86.sys [42784 2014-08-11] (AVG Technologies)
R0 BtHidBus; C:\WINDOWS\System32\Drivers\BtHidBus.sys [20744 2009-06-17] (IVT Corporation.)
S3 btnetBUs; C:\WINDOWS\System32\Drivers\btnetBus.sys [29192 2009-06-17] ()
S3 Cardex; C:\WINDOWS\system32\drivers\TBPANEL.SYS [12256 2007-03-16] (Windows (R) 2000 DDK provider)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2009-07-12] (Microsoft Corporation)
S3 FilterService; C:\WINDOWS\System32\DRIVERS\lvuvcflt.sys [23832 2009-10-07] (Logitech Inc.)
S3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [25280 2009-10-11] (LogMeIn, Inc.)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49664 2006-04-13] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2006-04-13] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2006-04-13] (HP)
S3 IvtBtBUs; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [25480 2009-06-17] (IVT Corporation.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25888 2009-10-22] ()
S3 LVPr2Mon; C:\WINDOWS\System32\Drivers\LVPr2Mon.sys [25824 2010-05-07] ()
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2009-07-12] (Microsoft Corporation)
S3 PCANDIS5; C:\WINDOWS\system32\PCANDIS5.SYS [16128 2003-08-04] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 se44bus; C:\WINDOWS\System32\DRIVERS\se44bus.sys [61536 2006-11-30] (MCCI) [File not signed]
S3 se44mdfl; C:\WINDOWS\System32\DRIVERS\se44mdfl.sys [9360 2006-11-30] (MCCI) [File not signed]
S3 se44mdm; C:\WINDOWS\System32\DRIVERS\se44mdm.sys [97088 2006-11-30] (MCCI) [File not signed]
S3 se44mgmt; C:\WINDOWS\System32\DRIVERS\se44mgmt.sys [88624 2006-11-30] (MCCI) [File not signed]
S3 se44nd5; C:\WINDOWS\System32\DRIVERS\se44nd5.sys [18704 2006-11-30] (MCCI) [File not signed]
S3 se44obex; C:\WINDOWS\System32\DRIVERS\se44obex.sys [86432 2006-11-30] (MCCI) [File not signed]
S3 se44unic; C:\WINDOWS\System32\DRIVERS\se44unic.sys [90800 2006-11-30] (MCCI) [File not signed]
R0 Si3112; C:\WINDOWS\system32\Drivers\Si3112.sys [62208 2009-07-12] (Silicon Image, Inc.) [File not signed]
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [691696 2010-10-08] () [File not signed]
R3 Stmatm; C:\WINDOWS\System32\DRIVERS\stmatm.sys [60255 2003-08-12] (STMicroelectronics              ) [File not signed]
S3 TaurusUsb; C:\WINDOWS\System32\DRIVERS\torususb.sys [684265 2006-05-25] () [File not signed]
S3 TBPanel; C:\WINDOWS\system32\Drivers\TBPanel.sys [12256 2007-03-16] (Windows (R) 2000 DDK provider)
R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361600 2009-07-12] (Microsoft Corporation) [File not signed]
R1 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [225856 2009-07-12] (Microsoft Corporation)
S3 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation)
U3 azw92dhe; C:\WINDOWS\system32\Drivers\azw92dhe.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero size file/folder)
S3 BT; system32\DRIVERS\btnetdrv.sys [X]
S3 Btcsrusb; System32\Drivers\btcusb.sys [X]
S1 ccnfd_1_10_0_5; system32\drivers\ccnfd_1_10_0_5.sys [X]
S4 IntelIde; No ImagePath
S3 usbbus; system32\DRIVERS\lgusbbus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [X]
S3 USBModem; system32\DRIVERS\lgusbmodem.sys [X]
S3 VComm; system32\DRIVERS\VComm.sys [X]
S3 VcommMgr; System32\Drivers\VcommMgr.sys [X]
S3 VHidMinidrv; system32\drivers\VHIDMini.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-16 16:30 - 2015-02-16 16:31 - 00000000 ___DC () C:\FRST
2015-02-16 16:09 - 2015-02-16 16:09 - 00000000 _SHDC () C:\Jumpshot
2015-02-16 16:09 - 2015-02-16 16:09 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji\gnupg
2015-02-16 16:03 - 2015-02-16 16:31 - 00000000 ____D () C:\Documents and Settings\SysOp\Moje dokumenty\Pobrane
2015-02-16 15:16 - 2015-02-16 15:16 - 00000730 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2015-02-16 15:16 - 2015-02-16 15:16 - 00000724 _____ () C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2015-02-16 15:16 - 2015-02-16 15:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-02-16 14:04 - 2015-02-16 14:10 - 00000000 ___DC () C:\AdwCleaner
2015-02-16 13:16 - 2015-02-16 13:16 - 00001089 _____ () C:\Documents and Settings\All Users\Pulpit\Play Euro Truck Simulator 2 Multiplayer.lnk
2015-02-09 19:03 - 2015-02-10 11:42 - 00027308 _____ () C:\Documents and Settings\SysOp\Moje dokumenty\Clownfish.log
2015-02-08 12:10 - 2015-02-08 12:10 - 00000631 _____ () C:\Documents and Settings\SysOp\Pulpit\Clownfish.lnk
2015-02-07 12:56 - 2015-02-07 12:56 - 00000000 ____D () C:\Documents and Settings\SysOp\Moje dokumenty\Skype Voice Records
2015-02-07 12:56 - 2015-02-07 12:56 - 00000000 ____D () C:\Documents and Settings\SysOp\Moje dokumenty\Clownfish Avatars
2015-02-07 12:56 - 2015-02-07 12:56 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Clownfish
2015-02-06 21:26 - 2015-02-06 21:26 - 05070512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-16 16:31 - 2009-08-20 09:05 - 00000000 ____D () C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp
2015-02-16 16:25 - 2012-06-30 15:44 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-16 16:19 - 2012-12-29 13:14 - 00001002 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1409082233-651377827-1177238915-1001UA.job
2015-02-16 16:14 - 2009-08-20 09:05 - 00000000 ____D () C:\Documents and Settings\SysOp
2015-02-16 16:14 - 2009-08-20 09:03 - 01150713 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-16 16:13 - 2011-03-25 19:53 - 00000000 ____D () C:\Documents and Settings\SysOp\Dane aplikacji\SoundSpectrum
2015-02-16 16:13 - 2011-03-25 19:52 - 00000000 ____D () C:\Program Files\SoundSpectrum
2015-02-16 16:09 - 2014-12-21 15:29 - 00000000 ____D () C:\WINDOWS\jumpshot.com
2015-02-16 16:09 - 2009-08-20 09:05 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji
2015-02-16 16:03 - 2009-08-20 09:05 - 00000000 ____D () C:\Documents and Settings\SysOp\Moje dokumenty
2015-02-16 16:02 - 2014-11-05 16:44 - 00005556 _____ () C:\WINDOWS\system32\nvAppTimestamps
2015-02-16 16:02 - 2009-08-20 09:05 - 00000000 ____D () C:\Documents and Settings\SysOp\Pulpit
2015-02-16 15:51 - 2009-08-20 09:16 - 00000000 ___DC () C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2015-02-16 15:51 - 2009-08-20 09:16 - 00000000 ____D () C:\Program Files\QuickTime Alternative
2015-02-16 15:28 - 2014-12-21 15:28 - 00000322 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-02-16 15:24 - 2014-10-31 20:03 - 00000000 ____D () C:\Documents and Settings\SysOp\Moje dokumenty\Euro Truck Simulator 2
2015-02-16 15:16 - 2010-10-14 08:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-02-16 15:16 - 2009-08-20 10:57 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-02-16 15:16 - 2009-08-20 10:57 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy
2015-02-16 15:10 - 2009-08-20 09:05 - 00000000 ___RD () C:\Documents and Settings\SysOp\Menu Start\Programy\Autostart
2015-02-16 15:08 - 2009-10-20 19:41 - 00000000 ____D () C:\Program Files\Google
2015-02-16 15:01 - 2009-08-20 11:00 - 00000349 ____N () C:\WINDOWS\wiadebug.log
2015-02-16 14:54 - 2014-11-18 09:19 - 00000000 ___RD () C:\Documents and Settings\SysOp\Moje dokumenty\Dropbox
2015-02-16 14:54 - 2014-11-18 09:05 - 00000000 ____D () C:\Documents and Settings\SysOp\Dane aplikacji\Dropbox
2015-02-16 14:54 - 2009-08-20 11:00 - 00000050 ____N () C:\WINDOWS\wiaservc.log
2015-02-16 14:53 - 2013-06-08 16:09 - 00000350 _____ () C:\WINDOWS\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2015-02-16 14:53 - 2010-12-15 16:16 - 00000000 _____ () C:\WINDOWS\system32\Drivers\lvuvc.hs
2015-02-16 14:53 - 2009-08-20 09:05 - 00032562 ____N () C:\WINDOWS\SchedLgU.Txt
2015-02-16 14:53 - 2009-08-20 09:05 - 00000188 ___SH () C:\Documents and Settings\SysOp\ntuser.ini
2015-02-16 14:53 - 2009-08-20 09:05 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-16 14:10 - 2009-08-20 09:05 - 00000000 __RHD () C:\Documents and Settings\SysOp\Dane aplikacji
2015-02-16 14:10 - 2009-08-20 09:05 - 00000000 ___RD () C:\Documents and Settings\SysOp\Menu Start\Programy
2015-02-16 14:10 - 2009-08-20 09:05 - 00000000 ___RD () C:\Documents and Settings\SysOp\Menu Start
2015-02-16 14:10 - 2009-08-20 09:05 - 00000000 ___HD () C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji
2015-02-16 14:09 - 2009-08-20 10:54 - 00000000 _RHDC () C:\Documents and Settings\All Users\Dane aplikacji
2015-02-16 13:28 - 2014-11-03 18:05 - 00000000 ____D () C:\Documents and Settings\SysOp\Moje dokumenty\ETS2MP
2015-02-16 13:19 - 2012-12-29 13:14 - 00000980 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1409082233-651377827-1177238915-1001Core.job
2015-02-16 13:16 - 2014-11-03 18:04 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Euro Truck Simulator 2 Multiplayer
2015-02-16 12:53 - 2015-01-08 20:49 - 00000000 ____D () C:\Program Files\Common Files\6fb1f30a-cea7-4ccf-bff8-acbecbfe46f9
2015-02-16 12:52 - 2015-01-08 20:49 - 00000000 ___DC () C:\Documents and Settings\All Users\Dane aplikacji\6fb1f30a-cea7-4ccf-bff8-acbecbfe46f9
2015-02-15 08:53 - 2001-07-22 01:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-02-13 19:12 - 2014-11-18 09:19 - 00000994 _____ () C:\Documents and Settings\SysOp\Pulpit\Dropbox.lnk
2015-02-13 19:12 - 2014-11-18 09:08 - 00000000 ____D () C:\Documents and Settings\SysOp\Menu Start\Programy\Dropbox
2015-02-12 20:43 - 2014-11-06 18:36 - 00000000 ___DC () C:\Documents and Settings\All Users\Dane aplikacji\Package Cache
2015-02-10 23:11 - 2010-09-23 10:54 - 00000000 ____D () C:\Documents and Settings\SysOp\Dane aplikacji\Skype
2015-02-10 22:13 - 2013-03-27 14:25 - 00000000 ____D () C:\Documents and Settings\SysOp\Dane aplikacji\uTorrent
2015-02-10 22:13 - 2009-08-22 09:36 - 00000000 ____D () C:\Documents and Settings\SysOp\Dane aplikacji\DAEMON Tools Lite
2015-02-10 12:41 - 2009-09-12 12:45 - 00000069 ____C () C:\WINDOWS\NeroDigital.ini
2015-02-09 10:13 - 2011-07-14 19:10 - 00000000 ____D () C:\Documents and Settings\SysOp\Pulpit\Nieużywane skróty pulpitu
2015-02-08 10:44 - 2014-11-02 21:42 - 00000000 ____D () C:\Documents and Settings\SysOp\Pulpit\Płyta
2015-02-07 14:17 - 2009-08-20 09:05 - 00000000 __SHD () C:\WINDOWS\CSC
2015-02-07 09:51 - 2014-04-25 17:23 - 00000144 ____C () C:\Documents and Settings\SysOp\Pulpit\KODY.txt
2015-02-06 21:53 - 2014-11-01 10:04 - 00000118 _____ () C:\Documents and Settings\SysOp\Pulpit\KODY LS.txt
2015-02-06 21:27 - 2012-06-30 15:44 - 00701616 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-02-06 21:27 - 2011-05-28 20:22 - 00071344 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-02-05 08:50 - 2014-01-24 15:33 - 00000283 ____C () C:\Documents and Settings\SysOp\Pulpit\Router Settings.txt
2015-02-02 13:28 - 2009-08-23 14:54 - 00081920 _____ () C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-27 21:27 - 2015-01-01 21:00 - 00000375 _____ () C:\Documents and Settings\SysOp\Pulpit\Podsumowanie.txt
2015-01-27 21:08 - 2014-10-31 19:56 - 00000000 ____D () C:\Documents and Settings\SysOp\Menu Start\Programy\Steam

==================== Files in the root of some directories =======

2013-12-09 20:12 - 2013-12-09 20:13 - 0003728 ____C () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2010-07-08 13:32 - 2010-07-08 13:32 - 0002528 ____C () C:\Documents and Settings\SysOp\Dane aplikacji\$_hpcst$.hpc
2009-10-15 17:19 - 2011-05-01 17:07 - 0022328 ____C () C:\Documents and Settings\SysOp\Dane aplikacji\PnkBstrK.sys
2014-11-06 19:26 - 2014-11-06 19:26 - 0000042 _____ () C:\Documents and Settings\SysOp\Dane aplikacji\WB.CFG
2009-08-23 14:54 - 2015-02-02 13:28 - 0081920 _____ () C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2009-08-21 20:31 - 2009-08-21 20:31 - 0000130 ____C () C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
2011-10-12 15:33 - 2011-10-12 15:33 - 0000000 ____C () C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\{75B09CDE-6CC5-4FCC-BECE-1E7CBDD6F980}
2011-07-11 18:19 - 2011-07-11 18:19 - 0000000 ____C () C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\{DABEC598-4485-48EF-B3D6-D07E7451AFC2}

Some content of TEMP:
====================
C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\d2a0f77e-246b-4f25-b0e5-1be9620af055.EXE
C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmptvxugn.dll
C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\Quarantine.exe
C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe
[2009-03-17 08:40] - [2009-03-17 08:40] - 1739776 ____A (Microsoft Corporation) 36f8d0529acd765f9a9672a154930997     

C:\WINDOWS\system32\winlogon.exe
[2009-07-12 13:24] - [2009-07-12 13:24] - 0549888 ____A (Microsoft Corporation) 335813eacd16e84f3047a3326f6e5473     

C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll
[2009-07-03 08:24] - [2009-07-03 08:24] - 0652288 ____A (Microsoft Corporation) 991c8cdc4c34b65ffc780f49936358fb     

C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================