Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-03-2015 Ran by M (administrator) on MARTA-PC on 03-03-2015 16:24:50 Running from C:\Documents and Settings\M\Moje dokumenty\Downloads Loaded Profiles: UpdatusUser & M (Available profiles: UpdatusUser & M & Administrator) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE () C:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE () C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AutoEJCD_0ACE20FF] => C:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE [40960 2015-01-24] () HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-03] (Adobe Systems Incorporated) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-24] (AVAST Software) HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20145368 2015-01-24] (Realtek Semiconductor Corp.) HKLM\...\Run: [ZDWLan_Utility] => C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE [487424 2008-08-21] () HKU\S-1-5-21-299502267-1275210071-1801674531-1005\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd) HKU\S-1-5-21-299502267-1275210071-1801674531-1005\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd) HKU\S-1-5-21-299502267-1275210071-1801674531-1005\...\RunOnce: [Adobe Speed Launcher] => 1425394730 HKU\S-1-5-21-299502267-1275210071-1801674531-1005\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssbezier.scr [19968 2008-04-15] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-299502267-1275210071-1801674531-1005\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: [S-1-5-21-299502267-1275210071-1801674531-1003] ATTENTION ==> Default URLSearchHook is missing. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62 FireFox: ======== FF ProfilePath: C:\Documents and Settings\M\Dane aplikacji\Mozilla\Firefox\Profiles\00jnkoid.default-1425393448234 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-24] Chrome: ======= CHR HomePage: Default -> hxxp://www.pajacyk.pl/ CHR StartupUrls: Default -> "hxxp://pajacyk.pl/" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Widevine Content Decryption Module) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.6.758\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\40.0.2214.115\internal-nacl-plugin No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\40.0.2214.115\pdf.dll () CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.)) CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll () CHR Profile: C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-24] CHR Extension: (Google Docs) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-24] CHR Extension: (Google Drive) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-24] CHR Extension: (YouTube) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-24] CHR Extension: (Adblock Plus) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-24] CHR Extension: (Google Search) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-24] CHR Extension: (HTML5 video for YouTube™) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dolajcekhnohkpncmhgledbmndjpblei [2015-01-24] CHR Extension: (Google Sheets) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-24] CHR Extension: (AdBlock) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-24] CHR Extension: (Avast Online Security) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-24] CHR Extension: (Stefanie Posavec) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\mcdfoihgbodkinaeoamnenflcacjhbal [2015-03-03] CHR Extension: (Google Mail Checker) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-01-24] CHR Extension: (Google Wallet) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-24] CHR Extension: (Gmail) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-24] CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-01-24] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-24] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-24] (AVAST Software) R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-08] (NVIDIA Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2015-01-24] (Creative) R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2015-01-24] () R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2015-01-24] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2015-01-24] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2015-01-24] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2015-01-24] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2015-01-24] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2015-01-24] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2015-01-24] () S3 BRGSp50; C:\WINDOWS\System32\Drivers\BRGSp50.sys [20608 2015-01-24] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] S3 FET5X86V; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [48128 2015-01-24] (VIA Technologies, Inc. ) R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2015-01-24] (REALiX(tm)) R3 JMCF; C:\WINDOWS\System32\DRIVERS\jmcf.sys [68720 2000-01-01] (JMicron Technology Corporation) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2015-01-24] (Creative Technology Ltd.) R3 whfltr2k; C:\WINDOWS\System32\DRIVERS\whfltr2k.sys [7424 2000-01-01] () R3 ZD1211BU(Atheros); C:\WINDOWS\System32\DRIVERS\zd1211Bu.sys [735232 2008-09-23] (Atheros Communications, Inc.) R3 ZDPSp50; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [17664 2015-01-24] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-03 15:58 - 2015-03-03 15:58 - 00000000 __SHD () C:\Documents and Settings\NetworkService\IETldCache 2015-03-03 15:58 - 2015-03-03 15:58 - 00000000 __SHD () C:\Documents and Settings\M\IETldCache 2015-03-03 15:56 - 2015-03-03 15:56 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2467659$ 2015-03-03 15:55 - 2015-03-03 15:56 - 00000000 ____D () C:\WINDOWS\ie8updates 2015-03-03 15:54 - 2015-03-03 15:57 - 00065536 _____ () C:\WINDOWS\system32\config\Internet.evt 2015-03-03 15:53 - 2015-03-03 15:55 - 00000000 __HDC () C:\WINDOWS\ie8 2015-03-03 15:49 - 2014-03-06 18:58 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll 2015-03-03 15:48 - 2014-03-06 18:58 - 11113472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll 2015-03-03 15:48 - 2014-03-06 18:58 - 02006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll 2015-03-03 15:48 - 2014-03-06 18:58 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll 2015-03-03 15:48 - 2014-03-06 18:58 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll 2015-03-03 15:48 - 2014-03-06 18:58 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll 2015-03-03 15:48 - 2014-03-06 18:58 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2015-03-03 15:48 - 2014-03-06 18:58 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll 2015-03-03 15:48 - 2011-08-16 11:45 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iecompat.dll 2015-03-03 11:41 - 2015-03-03 11:41 - 00000000 ____D () C:\Documents and Settings\M\Dane aplikacji\Adobe 2015-03-03 11:06 - 2015-03-03 11:06 - 00070662 _____ () C:\Documents and Settings\M\Pulpit\GMER.txt 2015-03-03 11:05 - 2015-03-03 11:05 - 00070662 _____ () C:\Documents and Settings\M\Pulpit\GMER.log 2015-03-03 10:49 - 2015-03-03 10:49 - 00019539 _____ () C:\Documents and Settings\M\Pulpit\FRST.txt 2015-03-03 10:48 - 2015-03-03 10:48 - 00029218 _____ () C:\Documents and Settings\M\Pulpit\Addition.txt 2015-03-03 10:46 - 2015-03-03 16:24 - 00000000 ____D () C:\FRST 2015-03-03 09:26 - 2015-03-03 09:26 - 00000000 ____D () C:\WINDOWS\system32\appmgmt 2015-02-05 13:27 - 2015-02-05 13:27 - 05070512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2015-02-03 20:13 - 2015-03-03 15:34 - 00000008 __RSH () C:\Documents and Settings\All Users\ntuser.pol 2015-02-03 18:47 - 2015-03-03 15:32 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-03 16:25 - 2015-01-24 17:38 - 00000000 ____D () C:\Documents and Settings\M\Ustawienia lokalne\Temp 2015-03-03 16:05 - 2015-01-24 12:21 - 00000378 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2015-03-03 15:59 - 2015-01-24 17:38 - 00000000 ____D () C:\Documents and Settings\M 2015-03-03 15:59 - 2015-01-24 12:37 - 00000330 _____ () C:\WINDOWS\Tasks\AutoKMS.job 2015-03-03 15:59 - 2015-01-24 11:27 - 01097527 _____ () C:\WINDOWS\WindowsUpdate.log 2015-03-03 15:58 - 2015-01-24 17:47 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-03-03 15:58 - 2015-01-24 17:47 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-03-03 15:58 - 2015-01-24 17:39 - 00000000 ___RD () C:\Documents and Settings\M\Moje dokumenty\Moje obrazy 2015-03-03 15:58 - 2015-01-24 17:39 - 00000000 ___RD () C:\Documents and Settings\M\Moje dokumenty\Moja muzyka 2015-03-03 15:58 - 2015-01-24 17:38 - 00000000 ___RD () C:\Documents and Settings\M\Ulubione 2015-03-03 15:58 - 2015-01-24 17:38 - 00000000 ___RD () C:\Documents and Settings\M\Moje dokumenty 2015-03-03 15:58 - 2015-01-24 12:08 - 00000000 ____D () C:\WINDOWS\system32\pl-pl 2015-03-03 15:58 - 2015-01-24 12:08 - 00000000 ____D () C:\WINDOWS\Help 2015-03-03 15:58 - 2015-01-24 11:35 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-03-03 15:58 - 2015-01-24 11:30 - 00000000 __SHD () C:\Documents and Settings\NetworkService 2015-03-03 15:57 - 2015-01-24 17:38 - 00000188 ___SH () C:\Documents and Settings\M\ntuser.ini 2015-03-03 15:57 - 2015-01-24 11:35 - 00032496 ____N () C:\WINDOWS\SchedLgU.Txt 2015-03-03 15:56 - 2015-01-25 16:40 - 00000000 ___HD () C:\WINDOWS\$hf_mig$ 2015-03-03 15:54 - 2015-01-24 12:08 - 00000000 ____D () C:\WINDOWS\Media 2015-03-03 15:37 - 2015-01-24 17:38 - 00000000 ____D () C:\Documents and Settings\M\Pulpit 2015-03-03 15:37 - 2015-01-24 12:44 - 00001936 _____ () C:\WINDOWS\system32\nvAppTimestamps 2015-03-03 15:32 - 2015-01-24 17:38 - 00000000 __RHD () C:\Documents and Settings\M\Dane aplikacji 2015-03-03 15:32 - 2015-01-24 12:26 - 00065536 _____ () C:\WINDOWS\system32\config\OAlerts.evt 2015-03-03 15:27 - 2015-01-25 20:02 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-03-03 11:41 - 2015-01-25 19:53 - 00000000 ____D () C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Adobe 2015-03-03 11:41 - 2015-01-25 17:19 - 00000000 ___RD () C:\Documents and Settings\M\Pulpit\- 2015-03-03 11:34 - 2015-01-24 17:38 - 00000000 __SHD () C:\Documents and Settings\M\Ustawienia lokalne\Historia 2015-03-03 11:34 - 2015-01-24 11:35 - 00000000 __SHD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Historia 2015-03-03 11:34 - 2015-01-24 11:30 - 00000000 __SHD () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Historia 2015-03-03 11:33 - 2015-01-24 12:18 - 00000000 ___SD () C:\Documents and Settings\Default User\Ustawienia lokalne\Historia 2015-03-03 11:33 - 2015-01-24 12:09 - 00000188 ___SH () C:\Documents and Settings\UpdatusUser\ntuser.ini 2015-03-03 11:33 - 2015-01-24 12:09 - 00000000 ___HD () C:\Documents and Settings\UpdatusUser\Ustawienia lokalne\Historia 2015-03-03 11:33 - 2015-01-24 11:35 - 00000000 ___SD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia 2015-03-03 11:33 - 2015-01-24 11:35 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp 2015-03-03 09:37 - 2015-01-24 12:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2015-03-03 09:31 - 2015-01-24 17:38 - 00000000 ___RD () C:\Documents and Settings\M\Menu Start\Programy 2015-03-03 09:31 - 2015-01-24 12:19 - 01114416 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2015-03-03 09:31 - 2015-01-24 12:18 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2015-03-03 09:31 - 2008-04-15 15:30 - 00501498 _____ () C:\WINDOWS\system32\perfh015.dat 2015-03-03 09:31 - 2008-04-15 15:30 - 00088124 _____ () C:\WINDOWS\system32\perfc015.dat 2015-03-03 08:06 - 2008-04-15 15:30 - 00000579 _____ () C:\WINDOWS\win.ini 2015-02-25 17:33 - 2008-04-15 15:30 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2015-02-11 17:10 - 2015-01-25 17:46 - 00000000 ____D () C:\WINDOWS\system32\MRT 2015-02-11 17:04 - 2015-01-25 17:46 - 113756392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-02-05 13:57 - 2015-01-24 17:38 - 00000000 ___HD () C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji 2015-02-05 13:27 - 2015-01-25 20:02 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2015-02-05 13:27 - 2015-01-25 20:02 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================