Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Admin (administrator) on TOMASZ-2E83A091 on 07-04-2015 15:50:36
Running from C:\Documents and Settings\Admin\Pulpit
Loaded Profiles: Admin (Available profiles: Admin & użytkownik)
Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 7 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
() C:\WINDOWS\system32\WLTRYSVC.EXE
(Broadcom Corporation) C:\WINDOWS\system32\BCMWLTRY.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\Novatel Wireless\Novacore\Server\NvtlSrvr.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(ATI Technologies, Inc.) C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(Broadcom Corporation) C:\WINDOWS\system32\WLTRAY.EXE
() C:\Program Files\Launch Manager\LaunchAp.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
(Wistron) C:\Program Files\Launch Manager\OSD.exe
() C:\Program Files\Launch Manager\OSDCtrl.exe
() C:\Program Files\Launch Manager\WButton.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(EnTech Taiwan) C:\Program Files\PowerStrip\PStrip.exe
(FUJIFILM Corporation) C:\Program Files\FinePixViewer\QuickDCF2.exe
(Telespree Communications) C:\Program Files\Telespree\Self Service Assistant - Data Usage Meter\SSADataMeter.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
(Steamcore.se) C:\Documents and Settings\Admin\Moje dokumenty\Pobrane\screamer044\screamer.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ATIPTA] => C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [339968 2005-04-05] (ATI Technologies, Inc.)
HKLM\...\Run: [SoundMan] => C:\WINDOWS\SOUNDMAN.EXE [77824 2005-03-24] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\WINDOWS\system32\WLTRAY
HKLM\...\Run: [LaunchAp] => C:\Program Files\Launch Manager\LaunchAp.exe [32768 2005-03-30] ()
HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [57344 2005-05-02] (Wistron)
HKLM\...\Run: [LMgrVolOSD] => C:\Program Files\Launch Manager\OSD.exe [204800 2005-03-16] (Wistron)
HKLM\...\Run: [LMgrOSD] => C:\Program Files\Launch Manager\OSDCtrl.exe [245760 2004-10-11] ()
HKLM\...\Run: [Wbutton] => C:\Program Files\Launch Manager\Wbutton.exe [81920 2005-04-18] ()
HKLM\...\Run: [CtrlVol] => C:\Program Files\Launch Manager\CtrlVol.exe [20480 2003-09-16] (Wistron)
HKLM\...\Run: [LogitechQuickCamRibbon] => C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304 2009-10-14] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-12-03] (AVAST Software)
HKLM\...\Run: [PowerStrip] => c:\program files\powerstrip\pstrip.exe [743104 2012-06-14] (EnTech Taiwan)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-527237240-651377827-682003330-1008\...\Run: [MobiLink 3] => C:\Program Files\Novatel Wireless\MobiLink3\MobiLink3.exe [1857360 2010-04-23] (Novatel Wireless Inc.)
HKU\S-1-5-21-527237240-651377827-682003330-1008\...\MountPoints2: {8f7c4b7f-9e2e-11e3-907a-00c0a8abe5f8} - E:\LiteAuto.exe
HKU\S-1-5-21-527237240-651377827-682003330-1008\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssmypics.scr [47104 2008-04-14] (Microsoft Corporation)
Startup: C:\Documents and Settings\Admin\Menu Start\Programy\Autostart\Self Service Assistant - Data Usage Meter.lnk
ShortcutTarget: Self Service Assistant - Data Usage Meter.lnk -> C:\Documents and Settings\Admin\Dane aplikacji\Microsoft\Installer\{BDE9D8BB-F146-4BBE-A527-CC89ADC0AB84}\_16496df1.exe ()
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ExifLauncher2.lnk
ShortcutTarget: ExifLauncher2.lnk -> C:\Program Files\FinePixViewer\QuickDCF2.exe (FUJIFILM Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKU\S-1-5-21-527237240-651377827-682003330-1008 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-10-05] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-07] (Sun Microsystems, Inc.)
BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll [2011-02-09] (ALLCinema Ltd.)
BHO: JQSIEStartDetectorImpl Class -> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -> C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-03-07] (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\qfu0jtyj.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF user.js: detected! => C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\qfu0jtyj.default\user.js [2015-01-14]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeploytk.dll [2011-03-07] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdjvu.dll [2009-07-31] (LizardTech)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npFoxitReaderPlugin.dll [2011-03-07] (Foxit Software Company)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.)
FF Extension: FF Toolbar - C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\qfu0jtyj.default\Extensions\fftoolbar2014@etech.com [2015-01-13]
FF Extension: Google Translator for Firefox - C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\qfu0jtyj.default\Extensions\translator@zoli.bod.xpi [2015-02-12]
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2011-03-07]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-03-15]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-01-31]

Chrome: 
=======
CHR Profile: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-25]
CHR Extension: (Google Docs) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-25]
CHR Extension: (Google Drive) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-25]
CHR Extension: (YouTube) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-25]
CHR Extension: (Google Search) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-25]
CHR Extension: (Google Sheets) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-25]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-25]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-25]
CHR Extension: (Gmail) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-25]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-05]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-05] (AVAST Software)
R2 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2011-03-07] (Sun Microsystems, Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvtlService; C:\Program Files\Novatel Wireless\Novacore\Server\NvtlSrvr.exe [91472 2010-04-23] ()
R2 wltrysvc; C:\WINDOWS\System32\bcmwltry.exe [827499 2004-12-22] (Broadcom Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [17801 2011-03-07] (Meetinghouse Data Communications) [File not signed]
R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [2314560 2005-03-25] (Realtek Semiconductor Corp.)
R3 AR5211; C:\WINDOWS\System32\DRIVERS\ar5211.sys [463168 2005-05-05] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-10-05] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-10-05] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-10-05] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-10-05] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-12-03] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-12-03] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-10-05] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-10-05] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R0 giveio; C:\WINDOWS\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R1 Hotkey; C:\WINDOWS\system32\Drivers\Hotkey.sys [9867 2003-04-28] () [File not signed]
R3 HSFHWATI; C:\WINDOWS\System32\DRIVERS\HSFHWATI.sys [200192 2004-12-15] (Conexant Systems, Inc.)
R3 LVPr2Mon; C:\WINDOWS\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 NWRmNet; C:\WINDOWS\System32\DRIVERS\NWRmNet.sys [118784 2009-11-10] (Novatel Wireless Inc.)
S3 NWUSBPort2; C:\WINDOWS\System32\DRIVERS\nwusbser2.sys [174720 2009-11-10] (Novatel Wireless Inc.)
S3 PCASp50; C:\WINDOWS\System32\Drivers\PCASp50.sys [27072 2010-04-23] (Printing Communications Assoc., Inc. (PCAUSA))
S3 pepifilter; C:\WINDOWS\System32\DRIVERS\lv302af.sys [13976 2009-05-01] (Logitech Inc.)
S3 PID_PEPI; C:\WINDOWS\System32\DRIVERS\LV302V32.SYS [2687512 2009-05-01] (Logitech Inc.)
R2 PStrip; C:\WINDOWS\System32\drivers\pstrip.sys [27992 2007-07-15] (EnTech Taiwan)
R3 RTL8023xp; C:\WINDOWS\System32\DRIVERS\Rtlnicxp.sys [70912 2004-12-02] (Realtek Semiconductor Corporation                           )
S3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-04] (Realtek Semiconductor Corporation)
S3 Ser2pl; C:\WINDOWS\System32\DRIVERS\ser2pl.sys [48896 2005-11-01] (Prolific Technology Inc.) [File not signed]
R0 speedfan; C:\WINDOWS\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Corporation)
S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [X]
S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [X]
S3 BT; system32\DRIVERS\btnetdrv.sys [X]
S3 Btcsrusb; System32\Drivers\btcusb.sys [X]
S0 BTHidEnum; System32\Drivers\vbtenum.sys [X]
S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
S3 GPU-Z; \??\C:\DOCUME~1\Admin\USTAWI~1\Temp\GPU-Z.sys [X]
S4 IntelIde; No ImagePath
S1 mailKmd; No ImagePath
S3 massfilter; system32\drivers\massfilter.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 VComm; system32\DRIVERS\VComm.sys [X]
S3 VcommMgr; System32\Drivers\VcommMgr.sys [X]
S1 Wbutton; \SystemRoot\system32\drivers\Wbutton.sys [X]
U1 WS2IFSL; No ImagePath
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-07 15:50 - 2015-04-07 15:51 - 00018352 _____ () C:\Documents and Settings\Admin\Pulpit\FRST.txt
2015-04-07 15:48 - 2015-04-07 15:48 - 00000138 _____ () C:\Documents and Settings\Admin\Pulpit\paradoks.txt
2015-04-07 15:07 - 2015-04-07 15:50 - 00000000 ____D () C:\FRST
2015-04-07 13:36 - 2015-04-07 13:36 - 00380416 _____ () C:\Documents and Settings\Admin\Pulpit\ne98z9w0.exe
2015-04-07 12:33 - 2015-04-07 12:33 - 01135104 _____ (Farbar) C:\Documents and Settings\Admin\Pulpit\FRST.exe
2015-04-03 20:36 - 2015-04-03 20:37 - 16080824 _____ () C:\Documents and Settings\Admin\Moje dokumenty\busko.rar
2015-04-03 20:32 - 2015-04-03 20:32 - 00000682 _____ () C:\Documents and Settings\Admin\Pulpit\WinRAR.lnk
2015-04-03 20:32 - 2015-04-03 20:32 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\WinRAR
2015-04-03 20:32 - 2015-04-03 20:32 - 00000000 ____D () C:\Documents and Settings\Admin\Menu Start\Programy\WinRAR
2015-04-03 20:32 - 2015-04-03 20:32 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\WinRAR
2015-04-02 01:07 - 2015-04-02 01:07 - 00004096 ___SH () C:\Documents and Settings\Admin\Moje dokumenty\Thumbs.db
2015-03-31 23:50 - 2015-03-31 23:50 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Astroburn Lite
2015-03-22 13:42 - 2015-03-22 13:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-03-21 19:16 - 2015-04-02 19:35 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\vlc
2015-03-21 19:13 - 2015-03-21 19:13 - 00000000 ____D () C:\Program Files\VideoLAN
2015-03-21 18:34 - 2015-03-21 18:34 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\MPC-HC
2015-03-21 18:33 - 2015-03-21 18:33 - 00001538 _____ () C:\Documents and Settings\Admin\Pulpit\MPC-HC.lnk
2015-03-21 18:33 - 2015-03-21 18:33 - 00000000 ____D () C:\Program Files\MPC-HC
2015-03-21 18:33 - 2015-03-21 18:33 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\MPC-HC
2015-03-21 17:34 - 2015-03-21 17:34 - 00000000 ____D () C:\Program Files\ffdshow
2015-03-21 17:34 - 2015-03-21 17:34 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\ffdshow
2015-03-21 17:34 - 2014-06-28 17:39 - 00112640 _____ () C:\WINDOWS\system32\ff_vfw.dll
2015-03-21 17:34 - 2013-04-16 18:32 - 00000714 _____ () C:\WINDOWS\system32\ff_vfw.dll.manifest
2015-03-21 17:33 - 2015-03-21 17:33 - 00000809 _____ () C:\Documents and Settings\Admin\Pulpit\Skrót do xOymiRwH.mp4.lnk
2015-03-21 16:52 - 2015-03-21 17:00 - 00009427 _____ () C:\Documents and Settings\użytkownik\Dane aplikacji\pstrip.ini
2015-03-21 16:52 - 2015-03-21 11:30 - 00009359 _____ () C:\Documents and Settings\użytkownik\Dane aplikacji\pstrip.bak
2015-03-21 16:36 - 2015-03-21 16:36 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Winamp
2015-03-08 20:28 - 2015-03-08 20:28 - 00000784 _____ () C:\Documents and Settings\Admin\Pulpit\Skrót do screamer.exe.lnk
2015-03-08 14:42 - 2015-03-09 02:01 - 00065536 _____ () C:\WINDOWS\system32\config\WindowsPowerShell.evt
2015-03-08 14:42 - 2015-03-08 14:42 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB926139-v2$
2015-03-08 14:42 - 2015-03-08 14:42 - 00000000 ____D () C:\WINDOWS\system32\windowspowershell
2015-03-08 14:42 - 2015-03-08 14:42 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Windows PowerShell 1.0
2015-03-08 14:41 - 2015-03-08 14:43 - 00031486 _____ () C:\WINDOWS\KB926139-v2.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-07 15:51 - 2013-08-31 11:39 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Temp
2015-04-07 15:50 - 2013-08-31 11:39 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit
2015-04-07 15:44 - 2012-08-11 12:22 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-07 15:37 - 2012-07-20 19:28 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-04-07 15:21 - 2013-11-16 13:58 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cee2c337e6ac8c.job
2015-04-07 14:59 - 2014-08-30 13:41 - 00001152 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-527237240-651377827-682003330-1009UA.job
2015-04-07 13:41 - 2014-12-23 15:41 - 00153866 _____ () C:\WINDOWS\setupapi.log
2015-04-07 11:59 - 2011-03-07 10:04 - 01829539 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-07 11:58 - 2013-11-16 13:58 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cee2c335acda86.job
2015-04-07 11:58 - 2011-03-07 10:53 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-04-07 11:58 - 2011-03-07 10:53 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-04-07 11:58 - 2011-03-07 10:18 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-07 11:56 - 2013-08-31 11:39 - 00000188 ___SH () C:\Documents and Settings\Admin\ntuser.ini
2015-04-07 11:56 - 2011-03-07 10:18 - 00032076 _____ () C:\WINDOWS\SchedLgU.Txt
2015-04-07 01:01 - 2013-08-31 11:39 - 00000000 ___RD () C:\Documents and Settings\Admin\Moje dokumenty\Moje obrazy
2015-04-06 23:22 - 2014-12-16 19:17 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Skype
2015-04-06 21:21 - 2013-08-31 11:39 - 00000000 ___HD () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji
2015-04-06 21:07 - 2014-12-16 19:31 - 00000000 ____D () C:\Documents and Settings\Admin\Moje dokumenty\Pobrane
2015-04-06 20:22 - 2011-03-07 10:50 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2015-04-06 20:22 - 2011-03-07 10:50 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-04-06 19:44 - 2013-08-31 11:39 - 00000000 __RHD () C:\Documents and Settings\Admin\Dane aplikacji
2015-04-06 15:59 - 2014-08-30 13:41 - 00001100 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-527237240-651377827-682003330-1009Core.job
2015-04-06 10:56 - 2014-12-31 15:02 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk
2015-04-06 00:43 - 2013-08-31 11:39 - 00000000 ____D () C:\Documents and Settings\Admin
2015-04-05 16:33 - 2004-08-04 14:00 - 00000710 _____ () C:\WINDOWS\win.ini
2015-04-04 12:12 - 2011-03-07 12:34 - 00000000 ____D () C:\Program Files\WinRAR
2015-04-04 03:35 - 2013-08-31 11:39 - 00000000 ___RD () C:\Documents and Settings\Admin\Moje dokumenty
2015-04-04 03:30 - 2014-12-24 03:49 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Skype
2015-04-04 02:56 - 2014-02-22 13:28 - 00000000 ____D () C:\Program Files\SpeedFan
2015-04-03 20:32 - 2013-08-31 11:39 - 00000000 ___RD () C:\Documents and Settings\Admin\Menu Start\Programy
2015-03-31 23:50 - 2011-03-07 10:49 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2015-03-31 23:43 - 2011-03-07 10:50 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty
2015-03-31 19:13 - 2014-12-23 15:14 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\DAEMON Tools Lite
2015-03-28 13:09 - 2013-08-31 11:59 - 00000000 ____D () C:\Documents and Settings\użytkownik\Ustawienia lokalne\Temp
2015-03-24 11:49 - 2012-06-11 18:53 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-03-21 17:00 - 2013-08-31 11:59 - 00000188 ___SH () C:\Documents and Settings\użytkownik\ntuser.ini
2015-03-21 16:56 - 2013-09-21 16:10 - 00011264 _____ () C:\Documents and Settings\użytkownik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-03-21 16:52 - 2013-08-31 11:59 - 00000000 __RHD () C:\Documents and Settings\użytkownik\Dane aplikacji
2015-03-21 16:43 - 2011-04-03 19:14 - 00000000 ____D () C:\Program Files\ALLPlayer
2015-03-21 16:39 - 2011-03-07 10:01 - 00017561 _____ () C:\WINDOWS\wmsetup.log
2015-03-17 19:24 - 2011-12-15 14:27 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat
2015-03-09 13:28 - 2011-03-08 21:04 - 00118459 _____ () C:\WINDOWS\spupdsvc.log
2015-03-08 15:03 - 2011-03-07 10:08 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2015-03-08 14:43 - 2011-03-07 10:50 - 00956223 _____ () C:\WINDOWS\FaxSetup.log
2015-03-08 14:43 - 2011-03-07 10:50 - 00471681 _____ () C:\WINDOWS\ocgen.log
2015-03-08 14:43 - 2011-03-07 10:50 - 00371108 _____ () C:\WINDOWS\tsoc.log
2015-03-08 14:43 - 2011-03-07 10:50 - 00207244 _____ () C:\WINDOWS\comsetup.log
2015-03-08 14:43 - 2011-03-07 10:50 - 00150261 _____ () C:\WINDOWS\iis6.log
2015-03-08 14:43 - 2011-03-07 10:50 - 00124588 _____ () C:\WINDOWS\ntdtcsetup.log
2015-03-08 14:43 - 2011-03-07 10:50 - 00048251 _____ () C:\WINDOWS\msgsocm.log
2015-03-08 14:43 - 2011-03-07 10:50 - 00037101 _____ () C:\WINDOWS\ocmsn.log
2015-03-08 14:43 - 2011-03-07 10:50 - 00001355 _____ () C:\WINDOWS\imsins.log

==================== Files in the root of some directories =======

2002-08-20 10:56 - 2002-08-20 10:56 - 0099840 ____N (Symantec Corp.) C:\Program Files\Common Files\IRAABOUT.DLL
2002-08-20 10:56 - 2002-08-20 10:56 - 0048640 ____N (Symantec Corp., Peter Norton Computing Group) C:\Program Files\Common Files\IRALPTTR.DLL
2002-08-20 10:56 - 2002-08-20 10:56 - 0070144 ____N (Symantec Corp., Peter Norton Computing Group) C:\Program Files\Common Files\IRAMDMTR.DLL
2002-08-20 10:56 - 2002-08-20 10:56 - 0186368 ____N (Symantec Corp., Peter Norton Computing Group) C:\Program Files\Common Files\IRAREG.DLL
2002-08-20 10:56 - 2002-08-20 10:56 - 0017920 ____N (Symantec Corp.) C:\Program Files\Common Files\IRASRIAL.DLL
2002-08-20 10:56 - 2002-08-20 10:56 - 0031744 ____N (Symantec Corp., Peter Norton Computing Group) C:\Program Files\Common Files\IRAWEBTR.DLL
2014-12-27 15:27 - 2014-12-27 15:27 - 0003584 _____ () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some content of TEMP:
====================
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\AstroburnLite180-0183.exe
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\sfamcc00001.dll
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\sfamcc00002.dll
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\sfextra.dll
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\SkypeSetup.exe
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\uninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================