Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Administrator (administrator) on DOM-71E8046A6F8 on 08-04-2015 21:30:11
Running from C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Opera\Opera\temporary_downloads
Loaded Profiles: Administrator (Available profiles: Administrator)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 2 (X86) OS Language: Polski
Internet Explorer Version 6 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Lexmark International, Inc.) C:\WINDOWS\system32\LEXBCES.EXE
(Lexmark International, Inc.) C:\WINDOWS\system32\LEXPPS.EXE
(Atheros) C:\WINDOWS\system32\acs.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Program Files\MySQL\MySQL Server 5.4\bin\mysqld.exe
() C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
() C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
(Syntek America Inc.) C:\WINDOWS\system32\StkCSrv.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics.) C:\WINDOWS\Samsung\ComSMMgr\SSMMgr.exe
(Lexmark International, Inc.) C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
() C:\Program Files\PdaNet for Android\PdaNetPC.exe
(Lexmark International, Inc.) C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Opera Software) C:\Program Files\Opera\opera.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\Setup\instup.exe
(Farbar) C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Opera\Opera\temporary_downloads\FRST (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NeroFilterCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-01] (AVAST Software)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [Samsung Common SM] => C:\WINDOWS\Samsung\ComSMMgr\ssmmgr.exe [372736 2005-07-03] (Samsung Electronics.)
HKLM\...\Run: [Lexmark 1200 Series] => C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe [57344 2006-07-13] (Lexmark International, Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-823518204-688789844-682003330-500\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [15141768 2011-06-15] (Skype Technologies S.A.)
HKU\S-1-5-21-823518204-688789844-682003330-500\...\Run: [Facebook Update] => C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2014-11-28] (Facebook Inc.)
HKU\S-1-5-21-823518204-688789844-682003330-500\...\MountPoints2: {0bcfb1aa-ce53-11e1-99bf-028037ec0200} - K:\Startme.exe
HKU\S-1-5-21-823518204-688789844-682003330-500\...\MountPoints2: {688eb4e5-b400-11e2-9e17-0015afad2afc} - I:\Startme.exe
Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\PdaNet Desktop.lnk
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files\PdaNet for Android\PdaNetPC.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
AlternateShell: 

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://alawar.pl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-823518204-688789844-682003330-500\Software\Microsoft\Internet Explorer\Main,Start Page = http://alawar.pl
HKU\S-1-5-21-823518204-688789844-682003330-500\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKU\S-1-5-21-823518204-688789844-682003330-500 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-19] (Oracle Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16] (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-19] (Oracle Corporation)
BHO: IEPluginBHO Class -> {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} -> C:\Documents and Settings\Administrator\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll [2009-10-28] (GG Network S.A.)
DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File []
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16] (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\7w28wfyy.default
FF Homepage: www.google.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll [2015-01-27] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1215155.dll [2014-12-02] (Adobe Systems, Inc.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2012-04-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2012-09-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2012-09-19] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.2852 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll [2008-07-30] (RealNetworks, Inc.)
FF Plugin: @real.com/nppl3260;version=6.0.12.46 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll [2008-07-30] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2008-07-30] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2008-07-30] (RealNetworks, Inc.)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-07-27] (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-07-27] (globalUpdate)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2012-04-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-823518204-688789844-682003330-500: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2012-04-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-823518204-688789844-682003330-500: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Extension: EPUBReader - C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\7w28wfyy.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-03-18]
FF Extension: Video DownloadHelper - C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\7w28wfyy.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-04-02]
FF HKLM\...\Firefox\Extensions: [{3f963a5b-e555-4543-90e2-c3908898db71}] - C:\Program Files\AVG\AVG9\Firefox
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-12-06]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-20]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-01]

Opera: 
=======
StartMenuInternet: (HKLM) Opera.exe - D:\Diesel\Opera.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACS; C:\WINDOWS\system32\acs.exe [364629 2007-10-23] (Atheros) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-01] (AVAST Software)
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-07-27] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-07-27] (globalUpdate) [File not signed]
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [161768 2012-09-19] (Oracle Corporation)
R2 LexBceS; C:\WINDOWS\system32\LEXBCES.EXE [311296 2006-04-17] (Lexmark International, Inc.)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [53248 2005-06-20] (Hewlett-Packard Company) [File not signed]
R2 MySQL; C:\Program Files\MySQL\MySQL Server 5.4\my.ini [8948 2014-06-21] () [File not signed]
R2 OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] () [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [167936 2005-08-08] () [File not signed]
R2 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496 2007-08-03] ()
R2 StkSSrv; C:\WINDOWS\System32\StkCSrv.exe [24576 2007-04-19] (Syntek America Inc.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [327808 2005-07-20] (Aladdin Knowledge Systems Ltd.)
R3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [100096 2005-07-20] (Aladdin Knowledge Systems Ltd.)
R3 AR5211; C:\WINDOWS\System32\DRIVERS\ar5211.sys [549184 2007-10-26] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-08-01] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-08-01] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-08-01] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-08-01] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-11-21] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-08-01] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-08-01] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-08-01] ()
R3 AtcL002; C:\WINDOWS\System32\DRIVERS\l251x86.sys [30208 2007-08-21] (Atheros Communications, Inc.)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [281760 2013-09-26] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2004-08-03] (Microsoft Corporation)
S2 DgiVecp; C:\WINDOWS\System32\Drivers\DgiVecp.sys [41984 2005-03-14] (DeviceGuys, Inc.) [File not signed]
R2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [20936 2007-08-03] ()
R2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [685056 2005-07-28] (Aladdin Knowledge Systems Ltd.)
R2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2012-02-02] (Aladdin Knowledge Systems) [File not signed]
R3 kbfiltr; C:\WINDOWS\System32\DRIVERS\kbfiltr.sys [5632 2007-01-24] ( )
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25888 2013-09-26] ()
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ATKACPI.sys [5760 2007-08-24] ()
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2004-08-03] (Microsoft Corporation)
R3 pneteth; C:\WINDOWS\System32\DRIVERS\pneteth.sys [13440 2011-11-25] (June Fabrics Technology Inc.) [File not signed]
S3 s1018obex; C:\WINDOWS\System32\DRIVERS\s1018obex.sys [104744 2009-03-25] (MCCI Corporation)
S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [28624 2010-06-29] () [File not signed]
R3 StkCMini; C:\WINDOWS\System32\Drivers\StkCMini.sys [1260672 2007-06-06] (Syntek)
R3 vusbbus; C:\WINDOWS\System32\DRIVERS\vusbbus.sys [11520 2005-09-22] (Chingachguk & Denger2k) [File not signed]
S3 WRSWanDD; C:\WINDOWS\System32\DRIVERS\WrKPoETNic2000.sys [65604 2007-07-04] ()
R3 WSIMD; C:\WINDOWS\System32\DRIVERS\wsimd.sys [57344 2007-07-03] (Atheros Communications, Inc.)
S3 XXLHASP; c:\windows\system32\drivers\XXLHASP.sys [821248 2012-02-02] () [File not signed]
U5 dkpccard; C:\Windows\System32\Drivers\dkpccard.sys [7888 2005-10-20] (Data Encryption Systems Limited) [File not signed]
S4 IntelIde; No ImagePath
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-08 21:22 - 2015-04-08 21:22 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit\nowe raporty
2015-04-02 23:00 - 2015-04-08 19:25 - 00000492 _____ () C:\WINDOWS\setupact.log
2015-04-02 23:00 - 2015-04-02 23:00 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-04-02 22:53 - 2015-04-08 19:25 - 00063435 _____ () C:\WINDOWS\setupapi.log
2015-04-02 22:49 - 2015-04-02 22:49 - 00380416 _____ () C:\Documents and Settings\Administrator\Pulpit\ffoifvdq.exe
2015-04-02 22:47 - 2015-04-03 07:14 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit\raporty
2015-04-02 22:41 - 2015-04-08 21:31 - 00000000 ____D () C:\FRST
2015-04-02 21:29 - 2015-04-02 21:33 - 00000000 ____D () C:\Documents and Settings\Administrator\Moje dokumenty\Pobrane
2015-04-02 20:54 - 2015-04-08 20:54 - 00000794 _____ () C:\WINDOWS\Tasks\quiz_games_updating_service.job
2015-04-02 20:53 - 2015-04-05 21:28 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\quiz games
2015-04-02 20:22 - 2015-04-08 21:14 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-02 20:22 - 2015-04-02 20:22 - 00000730 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2015-04-02 20:22 - 2015-04-02 20:22 - 00000724 _____ () C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2015-04-02 19:50 - 2015-04-02 19:50 - 00001733 _____ () C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk
2015-04-02 15:55 - 2015-04-04 14:54 - 00000004 _____ () C:\WINDOWS\system32\029B560A371F4E00AB32838EBC01B9E7
2015-04-02 14:55 - 2015-04-08 20:55 - 00001438 _____ () C:\WINDOWS\Tasks\fun_coupons_notification_service.job
2015-04-02 14:55 - 2015-04-08 19:55 - 00000800 _____ () C:\WINDOWS\Tasks\fun_coupons_updating_service.job
2015-03-31 10:14 - 2015-03-31 10:14 - 00004387 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\ZwwMw8rLRrMZg
2015-03-31 10:14 - 2015-03-31 10:14 - 00004387 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\kXw3rrWBcGOcmQKPdKY
2015-03-31 10:14 - 2015-03-31 10:14 - 00004387 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\f80X2gBVs5F0Egckh
2015-03-31 10:14 - 2015-03-31 10:14 - 00004387 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\EEYUapomOpv0Nife

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-08 21:33 - 2009-09-04 16:41 - 00000000 ___RD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp
2015-04-08 21:28 - 2014-12-19 19:58 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-08 21:23 - 2009-09-04 16:41 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit
2015-04-08 20:56 - 2013-10-20 21:04 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-08 20:53 - 2014-07-27 14:48 - 00000942 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-04-08 20:49 - 2014-07-27 14:49 - 00001458 _____ () C:\WINDOWS\Tasks\6ec8ff1e-05c9-48a8-a914-abd17f5ec8f1-5.job
2015-04-08 20:48 - 2014-07-27 14:48 - 00003786 _____ () C:\WINDOWS\Tasks\6ec8ff1e-05c9-48a8-a914-abd17f5ec8f1-11.job
2015-04-08 20:48 - 2014-07-27 14:48 - 00002008 _____ () C:\WINDOWS\Tasks\6ec8ff1e-05c9-48a8-a914-abd17f5ec8f1-4.job
2015-04-08 20:48 - 2014-07-27 14:48 - 00001572 _____ () C:\WINDOWS\Tasks\6ec8ff1e-05c9-48a8-a914-abd17f5ec8f1-1.job
2015-04-08 20:48 - 2014-07-27 14:48 - 00001364 _____ () C:\WINDOWS\Tasks\6ec8ff1e-05c9-48a8-a914-abd17f5ec8f1-2.job
2015-04-08 20:07 - 2014-11-28 17:54 - 00001034 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-823518204-688789844-682003330-500UA.job
2015-04-08 19:57 - 2009-09-04 16:40 - 00032358 _____ () C:\WINDOWS\SchedLgU.Txt
2015-04-08 19:49 - 2013-12-03 18:20 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-04-08 19:25 - 2009-09-04 16:16 - 01392928 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-08 19:24 - 2013-06-20 16:01 - 00000000 ____D () C:\Documents and Settings\Administrator\Dane aplikacji\Skype
2015-04-08 19:21 - 2009-09-04 18:07 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-04-08 19:21 - 2009-09-04 18:07 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-04-08 19:20 - 2014-07-27 14:48 - 00000938 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-04-08 19:20 - 2013-10-20 21:04 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-08 19:20 - 2012-02-02 11:39 - 08405015 _____ () C:\WINDOWS\TempFile
2015-04-08 19:20 - 2009-09-04 16:41 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-08 19:20 - 2001-07-22 02:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-04-07 22:38 - 2009-09-04 16:41 - 00000188 ___SH () C:\Documents and Settings\Administrator\ntuser.ini
2015-04-07 19:41 - 2009-09-04 21:14 - 00193024 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-05 20:52 - 2011-11-28 12:19 - 00000000 ____D () C:\Documents and Settings\Administrator\Pulpit\Gry
2015-04-05 20:22 - 2012-04-23 21:59 - 00137194 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
2015-04-05 17:07 - 2014-11-28 17:54 - 00001012 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-823518204-688789844-682003330-500Core.job
2015-04-05 14:56 - 2009-09-04 16:41 - 00000000 ___HD () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji
2015-04-04 12:32 - 2011-03-07 22:50 - 00000000 ____D () C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie
2015-04-04 11:34 - 2012-02-22 18:41 - 00000116 _____ () C:\WINDOWS\NeroDigital.ini
2015-04-04 11:30 - 2013-10-17 18:54 - 00000000 ____D () C:\Documents and Settings\All Users\Kaspersky Lab Setup Files
2015-04-02 22:58 - 2001-10-26 20:15 - 00555118 _____ () C:\WINDOWS\system32\perfh015.dat
2015-04-02 22:58 - 2001-10-26 20:15 - 00104274 _____ () C:\WINDOWS\system32\perfc015.dat
2015-04-02 22:57 - 2009-09-04 18:04 - 01254156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-02 22:53 - 2009-09-04 18:04 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2015-04-02 22:53 - 2009-09-04 18:04 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy
2015-04-02 21:31 - 2014-12-19 19:57 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe
2015-04-02 21:29 - 2009-09-04 16:41 - 00000000 ___RD () C:\Documents and Settings\Administrator\Moje dokumenty
2015-04-02 20:54 - 2009-09-04 16:41 - 00000000 __RHD () C:\Documents and Settings\Administrator\Dane aplikacji
2015-04-02 20:19 - 2010-01-12 17:32 - 00000000 ___SD () C:\Documents and Settings\Administrator\UserData
2015-04-02 20:19 - 2009-09-04 16:41 - 00000000 ____D () C:\Documents and Settings\Administrator
2015-04-02 19:45 - 2009-09-04 16:40 - 00000000 __SHD () C:\Documents and Settings\LocalService
2015-04-02 19:45 - 2009-09-04 16:37 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2015-04-02 19:45 - 2009-09-04 16:12 - 00000000 ____D () C:\WINDOWS\Registration
2015-03-29 22:04 - 2009-09-04 16:41 - 00000000 ___RD () C:\Documents and Settings\Administrator\Moje dokumenty\Moje obrazy
2015-03-29 22:03 - 2009-09-04 17:02 - 00000000 ____D () C:\temp
2015-03-22 22:53 - 2009-09-04 16:16 - 00000000 __SHD () C:\Documents and Settings\All Users\DRM

==================== Files in the root of some directories =======

2015-03-31 10:14 - 2015-03-31 10:14 - 0004387 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\EEYUapomOpv0Nife
2015-03-31 10:14 - 2015-03-31 10:14 - 0004387 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\f80X2gBVs5F0Egckh
2015-03-31 10:14 - 2015-03-31 10:14 - 0004387 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\kXw3rrWBcGOcmQKPdKY
2015-03-31 10:14 - 2015-03-31 10:14 - 0004387 _____ () C:\Documents and Settings\Administrator\Dane aplikacji\ZwwMw8rLRrMZg
2009-09-04 21:14 - 2015-04-07 19:41 - 0193024 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-29 15:39 - 2013-10-29 15:39 - 0001263 _____ () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\recently-used.xbel

Some content of TEMP:
====================
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\drm_dyndata_7400009.dll
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.7.0.113.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.8.0.120.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.8.0.121.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.8.0.122.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.9.0.124.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.9.0.125.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.9.1.130.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.9.1.131.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.9.1.132.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.9.1.133.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\KMP_3.9.1.134.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\rtdrvmon.exe
C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================