Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-08-2014
Ran by Gacek227 (administrator) on GACEK on 14-11-2014 20:40:14
Running from C:\Documents and Settings\Gacek227\Moje dokumenty\Pobrane
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 6
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Atheros) C:\WINDOWS\system32\acs.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Skype Technologies) C:\Program Files\Skype\Updater\Updater.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-30] (AVAST Software)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20065936 2012-06-06] (Realtek Semiconductor Corp.)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3835728 2014-11-03] (LogMeIn Inc.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2593056 2014-07-02] ()
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-1229272821-117609710-839522115-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1229272821-117609710-839522115-1003\...\MountPoints2: {5461940a-0905-11e4-9f21-001485b5cd1f} - G:\AutoRun.exe
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\TP-LINK Wireless Configuration Utility.lnk
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Documents and Settings\Gacek227\Dane aplikacji\Mozilla\Firefox\Profiles\6cav0gh8.default
FF Homepage: hxxp://www.onet.pl/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\ddg.xml
FF Extension: PEKAO S.A. Sign Plugin - C:\Documents and Settings\Gacek227\Dane aplikacji\Mozilla\Firefox\Profiles\6cav0gh8.default\Extensions\SignPlugin@pekao.pl [2014-05-15]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-10]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-06-23]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-26]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 acs; C:\WINDOWS\system32\acs.exe [499796 2011-12-26] (Atheros) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-26] (AVAST Software)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1894224 2014-11-03] (LogMeIn Inc.)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-07-11] (Oracle Corporation)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [411920 2014-10-21] (LogMeIn, Inc.)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
S3 AR9271; C:\WINDOWS\System32\DRIVERS\athuw.sys [1763584 2012-10-18] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-07-26] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-07-26] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-07-26] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-07-26] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-07-26] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-07-26] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-07-26] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-07-26] ()
R1 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2014-05-11] (Disc Soft Ltd)
R3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 JSWSCIMD; C:\WINDOWS\System32\DRIVERS\jswscimd.sys [57440 2011-12-26] (Atheros Communications, Inc.)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R3 WSIMD; C:\WINDOWS\System32\DRIVERS\wsimd.sys [58208 2011-12-26] (Atheros Communications, Inc.) [File not signed]
S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X]
S4 IntelIde; No ImagePath
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
S3 MEMSWEEP2; \??\C:\WINDOWS\system32\E.tmp [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL; No ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-14 20:40 - 2014-11-14 20:40 - 00000000 ____D () C:\FRST
2014-11-14 20:14 - 2014-11-14 20:37 - 00000000 ____D () C:\AdwCleaner
2014-11-14 18:38 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\LocalService\Menu Start\Programy
2014-11-14 18:38 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\LocalService\Menu Start
2014-11-14 18:38 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Spybot - Search & Destroy 2
2014-11-14 18:38 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Sophos
2014-11-14 17:57 - 2014-11-14 20:39 - 00000644 _____ () C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-11-14 17:57 - 2014-11-14 18:38 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-11-14 17:57 - 2014-11-14 18:31 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt
2014-11-14 17:57 - 2014-11-14 18:30 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2014-11-14 17:57 - 2014-11-14 17:57 - 00001842 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Spybot-S&D Start Center.lnk
2014-11-14 17:57 - 2014-11-14 17:57 - 00001836 _____ () C:\Documents and Settings\All Users\Pulpit\Spybot-S&D Start Center.lnk
2014-11-14 17:57 - 2014-11-14 17:57 - 00000616 _____ () C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-11-14 17:57 - 2014-11-14 17:57 - 00000446 _____ () C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-11-14 17:57 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-11-14 17:27 - 2014-11-14 17:27 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-11-14 16:53 - 2014-11-14 16:53 - 00000000 ____D () C:\Program Files\Sophos
2014-11-14 16:52 - 2014-11-14 16:53 - 03651002 _____ () C:\WINDOWS\system32\XJEJS
2014-11-10 21:17 - 2014-11-11 14:27 - 00000163 _____ () C:\Documents and Settings\Gacek227\Pulpit\Path of Exile.url
2014-11-10 18:07 - 2014-11-10 18:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-09 22:29 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\Gacek227\Ustawienia lokalne\Dane aplikacji\Heroes and Generals
2014-11-09 14:33 - 2014-11-09 16:33 - 00000146 _____ () C:\Documents and Settings\Gacek227\Pulpit\Dota 2.url
2014-11-07 22:43 - 2014-11-07 22:43 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-11-07 22:43 - 2014-07-02 19:40 - 03826628 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-11-07 22:40 - 2014-07-02 21:43 - 01054552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco3234052.dll
2014-11-07 22:40 - 2014-07-02 21:43 - 00906584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco3234052.dll
2014-11-06 15:21 - 2014-11-06 15:40 - 00000000 ____D () C:\Documents and Settings\Gacek227\Ustawienia lokalne\Dane aplikacji\CSO
2014-11-06 15:21 - 2014-11-06 15:21 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Nexon
2014-11-04 20:50 - 2014-11-04 20:50 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-11-04 20:50 - 2014-11-04 20:50 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-14 20:40 - 2014-11-14 20:40 - 00000000 ____D () C:\FRST
2014-11-14 20:40 - 2014-06-11 21:54 - 00000000 ____D () C:\Documents and Settings\Gacek227\Moje dokumenty\Pobrane
2014-11-14 20:40 - 2014-05-10 13:53 - 00000000 ____D () C:\Documents and Settings\Gacek227\Ustawienia lokalne\Temp
2014-11-14 20:39 - 2014-11-14 17:57 - 00000644 _____ () C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-11-14 20:38 - 2014-05-10 15:47 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi
2014-11-14 20:38 - 2014-05-10 15:47 - 00000000 ____D () C:\Documents and Settings\Gacek227\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi
2014-11-14 20:38 - 2014-05-10 15:11 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-11-14 20:38 - 2014-05-10 13:50 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-14 20:38 - 2014-05-10 13:44 - 00413560 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-14 20:38 - 2004-12-31 23:21 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-11-14 20:38 - 2004-12-31 23:21 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-11-14 20:37 - 2014-11-14 20:14 - 00000000 ____D () C:\AdwCleaner
2014-11-14 20:37 - 2014-05-10 15:45 - 00458752 _____ () C:\WINDOWS\system32\config\ACS.evt
2014-11-14 20:37 - 2014-05-10 13:53 - 00000188 ___SH () C:\Documents and Settings\Gacek227\ntuser.ini
2014-11-14 20:37 - 2014-05-10 13:50 - 00032548 _____ () C:\WINDOWS\SchedLgU.Txt
2014-11-14 20:37 - 2004-12-31 23:18 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-11-14 20:34 - 2014-05-10 16:00 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-14 20:31 - 2002-09-29 01:00 - 00554124 _____ () C:\WINDOWS\system32\perfh015.dat
2014-11-14 20:31 - 2002-09-29 01:00 - 00103936 _____ () C:\WINDOWS\system32\perfc015.dat
2014-11-14 20:30 - 2014-05-10 15:09 - 00015344 _____ () C:\WINDOWS\system32\nvAppTimestamps
2014-11-14 20:30 - 2004-12-31 23:19 - 01251944 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-14 20:20 - 2014-05-11 13:38 - 00000000 ____D () C:\Documents and Settings\Gacek227\Dane aplikacji\uTorrent
2014-11-14 19:10 - 2014-05-10 15:06 - 01398944 _____ () C:\WINDOWS\system32\nvdrsdb1.bin
2014-11-14 19:10 - 2014-05-10 15:06 - 01398944 _____ () C:\WINDOWS\system32\nvdrsdb0.bin
2014-11-14 19:10 - 2014-05-10 15:06 - 00000001 _____ () C:\WINDOWS\system32\nvdrssel.bin
2014-11-14 18:52 - 2014-05-10 13:53 - 00000000 ____D () C:\Documents and Settings\Gacek227\Pulpit
2014-11-14 18:42 - 2004-12-31 23:18 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-11-14 18:42 - 2004-12-31 23:18 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-11-14 18:38 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\LocalService\Menu Start\Programy
2014-11-14 18:38 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\LocalService\Menu Start
2014-11-14 18:38 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Spybot - Search & Destroy 2
2014-11-14 18:38 - 2014-11-14 18:38 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Sophos
2014-11-14 18:38 - 2014-11-14 17:57 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-11-14 18:38 - 2014-11-09 22:29 - 00000000 ____D () C:\Documents and Settings\Gacek227\Ustawienia lokalne\Dane aplikacji\Heroes and Generals
2014-11-14 18:38 - 2014-05-10 13:53 - 00000000 ___HD () C:\Documents and Settings\Gacek227\Ustawienia lokalne\Dane aplikacji
2014-11-14 18:38 - 2014-05-10 13:53 - 00000000 ____D () C:\Documents and Settings\Gacek227
2014-11-14 18:38 - 2014-05-10 13:50 - 00000000 __SHD () C:\Documents and Settings\LocalService
2014-11-14 18:36 - 2014-05-10 13:42 - 00000000 ____D () C:\WINDOWS\system32\Restore
2014-11-14 18:31 - 2014-11-14 17:57 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt
2014-11-14 18:31 - 2004-12-31 23:12 - 00000000 ____D () C:\WINDOWS\twain_32
2014-11-14 18:30 - 2014-11-14 17:57 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2014-11-14 17:57 - 2014-11-14 17:57 - 00001842 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Spybot-S&D Start Center.lnk
2014-11-14 17:57 - 2014-11-14 17:57 - 00001836 _____ () C:\Documents and Settings\All Users\Pulpit\Spybot-S&D Start Center.lnk
2014-11-14 17:57 - 2014-11-14 17:57 - 00000616 _____ () C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-11-14 17:57 - 2014-11-14 17:57 - 00000446 _____ () C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-11-14 17:27 - 2014-11-14 17:27 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-11-14 16:53 - 2014-11-14 16:53 - 00000000 ____D () C:\Program Files\Sophos
2014-11-14 16:53 - 2014-11-14 16:52 - 03651002 _____ () C:\WINDOWS\system32\XJEJS
2014-11-11 22:34 - 2014-05-10 16:00 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-11-11 22:34 - 2014-05-10 16:00 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-11-11 15:25 - 2014-05-11 19:47 - 00000000 ____D () C:\Documents and Settings\Gacek227\Moje dokumenty\My Games
2014-11-11 14:27 - 2014-11-10 21:17 - 00000163 _____ () C:\Documents and Settings\Gacek227\Pulpit\Path of Exile.url
2014-11-10 18:40 - 2014-05-10 15:19 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-10 18:07 - 2014-11-10 18:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-09 22:24 - 2014-05-10 13:53 - 00000000 __RHD () C:\Documents and Settings\Gacek227\Dane aplikacji
2014-11-09 16:33 - 2014-11-09 14:33 - 00000146 _____ () C:\Documents and Settings\Gacek227\Pulpit\Dota 2.url
2014-11-09 00:09 - 2014-05-10 13:44 - 00000000 ____D () C:\WINDOWS\system32\DirectX
2014-11-08 14:50 - 2014-05-18 00:53 - 00288314 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1229272821-117609710-839522115-1003-0.dat
2014-11-08 14:50 - 2014-05-18 00:53 - 00151994 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
2014-11-07 22:43 - 2014-11-07 22:43 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-11-07 22:43 - 2014-05-10 15:04 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-07 22:41 - 2014-05-10 15:09 - 00000000 ____D () C:\WINDOWS\system32\ReinstallBackups
2014-11-06 23:22 - 2014-05-29 21:46 - 00065536 _____ () C:\WINDOWS\system32\config\OAlerts.evt
2014-11-06 15:40 - 2014-11-06 15:21 - 00000000 ____D () C:\Documents and Settings\Gacek227\Ustawienia lokalne\Dane aplikacji\CSO
2014-11-06 15:33 - 2014-05-17 17:22 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Package Cache
2014-11-06 15:21 - 2014-11-06 15:21 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Nexon
2014-11-04 20:50 - 2014-11-04 20:50 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-11-04 20:50 - 2014-11-04 20:50 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi
2014-10-30 19:49 - 2014-05-29 21:41 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2014-10-29 16:32 - 2014-05-10 13:53 - 00000000 ___RD () C:\Documents and Settings\Gacek227\Moje dokumenty\Moja muzyka
2014-10-26 22:11 - 2014-05-10 15:45 - 00000000 ____D () C:\Documents and Settings\Gacek227\Dane aplikacji\TS3Client
2014-10-26 21:28 - 2014-05-18 13:35 - 00000000 ____D () C:\Documents and Settings\Gacek227\Dane aplikacji\GG
2014-10-26 17:55 - 2002-09-29 01:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
Some content of TEMP:
====================
C:\Documents and Settings\Gacek227\Ustawienia lokalne\Temp\Quarantine.exe
C:\Documents and Settings\Gacek227\Ustawienia lokalne\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End Of Log ============================