Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by Raster (administrator) on SKLAD_01 on 15-10-2013 20:08:52
Running from C:\Documents and Settings\Raster\Pulpit\Logi\FRST
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Online Armor\OAcat.exe
(Emsisoft GmbH) C:\Program Files\Online Armor\oasrv.exe
(Microsoft Corporation) C:\WINDOWS\System32\SCardSvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Emsisoft GmbH) C:\Program Files\Online Armor\OAui.exe
(Emsisoft GmbH) C:\Program Files\Online Armor\OAhlp.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Nullsoft) C:\Program Files\Winamp\winamp.exe
() C:\PROGRAM FILES\STREAMRIPPER\wstreamripper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [x]
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-01] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [@OnlineArmor GUI] - C:\Program Files\Online Armor\OAui.exe [7558464 2013-10-15] (Emsisoft GmbH)
Winlogon\Notify\avgrsstarter: C:\Windows\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
HKCU\...\Policies\Explorer: [ForceClassicControlPanel] 1
Lsa: [Authentication Packages] msv1_0 relog_ap
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
BootExecute: autocheck autochk /p \??\C:autocheck autochk * 

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
SearchScopes: HKCU - DefaultScope {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6a1806cd-94d4-4689-ba73-e35ea1ea9990} URL = 
SearchScopes: HKCU - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\AdobeCS2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MI7967~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\AdobeCS2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU -&Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU -&Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU -Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\AdobeCS2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} http://mks.com.pl/skaner/SkanerOnline.cab
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: OA Shell Helper - {4F07DA45-8170-4859-9B5F-037EF2970034} - C:\PROGRA~1\Online Armor\oaevent.dll [1033968 2013-10-15] (Emsisoft GmbH)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 14 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 62.179.1.60

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default
FF SelectedSearchEngine: Google
FF Homepage: user_pref("browser.startup.homepage", "");
FF Keyword.URL: hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avgb&type=yahoo_avg_hs2-tb-web_us&p=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MI7967~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nosltd.com/getPlus+(R),version=1.6.2.91 - C:\Program Files\NOS\bin\np_gp.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml
FF Extension: Firebug - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\firebug@software.joehewitt(2).com
FF Extension: Clear Private Data... + - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{0dd39226-2650-404d-a43d-ffd906b35a9e}
FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}(2)
FF Extension: Web Developer Toolbar - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{30ef946c-8361-4be4-9666-8c1a35784f7a}
FF Extension: SeoQuake - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}
FF Extension: Flashblock - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
FF Extension: HostIP.info Geolocation Plugin - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{49eba0b5-0393-4e13-8cc4-06298a281c5d}
FF Extension: NoScript - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}(2)
FF Extension: Toggle Web Developer Toolbar - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{c75a27d8-4529-449f-b67b-aba65d7a1c0a}
FF Extension: Page Speed - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}
FF Extension: contextfont - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\contextfont@easel.org.xpi
FF Extension: devtoolsmenu - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\devtoolsmenu@AccessFirefox.org.xpi
FF Extension: firebug - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: No Name - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}.xpi
FF Extension: No Name - C:\Documents and Settings\Raster\Dane aplikacji\Mozilla\Firefox\Profiles\tzouqxbm.default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff

Chrome: 
=======
CHR HomePage: about:blank
CHR DefaultSearchURL: (Google) - {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR Plugin: (Chrome PDF Viewer) - C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\8.0.552.224\pdf.dll No File
CHR Plugin: (Google Gears 0.5.33.0) - C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\8.0.552.224\gears.dll No File
CHR Plugin: (Shockwave Flash) - C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\8.0.552.224\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\AdobeCS2\Adobe Acrobat 7.0\Acrobat\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (DevalVR 3D Plugin) - C:\Program Files\Mozilla Firefox\plugins\npdevalvr.dll (www.devalvr.com)
CHR Plugin: (QuickTime Plug-in 7.6.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (getPlusPlus for Adobe 16291) - C:\Program Files\Mozilla Firefox\plugins\np_gp.dll No File
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\Google\Update\1.2.183.39\npGoogleOneClick8.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MI7967~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Yahoo! activeX Plug-in Bridge) - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440392 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-01] (Avira Operations GmbH & Co. KG)
S4 FreeAgentGoNext Service; C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe [181544 2009-05-01] (Seagate Technology LLC)
R2 mssql$insertgt; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 mssqlserveradhelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 OAcat; C:\Program Files\Online Armor\OAcat.exe [584864 2013-10-15] (Emsisoft GmbH)
S4 SgtSch2Svc; C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe [431456 2009-10-16] (Seagate)
R2 SvcOnlineArmor; C:\Program Files\Online Armor\oasrv.exe [4457688 2013-10-15] (Emsisoft GmbH)
S2 SwOffScheduler; C:\Program Files\Airytec\Switch Off\swoff.exe [135168 2011-05-28] (Airytec)
S2 SwOffWeb; C:\Program Files\Airytec\Switch Off\swoff.exe [135168 2011-05-28] (Airytec)
S4 VRAID Log Service; C:\Program Files\VIA\RAID\vialogsv.exe [45056 2008-07-09] ()
S3 WMConnectCDS; C:\Program Files\Windows Media Connect 2\wmccds.exe [856064 2005-10-06] (Microsoft Corporation)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [x]
S4 JavaQuickStarterService; "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

S3 ACSSCR; C:\Windows\System32\DRIVERS\a38usb.sys [33536 2006-03-24] (Advanced Card Systems Ltd)
R3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
R3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [4122112 2008-08-06] (Realtek Semiconductor Corp.)
R1 avgldx86; C:\Windows\System32\Drivers\avgldx86.sys [335240 2009-08-21] (AVG Technologies CZ, s.r.o.)
R1 avgmfx86; C:\Windows\System32\Drivers\avgmfx86.sys [27784 2009-08-21] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [89376 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 avgtdix; C:\Windows\System32\Drivers\avgtdix.sys [108552 2009-06-19] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 cpuz134; C:\WINDOWS\system32\drivers\cpuz134_x32.sys [20328 2010-07-09] (Windows (R) Win 7 DDK provider)
S2 dgivecp; C:\Windows\System32\Drivers\DgiVecp.sys [41984 2004-05-17] (DeviceGuys, Inc.)
S3 fixustor; C:\Windows\System32\drivers\fixustor.sys [6656 2004-05-11] (Genesys Logic)
S3 MSI_DVD_010507; C:\PROGRA~1\MSI\MSIWDev\DVDSYS32_100507.sys [22328 2010-05-10] (Your Corporation)
S3 MSI_MSIBIOS_010507; C:\PROGRA~1\MSI\MSIWDev\msibios32_100507.sys [25912 2010-05-10] (Your Corporation)
S3 MSI_VGASYS_010507; C:\PROGRA~1\MSI\MSIWDev\VGASYS32_100507.sys [16696 2010-05-10] ()
S3 mv2; C:\Windows\System32\DRIVERS\mv2.sys [11496 2011-05-28] (UVNC BVBA)
R1 OADevice; C:\WINDOWS\system32\drivers\OADriver.sys [210360 2013-10-15] ()
R1 oahlpXX; C:\WINDOWS\system32\drivers\oahlp32.sys [44984 2013-10-15] ()
R1 OAmon; C:\WINDOWS\system32\drivers\OAmon.sys [34856 2013-10-15] (Emsisoft)
R1 OAnet; C:\WINDOWS\system32\drivers\OAnet.sys [31912 2013-10-15] (Emsisoft)
R3 RTL8023xp; C:\Windows\System32\DRIVERS\Rtlnicxp.sys [70144 2004-04-13] (Realtek Semiconductor Corporation                           )
S3 SONYPVU1; C:\Windows\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-06] (Avira GmbH)
R0 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [368480 2011-12-31] (Acronis)
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [44384 2011-12-31] (Acronis)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [99152 2010-02-12] (Sun Microsystems, Inc.)
R3 viagfx; C:\Windows\System32\DRIVERS\vtmini.sys [283008 2007-09-28] (Copyright (C) VIA/S3 Graphics Co, Ltd.)
R0 viamraid; C:\Windows\System32\DRIVERS\viamraid.sys [117248 2008-07-10] (VIA Technologies inc,.ltd)
R0 videX32; C:\Windows\System32\DRIVERS\videX32.sys [9216 2007-11-20] (VIA Technologies, Inc.)
S3 vulfnths; C:\Windows\System32\Drivers\vulfnth.sys [6912 2005-01-05] (VIA Technologies, Inc.)
S3 vulfntrs; C:\Windows\System32\Drivers\vulfntr.sys [11264 2005-06-06] (VIA Technologies, Inc.)
R2 wg4n; C:\Windows\SYSTEM32\Drivers\wg4n.sys [14568 2004-10-15] (Sygate Technologies, Inc.)
R2 wg5n; C:\Windows\SYSTEM32\Drivers\wg5n.sys [14568 2004-10-15] (Sygate Technologies, Inc.)
R2 wg6n; C:\Windows\SYSTEM32\Drivers\wg6n.sys [14568 2004-10-15] (Sygate Technologies, Inc.)
S3 esihdrv; \??\C:\DOCUME~1\Raster\USTAWI~1\Temp\esihdrv.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
S3 PORTMON; \??\E:\Installe\_z_CHIPa\SysinternalsSuite\PORTMSYS.SYS [x]
U4 RemoteRegistry; 
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S4 vsdatant;  [x]
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-15 20:08 - 2013-10-15 20:08 - 00000000 ____D C:\FRST
2013-10-15 20:06 - 2013-10-15 20:07 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\Logi
2013-10-15 19:11 - 2013-10-15 19:11 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\PRZEMEK_DOKUMENTY
2013-10-14 19:32 - 2013-10-14 19:32 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\Metro-UI-CSS-master
2013-10-14 19:32 - 2013-10-14 19:32 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\animate.css-master
2013-10-14 15:42 - 2013-10-14 15:42 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\ikony
2013-10-14 11:30 - 2013-10-14 11:30 - 00012169 _____ C:\Documents and Settings\Raster\Pulpit\paczka_dla_biura_rachunkowego49.epp
2013-10-13 20:25 - 2013-10-13 20:25 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\Nestable-master
2013-10-13 20:23 - 2013-10-13 20:23 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\HTML-KickStart-master
2013-10-13 20:21 - 2013-10-13 20:21 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\jquery.bxslider
2013-10-13 16:04 - 2013-10-13 16:04 - 00005447 _____ C:\Documents and Settings\Raster\Pulpit\uproszczone_animate-custom.css
2013-10-11 18:25 - 2013-10-11 18:25 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\glyphicons_free
2013-10-11 18:23 - 2013-10-11 18:24 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\ESME
2013-10-10 13:45 - 2013-10-10 13:45 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cec5ae4794f990.job
2013-10-09 15:00 - 2013-10-09 15:00 - 00000392 _____ C:\Documents and Settings\Raster\Pulpit\Elmot_www.lnk
2013-10-04 08:38 - 2013-10-04 08:38 - 00000509 _____ C:\Documents and Settings\Raster\Pulpit\Alpa_www.lnk
2013-10-01 08:09 - 2013-10-01 08:09 - 98602865 _____ C:\WINDOWS\system32\茡夢囌;
2013-09-30 14:53 - 2013-09-30 14:53 - 98499637 _____ C:\WINDOWS\system32\✛뺟囌;
2013-09-30 09:21 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2013-09-30 09:20 - 2013-09-30 09:21 - 00038397 _____ C:\WINDOWS\DirectX.log
2013-09-30 09:20 - 2013-09-30 09:20 - 00000807 _____ C:\Documents and Settings\All Users\Pulpit\FotoBook.lnk
2013-09-30 09:20 - 2013-09-30 09:20 - 00000000 ____D C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\fotobook.pl
2013-09-30 09:20 - 2013-09-30 09:20 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\FotoBook.pl
2013-09-30 09:19 - 2013-09-30 09:19 - 00000000 ____D C:\Program Files\fotobook.pl
2013-09-30 09:19 - 2013-09-30 09:19 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\fotobook.pl
2013-09-30 08:53 - 2013-09-30 08:53 - 98474456 _____ C:\WINDOWS\system32\䖭塯囌;
2013-09-29 16:24 - 2013-09-29 16:24 - 98463575 _____ C:\WINDOWS\system32\엏械囌;
2013-09-28 21:09 - 2013-09-28 21:09 - 98442955 _____ C:\WINDOWS\system32\堵ⶂ囌;
2013-09-27 21:11 - 2013-09-27 21:11 - 98286374 _____ C:\WINDOWS\system32\���붚囌;
2013-09-27 15:45 - 2013-09-30 09:21 - 00006197 _____ C:\WINDOWS\setupapi.log
2013-09-27 15:11 - 2013-09-27 15:11 - 98267320 _____ C:\WINDOWS\system32\ᅾ춏囌;
2013-09-26 21:35 - 2013-09-26 21:35 - 98009570 _____ C:\WINDOWS\system32\뀐௰囌;
2013-09-25 09:59 - 2013-09-25 10:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-24 22:20 - 2013-09-24 22:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-24 22:20 - 2013-09-24 22:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-24 22:19 - 2013-09-24 22:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-24 22:12 - 2013-08-08 08:05 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll
2013-09-24 21:59 - 2013-09-24 21:59 - 00000000 ____D C:\Documents and Settings\Raster\Dane aplikacji\Airytec
2013-09-24 21:58 - 2013-09-24 21:58 - 00000806 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Airytec Switch Off.lnk
2013-09-24 21:58 - 2013-09-24 21:58 - 00000000 ____D C:\Program Files\Airytec
2013-09-24 21:16 - 2013-10-15 15:55 - 00000000 ____D C:\Program Files\Online Armor
2013-09-24 21:16 - 2013-10-15 15:52 - 00031912 _____ (Emsisoft) C:\WINDOWS\system32\Drivers\OAnet.sys
2013-09-24 21:16 - 2013-10-15 15:51 - 00034856 _____ (Emsisoft) C:\WINDOWS\system32\Drivers\OAmon.sys
2013-09-24 21:16 - 2013-10-15 15:50 - 00210360 _____ C:\WINDOWS\system32\Drivers\OADriver.sys
2013-09-24 21:16 - 2013-10-15 15:50 - 00044984 _____ C:\WINDOWS\system32\Drivers\oahlp32.sys
2013-09-24 21:16 - 2013-09-24 21:26 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\OnlineArmor
2013-09-24 21:16 - 2013-09-24 21:17 - 00000000 ____D C:\Documents and Settings\Raster\Dane aplikacji\OnlineArmor
2013-09-24 21:16 - 2013-09-24 21:16 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Online Armor
2013-09-24 19:53 - 2013-09-24 19:53 - 97540783 _____ C:\WINDOWS\system32\遛莻囌;
2013-09-23 20:38 - 2013-09-23 20:38 - 98685961 _____ C:\WINDOWS\system32\紮囌;
2013-09-22 16:09 - 2013-09-22 16:09 - 98592964 _____ C:\WINDOWS\system32\媠闐囌;
2013-09-21 15:25 - 2013-09-21 15:25 - 98547399 _____ C:\WINDOWS\system32\플㭰囌;
2013-09-20 20:33 - 2013-09-20 20:33 - 98487876 _____ C:\WINDOWS\system32\ⅵ륊囌;
2013-09-19 15:27 - 2013-09-19 15:27 - 98378485 _____ C:\WINDOWS\system32\睼䯲囌;
2013-09-18 15:13 - 2013-09-18 15:13 - 98132872 _____ C:\WINDOWS\system32\㎡㶢囌;
2013-09-17 17:12 - 2013-09-17 17:12 - 00000488 _____ C:\Documents and Settings\Raster\Pulpit\Dufek_Grazyna_Krzysztof.lnk
2013-09-17 14:12 - 2013-09-17 14:12 - 97949955 _____ C:\WINDOWS\system32\ꞡ瞵囌;
2013-09-17 08:22 - 2013-09-17 08:22 - 00000409 _____ C:\Documents and Settings\Raster\Pulpit\Bank_Spol_Krzyzanowice.lnk

==================== One Month Modified Files and Folders =======

2013-10-15 20:08 - 2013-10-15 20:08 - 00000000 ____D C:\FRST
2013-10-15 20:07 - 2013-10-15 20:06 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\Logi
2013-10-15 20:06 - 2006-04-06 18:29 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit
2013-10-15 20:01 - 2009-06-30 20:58 - 00000000 ____D C:\Documents and Settings\Raster\Dane aplikacji\Skype
2013-10-15 20:00 - 2009-07-19 11:40 - 01161795 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-15 20:00 - 2005-12-28 19:33 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2013-10-15 19:59 - 2005-12-28 12:45 - 00000157 _____ C:\WINDOWS\wiadebug.log
2013-10-15 19:59 - 2005-12-28 12:45 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-10-15 19:57 - 2012-05-22 13:45 - 00000188 ___SH C:\Documents and Settings\Raster\ntuser.ini
2013-10-15 19:55 - 2006-04-06 18:29 - 00000000 ____D C:\Documents and Settings\Raster
2013-10-15 19:11 - 2013-10-15 19:11 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\PRZEMEK_DOKUMENTY
2013-10-15 15:55 - 2013-09-24 21:16 - 00000000 ____D C:\Program Files\Online Armor
2013-10-15 15:52 - 2013-09-24 21:16 - 00031912 _____ (Emsisoft) C:\WINDOWS\system32\Drivers\OAnet.sys
2013-10-15 15:51 - 2013-09-24 21:16 - 00034856 _____ (Emsisoft) C:\WINDOWS\system32\Drivers\OAmon.sys
2013-10-15 15:50 - 2013-09-24 21:16 - 00210360 _____ C:\WINDOWS\system32\Drivers\OADriver.sys
2013-10-15 15:50 - 2013-09-24 21:16 - 00044984 _____ C:\WINDOWS\system32\Drivers\oahlp32.sys
2013-10-15 12:49 - 2010-01-31 13:52 - 00000000 ____D C:\Documents and Settings\Raster\Dane aplikacji\FileZilla
2013-10-15 07:43 - 2005-12-28 11:56 - 00000188 ___SH C:\Documents and Settings\NetworkService\ntuser.ini
2013-10-15 07:43 - 2005-12-28 11:56 - 00000000 __SHD C:\Documents and Settings\NetworkService
2013-10-14 19:32 - 2013-10-14 19:32 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\Metro-UI-CSS-master
2013-10-14 19:32 - 2013-10-14 19:32 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\animate.css-master
2013-10-14 15:55 - 2008-10-14 11:43 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\Twens
2013-10-14 15:42 - 2013-10-14 15:42 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\ikony
2013-10-14 11:30 - 2013-10-14 11:30 - 00012169 _____ C:\Documents and Settings\Raster\Pulpit\paczka_dla_biura_rachunkowego49.epp
2013-10-13 20:25 - 2013-10-13 20:25 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\Nestable-master
2013-10-13 20:23 - 2013-10-13 20:23 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\HTML-KickStart-master
2013-10-13 20:21 - 2013-10-13 20:21 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\jquery.bxslider
2013-10-13 16:04 - 2013-10-13 16:04 - 00005447 _____ C:\Documents and Settings\Raster\Pulpit\uproszczone_animate-custom.css
2013-10-12 21:17 - 2005-12-28 12:37 - 00000000 _____ C:\WINDOWS\MEMORY.DMP
2013-10-12 21:16 - 2007-01-15 08:47 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-10-12 21:03 - 2005-12-28 11:48 - 00000000 ____D C:\WINDOWS\Registration
2013-10-11 21:27 - 2010-01-23 00:34 - 00131072 _____ C:\WINDOWS\system32\config\OAlerts.evt
2013-10-11 18:25 - 2013-10-11 18:25 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\glyphicons_free
2013-10-11 18:24 - 2013-10-11 18:23 - 00000000 ____D C:\Documents and Settings\Raster\Pulpit\ESME
2013-10-10 16:42 - 2013-01-24 16:28 - 00000000 ___RD C:\Program Files\Skype
2013-10-10 16:42 - 2009-06-30 20:57 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Skype
2013-10-10 13:45 - 2013-10-10 13:45 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cec5ae4794f990.job
2013-10-09 15:00 - 2013-10-09 15:00 - 00000392 _____ C:\Documents and Settings\Raster\Pulpit\Elmot_www.lnk
2013-10-09 14:44 - 2009-07-19 18:25 - 00000000 ____D C:\Program Files\Opera
2013-10-04 08:38 - 2013-10-04 08:38 - 00000509 _____ C:\Documents and Settings\Raster\Pulpit\Alpa_www.lnk
2013-10-01 14:14 - 2013-08-06 10:17 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-10-01 14:14 - 2013-08-06 10:17 - 00089376 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-10-01 14:14 - 2013-08-06 10:17 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-10-01 08:09 - 2013-10-01 08:09 - 98602865 _____ C:\WINDOWS\system32\茡夢囌;
2013-09-30 14:53 - 2013-09-30 14:53 - 98499637 _____ C:\WINDOWS\system32\✛뺟囌;
2013-09-30 09:21 - 2013-09-30 09:20 - 00038397 _____ C:\WINDOWS\DirectX.log
2013-09-30 09:21 - 2013-09-27 15:45 - 00006197 _____ C:\WINDOWS\setupapi.log
2013-09-30 09:21 - 2005-12-28 11:48 - 00000000 ____D C:\WINDOWS\system32\DirectX
2013-09-30 09:20 - 2013-09-30 09:20 - 00000807 _____ C:\Documents and Settings\All Users\Pulpit\FotoBook.lnk
2013-09-30 09:20 - 2013-09-30 09:20 - 00000000 ____D C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\fotobook.pl
2013-09-30 09:20 - 2013-09-30 09:20 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\FotoBook.pl
2013-09-30 09:20 - 2006-04-06 18:29 - 00000000 ___HD C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji
2013-09-30 09:20 - 2005-12-28 12:43 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2013-09-30 09:20 - 2005-12-28 12:43 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy
2013-09-30 09:19 - 2013-09-30 09:19 - 00000000 ____D C:\Program Files\fotobook.pl
2013-09-30 09:19 - 2013-09-30 09:19 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\fotobook.pl
2013-09-30 09:19 - 2005-12-28 12:42 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2013-09-30 08:53 - 2013-09-30 08:53 - 98474456 _____ C:\WINDOWS\system32\䖭塯囌;
2013-09-29 16:24 - 2013-09-29 16:24 - 98463575 _____ C:\WINDOWS\system32\엏械囌;
2013-09-28 21:09 - 2013-09-28 21:09 - 98442955 _____ C:\WINDOWS\system32\堵ⶂ囌;
2013-09-28 09:24 - 2009-09-13 09:03 - 00000000 ____D C:\Documents and Settings\Raster\Dane aplikacji\TeamViewer
2013-09-28 09:09 - 2012-10-22 08:47 - 00000193 ___SH C:\boot.ini
2013-09-28 09:09 - 2005-12-28 19:33 - 00000669 _____ C:\WINDOWS\win.ini
2013-09-28 09:09 - 2005-12-28 19:33 - 00000227 _____ C:\WINDOWS\system.ini
2013-09-27 21:11 - 2013-09-27 21:11 - 98286374 _____ C:\WINDOWS\system32\���붚囌;
2013-09-27 20:35 - 2006-07-31 11:49 - 00000000 ____D C:\Program Files\Winamp
2013-09-27 15:11 - 2013-09-27 15:11 - 98267320 _____ C:\WINDOWS\system32\ᅾ춏囌;
2013-09-27 09:52 - 2009-12-03 01:03 - 00000000 ____D C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\Adobe
2013-09-27 09:50 - 2013-01-08 18:53 - 00002315 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader XI.lnk
2013-09-27 09:44 - 2009-06-23 06:47 - 00000000 __SHD C:\Documents and Settings\Raster\UserData
2013-09-26 21:35 - 2013-09-26 21:35 - 98009570 _____ C:\WINDOWS\system32\뀐௰囌;
2013-09-25 14:12 - 2005-12-28 11:48 - 00000000 ____D C:\WINDOWS\system32\Restore
2013-09-25 13:42 - 2012-04-25 08:28 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-09-25 10:00 - 2013-09-25 09:59 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-24 23:22 - 2005-12-28 11:51 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-09-24 22:42 - 2005-12-28 19:34 - 00612960 _____ C:\WINDOWS\system32\perfh015.dat
2013-09-24 22:42 - 2005-12-28 19:34 - 00133916 _____ C:\WINDOWS\system32\perfc015.dat
2013-09-24 22:42 - 2005-12-28 12:43 - 01386904 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-09-24 22:28 - 2005-12-28 12:42 - 00671968 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-09-24 22:22 - 2009-06-13 09:57 - 00000000 ____D C:\WINDOWS\ie8updates
2013-09-24 22:20 - 2013-09-24 22:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-24 22:20 - 2013-09-24 22:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-24 22:19 - 2013-09-24 22:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-24 22:18 - 2013-07-23 16:35 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-09-24 22:14 - 2005-12-29 15:17 - 76725432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-09-24 22:02 - 2005-12-28 11:50 - 00001512 _____ C:\Documents and Settings\All Users\Menu Start\Windows Update.lnk
2013-09-24 21:59 - 2013-09-24 21:59 - 00000000 ____D C:\Documents and Settings\Raster\Dane aplikacji\Airytec
2013-09-24 21:59 - 2006-04-06 18:29 - 00000000 ___HD C:\Documents and Settings\Raster\Dane aplikacji
2013-09-24 21:58 - 2013-09-24 21:58 - 00000806 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Airytec Switch Off.lnk
2013-09-24 21:58 - 2013-09-24 21:58 - 00000000 ____D C:\Program Files\Airytec
2013-09-24 21:26 - 2013-09-24 21:16 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\OnlineArmor
2013-09-24 21:17 - 2013-09-24 21:16 - 00000000 ____D C:\Documents and Settings\Raster\Dane aplikacji\OnlineArmor
2013-09-24 21:16 - 2013-09-24 21:16 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Online Armor
2013-09-24 19:53 - 2013-09-24 19:53 - 97540783 _____ C:\WINDOWS\system32\遛莻囌;
2013-09-23 20:38 - 2013-09-23 20:38 - 98685961 _____ C:\WINDOWS\system32\紮囌;
2013-09-22 16:09 - 2013-09-22 16:09 - 98592964 _____ C:\WINDOWS\system32\媠闐囌;
2013-09-21 15:25 - 2013-09-21 15:25 - 98547399 _____ C:\WINDOWS\system32\플㭰囌;
2013-09-20 20:33 - 2013-09-20 20:33 - 98487876 _____ C:\WINDOWS\system32\ⅵ륊囌;
2013-09-19 20:34 - 2009-06-15 08:14 - 00004249 _____ C:\WINDOWS\wincmd.ini
2013-09-19 15:27 - 2013-09-19 15:27 - 98378485 _____ C:\WINDOWS\system32\睼䯲囌;
2013-09-18 15:13 - 2013-09-18 15:13 - 98132872 _____ C:\WINDOWS\system32\㎡㶢囌;
2013-09-17 17:12 - 2013-09-17 17:12 - 00000488 _____ C:\Documents and Settings\Raster\Pulpit\Dufek_Grazyna_Krzysztof.lnk
2013-09-17 14:12 - 2013-09-17 14:12 - 97949955 _____ C:\WINDOWS\system32\ꞡ瞵囌;
2013-09-17 08:22 - 2013-09-17 08:22 - 00000409 _____ C:\Documents and Settings\Raster\Pulpit\Bank_Spol_Krzyzanowice.lnk

Some content of TEMP:
====================
C:\Documents and Settings\Raster\Ustawienia lokalne\Temp\avgnt.exe
C:\Documents and Settings\Raster\Ustawienia lokalne\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2005-12-28 19:33] - [2008-04-14 19:21] - 1035264 ____N (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2005-12-28 19:33] - [2008-04-14 19:21] - 0510464 _____ (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2005-12-28 19:33] - [2008-04-14 19:21] - 0014336 _____ (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2005-12-28 19:33] - [2009-02-09 13:25] - 0111104 _____ (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\Windows\System32\User32.dll
[2005-12-28 19:33] - [2008-04-14 19:20] - 0580096 _____ (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2005-12-28 19:33] - [2008-04-14 19:21] - 0026624 _____ (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\Drivers\volsnap.sys
[2005-12-28 19:33] - [2008-04-14 18:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================