Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-11-2013 01
Ran by Wibem (administrator) on WIBEM-PIOTR on 26-11-2013 14:54:24
Running from E:\otl
Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Smapp] - C:\Program Files\Analog Devices\SoundMAX\SMTray.exe [143360 2003-05-05] (Analog Devices, Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [683576 2013-10-31] (Avira Operations GmbH & Co. KG)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-02-26] (Google Inc.)
HKCU\...\Run: [Google Update*] - [x] <===== ATTENTION (ZeroAccess rootkit hidden path)
HKU\Administrator\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Administrator\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Default User\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 14 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Wibem\Dane aplikacji\Mozilla\Firefox\Profiles\37lpm5j2.default
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\DOCUME~1\Wibem\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\DOCUME~1\Wibem\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Gmail) - C:\DOCUME~1\Wibem\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 SoundMAX Agent Service (default); C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [45056 2002-09-20] (Analog Devices, Inc.)
U4 *etadpug; "C:\Program Files\Google\Desktop\Install\{4ced4107-d02a-8728-af33-e14f2f981773}\   \   \???\{4ced4107-d02a-8728-af33-e14f2f981773}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-10-31] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-31] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-31] (Avira Operations GmbH & Co. KG)
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc.              )
R3 gameenum; C:\Windows\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-31] (Avira GmbH)
R0 viaagp1; C:\Windows\System32\DRIVERS\viaagp1.sys [27904 2003-07-02] (VIA Technologies, Inc.)
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-26 14:53 - 2013-11-26 14:53 - 00000000 ____D C:\FRST
2013-11-26 14:31 - 2013-11-26 14:31 - 00011708 _____ C:\WINDOWS\KB2834886.log
2013-11-26 14:31 - 2013-11-26 14:31 - 00011494 _____ C:\WINDOWS\KB2900986.log
2013-11-26 14:31 - 2013-11-26 14:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-26 14:31 - 2013-11-26 14:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-26 14:31 - 2013-11-26 14:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-11-26 14:31 - 2013-11-26 14:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834886$
2013-11-26 14:30 - 2013-11-26 14:30 - 00012233 _____ C:\WINDOWS\KB2862335.log
2013-11-26 14:30 - 2013-11-26 14:30 - 00011591 _____ C:\WINDOWS\KB2834904-v2.log
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2845187$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2802968$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2780091$
2013-11-26 14:29 - 2013-11-26 14:31 - 00005963 _____ C:\WINDOWS\updspapi.log
2013-11-26 14:29 - 2013-11-26 14:30 - 00001894 _____ C:\WINDOWS\setupapi.log
2013-11-26 14:29 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-11-26 14:29 - 2013-11-26 14:29 - 00013584 _____ C:\WINDOWS\KB2807986.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00013229 _____ C:\WINDOWS\KB2888505-IE8.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00011596 _____ C:\WINDOWS\KB2868038.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00010338 _____ C:\WINDOWS\KB2863058.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820917$
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2807986$
2013-11-26 14:28 - 2013-11-26 14:31 - 00163082 _____ C:\WINDOWS\iis6.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00148386 _____ C:\WINDOWS\FaxSetup.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00070944 _____ C:\WINDOWS\ocgen.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00067896 _____ C:\WINDOWS\tsoc.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00049200 _____ C:\WINDOWS\comsetup.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00047184 _____ C:\WINDOWS\msmqinst.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00029838 _____ C:\WINDOWS\ntdtcsetup.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00025992 _____ C:\WINDOWS\netfxocm.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00010200 _____ C:\WINDOWS\MedCtrOC.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00009264 _____ C:\WINDOWS\ocmsn.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00007656 _____ C:\WINDOWS\tabletoc.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00007416 _____ C:\WINDOWS\msgsocm.log
2013-11-26 14:28 - 2013-11-26 14:31 - 00001393 _____ C:\WINDOWS\imsins.log
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2813345$
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 _____ C:\WINDOWS\setupact.log
2013-11-26 14:26 - 2013-11-26 14:28 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-26 12:36 - 2013-11-26 13:18 - 3391684600 _____ C:\avenger.txt
2013-11-26 12:36 - 2013-11-26 12:36 - 00000000 ____D C:\Avenger
2013-11-26 10:24 - 2013-11-26 14:31 - 00018653 _____ C:\WINDOWS\KB2802968.log
2013-11-26 10:24 - 2013-11-26 14:31 - 00017608 _____ C:\WINDOWS\KB2868626.log
2013-11-26 10:24 - 2013-11-26 14:31 - 00016199 _____ C:\WINDOWS\KB2847311.log
2013-11-26 10:24 - 2013-11-26 14:30 - 00018346 _____ C:\WINDOWS\KB2780091.log
2013-11-26 10:24 - 2013-11-26 14:30 - 00016157 _____ C:\WINDOWS\KB2876217.log
2013-11-26 10:24 - 2013-11-26 14:30 - 00015841 _____ C:\WINDOWS\KB2845187.log
2013-11-26 10:24 - 2013-11-26 14:30 - 00015332 _____ C:\WINDOWS\KB2864063.log
2013-11-26 10:24 - 2013-07-03 03:12 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
2013-11-26 10:24 - 2013-07-03 02:59 - 00014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
2013-11-26 10:23 - 2013-11-26 14:30 - 00016458 _____ C:\WINDOWS\KB2859537.log
2013-11-26 10:23 - 2013-11-26 14:30 - 00015642 _____ C:\WINDOWS\KB2876331.log
2013-11-26 10:23 - 2013-11-26 14:30 - 00015335 _____ C:\WINDOWS\KB2862152.log
2013-11-26 10:23 - 2013-11-26 14:30 - 00015331 _____ C:\WINDOWS\KB2850869.log
2013-11-26 10:23 - 2013-11-26 14:29 - 00017439 _____ C:\WINDOWS\KB2820917.log
2013-11-26 10:23 - 2013-08-09 01:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
2013-11-26 10:23 - 2013-08-09 01:55 - 00032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2013-11-26 10:23 - 2013-08-09 01:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2013-11-26 10:23 - 2013-07-17 01:58 - 00123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2013-11-26 10:23 - 2013-07-17 01:58 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
2013-11-26 10:23 - 2013-07-17 01:58 - 00046848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys
2013-11-26 10:23 - 2013-02-12 01:32 - 00012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
2013-11-26 10:23 - 2013-02-12 01:32 - 00012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023.sys
2013-11-26 10:23 - 2009-03-18 12:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
2013-11-26 10:22 - 2013-11-26 14:28 - 00012717 _____ C:\WINDOWS\KB2813345.log
2013-11-26 09:40 - 2013-11-26 09:40 - 00000000 ____D C:\Documents and Settings\Wibem\Dane aplikacji\Malwarebytes
2013-11-26 09:40 - 2013-11-26 09:40 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2013-11-25 15:10 - 2008-04-14 00:15 - 00026368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbstor.sys
2013-11-25 15:10 - 2008-04-14 00:15 - 00026368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2013-11-25 14:53 - 2013-11-25 14:53 - 00000000 ____D C:\Documents and Settings\Wibem\Ustawienia lokalne\Dane aplikacji\Mozilla
2013-11-25 14:53 - 2013-11-25 14:53 - 00000000 ____D C:\Documents and Settings\Wibem\Dane aplikacji\Mozilla
2013-11-25 14:52 - 2013-11-25 14:52 - 00000724 _____ C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2013-11-25 14:52 - 2013-11-25 14:52 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-25 14:52 - 2013-11-25 14:52 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-25 14:52 - 2013-11-25 14:52 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Mozilla
2013-11-25 14:48 - 2013-11-25 14:52 - 00000730 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2013-11-25 14:47 - 2013-11-25 14:48 - 24053488 _____ (Mozilla) C:\Documents and Settings\Wibem\Pulpit\Firefox Setup 25.0.1n.exe
2013-11-25 14:32 - 2013-11-25 14:32 - 00000000 ____D C:\Documents and Settings\Wibem\Dane aplikacji\Avira
2013-11-25 14:06 - 2013-11-25 14:06 - 00001707 _____ C:\Documents and Settings\All Users\Pulpit\Avira Control Center.lnk
2013-11-25 14:06 - 2013-11-25 14:06 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Avira
2013-11-25 14:05 - 2013-11-25 14:06 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Avira
2013-11-25 14:05 - 2013-11-25 14:05 - 00000000 ____D C:\Program Files\Avira
2013-11-25 14:05 - 2013-10-31 19:25 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-11-25 14:05 - 2013-10-31 19:25 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-11-25 14:05 - 2013-10-31 19:25 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-11-25 14:05 - 2013-10-31 19:25 - 00028520 _____ (Avira GmbH) C:\WINDOWS\system32\Drivers\ssmdrv.sys
2013-11-25 13:33 - 2013-11-25 13:35 - 00000000 ___SD C:\Documents and Settings\Administrator
2013-11-25 13:33 - 2013-11-25 13:35 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia
2013-11-25 13:33 - 2013-11-25 13:35 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne
2013-11-25 13:33 - 2013-11-25 13:35 - 00000000 ____D C:\Documents and Settings\Administrator\Szablony
2013-11-25 13:33 - 2013-11-25 13:34 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji
2013-11-25 13:33 - 2013-11-25 13:33 - 00000000 ____D C:\Documents and Settings\Administrator\IETldCache

==================== One Month Modified Files and Folders =======

2013-11-26 14:53 - 2013-11-26 14:53 - 00000000 ____D C:\FRST
2013-11-26 14:51 - 2013-01-27 10:35 - 00000000 ____D C:\stary dysk
2013-11-26 14:40 - 2013-01-21 11:29 - 01372713 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-26 14:39 - 2013-02-26 14:08 - 00001030 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-26 14:38 - 2013-01-21 11:35 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-26 14:37 - 2013-01-21 11:49 - 00000188 ___SH C:\Documents and Settings\Wibem\ntuser.ini
2013-11-26 14:37 - 2013-01-21 11:49 - 00000000 ____D C:\Documents and Settings\Wibem
2013-11-26 14:37 - 2013-01-21 11:35 - 00032604 _____ C:\WINDOWS\SchedLgU.Txt
2013-11-26 14:34 - 2013-02-26 14:08 - 00001034 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-26 14:32 - 2013-01-21 13:13 - 00095072 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-26 14:31 - 2013-11-26 14:31 - 00011708 _____ C:\WINDOWS\KB2834886.log
2013-11-26 14:31 - 2013-11-26 14:31 - 00011494 _____ C:\WINDOWS\KB2900986.log
2013-11-26 14:31 - 2013-11-26 14:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-26 14:31 - 2013-11-26 14:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-26 14:31 - 2013-11-26 14:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-11-26 14:31 - 2013-11-26 14:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834886$
2013-11-26 14:31 - 2013-11-26 14:29 - 00005963 _____ C:\WINDOWS\updspapi.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00163082 _____ C:\WINDOWS\iis6.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00148386 _____ C:\WINDOWS\FaxSetup.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00070944 _____ C:\WINDOWS\ocgen.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00067896 _____ C:\WINDOWS\tsoc.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00049200 _____ C:\WINDOWS\comsetup.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00047184 _____ C:\WINDOWS\msmqinst.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00029838 _____ C:\WINDOWS\ntdtcsetup.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00025992 _____ C:\WINDOWS\netfxocm.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00010200 _____ C:\WINDOWS\MedCtrOC.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00009264 _____ C:\WINDOWS\ocmsn.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00007656 _____ C:\WINDOWS\tabletoc.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00007416 _____ C:\WINDOWS\msgsocm.log
2013-11-26 14:31 - 2013-11-26 14:28 - 00001393 _____ C:\WINDOWS\imsins.log
2013-11-26 14:31 - 2013-11-26 10:24 - 00018653 _____ C:\WINDOWS\KB2802968.log
2013-11-26 14:31 - 2013-11-26 10:24 - 00017608 _____ C:\WINDOWS\KB2868626.log
2013-11-26 14:31 - 2013-11-26 10:24 - 00016199 _____ C:\WINDOWS\KB2847311.log
2013-11-26 14:31 - 2013-01-21 13:16 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-11-26 14:30 - 2013-11-26 14:30 - 00012233 _____ C:\WINDOWS\KB2862335.log
2013-11-26 14:30 - 2013-11-26 14:30 - 00011591 _____ C:\WINDOWS\KB2834904-v2.log
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2845187$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2802968$
2013-11-26 14:30 - 2013-11-26 14:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2780091$
2013-11-26 14:30 - 2013-11-26 14:29 - 00001894 _____ C:\WINDOWS\setupapi.log
2013-11-26 14:30 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-11-26 14:30 - 2013-11-26 10:24 - 00018346 _____ C:\WINDOWS\KB2780091.log
2013-11-26 14:30 - 2013-11-26 10:24 - 00016157 _____ C:\WINDOWS\KB2876217.log
2013-11-26 14:30 - 2013-11-26 10:24 - 00015841 _____ C:\WINDOWS\KB2845187.log
2013-11-26 14:30 - 2013-11-26 10:24 - 00015332 _____ C:\WINDOWS\KB2864063.log
2013-11-26 14:30 - 2013-11-26 10:23 - 00016458 _____ C:\WINDOWS\KB2859537.log
2013-11-26 14:30 - 2013-11-26 10:23 - 00015642 _____ C:\WINDOWS\KB2876331.log
2013-11-26 14:30 - 2013-11-26 10:23 - 00015335 _____ C:\WINDOWS\KB2862152.log
2013-11-26 14:30 - 2013-11-26 10:23 - 00015331 _____ C:\WINDOWS\KB2850869.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00013584 _____ C:\WINDOWS\KB2807986.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00013229 _____ C:\WINDOWS\KB2888505-IE8.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00011596 _____ C:\WINDOWS\KB2868038.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00010338 _____ C:\WINDOWS\KB2863058.log
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820917$
2013-11-26 14:29 - 2013-11-26 14:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2807986$
2013-11-26 14:29 - 2013-11-26 10:23 - 00017439 _____ C:\WINDOWS\KB2820917.log
2013-11-26 14:29 - 2013-01-22 09:22 - 00012558 _____ C:\WINDOWS\system32\TZLog.log
2013-11-26 14:29 - 2013-01-21 11:30 - 00000000 ___HD C:\WINDOWS\$hf_mig$
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2813345$
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-26 14:28 - 2013-11-26 14:28 - 00000000 _____ C:\WINDOWS\setupact.log
2013-11-26 14:28 - 2013-11-26 14:26 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-26 14:28 - 2013-11-26 10:22 - 00012717 _____ C:\WINDOWS\KB2813345.log
2013-11-26 14:25 - 2013-01-21 13:15 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy
2013-11-26 14:25 - 2013-01-21 13:15 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2013-11-26 13:18 - 2013-11-26 12:36 - 3391684600 _____ C:\avenger.txt
2013-11-26 12:36 - 2013-11-26 12:36 - 00000000 ____D C:\Avenger
2013-11-26 12:36 - 2013-01-21 11:26 - 00000000 ____D C:\WINDOWS\Registration
2013-11-26 12:35 - 2013-01-21 11:49 - 00000000 __RHD C:\Documents and Settings\Wibem\Dane aplikacji
2013-11-26 10:42 - 2013-02-26 14:09 - 00001819 _____ C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2013-11-26 09:40 - 2013-11-26 09:40 - 00000000 ____D C:\Documents and Settings\Wibem\Dane aplikacji\Malwarebytes
2013-11-26 09:40 - 2013-11-26 09:40 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2013-11-26 09:40 - 2013-01-21 13:13 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2013-11-26 09:31 - 2013-01-21 11:49 - 00000000 ___HD C:\Documents and Settings\Wibem\Ustawienia lokalne
2013-11-25 15:43 - 2013-01-21 12:13 - 00000000 ____D C:\Documents and Settings\Wibem\Dane aplikacji\GHISLER
2013-11-25 14:53 - 2013-11-25 14:53 - 00000000 ____D C:\Documents and Settings\Wibem\Ustawienia lokalne\Dane aplikacji\Mozilla
2013-11-25 14:53 - 2013-11-25 14:53 - 00000000 ____D C:\Documents and Settings\Wibem\Dane aplikacji\Mozilla
2013-11-25 14:53 - 2013-01-21 11:49 - 00000000 ___HD C:\Documents and Settings\Wibem\Ustawienia lokalne\Dane aplikacji
2013-11-25 14:52 - 2013-11-25 14:52 - 00000724 _____ C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2013-11-25 14:52 - 2013-11-25 14:52 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-25 14:52 - 2013-11-25 14:52 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-25 14:52 - 2013-11-25 14:52 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Mozilla
2013-11-25 14:52 - 2013-11-25 14:48 - 00000730 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2013-11-25 14:50 - 2013-01-21 11:49 - 00000000 ____D C:\Documents and Settings\Wibem\Pulpit
2013-11-25 14:48 - 2013-11-25 14:47 - 24053488 _____ (Mozilla) C:\Documents and Settings\Wibem\Pulpit\Firefox Setup 25.0.1n.exe
2013-11-25 14:32 - 2013-11-25 14:32 - 00000000 ____D C:\Documents and Settings\Wibem\Dane aplikacji\Avira
2013-11-25 14:06 - 2013-11-25 14:06 - 00001707 _____ C:\Documents and Settings\All Users\Pulpit\Avira Control Center.lnk
2013-11-25 14:06 - 2013-11-25 14:06 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Avira
2013-11-25 14:06 - 2013-11-25 14:05 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Avira
2013-11-25 14:05 - 2013-11-25 14:05 - 00000000 ____D C:\Program Files\Avira
2013-11-25 14:04 - 2013-01-21 13:16 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-11-25 13:42 - 2013-01-21 11:50 - 00000000 ___RD C:\Documents and Settings\Wibem\Moje dokumenty\Moje obrazy
2013-11-25 13:36 - 2013-01-21 11:35 - 00000000 __SHD C:\Documents and Settings\NetworkService
2013-11-25 13:36 - 2013-01-21 11:35 - 00000000 __SHD C:\Documents and Settings\LocalService
2013-11-25 13:35 - 2013-11-25 13:33 - 00000000 ___SD C:\Documents and Settings\Administrator
2013-11-25 13:35 - 2013-11-25 13:33 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia
2013-11-25 13:35 - 2013-11-25 13:33 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne
2013-11-25 13:35 - 2013-11-25 13:33 - 00000000 ____D C:\Documents and Settings\Administrator\Szablony
2013-11-25 13:34 - 2013-11-25 13:33 - 00000000 ____D C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji
2013-11-25 13:33 - 2013-11-25 13:33 - 00000000 ____D C:\Documents and Settings\Administrator\IETldCache
2013-11-25 08:04 - 2001-07-21 23:17 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-11-22 14:18 - 2013-01-27 10:33 - 00000000 ____D C:\HURT3
2013-11-22 13:36 - 2013-01-28 06:50 - 00000412 _____ C:\Documents and Settings\Wibem\Moje dokumenty\spider.sav
2013-11-07 15:50 - 2013-01-22 09:13 - 80340640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-05 09:15 - 2013-02-26 14:08 - 00000000 ____D C:\Program Files\Google
2013-11-05 09:15 - 2013-02-26 14:08 - 00000000 ____D C:\Documents and Settings\Wibem\Ustawienia lokalne\Dane aplikacji\Google
2013-10-31 19:25 - 2013-11-25 14:05 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-10-31 19:25 - 2013-11-25 14:05 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-10-31 19:25 - 2013-11-25 14:05 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-10-31 19:25 - 2013-11-25 14:05 - 00028520 _____ (Avira GmbH) C:\WINDOWS\system32\Drivers\ssmdrv.sys
2013-10-28 07:09 - 2013-01-21 13:16 - 00763990 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-28 07:09 - 2001-10-26 17:15 - 00355486 _____ C:\WINDOWS\system32\perfh015.dat
2013-10-28 07:09 - 2001-10-26 17:15 - 00049492 _____ C:\WINDOWS\system32\perfc015.dat
ZeroAccess:
C:\Documents and Settings\Wibem\Ustawienia lokalne\Dane aplikacji\Google\Desktop\Install
ZeroAccess:
C:\Program Files\Google\Desktop\Install

Some content of TEMP:
====================
C:\Documents and Settings\Wibem\Ustawienia lokalne\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-01-24 10:59] - [2008-04-14 19:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2004-08-04 00:44] - [2008-04-14 19:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2004-08-04 00:44] - [2008-04-14 19:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2004-08-04 00:44] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\Windows\System32\User32.dll
[2008-01-24 10:57] - [2008-04-14 19:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2004-08-04 00:44] - [2008-04-14 19:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\Drivers\volsnap.sys
[2004-08-04 00:36] - [2008-04-14 18:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================