Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-02-2014 01
Ran by Admin (administrator) on HOME-EAEFBDAC22 on 25-02-2014 09:20:14
Running from C:\Documents and Settings\Admin\Pulpit\zzzzz
Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\update\realsched.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Foxit Corporation) C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\Foxit Reader Updater.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NeroFilterCheck] - C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2010-02-10] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SoundMAXPnP] - C:\Program Files\Analog Devices\Core\smax4pnp.exe [925696 2005-05-20] (Analog Devices, Inc.)
HKLM\...\Run: [SoundMAX] - C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [716800 2005-09-07] (Analog Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\update\realsched.exe [295512 2014-01-25] (RealNetworks, Inc.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2145000 2010-04-07] (ESET)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\.DEFAULT\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\S-1-5-19\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\S-1-5-20\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
HKU\S-1-5-21-746137067-152049171-1606980848-1003\...\MountPoints2: {71935a92-8788-11e3-af2e-001a924ef888} - G:\Get_Started_for_Win.exe

==================== Internet (Whitelisted) ====================

BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Tcpip\Parameters: [DhcpNameServer] 217.113.224.134 217.113.224.135

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\vdp1gesx.default-1391815747281
FF Homepage: www.wp.pl
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-01-28]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Widevine Content Decryption Module) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.117\pdf.dll ()
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-05]
CHR Extension: (Dysk Google) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-05]
CHR Extension: (YouTube) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-05]
CHR Extension: (Szukaj w Google) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-05]
CHR Extension: (RealDownloader) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-02-05]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-05]
CHR Extension: (Gmail) - C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-05]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

========================== Services (Whitelisted) =================

S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] ()
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [33560 2010-04-07] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [810120 2010-04-07] (ESET)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-01-26] (Foxit Corporation)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-01-26] (Oracle Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

==================== Drivers (Whitelisted) ====================

R3 AEAudioService; C:\WINDOWS\System32\drivers\AEAudio.sys [127872 2005-03-04] (Andrea Electronics Corporation)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [278984 2014-02-10] ()
R2 eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [140216 2010-04-07] (ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [114984 2010-04-07] (ESET)
R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [95872 2010-04-07] (ESET)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25416 2014-02-10] ()
R3 SenFiltService; C:\WINDOWS\System32\drivers\Senfilt.sys [393088 2005-08-11] (Sensaura)
S4 IntelIde; No ImagePath
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-25 09:10 - 2014-02-25 09:20 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\zzzzz
2014-02-25 09:09 - 2014-02-25 09:09 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\FRST-OlderVersion
2014-02-24 17:23 - 2014-02-24 17:23 - 17858952 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2014-02-20 00:12 - 2014-02-20 00:12 - 00035840 ___SH () C:\Documents and Settings\Admin\Pulpit\Thumbs.db
2014-02-20 00:09 - 2014-02-20 00:09 - 00672917 _____ () C:\Documents and Settings\Admin\Pulpit\02-14.jpg~original.jpeg
2014-02-20 00:09 - 2014-02-20 00:09 - 00549924 _____ () C:\Documents and Settings\Admin\Pulpit\01-17.jpg~original.jpeg
2014-02-15 20:11 - 2014-02-15 20:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-12 00:58 - 2014-02-12 01:06 - 00011119 _____ () C:\Documents and Settings\Admin\Pulpit\indeksf.jpeg
2014-02-11 21:35 - 2014-02-11 21:47 - 200944408 _____ () C:\Documents and Settings\Admin\Pulpit\Lone Target S01E04 Race To The Bridge ( www.TV-Masters.com ).mp4
2014-02-11 20:54 - 2014-02-11 20:54 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2014-02-10 17:04 - 2014-02-10 17:04 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Games
2014-02-10 17:03 - 2014-02-10 17:03 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\InstallShield
2014-02-10 16:28 - 2014-02-11 20:53 - 00002657 _____ () C:\WINDOWS\DIFx.log
2014-02-10 16:23 - 2014-02-10 16:23 - 00278984 _____ () C:\WINDOWS\system32\Drivers\atksgt.sys
2014-02-10 16:23 - 2014-02-10 16:23 - 00025416 _____ () C:\WINDOWS\system32\Drivers\lirsgt.sys
2014-02-10 15:34 - 2014-02-10 15:34 - 00045200 _____ () C:\Documents and Settings\Admin\Pulpit\wieza_spasska_kreml_afp_600.jpeg
2014-02-08 03:12 - 2014-02-08 03:12 - 00005026 _____ () C:\Documents and Settings\Admin\Pulpit\zzz.log
2014-02-08 01:26 - 2014-02-25 09:08 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\aaa
2014-02-08 00:30 - 2014-02-08 00:31 - 00448512 _____ (OldTimer Tools) C:\Documents and Settings\Admin\Pulpit\TFC.exe
2014-02-07 23:48 - 2014-02-07 23:48 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-02-07 23:48 - 2014-02-07 23:48 - 00000000 _____ () C:\WINDOWS\setupact.log
2014-02-07 06:19 - 2014-02-25 07:53 - 00000278 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-746137067-152049171-1606980848-1003.job
2014-02-06 06:39 - 2014-02-06 06:39 - 00000154 _____ () C:\Documents and Settings\Admin\Pulpit\Skrót do Połączenia sieciowe.lnk
2014-02-05 19:00 - 2014-02-21 09:03 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-02-05 19:00 - 2014-02-05 19:00 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome
2014-02-05 18:55 - 2014-02-25 09:16 - 00001034 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-05 18:55 - 2014-02-25 07:52 - 00001030 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-05 18:55 - 2014-02-05 19:04 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google
2014-02-05 18:53 - 2014-02-05 19:01 - 00000000 ____D () C:\Program Files\Google
2014-02-05 18:52 - 2014-02-25 08:22 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-05 18:44 - 2014-02-05 18:44 - 00000803 _____ () C:\Documents and Settings\Admin\Pulpit\Internet Explorer.lnk
2014-02-05 11:51 - 2014-02-08 00:29 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\Stare dane programu Firefox
2014-02-04 14:29 - 2014-02-20 00:12 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\vvv
2014-02-04 13:27 - 2014-02-25 09:11 - 00000000 ____D () C:\FRST
2014-01-31 16:13 - 2014-01-31 16:13 - 01166132 _____ () C:\Documents and Settings\Admin\Pulpit\adwcleaner.exe
2014-01-31 14:33 - 2014-01-31 14:33 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\ESET
2014-01-31 14:29 - 2014-01-31 14:29 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
2014-01-29 20:28 - 2014-01-29 20:28 - 00089061 _____ () C:\Documents and Settings\Admin\Pulpit\Moonlighting - Pilot.srt
2014-01-28 23:40 - 2014-01-28 23:40 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\ESET
2014-01-28 23:10 - 2014-01-28 23:10 - 00000000 ____D () C:\Program Files\ESET
2014-01-28 23:10 - 2014-01-28 23:10 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\ESET
2014-01-28 23:10 - 2014-01-28 23:10 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\ESET
2014-01-28 10:10 - 2014-02-10 15:59 - 00000049 _____ () C:\WINDOWS\NeroDigital.ini
2014-01-28 10:06 - 2014-01-28 10:06 - 00000331 _____ () C:\Documents and Settings\Admin\Pulpit\Skrót do Mya.lnk
2014-01-28 09:54 - 2014-01-28 09:54 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\MPC-HC
2014-01-27 20:27 - 2014-02-25 07:53 - 00000286 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-746137067-152049171-1606980848-1003.job
2014-01-27 20:25 - 2014-02-18 17:30 - 00000216 _____ () C:\WINDOWS\wiadebug.log
2014-01-27 20:25 - 2014-02-18 17:30 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-01-27 20:25 - 2014-01-27 20:25 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log
2014-01-27 16:43 - 2014-02-12 00:04 - 00091321 _____ () C:\WINDOWS\setupapi.log
2014-01-26 14:00 - 2014-01-26 14:00 - 00000000 ____D () C:\WINDOWS\system32\Adobe
2014-01-26 13:57 - 2014-01-26 13:57 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Macromedia
2014-01-26 13:57 - 2014-01-26 13:57 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Adobe
2014-01-26 13:56 - 2014-02-24 17:24 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-01-26 13:56 - 2014-02-24 17:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-01-26 13:56 - 2014-02-05 19:05 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Adobe
2014-01-26 13:54 - 2014-01-26 13:54 - 00000000 ____D () C:\WINDOWS\Sun
2014-01-26 13:54 - 2014-01-26 13:54 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Sun
2014-01-26 13:53 - 2014-01-26 13:53 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-01-26 13:53 - 2014-01-26 13:53 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Sun
2014-01-26 13:53 - 2014-01-26 13:52 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-26 13:53 - 2014-01-26 13:52 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-26 13:52 - 2014-01-26 13:52 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-26 13:52 - 2014-01-26 13:52 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-26 13:52 - 2014-01-26 13:52 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-26 13:52 - 2014-01-26 13:52 - 00000000 ____D () C:\Program Files\Java
2014-01-26 13:51 - 2014-01-26 13:51 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Sun
2014-01-26 13:50 - 2014-01-26 13:50 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

==================== One Month Modified Files and Folders =======

2014-02-25 09:20 - 2014-02-25 09:10 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\zzzzz
2014-02-25 09:20 - 2014-02-04 13:27 - 00000000 ____D () C:\FRST
2014-02-25 09:16 - 2014-02-05 18:55 - 00001034 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-25 09:10 - 2014-01-25 11:13 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit
2014-02-25 09:09 - 2014-02-25 09:09 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\FRST-OlderVersion
2014-02-25 09:08 - 2014-02-08 01:26 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\aaa
2014-02-25 08:22 - 2014-02-05 18:52 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-25 07:58 - 2014-01-25 11:03 - 00288172 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-25 07:53 - 2014-02-07 06:19 - 00000278 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-746137067-152049171-1606980848-1003.job
2014-02-25 07:53 - 2014-01-27 20:27 - 00000286 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-746137067-152049171-1606980848-1003.job
2014-02-25 07:53 - 2014-01-25 13:10 - 00458752 _____ () C:\WINDOWS\system32\config\ACEEvent.evt
2014-02-25 07:52 - 2014-02-05 18:55 - 00001030 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-25 07:52 - 2014-01-25 11:12 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-25 00:12 - 2014-01-25 11:13 - 00000188 ___SH () C:\Documents and Settings\Admin\ntuser.ini
2014-02-25 00:12 - 2014-01-25 11:12 - 00032594 _____ () C:\WINDOWS\SchedLgU.Txt
2014-02-24 23:26 - 2014-01-25 14:01 - 00000000 ____D () C:\Documents and Settings\Admin\Moje dokumenty\Pobieranie
2014-02-24 17:24 - 2014-01-26 13:56 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-02-24 17:24 - 2014-01-26 13:56 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-02-24 17:23 - 2014-02-24 17:23 - 17858952 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2014-02-24 16:26 - 2001-07-21 19:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-02-21 09:03 - 2014-02-05 19:00 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-02-20 00:12 - 2014-02-20 00:12 - 00035840 ___SH () C:\Documents and Settings\Admin\Pulpit\Thumbs.db
2014-02-20 00:12 - 2014-02-04 14:29 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\vvv
2014-02-20 00:09 - 2014-02-20 00:09 - 00672917 _____ () C:\Documents and Settings\Admin\Pulpit\02-14.jpg~original.jpeg
2014-02-20 00:09 - 2014-02-20 00:09 - 00549924 _____ () C:\Documents and Settings\Admin\Pulpit\01-17.jpg~original.jpeg
2014-02-18 17:30 - 2014-01-27 20:25 - 00000216 _____ () C:\WINDOWS\wiadebug.log
2014-02-18 17:30 - 2014-01-27 20:25 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-02-18 16:40 - 2014-01-25 11:13 - 00000000 ____D () C:\Documents and Settings\Admin
2014-02-18 12:00 - 2014-01-25 11:54 - 00986790 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-18 12:00 - 2001-10-26 13:15 - 00451696 _____ () C:\WINDOWS\system32\perfh015.dat
2014-02-18 12:00 - 2001-10-26 13:15 - 00075706 _____ () C:\WINDOWS\system32\perfc015.dat
2014-02-18 05:47 - 2014-01-25 12:25 - 00065536 _____ () C:\WINDOWS\system32\config\OAlerts.evt
2014-02-17 23:06 - 2014-01-25 14:07 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Real
2014-02-17 23:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Real
2014-02-15 21:13 - 2014-01-25 13:59 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-15 20:11 - 2014-02-15 20:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-12 21:28 - 2014-01-25 13:53 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji\Foxit Software
2014-02-12 21:27 - 2014-01-25 13:53 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Foxit Software
2014-02-12 01:06 - 2014-02-12 00:58 - 00011119 _____ () C:\Documents and Settings\Admin\Pulpit\indeksf.jpeg
2014-02-12 00:04 - 2014-01-27 16:43 - 00091321 _____ () C:\WINDOWS\setupapi.log
2014-02-11 21:47 - 2014-02-11 21:35 - 200944408 _____ () C:\Documents and Settings\Admin\Pulpit\Lone Target S01E04 Race To The Bridge ( www.TV-Masters.com ).mp4
2014-02-11 20:58 - 2014-01-25 11:53 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy
2014-02-11 20:56 - 2014-01-25 11:53 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start
2014-02-11 20:56 - 2014-01-25 11:53 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-02-11 20:56 - 2014-01-25 11:51 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-11 20:54 - 2014-02-11 20:54 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2014-02-11 20:53 - 2014-02-10 16:28 - 00002657 _____ () C:\WINDOWS\DIFx.log
2014-02-10 17:04 - 2014-02-10 17:04 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Games
2014-02-10 17:04 - 2014-01-25 11:13 - 00000000 __RHD () C:\Documents and Settings\Admin\Dane aplikacji
2014-02-10 17:03 - 2014-02-10 17:03 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\InstallShield
2014-02-10 17:03 - 2014-01-25 11:51 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-02-10 16:23 - 2014-02-10 16:23 - 00278984 _____ () C:\WINDOWS\system32\Drivers\atksgt.sys
2014-02-10 16:23 - 2014-02-10 16:23 - 00025416 _____ () C:\WINDOWS\system32\Drivers\lirsgt.sys
2014-02-10 16:02 - 2014-01-25 11:51 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2014-02-10 15:59 - 2014-01-28 10:10 - 00000049 _____ () C:\WINDOWS\NeroDigital.ini
2014-02-10 15:34 - 2014-02-10 15:34 - 00045200 _____ () C:\Documents and Settings\Admin\Pulpit\wieza_spasska_kreml_afp_600.jpeg
2014-02-08 03:12 - 2014-02-08 03:12 - 00005026 _____ () C:\Documents and Settings\Admin\Pulpit\zzz.log
2014-02-08 00:31 - 2014-02-08 00:30 - 00448512 _____ (OldTimer Tools) C:\Documents and Settings\Admin\Pulpit\TFC.exe
2014-02-08 00:29 - 2014-02-05 11:51 - 00000000 ____D () C:\Documents and Settings\Admin\Pulpit\Stare dane programu Firefox
2014-02-08 00:19 - 2014-01-25 11:13 - 00000000 ___HD () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji
2014-02-07 23:48 - 2014-02-07 23:48 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-02-07 23:48 - 2014-02-07 23:48 - 00000000 _____ () C:\WINDOWS\setupact.log
2014-02-06 06:39 - 2014-02-06 06:39 - 00000154 _____ () C:\Documents and Settings\Admin\Pulpit\Skrót do Połączenia sieciowe.lnk
2014-02-05 19:05 - 2014-01-26 13:56 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Adobe
2014-02-05 19:04 - 2014-02-05 18:55 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google
2014-02-05 19:01 - 2014-02-05 18:53 - 00000000 ____D () C:\Program Files\Google
2014-02-05 19:00 - 2014-02-05 19:00 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome
2014-02-05 18:44 - 2014-02-05 18:44 - 00000803 _____ () C:\Documents and Settings\Admin\Pulpit\Internet Explorer.lnk
2014-02-02 05:35 - 2014-01-25 11:13 - 00000000 ___RD () C:\Documents and Settings\Admin\Menu Start\Programy
2014-01-31 16:45 - 2014-01-25 11:13 - 00000000 ___HD () C:\Documents and Settings\Admin\Ustawienia lokalne
2014-01-31 16:44 - 2014-01-25 11:13 - 00000000 ___RD () C:\Documents and Settings\Admin\Moje dokumenty
2014-01-31 16:13 - 2014-01-31 16:13 - 01166132 _____ () C:\Documents and Settings\Admin\Pulpit\adwcleaner.exe
2014-01-31 14:33 - 2014-01-31 14:33 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\ESET
2014-01-31 14:29 - 2014-01-31 14:29 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
2014-01-31 14:29 - 2014-01-25 11:12 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji
2014-01-29 20:28 - 2014-01-29 20:28 - 00089061 _____ () C:\Documents and Settings\Admin\Pulpit\Moonlighting - Pilot.srt
2014-01-28 23:40 - 2014-01-28 23:40 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\ESET
2014-01-28 23:40 - 2014-01-25 11:12 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji
2014-01-28 23:10 - 2014-01-28 23:10 - 00000000 ____D () C:\Program Files\ESET
2014-01-28 23:10 - 2014-01-28 23:10 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\ESET
2014-01-28 23:10 - 2014-01-28 23:10 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\ESET
2014-01-28 10:06 - 2014-01-28 10:06 - 00000331 _____ () C:\Documents and Settings\Admin\Pulpit\Skrót do Mya.lnk
2014-01-28 09:54 - 2014-01-28 09:54 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\MPC-HC
2014-01-27 21:52 - 2014-01-25 14:03 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Winamp
2014-01-27 20:25 - 2014-01-27 20:25 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log
2014-01-26 14:15 - 2014-01-25 11:13 - 00000000 ___RD () C:\Documents and Settings\Admin\Menu Start\Programy\Akcesoria
2014-01-26 14:15 - 2014-01-25 10:58 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Akcesoria
2014-01-26 14:00 - 2014-01-26 14:00 - 00000000 ____D () C:\WINDOWS\system32\Adobe
2014-01-26 13:57 - 2014-01-26 13:57 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Macromedia
2014-01-26 13:57 - 2014-01-26 13:57 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Adobe
2014-01-26 13:54 - 2014-01-26 13:54 - 00000000 ____D () C:\WINDOWS\Sun
2014-01-26 13:54 - 2014-01-26 13:54 - 00000000 ____D () C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Sun
2014-01-26 13:53 - 2014-01-26 13:53 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-01-26 13:53 - 2014-01-26 13:53 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Sun
2014-01-26 13:52 - 2014-01-26 13:53 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-26 13:52 - 2014-01-26 13:53 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-26 13:52 - 2014-01-26 13:52 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-26 13:52 - 2014-01-26 13:52 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-26 13:52 - 2014-01-26 13:52 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-26 13:52 - 2014-01-26 13:52 - 00000000 ____D () C:\Program Files\Java
2014-01-26 13:51 - 2014-01-26 13:51 - 00000000 ____D () C:\Documents and Settings\Admin\Dane aplikacji\Sun
2014-01-26 13:50 - 2014-01-26 13:50 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

Some content of TEMP:
====================
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\Checkupdate.exe
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\Foxit Reader Updater.exe
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\gcapi_dll.dll
C:\Documents and Settings\Admin\Ustawienia lokalne\Temp\gtapi_signed.dll


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2008-04-14 17:51] - [2008-04-14 17:51] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\WINDOWS\system32\winlogon.exe
[2008-04-14 17:51] - [2008-04-14 17:51] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2008-04-14 17:51] - [2008-04-14 17:51] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2008-04-14 17:51] - [2008-04-14 17:51] - 0109056 ____A (Microsoft Corporation) 3e3ae424e27c4cefe4cab368c7b570ea 

C:\WINDOWS\system32\User32.dll
[2008-04-14 17:50] - [2008-04-14 17:50] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2008-04-14 17:51] - [2008-04-14 17:51] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2008-04-14 17:50] - [2008-04-14 17:50] - 0399360 ____A (Microsoft Corporation) 02396dab9dd407b06539981f477f3fec 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2008-04-14 16:31] - [2008-04-14 16:31] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================