Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by Ewa Grudkowska (administrator) on XXXXX-672E639C9 on 28-03-2014 04:45:44
Running from C:\Documents and Settings\Ewa Grudkowska\Pulpit
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\WINDOWS\system32\o2flash.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Symantec Corporation) C:\Program Files\Norton 360\Engine\21.1.0.18\N360.exe
(Symantec Corporation) C:\Program Files\Norton 360\Engine\21.1.0.18\N360.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [16270848 2006-11-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\WINDOWS\ALCMTR.EXE [69632 2005-05-02] (Realtek Semiconductor Corp.)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [PWRISOVM.EXE] - C:\Program Files\PowerISO\PWRISOVM.EXE [336992 2012-05-31] (Power Software Ltd)
HKLM\...\Run: [MSConfig] - C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [171520 2008-04-14] (Microsoft Corporation)
HKLM\...\Run: [UserFaultCheck] - %systemroot%\system32\dumprep 0 -u
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKU\S-1-5-21-1715567821-507921405-839522115-1004\...\MountPoints2: {3a90c1d6-3e67-11de-9bc4-0019d2679449} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explore.exe
AppInit_DLLs: c:\docume~1\alluse~1\daneap~1\bitguard\271832~1.68\{c16c1~1\bitguard.dll => c:\docume~1\alluse~1\daneap~1\bitguard\271832~1.68\{c16c1~1\bitguard.dll File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - D:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.6.0_07\bin\jp2ssv.dll No File
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} -  No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15107/CTPID.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Ewa Grudkowska\Dane aplikacji\Mozilla\Firefox\Profiles\13wpv926.default-1395971597375
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - D:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - D:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-05-02]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2014-03-21]
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - D:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - D:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-05-02]

Chrome: 
=======
CHR HomePage: hxxp://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP
CHR RestoreOnStartup: "hxxp://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\30.0.1599.69\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL No File
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U15) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.150.3) - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Chrome In-App Payments service) - C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-11]
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files\Norton 360\Engine\21.1.0.18\Exts\Chrome.crx [2014-03-21]

========================== Services (Whitelisted) =================

R3 hpqcxs08; D:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [253568 2009-11-18] (Hewlett-Packard Co.)
R2 hpqddsvc; D:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [137344 2009-11-18] (Hewlett-Packard Co.)
R2 HPSLPSVC; D:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [699520 2009-11-18] (Hewlett-Packard Co.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 N360; C:\Program Files\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
R2 O2Flash; C:\WINDOWS\system32\o2flash.exe [36864 2005-01-25] ()

==================== Drivers (Whitelisted) ====================

R1 BHDrvx86; C:\Program Files\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20140319.001\BHDrvx86.sys [1098968 2014-03-19] (Symantec Corporation)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R1 ccSet_N360; C:\WINDOWS\system32\drivers\N360\1501000.012\ccSetx86.sys [127064 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2014-03-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2014-03-21] (Symantec Corporation)
S3 FilterService; C:\WINDOWS\System32\DRIVERS\lvuvcflt.sys [23832 2009-10-07] (Logitech Inc.)
R0 giveio; C:\WINDOWS\System32\giveio.sys [5248 1996-04-03] ()
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2009-08-06] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2009-08-06] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2009-08-06] (HP)
R3 IDSxpx86; C:\Program Files\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20140327.001\IDSxpx86.sys [383120 2014-03-26] (Symantec Corporation)
R3 LVPr2Mon; C:\WINDOWS\System32\Drivers\LVPr2Mon.sys [25752 2009-10-07] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140327.019\NAVENG.SYS [93272 2014-03-21] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140327.019\NAVEX15.SYS [1612376 2014-03-21] (Symantec Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [113104 2012-05-31] (Power Software Ltd)
R0 speedfan; C:\WINDOWS\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R3 SRTSP; C:\WINDOWS\system32\drivers\N360\1501000.012\SRTSP.SYS [651352 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\system32\drivers\N360\1501000.012\SRTSPX.SYS [32344 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\WINDOWS\System32\drivers\N360\1501000.012\SYMDS.SYS [367704 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\WINDOWS\System32\drivers\N360\1501000.012\SYMEFA.SYS [935512 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT.SYS [142936 2014-03-21] (Symantec Corporation)
R1 SymIRON; C:\WINDOWS\system32\drivers\N360\1501000.012\Ironx86.SYS [206936 2013-09-27] (Symantec Corporation)
R1 SYMTDI; C:\WINDOWS\system32\drivers\N360\1501000.012\SYMTDI.SYS [421592 2013-09-26] (Symantec Corporation)
S3 tj2knd5; C:\WINDOWS\System32\DRIVERS\tj2knd5.sys [17616 2002-10-14] (MCCI)
S3 tj2kunic; C:\WINDOWS\System32\DRIVERS\tj2kunic.sys [69680 2002-10-14] (MCCI)
R3 w39n51; C:\WINDOWS\System32\DRIVERS\w39n51.sys [1428096 2005-12-02] (Intel® Corporation)
S3 EraserUtilDrv11311; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11311.sys [X]
S3 massfilter_lte; \??\C:\WINDOWS\system32\drivers\massfilter_lte.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 zgdcat; system32\DRIVERS\zgdcat.sys [X]
S3 zgdcdiag; system32\DRIVERS\zgdcdiag.sys [X]
S3 zgdcmdm; system32\DRIVERS\zgdcmdm.sys [X]
S3 zgdcnet; system32\DRIVERS\zgdcnet.sys [X]
S3 zgdcnmea; system32\DRIVERS\zgdcnmea.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-28 04:40 - 2014-03-28 04:46 - 00016232 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\FRST.txt
2014-03-28 03:51 - 2014-03-28 03:51 - 00448512 _____ (OldTimer Tools) C:\Documents and Settings\Ewa Grudkowska\Pulpit\TFC.exe
2014-03-28 03:29 - 2014-03-28 03:29 - 00005455 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\AdwCleaner[S0].txt
2014-03-28 03:04 - 2014-03-28 03:20 - 00000000 ____D () C:\AdwCleaner
2014-03-28 03:01 - 2014-03-28 03:02 - 01950720 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\adwcleaner.exe
2014-03-28 02:13 - 2014-03-28 02:13 - 00094208 _____ () C:\WINDOWS\Minidump\Mini032814-01.dmp
2014-03-28 02:13 - 2014-03-28 02:13 - 00000000 ____D () C:\WINDOWS\Minidump
2014-03-27 21:44 - 2014-03-27 21:44 - 00380416 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\vy581g8p.exe
2014-03-27 20:54 - 2014-03-28 04:45 - 00000000 ____D () C:\FRST
2014-03-27 20:36 - 2014-03-27 20:36 - 01145856 _____ (Farbar) C:\Documents and Settings\Ewa Grudkowska\Pulpit\FRST.exe
2014-03-27 20:28 - 2014-03-27 20:28 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Ewa Grudkowska\Pulpit\OTL.exe
2014-03-24 23:26 - 2014-03-24 23:26 - 00004898 _____ () C:\WINDOWS\KB2909210-IE8.log
2014-03-24 23:25 - 2014-03-24 23:26 - 00005912 _____ () C:\WINDOWS\ocgen.log
2014-03-24 23:25 - 2014-03-24 23:26 - 00004734 _____ () C:\WINDOWS\tsoc.log
2014-03-24 23:25 - 2014-03-24 23:26 - 00001981 _____ () C:\WINDOWS\iis6.log
2014-03-24 23:25 - 2014-03-24 23:26 - 00001374 _____ () C:\WINDOWS\imsins.log
2014-03-24 23:25 - 2014-03-24 23:26 - 00001374 _____ () C:\WINDOWS\imsins.BAK
2014-03-24 23:25 - 2014-03-24 23:26 - 00000772 _____ () C:\WINDOWS\ocmsn.log
2014-03-24 23:25 - 2014-03-24 23:26 - 00000618 _____ () C:\WINDOWS\msgsocm.log
2014-03-24 23:24 - 2014-03-24 23:26 - 00007752 _____ () C:\WINDOWS\KB2510531-IE8.log
2014-03-23 18:43 - 2014-03-23 18:44 - 00000000 ____D () C:\Program Files\SpeedFan
2014-03-23 18:43 - 2014-03-23 18:43 - 00000045 _____ () C:\WINDOWS\system32\initdebug.nfo
2014-03-23 18:43 - 2014-03-23 18:43 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Menu Start\Programy\SpeedFan
2014-03-23 16:31 - 2014-03-23 20:35 - 00065536 _____ () C:\WINDOWS\system32\config\OAlerts.evt
2014-03-23 16:30 - 2014-03-23 16:30 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\SharePoint
2014-03-23 16:30 - 2014-03-23 16:30 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Office
2014-03-23 16:27 - 2014-03-23 16:27 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services
2014-03-23 16:27 - 2014-03-23 16:27 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-03-23 16:26 - 2014-03-23 16:26 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-03-23 16:26 - 2014-03-23 16:26 - 00000000 ____D () C:\Program Files\Microsoft Sync Framework
2014-03-23 16:26 - 2014-03-23 16:26 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-03-23 16:25 - 2014-03-23 16:25 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2014-03-23 16:22 - 2014-03-23 16:30 - 00000000 ____D () C:\WINDOWS\SHELLNEW
2014-03-23 16:22 - 2014-03-23 16:22 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-03-23 16:21 - 2014-03-23 16:21 - 00000000 __RHD () C:\MSOCache
2014-03-23 15:47 - 2014-03-23 15:47 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Dane aplikacji\PowerISO
2014-03-23 15:41 - 2014-03-23 15:41 - 00000682 _____ () C:\Documents and Settings\All Users\Pulpit\PowerISO.lnk
2014-03-23 15:41 - 2014-03-23 15:41 - 00000000 ____D () C:\Program Files\PowerISO
2014-03-23 15:41 - 2014-03-23 15:41 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PowerISO
2014-03-23 02:11 - 2014-03-23 02:12 - 00000000 ____D () C:\Program Files\Odkurzacz
2014-03-23 02:11 - 2014-03-23 02:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Odkurzacz
2014-03-23 02:11 - 2014-03-23 02:11 - 00000734 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\Odkurzacz.lnk
2014-03-22 23:10 - 2014-03-22 23:10 - 00000000 __SHD () C:\Documents and Settings\Ewa Grudkowska\IECompatCache
2014-03-22 23:07 - 2014-03-22 23:07 - 00000000 __SHD () C:\Documents and Settings\Ewa Grudkowska\PrivacIE
2014-03-22 23:00 - 2014-03-22 23:00 - 00000000 __SHD () C:\Documents and Settings\NetworkService\IETldCache
2014-03-22 22:58 - 2014-03-22 22:58 - 00000000 __SHD () C:\Documents and Settings\Ewa Grudkowska\IETldCache
2014-03-22 22:38 - 2014-03-27 16:17 - 00000000 ____D () C:\WINDOWS\ie8updates
2014-03-22 22:32 - 2014-03-28 04:35 - 00031971 _____ () C:\WINDOWS\setupapi.log
2014-03-22 22:25 - 2014-03-22 22:32 - 00000000 __HDC () C:\WINDOWS\ie8
2014-03-22 22:17 - 2014-02-24 12:35 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
2014-03-22 22:16 - 2014-02-24 12:35 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
2014-03-22 22:16 - 2014-02-24 12:35 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
2014-03-22 22:16 - 2014-02-24 12:35 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
2014-03-22 22:16 - 2011-08-16 11:45 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iecompat.dll
2014-03-22 15:33 - 2014-03-22 15:33 - 00000000 ____D () C:\Local Disk F_32220141533
2014-03-22 15:20 - 2014-03-22 15:22 - 00001237 ____H () C:\WINDOWS\EPMBatch.ept
2014-03-22 15:10 - 2014-03-22 15:10 - 00000000 ____D () C:\Program Files\EaseUS
2014-03-22 15:06 - 2014-03-22 15:06 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Dane aplikacji\Malwarebytes
2014-03-22 15:05 - 2014-03-22 15:05 - 00000784 _____ () C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
2014-03-22 14:51 - 2014-03-23 10:52 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-22 14:51 - 2014-03-22 14:51 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-03-22 14:51 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-03-22 14:18 - 2014-03-22 14:18 - 00000759 _____ () C:\Documents and Settings\All Users\Pulpit\Picasa 3.lnk
2014-03-22 14:13 - 2014-03-22 14:13 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Picasa 3
2014-03-22 11:36 - 2008-04-14 18:16 - 00005504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys
2014-03-22 10:31 - 2007-01-13 16:49 - 00176128 _____ (Intel Corporation) C:\WINDOWS\system32\igfxres.dll
2014-03-22 10:25 - 2014-03-22 10:25 - 00000000 ____D () C:\WINDOWS\system32\x64
2014-03-22 10:24 - 2007-01-13 17:46 - 00204800 _____ () C:\WINDOWS\system32\igfxCoIn_v4764.dll
2014-03-22 10:24 - 2007-01-13 17:33 - 05672032 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igxpmp32.sys
2014-03-22 10:24 - 2007-01-13 17:33 - 02482688 _____ (Intel Corporation) C:\WINDOWS\system32\igxpdx32.dll
2014-03-22 10:24 - 2007-01-13 17:33 - 00057344 _____ (Intel Corporation) C:\WINDOWS\system32\igxprd32.dll
2014-03-22 10:24 - 2007-01-13 17:32 - 01563776 _____ (Intel Corporation) C:\WINDOWS\system32\igxpdv32.dll
2014-03-22 10:24 - 2007-01-13 17:32 - 00149504 _____ (Intel Corporation) C:\WINDOWS\system32\igxpgd32.dll
2014-03-22 10:24 - 2007-01-13 16:49 - 00176128 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsky.lrc
2014-03-22 10:24 - 2007-01-13 16:49 - 00172032 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrslv.lrc
2014-03-22 10:20 - 2014-03-22 10:36 - 00057600 _____ () C:\WINDOWS\DPINST.LOG
2014-03-22 09:53 - 2014-03-22 10:10 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\DriverMax
2014-03-22 09:53 - 2014-03-22 09:53 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji\Innovative Solutions
2014-03-22 09:52 - 2014-03-22 09:52 - 00000000 ____D () C:\Program Files\Innovative Solutions
2014-03-21 19:36 - 2014-03-28 04:16 - 00000240 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2014-03-21 19:36 - 2014-03-22 08:31 - 00000234 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
2014-03-21 18:38 - 2014-03-21 18:38 - 00000730 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2014-03-21 18:38 - 2014-03-21 18:38 - 00000724 _____ () C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2014-03-21 18:38 - 2014-03-21 18:38 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-21 17:25 - 2014-02-27 00:28 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe
2014-03-21 17:25 - 2014-02-27 00:28 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe
2014-03-21 15:16 - 2014-03-21 15:16 - 00142936 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
2014-03-21 15:16 - 2014-03-21 15:16 - 00008194 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT.CAT
2014-03-21 15:16 - 2014-03-21 15:16 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Norton 360.LNK
2014-03-21 15:16 - 2014-03-21 15:16 - 00000000 ____D () C:\Program Files\Symantec
2014-03-21 15:15 - 2014-03-21 17:57 - 00000000 ____D () C:\WINDOWS\system32\Drivers\N360
2014-03-21 15:15 - 2014-03-21 15:16 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Norton 360
2014-03-21 15:15 - 2014-03-21 15:15 - 00000000 ____D () C:\Program Files\Norton 360
2014-03-20 22:53 - 2014-03-24 23:31 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight
2014-03-15 17:13 - 2014-03-15 17:13 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji\Skype
2014-03-15 17:11 - 2014-03-25 20:32 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk
2014-03-15 17:11 - 2014-03-15 17:11 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-15 17:11 - 2014-03-15 17:11 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Skype
2014-03-11 21:07 - 2014-03-11 21:07 - 04550656 _____ (Google Inc.) C:\WINDOWS\system32\GPhotos.scr

==================== One Month Modified Files and Folders =======

2014-03-28 04:46 - 2014-03-28 04:40 - 00016232 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\FRST.txt
2014-03-28 04:45 - 2014-03-27 20:54 - 00000000 ____D () C:\FRST
2014-03-28 04:45 - 2007-11-29 19:25 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Pulpit
2014-03-28 04:35 - 2014-03-22 22:32 - 00031971 _____ () C:\WINDOWS\setupapi.log
2014-03-28 04:31 - 2007-11-29 19:01 - 01145774 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-28 04:30 - 2006-03-02 13:00 - 00013740 _____ () C:\WINDOWS\system32\wpa.dbl
2014-03-28 04:23 - 2007-11-29 19:44 - 00000211 ___SH () C:\boot.ini
2014-03-28 04:23 - 2006-03-02 13:00 - 00000658 _____ () C:\WINDOWS\win.ini
2014-03-28 04:23 - 2006-03-02 13:00 - 00000227 _____ () C:\WINDOWS\system.ini
2014-03-28 04:22 - 2009-02-26 15:13 - 00000000 ____D () C:\WINDOWS\pss
2014-03-28 04:17 - 2007-11-29 19:48 - 00000157 _____ () C:\WINDOWS\wiadebug.log
2014-03-28 04:16 - 2014-03-21 19:36 - 00000240 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2014-03-28 04:16 - 2007-11-29 19:48 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-03-28 04:16 - 2007-11-29 19:07 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-03-28 04:13 - 2007-11-29 19:25 - 00000188 ___SH () C:\Documents and Settings\Ewa Grudkowska\ntuser.ini
2014-03-28 04:13 - 2007-11-29 19:07 - 00032580 _____ () C:\WINDOWS\SchedLgU.Txt
2014-03-28 03:51 - 2014-03-28 03:51 - 00448512 _____ (OldTimer Tools) C:\Documents and Settings\Ewa Grudkowska\Pulpit\TFC.exe
2014-03-28 03:29 - 2014-03-28 03:29 - 00005455 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\AdwCleaner[S0].txt
2014-03-28 03:22 - 2007-11-29 19:25 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska
2014-03-28 03:20 - 2014-03-28 03:04 - 00000000 ____D () C:\AdwCleaner
2014-03-28 03:19 - 2007-11-29 19:45 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-03-28 03:19 - 2007-11-29 19:25 - 00000000 __RHD () C:\Documents and Settings\Ewa Grudkowska\Dane aplikacji
2014-03-28 03:19 - 2007-11-29 19:25 - 00000000 ___RD () C:\Documents and Settings\Ewa Grudkowska\Menu Start\Programy
2014-03-28 03:19 - 2007-11-29 19:25 - 00000000 ___HD () C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji
2014-03-28 03:02 - 2014-03-28 03:01 - 01950720 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\adwcleaner.exe
2014-03-28 02:37 - 2007-11-29 19:02 - 00002596 ____C () C:\WINDOWS\system32\CONFIG.NT
2014-03-28 02:13 - 2014-03-28 02:13 - 00094208 _____ () C:\WINDOWS\Minidump\Mini032814-01.dmp
2014-03-28 02:13 - 2014-03-28 02:13 - 00000000 ____D () C:\WINDOWS\Minidump
2014-03-27 21:44 - 2014-03-27 21:44 - 00380416 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\vy581g8p.exe
2014-03-27 20:36 - 2014-03-27 20:36 - 01145856 _____ (Farbar) C:\Documents and Settings\Ewa Grudkowska\Pulpit\FRST.exe
2014-03-27 20:28 - 2014-03-27 20:28 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Ewa Grudkowska\Pulpit\OTL.exe
2014-03-27 16:17 - 2014-03-22 22:38 - 00000000 ____D () C:\WINDOWS\ie8updates
2014-03-27 16:17 - 2007-11-29 19:03 - 00000000 ___HD () C:\WINDOWS\$hf_mig$
2014-03-27 16:11 - 2010-01-18 10:39 - 00000000 _____ () C:\WINDOWS\system32\Drivers\lvuvc.hs
2014-03-27 16:11 - 2010-01-17 20:05 - 00000000 _____ () C:\WINDOWS\system32\Drivers\logiflt.iad
2014-03-26 00:42 - 2010-03-19 19:21 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2014-03-26 00:38 - 2013-10-17 19:01 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-03-26 00:10 - 2007-11-29 18:59 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-25 23:39 - 2008-10-01 14:08 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Dane aplikacji\Skype
2014-03-25 20:32 - 2014-03-15 17:11 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk
2014-03-24 23:31 - 2014-03-20 22:53 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight
2014-03-24 23:30 - 2012-08-20 15:33 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-24 23:26 - 2014-03-24 23:26 - 00004898 _____ () C:\WINDOWS\KB2909210-IE8.log
2014-03-24 23:26 - 2014-03-24 23:25 - 00005912 _____ () C:\WINDOWS\ocgen.log
2014-03-24 23:26 - 2014-03-24 23:25 - 00004734 _____ () C:\WINDOWS\tsoc.log
2014-03-24 23:26 - 2014-03-24 23:25 - 00001981 _____ () C:\WINDOWS\iis6.log
2014-03-24 23:26 - 2014-03-24 23:25 - 00001374 _____ () C:\WINDOWS\imsins.log
2014-03-24 23:26 - 2014-03-24 23:25 - 00001374 _____ () C:\WINDOWS\imsins.BAK
2014-03-24 23:26 - 2014-03-24 23:25 - 00000772 _____ () C:\WINDOWS\ocmsn.log
2014-03-24 23:26 - 2014-03-24 23:25 - 00000618 _____ () C:\WINDOWS\msgsocm.log
2014-03-24 23:26 - 2014-03-24 23:24 - 00007752 _____ () C:\WINDOWS\KB2510531-IE8.log
2014-03-24 23:26 - 2009-07-15 09:19 - 01737964 _____ () C:\WINDOWS\FaxSetup.log
2014-03-24 23:26 - 2009-07-15 09:19 - 00578900 _____ () C:\WINDOWS\comsetup.log
2014-03-24 23:26 - 2009-07-15 09:19 - 00351110 _____ () C:\WINDOWS\ntdtcsetup.log
2014-03-23 20:35 - 2014-03-23 16:31 - 00065536 _____ () C:\WINDOWS\system32\config\OAlerts.evt
2014-03-23 18:44 - 2014-03-23 18:43 - 00000000 ____D () C:\Program Files\SpeedFan
2014-03-23 18:43 - 2014-03-23 18:43 - 00000045 _____ () C:\WINDOWS\system32\initdebug.nfo
2014-03-23 18:43 - 2014-03-23 18:43 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Menu Start\Programy\SpeedFan
2014-03-23 17:27 - 2013-05-02 11:21 - 00073896 _____ () C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2014-03-23 17:26 - 2007-11-29 19:45 - 00283720 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-23 16:30 - 2014-03-23 16:30 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\SharePoint
2014-03-23 16:30 - 2014-03-23 16:30 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Office
2014-03-23 16:30 - 2014-03-23 16:22 - 00000000 ____D () C:\WINDOWS\SHELLNEW
2014-03-23 16:30 - 2007-11-29 19:45 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-03-23 16:29 - 2013-10-17 19:05 - 00000000 ____D () C:\Program Files\MSBuild
2014-03-23 16:29 - 2007-11-29 19:46 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-23 16:27 - 2014-03-23 16:27 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services
2014-03-23 16:27 - 2014-03-23 16:27 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-03-23 16:26 - 2014-03-23 16:26 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-03-23 16:26 - 2014-03-23 16:26 - 00000000 ____D () C:\Program Files\Microsoft Sync Framework
2014-03-23 16:26 - 2014-03-23 16:26 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-03-23 16:26 - 2007-12-01 15:25 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-03-23 16:25 - 2014-03-23 16:25 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2014-03-23 16:22 - 2014-03-23 16:22 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-03-23 16:21 - 2014-03-23 16:21 - 00000000 __RHD () C:\MSOCache
2014-03-23 15:47 - 2014-03-23 15:47 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Dane aplikacji\PowerISO
2014-03-23 15:41 - 2014-03-23 15:41 - 00000682 _____ () C:\Documents and Settings\All Users\Pulpit\PowerISO.lnk
2014-03-23 15:41 - 2014-03-23 15:41 - 00000000 ____D () C:\Program Files\PowerISO
2014-03-23 15:41 - 2014-03-23 15:41 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PowerISO
2014-03-23 15:41 - 2007-11-29 19:45 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-03-23 10:52 - 2014-03-22 14:51 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-23 10:52 - 2008-04-10 09:13 - 00000000 ____D () C:\Program Files\Windows Media Connect 2
2014-03-23 10:52 - 2007-11-29 18:58 - 00000000 ____D () C:\Program Files\Messenger
2014-03-23 10:18 - 2007-11-29 19:00 - 00000000 ____D () C:\WINDOWS\system32\Restore
2014-03-23 10:14 - 2013-03-25 19:43 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack
2014-03-23 10:08 - 2013-03-14 13:01 - 00001052 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.disable
2014-03-23 09:54 - 2014-01-23 21:49 - 00001038 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1715567821-507921405-839522115-1004UA.disable
2014-03-23 02:12 - 2014-03-23 02:11 - 00000000 ____D () C:\Program Files\Odkurzacz
2014-03-23 02:12 - 2014-03-23 02:11 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Odkurzacz
2014-03-23 02:11 - 2014-03-23 02:11 - 00000734 _____ () C:\Documents and Settings\Ewa Grudkowska\Pulpit\Odkurzacz.lnk
2014-03-22 23:10 - 2014-03-22 23:10 - 00000000 __SHD () C:\Documents and Settings\Ewa Grudkowska\IECompatCache
2014-03-22 23:07 - 2014-03-22 23:07 - 00000000 __SHD () C:\Documents and Settings\Ewa Grudkowska\PrivacIE
2014-03-22 23:00 - 2014-03-22 23:00 - 00000000 __SHD () C:\Documents and Settings\NetworkService\IETldCache
2014-03-22 23:00 - 2007-11-29 19:06 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2014-03-22 22:59 - 2007-11-29 19:25 - 00000803 _____ () C:\Documents and Settings\Ewa Grudkowska\Menu Start\Programy\Internet Explorer.lnk
2014-03-22 22:58 - 2014-03-22 22:58 - 00000000 __SHD () C:\Documents and Settings\Ewa Grudkowska\IETldCache
2014-03-22 22:58 - 2013-03-14 13:01 - 00001048 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.disable
2014-03-22 22:58 - 2008-01-21 12:03 - 00000000 ____D () C:\WINDOWS\system32\pl-pl
2014-03-22 22:58 - 2007-11-29 19:36 - 00000000 ____D () C:\WINDOWS\Media
2014-03-22 22:58 - 2007-11-29 19:36 - 00000000 ____D () C:\WINDOWS\Help
2014-03-22 22:32 - 2014-03-22 22:25 - 00000000 __HDC () C:\WINDOWS\ie8
2014-03-22 22:20 - 2009-06-24 16:13 - 01140573 _____ () C:\WINDOWS\setupapi.log.0.old
2014-03-22 21:54 - 2014-01-23 21:49 - 00001016 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1715567821-507921405-839522115-1004Core.disable
2014-03-22 17:08 - 2009-02-04 12:45 - 00000069 ____C () C:\WINDOWS\NeroDigital.ini
2014-03-22 15:33 - 2014-03-22 15:33 - 00000000 ____D () C:\Local Disk F_32220141533
2014-03-22 15:22 - 2014-03-22 15:20 - 00001237 ____H () C:\WINDOWS\EPMBatch.ept
2014-03-22 15:10 - 2014-03-22 15:10 - 00000000 ____D () C:\Program Files\EaseUS
2014-03-22 15:06 - 2014-03-22 15:06 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Dane aplikacji\Malwarebytes
2014-03-22 15:05 - 2014-03-22 15:05 - 00000784 _____ () C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
2014-03-22 14:51 - 2014-03-22 14:51 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-03-22 14:18 - 2014-03-22 14:18 - 00000759 _____ () C:\Documents and Settings\All Users\Pulpit\Picasa 3.lnk
2014-03-22 14:18 - 2008-12-22 10:10 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji\Google
2014-03-22 14:13 - 2014-03-22 14:13 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Picasa 3
2014-03-22 14:13 - 2010-01-19 17:34 - 00006782 ____C () C:\WINDOWS\system32\lvcoinst.log
2014-03-22 14:12 - 2013-03-14 11:09 - 00000000 ____D () C:\Program Files\Google
2014-03-22 11:35 - 2007-11-29 19:34 - 00000000 ____D () C:\WINDOWS\system32\ReinstallBackups
2014-03-22 10:36 - 2014-03-22 10:20 - 00057600 _____ () C:\WINDOWS\DPINST.LOG
2014-03-22 10:25 - 2014-03-22 10:25 - 00000000 ____D () C:\WINDOWS\system32\x64
2014-03-22 10:10 - 2014-03-22 09:53 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\DriverMax
2014-03-22 09:53 - 2014-03-22 09:53 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji\Innovative Solutions
2014-03-22 09:52 - 2014-03-22 09:52 - 00000000 ____D () C:\Program Files\Innovative Solutions
2014-03-22 08:31 - 2014-03-21 19:36 - 00000234 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
2014-03-21 18:38 - 2014-03-21 18:38 - 00000730 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2014-03-21 18:38 - 2014-03-21 18:38 - 00000724 _____ () C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2014-03-21 18:38 - 2014-03-21 18:38 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-21 18:38 - 2013-12-24 21:42 - 00000000 ____D () C:\Program Files\mozilla firefox
2014-03-21 18:08 - 2007-11-29 19:45 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
2014-03-21 17:57 - 2014-03-21 15:15 - 00000000 ____D () C:\WINDOWS\system32\Drivers\N360
2014-03-21 16:07 - 2007-11-29 19:25 - 00000000 ___HD () C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne
2014-03-21 15:58 - 2012-06-20 16:52 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-03-21 15:16 - 2014-03-21 15:16 - 00142936 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
2014-03-21 15:16 - 2014-03-21 15:16 - 00008194 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT.CAT
2014-03-21 15:16 - 2014-03-21 15:16 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Norton 360.LNK
2014-03-21 15:16 - 2014-03-21 15:16 - 00000000 ____D () C:\Program Files\Symantec
2014-03-21 15:16 - 2014-03-21 15:15 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Norton 360
2014-03-21 15:15 - 2014-03-21 15:15 - 00000000 ____D () C:\Program Files\Norton 360
2014-03-21 15:15 - 2012-06-20 16:52 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Norton
2014-03-21 13:51 - 2009-07-15 09:19 - 00003210 _____ () C:\WINDOWS\setupact.log
2014-03-20 22:51 - 2013-08-14 14:44 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-03-20 22:48 - 2007-12-02 21:57 - 87350280 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-15 17:13 - 2014-03-15 17:13 - 00000000 ____D () C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Dane aplikacji\Skype
2014-03-15 17:12 - 2008-05-29 21:05 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Skype
2014-03-15 17:11 - 2014-03-15 17:11 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-15 17:11 - 2014-03-15 17:11 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Skype
2014-03-15 17:11 - 2009-06-02 23:02 - 00000000 ___RD () C:\Program Files\Skype
2014-03-11 21:07 - 2014-03-11 21:07 - 04550656 _____ (Google Inc.) C:\WINDOWS\system32\GPhotos.scr
2014-02-27 00:28 - 2014-03-21 17:25 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe
2014-02-27 00:28 - 2014-03-21 17:25 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe

Some content of TEMP:
====================
C:\Documents and Settings\Ewa Grudkowska\Ustawienia lokalne\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2006-03-02 13:00] - [2008-04-14 18:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\WINDOWS\system32\winlogon.exe
[2006-03-02 13:00] - [2008-04-14 18:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2006-03-02 13:00] - [2008-04-14 18:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2006-03-02 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\WINDOWS\system32\User32.dll
[2006-03-02 13:00] - [2008-04-14 18:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2006-03-02 13:00] - [2008-04-14 18:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2006-03-02 13:00] - [2009-02-09 11:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2006-03-02 13:00] - [2008-04-14 17:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================