Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by Giza (administrator) on ZXC-45AF33E99D0 on 05-04-2014 16:08:54
Running from C:\Documents and Settings\Giza\Pulpit
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Apple Computer, Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
() C:\WINDOWS\system32\PnkBstrA.exe
() C:\WINDOWS\system32\PnkBstrB.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
() C:\{$1284-9213-2940-1289$}\svchost.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Ask) C:\Program Files\Ask.com\Updater\Updater.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
() C:\Program Files\Mobogenie\DaemonProcess.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Facebook Inc.) C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\WINDOWS\System32\WScript.exe
(Opera Software) C:\Program Files\Opera\Opera.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Swearware) C:\Documents and Settings\Giza\Pulpit\dds.pif


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [16857600 2008-02-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvCplDaemon] - C:\WINDOWS\system32\NvCpl.dll [13529088 2008-05-16] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] - C:\WINDOWS\system32\NvMcTray.dll [86016 2008-05-16] (NVIDIA Corporation)
HKLM\...\Run: [ApnUpdater] - C:\Program Files\Ask.com\Updater\Updater.exe [1391272 2012-01-03] (Ask)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4241512 2012-03-07] (AVAST Software)
HKLM\...\Run: [vProt] - "C:\Program Files\AVG Secure Search\vprot.exe"
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
HKLM\...\Run: [SDTray] - "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [738496 2013-10-18] ()
HKLM\...\Run: [Host Process for Windows Services] - C:\{$1284-9213-2940-1289$}\svchost.exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows"
HKLM\...\Winlogon: [Userinit] userinit.exe,EXPLORER.EXE
Winlogon\Notify\LogonInit: C:\Program Files\Common Files\logonInit.dll ()
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [EXPLORER.EXE] - C:\WINDOWS\EXPLORER.EXE [1035264 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [SDP] - C:\Program Files\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [uTorrent] - C:\Program Files\uTorrent\uTorrent.exe [880496 2012-05-11] (BitTorrent, Inc.)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [543432 2014-01-17] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [Facebook Update] - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2014-03-26] (Facebook Inc.)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [EADM] - C:\Program Files\Origin\Origin.exe [3588952 2014-03-29] (Electronic Arts)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\CurrentVersion\Windows: [Load] C:\{$1284-9213-2940-1289$}\svchost.exe <===== ATTENTION
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\MountPoints2: {feb4573f-8f67-11e0-841f-001d7d7b7c33} - N:\EXPLORER.EXE
IFEO\avcenter.exe: [Debugger] nsjw.exe
IFEO\avguard.exe: [Debugger] nsjw.exe
IFEO\avp.exe: [Debugger] nsjw.exe
IFEO\bdagent.exe: [Debugger] nsjw.exe
IFEO\cavwp.exe: [Debugger] nsjw.exe
IFEO\ccuac.exe: [Debugger] nsjw.exe
IFEO\cis.exe: [Debugger] nsjw.exe
IFEO\cistray.exe: [Debugger] nsjw.exe
IFEO\cmdagent.exe: [Debugger] nsjw.exe
IFEO\ComboFix.exe: [Debugger] nsjw.exe
IFEO\egui.exe: [Debugger] nsjw.exe
IFEO\hijackthis.exe: [Debugger] nsjw.exe
IFEO\keyscrambler.exe: [Debugger] nsjw.exe
IFEO\mbam.exe: [Debugger] nsjw.exe
IFEO\MpCmdRun.exe: [Debugger] nsjw.exe
IFEO\MSASCui.exe: [Debugger] nsjw.exe
IFEO\MsMpEng.exe: [Debugger] nsjw.exe
IFEO\msseces.exe: [Debugger] nsjw.exe
IFEO\SDUpdate.exe: [Debugger] nsjw.exe
IFEO\spybotsd.exe: [Debugger] nsjw.exe
IFEO\vprot.exe: [Debugger] nsjw.exe
IFEO\wireshark.exe: [Debugger] nsjw.exe
IFEO\zlclient.exe: [Debugger] nsjw.exe
Startup: C:\Documents and Settings\Giza\Menu Start\Programy\Autostart\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
InternetURL: C:\Documents and Settings\Giza\Menu Start\Programy\Autostart\svchost.exe.url -> 0

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.msn.com/?pc=UP97&ocid=UP97DHP
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.gazeta.pl/0,0.html?p=125
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://home.sweetim.com/?crg=3.1010006.10037&barid={7A343A4D-9254-11E2-88BB-001D7D7B7C33}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010006.10037&barid={7A343A4D-9254-11E2-88BB-001D7D7B7C33}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
URLSearchHook: HKCU - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo0.dll (Conduit Ltd.)
SearchScopes: HKLM - DefaultScope {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10037&barid={7A343A4D-9254-11E2-88BB-001D7D7B7C33}
SearchScopes: HKCU - DefaultScope {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=58AE001D7D7B7C33
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = http://websearch.ask.com/redirect?client=ie&tb=VDJ&o=41647960&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=8R&apn_dtid=YYYYYYYYPL&apn_uid=6DCDC086-D05A-492C-BCB2-B97C3556C754&apn_sauid=270D878E-86D3-428E-B181-6CAE89780898
SearchScopes: HKCU - {26ECF243-0ADC-4908-9610-6AD8B8415B1D} URL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={314514B3-01A4-4CF2-B699-428918D49861}&mid=6a74650685d44227996df029c7cdc83e-8b0211e54017c1fecb32e27a533795764b692244&lang=pl&ds=ax011&pr=&d=2013-01-24 15:51:14&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={7A343A4D-9254-11E2-88BB-001D7D7B7C33}&crg=3.1010006.10037&st=23
BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll (Yahoo! Inc.)
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll No File
BHO: YouTube To ALLPlayer - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org)
BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} - C:\Program Files\StartNow Toolbar\Toolbar32.dll ()
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.2.0.38\AVG Secure Search_toolbar.dll No File
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo0.dll (Conduit Ltd.)
BHO: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll (Yahoo! Inc.)
Toolbar: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo0.dll (Conduit Ltd.)
Toolbar: HKLM - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} -  No File
Toolbar: HKLM - StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:\Program Files\StartNow Toolbar\Toolbar32.dll ()
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.2.0.38\AVG Secure Search_toolbar.dll No File
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll (Yahoo! Inc.)
Toolbar: HKCU - uTorrentBar Toolbar - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\prxtbuTo0.dll (Conduit Ltd.)
Toolbar: HKCU - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKCU - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.2.0\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [94208] (Apple Computer, Inc.)
Winsock: Catalog9 01 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9 02 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9 08 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{ACF3496A-5DF7-4948-B329-9B98B85023D3}: [NameServer]82.177.224.2,82.177.224.3

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default
FF DefaultSearchEngine: Bing 
FF SearchEngineOrder.3: Bing 
FF SelectedSearchEngine: Bing 
FF Homepage: hxxp://pl.msn.com/?pc=UP97&ocid=UP97DHP
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\17.2.0\\npsitesafety.dll (AVG Technologies)
FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( )
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.652 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.652 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\searchplugins\daemon-search.xml
FF SearchPlugin: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\searchplugins\SweetIM Search.xml
FF SearchPlugin: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\searchplugins\yahoo-zugo.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml
FF Extension: DAEMON Tools Toolbar - C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\Extensions\DTToolbar@toolbarnet.com [2012-02-01]
FF Extension: Iplex to ALLPlayer - C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\Extensions\IplextoALL@ALLPlayer.org [2012-05-06]
FF Extension: VirtualDJ Toolbar - C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\Extensions\toolbar@ask.com [2011-09-16]
FF Extension: StartNow Toolbar - C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\Extensions\{5911488E-9D1E-40ec-8CBB-06B231CC153F} [2012-01-22]
FF Extension: FlashPlayer 10 - C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\Extensions\flash@adobee.com.xpi [2012-01-08]
FF Extension: Iplex to ALLPlayer - C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2012-01-22]
FF Extension: ALLYouTubeDownloader - C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\2kjoktdd.default\Extensions\YouTubetoALL@ALLPlayer.org.xpi [2013-06-07]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-29]
FF Extension: Hotspot Shield Extension - C:\Program Files\Mozilla Firefox\browser\extensions\afext@anchorfree.com [2014-03-29]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-06-15]
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2011-06-25]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! WebRep - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-05-04]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search\FireFoxExt\17.2.0.38
FF Extension: AVG Security Toolbar - C:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search\FireFoxExt\17.2.0.38 [2013-12-09]

Chrome: 
=======
CHR HomePage: hxxp://pl.msn.com/?pc=UP97&ocid=UP97DHP
CHR DefaultSearchKeyword: bing.com
CHR DefaultSearchProvider: Bing
CHR DefaultSearchURL: http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}
CHR DefaultNewTabURL: 
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Skype Click to Call) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll No File
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Delta Toolbar) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde [2013-05-29]
CHR Extension: (avast! WebRep) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2012-05-04]
CHR Extension: (StartNow) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\incfcgceegpikennjoplhfghaaikdgei [2012-11-10]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2011-06-15]
CHR Extension: (Skype Click to Call) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-05-04]
CHR Extension: (AVG Security Toolbar) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2013-01-24]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-22]
CHR Extension: (SweetPacks Chrome Extension) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2013-10-13]
CHR Extension: (Allin1Convert) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pfkanglmmnniiolknlhaajllgmlgcdkj [2014-01-19]
CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Documents and Settings\Giza\Dane aplikacji\BabSolution\CR\Delta.crx [2013-05-24]
CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2012-05-04]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-06-15]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search\ChromeExt\17.2.0.38\avg.crx [2013-12-09]
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2013-09-30]
CHR HKCU\...\Chrome\Extension: [incfcgceegpikennjoplhfghaaikdgei] - C:\Documents and Settings\Giza\Dane aplikacji\StartNow Toolbar\CR\zcrx.crx [2012-11-02]

========================== Services (Whitelisted) =================

R2 6to4; C:\WINDOWS\System32\6to4svc.dll [100864 2010-02-12] (Microsoft Corporation)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44768 2012-03-07] (AVAST Software)
S4 DokanMounter; C:\Program Files\SpeedyDrive\mounter.exe [25088 2012-02-11] ()
S4 hshld; C:\Program Files\Hotspot Shield\bin\cmw_srv.exe [852264 2013-08-16] (AnchorFree Inc.)
S4 HssTrayService; C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-08-13] ()
S4 HssWd; C:\Program Files\Hotspot Shield\bin\hsswd.exe [555304 2013-08-16] ()
S4 IBUpdaterService; C:\WINDOWS\system32\dmwu.exe [1432368 2013-10-15] ()
S4 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2011-06-25] (Sun Microsystems, Inc.)
S3 npggsvc; C:\WINDOWS\system32\GameMon.des [4121080 2011-06-13] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [75064 2011-10-06] ()
R2 PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [189248 2011-10-06] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [131272 2014-01-17] (Sandboxie Holdings, LLC)
R2 Skype C2C Service; C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S4 vToolbarUpdater17.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe [1771544 2013-12-09] (AVG Secure Search)
S2 cmdAgent; "C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe" [X]
S3 cmdvirth; "C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe" [X]
S4 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [X]
S4 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [X]
S4 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [X]
S4 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [X]

==================== Drivers (Whitelisted) ====================

S3 1394hub; C:\WINDOWS\System32\svchost.exe [14336 2008-04-14] (Microsoft Corporation)
R1 Aavmker4; C:\WINDOWS\system32\Drivers\Aavmker4.sys [24920 2012-03-07] (AVAST Software)
R2 aswFsBlk; C:\WINDOWS\system32\Drivers\aswFsBlk.sys [20696 2012-03-07] (AVAST Software)
R2 aswMon2; C:\WINDOWS\system32\Drivers\aswMon2.sys [95704 2012-03-07] (AVAST Software)
R1 AswRdr; C:\WINDOWS\system32\Drivers\AswRdr.sys [35672 2012-03-07] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\Drivers\aswSnx.sys [612184 2012-03-07] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\Drivers\aswSP.sys [337880 2012-03-07] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\Drivers\aswTdi.sys [53848 2012-03-07] (AVAST Software)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [278984 2011-05-27] ()
R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx86.sys [37664 2013-11-10] (AVG Technologies)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [18528 2013-06-18] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [587352 2013-07-08] (COMODO)
R1 cmdHlp; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [32816 2013-06-18] (COMODO)
R2 Dokan; C:\WINDOWS\system32\drivers\dokan.sys [91904 2012-02-11] (Windows (R) Win 7 DDK provider)
R1 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [242240 2013-05-24] (DT Soft Ltd)
S3 gdrv; C:\WINDOWS\gdrv.sys [16608 2012-02-07] (Windows (R) 2000 DDK provider)
R3 HssDrv; C:\WINDOWS\System32\DRIVERS\HssDrv.sys [44744 2013-08-13] (AnchorFree Inc.)
R0 Inspect; C:\WINDOWS\System32\DRIVERS\inspect.sys [99520 2013-06-18] (COMODO)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25416 2011-05-27] ()
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 QCDonner; C:\WINDOWS\System32\DRIVERS\OVCD.sys [28032 2001-08-17] (Microsoft Corporation)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [161888 2014-01-17] (Sandboxie Holdings, LLC)
R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [113608 2013-04-15] (Power Software Ltd)
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [466008 2013-05-24] (Duplex Secure Ltd.)
R3 taphss; C:\WINDOWS\System32\DRIVERS\taphss.sys [33512 2013-08-13] (AnchorFree Inc)
R1 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [226880 2010-02-11] (Microsoft Corporation)
S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Corporation)
U3 aol5ollk; C:\WINDOWS\system32\Drivers\aol5ollk.sys [0 ] (Microsoft Corporation)
S3 EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [X]
S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X]
S4 IntelIde; No ImagePath
S1 MpKsl341bf57d; \??\C:\WINDOWS\system32\MpEngineStore\MpKsl341bf57d.sys [X]
U5 P3; C:\Windows\System32\Drivers\P3.sys [46848 2008-04-14] (Microsoft Corporation)
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U3 mbr; \??\C:\DOCUME~1\Giza\USTAWI~1\Temp\mbr.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-05 16:09 - 2014-04-05 16:09 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Giza\Pulpit\OTL.com
2014-04-05 16:09 - 2014-04-05 16:09 - 00025379 _____ () C:\Documents and Settings\Giza\Pulpit\attach.txt
2014-04-05 16:09 - 2014-04-05 16:08 - 00016750 _____ () C:\Documents and Settings\Giza\Pulpit\dds.txt
2014-04-05 16:08 - 2014-04-05 16:09 - 00031470 _____ () C:\Documents and Settings\Giza\Pulpit\FRST.txt
2014-04-05 16:08 - 2014-04-05 16:08 - 01145856 _____ (Farbar) C:\Documents and Settings\Giza\Pulpit\FRST.exe
2014-04-05 16:08 - 2014-04-05 16:08 - 00000000 ____D () C:\FRST
2014-04-05 16:07 - 2014-04-05 16:07 - 00688992 ____R (Swearware) C:\Documents and Settings\Giza\Pulpit\dds.pif
2014-04-05 16:03 - 2014-04-05 16:03 - 00003666 _____ () C:\WINDOWS\KB2868626.log
2014-04-05 16:03 - 2014-04-05 16:03 - 00000000 ____D () C:\WINDOWS\LastGood
2014-04-05 16:00 - 2014-04-05 16:01 - 00000000 ____D () C:\Avenger
2014-04-05 15:58 - 2014-04-05 16:05 - 00003912 _____ () C:\WINDOWS\KB2916036.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003910 _____ () C:\WINDOWS\KB2929961.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003909 _____ () C:\WINDOWS\KB2876217.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003908 _____ () C:\WINDOWS\KB2898715.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003907 _____ () C:\WINDOWS\KB2864063.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003906 _____ () C:\WINDOWS\KB2847311.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00004426 _____ () C:\WINDOWS\KB2930275.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00004236 _____ () C:\WINDOWS\KB2859537.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00003907 _____ () C:\WINDOWS\KB2862152.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00003903 _____ () C:\WINDOWS\KB2876331.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00003903 _____ () C:\WINDOWS\KB2850869.log
2014-04-05 15:56 - 2014-04-05 16:00 - 00002482 _____ () C:\avenger.txt
2014-04-05 15:55 - 2014-04-05 16:05 - 00003924 _____ () C:\WINDOWS\KB2892075.log
2014-04-05 15:55 - 2014-04-05 16:05 - 00003904 _____ () C:\WINDOWS\KB2893294.log
2014-04-05 14:24 - 2014-04-05 16:09 - 00139672 _____ () C:\Documents and Settings\Giza\Dane aplikacji\msconfig.ini
2014-04-05 14:24 - 2014-04-05 14:24 - 00000000 ___HD () C:\{$1284-9213-2940-1289$}
2014-04-05 14:24 - 2014-01-05 16:18 - 00538624 __RSH () C:\Documents and Settings\All Users\Dane aplikacji\27218346293184.exe
2014-04-05 14:20 - 2014-04-05 14:44 - 00011638 _____ () C:\Documents and Settings\Giza\Pulpit\source.txt
2014-04-05 11:22 - 2014-04-05 11:23 - 00000017 _____ () C:\Documents and Settings\Giza\Pulpit\users.txt
2014-04-05 11:10 - 1997-10-22 07:30 - 01825481 _____ () C:\Documents and Settings\Giza\Pulpit\Polish.txt
2014-04-05 11:00 - 2014-04-05 11:00 - 00000000 ____D () C:\Hydra
2014-04-05 11:00 - 2011-01-25 09:59 - 00171534 _____ () C:\hydra.exe
2014-04-05 11:00 - 2011-01-25 09:59 - 00008718 _____ () C:\pw-inspector.exe
2014-04-05 11:00 - 2011-01-24 14:51 - 00019242 _____ () C:\CHANGES.TXT
2014-04-05 11:00 - 2011-01-24 14:51 - 00010793 _____ () C:\README.TXT
2014-04-05 11:00 - 2011-01-23 13:11 - 00000463 _____ () C:\TODO.TXT
2014-04-05 11:00 - 2011-01-23 13:08 - 00036015 _____ () C:\LICENSE.TXT
2014-04-05 11:00 - 2011-01-23 13:08 - 00008540 _____ () C:\LICENSE.OPENSSL.TXT
2014-04-05 11:00 - 2010-12-03 12:17 - 01174542 _____ () C:\cygcrypto-0.9.8.dll
2014-04-05 11:00 - 2010-12-03 12:17 - 00268814 _____ () C:\cygssl-0.9.8.dll
2014-04-05 11:00 - 2010-08-31 10:00 - 02648181 _____ (Red Hat) C:\cygwin1.dll
2014-04-05 11:00 - 2010-08-15 02:54 - 00046094 _____ () C:\cyggcc_s-1.dll
2014-04-05 11:00 - 2010-08-01 23:04 - 00077838 _____ () C:\cygz.dll
2014-04-05 10:14 - 2014-04-05 11:43 - 00001772 ____H () C:\Documents and Settings\Giza\Moje dokumenty\Default.rdp
2014-03-30 21:12 - 2014-03-30 21:12 - 00000838 _____ () C:\Documents and Settings\All Users\Pulpit\EA Sports FIFA World.lnk
2014-03-30 21:12 - 2014-03-30 21:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\EA Sports FIFA World
2014-03-30 16:11 - 2014-03-30 16:11 - 00000000 ____D () C:\Documents and Settings\Gość\Dane aplikacji\LolClient
2014-03-30 00:27 - 2014-03-30 20:56 - 00000000 ____D () C:\Program Files\Origin Games
2014-03-29 23:10 - 2014-03-30 00:27 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Origin
2014-03-29 23:09 - 2014-03-30 00:27 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Origin
2014-03-29 23:08 - 2014-04-05 07:55 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Origin
2014-03-29 23:08 - 2014-04-05 07:54 - 00000000 ____D () C:\Program Files\Origin
2014-03-29 23:08 - 2014-03-29 23:08 - 00000654 _____ () C:\Documents and Settings\All Users\Pulpit\Origin.lnk
2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Origin
2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
2014-03-29 06:11 - 2014-03-29 06:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-28 14:57 - 2014-04-05 16:02 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\FK_Monitor
2014-03-28 14:57 - 2014-03-28 14:57 - 00000000 ____D () C:\Program Files\FK_Monitor
2014-03-27 18:52 - 2014-03-27 23:15 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Configs
2014-03-26 23:39 - 2014-04-05 13:44 - 00000998 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004UA.job
2014-03-26 23:39 - 2014-04-04 22:44 - 00000976 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004Core.job
2014-03-26 23:39 - 2014-03-26 23:40 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook
2014-03-20 17:56 - 2014-03-20 17:56 - 00001363 _____ () C:\Documents and Settings\Giza\Pulpit\Magebot.lnk
2014-03-19 23:43 - 2014-03-27 23:40 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\BBot
2014-03-19 23:04 - 2014-03-19 23:04 - 00001963 _____ () C:\Documents and Settings\Giza\Pulpit\rafonix.txt
2014-03-17 21:07 - 2014-03-18 17:42 - 00000000 _____ () C:\Documents and Settings\Giza\Pulpit\Nowy Dokument tekstowy (2).txt
2014-03-13 22:13 - 2014-03-13 22:13 - 00000000 __SHD () C:\WINDOWS\system32\AI_RecycleBin
2014-03-13 22:12 - 2014-03-13 22:12 - 00001397 _____ () C:\Documents and Settings\All Users\Pulpit\Play League of Legends.lnk
2014-03-13 22:12 - 2014-03-13 22:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\League of Legends
2014-03-11 19:36 - 2014-03-11 19:36 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\WarThunder
2014-03-11 19:36 - 2014-03-11 19:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\WarThunder
2014-03-11 19:35 - 2014-03-11 19:37 - 00000000 ____D () C:\Program Files\WarThunder
2014-03-11 19:35 - 2014-03-11 19:35 - 00001558 _____ () C:\Documents and Settings\All Users\Pulpit\WarThunder.lnk
2014-03-11 19:35 - 2014-03-11 19:35 - 00000000 ____D () C:\Documents and Settings\Giza\Moje dokumenty\My Games
2014-03-11 19:35 - 2014-03-11 19:35 - 00000000 ____D () C:\Documents and Settings\Giza\Menu Start\Programy\WarThunder
2014-03-10 18:30 - 2014-03-10 20:04 - 00001678 _____ () C:\Documents and Settings\Giza\Pulpit\Otwórz to.txt
2014-03-10 18:23 - 2014-03-10 18:29 - 00000699 _____ () C:\Documents and Settings\Giza\Pulpit\Nowy Dokument tekstowy.txt
2014-03-10 18:16 - 2014-03-10 18:22 - 706817293 _____ () C:\Documents and Settings\Giza\Pulpit\filmiki.zip
2014-03-06 23:31 - 2014-03-21 02:03 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Tibia

==================== One Month Modified Files and Folders =======

2014-04-05 16:09 - 2014-04-05 16:09 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Giza\Pulpit\OTL.com
2014-04-05 16:09 - 2014-04-05 16:09 - 00025379 _____ () C:\Documents and Settings\Giza\Pulpit\attach.txt
2014-04-05 16:09 - 2014-04-05 16:08 - 00031470 _____ () C:\Documents and Settings\Giza\Pulpit\FRST.txt
2014-04-05 16:09 - 2014-04-05 14:24 - 00139672 _____ () C:\Documents and Settings\Giza\Dane aplikacji\msconfig.ini
2014-04-05 16:09 - 2011-05-12 07:30 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit
2014-04-05 16:08 - 2014-04-05 16:09 - 00016750 _____ () C:\Documents and Settings\Giza\Pulpit\dds.txt
2014-04-05 16:08 - 2014-04-05 16:08 - 01145856 _____ (Farbar) C:\Documents and Settings\Giza\Pulpit\FRST.exe
2014-04-05 16:08 - 2014-04-05 16:08 - 00000000 ____D () C:\FRST
2014-04-05 16:08 - 2012-04-04 12:27 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Skype
2014-04-05 16:07 - 2014-04-05 16:07 - 00688992 ____R (Swearware) C:\Documents and Settings\Giza\Pulpit\dds.pif
2014-04-05 16:05 - 2014-04-05 15:58 - 00003912 _____ () C:\WINDOWS\KB2916036.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003910 _____ () C:\WINDOWS\KB2929961.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003909 _____ () C:\WINDOWS\KB2876217.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003908 _____ () C:\WINDOWS\KB2898715.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003907 _____ () C:\WINDOWS\KB2864063.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003906 _____ () C:\WINDOWS\KB2847311.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00004426 _____ () C:\WINDOWS\KB2930275.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00004236 _____ () C:\WINDOWS\KB2859537.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00003907 _____ () C:\WINDOWS\KB2862152.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00003903 _____ () C:\WINDOWS\KB2876331.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00003903 _____ () C:\WINDOWS\KB2850869.log
2014-04-05 16:05 - 2014-04-05 15:55 - 00003924 _____ () C:\WINDOWS\KB2892075.log
2014-04-05 16:05 - 2014-04-05 15:55 - 00003904 _____ () C:\WINDOWS\KB2893294.log
2014-04-05 16:05 - 2012-10-20 22:35 - 01089818 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-05 16:05 - 2011-05-12 01:49 - 01266538 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-05 16:05 - 2006-03-02 14:00 - 00559736 _____ () C:\WINDOWS\system32\perfh015.dat
2014-04-05 16:05 - 2006-03-02 14:00 - 00106366 _____ () C:\WINDOWS\system32\perfc015.dat
2014-04-05 16:03 - 2014-04-05 16:03 - 00003666 _____ () C:\WINDOWS\KB2868626.log
2014-04-05 16:03 - 2014-04-05 16:03 - 00000000 ____D () C:\WINDOWS\LastGood
2014-04-05 16:02 - 2014-03-28 14:57 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\FK_Monitor
2014-04-05 16:02 - 2011-05-26 12:37 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\uTorrent
2014-04-05 16:02 - 2011-05-13 16:39 - 00065615 _____ () C:\WINDOWS\system32\nvapps.xml
2014-04-05 16:02 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Menu Start\Programy\Autostart
2014-04-05 16:02 - 2011-05-12 01:47 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-04-05 16:01 - 2014-04-05 16:00 - 00000000 ____D () C:\Avenger
2014-04-05 16:01 - 2012-10-20 22:35 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-04-05 16:01 - 2012-10-20 22:35 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-04-05 16:00 - 2014-04-05 15:56 - 00002482 _____ () C:\avenger.txt
2014-04-05 15:58 - 2013-04-19 13:39 - 00524288 _____ () C:\WINDOWS\system32\config\SpybotSD.evt
2014-04-05 15:58 - 2011-05-12 07:30 - 00000188 ___SH () C:\Documents and Settings\Giza\ntuser.ini
2014-04-05 15:58 - 2011-05-12 07:29 - 00032478 _____ () C:\WINDOWS\SchedLgU.Txt
2014-04-05 15:58 - 2011-05-12 07:29 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-05 15:56 - 2011-09-16 12:29 - 00000232 _____ () C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
2014-04-05 15:54 - 2011-06-15 13:28 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-05 15:53 - 2011-05-12 07:30 - 00000000 ___HD () C:\Documents and Settings\Giza
2014-04-05 15:52 - 2012-01-22 13:54 - 00000000 ___HD () C:\Documents and Settings\Giza\Dane aplikacji\Media Player Classic
2014-04-05 15:51 - 2011-05-12 01:49 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-04-05 15:43 - 2013-06-03 09:07 - 00000350 _____ () C:\WINDOWS\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-04-05 15:43 - 2013-04-18 20:40 - 00000620 _____ () C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-04-05 15:43 - 2012-05-03 14:58 - 00000302 _____ () C:\WINDOWS\Tasks\AWC AutoSweep.job
2014-04-05 15:43 - 2011-08-13 01:22 - 00000276 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1844237615-527237240-725345543-1004.job
2014-04-05 15:43 - 2011-06-15 13:28 - 00001028 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-05 15:38 - 2011-07-08 12:42 - 00000357 _____ () C:\Program Files\Common Files\userInit.dll
2014-04-05 15:00 - 2012-03-29 13:34 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-05 14:44 - 2014-04-05 14:20 - 00011638 _____ () C:\Documents and Settings\Giza\Pulpit\source.txt
2014-04-05 14:24 - 2014-04-05 14:24 - 00000000 ___HD () C:\{$1284-9213-2940-1289$}
2014-04-05 14:24 - 2011-05-12 07:30 - 00000000 __RHD () C:\Documents and Settings\Giza\Dane aplikacji
2014-04-05 14:23 - 2013-04-19 23:25 - 00281031 _____ () C:\Documents and Settings\Giza\Dane aplikacji\Safer-Networking.log
2014-04-05 13:44 - 2014-03-26 23:39 - 00000998 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004UA.job
2014-04-05 12:30 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty\Moje obrazy
2014-04-05 11:43 - 2014-04-05 10:14 - 00001772 ____H () C:\Documents and Settings\Giza\Moje dokumenty\Default.rdp
2014-04-05 11:23 - 2014-04-05 11:22 - 00000017 _____ () C:\Documents and Settings\Giza\Pulpit\users.txt
2014-04-05 11:00 - 2014-04-05 11:00 - 00000000 ____D () C:\Hydra
2014-04-05 10:14 - 2011-08-21 12:58 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\PMB Files
2014-04-05 10:14 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty
2014-04-05 07:59 - 2011-05-12 07:25 - 00000000 ____D () C:\WINDOWS\system32\DirectX
2014-04-05 07:55 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Origin
2014-04-05 07:54 - 2014-03-29 23:08 - 00000000 ____D () C:\Program Files\Origin
2014-04-05 07:53 - 2011-05-12 07:30 - 00000000 __SHD () C:\Documents and Settings\Giza\Ustawienia lokalne\Historia
2014-04-05 07:53 - 2006-03-02 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-04-04 23:09 - 2011-07-20 15:06 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty\Pobieranie
2014-04-04 22:44 - 2014-03-26 23:39 - 00000976 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004Core.job
2014-04-04 16:16 - 2013-03-15 17:16 - 00000440 _____ () C:\WINDOWS\Tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job
2014-04-04 12:48 - 2011-06-15 13:29 - 00000284 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1844237615-527237240-725345543-1004.job
2014-04-02 18:09 - 2011-05-14 12:00 - 00000278 _____ () C:\WINDOWS\Tasks\DLL-files.com Fixer_UPDATES.job
2014-04-02 16:37 - 2012-02-02 23:19 - 00000014 _____ () C:\pipe11.dat
2014-04-02 00:30 - 2013-04-18 20:40 - 00000616 _____ () C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-04-01 00:30 - 2013-04-18 20:40 - 00000446 _____ () C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-03-31 21:52 - 2013-12-16 23:24 - 00000000 ____D () C:\Magebot
2014-03-31 18:29 - 2011-08-21 12:58 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
2014-03-30 21:12 - 2014-03-30 21:12 - 00000838 _____ () C:\Documents and Settings\All Users\Pulpit\EA Sports FIFA World.lnk
2014-03-30 21:12 - 2014-03-30 21:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\EA Sports FIFA World
2014-03-30 21:12 - 2011-05-12 01:49 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-03-30 20:56 - 2014-03-30 00:27 - 00000000 ____D () C:\Program Files\Origin Games
2014-03-30 18:21 - 2012-06-04 14:12 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-30 16:11 - 2014-03-30 16:11 - 00000000 ____D () C:\Documents and Settings\Gość\Dane aplikacji\LolClient
2014-03-30 16:11 - 2011-05-17 20:08 - 00000000 __RHD () C:\Documents and Settings\Gość\Dane aplikacji
2014-03-30 00:27 - 2014-03-29 23:10 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Origin
2014-03-30 00:27 - 2014-03-29 23:09 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Origin
2014-03-29 23:09 - 2011-05-12 07:30 - 00000000 ___HD () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji
2014-03-29 23:08 - 2014-03-29 23:08 - 00000654 _____ () C:\Documents and Settings\All Users\Pulpit\Origin.lnk
2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Origin
2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
2014-03-29 06:11 - 2014-03-29 06:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-28 17:13 - 2013-03-31 14:35 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\burdel
2014-03-28 14:57 - 2014-03-28 14:57 - 00000000 ____D () C:\Program Files\FK_Monitor
2014-03-27 23:40 - 2014-03-19 23:43 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\BBot
2014-03-27 23:15 - 2014-03-27 18:52 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Configs
2014-03-26 23:40 - 2014-03-26 23:39 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook
2014-03-21 02:03 - 2014-03-06 23:31 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Tibia
2014-03-20 17:56 - 2014-03-20 17:56 - 00001363 _____ () C:\Documents and Settings\Giza\Pulpit\Magebot.lnk
2014-03-20 17:56 - 2013-12-07 19:32 - 00001426 _____ () C:\Documents and Settings\Giza\Pulpit\Magebot_SAFEMODE.lnk
2014-03-20 15:32 - 2011-05-17 20:08 - 00000000 ____D () C:\Documents and Settings\Gość\Pulpit
2014-03-19 23:04 - 2014-03-19 23:04 - 00001963 _____ () C:\Documents and Settings\Giza\Pulpit\rafonix.txt
2014-03-18 17:42 - 2014-03-17 21:07 - 00000000 _____ () C:\Documents and Settings\Giza\Pulpit\Nowy Dokument tekstowy (2).txt
2014-03-18 13:48 - 2013-10-08 16:53 - 00000000 ____D () C:\Documents and Settings\Gość\Pulpit\Sesja
2014-03-15 20:57 - 2011-06-15 13:29 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-03-15 19:09 - 2011-05-14 12:00 - 00000258 _____ () C:\WINDOWS\Tasks\DLL-files.com Fixer_MONTHLY.job
2014-03-13 22:13 - 2014-03-13 22:13 - 00000000 __SHD () C:\WINDOWS\system32\AI_RecycleBin
2014-03-13 22:12 - 2014-03-13 22:12 - 00001397 _____ () C:\Documents and Settings\All Users\Pulpit\Play League of Legends.lnk
2014-03-13 22:12 - 2014-03-13 22:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\League of Legends
2014-03-13 22:04 - 2014-01-08 02:24 - 00000000 ___RD () C:\Documents and Settings\Giza\Pulpit\Dobre Nutki
2014-03-12 19:00 - 2012-03-29 13:34 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-12 19:00 - 2011-05-13 17:00 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-03-12 11:51 - 2011-06-13 09:21 - 00001177 _____ () C:\Documents and Settings\Gość\Pulpit\CV.txt
2014-03-11 19:37 - 2014-03-11 19:35 - 00000000 ____D () C:\Program Files\WarThunder
2014-03-11 19:36 - 2014-03-11 19:36 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\WarThunder
2014-03-11 19:36 - 2014-03-11 19:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\WarThunder
2014-03-11 19:35 - 2014-03-11 19:35 - 00001558 _____ () C:\Documents and Settings\All Users\Pulpit\WarThunder.lnk
2014-03-11 19:35 - 2014-03-11 19:35 - 00000000 ____D () C:\Documents and Settings\Giza\Moje dokumenty\My Games
2014-03-11 19:35 - 2014-03-11 19:35 - 00000000 ____D () C:\Documents and Settings\Giza\Menu Start\Programy\WarThunder
2014-03-11 19:35 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Menu Start\Programy
2014-03-10 20:04 - 2014-03-10 18:30 - 00001678 _____ () C:\Documents and Settings\Giza\Pulpit\Otwórz to.txt
2014-03-10 18:29 - 2014-03-10 18:23 - 00000699 _____ () C:\Documents and Settings\Giza\Pulpit\Nowy Dokument tekstowy.txt
2014-03-10 18:22 - 2014-03-10 18:16 - 706817293 _____ () C:\Documents and Settings\Giza\Pulpit\filmiki.zip

Some content of TEMP:
====================
C:\Documents and Settings\Giza\Ustawienia lokalne\Temp\setup.exe
C:\Documents and Settings\Giza\Ustawienia lokalne\Temp\SkypeSetup.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\AutoRun.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\AutoRunGUI.dll
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_122.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_2836.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_287b.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_28d6.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_2918.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_365b.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_36a0.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_6b.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_b63.exe
C:\Documents and Settings\Gość\Ustawienia lokalne\Temp\PicasaUpdater_bbb.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2006-03-02 14:00] - [2008-04-14 19:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\WINDOWS\system32\winlogon.exe
[2006-03-02 14:00] - [2008-04-14 19:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2006-03-02 14:00] - [2008-04-14 19:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2006-03-02 14:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\WINDOWS\system32\User32.dll
[2006-03-02 14:00] - [2008-04-14 19:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2006-03-02 14:00] - [2008-04-14 19:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2006-03-02 14:00] - [2009-02-09 12:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2006-03-02 14:00] - [2008-04-14 18:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================