Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by Giza (administrator) on ZXC-45AF33E99D0 on 05-04-2014 21:58:22
Running from C:\Documents and Settings\Giza\Pulpit
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Apple Computer, Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
() C:\WINDOWS\system32\PnkBstrA.exe
() C:\WINDOWS\system32\PnkBstrB.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Facebook Inc.) C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe
(Opera Software) C:\Program Files\Opera\opera.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [16857600 2008-02-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvCplDaemon] - C:\WINDOWS\system32\NvCpl.dll [13529088 2008-05-16] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] - C:\WINDOWS\system32\NvMcTray.dll [86016 2008-05-16] (NVIDIA Corporation)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4241512 2012-03-07] (AVAST Software)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [uTorrent] - C:\Program Files\uTorrent\uTorrent.exe [880496 2012-05-11] (BitTorrent, Inc.)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [543432 2014-01-17] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [Facebook Update] - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2014-03-26] (Facebook Inc.)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [EADM] - C:\Program Files\Origin\Origin.exe [3588952 2014-03-29] (Electronic Arts)
HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
Startup: C:\Documents and Settings\Giza\Menu Start\Programy\Autostart\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.msn.com/?pc=UP97&ocid=UP97DHP
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SearchScopes: HKLM - DefaultScope value is missing.
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: YouTube To ALLPlayer - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [94208] (Apple Computer, Inc.)
Winsock: Catalog9 01 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9 02 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9 08 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex)
Tcpip\..\Interfaces\{ACF3496A-5DF7-4948-B329-9B98B85023D3}: [NameServer]82.177.224.2,82.177.224.3

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\geymbh0r.default-1396725567937
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.652 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.652 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-06-15]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! WebRep - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-05-04]

Chrome: 
=======
CHR HomePage: hxxp://pl.msn.com/?pc=UP97&ocid=UP97DHP
CHR Plugin: (Widevine Content Decryption Module) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Unity Player) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\17.2.0\\npsitesafety.dll No File
CHR Plugin: (GanymedeNet.Detector) - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( )
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
CHR Extension: (avast! WebRep) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2012-05-04]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2011-06-15]
CHR Extension: (Skype Click to Call) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-05-04]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-22]
CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2012-05-04]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-06-15]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]

========================== Services (Whitelisted) =================

R2 6to4; C:\WINDOWS\System32\6to4svc.dll [100864 2010-02-12] (Microsoft Corporation)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44768 2012-03-07] (AVAST Software)
S4 DokanMounter; C:\Program Files\SpeedyDrive\mounter.exe [25088 2012-02-11] ()
S3 npggsvc; C:\WINDOWS\system32\GameMon.des [4121080 2011-06-13] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [75064 2011-10-06] ()
R2 PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [189248 2011-10-06] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [131272 2014-01-17] (Sandboxie Holdings, LLC)
R2 Skype C2C Service; C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)

==================== Drivers (Whitelisted) ====================

S3 1394hub; C:\WINDOWS\System32\svchost.exe [14336 2008-04-14] (Microsoft Corporation)
R1 Aavmker4; C:\WINDOWS\system32\Drivers\Aavmker4.sys [24920 2012-03-07] (AVAST Software)
R2 aswFsBlk; C:\WINDOWS\system32\Drivers\aswFsBlk.sys [20696 2012-03-07] (AVAST Software)
R2 aswMon2; C:\WINDOWS\system32\Drivers\aswMon2.sys [95704 2012-03-07] (AVAST Software)
R1 AswRdr; C:\WINDOWS\system32\Drivers\AswRdr.sys [35672 2012-03-07] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\Drivers\aswSnx.sys [612184 2012-03-07] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\Drivers\aswSP.sys [337880 2012-03-07] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\Drivers\aswTdi.sys [53848 2012-03-07] (AVAST Software)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [278984 2011-05-27] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R2 Dokan; C:\WINDOWS\system32\drivers\dokan.sys [91904 2012-02-11] (Windows (R) Win 7 DDK provider)
S3 gdrv; C:\WINDOWS\gdrv.sys [16608 2012-02-07] (Windows (R) 2000 DDK provider)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25416 2011-05-27] ()
S3 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [52312 2014-04-05] (Malwarebytes Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 QCDonner; C:\WINDOWS\System32\DRIVERS\OVCD.sys [28032 2001-08-17] (Microsoft Corporation)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [161888 2014-01-17] (Sandboxie Holdings, LLC)
R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [113608 2013-04-15] (Power Software Ltd)
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [466008 2013-05-24] (Duplex Secure Ltd.)
R1 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [226880 2010-02-11] (Microsoft Corporation)
S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Corporation)
S4 IntelIde; No ImagePath
U5 P3; C:\Windows\System32\Drivers\P3.sys [46848 2008-04-14] (Microsoft Corporation)
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 taphss; system32\DRIVERS\taphss.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-05 21:58 - 2014-04-05 21:58 - 00016021 _____ () C:\Documents and Settings\Giza\Pulpit\FRST.txt
2014-04-05 21:36 - 2014-04-05 21:36 - 00029320 _____ () C:\Documents and Settings\Giza\Pulpit\AdwCleaner[S0].txt
2014-04-05 21:19 - 2014-04-05 21:19 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Stare dane programu Firefox
2014-04-05 21:10 - 2014-04-05 21:28 - 00003683 _____ () C:\WINDOWS\setupapi.log
2014-04-05 21:09 - 2014-04-05 21:09 - 00448512 _____ (OldTimer Tools) C:\Documents and Settings\Giza\Pulpit\TFC.exe
2014-04-05 21:04 - 2014-04-05 21:34 - 00000000 ____D () C:\AdwCleaner
2014-04-05 21:04 - 2014-04-05 21:04 - 01426178 _____ () C:\Documents and Settings\Giza\Pulpit\adwcleaner.exe
2014-04-05 17:44 - 2014-04-05 17:44 - 00002849 _____ () C:\Documents and Settings\Giza\Pulpit\gmer.txt
2014-04-05 17:38 - 2014-04-05 17:38 - 00380416 _____ () C:\Documents and Settings\Giza\Pulpit\bz5ewrph.exe
2014-04-05 17:26 - 2014-04-05 17:26 - 01145856 _____ (Farbar) C:\Documents and Settings\Giza\Pulpit\FRST.exe
2014-04-05 17:25 - 2014-04-05 17:25 - 01145856 _____ (Farbar) C:\Documents and Settings\Giza\Moje dokumenty\FRST.exe
2014-04-05 17:20 - 2014-04-05 21:58 - 00000000 ____D () C:\FRST
2014-04-05 16:19 - 2014-04-05 16:19 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-04-05 16:18 - 2014-04-05 17:21 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes' Anti-Malware (portable)
2014-04-05 16:18 - 2014-04-05 16:44 - 00107224 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-05 16:16 - 2014-04-05 17:21 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\mbar
2014-04-05 16:16 - 2014-04-05 16:16 - 12589848 _____ (Malwarebytes Corp.) C:\Documents and Settings\Giza\Pulpit\mbar-1.07.0.1009.exe
2014-04-05 16:16 - 2014-04-05 16:16 - 00052312 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-05 16:03 - 2014-04-05 16:03 - 00003666 _____ () C:\WINDOWS\KB2868626.log
2014-04-05 15:58 - 2014-04-05 16:05 - 00003912 _____ () C:\WINDOWS\KB2916036.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003910 _____ () C:\WINDOWS\KB2929961.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003909 _____ () C:\WINDOWS\KB2876217.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003908 _____ () C:\WINDOWS\KB2898715.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003907 _____ () C:\WINDOWS\KB2864063.log
2014-04-05 15:57 - 2014-04-05 16:05 - 00003906 _____ () C:\WINDOWS\KB2847311.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00004426 _____ () C:\WINDOWS\KB2930275.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00004236 _____ () C:\WINDOWS\KB2859537.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00003907 _____ () C:\WINDOWS\KB2862152.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00003903 _____ () C:\WINDOWS\KB2876331.log
2014-04-05 15:56 - 2014-04-05 16:05 - 00003903 _____ () C:\WINDOWS\KB2850869.log
2014-04-05 15:55 - 2014-04-05 16:05 - 00003924 _____ () C:\WINDOWS\KB2892075.log
2014-04-05 15:55 - 2014-04-05 16:05 - 00003904 _____ () C:\WINDOWS\KB2893294.log
2014-04-05 10:14 - 2014-04-05 11:43 - 00001772 ____H () C:\Documents and Settings\Giza\Moje dokumenty\Default.rdp
2014-03-30 21:12 - 2014-03-30 21:12 - 00000838 _____ () C:\Documents and Settings\All Users\Pulpit\EA Sports FIFA World.lnk
2014-03-30 21:12 - 2014-03-30 21:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\EA Sports FIFA World
2014-03-30 16:11 - 2014-03-30 16:11 - 00000000 ____D () C:\Documents and Settings\Gość\Dane aplikacji\LolClient
2014-03-30 00:27 - 2014-03-30 20:56 - 00000000 ____D () C:\Program Files\Origin Games
2014-03-29 23:10 - 2014-03-30 18:19 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Origin
2014-03-29 23:09 - 2014-03-30 00:27 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Origin
2014-03-29 23:08 - 2014-04-05 21:57 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Origin
2014-03-29 23:08 - 2014-04-05 21:56 - 00000000 ____D () C:\Program Files\Origin
2014-03-29 23:08 - 2014-03-29 23:08 - 00000654 _____ () C:\Documents and Settings\All Users\Pulpit\Origin.lnk
2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Origin
2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
2014-03-29 06:11 - 2014-04-05 21:21 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-28 14:57 - 2014-04-05 16:02 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\FK_Monitor
2014-03-28 14:57 - 2014-03-28 14:57 - 00000000 ____D () C:\Program Files\FK_Monitor
2014-03-27 18:52 - 2014-03-27 23:15 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Configs
2014-03-26 23:39 - 2014-04-05 13:44 - 00000998 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004UA.job
2014-03-26 23:39 - 2014-04-04 22:44 - 00000976 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004Core.job
2014-03-26 23:39 - 2014-03-26 23:40 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook
2014-03-20 17:56 - 2014-03-20 17:56 - 00001363 _____ () C:\Documents and Settings\Giza\Pulpit\Magebot.lnk
2014-03-19 23:43 - 2014-03-27 23:40 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\BBot
2014-03-19 23:04 - 2014-03-19 23:04 - 00001963 _____ () C:\Documents and Settings\Giza\Pulpit\rafonix.txt
2014-03-13 22:12 - 2014-03-13 22:12 - 00001397 _____ () C:\Documents and Settings\All Users\Pulpit\Play League of Legends.lnk
2014-03-13 22:12 - 2014-03-13 22:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\League of Legends
2014-03-11 19:36 - 2014-03-11 19:36 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\WarThunder
2014-03-11 19:36 - 2014-03-11 19:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\WarThunder
2014-03-11 19:35 - 2014-03-11 19:37 - 00000000 ____D () C:\Program Files\WarThunder
2014-03-11 19:35 - 2014-03-11 19:35 - 00001558 _____ () C:\Documents and Settings\All Users\Pulpit\WarThunder.lnk
2014-03-11 19:35 - 2014-03-11 19:35 - 00000000 ____D () C:\Documents and Settings\Giza\Moje dokumenty\My Games
2014-03-11 19:35 - 2014-03-11 19:35 - 00000000 ____D () C:\Documents and Settings\Giza\Menu Start\Programy\WarThunder
2014-03-10 18:30 - 2014-03-10 20:04 - 00001678 _____ () C:\Documents and Settings\Giza\Pulpit\Otwórz to.txt
2014-03-10 18:16 - 2014-03-10 18:22 - 706817293 _____ () C:\Documents and Settings\Giza\Pulpit\filmiki.zip
2014-03-06 23:31 - 2014-03-21 02:03 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Tibia

==================== One Month Modified Files and Folders =======

2014-04-05 21:58 - 2014-04-05 21:58 - 00016021 _____ () C:\Documents and Settings\Giza\Pulpit\FRST.txt
2014-04-05 21:58 - 2014-04-05 17:20 - 00000000 ____D () C:\FRST
2014-04-05 21:58 - 2011-05-12 07:30 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit
2014-04-05 21:57 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Origin
2014-04-05 21:57 - 2012-10-20 22:35 - 01189059 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-05 21:56 - 2014-03-29 23:08 - 00000000 ____D () C:\Program Files\Origin
2014-04-05 21:56 - 2012-04-04 12:27 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Skype
2014-04-05 21:56 - 2011-05-26 12:37 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\uTorrent
2014-04-05 21:56 - 2011-05-13 16:39 - 00065615 _____ () C:\WINDOWS\system32\nvapps.xml
2014-04-05 21:55 - 2012-10-20 22:35 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-04-05 21:55 - 2012-10-20 22:35 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-04-05 21:53 - 2011-05-12 07:30 - 00000188 ___SH () C:\Documents and Settings\Giza\ntuser.ini
2014-04-05 21:41 - 2011-08-21 12:58 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\PMB Files
2014-04-05 21:41 - 2011-08-21 12:58 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
2014-04-05 21:36 - 2014-04-05 21:36 - 00029320 _____ () C:\Documents and Settings\Giza\Pulpit\AdwCleaner[S0].txt
2014-04-05 21:35 - 2011-05-12 01:47 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-04-05 21:34 - 2014-04-05 21:04 - 00000000 ____D () C:\AdwCleaner
2014-04-05 21:33 - 2011-05-17 20:08 - 00000000 __RHD () C:\Documents and Settings\Gość\Dane aplikacji
2014-04-05 21:33 - 2011-05-17 20:08 - 00000000 ___RD () C:\Documents and Settings\Gość\Menu Start\Programy
2014-04-05 21:33 - 2011-05-17 20:08 - 00000000 ___HD () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji
2014-04-05 21:33 - 2011-05-12 07:30 - 00000000 __RHD () C:\Documents and Settings\Giza\Dane aplikacji
2014-04-05 21:33 - 2011-05-12 07:30 - 00000000 ___HD () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji
2014-04-05 21:28 - 2014-04-05 21:10 - 00003683 _____ () C:\WINDOWS\setupapi.log
2014-04-05 21:28 - 2011-05-12 01:49 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-04-05 21:28 - 2011-05-12 01:49 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-04-05 21:21 - 2014-03-29 06:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-05 21:19 - 2014-04-05 21:19 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Stare dane programu Firefox
2014-04-05 21:13 - 2006-03-02 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-04-05 21:11 - 2011-05-15 12:08 - 00076136 _____ () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2014-04-05 21:09 - 2014-04-05 21:09 - 00448512 _____ (OldTimer Tools) C:\Documents and Settings\Giza\Pulpit\TFC.exe
2014-04-05 21:04 - 2014-04-05 21:04 - 01426178 _____ () C:\Documents and Settings\Giza\Pulpit\adwcleaner.exe
2014-04-05 20:14 - 2012-06-25 08:14 - 00000000 ____D () C:\Documents and Settings\Gość\Dane aplikacji\Skype
2014-04-05 17:44 - 2014-04-05 17:44 - 00002849 _____ () C:\Documents and Settings\Giza\Pulpit\gmer.txt
2014-04-05 17:38 - 2014-04-05 17:38 - 00380416 _____ () C:\Documents and Settings\Giza\Pulpit\bz5ewrph.exe
2014-04-05 17:27 - 2011-05-12 01:49 - 01266538 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-05 17:27 - 2006-03-02 14:00 - 00559736 _____ () C:\WINDOWS\system32\perfh015.dat
2014-04-05 17:27 - 2006-03-02 14:00 - 00106366 _____ () C:\WINDOWS\system32\perfc015.dat
2014-04-05 17:26 - 2014-04-05 17:26 - 01145856 _____ (Farbar) C:\Documents and Settings\Giza\Pulpit\FRST.exe
2014-04-05 17:25 - 2014-04-05 17:25 - 01145856 _____ (Farbar) C:\Documents and Settings\Giza\Moje dokumenty\FRST.exe
2014-04-05 17:25 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty
2014-04-05 17:23 - 2011-05-12 01:47 - 01586736 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-05 17:21 - 2014-04-05 16:18 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes' Anti-Malware (portable)
2014-04-05 17:21 - 2014-04-05 16:16 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\mbar
2014-04-05 17:20 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Menu Start\Programy\Autostart
2014-04-05 16:44 - 2014-04-05 16:18 - 00107224 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-05 16:19 - 2014-04-05 16:19 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-04-05 16:16 - 2014-04-05 16:16 - 12589848 _____ (Malwarebytes Corp.) C:\Documents and Settings\Giza\Pulpit\mbar-1.07.0.1009.exe
2014-04-05 16:16 - 2014-04-05 16:16 - 00052312 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-05 16:05 - 2014-04-05 15:58 - 00003912 _____ () C:\WINDOWS\KB2916036.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003910 _____ () C:\WINDOWS\KB2929961.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003909 _____ () C:\WINDOWS\KB2876217.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003908 _____ () C:\WINDOWS\KB2898715.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003907 _____ () C:\WINDOWS\KB2864063.log
2014-04-05 16:05 - 2014-04-05 15:57 - 00003906 _____ () C:\WINDOWS\KB2847311.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00004426 _____ () C:\WINDOWS\KB2930275.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00004236 _____ () C:\WINDOWS\KB2859537.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00003907 _____ () C:\WINDOWS\KB2862152.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00003903 _____ () C:\WINDOWS\KB2876331.log
2014-04-05 16:05 - 2014-04-05 15:56 - 00003903 _____ () C:\WINDOWS\KB2850869.log
2014-04-05 16:05 - 2014-04-05 15:55 - 00003924 _____ () C:\WINDOWS\KB2892075.log
2014-04-05 16:05 - 2014-04-05 15:55 - 00003904 _____ () C:\WINDOWS\KB2893294.log
2014-04-05 16:03 - 2014-04-05 16:03 - 00003666 _____ () C:\WINDOWS\KB2868626.log
2014-04-05 16:02 - 2014-03-28 14:57 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\FK_Monitor
2014-04-05 15:58 - 2013-04-19 13:39 - 00524288 _____ () C:\WINDOWS\system32\config\SpybotSD.evt
2014-04-05 15:58 - 2011-05-12 07:29 - 00032478 _____ () C:\WINDOWS\SchedLgU.Txt
2014-04-05 15:58 - 2011-05-12 07:29 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-05 15:54 - 2011-06-15 13:28 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-05 15:53 - 2011-05-12 07:30 - 00000000 ___HD () C:\Documents and Settings\Giza
2014-04-05 15:52 - 2012-01-22 13:54 - 00000000 ___HD () C:\Documents and Settings\Giza\Dane aplikacji\Media Player Classic
2014-04-05 15:43 - 2011-08-13 01:22 - 00000276 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1844237615-527237240-725345543-1004.job
2014-04-05 15:43 - 2011-06-15 13:28 - 00001028 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-05 15:00 - 2012-03-29 13:34 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-05 14:23 - 2013-04-19 23:25 - 00281031 _____ () C:\Documents and Settings\Giza\Dane aplikacji\Safer-Networking.log
2014-04-05 13:44 - 2014-03-26 23:39 - 00000998 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004UA.job
2014-04-05 12:30 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty\Moje obrazy
2014-04-05 11:43 - 2014-04-05 10:14 - 00001772 ____H () C:\Documents and Settings\Giza\Moje dokumenty\Default.rdp
2014-04-05 07:59 - 2011-05-12 07:25 - 00000000 ____D () C:\WINDOWS\system32\DirectX
2014-04-05 07:53 - 2011-05-12 07:30 - 00000000 __SHD () C:\Documents and Settings\Giza\Ustawienia lokalne\Historia
2014-04-04 23:09 - 2011-07-20 15:06 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty\Pobieranie
2014-04-04 22:44 - 2014-03-26 23:39 - 00000976 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004Core.job
2014-04-04 12:48 - 2011-06-15 13:29 - 00000284 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1844237615-527237240-725345543-1004.job
2014-04-02 16:37 - 2012-02-02 23:19 - 00000014 _____ () C:\pipe11.dat
2014-03-31 21:52 - 2013-12-16 23:24 - 00000000 ____D () C:\Magebot
2014-03-30 21:12 - 2014-03-30 21:12 - 00000838 _____ () C:\Documents and Settings\All Users\Pulpit\EA Sports FIFA World.lnk
2014-03-30 21:12 - 2014-03-30 21:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\EA Sports FIFA World
2014-03-30 20:56 - 2014-03-30 00:27 - 00000000 ____D () C:\Program Files\Origin Games
2014-03-30 18:21 - 2012-06-04 14:12 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-30 18:19 - 2014-03-29 23:10 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Origin
2014-03-30 16:11 - 2014-03-30 16:11 - 00000000 ____D () C:\Documents and Settings\Gość\Dane aplikacji\LolClient
2014-03-30 00:27 - 2014-03-29 23:09 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Origin
2014-03-29 23:08 - 2014-03-29 23:08 - 00000654 _____ () C:\Documents and Settings\All Users\Pulpit\Origin.lnk
2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Origin
2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
2014-03-28 17:13 - 2013-03-31 14:35 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\burdel
2014-03-28 14:57 - 2014-03-28 14:57 - 00000000 ____D () C:\Program Files\FK_Monitor
2014-03-27 23:40 - 2014-03-19 23:43 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\BBot
2014-03-27 23:15 - 2014-03-27 18:52 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Configs
2014-03-26 23:40 - 2014-03-26 23:39 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook
2014-03-21 02:03 - 2014-03-06 23:31 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Tibia
2014-03-20 17:56 - 2014-03-20 17:56 - 00001363 _____ () C:\Documents and Settings\Giza\Pulpit\Magebot.lnk
2014-03-20 17:56 - 2013-12-07 19:32 - 00001426 _____ () C:\Documents and Settings\Giza\Pulpit\Magebot_SAFEMODE.lnk
2014-03-20 15:32 - 2011-05-17 20:08 - 00000000 ____D () C:\Documents and Settings\Gość\Pulpit
2014-03-19 23:04 - 2014-03-19 23:04 - 00001963 _____ () C:\Documents and Settings\Giza\Pulpit\rafonix.txt
2014-03-18 13:48 - 2013-10-08 16:53 - 00000000 ____D () C:\Documents and Settings\Gość\Pulpit\Sesja
2014-03-15 20:57 - 2011-06-15 13:29 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-03-13 22:12 - 2014-03-13 22:12 - 00001397 _____ () C:\Documents and Settings\All Users\Pulpit\Play League of Legends.lnk
2014-03-13 22:12 - 2014-03-13 22:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\League of Legends
2014-03-13 22:04 - 2014-01-08 02:24 - 00000000 ___RD () C:\Documents and Settings\Giza\Pulpit\Dobre Nutki
2014-03-12 19:00 - 2012-03-29 13:34 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-12 19:00 - 2011-05-13 17:00 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-03-12 11:51 - 2011-06-13 09:21 - 00001177 _____ () C:\Documents and Settings\Gość\Pulpit\CV.txt
2014-03-11 19:37 - 2014-03-11 19:35 - 00000000 ____D () C:\Program Files\WarThunder
2014-03-11 19:36 - 2014-03-11 19:36 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\WarThunder
2014-03-11 19:36 - 2014-03-11 19:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\WarThunder
2014-03-11 19:35 - 2014-03-11 19:35 - 00001558 _____ () C:\Documents and Settings\All Users\Pulpit\WarThunder.lnk
2014-03-11 19:35 - 2014-03-11 19:35 - 00000000 ____D () C:\Documents and Settings\Giza\Moje dokumenty\My Games
2014-03-11 19:35 - 2014-03-11 19:35 - 00000000 ____D () C:\Documents and Settings\Giza\Menu Start\Programy\WarThunder
2014-03-11 19:35 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Menu Start\Programy
2014-03-10 20:04 - 2014-03-10 18:30 - 00001678 _____ () C:\Documents and Settings\Giza\Pulpit\Otwórz to.txt
2014-03-10 18:22 - 2014-03-10 18:16 - 706817293 _____ () C:\Documents and Settings\Giza\Pulpit\filmiki.zip

==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2006-03-02 14:00] - [2008-04-14 19:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\WINDOWS\system32\winlogon.exe
[2006-03-02 14:00] - [2008-04-14 19:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2006-03-02 14:00] - [2008-04-14 19:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2006-03-02 14:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\WINDOWS\system32\User32.dll
[2006-03-02 14:00] - [2008-04-14 19:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2006-03-02 14:00] - [2008-04-14 19:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2006-03-02 14:00] - [2009-02-09 12:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2006-03-02 14:00] - [2008-04-14 18:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================