Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-04-2014 01 Ran by Giza (administrator) on ZXC-45AF33E99D0 on 26-04-2014 09:45:31 Running from C:\Documents and Settings\Giza\Pulpit Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (Apple Computer, Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe () C:\WINDOWS\system32\PnkBstrA.exe () C:\WINDOWS\system32\PnkBstrB.exe (Skype Technologies S.A.) C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Facebook Inc.) C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16857600 2008-02-13] (Realtek Semiconductor Corp.) HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.) HKLM\...\Run: [NvCplDaemon] => C:\WINDOWS\system32\NvCpl.dll [13529088 2008-05-16] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] => C:\WINDOWS\system32\NvMcTray.dll [86016 2008-05-16] (NVIDIA Corporation) HKLM\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4241512 2012-03-07] (AVAST Software) HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0 HKLM\...\Policies\Explorer: [NoResolveSearch] 1 HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [543432 2014-01-17] (Sandboxie Holdings, LLC) HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [3588952 2014-03-29] (Electronic Arts) HKU\S-1-5-21-1844237615-527237240-725345543-1004\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0 Startup: C:\Documents and Settings\Giza\Menu Start\Programy\Autostart\AutorunsDisabled () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.msn.com/?pc=UP97&ocid=UP97DHP HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO: YouTube To ALLPlayer - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org) BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [94208] (Apple Computer, Inc.) Winsock: Catalog9 01 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex) Winsock: Catalog9 02 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex) Winsock: Catalog9 08 %SystemRoot%\system32\WTFastDrv.dll [72296] (Initex) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Documents and Settings\Giza\Dane aplikacji\Mozilla\Firefox\Profiles\lsx1hlsy.default-1398405507625 FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.652 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.652 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-06-15] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! WebRep - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-05-04] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] Chrome: ======= CHR HomePage: hxxp://pl.msn.com/?pc=UP97&ocid=UP97DHP CHR StartupUrls: "hxxp://pl.msn.com/?pc=UP97&ocid=UP97DHP", "" CHR Plugin: (Widevine Content Decryption Module) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\pdf.dll () CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.)) CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Plugin: (RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) CHR Plugin: (Facebook Video Calling Plugin) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) CHR Plugin: (Unity Player) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (GanymedeNet.Detector) - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll () CHR Extension: (Kaboom) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\beahobhgpojnjfdjglaehfhdanaioode [2014-04-20] CHR Extension: (avast! WebRep) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2012-05-04] CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2011-06-15] CHR Extension: (Skype Click to Call) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-05-04] CHR Extension: (Google Wallet) - C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-22] CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2012-05-04] CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-06-15] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02] ========================== Services (Whitelisted) ================= S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44768 2012-03-07] (AVAST Software) S4 DokanMounter; C:\Program Files\SpeedyDrive\mounter.exe [25088 2012-02-11] () S3 npggsvc; C:\WINDOWS\system32\GameMon.des [4121080 2011-06-13] (INCA Internet Co., Ltd.) R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [75064 2011-10-06] () R2 PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [189248 2011-10-06] () R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [131272 2014-01-17] (Sandboxie Holdings, LLC) R2 Skype C2C Service; C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) ==================== Drivers (Whitelisted) ==================== S3 1394hub; C:\WINDOWS\System32\svchost.exe [14336 2008-04-14] (Microsoft Corporation) R1 Aavmker4; C:\WINDOWS\system32\Drivers\Aavmker4.sys [24920 2012-03-07] (AVAST Software) R2 aswFsBlk; C:\WINDOWS\system32\Drivers\aswFsBlk.sys [20696 2012-03-07] (AVAST Software) R2 aswMon2; C:\WINDOWS\system32\Drivers\aswMon2.sys [95704 2012-03-07] (AVAST Software) R1 AswRdr; C:\WINDOWS\system32\Drivers\AswRdr.sys [35672 2012-03-07] (AVAST Software) R1 aswSnx; C:\WINDOWS\system32\Drivers\aswSnx.sys [612184 2012-03-07] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\Drivers\aswSP.sys [337880 2012-03-07] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\Drivers\aswTdi.sys [53848 2012-03-07] (AVAST Software) R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [278984 2011-05-27] () S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation) R2 Dokan; C:\WINDOWS\system32\drivers\dokan.sys [91904 2012-02-11] (Windows (R) Win 7 DDK provider) S3 gdrv; C:\WINDOWS\gdrv.sys [16608 2012-02-07] (Windows (R) 2000 DDK provider) R3 HssDrv; C:\WINDOWS\System32\DRIVERS\HssDrv.sys [43720 2014-03-24] (AnchorFree Inc.) R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25416 2011-05-27] () S3 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [52312 2014-04-05] (Malwarebytes Corporation) S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) S3 QCDonner; C:\WINDOWS\System32\DRIVERS\OVCD.sys [28032 2001-08-17] (Microsoft Corporation) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [161888 2014-01-17] (Sandboxie Holdings, LLC) R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [113608 2013-04-15] (Power Software Ltd) R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [466008 2013-05-24] (Duplex Secure Ltd.) R3 taphss; C:\WINDOWS\System32\DRIVERS\taphss.sys [33512 2014-03-24] (AnchorFree Inc) U4 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [226880 2010-02-11] (Microsoft Corporation) S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Corporation) S4 IntelIde; No ImagePath U5 P3; C:\Windows\System32\Drivers\P3.sys [46848 2008-04-14] (Microsoft Corporation) U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-26 09:45 - 2014-04-26 09:45 - 00015525 _____ () C:\Documents and Settings\Giza\Pulpit\FRST.txt 2014-04-26 09:18 - 2014-04-26 09:27 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt 2014-04-26 09:14 - 2014-04-26 09:15 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\sdfsdfijoo 2014-04-26 09:08 - 2014-04-26 09:08 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\FRST-OlderVersion 2014-04-25 09:06 - 2014-04-25 09:06 - 00000601 _____ () C:\Documents and Settings\All Users\Pulpit\Tibia.lnk 2014-04-25 09:06 - 2014-04-25 09:06 - 00000000 ____D () C:\extensions 2014-04-25 08:10 - 2014-04-25 08:11 - 00001382 _____ () C:\Documents and Settings\Giza\Pulpit\AdwCleaner[S2].txt 2014-04-24 17:09 - 2014-04-24 17:11 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\moja strona 2014-04-23 11:23 - 2014-04-23 11:23 - 01674535 _____ () C:\Documents and Settings\Giza\Pulpit\beka hahaha.vrf 2014-04-22 20:07 - 2014-04-22 20:08 - 00007554 _____ () C:\Documents and Settings\Giza\hb.py 2014-04-22 20:07 - 2014-04-22 20:07 - 00016404 _____ () C:\Documents and Settings\Giza\dane 2014-04-22 19:56 - 2014-04-22 19:56 - 00000000 ____D () C:\Documents and Settings\Giza\.idlerc 2014-04-22 19:56 - 2014-04-22 19:56 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Python 2.7 2014-04-22 19:55 - 2014-04-22 19:56 - 00000000 ____D () C:\Python27 2014-04-22 17:21 - 2014-04-22 17:22 - 00207588 _____ () C:\Documents and Settings\Giza\Pulpit\uihadiv.zip 2014-04-21 13:32 - 2014-04-21 17:52 - 00000111 _____ () C:\Documents and Settings\Giza\Pulpit\asdasfgedf.txt 2014-04-21 03:58 - 2014-04-21 12:44 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\DeHasher 2014-04-21 02:56 - 2014-04-22 20:08 - 00006408 ____H () C:\Documents and Settings\Giza\_viminfo 2014-04-21 02:34 - 2014-04-21 02:34 - 00001513 _____ () C:\Documents and Settings\All Users\Pulpit\gVim Read only 7.4.lnk 2014-04-21 02:34 - 2014-04-21 02:34 - 00001513 _____ () C:\Documents and Settings\All Users\Pulpit\gVim Easy 7.4.lnk 2014-04-21 02:34 - 2014-04-21 02:34 - 00001507 _____ () C:\Documents and Settings\All Users\Pulpit\gVim 7.4.lnk 2014-04-21 02:34 - 2014-04-21 02:34 - 00000000 ____D () C:\Program Files\Vim 2014-04-21 02:34 - 2014-04-21 02:34 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Vim 7.4 2014-04-21 02:09 - 2014-04-21 02:09 - 00000606 _____ () C:\Documents and Settings\Giza\Pulpit\udp.php 2014-04-21 02:08 - 2014-04-21 02:09 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Notepad++ 2014-04-21 02:08 - 2014-04-21 02:08 - 00000000 ____D () C:\Program Files\Notepad++ 2014-04-21 02:08 - 2014-04-21 02:08 - 00000000 ____D () C:\Documents and Settings\Giza\Menu Start\Programy\Notepad++ 2014-04-21 02:08 - 2014-04-21 02:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Notepad++ 2014-04-21 02:02 - 2014-04-21 02:02 - 00000606 _____ () C:\Documents and Settings\Giza\Pulpit\udp.php.txt 2014-04-20 20:32 - 2014-04-21 04:04 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\tiusu frontline xeno 2014-04-20 15:57 - 2014-03-24 22:08 - 00043720 _____ (AnchorFree Inc.) C:\WINDOWS\system32\Drivers\HssDrv.sys 2014-04-20 00:14 - 2014-04-20 00:14 - 00000000 ___RD () C:\Documents and Settings\LocalService\Ulubione 2014-04-19 22:44 - 2014-04-19 22:59 - 00613971 _____ () C:\Documents and Settings\Giza\Pulpit\hueauh.zip 2014-04-19 22:42 - 2014-04-19 22:43 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\GHISLER 2014-04-19 22:42 - 2014-04-19 22:42 - 00000548 _____ () C:\Documents and Settings\Giza\Pulpit\Total Commander.lnk 2014-04-19 22:42 - 2014-04-19 22:42 - 00000000 ____D () C:\totalcmd 2014-04-19 22:42 - 2014-04-19 22:42 - 00000000 ____D () C:\Documents and Settings\Giza\Menu Start\Programy\Total Commander 2014-04-17 16:25 - 2014-04-26 02:37 - 00001560 _____ () C:\Documents and Settings\Giza\Pulpit\Rec Keye i odzysk.txt 2014-04-17 15:38 - 2014-04-25 07:46 - 00000535 _____ () C:\Documents and Settings\Giza\Pulpit\strona moja.txt 2014-04-17 15:27 - 2014-04-17 16:07 - 00000090 _____ () C:\Documents and Settings\Giza\Pulpit\neo.txt 2014-04-17 15:15 - 2014-04-17 15:15 - 00008686 _____ () C:\Documents and Settings\Giza\Pulpit\FileZilla.xml 2014-04-17 14:41 - 2014-04-24 17:35 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\FileZilla 2014-04-17 14:41 - 2014-04-17 14:41 - 00000046 _____ () C:\Documents and Settings\Giza\Dane aplikacji\WB.CFG 2014-04-17 14:41 - 2014-04-17 14:41 - 00000000 ____D () C:\Program Files\FileZilla FTP Client 2014-04-17 14:41 - 2014-04-17 14:41 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\FileZilla FTP Client 2014-04-17 13:59 - 2014-04-17 13:59 - 00958856 _____ () C:\Documents and Settings\Giza\Pulpit\huehue.zip 2014-04-17 13:15 - 2014-04-24 17:29 - 00000000 ____D () C:\Moje Strony Web 2014-04-17 13:14 - 2014-04-17 13:14 - 00000706 _____ () C:\Documents and Settings\Giza\Pulpit\HTTrack Website Copier.lnk 2014-04-17 13:14 - 2014-04-17 13:14 - 00000000 ____D () C:\Program Files\WinHTTrack 2014-04-17 13:14 - 2014-04-17 13:14 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\WinHTTrack 2014-04-16 10:33 - 2014-04-16 10:33 - 00013470 _____ () C:\Documents and Settings\Giza\Pulpit\plik.txt 2014-04-12 20:24 - 2014-04-12 20:24 - 01149594 _____ () C:\Documents and Settings\Giza\Pulpit\zdjecie2.bmp 2014-04-12 20:23 - 2014-04-12 20:23 - 01177902 _____ () C:\Documents and Settings\Giza\Pulpit\zdjecie1.bmp 2014-04-12 14:43 - 2014-04-19 22:59 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Nowy folder (3) 2014-04-11 22:41 - 2014-04-11 22:41 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Tibiacast 2014-04-11 18:49 - 2014-04-20 18:10 - 00000062 _____ () C:\Documents and Settings\Giza\Pulpit\kasa z allegro.txt 2014-04-10 10:04 - 2014-04-10 10:04 - 00000837 _____ () C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk 2014-04-08 11:12 - 2014-04-26 02:35 - 00003862 _____ () C:\Documents and Settings\Giza\Pulpit\dfgdfgzenia.txt 2014-04-08 10:49 - 2014-04-15 16:37 - 00000260 _____ () C:\Documents and Settings\Giza\Pulpit\Emaile i konta noobow.txt 2014-04-06 19:00 - 2014-04-09 00:11 - 00000000 ____D () C:\Program Files\Blackd Proxy 2014-04-06 19:00 - 2014-04-06 19:00 - 00000691 _____ () C:\Documents and Settings\All Users\Pulpit\Blackd Proxy.lnk 2014-04-06 19:00 - 2014-04-06 19:00 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Blackd Proxy 2014-04-06 09:58 - 2014-04-06 09:58 - 00000214 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job 2014-04-06 03:59 - 2014-04-06 03:59 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2868626$ 2014-04-06 03:58 - 2014-04-06 03:59 - 00148958 _____ () C:\WINDOWS\KB2925418-IE8.log 2014-04-06 03:58 - 2014-04-06 03:58 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2916036$ 2014-04-06 03:54 - 2014-04-06 03:54 - 00128425 _____ () C:\WINDOWS\KB2900986.log 2014-04-06 03:54 - 2014-04-06 03:54 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2900986$ 2014-04-06 03:54 - 2014-04-06 03:54 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2898715$ 2014-04-06 03:54 - 2014-04-06 03:54 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2847311$ 2014-04-06 03:53 - 2014-04-06 03:53 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2929961$ 2014-04-06 03:53 - 2014-04-06 03:53 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2862335$ 2014-04-06 03:52 - 2014-04-06 03:53 - 00130354 _____ () C:\WINDOWS\KB2862335.log 2014-04-06 03:49 - 2014-04-06 03:50 - 00127622 _____ () C:\WINDOWS\KB2904266.log 2014-04-06 03:49 - 2014-04-06 03:49 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2904266$ 2014-04-06 03:49 - 2014-04-06 03:49 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2876217$ 2014-04-06 03:44 - 2014-04-06 03:44 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2930275$ 2014-04-06 03:44 - 2014-04-06 03:44 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2864063$ 2014-04-06 03:42 - 2014-04-06 03:42 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2862152$ 2014-04-06 03:33 - 2014-04-06 03:33 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2850869$ 2014-04-06 03:32 - 2014-04-06 03:32 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2876331$ 2014-04-06 03:32 - 2014-04-06 03:32 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2859537$ 2014-04-06 03:28 - 2014-04-06 03:28 - 00128393 _____ () C:\WINDOWS\KB2868038.log 2014-04-06 03:28 - 2014-04-06 03:28 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2868038$ 2014-04-06 03:24 - 2014-04-06 03:24 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2893294$ 2014-04-06 03:23 - 2014-04-06 03:23 - 00124920 _____ () C:\WINDOWS\KB2803821-v2.log 2014-04-06 03:23 - 2014-04-06 03:23 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2892075$ 2014-04-06 03:23 - 2014-04-06 03:23 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$ 2014-04-06 03:18 - 2014-04-06 03:18 - 00124412 _____ () C:\WINDOWS\KB2934207.log 2014-04-06 03:18 - 2014-04-06 03:18 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2934207$ 2014-04-06 03:17 - 2014-04-06 03:17 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2862330$ 2014-04-06 03:16 - 2014-04-06 03:59 - 00008011 _____ () C:\WINDOWS\updspapi.log 2014-04-06 03:15 - 2014-04-06 03:16 - 00005765 _____ () C:\WINDOWS\KB2909210-IE8.log 2014-04-06 03:02 - 2014-04-25 18:05 - 00000082 _____ () C:\WINDOWS\setupact.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00148391 _____ () C:\WINDOWS\FaxSetup.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00070944 _____ () C:\WINDOWS\ocgen.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00056808 _____ () C:\WINDOWS\tsoc.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00049173 _____ () C:\WINDOWS\comsetup.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00029797 _____ () C:\WINDOWS\ntdtcsetup.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00023179 _____ () C:\WINDOWS\iis6.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00009264 _____ () C:\WINDOWS\ocmsn.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00007416 _____ () C:\WINDOWS\msgsocm.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00001355 _____ () C:\WINDOWS\imsins.log 2014-04-06 03:02 - 2014-04-06 03:59 - 00001355 _____ () C:\WINDOWS\imsins.BAK 2014-04-06 03:02 - 2014-04-06 03:02 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-04-06 03:01 - 2014-04-06 03:01 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2914368$ 2014-04-06 03:00 - 2014-04-06 03:02 - 00004767 _____ () C:\WINDOWS\KB2914368.log 2014-04-06 01:23 - 2014-04-25 09:06 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Tibia 2014-04-05 21:10 - 2014-04-26 09:36 - 00109756 _____ () C:\WINDOWS\setupapi.log 2014-04-05 21:09 - 2014-04-05 21:09 - 00448512 _____ (OldTimer Tools) C:\Documents and Settings\Giza\Pulpit\TFC.exe 2014-04-05 21:04 - 2014-04-05 21:04 - 01426178 _____ () C:\Documents and Settings\Giza\Pulpit\adwcleaner.exe 2014-04-05 17:44 - 2014-04-05 17:44 - 00002849 _____ () C:\Documents and Settings\Giza\Pulpit\gmer.txt 2014-04-05 17:26 - 2014-04-26 09:08 - 01049088 _____ (Farbar) C:\Documents and Settings\Giza\Pulpit\FRST.exe 2014-04-05 17:20 - 2014-04-26 09:16 - 00000000 ____D () C:\FRST 2014-04-05 16:19 - 2014-04-05 16:19 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes 2014-04-05 16:18 - 2014-04-05 17:21 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes' Anti-Malware (portable) 2014-04-05 16:18 - 2014-04-05 16:44 - 00107224 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-04-05 16:16 - 2014-04-05 17:21 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\mbar 2014-04-05 16:16 - 2014-04-05 16:16 - 12589848 _____ (Malwarebytes Corp.) C:\Documents and Settings\Giza\Pulpit\mbar-1.07.0.1009.exe 2014-04-05 16:16 - 2014-04-05 16:16 - 00052312 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-04-05 16:03 - 2014-04-06 03:59 - 00140017 _____ () C:\WINDOWS\KB2868626.log 2014-04-05 15:58 - 2014-04-06 03:58 - 00134305 _____ () C:\WINDOWS\KB2916036.log 2014-04-05 15:57 - 2014-04-06 03:54 - 00133796 _____ () C:\WINDOWS\KB2847311.log 2014-04-05 15:57 - 2014-04-06 03:54 - 00133568 _____ () C:\WINDOWS\KB2898715.log 2014-04-05 15:57 - 2014-04-06 03:53 - 00131940 _____ () C:\WINDOWS\KB2929961.log 2014-04-05 15:57 - 2014-04-06 03:49 - 00132256 _____ () C:\WINDOWS\KB2876217.log 2014-04-05 15:57 - 2014-04-06 03:44 - 00131382 _____ () C:\WINDOWS\KB2864063.log 2014-04-05 15:57 - 2013-07-03 04:12 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys 2014-04-05 15:56 - 2014-04-06 03:45 - 00132346 _____ () C:\WINDOWS\KB2930275.log 2014-04-05 15:56 - 2014-04-06 03:42 - 00132585 _____ () C:\WINDOWS\KB2862152.log 2014-04-05 15:56 - 2014-04-06 03:33 - 00130529 _____ () C:\WINDOWS\KB2850869.log 2014-04-05 15:56 - 2014-04-06 03:32 - 00133796 _____ () C:\WINDOWS\KB2859537.log 2014-04-05 15:56 - 2014-04-06 03:32 - 00130005 _____ () C:\WINDOWS\KB2876331.log 2014-04-05 15:55 - 2014-04-06 03:24 - 00129333 _____ () C:\WINDOWS\KB2893294.log 2014-04-05 15:55 - 2014-04-06 03:23 - 00128845 _____ () C:\WINDOWS\KB2892075.log 2014-04-05 15:55 - 2014-02-27 01:28 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe 2014-04-05 15:55 - 2014-02-27 01:28 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe 2014-04-05 15:55 - 2013-08-09 02:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys 2014-04-05 15:55 - 2013-08-09 02:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys 2014-04-05 15:55 - 2013-07-17 02:58 - 00123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys 2014-04-05 15:55 - 2009-03-18 13:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys 2014-04-05 10:14 - 2014-04-05 11:43 - 00001772 ____H () C:\Documents and Settings\Giza\Moje dokumenty\Default.rdp 2014-03-30 21:12 - 2014-03-30 21:12 - 00000838 _____ () C:\Documents and Settings\All Users\Pulpit\EA Sports FIFA World.lnk 2014-03-30 21:12 - 2014-03-30 21:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\EA Sports FIFA World 2014-03-30 16:11 - 2014-03-30 16:11 - 00000000 ____D () C:\Documents and Settings\Gość\Dane aplikacji\LolClient 2014-03-30 00:27 - 2014-03-30 20:56 - 00000000 ____D () C:\Program Files\Origin Games 2014-03-29 23:10 - 2014-03-30 18:19 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Origin 2014-03-29 23:09 - 2014-03-30 00:27 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Origin 2014-03-29 23:08 - 2014-04-26 09:31 - 00000000 ____D () C:\Program Files\Origin 2014-03-29 23:08 - 2014-04-24 18:09 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Origin 2014-03-29 23:08 - 2014-03-29 23:08 - 00000654 _____ () C:\Documents and Settings\All Users\Pulpit\Origin.lnk 2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Origin 2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts 2014-03-29 06:11 - 2014-04-05 21:21 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-03-27 18:52 - 2014-03-27 23:15 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Configs ==================== One Month Modified Files and Folders ======= 2014-04-26 09:45 - 2014-04-26 09:45 - 00015525 _____ () C:\Documents and Settings\Giza\Pulpit\FRST.txt 2014-04-26 09:45 - 2011-05-12 07:30 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit 2014-04-26 09:36 - 2014-04-05 21:10 - 00109756 _____ () C:\WINDOWS\setupapi.log 2014-04-26 09:35 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Menu Start\Programy\Autostart 2014-04-26 09:32 - 2012-10-20 22:35 - 01385599 _____ () C:\WINDOWS\WindowsUpdate.log 2014-04-26 09:32 - 2012-04-04 12:27 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Skype 2014-04-26 09:32 - 2011-05-26 12:37 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\uTorrent 2014-04-26 09:31 - 2014-03-29 23:08 - 00000000 ____D () C:\Program Files\Origin 2014-04-26 09:30 - 2012-10-20 22:35 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-04-26 09:30 - 2012-10-20 22:35 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-04-26 09:30 - 2011-05-13 16:39 - 00065615 _____ () C:\WINDOWS\system32\nvapps.xml 2014-04-26 09:27 - 2014-04-26 09:18 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt 2014-04-26 09:27 - 2011-05-12 07:30 - 00000188 ___SH () C:\Documents and Settings\Giza\ntuser.ini 2014-04-26 09:16 - 2014-04-05 17:20 - 00000000 ____D () C:\FRST 2014-04-26 09:15 - 2014-04-26 09:14 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\sdfsdfijoo 2014-04-26 09:09 - 2011-05-12 07:30 - 00000000 __RHD () C:\Documents and Settings\Giza\Dane aplikacji 2014-04-26 09:09 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty 2014-04-26 09:08 - 2014-04-26 09:08 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\FRST-OlderVersion 2014-04-26 09:08 - 2014-04-05 17:26 - 01049088 _____ (Farbar) C:\Documents and Settings\Giza\Pulpit\FRST.exe 2014-04-26 02:37 - 2014-04-17 16:25 - 00001560 _____ () C:\Documents and Settings\Giza\Pulpit\Rec Keye i odzysk.txt 2014-04-26 02:35 - 2014-04-08 11:12 - 00003862 _____ () C:\Documents and Settings\Giza\Pulpit\dfgdfgzenia.txt 2014-04-25 18:15 - 2011-07-20 15:06 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty\Pobieranie 2014-04-25 18:05 - 2014-04-06 03:02 - 00000082 _____ () C:\WINDOWS\setupact.log 2014-04-25 09:06 - 2014-04-25 09:06 - 00000601 _____ () C:\Documents and Settings\All Users\Pulpit\Tibia.lnk 2014-04-25 09:06 - 2014-04-25 09:06 - 00000000 ____D () C:\extensions 2014-04-25 09:06 - 2014-04-06 01:23 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Tibia 2014-04-25 09:06 - 2011-05-12 01:49 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-04-25 08:11 - 2014-04-25 08:10 - 00001382 _____ () C:\Documents and Settings\Giza\Pulpit\AdwCleaner[S2].txt 2014-04-25 07:46 - 2014-04-17 15:38 - 00000535 _____ () C:\Documents and Settings\Giza\Pulpit\strona moja.txt 2014-04-24 20:30 - 2006-03-02 14:00 - 00000654 _____ () C:\WINDOWS\win.ini 2014-04-24 18:09 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Origin 2014-04-24 18:08 - 2011-05-12 01:47 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-04-24 18:05 - 2011-05-12 01:49 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-04-24 17:35 - 2014-04-17 14:41 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\FileZilla 2014-04-24 17:29 - 2014-04-17 13:15 - 00000000 ____D () C:\Moje Strony Web 2014-04-24 17:11 - 2014-04-24 17:09 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\moja strona 2014-04-24 14:08 - 2011-05-17 20:08 - 00000000 ____D () C:\Documents and Settings\Gość\Pulpit 2014-04-23 14:29 - 2006-03-02 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl 2014-04-23 11:23 - 2014-04-23 11:23 - 01674535 _____ () C:\Documents and Settings\Giza\Pulpit\beka hahaha.vrf 2014-04-22 20:08 - 2014-04-22 20:07 - 00007554 _____ () C:\Documents and Settings\Giza\hb.py 2014-04-22 20:08 - 2014-04-21 02:56 - 00006408 ____H () C:\Documents and Settings\Giza\_viminfo 2014-04-22 20:08 - 2011-05-12 07:30 - 00000000 ___HD () C:\Documents and Settings\Giza 2014-04-22 20:07 - 2014-04-22 20:07 - 00016404 _____ () C:\Documents and Settings\Giza\dane 2014-04-22 19:56 - 2014-04-22 19:56 - 00000000 ____D () C:\Documents and Settings\Giza\.idlerc 2014-04-22 19:56 - 2014-04-22 19:56 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Python 2.7 2014-04-22 19:56 - 2014-04-22 19:55 - 00000000 ____D () C:\Python27 2014-04-22 17:22 - 2014-04-22 17:21 - 00207588 _____ () C:\Documents and Settings\Giza\Pulpit\uihadiv.zip 2014-04-21 17:52 - 2014-04-21 13:32 - 00000111 _____ () C:\Documents and Settings\Giza\Pulpit\asdasfgedf.txt 2014-04-21 12:44 - 2014-04-21 03:58 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\DeHasher 2014-04-21 04:04 - 2014-04-20 20:32 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\tiusu frontline xeno 2014-04-21 03:58 - 2011-05-12 07:30 - 00000000 ___HD () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji 2014-04-21 02:34 - 2014-04-21 02:34 - 00001513 _____ () C:\Documents and Settings\All Users\Pulpit\gVim Read only 7.4.lnk 2014-04-21 02:34 - 2014-04-21 02:34 - 00001513 _____ () C:\Documents and Settings\All Users\Pulpit\gVim Easy 7.4.lnk 2014-04-21 02:34 - 2014-04-21 02:34 - 00001507 _____ () C:\Documents and Settings\All Users\Pulpit\gVim 7.4.lnk 2014-04-21 02:34 - 2014-04-21 02:34 - 00000000 ____D () C:\Program Files\Vim 2014-04-21 02:34 - 2014-04-21 02:34 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Vim 7.4 2014-04-21 02:09 - 2014-04-21 02:09 - 00000606 _____ () C:\Documents and Settings\Giza\Pulpit\udp.php 2014-04-21 02:09 - 2014-04-21 02:08 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Notepad++ 2014-04-21 02:08 - 2014-04-21 02:08 - 00000000 ____D () C:\Program Files\Notepad++ 2014-04-21 02:08 - 2014-04-21 02:08 - 00000000 ____D () C:\Documents and Settings\Giza\Menu Start\Programy\Notepad++ 2014-04-21 02:08 - 2014-04-21 02:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Notepad++ 2014-04-21 02:08 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Menu Start\Programy 2014-04-21 02:02 - 2014-04-21 02:02 - 00000606 _____ () C:\Documents and Settings\Giza\Pulpit\udp.php.txt 2014-04-20 19:31 - 2012-02-02 23:19 - 00000013 _____ () C:\pipe11.dat 2014-04-20 18:10 - 2014-04-11 18:49 - 00000062 _____ () C:\Documents and Settings\Giza\Pulpit\kasa z allegro.txt 2014-04-20 00:14 - 2014-04-20 00:14 - 00000000 ___RD () C:\Documents and Settings\LocalService\Ulubione 2014-04-20 00:14 - 2011-05-12 07:29 - 00000000 __SHD () C:\Documents and Settings\LocalService 2014-04-19 23:48 - 2014-03-20 17:56 - 00000511 _____ () C:\Documents and Settings\Giza\Pulpit\Magebot.lnk 2014-04-19 23:48 - 2013-12-07 19:32 - 00000556 _____ () C:\Documents and Settings\Giza\Pulpit\Magebot_SAFEMODE.lnk 2014-04-19 22:59 - 2014-04-19 22:44 - 00613971 _____ () C:\Documents and Settings\Giza\Pulpit\hueauh.zip 2014-04-19 22:59 - 2014-04-12 14:43 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Nowy folder (3) 2014-04-19 22:55 - 2013-03-31 14:35 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\burdel 2014-04-19 22:43 - 2014-04-19 22:42 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\GHISLER 2014-04-19 22:42 - 2014-04-19 22:42 - 00000548 _____ () C:\Documents and Settings\Giza\Pulpit\Total Commander.lnk 2014-04-19 22:42 - 2014-04-19 22:42 - 00000000 ____D () C:\totalcmd 2014-04-19 22:42 - 2014-04-19 22:42 - 00000000 ____D () C:\Documents and Settings\Giza\Menu Start\Programy\Total Commander 2014-04-17 19:23 - 2012-06-25 08:14 - 00000000 ____D () C:\Documents and Settings\Gość\Dane aplikacji\Skype 2014-04-17 16:07 - 2014-04-17 15:27 - 00000090 _____ () C:\Documents and Settings\Giza\Pulpit\neo.txt 2014-04-17 15:15 - 2014-04-17 15:15 - 00008686 _____ () C:\Documents and Settings\Giza\Pulpit\FileZilla.xml 2014-04-17 14:41 - 2014-04-17 14:41 - 00000046 _____ () C:\Documents and Settings\Giza\Dane aplikacji\WB.CFG 2014-04-17 14:41 - 2014-04-17 14:41 - 00000000 ____D () C:\Program Files\FileZilla FTP Client 2014-04-17 14:41 - 2014-04-17 14:41 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\FileZilla FTP Client 2014-04-17 13:59 - 2014-04-17 13:59 - 00958856 _____ () C:\Documents and Settings\Giza\Pulpit\huehue.zip 2014-04-17 13:14 - 2014-04-17 13:14 - 00000706 _____ () C:\Documents and Settings\Giza\Pulpit\HTTrack Website Copier.lnk 2014-04-17 13:14 - 2014-04-17 13:14 - 00000000 ____D () C:\Program Files\WinHTTrack 2014-04-17 13:14 - 2014-04-17 13:14 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\WinHTTrack 2014-04-16 17:33 - 2011-09-02 23:11 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\TS3Client 2014-04-16 10:33 - 2014-04-16 10:33 - 00013470 _____ () C:\Documents and Settings\Giza\Pulpit\plik.txt 2014-04-15 16:37 - 2014-04-08 10:49 - 00000260 _____ () C:\Documents and Settings\Giza\Pulpit\Emaile i konta noobow.txt 2014-04-13 19:37 - 2014-03-06 23:31 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Tibia 2014-04-12 20:24 - 2014-04-12 20:24 - 01149594 _____ () C:\Documents and Settings\Giza\Pulpit\zdjecie2.bmp 2014-04-12 20:23 - 2014-04-12 20:23 - 01177902 _____ () C:\Documents and Settings\Giza\Pulpit\zdjecie1.bmp 2014-04-11 22:41 - 2014-04-11 22:41 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Tibiacast 2014-04-11 22:41 - 2013-04-11 14:46 - 00000000 ____D () C:\Program Files\Tibiacast 2014-04-10 17:11 - 2013-12-16 23:24 - 00000000 ____D () C:\Magebot 2014-04-10 10:04 - 2014-04-10 10:04 - 00000837 _____ () C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk 2014-04-10 10:04 - 2013-02-03 19:35 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client 2014-04-09 18:14 - 2011-06-15 13:29 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2014-04-09 00:11 - 2014-04-06 19:00 - 00000000 ____D () C:\Program Files\Blackd Proxy 2014-04-06 19:00 - 2014-04-06 19:00 - 00000691 _____ () C:\Documents and Settings\All Users\Pulpit\Blackd Proxy.lnk 2014-04-06 19:00 - 2014-04-06 19:00 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Blackd Proxy 2014-04-06 13:42 - 2014-03-19 23:43 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\BBot 2014-04-06 12:07 - 2011-08-21 12:58 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\PMB Files 2014-04-06 12:07 - 2011-08-21 12:58 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PMB Files 2014-04-06 09:58 - 2014-04-06 09:58 - 00000214 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job 2014-04-06 09:58 - 2011-12-29 12:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-04-06 09:58 - 2011-05-12 01:47 - 01586736 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-04-06 04:00 - 2011-05-14 13:16 - 00000000 ____D () C:\WINDOWS\Microsoft.NET 2014-04-06 03:59 - 2014-04-06 03:59 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2868626$ 2014-04-06 03:59 - 2014-04-06 03:58 - 00148958 _____ () C:\WINDOWS\KB2925418-IE8.log 2014-04-06 03:59 - 2014-04-06 03:16 - 00008011 _____ () C:\WINDOWS\updspapi.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00148391 _____ () C:\WINDOWS\FaxSetup.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00070944 _____ () C:\WINDOWS\ocgen.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00056808 _____ () C:\WINDOWS\tsoc.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00049173 _____ () C:\WINDOWS\comsetup.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00029797 _____ () C:\WINDOWS\ntdtcsetup.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00023179 _____ () C:\WINDOWS\iis6.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00009264 _____ () C:\WINDOWS\ocmsn.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00007416 _____ () C:\WINDOWS\msgsocm.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00001355 _____ () C:\WINDOWS\imsins.log 2014-04-06 03:59 - 2014-04-06 03:02 - 00001355 _____ () C:\WINDOWS\imsins.BAK 2014-04-06 03:59 - 2014-04-05 16:03 - 00140017 _____ () C:\WINDOWS\KB2868626.log 2014-04-06 03:58 - 2014-04-06 03:58 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2916036$ 2014-04-06 03:58 - 2014-04-05 15:58 - 00134305 _____ () C:\WINDOWS\KB2916036.log 2014-04-06 03:58 - 2012-01-10 20:58 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help 2014-04-06 03:57 - 2011-05-12 01:49 - 01221336 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-04-06 03:57 - 2006-03-02 14:00 - 00559736 _____ () C:\WINDOWS\system32\perfh015.dat 2014-04-06 03:57 - 2006-03-02 14:00 - 00106366 _____ () C:\WINDOWS\system32\perfc015.dat 2014-04-06 03:54 - 2014-04-06 03:54 - 00128425 _____ () C:\WINDOWS\KB2900986.log 2014-04-06 03:54 - 2014-04-06 03:54 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2900986$ 2014-04-06 03:54 - 2014-04-06 03:54 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2898715$ 2014-04-06 03:54 - 2014-04-06 03:54 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2847311$ 2014-04-06 03:54 - 2014-04-05 15:57 - 00133796 _____ () C:\WINDOWS\KB2847311.log 2014-04-06 03:54 - 2014-04-05 15:57 - 00133568 _____ () C:\WINDOWS\KB2898715.log 2014-04-06 03:53 - 2014-04-06 03:53 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2929961$ 2014-04-06 03:53 - 2014-04-06 03:53 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2862335$ 2014-04-06 03:53 - 2014-04-06 03:52 - 00130354 _____ () C:\WINDOWS\KB2862335.log 2014-04-06 03:53 - 2014-04-05 15:57 - 00131940 _____ () C:\WINDOWS\KB2929961.log 2014-04-06 03:50 - 2014-04-06 03:49 - 00127622 _____ () C:\WINDOWS\KB2904266.log 2014-04-06 03:50 - 2012-12-13 11:26 - 00013144 _____ () C:\WINDOWS\system32\TZLog.log 2014-04-06 03:49 - 2014-04-06 03:49 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2904266$ 2014-04-06 03:49 - 2014-04-06 03:49 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2876217$ 2014-04-06 03:49 - 2014-04-05 15:57 - 00132256 _____ () C:\WINDOWS\KB2876217.log 2014-04-06 03:45 - 2014-04-05 15:56 - 00132346 _____ () C:\WINDOWS\KB2930275.log 2014-04-06 03:44 - 2014-04-06 03:44 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2930275$ 2014-04-06 03:44 - 2014-04-06 03:44 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2864063$ 2014-04-06 03:44 - 2014-04-05 15:57 - 00131382 _____ () C:\WINDOWS\KB2864063.log 2014-04-06 03:42 - 2014-04-06 03:42 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2862152$ 2014-04-06 03:42 - 2014-04-05 15:56 - 00132585 _____ () C:\WINDOWS\KB2862152.log 2014-04-06 03:33 - 2014-04-06 03:33 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2850869$ 2014-04-06 03:33 - 2014-04-05 15:56 - 00130529 _____ () C:\WINDOWS\KB2850869.log 2014-04-06 03:32 - 2014-04-06 03:32 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2876331$ 2014-04-06 03:32 - 2014-04-06 03:32 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2859537$ 2014-04-06 03:32 - 2014-04-05 15:56 - 00133796 _____ () C:\WINDOWS\KB2859537.log 2014-04-06 03:32 - 2014-04-05 15:56 - 00130005 _____ () C:\WINDOWS\KB2876331.log 2014-04-06 03:28 - 2014-04-06 03:28 - 00128393 _____ () C:\WINDOWS\KB2868038.log 2014-04-06 03:28 - 2014-04-06 03:28 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2868038$ 2014-04-06 03:24 - 2014-04-06 03:24 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2893294$ 2014-04-06 03:24 - 2014-04-05 15:55 - 00129333 _____ () C:\WINDOWS\KB2893294.log 2014-04-06 03:23 - 2014-04-06 03:23 - 00124920 _____ () C:\WINDOWS\KB2803821-v2.log 2014-04-06 03:23 - 2014-04-06 03:23 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2892075$ 2014-04-06 03:23 - 2014-04-06 03:23 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$ 2014-04-06 03:23 - 2014-04-05 15:55 - 00128845 _____ () C:\WINDOWS\KB2892075.log 2014-04-06 03:18 - 2014-04-06 03:18 - 00124412 _____ () C:\WINDOWS\KB2934207.log 2014-04-06 03:18 - 2014-04-06 03:18 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2934207$ 2014-04-06 03:17 - 2014-04-06 03:17 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2862330$ 2014-04-06 03:17 - 2011-12-29 12:26 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight 2014-04-06 03:16 - 2014-04-06 03:15 - 00005765 _____ () C:\WINDOWS\KB2909210-IE8.log 2014-04-06 03:16 - 2012-05-03 11:52 - 00000000 ____D () C:\WINDOWS\ie8updates 2014-04-06 03:02 - 2014-04-06 03:02 - 00000000 _____ () C:\WINDOWS\setuperr.log 2014-04-06 03:02 - 2014-04-06 03:00 - 00004767 _____ () C:\WINDOWS\KB2914368.log 2014-04-06 03:01 - 2014-04-06 03:01 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2914368$ 2014-04-05 21:33 - 2011-05-17 20:08 - 00000000 __RHD () C:\Documents and Settings\Gość\Dane aplikacji 2014-04-05 21:33 - 2011-05-17 20:08 - 00000000 ___RD () C:\Documents and Settings\Gość\Menu Start\Programy 2014-04-05 21:33 - 2011-05-17 20:08 - 00000000 ___HD () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji 2014-04-05 21:21 - 2014-03-29 06:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-04-05 21:11 - 2011-05-15 12:08 - 00076136 _____ () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2014-04-05 21:09 - 2014-04-05 21:09 - 00448512 _____ (OldTimer Tools) C:\Documents and Settings\Giza\Pulpit\TFC.exe 2014-04-05 21:04 - 2014-04-05 21:04 - 01426178 _____ () C:\Documents and Settings\Giza\Pulpit\adwcleaner.exe 2014-04-05 17:44 - 2014-04-05 17:44 - 00002849 _____ () C:\Documents and Settings\Giza\Pulpit\gmer.txt 2014-04-05 17:21 - 2014-04-05 16:18 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes' Anti-Malware (portable) 2014-04-05 17:21 - 2014-04-05 16:16 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\mbar 2014-04-05 16:44 - 2014-04-05 16:18 - 00107224 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-04-05 16:19 - 2014-04-05 16:19 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes 2014-04-05 16:16 - 2014-04-05 16:16 - 12589848 _____ (Malwarebytes Corp.) C:\Documents and Settings\Giza\Pulpit\mbar-1.07.0.1009.exe 2014-04-05 16:16 - 2014-04-05 16:16 - 00052312 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-04-05 15:58 - 2011-05-12 07:29 - 00032478 _____ () C:\WINDOWS\SchedLgU.Txt 2014-04-05 15:58 - 2011-05-12 07:29 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-04-05 15:54 - 2011-06-15 13:28 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-05 15:52 - 2012-01-22 13:54 - 00000000 ___HD () C:\Documents and Settings\Giza\Dane aplikacji\Media Player Classic 2014-04-05 15:43 - 2011-08-13 01:22 - 00000276 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1844237615-527237240-725345543-1004.job 2014-04-05 15:43 - 2011-06-15 13:28 - 00001028 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-05 15:00 - 2012-03-29 13:34 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-04-05 13:44 - 2014-03-26 23:39 - 00000998 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004UA.job 2014-04-05 12:30 - 2011-05-12 07:30 - 00000000 ___RD () C:\Documents and Settings\Giza\Moje dokumenty\Moje obrazy 2014-04-05 11:43 - 2014-04-05 10:14 - 00001772 ____H () C:\Documents and Settings\Giza\Moje dokumenty\Default.rdp 2014-04-05 07:59 - 2011-05-12 07:25 - 00000000 ____D () C:\WINDOWS\system32\DirectX 2014-04-05 07:53 - 2011-05-12 07:30 - 00000000 __SHD () C:\Documents and Settings\Giza\Ustawienia lokalne\Historia 2014-04-04 22:44 - 2014-03-26 23:39 - 00000976 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1844237615-527237240-725345543-1004Core.job 2014-04-04 12:48 - 2011-06-15 13:29 - 00000284 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1844237615-527237240-725345543-1004.job 2014-03-30 21:12 - 2014-03-30 21:12 - 00000838 _____ () C:\Documents and Settings\All Users\Pulpit\EA Sports FIFA World.lnk 2014-03-30 21:12 - 2014-03-30 21:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\EA Sports FIFA World 2014-03-30 20:56 - 2014-03-30 00:27 - 00000000 ____D () C:\Program Files\Origin Games 2014-03-30 18:21 - 2012-06-04 14:12 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-03-30 18:19 - 2014-03-29 23:10 - 00000000 ____D () C:\Documents and Settings\Giza\Dane aplikacji\Origin 2014-03-30 16:11 - 2014-03-30 16:11 - 00000000 ____D () C:\Documents and Settings\Gość\Dane aplikacji\LolClient 2014-03-30 00:27 - 2014-03-29 23:09 - 00000000 ____D () C:\Documents and Settings\Giza\Ustawienia lokalne\Dane aplikacji\Origin 2014-03-29 23:08 - 2014-03-29 23:08 - 00000654 _____ () C:\Documents and Settings\All Users\Pulpit\Origin.lnk 2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Origin 2014-03-29 23:08 - 2014-03-29 23:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts 2014-03-27 23:15 - 2014-03-27 18:52 - 00000000 ____D () C:\Documents and Settings\Giza\Pulpit\Configs ==================== Bamital & volsnap Check ================= C:\WINDOWS\explorer.exe [2006-03-02 14:00] - [2008-04-14 19:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\WINDOWS\system32\winlogon.exe [2006-03-02 14:00] - [2008-04-14 19:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\WINDOWS\system32\svchost.exe [2006-03-02 14:00] - [2008-04-14 19:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\WINDOWS\system32\services.exe [2006-03-02 14:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f C:\WINDOWS\system32\User32.dll [2006-03-02 14:00] - [2008-04-14 19:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\WINDOWS\system32\userinit.exe [2006-03-02 14:00] - [2008-04-14 19:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\WINDOWS\system32\rpcss.dll [2006-03-02 14:00] - [2009-02-09 12:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected. C:\WINDOWS\system32\Drivers\volsnap.sys [2006-03-02 14:00] - [2008-04-14 18:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================