Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:14-05-2014 Ran by I (administrator) on KOMPUTER on 15-05-2014 08:48:21 Running from C:\Documents and Settings\I\Pulpit\prog Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish Internet Explorer Version 6 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (VIA Technologies, Inc.) C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe (Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (SweetIM Technologies Ltd.) C:\Program Files\SweetIM\Messenger\SweetIM.exe (RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe (IVT Corporation) G:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe () G:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [33673216 2009-08-28] (VIA Technologies, Inc.) HKLM\...\Run: [SSBkgdUpdate] => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM\...\Run: [PaperPort PTD] => C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [29984 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [IndexSearch] => C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [46368 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [PPort11reminder] => C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.) HKLM\...\Run: [SweetIM] => C:\Program Files\SweetIM\Messenger\SweetIM.exe [114992 2012-01-19] (SweetIM Technologies Ltd.) HKLM\...\Run: [BluetoothAuthenticationAgent] => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [296056 2012-03-20] (RealNetworks, Inc.) HKLM\...\Run: [NvCplDaemon] => C:\WINDOWS\system32\NvCpl.dll [16744256 2011-10-08] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] => C:\WINDOWS\system32\NvMcTray.dll [203072 2011-10-08] (NVIDIA Corporation) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-19] (AVAST Software) HKU\S-1-5-21-790525478-2139871995-725345543-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation) HKU\S-1-5-21-790525478-2139871995-725345543-1003\...\Run: [Google Update] => C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [116648 2012-08-04] (Google Inc.) HKU\S-1-5-21-790525478-2139871995-725345543-1003\...\Run: [IPLA!] => G:\Program Files\ipla\ipla.exe [21325920 2014-03-03] (Redefine Sp z o.o.) HKU\S-1-5-21-790525478-2139871995-725345543-1003\...\Run: [Facebook Update] => C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2013-02-07] (Facebook Inc.) HKU\S-1-5-21-790525478-2139871995-725345543-1003\...\MountPoints2: {64a16ec7-11ad-11e3-82d5-00248cbde521} - D:\Startme.exe HKU\S-1-5-21-790525478-2139871995-725345543-1003\...\MountPoints2: {ab244c5e-0447-11e3-8290-00248cbde521} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL upgrade.htm Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BlueSoleil.lnk ShortcutTarget: BlueSoleil.lnk -> G:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe (IVT Corporation) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1&crg=4.0004002&barid={D0E36376-5CB9-11E1-B942-00248CBDE521} HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com/?affID=113480&tt=120812_bandext_3212_5&babsrc=HP_ss&mntrId=783b645e000000000000001167ac6fce HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://search.babylon.com/?affID=113480&tt=120812_bandext_3212_5&babsrc=HP_ss&mntrId=783b645e000000000000001167ac6fce HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.myhoome.com/ HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.myhoome.com/ HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1&crg=4.0004002&barid={D0E36376-5CB9-11E1-B942-00248CBDE521} URLSearchHook: HKLM - SHOUTcast Toolbar Search Class - {14f0d511-36a2-41ca-ae01-ba4f87282c97} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) URLSearchHook: ATTENTION ==> Default URLSearchHook is missing. URLSearchHook: HKCU - SHOUTcast Toolbar Search Class - {14f0d511-36a2-41ca-ae01-ba4f87282c97} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) URLSearchHook: HKCU - SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) URLSearchHook: HKCU - BrotherSoft Extreme3 Toolbar - {62d40876-df18-411f-9d34-a9dd7a197bc5} - C:\Program Files\BrotherSoft_Extreme3\prxtbBro2.dll (Conduit Ltd.) SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=4.0004002&st=1&barid={D0E36376-5CB9-11E1-B942-00248CBDE521}&q={searchTerms}&barid={D0E36376-5CB9-11E1-B942-00248CBDE521} SearchScopes: HKLM - {40439b93-f815-4122-8073-d03bed94c303} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-shoutcast-chromesbox-en-us SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=4.0004002&st=1&barid={D0E36376-5CB9-11E1-B942-00248CBDE521}&q={searchTerms}&barid={D0E36376-5CB9-11E1-B942-00248CBDE521} SearchScopes: HKCU - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=4.0004002&st=1&barid={D0E36376-5CB9-11E1-B942-00248CBDE521}&q={searchTerms}&barid={D0E36376-5CB9-11E1-B942-00248CBDE521} SearchScopes: HKCU - BrowserMngrDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=113480&tt=120812_bandext_3212_5&babsrc=SP_ss&mntrId=783b645e000000000000001167ac6fce SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=770C5352-6034-4FA9-939A-E1C175DBA893&apn_sauid=42B0E694-C8A8-433F-959E-18540450C02F SearchScopes: HKCU - {40439b93-f815-4122-8073-d03bed94c303} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-shoutcast-chromesbox-en-us SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3205709 SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=4.0004002&st=1&barid={D0E36376-5CB9-11E1-B942-00248CBDE521}&q={searchTerms}&barid={D0E36376-5CB9-11E1-B942-00248CBDE521} BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Documents and Settings\I\Dane aplikacji\Complitly\Complitly.dll (SimplyGen) BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.6.4.6\bh\BabylonToolbar.dll (Babylon BHO) BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO: BrotherSoft Extreme3 Toolbar - {62d40876-df18-411f-9d34-a9dd7a197bc5} - C:\Program Files\BrotherSoft_Extreme3\prxtbBro2.dll (Conduit Ltd.) BHO: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No File BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd) BHO: SHOUTcast Loader - {ccec60fc-2608-4e58-9659-3ffc159e8ea9} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File BHO: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.6.4.6\BabylonToolbarTlbr.dll (Babylon Ltd.) Toolbar: HKLM - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM - BrotherSoft Extreme3 Toolbar - {62d40876-df18-411f-9d34-a9dd7a197bc5} - C:\Program Files\BrotherSoft_Extreme3\prxtbBro2.dll (Conduit Ltd.) Toolbar: HKLM - SHOUTcast Radio Toolbar - {0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\System32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) Toolbar: HKCU - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKCU - BrotherSoft Extreme3 Toolbar - {62D40876-DF18-411F-9D34-A9DD7A197BC5} - C:\Program Files\BrotherSoft_Extreme3\prxtbBro2.dll (Conduit Ltd.) Toolbar: HKCU - SHOUTcast Radio Toolbar - {0457331D-8CA6-4F97-9C26-6A9EF2B2DBA8} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) Handler: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\System32\msvidctl.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default FF user.js: detected! => C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\user.js FF Homepage: www.google.pl FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @google.com/npPicasa3,version=3.0.0 - G:\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=15.0.2.72 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=15.0.2.72 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.2.72 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=15.0.2.72 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=15.0.2.72 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF SearchPlugin: C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\searchplugins\askcom.xml FF SearchPlugin: C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\searchplugins\BabylonMngr.xml FF SearchPlugin: C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\searchplugins\browsemngr.xml FF SearchPlugin: C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\searchplugins\conduit.xml FF SearchPlugin: C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\searchplugins\softonic.xml FF SearchPlugin: C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\searchplugins\sweetim.xml FF Extension: Softonic Toolbar - C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\Extensions\ffxtlbra@softonic.com [2012-02-21] FF Extension: SHOUTcast Radio Toolbar - C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\Extensions\{12e4c684-c03e-4e4d-85bc-0c065e7a9489} [2012-08-14] FF Extension: Complitly - Speed up your search with your personal search suggestions tool - C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} [2012-02-21] FF Extension: DealPly - C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2012-02-21] FF Extension: SweetPacks Toolbar for Firefox - C:\Documents and Settings\I\Dane aplikacji\Mozilla\Firefox\Profiles\hnn24x6t.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2012-02-21] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-03-20] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-15] Chrome: ======= CHR Extension: (BrotherSoft Extreme3) - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol [2013-06-14] CHR Extension: (McAfee Security Scan+) - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh [2014-02-21] CHR Extension: (Babylon Toolbar) - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb [2014-02-21] CHR Extension: (Complitly plugin for chrome) - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda [2013-06-14] CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-06-14] CHR Extension: (Google Wallet) - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21] CHR HKLM\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2012-07-24] CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Documents and Settings\I\Dane aplikacji\BabylonToolbar\CR\BabylonChrome1.crx [2012-06-27] CHR HKLM\...\Chrome\Extension: [dlfienamagdnkekbbbocojppncdambda] - C:\Program Files\Complitly\chrome\ComplitlyChrome.crx [2012-02-21] CHR HKLM\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx [2011-12-19] CHR HKLM\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2011-12-19] CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-03-20] CHR HKCU\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2012-07-24] CHR HKCU\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx [2011-12-19] ========================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-19] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-04-19] (AVAST Software) R2 BlueSoleil Hid Service; G:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe [110592 2005-04-06] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [235696 2014-01-16] (McAfee, Inc.) R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-08] (NVIDIA Corporation) S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) ==================== Drivers (Whitelisted) ==================== R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-04-19] () R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [26136 2014-04-19] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-04-19] (AVAST Software) R0 aswNdis; C:\WINDOWS\System32\DRIVERS\aswNdis.sys [12112 2013-09-25] (ALWIL Software) R0 aswNdis2; C:\WINDOWS\system32\Drivers\aswNdis2.sys [252464 2014-04-19] (AVAST Software) R1 AswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-04-19] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-04-19] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [776976 2014-04-19] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411552 2014-04-19] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-04-19] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-04-19] () R3 BlueletAudio; C:\WINDOWS\System32\DRIVERS\blueletaudio.sys [20480 2005-08-31] (IVT Corporation) R3 BlueletSCOAudio; C:\WINDOWS\System32\DRIVERS\BlueletSCOAudio.sys [20480 2005-08-31] (IVT Corporation) S3 BrScnUsb; C:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.) R3 BT; C:\WINDOWS\System32\DRIVERS\btnetdrv.sys [10804 2005-04-30] (IVT Corporation) S3 Btcsrusb; C:\WINDOWS\System32\Drivers\btcusb.sys [23000 2005-07-29] (IVT Corporation) R3 BTHidEnum; C:\WINDOWS\System32\DRIVERS\vbtenum.sys [11988 2005-07-29] () R0 BTHidMgr; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [28271 2005-04-30] (IVT Corporation) S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2014-04-13] (Symantec Corporation) R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-14] () S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation) R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [54784 2008-08-01] (NVIDIA Corporation) R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [22016 2008-08-01] (NVIDIA Corporation) R3 VComm; C:\WINDOWS\System32\DRIVERS\VComm.sys [61312 2004-10-19] (IVT Corporation) R3 VcommMgr; C:\WINDOWS\System32\Drivers\VcommMgr.sys [82148 2005-03-25] (IVT Corporation) R3 VIAHdAudAddService; C:\WINDOWS\System32\drivers\viahduaa.sys [1390976 2009-08-17] (VIA Technologies, Inc.) S4 hpt3xx; No ImagePath S4 IntelIde; No ImagePath U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-15 08:46 - 2014-05-15 08:48 - 00000000 ____D () C:\FRST 2014-05-15 08:46 - 2014-05-15 08:48 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\prog 2014-05-15 07:56 - 2010-02-22 16:42 - 00019320 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg.dll 2014-05-15 07:53 - 2014-05-15 07:53 - 00001799 _____ () C:\Documents and Settings\All Users\Pulpit\avast! SafeZone.lnk 2014-05-15 07:53 - 2014-05-15 07:53 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Avast 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PIT Format 2013 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PIT Format 2012 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Maluch Racer 2 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\ipla 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\ipla 2014-05-15 07:46 - 2014-05-15 07:46 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NSS 2014-05-15 07:46 - 2014-05-15 07:46 - 00000000 ____D () C:\Program Files\Norton Security Scan 2014-05-15 07:46 - 2014-05-15 07:46 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Norton Security Scan 2014-05-15 07:46 - 2014-05-15 07:46 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software 2014-05-14 14:45 - 2014-05-15 07:47 - 00000000 ___SD () C:\Documents and Settings\Administrator.KOMPUTER.000 2014-05-14 14:45 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Ustawienia lokalne\Historia 2014-05-14 14:45 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Ustawienia lokalne 2014-05-14 14:45 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Szablony 2014-05-14 14:45 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Dane aplikacji 2014-05-14 14:45 - 2014-05-14 14:45 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Ustawienia lokalne\Dane aplikacji 2014-05-14 12:37 - 2014-05-15 07:47 - 00000000 ___SD () C:\Documents and Settings\Administrator.KOMPUTER 2014-05-14 12:37 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Ustawienia lokalne\Historia 2014-05-14 12:37 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Ustawienia lokalne 2014-05-14 12:37 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Szablony 2014-05-14 12:37 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Dane aplikacji 2014-05-14 12:37 - 2014-05-14 12:37 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Ustawienia lokalne\Dane aplikacji 2014-05-14 09:16 - 2014-05-15 08:10 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-05-13 08:04 - 2014-05-13 08:04 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\I zdrowie 2014-05-05 10:34 - 2014-05-15 07:47 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2566454$ 2014-05-05 10:34 - 2014-05-15 07:47 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2393802$ 2014-05-05 10:34 - 2014-05-05 10:34 - 00010149 _____ () C:\WINDOWS\KB2393802.log 2014-05-05 10:34 - 2014-05-05 10:34 - 00008457 _____ () C:\WINDOWS\KB2566454.log 2014-05-05 10:28 - 2014-05-05 10:28 - 00003999 _____ () C:\WINDOWS\KB2620712.log 2014-05-05 10:24 - 2014-05-05 10:25 - 00003749 _____ () C:\WINDOWS\KB2705219-v2.log 2014-05-05 09:56 - 2014-05-05 11:24 - 00005510 _____ () C:\WINDOWS\KB979309.log 2014-05-05 09:43 - 2014-05-15 07:48 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2564958$ 2014-05-05 09:43 - 2014-05-05 09:43 - 00009049 _____ () C:\WINDOWS\KB2564958.log 2014-05-05 09:42 - 2014-05-15 07:48 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB974112$ 2014-05-05 09:42 - 2014-05-15 07:48 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2536276-v2$ 2014-05-05 09:42 - 2014-05-05 09:42 - 00010704 _____ () C:\WINDOWS\KB2536276-v2.log 2014-05-05 09:42 - 2014-05-05 09:42 - 00010195 _____ () C:\WINDOWS\KB974112.log 2014-05-05 09:41 - 2014-05-15 07:48 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB981997$ 2014-05-05 09:41 - 2014-05-05 09:41 - 00010205 _____ () C:\WINDOWS\KB981997.log 2014-05-05 09:41 - 2014-05-05 09:41 - 00010183 _____ () C:\WINDOWS\KB2603381.log 2014-05-05 09:41 - 2014-05-05 09:41 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2603381$ 2014-05-05 09:40 - 2014-05-15 07:56 - 00023681 _____ () C:\WINDOWS\KB2509553.log 2014-05-05 09:40 - 2014-05-15 07:56 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2509553$ 2014-05-05 09:34 - 2014-05-15 07:48 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB923561$ 2014-05-05 09:34 - 2014-05-05 09:34 - 00009394 _____ () C:\WINDOWS\KB923561.log 2014-05-05 09:20 - 2014-05-05 09:20 - 00003461 _____ () C:\WINDOWS\KB2691442.log 2014-05-05 09:20 - 2014-05-05 09:20 - 00003345 _____ () C:\WINDOWS\KB975025.log 2014-05-05 09:19 - 2014-05-05 09:20 - 00003255 _____ () C:\WINDOWS\KB951978.log 2014-05-05 09:19 - 2014-05-05 09:19 - 00003152 _____ () C:\WINDOWS\KB978338.log 2014-05-05 09:19 - 2014-05-05 09:19 - 00003053 _____ () C:\WINDOWS\KB2619339.log 2014-05-05 09:19 - 2014-05-05 09:19 - 00002954 _____ () C:\WINDOWS\KB959426.log 2014-05-05 09:19 - 2014-05-05 09:19 - 00002855 _____ () C:\WINDOWS\KB975713.log 2014-05-05 07:57 - 2014-05-05 07:57 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\MSN6 2014-04-19 01:02 - 2014-05-15 07:46 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\AVAST Software 2014-04-19 00:55 - 2014-04-19 00:55 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-04-19 00:55 - 2014-04-19 00:55 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-04-19 00:40 - 2014-04-19 00:55 - 00252464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdis2.sys 2014-04-19 00:40 - 2014-04-19 00:55 - 00026136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2014-04-19 00:40 - 2014-01-22 15:52 - 00104752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFW.sys 2014-04-19 00:40 - 2013-09-25 13:15 - 00012112 _____ (ALWIL Software) C:\WINDOWS\system32\Drivers\aswNdis.sys 2014-04-19 00:32 - 2014-05-15 07:53 - 00001739 _____ () C:\Documents and Settings\All Users\Pulpit\avast! Internet Security.lnk 2014-04-18 04:55 - 2014-04-18 04:55 - 00001498 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk 2014-04-18 04:55 - 2014-04-18 04:55 - 00001492 _____ () C:\Documents and Settings\All Users\Pulpit\Opera.lnk 2014-04-18 04:55 - 2014-04-18 04:55 - 00000000 ____D () C:\Program Files\Opera 2014-04-18 04:55 - 2014-04-18 04:55 - 00000000 ____D () C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Opera 2014-04-18 04:55 - 2014-04-18 04:55 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\Opera 2014-04-17 14:08 - 2014-05-04 14:24 - 00001924 _____ () C:\Documents and Settings\I\Pulpit\muzykaa.txt 2014-04-17 14:02 - 2014-04-17 14:02 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\Muzyki ==================== One Month Modified Files and Folders ======= 2014-05-15 08:48 - 2014-05-15 08:46 - 00000000 ____D () C:\FRST 2014-05-15 08:48 - 2014-05-15 08:46 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\prog 2014-05-15 08:48 - 2013-02-25 18:54 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-05-15 08:46 - 2013-08-13 21:38 - 00000000 ____D () C:\Documents and Settings\I\Pulpit 2014-05-15 08:45 - 2011-12-28 17:06 - 00610350 _____ () C:\WINDOWS\setupapi.log 2014-05-15 08:43 - 2011-12-29 18:12 - 01581763 _____ () C:\WINDOWS\WindowsUpdate.log 2014-05-15 08:25 - 2012-08-04 15:19 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-790525478-2139871995-725345543-1003UA.job 2014-05-15 08:10 - 2014-05-14 09:16 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-05-15 08:04 - 2013-02-13 09:19 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2014-05-15 08:03 - 2011-12-28 17:08 - 00994228 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-05-15 08:03 - 2001-10-26 18:15 - 00451554 _____ () C:\WINDOWS\system32\perfh015.dat 2014-05-15 08:03 - 2001-10-26 18:15 - 00075602 _____ () C:\WINDOWS\system32\perfc015.dat 2014-05-15 08:00 - 2013-06-07 21:08 - 03522411 _____ () C:\Documents and Settings\I\debug.log 2014-05-15 07:59 - 2011-12-28 17:09 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-05-15 07:59 - 2011-12-28 17:09 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-05-15 07:58 - 2013-02-25 18:54 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-05-15 07:58 - 2012-04-27 10:51 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\ipla 2014-05-15 07:58 - 2012-03-20 19:02 - 00000280 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-790525478-2139871995-725345543-1003.job 2014-05-15 07:58 - 2011-12-28 17:15 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-05-15 07:57 - 2011-12-28 17:19 - 00000292 ___SH () C:\Documents and Settings\I\ntuser.ini 2014-05-15 07:57 - 2011-12-28 17:18 - 00032520 _____ () C:\WINDOWS\SchedLgU.Txt 2014-05-15 07:56 - 2014-05-05 09:40 - 00023681 _____ () C:\WINDOWS\KB2509553.log 2014-05-15 07:56 - 2014-05-05 09:40 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2509553$ 2014-05-15 07:56 - 2013-05-16 21:28 - 00128681 _____ () C:\WINDOWS\updspapi.log 2014-05-15 07:56 - 2011-12-29 18:10 - 00022725 _____ () C:\WINDOWS\netfxocm.log 2014-05-15 07:56 - 2011-12-29 18:10 - 00006967 _____ () C:\WINDOWS\tabletoc.log 2014-05-15 07:56 - 2011-12-29 18:06 - 00013148 _____ () C:\WINDOWS\medctroc.Log 2014-05-15 07:56 - 2011-12-28 17:08 - 00207658 _____ () C:\WINDOWS\iis6.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00140045 _____ () C:\WINDOWS\FaxSetup.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00083160 _____ () C:\WINDOWS\ocgen.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00071153 _____ () C:\WINDOWS\tsoc.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00058253 _____ () C:\WINDOWS\comsetup.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00056038 _____ () C:\WINDOWS\msmqinst.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00034311 _____ () C:\WINDOWS\ntdtcsetup.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00009147 _____ () C:\WINDOWS\ocmsn.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00007412 _____ () C:\WINDOWS\msgsocm.log 2014-05-15 07:56 - 2011-12-28 17:08 - 00001374 _____ () C:\WINDOWS\imsins.log 2014-05-15 07:53 - 2014-05-15 07:53 - 00001799 _____ () C:\Documents and Settings\All Users\Pulpit\avast! SafeZone.lnk 2014-05-15 07:53 - 2014-05-15 07:53 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Avast 2014-05-15 07:53 - 2014-04-19 00:32 - 00001739 _____ () C:\Documents and Settings\All Users\Pulpit\avast! Internet Security.lnk 2014-05-15 07:53 - 2011-12-28 17:07 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-05-15 07:53 - 2011-12-28 17:07 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-05-15 07:52 - 2011-12-28 17:06 - 00172573 _____ () C:\WINDOWS\setupact.log 2014-05-15 07:49 - 2011-12-28 17:19 - 00000000 ____D () C:\Documents and Settings\I 2014-05-15 07:49 - 2011-12-28 17:18 - 00000000 __SHD () C:\Documents and Settings\NetworkService 2014-05-15 07:49 - 2011-12-28 17:18 - 00000000 __SHD () C:\Documents and Settings\LocalService 2014-05-15 07:49 - 2011-12-28 17:12 - 00000000 ____D () C:\WINDOWS\Registration 2014-05-15 07:48 - 2014-05-05 09:43 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2564958$ 2014-05-15 07:48 - 2014-05-05 09:42 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB974112$ 2014-05-15 07:48 - 2014-05-05 09:42 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2536276-v2$ 2014-05-15 07:48 - 2014-05-05 09:41 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB981997$ 2014-05-15 07:48 - 2014-05-05 09:34 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB923561$ 2014-05-15 07:48 - 2013-07-31 22:20 - 00000000 ___HD () C:\WINDOWS\$hf_mig$ 2014-05-15 07:48 - 2011-12-28 17:14 - 00000000 ____D () C:\Program Files\Movie Maker 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PIT Format 2013 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PIT Format 2012 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Maluch Racer 2 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\ipla 2014-05-15 07:47 - 2014-05-15 07:47 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\ipla 2014-05-15 07:47 - 2014-05-14 14:45 - 00000000 ___SD () C:\Documents and Settings\Administrator.KOMPUTER.000 2014-05-15 07:47 - 2014-05-14 14:45 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Ustawienia lokalne\Historia 2014-05-15 07:47 - 2014-05-14 14:45 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Ustawienia lokalne 2014-05-15 07:47 - 2014-05-14 14:45 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Szablony 2014-05-15 07:47 - 2014-05-14 14:45 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Dane aplikacji 2014-05-15 07:47 - 2014-05-14 12:37 - 00000000 ___SD () C:\Documents and Settings\Administrator.KOMPUTER 2014-05-15 07:47 - 2014-05-14 12:37 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Ustawienia lokalne\Historia 2014-05-15 07:47 - 2014-05-14 12:37 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Ustawienia lokalne 2014-05-15 07:47 - 2014-05-14 12:37 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Szablony 2014-05-15 07:47 - 2014-05-14 12:37 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Dane aplikacji 2014-05-15 07:47 - 2014-05-05 10:34 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2566454$ 2014-05-15 07:47 - 2014-05-05 10:34 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2393802$ 2014-05-15 07:47 - 2014-02-22 19:36 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\pendrajw 2014-05-15 07:47 - 2013-09-10 20:11 - 00000000 ____D () C:\PIT Format 2012 2014-05-15 07:47 - 2011-12-29 18:24 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-05-15 07:47 - 2011-12-28 18:42 - 00000000 ____D () C:\NVIDIA 2014-05-15 07:46 - 2014-05-15 07:46 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NSS 2014-05-15 07:46 - 2014-05-15 07:46 - 00000000 ____D () C:\Program Files\Norton Security Scan 2014-05-15 07:46 - 2014-05-15 07:46 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Norton Security Scan 2014-05-15 07:46 - 2014-05-15 07:46 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software 2014-05-15 07:46 - 2014-04-19 01:02 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\AVAST Software 2014-05-15 07:42 - 2012-03-06 17:38 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared 2014-05-15 07:35 - 2012-03-06 17:38 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Norton 2014-05-14 14:47 - 2011-12-29 19:10 - 00000000 ____D () C:\Program Files\AVAST Software 2014-05-14 14:47 - 2011-12-28 17:15 - 00002596 _____ () C:\WINDOWS\system32\CONFIG.NT 2014-05-14 14:47 - 2011-12-28 17:06 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-05-14 14:45 - 2014-05-14 14:45 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER.000\Ustawienia lokalne\Dane aplikacji 2014-05-14 13:48 - 2013-02-07 20:43 - 00001006 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-790525478-2139871995-725345543-1003UA.job 2014-05-14 12:37 - 2014-05-14 12:37 - 00000000 ____D () C:\Documents and Settings\Administrator.KOMPUTER\Ustawienia lokalne\Dane aplikacji 2014-05-14 11:11 - 2011-12-28 18:03 - 00000000 ____D () C:\WINDOWS\security 2014-05-14 09:49 - 2013-01-31 20:56 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\PriceGong 2014-05-14 09:04 - 2011-12-28 19:02 - 00000000 ____D () C:\Program Files\Common Files\InstallShield 2014-05-14 08:42 - 2001-07-22 00:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2014-05-13 08:04 - 2014-05-13 08:04 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\I zdrowie 2014-05-05 11:37 - 2011-12-28 17:19 - 00000000 ___RD () C:\Documents and Settings\I\Moje dokumenty 2014-05-05 11:24 - 2014-05-05 09:56 - 00005510 _____ () C:\WINDOWS\KB979309.log 2014-05-05 10:34 - 2014-05-05 10:34 - 00010149 _____ () C:\WINDOWS\KB2393802.log 2014-05-05 10:34 - 2014-05-05 10:34 - 00008457 _____ () C:\WINDOWS\KB2566454.log 2014-05-05 10:34 - 2011-12-28 17:08 - 00001355 _____ () C:\WINDOWS\imsins.BAK 2014-05-05 10:29 - 2012-03-16 21:19 - 00000000 ____D () C:\Documents and Settings\I\Moje dokumenty\My Games 2014-05-05 10:28 - 2014-05-05 10:28 - 00003999 _____ () C:\WINDOWS\KB2620712.log 2014-05-05 10:26 - 2014-02-25 22:12 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\City Interactive 2014-05-05 10:26 - 2014-02-25 22:05 - 00000000 ____D () C:\Program Files\City Interactive 2014-05-05 10:25 - 2014-05-05 10:24 - 00003749 _____ () C:\WINDOWS\KB2705219-v2.log 2014-05-05 09:43 - 2014-05-05 09:43 - 00009049 _____ () C:\WINDOWS\KB2564958.log 2014-05-05 09:42 - 2014-05-05 09:42 - 00010704 _____ () C:\WINDOWS\KB2536276-v2.log 2014-05-05 09:42 - 2014-05-05 09:42 - 00010195 _____ () C:\WINDOWS\KB974112.log 2014-05-05 09:41 - 2014-05-05 09:41 - 00010205 _____ () C:\WINDOWS\KB981997.log 2014-05-05 09:41 - 2014-05-05 09:41 - 00010183 _____ () C:\WINDOWS\KB2603381.log 2014-05-05 09:41 - 2014-05-05 09:41 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2603381$ 2014-05-05 09:34 - 2014-05-05 09:34 - 00009394 _____ () C:\WINDOWS\KB923561.log 2014-05-05 09:20 - 2014-05-05 09:20 - 00003461 _____ () C:\WINDOWS\KB2691442.log 2014-05-05 09:20 - 2014-05-05 09:20 - 00003345 _____ () C:\WINDOWS\KB975025.log 2014-05-05 09:20 - 2014-05-05 09:19 - 00003255 _____ () C:\WINDOWS\KB951978.log 2014-05-05 09:19 - 2014-05-05 09:19 - 00003152 _____ () C:\WINDOWS\KB978338.log 2014-05-05 09:19 - 2014-05-05 09:19 - 00003053 _____ () C:\WINDOWS\KB2619339.log 2014-05-05 09:19 - 2014-05-05 09:19 - 00002954 _____ () C:\WINDOWS\KB959426.log 2014-05-05 09:19 - 2014-05-05 09:19 - 00002855 _____ () C:\WINDOWS\KB975713.log 2014-05-05 07:57 - 2014-05-05 07:57 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\MSN6 2014-05-05 07:57 - 2011-12-28 17:19 - 00000000 __RHD () C:\Documents and Settings\I\Dane aplikacji 2014-05-05 07:45 - 2013-08-22 22:06 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\Mjuzik 2014-05-05 02:18 - 2013-07-31 23:05 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\TS3Client 2014-05-05 00:26 - 2013-06-21 14:02 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\File Scout 2014-05-04 19:03 - 2013-04-05 21:56 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\Skype 2014-05-04 18:58 - 2013-04-05 21:56 - 00002267 _____ () C:\Documents and Settings\All Users\Pulpit\Skype.lnk 2014-05-04 18:24 - 2012-08-04 15:19 - 00001084 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-790525478-2139871995-725345543-1003Core.job 2014-05-04 14:24 - 2014-04-17 14:08 - 00001924 _____ () C:\Documents and Settings\I\Pulpit\muzykaa.txt 2014-04-19 05:36 - 2014-03-08 21:14 - 00000000 ____D () C:\Documents and Settings\I\Moje dokumenty\GTA San Andreas User Files 2014-04-19 00:55 - 2014-04-19 00:55 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-04-19 00:55 - 2014-04-19 00:55 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-04-19 00:55 - 2014-04-19 00:40 - 00252464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdis2.sys 2014-04-19 00:55 - 2014-04-19 00:40 - 00026136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2014-04-19 00:55 - 2013-04-13 18:21 - 00180632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-04-19 00:55 - 2013-04-13 18:21 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2014-04-19 00:55 - 2013-04-13 18:21 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-04-19 00:55 - 2012-05-19 16:00 - 00776976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2014-04-19 00:55 - 2012-05-19 16:00 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2014-04-19 00:55 - 2012-05-19 16:00 - 00271264 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-04-19 00:55 - 2012-05-19 16:00 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys 2014-04-19 00:55 - 2012-05-19 16:00 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys 2014-04-18 14:31 - 2013-08-13 21:38 - 00002317 _____ () C:\Documents and Settings\I\Pulpit\Google Chrome.lnk 2014-04-18 04:55 - 2014-04-18 04:55 - 00001498 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk 2014-04-18 04:55 - 2014-04-18 04:55 - 00001492 _____ () C:\Documents and Settings\All Users\Pulpit\Opera.lnk 2014-04-18 04:55 - 2014-04-18 04:55 - 00000000 ____D () C:\Program Files\Opera 2014-04-18 04:55 - 2014-04-18 04:55 - 00000000 ____D () C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji\Opera 2014-04-18 04:55 - 2014-04-18 04:55 - 00000000 ____D () C:\Documents and Settings\I\Dane aplikacji\Opera 2014-04-18 04:55 - 2011-12-28 17:19 - 00000000 ___HD () C:\Documents and Settings\I\Ustawienia lokalne\Dane aplikacji 2014-04-17 14:02 - 2014-04-17 14:02 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\Muzyki 2014-04-17 13:47 - 2014-02-16 00:01 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\Hubert 2014-04-17 13:47 - 2014-02-15 23:58 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\Grzegorz 2014-04-17 13:46 - 2014-02-15 23:59 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\I 2014-04-17 13:39 - 2013-08-17 19:04 - 00000153 _____ () C:\Documents and Settings\I\Pulpit\jakies info.txt 2014-04-15 23:05 - 2012-01-20 18:25 - 00000000 ____D () C:\Documents and Settings\I\Moje dokumenty\Pobieranie 2014-04-15 06:59 - 2014-03-08 20:43 - 00000000 ____D () C:\Documents and Settings\I\Pulpit\GTA SanAndreas Some content of TEMP: ==================== C:\Documents and Settings\I\Ustawienia lokalne\Temp\AcDeltree.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\APNStub.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\BrotherSoft_Extreme3.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\conduitinstaller.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\contentDATs.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\firefoxjre_exe.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\gg10.upgr.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\GUR1.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\GURC1.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\ipl1.tmp.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\ipl1E.tmp.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\ipl4E8.tmp.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\ipl55A.tmp.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\ipl55F.tmp.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\ipl583.tmp.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\ipl590.tmp.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\ipl595.tmp.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\jadj_jgw.dll C:\Documents and Settings\I\Ustawienia lokalne\Temp\lowproc.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\OptimizerPro.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\sanandreas-instalator.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\SecurityScan_Release.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\setup_wm.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\Shockwave_Installer_Slim.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\SkypeSetup.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\stubhelper.dll C:\Documents and Settings\I\Ustawienia lokalne\Temp\TB_3F5.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\TsuF0A0B111.dll C:\Documents and Settings\I\Ustawienia lokalne\Temp\_is2C5.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\_is76.exe C:\Documents and Settings\I\Ustawienia lokalne\Temp\{36280846-1178-4C11-A568-62CE66980BDE}-GoogleEarth-Win-Plugin-7.1.2.2041.exe ==================== Bamital & volsnap Check ================= C:\WINDOWS\explorer.exe [2001-10-26 19:29] - [2008-04-14 22:51] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a C:\WINDOWS\system32\winlogon.exe [2001-10-26 19:30] - [2008-04-14 22:51] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 C:\WINDOWS\system32\svchost.exe [2001-10-26 19:30] - [2008-04-14 22:51] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce C:\WINDOWS\system32\services.exe [2001-10-26 19:30] - [2008-04-14 22:51] - 0109056 ____A (Microsoft Corporation) 3e3ae424e27c4cefe4cab368c7b570ea C:\WINDOWS\system32\User32.dll [2001-10-26 19:29] - [2008-04-14 22:50] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 C:\WINDOWS\system32\userinit.exe [2001-10-26 19:30] - [2008-04-14 22:51] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 C:\WINDOWS\system32\rpcss.dll [2001-10-26 19:29] - [2008-04-14 22:50] - 0399360 ____A (Microsoft Corporation) 02396dab9dd407b06539981f477f3fec ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected. C:\WINDOWS\system32\Drivers\volsnap.sys [2001-10-26 18:57] - [2008-04-14 21:31] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 ==================== End Of Log ============================