Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014 Ran by admin (administrator) on JAREK on 16-09-2014 16:37:10 Running from C:\rosita\Downloads Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2015\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe ( ) C:\WINDOWS\system32\lmabcoms.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (SafeNet, Inc.) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe (SafeNet, Inc) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (SafeNet, Inc.) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) C:\WINDOWS\system32\hkcmd.exe (ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe (Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe (NOVUS SECURITY) C:\Program Files\DVR System\Web\DirectWeb.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [ASUS Ai Charger] => C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984 2012-08-13] (ASUSTek Computer Inc.) HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20117648 2012-10-30] (Realtek Semiconductor Corp.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-07-30] (Oracle Corporation) HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3593744 2014-09-05] (AVG Technologies CZ, s.r.o.) HKLM\...99B7938DA9E4}\LocalServer32: [Default-wmiprvse] <==== ATTENTION! HKU\S-1-5-21-3867638132-671925601-1608792838-1006\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation) HKU\S-1-5-21-3867638132-671925601-1608792838-1006\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Direct Web.lnk ShortcutTarget: Direct Web.lnk -> C:\Program Files\DVR System\Web\DirectWeb.exe (NOVUS SECURITY) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.) BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2015\avgrsx.exe /sync /restart ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mbank.pl/logout.html?lang=P HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {E75C08D0-7828-4547-B904-921F5D4D4889} URL = http://uk.search.yahoo.com/search?p={searchTerms}&fr=FP-tab-web-t340&ei=UTF-8&meta=vc%3D BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: No Name -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> No File BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1 Tcpip\..\Interfaces\{20C8E35A-9881-4CA9-AE13-47FB9B6BD8FF}: [NameServer] 194.204.159.1,194.204.152.34 Tcpip\..\Interfaces\{6D16F032-9851-448E-A79B-1C7A873B3263}: [NameServer] 194.204.152.34,194.204.159.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin: PDF Architect 2 -> C:\Program Files\PDF Architect 2\np-previewer.dll (pdfforge GmbH) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-07-17] Chrome: ======= CHR HomePage: Default -> https://www.google.pl/ CHR StartupUrls: Default -> "about:blank" CHR DefaultSearchKeyword: Default -> 1B5EB7B53D671316CEB175E32E1C19D9337A3718B7522DF6EC9D4DE6B4A705F1 CHR DefaultSearchURL: Default -> 2AAA6B7C79B08325E8257245B3C7561D1D46654EB6519CD84BB2F5FA6F3F8DD9 CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\37.0.2062.120\gcswf32.dll No File CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll No File CHR Plugin: (Java(TM) Platform SE 6 U13) - C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll (Sun Microsystems, Inc.) CHR Plugin: (Java(TM) Platform SE 6 U15) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.)) CHR Plugin: (Chrome NaCl) - C:\Program Files\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.120\pdf.dll () CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll No File CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Default Plug-in) - default_plugin No File CHR CustomProfile: C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default CHR Extension: (Google Wallet) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-27] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3364368 2014-09-05] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [293448 2014-09-05] (AVG Technologies CZ, s.r.o.) S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2009-07-17] (Macrovision Europe Ltd.) [File not signed] S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [458464 2012-02-02] (Intel(R) Corporation) S2 iSafeService; C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [118048 2014-08-08] (Elex do Brasil Participações Ltda) R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-07-25] (Oracle Corporation) R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation) R2 lmab_device; C:\WINDOWS\system32\LMabcoms.exe [590504 2008-04-01] ( ) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.) S3 PDF Architect 2; C:\Program Files\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH) S3 pdfforge CrashHandler; C:\Program Files\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH) R2 SentinelKeysServer; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [369952 2009-09-17] (SafeNet, Inc.) R2 SentinelProtectionServer; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1246496 2009-09-17] (SafeNet, Inc) R2 SentinelSecurityRuntime; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [292128 2009-09-17] (SafeNet, Inc.) R2 tor; C:\Program Files\Tor\tor.exe [3233806 2013-08-31] () [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AiCharger; C:\WINDOWS\System32\drivers\AiCharger.sys [13952 2012-03-22] (ASUSTek Computer Inc.) S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative) R1 Avgdiskx; C:\WINDOWS\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriverl; C:\WINDOWS\System32\DRIVERS\avgidsdriverlx.sys [192280 2014-07-24] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [147736 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [193304 2014-08-20] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [98584 2014-08-06] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [199448 2014-07-02] (AVG Technologies CZ, s.r.o.) R2 DivisCTP; C:\WINDOWS\System32\Drivers\Divis7146.sys [54528 2002-12-14] (Philips Semiconductors GmbH) R2 DivisCTS; C:\WINDOWS\System32\Drivers\SAA7146.SYS [76576 2002-12-14] (Philips Semiconductors) [File not signed] S3 DM9USB; C:\WINDOWS\System32\DRIVERS\dm9usb.sys [26674 2002-03-20] (DAVICOM Semiconductor, Inc. ) S3 gdrv; C:\WINDOWS\gdrv.sys [16608 2008-10-22] (Windows (R) 2000 DDK provider) R1 iSafeKrnl; C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys [214592 2014-08-08] (Elex do Brasil Participações Ltda) S3 iSafeKrnlBoot; C:\WINDOWS\System32\DRIVERS\iSafeKrnlBoot.sys [40768 2014-08-08] (Elex do Brasil Participações Ltda) R1 iSafeKrnlKit; C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys [68288 2014-08-08] (Elex do Brasil Participações Ltda) R1 iSafeKrnlR3; C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys [37696 2014-08-08] (Elex do Brasil Participações Ltda) R1 iSafeNetFilter; C:\Program Files\Elex-tech\YAC\iSafeNetFilter.sys [55464 2014-08-06] (Elex do Brasil Participações Ltda) R3 MEI; C:\WINDOWS\System32\DRIVERS\HECI.sys [46080 2011-11-10] (Intel Corporation) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.) R2 Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [76288 2002-12-17] (Rainbow Technologies, Inc.) [File not signed] S3 Sntnlusb; C:\WINDOWS\System32\DRIVERS\SNTNLUSB.SYS [26120 2002-12-17] (Rainbow Technologies Inc.) S3 SONYPVU1; C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation) S3 catchme; \??\C:\DOCUME~1\admin\USTAWI~1\Temp\catchme.sys [X] S4 IntelIde; No ImagePath U3 TlntSvr; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-16 16:36 - 2014-09-16 16:37 - 00000000 ____D () C:\FRST 2014-09-15 14:27 - 2014-09-15 14:27 - 00023796 _____ () C:\Documents and Settings\admin\Pulpit\gmer.txt 2014-09-15 14:26 - 2014-09-15 14:26 - 00023796 _____ () C:\Documents and Settings\admin\Pulpit\gmer xx.lxg 2014-09-15 12:05 - 2014-09-15 12:05 - 00056902 _____ () C:\Documents and Settings\admin\Pulpit\Extras.Txt 2014-09-15 12:04 - 2014-09-15 12:04 - 02540428 _____ () C:\Documents and Settings\admin\Pulpit\OTL.Txt1.txt 2014-09-10 17:27 - 2014-09-10 17:27 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\AVG2015 2014-09-10 17:26 - 2014-09-10 17:26 - 00000732 _____ () C:\Documents and Settings\All Users\Pulpit\AVG 2015.lnk 2014-09-10 17:26 - 2014-09-10 17:26 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG 2014-09-10 17:26 - 2014-09-10 17:26 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\TuneUp Software 2014-09-10 17:25 - 2014-09-11 07:41 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVG2015 2014-09-10 17:25 - 2014-09-10 17:26 - 00007834 _____ () C:\WINDOWS\setupapi.log 2014-09-10 17:25 - 2014-09-10 17:25 - 00000000 ___HD () C:\$AVG 2014-09-10 17:23 - 2014-09-10 17:23 - 00000000 ____D () C:\Program Files\AVG 2014-09-10 17:19 - 2014-09-16 08:14 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\MFAData 2014-09-10 17:19 - 2014-09-10 17:34 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Avg2015 2014-09-10 17:19 - 2014-09-10 17:19 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\MFAData 2014-09-10 10:08 - 2014-09-16 16:37 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\temp 2014-09-10 10:08 - 2014-09-10 10:08 - 00013121 _____ () C:\Documents and Settings\admin\Pulpit\ComboFix.txt 2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\user\Ustawienia lokalne\temp 2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp 2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\temp 2014-09-10 08:21 - 2014-09-08 14:26 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140910-082151.backup 2014-09-10 08:09 - 2014-09-10 08:09 - 00000700 _____ () C:\Documents and Settings\All Users\Pulpit\PDF Architect 2.lnk 2014-09-10 08:09 - 2014-09-10 08:09 - 00000000 ____D () C:\Program Files\PDF Architect 2 2014-09-10 08:09 - 2014-09-10 08:09 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDF Architect 2 2014-09-10 08:07 - 2014-09-10 08:07 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PDF Architect 2 2014-09-10 08:06 - 2014-09-10 08:10 - 00000000 ____D () C:\Program Files\PDFCreator 2014-09-10 08:06 - 2014-09-10 08:06 - 00000706 _____ () C:\Documents and Settings\All Users\Pulpit\PDFCreator.lnk 2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator 2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\VOPackage 2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\pdfforge 2014-09-10 08:06 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSCOMCT2.OCX 2014-09-10 08:06 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMAPI32.OCX 2014-09-10 08:06 - 2014-04-25 17:44 - 00095416 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll 2014-09-10 08:06 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPIDE.DLL 2014-09-10 08:03 - 2014-09-10 08:05 - 00000000 ____D () C:\appstoredl 2014-09-10 08:03 - 2014-09-10 08:03 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\isafeYAC App Store 2014-09-09 17:12 - 2014-09-09 17:12 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\computer software market 2014-09-09 16:38 - 2014-09-09 16:38 - 00001555 _____ () C:\Documents and Settings\All Users\Pulpit\YAC.lnk 2014-09-09 16:38 - 2014-09-09 16:38 - 00001555 _____ () C:\Documents and Settings\All Users\Menu Start\YAC.lnk 2014-09-09 16:38 - 2014-09-09 16:38 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\YAC 2014-09-09 16:38 - 2014-08-08 08:24 - 00040768 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeKrnlBoot.sys 2014-09-09 16:37 - 2014-09-10 07:33 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\iSafe 2014-09-09 16:37 - 2014-09-09 16:37 - 00000000 ____D () C:\Program Files\Elex-tech 2014-09-09 16:36 - 2014-09-09 16:38 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\eCyber 2014-09-09 07:27 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\system32\sqlite3.dll 2014-09-08 14:26 - 2014-09-08 14:12 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-142636.backup 2014-09-08 14:12 - 2014-09-08 13:53 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-141234.backup 2014-09-08 13:53 - 2014-09-08 13:52 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-135327.backup 2014-09-08 13:52 - 2014-09-08 13:15 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-135258.backup 2014-09-08 13:15 - 2014-09-08 08:00 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-131513.backup 2014-09-08 12:08 - 2014-09-09 17:09 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware 2014-09-08 12:08 - 2014-09-08 12:08 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-09-08 12:07 - 2014-09-08 12:07 - 00000000 ____D () C:\Program Files\AmiBroker 2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Program Files\Dropbox 2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\Dropbox 2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\DropboxMaster 2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Program Files\Common Files\BiesseGroup 2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\McAfee Security Scan Plus 2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Intermac 2014-09-08 12:04 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan 2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Program Files\Kolorowanka Świąteczna 2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Kolorowanka Świąteczna 2014-09-08 12:03 - 2014-09-08 12:03 - 00000000 ____D () C:\Documents and Settings\admin\Pulpit\Jurata 2014-09-08 11:21 - 2014-09-08 11:21 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\DYNALOG 2014-09-08 10:06 - 2014-09-09 16:35 - 00003994 _____ () C:\Documents and Settings\admin\Pulpit\Rkill.txt 2014-09-08 08:00 - 2014-09-08 07:50 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-080016.backup 2014-09-08 07:50 - 2014-09-05 15:45 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-075053.backup 2014-09-05 15:45 - 2014-09-04 16:06 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140905-154531.backup 2014-09-05 08:14 - 2014-09-09 07:28 - 00000000 ____D () C:\AdwCleaner 2014-09-04 16:06 - 2014-09-02 07:40 - 00449915 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.20140904-160622.backup 2014-09-02 09:24 - 2014-09-08 12:05 - 00000000 ____D () C:\Program Files\Adobe Download Assistant 2014-09-02 09:24 - 2014-09-02 09:24 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR 2014-09-02 09:24 - 2014-09-02 09:24 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\com.adobe.downloadassistant.AdobeDownloadAssistant 2014-09-02 08:26 - 2014-09-02 08:26 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-09-02 07:40 - 2014-09-01 07:48 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140902-074023.backup 2014-09-01 07:48 - 2014-08-29 16:30 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140901-074856.backup 2014-08-29 16:30 - 2014-08-29 07:43 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-163012.backup 2014-08-29 07:43 - 2014-08-29 07:09 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-074330.backup 2014-08-29 07:09 - 2014-08-12 07:14 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-070900.backup 2014-08-26 07:46 - 2014-09-08 11:26 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-08-26 07:45 - 2014-08-26 07:45 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Oracle 2014-08-20 21:49 - 2014-08-20 21:49 - 00193304 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgldx86.sys 2014-08-18 07:10 - 2014-09-09 07:34 - 05576885 ____R (Swearware) C:\ComboFix.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-16 16:37 - 2014-09-16 16:36 - 00000000 ____D () C:\FRST 2014-09-16 16:37 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\temp 2014-09-16 16:36 - 2013-07-30 13:15 - 00000460 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{07359834-EE20-4772-A75D-94330AD0A25A}.job 2014-09-16 16:21 - 2013-08-31 14:45 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji\tor 2014-09-16 15:53 - 2014-01-30 16:17 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-09-16 15:44 - 2012-08-09 07:34 - 00001034 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-16 08:14 - 2014-09-10 17:19 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\MFAData 2014-09-16 07:50 - 2008-10-22 19:59 - 01865400 _____ () C:\WINDOWS\WindowsUpdate.log 2014-09-16 07:37 - 2014-03-17 08:49 - 00000222 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2014-09-16 07:37 - 2012-08-09 07:34 - 00001030 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-16 07:37 - 2008-10-22 21:55 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2014-09-16 07:37 - 2008-10-22 21:55 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2014-09-16 07:36 - 2008-10-22 20:07 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-09-15 18:53 - 2008-11-24 23:57 - 00000188 ___SH () C:\Documents and Settings\admin\ntuser.ini 2014-09-15 18:53 - 2008-10-22 20:07 - 00032424 _____ () C:\WINDOWS\SchedLgU.Txt 2014-09-15 14:28 - 2008-11-24 23:57 - 00000000 ____D () C:\Documents and Settings\admin\Pulpit 2014-09-15 14:27 - 2014-09-15 14:27 - 00023796 _____ () C:\Documents and Settings\admin\Pulpit\gmer.txt 2014-09-15 14:26 - 2014-09-15 14:26 - 00023796 _____ () C:\Documents and Settings\admin\Pulpit\gmer xx.lxg 2014-09-15 12:05 - 2014-09-15 12:05 - 00056902 _____ () C:\Documents and Settings\admin\Pulpit\Extras.Txt 2014-09-15 12:04 - 2014-09-15 12:04 - 02540428 _____ () C:\Documents and Settings\admin\Pulpit\OTL.Txt1.txt 2014-09-15 07:40 - 2008-04-15 14:00 - 00012598 _____ () C:\WINDOWS\system32\wpa.dbl 2014-09-12 08:27 - 2014-01-21 17:20 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-09-11 09:13 - 2008-10-22 20:02 - 00000000 __SHD () C:\Documents and Settings\NetworkService 2014-09-11 07:41 - 2014-09-10 17:25 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVG2015 2014-09-10 17:34 - 2014-09-10 17:19 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Avg2015 2014-09-10 17:27 - 2014-09-10 17:27 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\AVG2015 2014-09-10 17:27 - 2008-11-24 23:57 - 00000000 __RHD () C:\Documents and Settings\admin\Dane aplikacji 2014-09-10 17:26 - 2014-09-10 17:26 - 00000732 _____ () C:\Documents and Settings\All Users\Pulpit\AVG 2015.lnk 2014-09-10 17:26 - 2014-09-10 17:26 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG 2014-09-10 17:26 - 2014-09-10 17:26 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\TuneUp Software 2014-09-10 17:26 - 2014-09-10 17:25 - 00007834 _____ () C:\WINDOWS\setupapi.log 2014-09-10 17:26 - 2008-10-22 21:53 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2014-09-10 17:26 - 2008-10-22 21:53 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit 2014-09-10 17:25 - 2014-09-10 17:25 - 00000000 ___HD () C:\$AVG 2014-09-10 17:25 - 2008-10-22 21:51 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji 2014-09-10 17:23 - 2014-09-10 17:23 - 00000000 ____D () C:\Program Files\AVG 2014-09-10 17:19 - 2014-09-10 17:19 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\MFAData 2014-09-10 17:19 - 2008-11-24 23:57 - 00000000 ___HD () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji 2014-09-10 17:16 - 2008-10-22 21:53 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start 2014-09-10 15:53 - 2014-01-30 16:17 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2014-09-10 15:53 - 2012-08-09 07:34 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2014-09-10 10:08 - 2014-09-10 10:08 - 00013121 _____ () C:\Documents and Settings\admin\Pulpit\ComboFix.txt 2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\user\Ustawienia lokalne\temp 2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp 2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\temp 2014-09-10 10:08 - 2014-01-30 09:49 - 00000000 ____D () C:\Qoobox 2014-09-10 10:08 - 2008-11-24 23:57 - 00000000 ___HD () C:\Documents and Settings\admin\Ustawienia lokalne 2014-09-10 10:08 - 2008-10-22 20:11 - 00000000 ___HD () C:\Documents and Settings\user\Ustawienia lokalne 2014-09-10 10:08 - 2008-10-22 20:07 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne 2014-09-10 10:08 - 2008-10-22 20:02 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne 2014-09-10 10:06 - 2008-04-15 14:00 - 00000227 _____ () C:\WINDOWS\system.ini 2014-09-10 08:10 - 2014-09-10 08:06 - 00000000 ____D () C:\Program Files\PDFCreator 2014-09-10 08:09 - 2014-09-10 08:09 - 00000700 _____ () C:\Documents and Settings\All Users\Pulpit\PDF Architect 2.lnk 2014-09-10 08:09 - 2014-09-10 08:09 - 00000000 ____D () C:\Program Files\PDF Architect 2 2014-09-10 08:09 - 2014-09-10 08:09 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDF Architect 2 2014-09-10 08:09 - 2008-11-24 18:21 - 00000000 ___RD () C:\rosita 2014-09-10 08:07 - 2014-09-10 08:07 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PDF Architect 2 2014-09-10 08:06 - 2014-09-10 08:06 - 00000706 _____ () C:\Documents and Settings\All Users\Pulpit\PDFCreator.lnk 2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator 2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\VOPackage 2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\pdfforge 2014-09-10 08:06 - 2008-11-24 23:57 - 00000000 ___RD () C:\Documents and Settings\admin\Menu Start\Programy 2014-09-10 08:05 - 2014-09-10 08:03 - 00000000 ____D () C:\appstoredl 2014-09-10 08:03 - 2014-09-10 08:03 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\isafeYAC App Store 2014-09-10 08:01 - 2012-08-09 07:35 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2014-09-10 07:35 - 2014-06-17 08:42 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\IP Camera Super Client(PnP) 2014-09-10 07:33 - 2014-09-09 16:37 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\iSafe 2014-09-10 07:31 - 2008-10-22 21:51 - 00322728 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-09-10 07:25 - 2008-11-24 18:12 - 00000000 ____D () C:\Program Files\DVR System 2014-09-09 17:12 - 2014-09-09 17:12 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\computer software market 2014-09-09 17:09 - 2014-09-08 12:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware 2014-09-09 17:09 - 2013-05-15 11:36 - 00000000 ____D () C:\WINDOWS\Minidump 2014-09-09 16:38 - 2014-09-09 16:38 - 00001555 _____ () C:\Documents and Settings\All Users\Pulpit\YAC.lnk 2014-09-09 16:38 - 2014-09-09 16:38 - 00001555 _____ () C:\Documents and Settings\All Users\Menu Start\YAC.lnk 2014-09-09 16:38 - 2014-09-09 16:38 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\YAC 2014-09-09 16:38 - 2014-09-09 16:36 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\eCyber 2014-09-09 16:38 - 2008-11-24 23:58 - 00062832 _____ () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2014-09-09 16:37 - 2014-09-09 16:37 - 00000000 ____D () C:\Program Files\Elex-tech 2014-09-09 16:35 - 2014-09-08 10:06 - 00003994 _____ () C:\Documents and Settings\admin\Pulpit\Rkill.txt 2014-09-09 07:34 - 2014-08-18 07:10 - 05576885 ____R (Swearware) C:\ComboFix.exe 2014-09-09 07:28 - 2014-09-05 08:14 - 00000000 ____D () C:\AdwCleaner 2014-09-08 15:00 - 2014-03-17 08:49 - 00000216 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job 2014-09-08 14:26 - 2014-09-10 08:21 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140910-082151.backup 2014-09-08 14:12 - 2014-09-08 14:26 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-142636.backup 2014-09-08 13:53 - 2014-09-08 14:12 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-141234.backup 2014-09-08 13:52 - 2014-09-08 13:53 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-135327.backup 2014-09-08 13:15 - 2014-09-08 13:52 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-135258.backup 2014-09-08 12:11 - 2012-08-04 11:56 - 00000000 ___SD () C:\Documents and Settings\Administrator 2014-09-08 12:11 - 2008-11-24 23:57 - 00000000 ____D () C:\Documents and Settings\admin 2014-09-08 12:11 - 2008-10-22 20:07 - 00000000 __SHD () C:\Documents and Settings\LocalService 2014-09-08 12:10 - 2008-10-22 19:57 - 00000000 ____D () C:\WINDOWS\Registration 2014-09-08 12:08 - 2014-09-08 12:08 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-09-08 12:07 - 2014-09-08 12:07 - 00000000 ____D () C:\Program Files\AmiBroker 2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Program Files\Dropbox 2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\Dropbox 2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\DropboxMaster 2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Program Files\Common Files\BiesseGroup 2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\McAfee Security Scan Plus 2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Intermac 2014-09-08 12:05 - 2014-09-08 12:04 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan 2014-09-08 12:05 - 2014-09-02 09:24 - 00000000 ____D () C:\Program Files\Adobe Download Assistant 2014-09-08 12:05 - 2014-07-21 08:19 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\Dropbox 2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Program Files\Kolorowanka Świąteczna 2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Kolorowanka Świąteczna 2014-09-08 12:03 - 2014-09-08 12:03 - 00000000 ____D () C:\Documents and Settings\admin\Pulpit\Jurata 2014-09-08 11:26 - 2014-08-26 07:46 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-09-08 11:26 - 2014-01-30 12:46 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software 2014-09-08 11:22 - 2010-09-29 08:25 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight 2014-09-08 11:21 - 2014-09-08 11:21 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\DYNALOG 2014-09-08 11:10 - 2014-07-18 11:22 - 00000000 ____D () C:\Program Files\DYNALOG 2014-09-08 11:05 - 2010-09-29 08:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-09-08 08:00 - 2014-09-08 13:15 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-131513.backup 2014-09-08 07:50 - 2014-09-08 08:00 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-080016.backup 2014-09-08 07:48 - 2009-11-23 09:58 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Adobe 2014-09-05 15:45 - 2014-09-08 07:50 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-075053.backup 2014-09-05 08:23 - 2012-08-18 13:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-09-04 16:06 - 2014-09-05 15:45 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140905-154531.backup 2014-09-02 09:28 - 2008-10-22 21:53 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Autostart 2014-09-02 09:24 - 2014-09-02 09:24 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR 2014-09-02 09:24 - 2014-09-02 09:24 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\com.adobe.downloadassistant.AdobeDownloadAssistant 2014-09-02 09:24 - 2008-11-24 18:14 - 00000000 ____D () C:\Program Files\Adobe 2014-09-02 08:50 - 2008-10-22 20:11 - 00001593 _____ () C:\Documents and Settings\user\Menu Start\Programy\Pomoc zdalna.lnk 2014-09-02 08:50 - 2008-10-22 20:00 - 00001607 _____ () C:\Documents and Settings\All Users\Menu Start\Określ dostęp do programów i ich ustawienia domyślne.lnk 2014-09-02 08:50 - 2008-10-22 20:00 - 00001593 _____ () C:\Documents and Settings\Default User\Menu Start\Programy\Pomoc zdalna.lnk 2014-09-02 08:50 - 2008-10-22 20:00 - 00001507 _____ () C:\Documents and Settings\All Users\Menu Start\Windows Update.lnk 2014-09-02 08:26 - 2014-09-02 08:26 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-09-02 07:40 - 2014-09-04 16:06 - 00449915 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.20140904-160622.backup 2014-09-01 07:48 - 2014-09-02 07:40 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140902-074023.backup 2014-08-29 16:30 - 2014-09-01 07:48 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140901-074856.backup 2014-08-29 13:01 - 2008-11-26 08:58 - 98758480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-08-29 08:24 - 2008-10-22 20:11 - 00000000 __RHD () C:\Documents and Settings\user\Dane aplikacji 2014-08-29 07:43 - 2014-08-29 16:30 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-163012.backup 2014-08-29 07:09 - 2014-08-29 07:43 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-074330.backup 2014-08-26 07:45 - 2014-08-26 07:45 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Oracle 2014-08-26 07:45 - 2014-08-11 07:23 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2014-08-26 07:45 - 2009-04-16 13:07 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2014-08-26 07:44 - 2009-04-16 13:06 - 00000000 ____D () C:\Program Files\Java 2014-08-20 21:49 - 2014-08-20 21:49 - 00193304 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgldx86.sys ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================