Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-07-2013 04
Ran by Kopacze (administrator) on 31-07-2013 15:19:25
Running from C:\Users\Kopacze\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Andrea Electronics Corporation) C:\Windows\system32\AERTSrv.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Windows\vsnpstd3.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Microsoft Corporation) C:\Windows\System32\wpcumi.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Valve Corporation) C:\Program Files\Steam\steam.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ECenter] - C:\Dell\E-Center\EULALauncher.exe [17920 2008-02-29] ( )
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4907008 2008-01-17] (Realtek Semiconductor)
HKLM\...\Run: [snpstd3] - C:\Windows\vsnpstd3.exe [827392 2006-09-19] ()
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [1447168 2008-08-18] (ESET)
HKLM\...\Run: [NPSStartup] -  [x]
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM\...\Run: [Zune Launcher] - C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [WPCUMI] - C:\Windows\system32\WpcUmi.exe [176128 2006-11-02] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files\Steam\steam.exe [1807272 2013-07-27] (Valve Corporation)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\PLAY ONLINE\PLAY ONLINE.exe [514048 2012-10-16] ()
HKCR\...409d6c4515e9\InprocServer32: [Default-shell32]  ATTENTION! ====> ZeroAccess?
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: F - F:\AutoRun.exe
MountPoints2: {0c1e7afa-6e12-11e1-89f7-001e101f82a0} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Start.hta
MountPoints2: {373ab8b3-16e0-11e2-8ebb-001d099ddaf7} - F:\AutoRun.exe
MountPoints2: {373ab8c3-16e0-11e2-8ebb-001d099ddaf7} - F:\AutoRun.exe
MountPoints2: {373ab8d9-16e0-11e2-8ebb-001d099ddaf7} - F:\AutoRun.exe
MountPoints2: {393512f1-24f9-11e2-b0e9-001d099ddaf7} - F:\AutoRun.exe
MountPoints2: {5c4ef4fe-98a5-11e2-9731-001d099ddaf7} - F:\AutoRun.exe
MountPoints2: {5c4ef51e-98a5-11e2-9731-001d099ddaf7} - F:\AutoRun.exe
MountPoints2: {5d6f6fa5-41c5-11e1-a0a7-001e101f9743} - G:\AutoRun.exe
MountPoints2: {68fa5335-406a-11e1-bd16-001d099ddaf7} - G:\AutoRun.exe
MountPoints2: {68fa5343-406a-11e1-bd16-001e101f63cf} - F:\AutoRun.exe
MountPoints2: {68fa5464-406a-11e1-bd16-001e101f63cf} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL I:\Start.hta
MountPoints2: {7af2e07e-28be-11e1-b943-001d099ddaf7} - G:\NokiaPCIA_Autorun.exe
MountPoints2: {8b074017-5e72-11e1-b9a6-001e101f2500} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL I:\Start.hta
MountPoints2: {91898bcc-6d43-11e1-b3b2-001e101f57d0} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL J:\Start.hta
MountPoints2: {93cd1ed7-6843-11e1-a677-001e101f19a3} - F:\AutoRun.exe
MountPoints2: {9b87d383-082a-11de-a997-001d099ddaf7} - H:\USBNB.exe
MountPoints2: {b08df16e-e0b3-11e2-924f-001d099ddaf7} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\Start.hta
MountPoints2: {baaa4ad5-1e05-11e2-8c86-001d099ddaf7} - F:\AutoRun.exe
MountPoints2: {fe53c7f6-8c7d-11e2-b624-001d099ddaf7} - I:\autoplay.exe
HKU\Default\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\Sidebar.exe [ 2009-04-11] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\Sidebar.exe [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Ewa\...\Policies\system: [LogonHoursAction] 2
HKU\Ewa\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=SAMSUNG_HD501LJ_S0ZFJ1KQ502261502261X&ts=1352198129
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.09010003&st=12&barid={FE2E5087-63F9-4DA9-93CD-D2D9437C8F67}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=SAMSUNG_HD501LJ_S0ZFJ1KQ502261502261X&ts=1352198129
SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={FE2E5087-63F9-4DA9-93CD-D2D9437C8F67}
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={FE2E5087-63F9-4DA9-93CD-D2D9437C8F67}
SearchScopes: HKLM - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120121105302072&tb_oid=21-01-2012&tb_mrud=21-01-2012
SearchScopes: HKCU - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={FE2E5087-63F9-4DA9-93CD-D2D9437C8F67}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.v9.com/web/?q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://isearch.babylon.com/?q={searchTerms}&affID=117380&tt=201112_1849_4712_8&babsrc=SP_ss&mntrId=2cf08eee000000000000582c80139263
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.v9.com/web/?q={searchTerms}
SearchScopes: HKCU - {380F19BF-BC9C-7AE2-58D1-54D845E090F3} URL = http://www.bing.com/search?q={searchTerms}&pc=Z188&form=ZGAIDF&install_date=20120110&iesrc={referrer:source}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={FE2E5087-63F9-4DA9-93CD-D2D9437C8F67}
SearchScopes: HKCU - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120121105302072&tb_oid=21-01-2012&tb_mrud=21-01-2012
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} -  No File
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Help the General-Search Project - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Users\Kopacze\AppData\Roaming\MEDIAF~1\EXTENS~1\GENCRA~1.DLL ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKCU -No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU -No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.3.0.cab
Handler: msdaipp - No CLSID Value - 
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 02 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 03 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 04 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 05 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 06 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 07 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 08 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 19 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default
FF user.js: detected! => C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\user.js
FF NewTab: hxxp://home.sweetim.com/?src=97&barid={FE2E5087-63F9-4DA9-93CD-D2D9437C8F67}
FF SelectedSearchEngine: Search the web (Babylon)
FF Homepage: hxxp://google.pl
FF Keyword.URL: hxxp://search.sweetim.com/search.asp?barid={FE2E5087-63F9-4DA9-93CD-D2D9437C8F67}&src=2&crg=3.09010003&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.448 - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\searchplugins\bing-zugo.xml
FF SearchPlugin: C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\searchplugins\mngr.xml
FF SearchPlugin: C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\v9.xml
FF Extension: No Name - C:\Users\Kopacze\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Winamp Toolbar - C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\Extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
FF Extension: No Name - C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
FF Extension: No Name - C:\Users\Kopacze\AppData\Roaming\Mozilla\Firefox\Profiles\2t8o4h6u.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome: 
=======
CHR HomePage: hxxp://www.delta-search.com/?affID=120008&babsrc=HP_ss&mntrId=2CF0582C80139263
CHR RestoreOnStartup: "hxxp://google.pl/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Skype Toolbars) - C:\Users\Kopacze\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (https://www.google.pl/) - C:\Users\Kopacze\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohlofpnkdicpncoooncmapjnhajmmmip\2012.5.23.52890_0
CHR HKLM\...\Chrome\Extension: [dednnpigldgdbpgcdpfppmlcnnbjciel] - C:\Users\Kopacze\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.crx
CHR HKLM\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Kopacze\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
CHR HKLM\...\Chrome\Extension: [kiplfnciaokpcennlkldkdaeaaomamof] - C:\Users\Kopacze\AppData\Local\Torch\Plugins\TorchPlugin.crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM\...\Chrome\Extension: [lpmkgpnbiojfaoklbkpfneikocaobfai] - C:\Users\Kopacze\AppData\Roaming\Media Finder\Extensions\mf_plugin_gc.crx
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Kopacze\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx
CHR HKLM\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\Browser Manager\2.5.911.18\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\mngr.crx

========================== Services (Whitelisted) =================

R2 AERTFilters; C:\Windows\system32\AERTSrv.exe [77824 2007-12-05] (Andrea Electronics Corporation)
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [19200 2008-08-18] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [468224 2008-08-18] (ESET)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
S2 NOD32FiXTemDono; C:\Windows\nod32fixtemdono.reg [568 2008-03-03] ()
S2 PLAY ONLINE. RunOuc; C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe [246112 2012-10-16] ()

==================== Drivers (Whitelisted) ====================

R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdLH3.sys [83984 2012-02-23] (Advanced Micro Devices)
R2 eamon; C:\Windows\System32\DRIVERS\eamon.sys [39944 2008-08-18] (ESET)
R1 easdrv; C:\Windows\System32\DRIVERS\easdrv.sys [53256 2008-08-18] (ESET)
R1 epfwtdir; C:\Windows\System32\DRIVERS\epfwtdir.sys [34312 2008-08-18] ()
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [89856 2012-10-16] (Huawei Technologies Co., Ltd.)
S3 huawei_cdcecm; C:\Windows\System32\DRIVERS\ew_jucdcecm.sys [66688 2012-10-16] (Huawei Technologies Co., Ltd.)
S3 huawei_ext_ctrl; C:\Windows\System32\DRIVERS\ew_juextctrl.sys [26624 2012-10-16] (Huawei Technologies Co., Ltd.)
S3 MagicTune; C:\Windows\System32\drivers\MTiCtwl.sys [13312 2006-08-28] ()
S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [848224 2010-05-06] (Ralink Technology Corp.)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
S3 R300; C:\Windows\System32\DRIVERS\atikmdag.sys [8758784 2012-07-28] (Advanced Micro Devices, Inc.)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10252544 2007-03-28] (Sonix Co. Ltd.)
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 nmwcd; system32\drivers\ccdcmb.sys [x]
S3 nmwcdc; system32\drivers\ccdcmbo.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
S3 upperdev; system32\DRIVERS\usbser_lowerflt.sys [x]
S3 UsbserFilt; system32\DRIVERS\usbser_lowerfltj.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-31 15:19 - 2013-07-31 15:19 - 00000000 ____D C:\FRST
2013-07-31 15:18 - 2013-07-27 23:21 - 01221426 _____ (Farbar) C:\Users\Kopacze\Desktop\FRST.exe
2013-07-31 15:17 - 2013-07-27 23:23 - 00377856 _____ C:\Users\Kopacze\Desktop\4i2w6hz1.exe
2013-07-31 15:14 - 2013-07-31 15:18 - 00000283 _____ C:\Users\Kopacze\Desktop\FSS.txt
2013-07-31 15:12 - 2013-07-31 15:12 - 00000000 ____D C:\Users\Kopacze\Documents\Raporty
2013-07-31 15:12 - 2013-07-27 23:22 - 00357145 _____ (Farbar) C:\Users\Kopacze\Desktop\FSS.exe
2013-07-31 14:23 - 2013-07-31 14:23 - 00000215 _____ C:\Users\Kopacze\Desktop\Dead Island.url
2013-07-31 14:01 - 2013-07-31 14:01 - 00000564 _____ C:\Windows\wmsetup.log
2013-07-29 14:00 - 2013-07-29 14:00 - 00093576 _____ C:\Users\Kopacze\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-29 11:23 - 2013-07-29 11:24 - 00376872 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-28 00:24 - 2013-07-28 00:25 - 124952555 _____ C:\Users\Kopacze\Documents\DC Universe Online - Full Opening Game Cinematic.mp4
2013-07-27 15:09 - 2013-07-26 16:11 - 00602112 _____ (OldTimer Tools) C:\Users\Kopacze\Desktop\OTL.exe
2013-07-21 16:28 - 2013-07-31 15:13 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-21 16:28 - 2013-07-21 17:13 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-07-20 22:55 - 2013-07-20 22:58 - 00000000 ____D C:\Windows\system32\MRT
2013-07-18 22:30 - 2013-07-18 22:30 - 00001901 _____ C:\Users\Public\Desktop\Victoria 2.lnk
2013-07-18 21:21 - 2013-07-18 22:19 - 00000000 ____D C:\Users\Kopacze\Downloads\Victoria.II-SKIDROW
2013-07-18 16:45 - 2013-07-18 17:46 - 00000000 ____D C:\Users\Kopacze\Downloads\Head In The Clouds [2004] 720p BRRip.x264.DXVA-ZoNe
2013-07-16 23:10 - 2013-07-16 23:10 - 00000000 ____D C:\Users\Kopacze\Documents\Paradox Interactive
2013-07-16 23:09 - 2013-07-16 23:09 - 00001940 _____ C:\Users\Public\Desktop\Crusader Kings II.lnk
2013-07-16 22:18 - 2013-07-16 22:18 - 00019882 _____ C:\Users\Kopacze\Downloads\Crusader_Kings_II _Mroczne_Wieki_[PL]_[ iso].torrent
2013-07-15 11:36 - 2013-07-15 11:37 - 02970389 _____ C:\Users\Ewa\Downloads\1191.dcr
2013-07-14 21:29 - 2013-07-14 21:30 - 00000000 ____D C:\Users\Kopacze\Downloads\Sid.Meiers.Civilization.V.Update.7-SKIDROW [ALEX]
2013-07-14 21:28 - 2013-07-14 21:28 - 00079166 _____ C:\Users\Kopacze\Downloads\[isoHunt] Sid.Meiers.Civilization.V.Update.7-SKIDROW_[ALEX].6146417.TPB.torrent
2013-07-14 21:16 - 2013-07-14 21:16 - 00016678 _____ C:\Users\Kopacze\Downloads\Sid Meier's Civilization 5.torrent
2013-07-12 15:49 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-12 15:16 - 2013-07-12 15:16 - 00002185 _____ C:\Users\Kopacze\Desktop\Sid Meier's Civilization IV Complete.lnk
2013-07-12 15:13 - 2013-07-12 15:13 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firaxis Games
2013-07-12 15:12 - 2013-07-12 15:12 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\InstallShield Installation Information
2013-07-12 15:12 - 2013-07-12 15:12 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\Firaxis Games
2013-07-12 10:34 - 2013-07-12 10:34 - 00263186 _____ C:\Users\Ewa\Downloads\Minecraft.exe
2013-07-12 10:34 - 2013-07-12 10:34 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\.minecraft
2013-07-12 02:33 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 02:33 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-12 02:33 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 02:33 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-12 02:33 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 02:33 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 02:33 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-12 02:33 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-12 02:33 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-12 02:33 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-12 02:33 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-12 02:33 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 02:33 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 02:33 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 02:33 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-12 02:33 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 16:05 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 16:05 - 2013-05-08 05:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 16:05 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-11 16:05 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-11 16:05 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-11 16:05 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-11 16:05 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-11 16:05 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-11 16:05 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-11 16:05 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-11 16:05 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-10 19:05 - 2013-07-10 19:05 - 00000000 ____D C:\Program Files\3dplaything
2013-07-10 15:31 - 2013-07-10 15:31 - 00000000 ____D C:\Program Files\Virtual Hottie 2
2013-07-10 14:09 - 2013-07-10 14:09 - 00000000 ____D C:\Users\Kopacze\AppData\Local\SKIDROW
2013-07-10 14:06 - 2013-07-20 15:24 - 00000000 ____D C:\Users\Kopacze\Desktop\Nowy folder
2013-07-10 00:23 - 2013-07-12 19:34 - 00000000 ____D C:\Users\Kopacze\AppData\Local\My Games
2013-07-10 00:18 - 2013-07-10 00:18 - 00000715 _____ C:\Users\Kopacze\Desktop\Sid Meiers Civilization V.lnk
2013-07-10 00:04 - 2013-07-14 21:34 - 00000000 ____D C:\Program Files\Sid Meier's Civilization V
2013-07-09 19:48 - 2013-07-09 21:22 - 00000000 ____D C:\Users\Kopacze\Downloads\Sid Meiers Civilization V-SKIDROW
2013-07-06 22:48 - 2013-07-06 22:49 - 02025107 _____ C:\Users\Kopacze\Downloads\EU3 PL.zip
2013-07-06 22:47 - 2013-07-06 22:49 - 00000000 ____D C:\Users\Kopacze\Downloads\Europa.Universalis.III.Divine.Wind-OUTLAWS
2013-07-04 14:23 - 2013-07-04 14:23 - 00000000 ____D C:\Program Files\Coolspot BV
2013-07-03 22:23 - 2013-07-03 22:25 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\.minecraftzyczu
2013-07-03 22:22 - 2013-07-03 22:23 - 03727418 _____ (Zyczu) C:\Users\Kopacze\Desktop\MinecraftZyczu.exe
2013-07-03 09:15 - 2013-07-03 09:15 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2013-07-02 20:51 - 2013-07-02 20:51 - 00001013 _____ C:\Users\Kopacze\Desktop\eu3 — skrót.lnk
2013-07-02 20:40 - 2012-07-29 17:52 - 00000000 ____D C:\Users\Kopacze\Downloads\spolszczenie eu3
2013-07-02 20:27 - 2013-07-02 20:27 - 00000797 _____ C:\Users\Kopacze\Desktop\µTorrent.lnk
2013-07-02 20:27 - 2013-07-02 20:27 - 00000777 _____ C:\Users\Kopacze\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-07-02 20:25 - 2013-07-02 20:25 - 01125968 _____ (BitTorrent Inc.) C:\Users\Kopacze\Downloads\utorrent.exe
2013-07-02 20:22 - 2013-07-02 20:22 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\OpenCandy
2013-07-02 20:22 - 2013-07-02 20:22 - 00000000 ____D C:\Program Files\DownLite
2013-07-02 15:03 - 2013-07-02 15:03 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\PeerNetworking
2013-07-01 20:22 - 2013-07-01 20:22 - 00114253 _____ C:\Users\Kopacze\Downloads\Watchmen - Strażnicy DVDScr (2009).srt
2013-07-01 12:21 - 2013-07-01 12:21 - 00000084 _____ C:\Users\Kopacze\Documents\jej.txt

==================== One Month Modified Files and Folders =======

2013-07-31 15:19 - 2013-07-31 15:19 - 00000000 ____D C:\FRST
2013-07-31 15:18 - 2013-07-31 15:14 - 00000283 _____ C:\Users\Kopacze\Desktop\FSS.txt
2013-07-31 15:13 - 2013-07-21 16:28 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-31 15:12 - 2013-07-31 15:12 - 00000000 ____D C:\Users\Kopacze\Documents\Raporty
2013-07-31 14:58 - 2010-04-22 18:34 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-31 14:37 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-31 14:37 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-31 14:35 - 2013-06-19 23:56 - 01889039 _____ C:\Windows\WindowsUpdate.log
2013-07-31 14:31 - 2012-10-20 18:46 - 00000000 ____D C:\Program Files\Steam
2013-07-31 14:23 - 2013-07-31 14:23 - 00000215 _____ C:\Users\Kopacze\Desktop\Dead Island.url
2013-07-31 14:23 - 2013-04-28 14:59 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-07-31 14:01 - 2013-07-31 14:01 - 00000564 _____ C:\Windows\wmsetup.log
2013-07-31 14:00 - 2012-01-18 19:45 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\Skype
2013-07-31 13:57 - 2011-12-17 18:06 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-07-31 13:56 - 2013-06-05 17:37 - 00000000 ____D C:\Users\Kopacze\AppData\Local\LogMeIn Hamachi
2013-07-31 13:55 - 2010-04-22 18:34 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-31 10:45 - 2013-06-07 15:49 - 00000000 ____D C:\Users\Ewa\AppData\Local\LogMeIn Hamachi
2013-07-31 10:37 - 2012-01-22 01:11 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-07-31 10:37 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-30 23:14 - 2006-11-02 15:01 - 00032618 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-30 14:51 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\tracing
2013-07-29 20:00 - 2008-09-21 15:38 - 00102912 _____ C:\Users\Kopacze\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-29 18:13 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\LogFiles
2013-07-29 14:00 - 2013-07-29 14:00 - 00093576 _____ C:\Users\Kopacze\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-29 11:24 - 2013-07-29 11:23 - 00376872 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-28 23:36 - 2009-02-24 21:09 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\uTorrent
2013-07-28 00:25 - 2013-07-28 00:24 - 124952555 _____ C:\Users\Kopacze\Documents\DC Universe Online - Full Opening Game Cinematic.mp4
2013-07-27 23:23 - 2013-07-31 15:17 - 00377856 _____ C:\Users\Kopacze\Desktop\4i2w6hz1.exe
2013-07-27 23:22 - 2013-07-31 15:12 - 00357145 _____ (Farbar) C:\Users\Kopacze\Desktop\FSS.exe
2013-07-27 23:21 - 2013-07-31 15:18 - 01221426 _____ (Farbar) C:\Users\Kopacze\Desktop\FRST.exe
2013-07-27 15:10 - 2006-11-02 12:33 - 00707520 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-26 16:11 - 2013-07-27 15:09 - 00602112 _____ (OldTimer Tools) C:\Users\Kopacze\Desktop\OTL.exe
2013-07-25 20:32 - 2012-12-03 15:04 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\.minecraft
2013-07-21 17:13 - 2013-07-21 16:28 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-07-21 17:13 - 2011-09-17 10:52 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-07-21 16:28 - 2010-04-29 20:09 - 00006676 _____ C:\Users\Kopacze\AppData\Local\d3d9caps.dat
2013-07-20 22:58 - 2013-07-20 22:55 - 00000000 ____D C:\Windows\system32\MRT
2013-07-20 15:24 - 2013-07-10 14:06 - 00000000 ____D C:\Users\Kopacze\Desktop\Nowy folder
2013-07-20 14:00 - 2013-03-14 21:50 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\DAEMON Tools Lite
2013-07-18 22:30 - 2013-07-18 22:30 - 00001901 _____ C:\Users\Public\Desktop\Victoria 2.lnk
2013-07-18 22:24 - 2011-12-17 21:00 - 00000000 ____D C:\Program Files\Paradox Interactive
2013-07-18 22:24 - 2008-06-02 03:16 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-07-18 22:19 - 2013-07-18 21:21 - 00000000 ____D C:\Users\Kopacze\Downloads\Victoria.II-SKIDROW
2013-07-18 17:46 - 2013-07-18 16:45 - 00000000 ____D C:\Users\Kopacze\Downloads\Head In The Clouds [2004] 720p BRRip.x264.DXVA-ZoNe
2013-07-16 23:10 - 2013-07-16 23:10 - 00000000 ____D C:\Users\Kopacze\Documents\Paradox Interactive
2013-07-16 23:09 - 2013-07-16 23:09 - 00001940 _____ C:\Users\Public\Desktop\Crusader Kings II.lnk
2013-07-16 22:18 - 2013-07-16 22:18 - 00019882 _____ C:\Users\Kopacze\Downloads\Crusader_Kings_II _Mroczne_Wieki_[PL]_[ iso].torrent
2013-07-15 12:28 - 2012-05-09 22:59 - 00000000 ____D C:\Users\Ewa\AppData\Local\Microsoft Games
2013-07-15 11:37 - 2013-07-15 11:36 - 02970389 _____ C:\Users\Ewa\Downloads\1191.dcr
2013-07-14 21:34 - 2013-07-10 00:04 - 00000000 ____D C:\Program Files\Sid Meier's Civilization V
2013-07-14 21:30 - 2013-07-14 21:29 - 00000000 ____D C:\Users\Kopacze\Downloads\Sid.Meiers.Civilization.V.Update.7-SKIDROW [ALEX]
2013-07-14 21:28 - 2013-07-14 21:28 - 00079166 _____ C:\Users\Kopacze\Downloads\[isoHunt] Sid.Meiers.Civilization.V.Update.7-SKIDROW_[ALEX].6146417.TPB.torrent
2013-07-14 21:16 - 2013-07-14 21:16 - 00016678 _____ C:\Users\Kopacze\Downloads\Sid Meier's Civilization 5.torrent
2013-07-13 10:11 - 2013-05-17 13:28 - 00093576 _____ C:\Users\Ewa\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-12 20:52 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-12 19:34 - 2013-07-10 00:23 - 00000000 ____D C:\Users\Kopacze\AppData\Local\My Games
2013-07-12 19:34 - 2012-10-20 23:30 - 00000000 ____D C:\Users\Kopacze\Documents\My Games
2013-07-12 15:16 - 2013-07-12 15:16 - 00002185 _____ C:\Users\Kopacze\Desktop\Sid Meier's Civilization IV Complete.lnk
2013-07-12 15:13 - 2013-07-12 15:13 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firaxis Games
2013-07-12 15:12 - 2013-07-12 15:12 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\InstallShield Installation Information
2013-07-12 15:12 - 2013-07-12 15:12 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\Firaxis Games
2013-07-12 10:34 - 2013-07-12 10:34 - 00263186 _____ C:\Users\Ewa\Downloads\Minecraft.exe
2013-07-12 10:34 - 2013-07-12 10:34 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\.minecraft
2013-07-12 10:21 - 2009-11-06 01:06 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-12 10:21 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-12 02:39 - 2006-11-02 12:23 - 00000240 _____ C:\Windows\win.ini
2013-07-12 02:31 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-10 19:05 - 2013-07-10 19:05 - 00000000 ____D C:\Program Files\3dplaything
2013-07-10 15:31 - 2013-07-10 15:31 - 00000000 ____D C:\Program Files\Virtual Hottie 2
2013-07-10 14:49 - 2013-05-24 22:58 - 00000000 ____D C:\Program Files\Utherverse Digital Inc
2013-07-10 14:09 - 2013-07-10 14:09 - 00000000 ____D C:\Users\Kopacze\AppData\Local\SKIDROW
2013-07-10 00:18 - 2013-07-10 00:18 - 00000715 _____ C:\Users\Kopacze\Desktop\Sid Meiers Civilization V.lnk
2013-07-09 21:22 - 2013-07-09 19:48 - 00000000 ____D C:\Users\Kopacze\Downloads\Sid Meiers Civilization V-SKIDROW
2013-07-06 22:49 - 2013-07-06 22:48 - 02025107 _____ C:\Users\Kopacze\Downloads\EU3 PL.zip
2013-07-06 22:49 - 2013-07-06 22:47 - 00000000 ____D C:\Users\Kopacze\Downloads\Europa.Universalis.III.Divine.Wind-OUTLAWS
2013-07-05 18:19 - 2013-05-24 23:20 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\Utherverse
2013-07-05 17:38 - 2012-05-12 15:05 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-05 17:38 - 2012-05-12 15:05 - 00000000 ____D C:\Windows\system32\directx
2013-07-04 14:23 - 2013-07-04 14:23 - 00000000 ____D C:\Program Files\Coolspot BV
2013-07-04 12:22 - 2009-05-31 15:36 - 00000412 _____ C:\Windows\ODBC.INI
2013-07-03 22:25 - 2013-07-03 22:23 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\.minecraftzyczu
2013-07-03 22:23 - 2013-07-03 22:22 - 03727418 _____ (Zyczu) C:\Users\Kopacze\Desktop\MinecraftZyczu.exe
2013-07-03 09:15 - 2013-07-03 09:15 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2013-07-03 09:15 - 2013-06-05 17:36 - 00000769 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-07-02 20:51 - 2013-07-02 20:51 - 00001013 _____ C:\Users\Kopacze\Desktop\eu3 — skrót.lnk
2013-07-02 20:27 - 2013-07-02 20:27 - 00000797 _____ C:\Users\Kopacze\Desktop\µTorrent.lnk
2013-07-02 20:27 - 2013-07-02 20:27 - 00000777 _____ C:\Users\Kopacze\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2013-07-02 20:25 - 2013-07-02 20:25 - 01125968 _____ (BitTorrent Inc.) C:\Users\Kopacze\Downloads\utorrent.exe
2013-07-02 20:22 - 2013-07-02 20:22 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\OpenCandy
2013-07-02 20:22 - 2013-07-02 20:22 - 00000000 ____D C:\Program Files\DownLite
2013-07-02 15:13 - 2012-10-15 17:26 - 00000000 ____D C:\Users\Kopacze\napisy srt
2013-07-02 15:13 - 2012-10-15 17:26 - 00000000 ____D C:\Users\Kopacze\Documents\napisy srt
2013-07-02 15:13 - 2008-06-25 05:06 - 00000000 ____D C:\Users\Kopacze
2013-07-02 15:03 - 2013-07-02 15:03 - 00000000 ____D C:\Users\Kopacze\AppData\Roaming\PeerNetworking
2013-07-02 08:44 - 2012-02-28 12:29 - 00000000 ____D C:\Users\Ewa
2013-07-01 20:22 - 2013-07-01 20:22 - 00114253 _____ C:\Users\Kopacze\Downloads\Watchmen - Strażnicy DVDScr (2009).srt
2013-07-01 12:21 - 2013-07-01 12:21 - 00000084 _____ C:\Users\Kopacze\Documents\jej.txt
2013-07-01 09:18 - 2012-06-19 10:38 - 00001244 __RSH C:\Users\Ewa\ntuser.pol

ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-3912436257-1763244337-2753239738-1000\$5b23f7b74ddd94e58d2869fe0bb97fa2

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender


LastRegBack: 2013-07-31 10:50

==================== End Of Log ============================