Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by shad (administrator) on MORGANA on 02-10-2013 21:24:53
Running from C:\Documents and Settings\shad\Moje dokumenty\Downloads\Programs
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(A4Tech Co.,Ltd.) C:\Program Files\A4Tech\Mouse\Amoumain.exe
() C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(BitTorrent Inc.) C:\Documents and Settings\shad\Dane aplikacji\uTorrent\uTorrent.exe
(Dropbox, Inc.) C:\Documents and Settings\shad\Dane aplikacji\Dropbox\bin\Dropbox.exe
(AutoIt Team) C:\Documents and Settings\shad\ubhrq\ozgq.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TuneUp Software) C:\WINDOWS\System32\TUProgSt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(TuneUp Software) C:\WINDOWS\System32\TuneUpDefragService.exe
(OldTimer Tools) C:\Documents and Settings\shad\Moje dokumenty\Downloads\Programs\OTL.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [WheelMouse] - C:\Program Files\A4Tech\Mouse\Amoumain.exe [204800 2007-05-15] (A4Tech Co.,Ltd.)
HKLM\...\Run: [Samsung PanelMgr] - C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [618496 2010-06-07] ()
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [16342528 2007-05-10] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\Windows\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [KernelFaultCheck] - %systemroot%\system32\dumprep 0 -k
HKCU\...\Run: [IDMan] - C:\Program Files\Internet Download Manager\IDMan.exe [3573624 2013-07-05] (Tonec Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Run: [Facebook Update] - C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2013-09-27] (Facebook Inc.)
HKCU\...\Run: [uTorrent] - C:\Documents and Settings\shad\Dane aplikacji\uTorrent\uTorrent.exe [888152 2013-08-14] (BitTorrent Inc.)
HKCU\...\Run: [Google Update*] - [x] <===== ATTENTION (ZeroAccess rootkit hidden path)
HKCU\...\RunOnce: [ubhrq] - C:\DOCUME~1\shad\ubhrq\start.vbs [190 2013-10-01] ()
HKCU\...\Policies\Explorer\Run: [Google] - C:\Documents and Settings\shad\Dane aplikacji\396B58\396B58.exe [274840 2009-02-09] ( ())
Startup: C:\Documents and Settings\shad\Menu Start\Programy\Autostart\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Documents and Settings\shad\Dane aplikacji\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU -&Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU -&Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5 03 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 mswsock.dll File Not found ()
Winsock: Catalog9 04 mswsock.dll File Not found ()
Winsock: Catalog9 05 mswsock.dll File Not found ()
Winsock: Catalog9 06 mswsock.dll File Not found ()
Winsock: Catalog9 07 mswsock.dll File Not found ()
Winsock: Catalog9 08 mswsock.dll File Not found ()
Winsock: Catalog9 09 mswsock.dll File Not found ()
Winsock: Catalog9 10 mswsock.dll File Not found ()
Winsock: Catalog9 11 mswsock.dll File Not found ()
Winsock: Catalog9 12 mswsock.dll File Not found ()
Winsock: Catalog9 13 mswsock.dll File Not found ()
Winsock: Catalog9 14 mswsock.dll File Not found ()
Winsock: Catalog9 15 mswsock.dll File Not found ()
Winsock: Catalog9 16 mswsock.dll File Not found ()
Winsock: Catalog9 17 mswsock.dll File Not found ()
Winsock: Catalog9 18 mswsock.dll File Not found ()
Winsock: Catalog9 19 mswsock.dll File Not found ()
Winsock: Catalog9 20 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\shad\Dane aplikacji\Mozilla\Firefox\Profiles\s1glskbq.default
FF user.js: detected! => C:\Documents and Settings\shad\Dane aplikacji\Mozilla\Firefox\Profiles\s1glskbq.default\user.js
FF SelectedSearchEngine: Google
FF Keyword.URL: hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=512435&p=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: No Name - C:\Documents and Settings\shad\Dane aplikacji\Mozilla\Firefox\Profiles\s1glskbq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKCU\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Documents and Settings\shad\Dane aplikacji\IDM\idmmzcc5
FF Extension: IDM CC - C:\Documents and Settings\shad\Dane aplikacji\IDM\idmmzcc5
FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Documents and Settings\shad\Dane aplikacji\IDM\idmmzcc5
FF Extension: IDM CC - C:\Documents and Settings\shad\Dane aplikacji\IDM\idmmzcc5

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Extension: (Google Docs) - C:\DOCUME~1\shad\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\DOCUME~1\shad\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\DOCUME~1\shad\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\DOCUME~1\shad\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (IDM Integration) - C:\DOCUME~1\shad\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.5_0
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\shad\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\DOCUME~1\shad\USTAWI~1\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [jmolcgpienlcieaajfkkdamlngancncm] - C:\Program Files\Internet Download Manager\IDMGCExt.crx

========================== Services (Whitelisted) =================

R2 AntiVirFirewallService; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [655928 2013-09-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-20] (Avira Operations GmbH & Co. KG)
S2 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-05-27] (CyberLink)
S2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-05-27] (CyberLink)
R3 Nla; C:\Windows\System32\mswsock.dll [246784 2008-06-20] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)
R3 TuneUp.Defrag; C:\Windows\System32\TuneUpDefragService.exe [361216 2013-07-03] (TuneUp Software)
R2 TuneUp.ProgramStatisticsSvc; C:\Windows\System32\TUProgSt.exe [604416 2013-07-03] (TuneUp Software)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"
U2 *etadpug; "C:\Program Files\Google\Desktop\Install\{ed0078a2-2a3f-e1ab-535c-b0319af4b843}\   \   \???\{ed0078a2-2a3f-e1ab-535c-b0319af4b843}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)

==================== Drivers (Whitelisted) ====================

R1 Amfilter; C:\Windows\System32\DRIVERS\Amfilter.sys [9216 2007-05-14] (A4Tech Co.,Ltd.)
R3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbprt.sys [14336 2007-05-14] (A4Tech Co.,Ltd.)
R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [92448 2013-01-22] (Avira GmbH)
R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [113024 2013-01-22] (Avira GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-20] (Avira Operations GmbH & Co. KG)
R3 CCCP106; C:\Windows\System32\DRIVERS\cccp106.sys [227200 2003-04-28] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-05-17] (DT Soft Ltd)
R1 IDMTDI; C:\Windows\System32\DRIVERS\idmtdi.sys [112480 2012-11-22] (Tonec Inc.)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 NVHDA; C:\Windows\System32\drivers\nvhda32.sys [124264 2012-07-03] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [477240 2013-07-25] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [250496 2006-11-02] (Marvell)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [76560 2013-05-27] (CyberLink Corp.)
U3 a7v7gcxs; C:\Windows\System32\Drivers\a7v7gcxs.sys [0 ] (Microsoft Corporation)
U3 aebi3qaj; C:\Windows\System32\Drivers\aebi3qaj.sys [0 ] (Microsoft Corporation)
S2 DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys [x]
S4 IntelIde; No ImagePath
S3 MSICDSetup; \??\I:\CDriver.sys [x]
S3 rtl8139; system32\DRIVERS\RTL8139.SYS [x]
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S2 SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys [x]
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-02 21:24 - 2013-10-02 21:24 - 00000000 ____D C:\FRST
2013-10-01 17:00 - 2013-10-01 17:00 - 00000000 ____D C:\Documents and Settings\UpdatusUser\Dane aplikacji\Macromedia
2013-10-01 17:00 - 2013-10-01 17:00 - 00000000 ____D C:\Documents and Settings\UpdatusUser\Dane aplikacji\Adobe
2013-10-01 16:43 - 2013-10-01 16:43 - 00000000 __SHD C:\Documents and Settings\UpdatusUser\IETldCache
2013-10-01 00:14 - 2013-09-30 23:48 - 55517696 ____R C:\Documents and Settings\shad\Pulpit\fifa14.exe
2013-10-01 00:13 - 2013-10-01 00:14 - 00000000 __SHD C:\Documents and Settings\shad\ubhrq
2013-09-30 23:17 - 2013-09-30 23:17 - 00000000 ____D C:\Documents and Settings\shad\Moje dokumenty\FIFA 14
2013-09-30 23:17 - 2013-09-30 23:17 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Origin
2013-09-30 22:01 - 2013-10-02 21:11 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-28 19:53 - 2013-09-28 19:53 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\letariz
2013-09-27 23:52 - 2013-10-02 05:57 - 00000998 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-484763869-1770027372-839522115-1004UA.job
2013-09-27 23:52 - 2013-10-01 23:57 - 00000976 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-484763869-1770027372-839522115-1004Core.job
2013-09-27 23:52 - 2013-09-27 23:52 - 00000000 ____D C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji\Facebook
2013-09-20 07:42 - 2013-09-20 07:42 - 00000000 ____D C:\Documents and Settings\UpdatusUser\Ustawienia lokalne\Dane aplikacji\MediaServer
2013-09-19 16:51 - 2013-09-19 16:53 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\Tibia
2013-09-19 16:51 - 2013-09-19 16:51 - 00000638 _____ C:\Documents and Settings\All Users\Pulpit\Tibia.lnk
2013-09-19 16:51 - 2013-09-19 16:51 - 00000000 ____D C:\Program Files\Tibia
2013-09-19 16:51 - 2013-09-19 16:51 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Tibia
2013-09-19 12:15 - 2013-09-19 13:00 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-09-19 12:06 - 2013-09-19 12:06 - 00001707 _____ C:\Documents and Settings\All Users\Pulpit\Avira Control Center.lnk
2013-09-19 12:06 - 2013-09-19 12:06 - 00000000 ____D C:\WINDOWS\system32\LogFiles
2013-09-19 12:06 - 2013-09-19 12:06 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\Avira
2013-09-19 12:06 - 2013-09-19 12:06 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Avira
2013-09-19 12:05 - 2013-09-20 15:43 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-09-19 12:05 - 2013-09-20 15:43 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-09-19 12:05 - 2013-09-20 15:43 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-09-19 12:05 - 2013-09-19 12:06 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Avira
2013-09-19 12:05 - 2013-09-19 12:05 - 00000000 ____D C:\Program Files\Avira
2013-09-19 12:05 - 2013-01-22 11:29 - 00113024 _____ (Avira GmbH) C:\WINDOWS\system32\Drivers\avfwot.sys
2013-09-19 12:05 - 2013-01-22 11:29 - 00092448 _____ (Avira GmbH) C:\WINDOWS\system32\Drivers\avfwim.sys
2013-09-19 12:05 - 2012-08-27 14:50 - 00028520 _____ (Avira GmbH) C:\WINDOWS\system32\Drivers\ssmdrv.sys
2013-09-17 19:55 - 2013-09-17 19:55 - 00000603 _____ C:\Documents and Settings\All Users\Pulpit\FIFA 13.lnk
2013-09-17 19:55 - 2013-09-17 19:55 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\FIFA 13
2013-09-16 22:45 - 2008-04-01 13:10 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\DirectX_10_for_Windows_XPddd
2013-09-15 21:20 - 2013-09-15 21:58 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\World of Warcraft
2013-09-15 21:20 - 2013-09-15 21:20 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Blizzard
2013-09-15 20:37 - 2013-09-15 21:58 - 00000675 _____ C:\Documents and Settings\All Users\Pulpit\World of Warcraft.lnk
2013-09-15 20:32 - 2013-09-15 22:53 - 00000000 ____D C:\Program Files\Common Files\Blizzard Entertainment
2013-09-12 17:20 - 2013-09-12 17:21 - 00011873 _____ C:\WINDOWS\KB2870699-IE8.log
2013-09-12 17:20 - 2013-09-12 17:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-12 17:20 - 2013-09-12 17:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-12 17:20 - 2013-09-12 17:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-12 16:35 - 2013-09-12 17:20 - 00009748 _____ C:\WINDOWS\KB2876315.log
2013-09-12 16:35 - 2013-09-12 17:20 - 00009062 _____ C:\WINDOWS\KB2876217.log
2013-09-12 16:35 - 2013-09-12 17:20 - 00007994 _____ C:\WINDOWS\KB2864063.log
2013-09-10 19:45 - 2013-09-10 19:45 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\2DBoy
2013-09-10 19:44 - 2013-09-10 19:44 - 00001598 _____ C:\Documents and Settings\shad\Pulpit\World of Goo.lnk
2013-09-10 19:44 - 2013-09-10 19:44 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\World of Goo
2013-09-10 19:43 - 2013-09-10 19:45 - 00000000 ____D C:\Program Files\World of Goo
2013-09-10 19:40 - 2013-09-18 23:06 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\world of bbo
2013-09-08 16:06 - 2013-09-29 21:25 - 00000000 ____D C:\Documents and Settings\shad\Moje dokumenty\FIFA 12
2013-09-08 16:04 - 2013-09-18 21:36 - 00000000 ____D C:\Documents and Settings\shad\Moje dokumenty\FIFA 13
2013-09-08 16:02 - 2012-10-07 20:27 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\Crack
2013-09-08 15:58 - 2008-04-14 00:15 - 00060032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys
2013-09-05 23:56 - 2013-10-02 21:10 - 00000000 ___RD C:\Documents and Settings\shad\Moje dokumenty\Dropbox
2013-09-05 23:56 - 2013-09-05 23:56 - 00000981 _____ C:\Documents and Settings\shad\Pulpit\Dropbox.lnk
2013-09-05 23:10 - 2013-09-05 23:10 - 00000000 ____D C:\Program Files\Dropbox
2013-09-05 23:10 - 2013-09-05 23:10 - 00000000 ____D C:\Documents and Settings\shad\Menu Start\Programy\Dropbox
2013-09-05 23:09 - 2013-10-02 21:10 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\Dropbox
2013-09-02 18:42 - 2013-09-02 18:42 - 00000000 ____D C:\Documents and Settings\shad\Menu Start\Programy\San Andreas Multiplayer
2013-09-02 17:11 - 2013-09-19 16:54 - 00000519 _____ C:\Documents and Settings\shad\Pulpit\plan Dorotki.txt

==================== One Month Modified Files and Folders =======

2013-10-02 21:24 - 2013-10-02 21:24 - 00000000 ____D C:\FRST
2013-10-02 21:24 - 2013-08-03 16:55 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\uTorrent
2013-10-02 21:24 - 2013-05-27 01:09 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-02 21:22 - 2013-06-02 21:35 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\Skype
2013-10-02 21:15 - 2013-07-03 16:00 - 00262144 _____ C:\WINDOWS\system32\config\TuneUp.evt
2013-10-02 21:11 - 2013-09-30 22:01 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-02 21:11 - 2013-07-03 16:00 - 00000528 _____ C:\WINDOWS\Tasks\Konserwacja 1 kliknięciem.job
2013-10-02 21:11 - 2013-05-17 01:11 - 00000730 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2013-10-02 21:11 - 2013-05-17 01:11 - 00000724 _____ C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2013-10-02 21:11 - 2013-05-17 01:11 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-02 21:10 - 2013-09-05 23:56 - 00000000 ___RD C:\Documents and Settings\shad\Moje dokumenty\Dropbox
2013-10-02 21:10 - 2013-09-05 23:09 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\Dropbox
2013-10-02 21:10 - 2013-05-17 00:23 - 01582952 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-02 21:01 - 2013-07-09 08:34 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-10-02 07:36 - 2013-05-17 00:28 - 00000188 ___SH C:\Documents and Settings\shad\ntuser.ini
2013-10-02 07:36 - 2013-05-17 00:28 - 00000000 ____D C:\Documents and Settings\shad
2013-10-02 07:36 - 2013-05-17 00:26 - 00032528 _____ C:\WINDOWS\SchedLgU.Txt
2013-10-02 07:35 - 2013-05-17 01:12 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\DMCache
2013-10-02 05:57 - 2013-09-27 23:52 - 00000998 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-484763869-1770027372-839522115-1004UA.job
2013-10-01 23:57 - 2013-09-27 23:52 - 00000976 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-484763869-1770027372-839522115-1004Core.job
2013-10-01 17:00 - 2013-10-01 17:00 - 00000000 ____D C:\Documents and Settings\UpdatusUser\Dane aplikacji\Macromedia
2013-10-01 17:00 - 2013-10-01 17:00 - 00000000 ____D C:\Documents and Settings\UpdatusUser\Dane aplikacji\Adobe
2013-10-01 17:00 - 2013-06-23 22:20 - 00000000 __RHD C:\Documents and Settings\UpdatusUser\Dane aplikacji
2013-10-01 16:57 - 2013-05-17 16:15 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-01 16:57 - 2013-05-17 16:15 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-10-01 16:43 - 2013-10-01 16:43 - 00000000 __SHD C:\Documents and Settings\UpdatusUser\IETldCache
2013-10-01 00:15 - 2013-05-27 01:09 - 00000000 ____D C:\Program Files\Google
2013-10-01 00:15 - 2013-05-27 01:09 - 00000000 ____D C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji\Google
2013-10-01 00:14 - 2013-10-01 00:13 - 00000000 __SHD C:\Documents and Settings\shad\ubhrq
2013-10-01 00:14 - 2013-05-17 00:28 - 00000000 __RHD C:\Documents and Settings\shad\Dane aplikacji
2013-10-01 00:14 - 2013-05-17 00:28 - 00000000 ____D C:\Documents and Settings\shad\Pulpit
2013-09-30 23:48 - 2013-10-01 00:14 - 55517696 ____R C:\Documents and Settings\shad\Pulpit\fifa14.exe
2013-09-30 23:17 - 2013-09-30 23:17 - 00000000 ____D C:\Documents and Settings\shad\Moje dokumenty\FIFA 14
2013-09-30 23:17 - 2013-09-30 23:17 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Origin
2013-09-30 23:17 - 2013-05-17 02:11 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2013-09-30 23:17 - 2013-05-17 00:28 - 00000000 ___RD C:\Documents and Settings\shad\Moje dokumenty
2013-09-29 23:52 - 2013-05-17 13:25 - 00000000 ____D C:\Documents and Settings\shad\Moje dokumenty\Pobieranie
2013-09-29 21:25 - 2013-09-08 16:06 - 00000000 ____D C:\Documents and Settings\shad\Moje dokumenty\FIFA 12
2013-09-29 16:55 - 2007-01-01 00:39 - 00936832 _____ C:\WINDOWS\setupapi.log
2013-09-28 19:53 - 2013-09-28 19:53 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\letariz
2013-09-27 23:52 - 2013-09-27 23:52 - 00000000 ____D C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji\Facebook
2013-09-27 23:52 - 2013-05-17 00:28 - 00000000 ___HD C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji
2013-09-25 19:57 - 2013-05-17 13:37 - 00027648 _____ C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-23 22:53 - 2013-07-26 19:36 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\ddddd
2013-09-23 21:41 - 2013-05-17 00:28 - 00000000 ___RD C:\Documents and Settings\shad\Moje dokumenty\Moje obrazy
2013-09-20 15:43 - 2013-09-19 12:05 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-09-20 15:43 - 2013-09-19 12:05 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-09-20 15:43 - 2013-09-19 12:05 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-09-20 07:42 - 2013-09-20 07:42 - 00000000 ____D C:\Documents and Settings\UpdatusUser\Ustawienia lokalne\Dane aplikacji\MediaServer
2013-09-20 07:42 - 2013-06-23 22:20 - 00000000 ___HD C:\Documents and Settings\UpdatusUser\Ustawienia lokalne\Dane aplikacji
2013-09-19 23:44 - 2013-05-17 01:12 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\IDM
2013-09-19 16:54 - 2013-09-02 17:11 - 00000519 _____ C:\Documents and Settings\shad\Pulpit\plan Dorotki.txt
2013-09-19 16:53 - 2013-09-19 16:51 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\Tibia
2013-09-19 16:51 - 2013-09-19 16:51 - 00000638 _____ C:\Documents and Settings\All Users\Pulpit\Tibia.lnk
2013-09-19 16:51 - 2013-09-19 16:51 - 00000000 ____D C:\Program Files\Tibia
2013-09-19 16:51 - 2013-09-19 16:51 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Tibia
2013-09-19 16:51 - 2013-05-17 02:12 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy
2013-09-19 16:51 - 2013-05-17 02:12 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2013-09-19 16:40 - 2013-07-24 11:50 - 00000000 ____D C:\Program Files\ElfBot NG
2013-09-19 15:19 - 2013-07-24 12:05 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\Czysty Elf 4.5.9 + Crack
2013-09-19 13:00 - 2013-09-19 12:15 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-09-19 12:15 - 2013-05-17 02:05 - 00000000 ____D C:\WINDOWS\repair
2013-09-19 12:15 - 2013-05-17 00:21 - 00000000 ____D C:\WINDOWS\Registration
2013-09-19 12:06 - 2013-09-19 12:06 - 00001707 _____ C:\Documents and Settings\All Users\Pulpit\Avira Control Center.lnk
2013-09-19 12:06 - 2013-09-19 12:06 - 00000000 ____D C:\WINDOWS\system32\LogFiles
2013-09-19 12:06 - 2013-09-19 12:06 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\Avira
2013-09-19 12:06 - 2013-09-19 12:06 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Avira
2013-09-19 12:06 - 2013-09-19 12:05 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Avira
2013-09-19 12:05 - 2013-09-19 12:05 - 00000000 ____D C:\Program Files\Avira
2013-09-18 23:06 - 2013-09-10 19:40 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\world of bbo
2013-09-18 23:01 - 2013-07-02 17:03 - 00000000 ____D C:\Documents and Settings\shad\Dane aplikacji\vlc
2013-09-18 21:36 - 2013-09-08 16:04 - 00000000 ____D C:\Documents and Settings\shad\Moje dokumenty\FIFA 13
2013-09-17 19:55 - 2013-09-17 19:55 - 00000603 _____ C:\Documents and Settings\All Users\Pulpit\FIFA 13.lnk
2013-09-17 19:55 - 2013-09-17 19:55 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\FIFA 13
2013-09-17 19:55 - 2013-05-17 00:22 - 00000000 ____D C:\WINDOWS\system32\DirectX
2013-09-16 22:46 - 2013-05-29 19:03 - 00470440 _____ C:\WINDOWS\Directx.log
2013-09-15 22:53 - 2013-09-15 20:32 - 00000000 ____D C:\Program Files\Common Files\Blizzard Entertainment
2013-09-15 21:58 - 2013-09-15 21:20 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\World of Warcraft
2013-09-15 21:58 - 2013-09-15 20:37 - 00000675 _____ C:\Documents and Settings\All Users\Pulpit\World of Warcraft.lnk
2013-09-15 21:20 - 2013-09-15 21:20 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Blizzard
2013-09-15 21:13 - 2013-06-23 21:48 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit\Game Fix
2013-09-15 00:25 - 2013-08-27 19:13 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\Mitsubishi Lancer Evolution IX MR - Stock
2013-09-15 00:25 - 2013-07-29 00:56 - 00000000 ____D C:\Documents and Settings\shad\Pulpit\28.07
2013-09-15 00:25 - 2013-05-26 23:07 - 00406528 ___SH C:\Documents and Settings\shad\Pulpit\Thumbs.db
2013-09-12 17:41 - 2013-05-17 02:10 - 00278944 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-09-12 17:21 - 2013-09-12 17:20 - 00011873 _____ C:\WINDOWS\KB2870699-IE8.log
2013-09-12 17:21 - 2013-07-01 00:49 - 00185671 _____ C:\WINDOWS\updspapi.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00950479 _____ C:\WINDOWS\FaxSetup.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00472479 _____ C:\WINDOWS\ocgen.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00371491 _____ C:\WINDOWS\tsoc.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00345540 _____ C:\WINDOWS\comsetup.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00205996 _____ C:\WINDOWS\ntdtcsetup.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00147059 _____ C:\WINDOWS\iis6.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00059489 _____ C:\WINDOWS\ocmsn.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00047942 _____ C:\WINDOWS\msgsocm.log
2013-09-12 17:21 - 2013-05-17 02:13 - 00001374 _____ C:\WINDOWS\imsins.log
2013-09-12 17:20 - 2013-09-12 17:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-12 17:20 - 2013-09-12 17:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-12 17:20 - 2013-09-12 17:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-12 17:20 - 2013-09-12 16:35 - 00009748 _____ C:\WINDOWS\KB2876315.log
2013-09-12 17:20 - 2013-09-12 16:35 - 00009062 _____ C:\WINDOWS\KB2876217.log
2013-09-12 17:20 - 2013-09-12 16:35 - 00007994 _____ C:\WINDOWS\KB2864063.log
2013-09-12 17:20 - 2013-05-17 02:13 - 00001374 _____ C:\WINDOWS\imsins.BAK
2013-09-10 19:45 - 2013-09-10 19:45 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\2DBoy
2013-09-10 19:45 - 2013-09-10 19:43 - 00000000 ____D C:\Program Files\World of Goo
2013-09-10 19:44 - 2013-09-10 19:44 - 00001598 _____ C:\Documents and Settings\shad\Pulpit\World of Goo.lnk
2013-09-10 19:44 - 2013-09-10 19:44 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\World of Goo
2013-09-08 15:58 - 2013-05-17 02:10 - 00273417 _____ C:\WINDOWS\setupact.log
2013-09-05 23:56 - 2013-09-05 23:56 - 00000981 _____ C:\Documents and Settings\shad\Pulpit\Dropbox.lnk
2013-09-05 23:12 - 2013-05-17 00:21 - 00006683 _____ C:\WINDOWS\wmsetup.log
2013-09-05 23:11 - 2013-05-17 00:28 - 00000000 ___RD C:\Documents and Settings\shad\Menu Start\Programy\Autostart
2013-09-05 23:10 - 2013-09-05 23:10 - 00000000 ____D C:\Program Files\Dropbox
2013-09-05 23:10 - 2013-09-05 23:10 - 00000000 ____D C:\Documents and Settings\shad\Menu Start\Programy\Dropbox
2013-09-05 23:10 - 2013-05-17 00:28 - 00000000 ___RD C:\Documents and Settings\shad\Menu Start\Programy
2013-09-02 18:42 - 2013-09-02 18:42 - 00000000 ____D C:\Documents and Settings\shad\Menu Start\Programy\San Andreas Multiplayer
2013-09-02 18:42 - 2013-08-25 19:59 - 00000000 ____D C:\Documents and Settings\shad\Moje dokumenty\GTA San Andreas User Files

ZeroAccess:
C:\Windows\assembly\GAC\Desktop.ini

Files to move or delete:
====================
ZeroAccess:
C:\Documents and Settings\shad\Ustawienia lokalne\Dane aplikacji\Google\Desktop\Install
ZeroAccess:
C:\Program Files\Google\Desktop\Install


Some content of TEMP:
====================
C:\Documents and Settings\shad\Ustawienia lokalne\Temp\AskSLib.dll
C:\Documents and Settings\shad\Ustawienia lokalne\Temp\gta-san-andreas.exe
C:\Documents and Settings\shad\Ustawienia lokalne\Temp\MSIAFTERBURNERSETUP.EXE
C:\Documents and Settings\shad\Ustawienia lokalne\Temp\ose00000.exe
C:\Documents and Settings\shad\Ustawienia lokalne\Temp\SearchProtectionSetup.exe
C:\Documents and Settings\shad\Ustawienia lokalne\Temp\SETUP_AFTERBURNER.EXE
C:\Documents and Settings\shad\Ustawienia lokalne\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-08-04 14:00] - [2008-04-14 22:51] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2004-08-04 14:00] - [2008-04-14 22:51] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2004-08-04 14:00] - [2008-04-14 22:51] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2004-08-04 14:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\Windows\System32\User32.dll
[2004-08-04 14:00] - [2008-04-14 22:50] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2004-08-04 14:00] - [2008-04-14 22:51] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\Drivers\volsnap.sys
[2004-08-04 14:00] - [2008-04-14 21:31] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================