Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-12-2013 01
Ran by dom (administrator) on MABENEK on 28-12-2013 17:03:45
Running from D:\Install
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 6
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
(MindSpark) C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe
(VER_COMPANY_NAME) C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Canon Inc.) C:\Program Files\Canon\CAL\CALMAIN.exe
() C:\Documents and Settings\dom\Moje dokumenty\Pobieranie\p57mqb86.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(C. Ghisler & Co.) C:\Totalcmd\TOTALCMD.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [igfxhkcmd] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [igfxpers] - C:\WINDOWS\system32\igfxpers.exe [118784 2005-11-28] (Intel Corporation)
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.exe [16207872 2006-05-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\WINDOWS\Alcmtr.exe [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Adobe Photo Downloader] - C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe [57344 2005-06-06] (Adobe Systems Incorporated)
HKLM\...\Run: [SkyTel] - C:\WINDOWS\SkyTel.exe [2879488 2006-05-16] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Easy-PrintToolBox] - C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE [409600 2004-01-14] (CANON INC.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [VideoDownloadConverter Search Scope Monitor] - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe [44784 2013-05-27] (MindSpark)
HKLM\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader] - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe [30096 2013-05-27] (VER_COMPANY_NAME)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKCU\...\Run: [Dzieńdobry!] - C:\Program Files\VSD Software\Dzieńdobry!\dziendobry.exe [753664 2007-04-04] (VSD Software)
HKCU\...\Run: [Advanced SystemCare 6] - "G:\ASC_Portable\ASCTray.exe" /AutoStart
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [204288 2006-12-01] (Microsoft Corporation)
MountPoints2: {6cebc5a8-f080-11de-bec9-000fea563d8b} - G:\LaunchU3.exe -a
HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - "C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe"
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\dom\Menu Start\Programy\Autostart\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.onet.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.pl
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
URLSearchHook: HKCU - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (MindSpark)
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm073^YY^pl&si=pconverter&ptb=78C8D794-2D4E-4FBF-B228-34C6D1445BEA&ind=2013052712&n=77fcbf28&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {2883B452-678A-4E03-886F-BFCC11F51942} URL = http://megaslownik.pl/slownik.php?phrase={searchTerms}&lang=de
SearchScopes: HKCU - {45868C47-C688-49C6-9465-825E2517C10A} URL = http://www.nasza-klasa.pl/szukaj/profile?q={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&rlz=1I7GGLL_en
SearchScopes: HKCU - {9A584BE6-7575-4B87-AF0E-C733AC509A85} URL = http://megaslownik.pl/slownik.php?phrase={searchTerms}&lang=en
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
SearchScopes: HKCU - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm073^YY^pl&si=pconverter&ptb=78C8D794-2D4E-4FBF-B228-34C6D1445BEA&ind=2013052712&n=77fcbf28&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {EA1992B5-EAFC-45DD-A7A0-ECA631F2DCA9} URL = http://pl.wikipedia.org/w/index.php?title=Specjalna:Szukaj&search={searchTerms}
SearchScopes: HKCU - {EAB0FBCF-7020-4094-9A44-F8108B7D43FC} URL = http://www.allegro.pl/search.php?sg=0&string={searchTerms}
SearchScopes: HKCU - {ECD9645F-49CF-4CA8-A920-7D830BCC30A9} URL = http://szukaj.onet.pl/query.html?qt={searchTerms}
BHO: No Name - {3049C3E9-B461-4BC5-8870-4C09146192CA} -  No File
BHO: Toolbar BHO - {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (MindSpark)
BHO: ALLYouTubeDownloader - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLYouTubeDownloader\ALLYouTubeDownloader.dll (ALLCinema Ltd.)
BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Search Assistant BHO - {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (MindSpark)
BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - VideoDownloadConverter - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (MindSpark)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {C4069E3A-68F1-403E-B40E-20066696354B} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 88.156.222.92 82.139.8.40 95.160.170.92

FireFox:
========
FF ProfilePath: C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\y01dx3ue.default
FF Homepage: hxxp://www.gazeta.pl/0,0.html?p=143
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa2,version=2.0.0 - C:\Program Files\Picasa2\npPicasa2.dll No File
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nprjplug;version=15.0.6.14 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll (MindSpark)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wolnelektury-pl.xml
FF Extension: VideoDownloadConverter - C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\y01dx3ue.default\Extensions\4zffxtbr@VideoDownloadConverter_4z.com
FF Extension: Iplex to ALLPlayer - C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\y01dx3ue.default\Extensions\IplextoALL@ALLPlayer.org
FF Extension: ALLYouTubeDownloader - C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\y01dx3ue.default\Extensions\YouTubetoALL@ALLPlayer.org
FF Extension: Iplex to ALLPlayer - C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\y01dx3ue.default\Extensions\IplextoALL@ALLPlayer.org.xpi
FF Extension: ALLYouTubeDownloader - C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\y01dx3ue.default\Extensions\YouTubetoALL@ALLPlayer.org.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin
FF Extension: VideoDownloadConverter - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

Chrome: 
=======
CHR HomePage: hxxp://www.gazeta.pl/0,0.html?p=143
CHR RestoreOnStartup: "hxxp://www.gazeta.pl/0,0.html?p=143", "hxxp://www.gazeta.pl/0,0.html?p=138", "hxxp://www.gazeta.pl/0,0.html?p=138", "hxxp://www.gazeta.pl/0,0.html?p=137", "hxxp://www.google.com/"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll No File
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll No File
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll No File
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
CHR Extension: (YouTube) - C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealDownloader) - C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.1_0
CHR Extension: (Google Wallet) - C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [gdnafjfahbdfphihncgadbegiaebehio] - C:\Program Files\SquirrelWeb\gdnafjfahbdfphihncgadbegiaebehio.crx
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx

========================== Services (Whitelisted) =================

R2 CCALib8; C:\Program Files\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
S4 PuranDefrag; C:\WINDOWS\system32\PuranDefragS.exe [260992 2013-08-15] (Puran Software)
S2 Update SquirrelWeb; C:\Program Files\SquirrelWeb\updateSquirrelWeb.exe [66848 2013-11-19] ()
S2 VideoDownloadConverter_4zService; C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe [42504 2013-05-27] (COMPANYVERS_NAME)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
S3 NMIndexingService; "C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe" [x]
S3 WDTBEA; C:\DOCUME~1\dom\USTAWI~1\Temp\WDTBEA.exe [x]

==================== Drivers (Whitelisted) ====================

S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [51120 2005-03-08] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2005-03-08] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21744 2005-03-08] (HP)
R2 Kmm4xNT; C:\Windows\System32\Drivers\Kmm4xNT.sys [95484 2002-04-26] (DATOM Dariusz Cielebąk)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R1 MpKslb0f3b22e; C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Microsoft Antimalware\Definition Updates\{B84CAF09-4826-48E6-8D53-63B8EAAF6E17}\MpKslb0f3b22e.sys [40392 2013-12-28] (Microsoft Corporation)
S3 MSIRCOMM; C:\Windows\System32\DRIVERS\MSIRCOMM.sys [22016 2008-04-13] (Microsoft Corporation)
R3 Rasirda; C:\Windows\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
S4 IntelIde; No ImagePath
S3 nmwcd; system32\drivers\ccdcmb.sys [x]
S3 nmwcdc; system32\drivers\ccdcmbo.sys [x]
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 upperdev; system32\DRIVERS\usbser_lowerflt.sys [x]
S3 UsbserFilt; system32\DRIVERS\usbser_lowerfltj.sys [x]
U3 awldypow; \??\C:\DOCUME~1\dom\USTAWI~1\Temp\awldypow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-28 17:00 - 2013-12-28 17:00 - 00000000 ____D C:\FRST
2013-12-28 15:46 - 2013-12-28 15:46 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Zdjęcia_Jemaiki
2013-12-28 15:40 - 2013-12-28 15:41 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Canon
2013-12-28 15:38 - 2013-12-28 15:44 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\MultiMedia
2013-12-28 15:37 - 2013-12-28 15:40 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Gry
2013-12-28 15:36 - 2013-12-28 15:36 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Microsoft Office
2013-12-28 15:35 - 2013-12-28 15:45 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Norma
2013-12-28 15:34 - 2013-12-28 15:46 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\PIT Format
2013-12-28 15:31 - 2013-12-28 15:32 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\ALLPlayer
2013-12-28 02:08 - 2013-12-28 02:08 - 00000000 ____D C:\Program Files\SquirrelWeb
2013-12-28 02:07 - 2013-12-28 10:00 - 00000000 ____D C:\Program Files\Puran Defrag
2013-12-28 02:07 - 2013-12-28 02:07 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Puran Defrag
2013-12-28 02:07 - 2013-08-15 16:39 - 01136512 _____ (Puran Software) C:\WINDOWS\system32\PuranFD.exe
2013-12-28 02:07 - 2013-08-15 16:39 - 00260992 _____ (Puran Software) C:\WINDOWS\system32\PuranDefragS.exe
2013-12-28 02:07 - 2013-08-15 16:39 - 00257408 _____ (Puran Software) C:\WINDOWS\system32\PuranDC.exe
2013-12-28 02:07 - 2013-08-15 16:39 - 00219520 _____ (Puran Software) C:\WINDOWS\system32\PuranDefrag.dll
2013-12-28 02:07 - 2013-08-15 16:39 - 00109952 _____ (Puran Software) C:\WINDOWS\system32\PuranDefragBT.exe
2013-12-27 23:57 - 2013-12-28 00:04 - 00000000 ____D C:\Program Files\RegCleaner
2013-12-27 23:11 - 2013-12-27 23:13 - 00041662 _____ C:\WINDOWS\ie8Uninst.log
2013-12-26 23:58 - 2013-12-28 09:56 - 00000274 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job
2013-12-26 15:06 - 2013-12-26 15:08 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-14 18:54 - 2013-12-14 18:55 - 00012910 _____ C:\WINDOWS\KB2898785-IE8.log
2013-12-14 18:54 - 2013-12-14 18:54 - 00004916 _____ C:\WINDOWS\KB2904266.log
2013-12-14 18:54 - 2013-12-14 18:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2904266$
2013-12-14 18:54 - 2013-12-14 18:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2013-12-14 18:50 - 2013-12-14 18:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893984$
2013-12-14 18:50 - 2013-12-14 18:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2013-12-14 18:50 - 2013-12-14 18:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2013-12-13 09:37 - 2013-12-14 18:54 - 00012101 _____ C:\WINDOWS\KB2898715.log
2013-12-13 09:36 - 2013-12-14 18:50 - 00011614 _____ C:\WINDOWS\KB2893984.log
2013-12-13 09:36 - 2013-12-14 18:50 - 00010917 _____ C:\WINDOWS\KB2893294.log
2013-12-13 09:36 - 2013-12-14 18:50 - 00010179 _____ C:\WINDOWS\KB2892075.log
2013-12-10 14:47 - 2013-12-20 15:10 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\TBHostSupport
2013-12-10 14:47 - 2013-12-10 14:47 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\WhiteListing
2013-12-10 14:47 - 2013-12-10 14:47 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\NativeMessaging

==================== One Month Modified Files and Folders =======

2013-12-28 17:00 - 2013-12-28 17:00 - 00000000 ____D C:\FRST
2013-12-28 17:00 - 2011-12-29 19:30 - 00000000 ____D C:\Documents and Settings\dom\Moje dokumenty\Pobieranie
2013-12-28 17:00 - 2007-08-24 23:28 - 00003442 _____ C:\WINDOWS\wincmd.ini
2013-12-28 16:58 - 2013-05-23 09:32 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-12-28 16:37 - 2007-08-24 12:43 - 00000000 ____D C:\Documents and Settings\dom\Pulpit
2013-12-28 16:35 - 2010-01-30 15:32 - 00001036 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-28 15:46 - 2013-12-28 15:46 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Zdjęcia_Jemaiki
2013-12-28 15:46 - 2013-12-28 15:34 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\PIT Format
2013-12-28 15:46 - 2007-08-24 14:10 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2013-12-28 15:45 - 2013-12-28 15:35 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Norma
2013-12-28 15:45 - 2007-08-25 18:32 - 00000000 ____D C:\Program Files\FORMUL.IPS
2013-12-28 15:44 - 2013-12-28 15:38 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\MultiMedia
2013-12-28 15:42 - 2008-05-23 19:51 - 00000000 ____D C:\Documents and Settings\dom\Dane aplikacji\Image Zone Express
2013-12-28 15:41 - 2013-12-28 15:40 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Canon
2013-12-28 15:40 - 2013-12-28 15:37 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Gry
2013-12-28 15:36 - 2013-12-28 15:36 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\Microsoft Office
2013-12-28 15:32 - 2013-12-28 15:31 - 00000000 ____D C:\Documents and Settings\dom\Pulpit\ALLPlayer
2013-12-28 13:23 - 2007-08-24 12:30 - 01509846 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-28 13:15 - 2007-08-24 14:12 - 00000315 _____ C:\WINDOWS\wiadebug.log
2013-12-28 10:06 - 2013-11-19 20:35 - 00000406 ____H C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job
2013-12-28 10:00 - 2013-12-28 02:07 - 00000000 ____D C:\Program Files\Puran Defrag
2013-12-28 09:57 - 2007-08-24 14:01 - 00000000 ____D C:\WINDOWS\system32\ias
2013-12-28 09:56 - 2013-12-26 23:58 - 00000274 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job
2013-12-28 09:56 - 2013-06-21 13:16 - 00000206 _____ C:\WINDOWS\Tasks\ASC6_PerformanceMonitor.job
2013-12-28 09:56 - 2013-05-24 18:00 - 00000268 _____ C:\WINDOWS\Tasks\RMAutoUpdate.job
2013-12-28 09:56 - 2013-05-05 13:03 - 00000296 _____ C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job
2013-12-28 09:56 - 2013-03-16 18:26 - 00000274 _____ C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job
2013-12-28 09:56 - 2010-01-30 15:32 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-28 09:56 - 2007-08-24 14:12 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-12-28 09:56 - 2007-08-24 12:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-12-28 09:17 - 2007-08-24 12:41 - 00032254 _____ C:\WINDOWS\SchedLgU.Txt
2013-12-28 09:16 - 2007-08-24 12:43 - 00000188 ___SH C:\Documents and Settings\dom\ntuser.ini
2013-12-28 02:08 - 2013-12-28 02:08 - 00000000 ____D C:\Program Files\SquirrelWeb
2013-12-28 02:07 - 2013-12-28 02:07 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Puran Defrag
2013-12-28 02:07 - 2007-08-24 14:10 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy
2013-12-28 01:49 - 2007-08-24 14:10 - 01090296 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-28 01:49 - 2006-03-02 13:00 - 00491118 _____ C:\WINDOWS\system32\perfh015.dat
2013-12-28 01:49 - 2006-03-02 13:00 - 00084370 _____ C:\WINDOWS\system32\perfc015.dat
2013-12-28 01:17 - 2007-08-24 12:43 - 00000000 ___RD C:\Documents and Settings\dom\Menu Start\Programy
2013-12-28 01:13 - 2009-03-02 19:36 - 00000000 ____D C:\Program Files\NAPI-PROJEKT
2013-12-28 00:50 - 2007-08-24 14:10 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
2013-12-28 00:50 - 2007-08-24 12:43 - 00000000 ___RD C:\Documents and Settings\dom\Menu Start\Programy\Autostart
2013-12-28 00:40 - 2012-09-09 18:48 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\ChomikBox
2013-12-28 00:33 - 2012-09-09 18:49 - 00000000 ____D C:\Documents and Settings\dom\.gstreamer-0.10
2013-12-28 00:05 - 2012-01-19 17:44 - 00000000 ____D C:\Program Files\Winamp
2013-12-28 00:04 - 2013-12-27 23:57 - 00000000 ____D C:\Program Files\RegCleaner
2013-12-27 23:57 - 2011-12-30 11:38 - 00000000 ____D C:\Program Files\NapiProjekt
2013-12-27 23:50 - 2010-03-06 13:43 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Conduit
2013-12-27 23:50 - 2007-08-24 12:43 - 00000000 ___HD C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji
2013-12-27 23:49 - 2009-05-31 19:17 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2013-12-27 23:36 - 2007-08-24 12:43 - 00000000 ___SD C:\Documents and Settings\dom\Ustawienia lokalne\Historia
2013-12-27 23:35 - 2008-10-26 12:33 - 00000000 ____D C:\WINDOWS\system32\pl-pl
2013-12-27 23:35 - 2007-08-24 14:01 - 00000000 ____D C:\WINDOWS\Help
2013-12-27 23:35 - 2007-08-24 12:43 - 00000000 __RHD C:\Documents and Settings\dom\Dane aplikacji
2013-12-27 23:35 - 2007-08-24 12:43 - 00000000 ___RD C:\Documents and Settings\dom\Ulubione
2013-12-27 23:35 - 2007-08-24 12:43 - 00000000 ___RD C:\Documents and Settings\dom\Moje dokumenty\Moje obrazy
2013-12-27 23:35 - 2007-08-24 12:43 - 00000000 ___RD C:\Documents and Settings\dom\Moje dokumenty\Moja muzyka
2013-12-27 23:35 - 2007-08-24 12:43 - 00000000 ___RD C:\Documents and Settings\dom\Moje dokumenty
2013-12-27 23:31 - 2008-07-14 21:24 - 00000000 ____D C:\Program Files\Adobe Media Player
2013-12-27 23:29 - 2007-09-04 16:55 - 00064634 _____ C:\WINDOWS\DPINST.LOG
2013-12-27 23:27 - 2007-08-25 19:13 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\CyberLink DVD Solution
2013-12-27 23:25 - 2007-08-24 14:08 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2013-12-27 23:25 - 2007-08-24 12:58 - 00000000 ____D C:\Program Files\Common Files\Ahead
2013-12-27 23:18 - 2013-03-16 13:15 - 00000000 ____D C:\Documents and Settings\dom\Dane aplikacji\RealNetworks
2013-12-27 23:13 - 2013-12-27 23:11 - 00041662 _____ C:\WINDOWS\ie8Uninst.log
2013-12-27 23:13 - 2007-08-24 14:10 - 01155409 _____ C:\WINDOWS\tsoc.log
2013-12-27 23:13 - 2007-08-24 14:10 - 00962376 _____ C:\WINDOWS\comsetup.log
2013-12-27 23:13 - 2007-08-24 14:10 - 00586488 _____ C:\WINDOWS\ntdtcsetup.log
2013-12-27 23:13 - 2007-08-24 14:10 - 00472136 _____ C:\WINDOWS\iis6.log
2013-12-27 23:13 - 2007-08-24 14:10 - 00179684 _____ C:\WINDOWS\ocmsn.log
2013-12-27 23:13 - 2007-08-24 14:10 - 00001393 _____ C:\WINDOWS\imsins.log
2013-12-27 23:12 - 2007-08-24 13:09 - 00367760 _____ C:\WINDOWS\updspapi.log
2013-12-27 23:11 - 2010-03-06 20:02 - 00679464 _____ C:\WINDOWS\setupapi.log
2013-12-27 23:11 - 2007-08-24 14:10 - 02994602 _____ C:\WINDOWS\FaxSetup.log
2013-12-27 23:11 - 2007-08-24 14:10 - 01475447 _____ C:\WINDOWS\ocgen.log
2013-12-27 23:11 - 2007-08-24 14:10 - 00151097 _____ C:\WINDOWS\msgsocm.log
2013-12-27 23:07 - 2007-08-24 22:38 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Symantec
2013-12-27 23:01 - 2008-03-01 12:13 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google
2013-12-27 23:01 - 2008-03-01 12:00 - 00000000 ____D C:\Program Files\Google
2013-12-27 23:01 - 2008-03-01 12:00 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Google
2013-12-27 22:58 - 2007-08-24 14:10 - 00004625 _____ C:\WINDOWS\imsins.BAK
2013-12-27 22:53 - 2013-04-28 13:15 - 00000282 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job
2013-12-27 22:18 - 2007-08-24 12:43 - 00000000 ____D C:\Documents and Settings\dom
2013-12-27 19:00 - 2013-05-24 14:39 - 00000268 _____ C:\WINDOWS\Tasks\RMSchedule.job
2013-12-27 01:32 - 2006-03-02 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2013-12-27 00:45 - 2007-09-04 19:38 - 00000000 ____D C:\Program Files\Common Files\Nokia
2013-12-27 00:45 - 2007-09-04 16:54 - 00000000 ____D C:\Program Files\Nokia
2013-12-27 00:36 - 2013-05-05 13:03 - 00000304 _____ C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job
2013-12-26 23:03 - 2013-05-23 08:29 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-26 15:08 - 2013-12-26 15:06 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-22 12:01 - 2012-11-06 21:18 - 00000282 _____ C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job
2013-12-20 15:10 - 2013-12-10 14:47 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\TBHostSupport
2013-12-20 14:17 - 2008-01-27 20:32 - 00000000 ____D C:\Program Files\TuxPaint
2013-12-18 16:31 - 2013-05-18 12:35 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Google Drive
2013-12-17 14:47 - 2007-08-24 23:28 - 00000000 ____D C:\Totalcmd
2013-12-17 14:19 - 2009-05-31 19:18 - 00000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2013-12-15 10:44 - 2009-11-19 20:31 - 00000000 ____D C:\Documents and Settings\dom\Dane aplikacji\Free Download Manager
2013-12-14 19:11 - 2007-08-24 14:07 - 00147608 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-14 18:55 - 2013-12-14 18:54 - 00012910 _____ C:\WINDOWS\KB2898785-IE8.log
2013-12-14 18:54 - 2013-12-14 18:54 - 00004916 _____ C:\WINDOWS\KB2904266.log
2013-12-14 18:54 - 2013-12-14 18:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2904266$
2013-12-14 18:54 - 2013-12-14 18:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2013-12-14 18:54 - 2013-12-13 09:37 - 00012101 _____ C:\WINDOWS\KB2898715.log
2013-12-14 18:54 - 2013-07-12 08:23 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-14 18:54 - 2007-08-24 13:12 - 00897162 _____ C:\WINDOWS\system32\TZLog.log
2013-12-14 18:50 - 2013-12-14 18:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893984$
2013-12-14 18:50 - 2013-12-14 18:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2013-12-14 18:50 - 2013-12-14 18:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2013-12-14 18:50 - 2013-12-13 09:36 - 00011614 _____ C:\WINDOWS\KB2893984.log
2013-12-14 18:50 - 2013-12-13 09:36 - 00010917 _____ C:\WINDOWS\KB2893294.log
2013-12-14 18:50 - 2013-12-13 09:36 - 00010179 _____ C:\WINDOWS\KB2892075.log
2013-12-14 18:50 - 2007-08-24 13:11 - 88123800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-10 14:47 - 2013-12-10 14:47 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\WhiteListing
2013-12-10 14:47 - 2013-12-10 14:47 - 00000000 ____D C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\NativeMessaging
2013-12-01 14:03 - 2013-05-05 13:03 - 00000322 _____ C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2006-03-02 13:00] - [2008-04-14 18:21] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2006-03-02 13:00] - [2008-04-14 18:21] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2006-03-02 13:00] - [2008-04-14 18:21] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2006-03-02 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\Windows\System32\User32.dll
[2006-03-02 13:00] - [2008-04-14 18:20] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2006-03-02 13:00] - [2008-04-14 18:21] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\Drivers\volsnap.sys
[2006-03-02 13:00] - [2008-04-14 17:01] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================