Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-02-2014 01
Ran by Hubert (administrator) on HUBERT on 11-02-2014 20:54:29
Running from C:\Documents and Settings\Hubert\Moje dokumenty\Pobieranie
Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
() C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
() C:\WINDOWS\system32\PSIService.exe
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
(PixArt Imaging Incorporation) C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe
(PixArt Imaging Incorporation) C:\WINDOWS\PixArt\PAP7501\PACTray.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(GG Network S.A.) C:\Program Files\Gadu-Gadu 10\gg.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\wcescomm.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\rapimgr.exe
() C:\Program Files\USB Video Camera\Monitor.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [WinampAgent] - C:\Program Files\Winamp\winampa.exe [37888 2010-01-13] (Nullsoft, Inc.)
HKLM\...\Run: [NWEReboot] - [X]
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [18670592 2009-07-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM\...\Run: [HP Software Update] - C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [49152 2003-06-25] (Hewlett-Packard)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\update\realsched.exe [296056 2012-01-25] (RealNetworks, Inc.)
HKLM\...\Run: [GUCI_AVS] - C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe [323584 2007-12-10] (PixArt Imaging Incorporation)
HKLM\...\Run: [PACTray] - C:\WINDOWS\PixArt\PAP7501\PACTray.exe [319488 2009-07-10] (PixArt Imaging Incorporation)
HKLM\...\Run: [PAP7501_Monitor] - C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe [323584 2007-12-10] (PixArt Imaging Incorporation)
HKLM\...\Run: [DeviceDiscovery] - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [229437 2003-05-21] (Hewlett-Packard)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3767096 2014-02-11] (AVAST Software)
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKU\.DEFAULT\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\.DEFAULT\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\.DEFAULT\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-19\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-19\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-19\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-20\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-20\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-20\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Run: [Gadu-Gadu 10] - C:\Program Files\Gadu-Gadu 10\gg.exe [13374048 2011-07-04] (GG Network S.A.)
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Run: [H/PC Connection Agent] - C:\Program Files\Microsoft ActiveSync\wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation)
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-07-05] (Google Inc.)
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Run: [Badoo Desktop] - C:\Documents and Settings\All Users\Dane aplikacji\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Run: [ALLUpdate] - C:\Program Files\ALLPlayer\ALLUpdate.exe [1379840 2011-08-16] ()
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Run: [Xvid] - C:\Program Files\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Run: [NextLive] - C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\Hubert\Dane aplikacji\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-299502267-1035525444-1177238915-1003\...\Policies\Explorer: [NoResolveSearch] 1
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Monitor.lnk
ShortcutTarget: Monitor.lnk -> C:\Program Files\USB Video Camera\Monitor.exe ()
Startup: C:\Documents and Settings\Hubert\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=128
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {27F68CFD-0F10-42C8-BD3F-F92A1E95944E} URL = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=100474&mntrId=4c1a2f0b00000000000000241d2b6d91
SearchScopes: HKCU - {8A244612-A1F7-11E0-95C0-E71F4824019B} URL = http://badoo.com/startpage/?source=bsb&q={searchTerms}
SearchScopes: HKCU - {9C558FFB-DF1C-4545-9611-8E10174DD7F9} URL = http://websearch.ask.com/redirect?client=ie&tb=VD&o=14778&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=VX&apn_dtid=YYYYYYYYPL&apn_uid=63772DCA-0346-4945-93DE-5E23F54993EE&apn_sauid=AD82888A-073D-4068-9FEA-3CD6D69BFD14
BHO: greattsAvEr - {0CD9561A-8DC4-2E5D-D151-13A033DC0F3B} - C:\Program Files\greattsAvEr\RInt8.dll ()
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
BHO: YouTube To ALLPlayer - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org)
BHO: YoutubeAdblocker - {62A67AFE-0B72-2E83-B072-062CE5BC4E46} - C:\Program Files\YoutubeAdblocker\vktF2.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} -  No File
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.60.254

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Hubert\Dane aplikacji\Mozilla\Firefox\Profiles\boazous3.default-1392146974343
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\WINDOWS\system32\npdeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=15.0.1.13 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nppl3260;version=6.0.12.69 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.1.13 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.1.13 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.1.13 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.1.13 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.69 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\Documents and Settings\All Users\Dane aplikacji\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\Hubert\Dane aplikacji\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\BearShareWebSearch.xml
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-12-20]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-12-20]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-01-25]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-06-18]

Chrome: 
=======
CHR HomePage: hxxp://www.gazeta.pl/0,0.html?p=136
CHR Plugin: (Widevine Content Decryption Module) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Documents and Settings\Hubert\Dane aplikacji\Mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (BitCometAgent) - C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll (BitComet)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (LiveVDO plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll No File
CHR Plugin: (Winamp Application Detector) - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RocketLife Secure Plug-In Layer) - C:\Documents and Settings\All Users\Dane aplikacji\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
CHR Plugin: (Unity Player) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\WINDOWS\system32\npdeployJava1.dll (Oracle Corporation)
CHR Extension: (YouTube) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-03]
CHR Extension: (Szukaj w Google) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-03]
CHR Extension: (avast! Online Security) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-09-19]
CHR Extension: (Keep My Opt Outs) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\hhnjdplhmcnkiecampfdgfjilccfpfoe [2014-01-28]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-03-07]
CHR Extension: (YTTBookMMark) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\mmcccllnlcfemdmfmlllhbccmlghammm [2014-01-28]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-19]
CHR Extension: (Gmail) - C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-03]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-01-25]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-02-11] (AVAST Software)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-01-26] (Foxit Corporation)
R2 GEST Service; C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [68136 2008-09-24] ()
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2013-12-18] (Oracle Corporation)
R2 ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [174656 2006-11-02] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)
S2 Update FindRight; "C:\Program Files\FindRight\updateFindRight.exe" [X]

==================== Drivers (Whitelisted) ====================

R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21419 2009-07-01] (Meetinghouse Data Communications)
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1684736 2008-08-05] (Creative)
R1 aswKbd; C:\WINDOWS\system32\Drivers\aswKbd.sys [24408 2012-03-07] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-02-11] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-02-11] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-01-10] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [775952 2014-02-11] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [410784 2014-02-11] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-02-11] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180248 2014-01-10] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S1 Changer; C:\WINDOWS\system32\Drivers\Changer.sys [8192 2008-04-13] (Microsoft Corporation)
R3 gdrv; C:\WINDOWS\gdrv.sys [16608 2014-02-11] (Windows (R) 2000 DDK provider)
R3 GUCI_AVS; C:\WINDOWS\System32\DRIVERS\GUCI_AVS.sys [543616 2009-11-06] (PixArt Imaging Incorporation)
S1 lbrtfdc; C:\WINDOWS\system32\Drivers\lbrtfdc.sys [34688 2008-04-13] (Toshiba Corp.)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1389056 2006-01-04] (Creative Technology Ltd.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [436792 2011-06-02] ()
S3 V0260VID; C:\WINDOWS\System32\DRIVERS\V0260Vid.sys [178913 2006-11-04] (Creative Technology Ltd.)
S3 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation)
U3 ajmyh0xp; C:\WINDOWS\system32\Drivers\ajmyh0xp.sys [0 ] (Microsoft Corporation)
S3 Ca2001v; System32\Drivers\Ca2001v.sys [X]
S4 IntelIde; No ImagePath
S3 RT61; system32\DRIVERS\RT61.sys [X]
S3 StarOpen; No ImagePath
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2008-05-02] ()
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-11 20:49 - 2014-02-11 20:49 - 00008346 _____ () C:\Documents and Settings\Hubert\Pulpit\AdwCleaner[S0].txt
2014-02-11 20:43 - 2014-02-11 20:45 - 00000000 ____D () C:\AdwCleaner
2014-02-11 20:29 - 2014-02-11 20:29 - 00000000 ____D () C:\Documents and Settings\Hubert\Pulpit\Stare dane programu Firefox
2014-02-11 20:18 - 2013-12-18 21:10 - 00877480 _____ (Oracle Corporation) C:\WINDOWS\system32\npdeployJava1.dll
2014-02-11 20:18 - 2013-12-18 21:10 - 00800168 _____ (Oracle Corporation) C:\WINDOWS\system32\deployJava1.dll
2014-02-10 20:23 - 2014-02-10 20:23 - 00049772 _____ () C:\Documents and Settings\Hubert\Pulpit\FRST.txt
2014-02-10 20:23 - 2014-02-10 20:23 - 00036548 _____ () C:\Documents and Settings\Hubert\Pulpit\Addition.txt
2014-02-10 20:19 - 2014-02-11 20:54 - 00000000 ____D () C:\FRST
2014-02-10 18:28 - 2014-02-10 18:28 - 00054662 _____ () C:\Documents and Settings\Hubert\Pulpit\Extras.Txt
2014-02-10 18:27 - 2014-02-10 18:27 - 00215112 _____ () C:\Documents and Settings\Hubert\Pulpit\OTL.Txt
2014-02-10 18:20 - 2014-02-11 18:01 - 00000000 ____D () C:\Program Files\FindRight
2014-02-04 22:49 - 2014-02-04 22:49 - 00019230 _____ () C:\Documents and Settings\Hubert\Moje dokumenty\muza luty 2014.txt
2014-02-04 22:31 - 2014-02-04 22:31 - 00006873 _____ () C:\Documents and Settings\Hubert\Pulpit\xxxxxxxxxxxxxxxxxx.nri
2014-01-28 22:37 - 2014-01-28 22:37 - 00005724 _____ () C:\WINDOWS\system32\jupdate-1.7.0_51-b13.log
2014-01-28 22:37 - 2014-01-28 22:37 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Java
2014-01-28 22:37 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-28 22:37 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-28 22:37 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-28 22:37 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-28 22:03 - 2014-02-11 20:21 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\YoutubeAdblocker
2014-01-28 22:03 - 2014-02-11 18:02 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\greattsAvEr
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Program Files\YoutubeAdblocker
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Program Files\greattsAvEr
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne\Dane aplikacji\Torch
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne\Dane aplikacji
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne\Dane aplikacji\Torch
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne\Dane aplikacji
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji\Torch
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\a3e3a92aef77a455
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Torch
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator
2014-01-28 22:01 - 2014-01-28 22:01 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\InstallMate
2014-01-12 21:23 - 2014-01-12 21:23 - 00001703 _____ () C:\Documents and Settings\All Users\Pulpit\Foxit Reader.lnk
2014-01-12 21:23 - 2014-01-12 21:23 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Foxit Reader
2014-01-12 21:23 - 2014-01-12 21:23 - 00000000 ____D () C:\Documents and Settings\All Users\Foxit Software

==================== One Month Modified Files and Folders =======

2014-02-11 20:54 - 2014-02-10 20:19 - 00000000 ____D () C:\FRST
2014-02-11 20:54 - 2009-08-13 19:45 - 00000000 ____D () C:\Documents and Settings\Hubert\Moje dokumenty\Pobieranie
2014-02-11 20:52 - 2011-10-18 18:52 - 00000484 _____ () C:\WINDOWS\Tasks\HP Photo Creations Communicator.job
2014-02-11 20:49 - 2014-02-11 20:49 - 00008346 _____ () C:\Documents and Settings\Hubert\Pulpit\AdwCleaner[S0].txt
2014-02-11 20:49 - 2009-07-02 02:14 - 00000000 ____D () C:\Documents and Settings\Hubert\Pulpit
2014-02-11 20:48 - 2014-01-07 22:28 - 00000000 ____D () C:\Documents and Settings\Hubert\Dane aplikacji\newnext.me
2014-02-11 20:48 - 2012-04-14 23:33 - 01071062 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-11 20:47 - 2012-07-16 20:33 - 00000366 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-02-11 20:47 - 2012-01-25 22:40 - 00000280 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-299502267-1035525444-1177238915-1003.job
2014-02-11 20:47 - 2011-09-04 14:27 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-02-11 20:47 - 2011-09-04 14:27 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-02-11 20:47 - 2010-02-21 11:27 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-11 20:47 - 2009-07-02 02:16 - 00000125 _____ () C:\service.log
2014-02-11 20:47 - 2009-07-02 02:15 - 00016608 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-02-11 20:47 - 2009-07-02 02:14 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-11 20:46 - 2009-07-02 02:14 - 00032500 _____ () C:\WINDOWS\SchedLgU.Txt
2014-02-11 20:46 - 2009-07-02 02:14 - 00000188 ___SH () C:\Documents and Settings\Hubert\ntuser.ini
2014-02-11 20:46 - 2009-07-02 02:14 - 00000000 ____D () C:\Documents and Settings\Hubert
2014-02-11 20:45 - 2014-02-11 20:43 - 00000000 ____D () C:\AdwCleaner
2014-02-11 20:45 - 2009-07-02 03:57 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-02-11 20:45 - 2009-07-02 02:14 - 00000000 __RHD () C:\Documents and Settings\Hubert\Dane aplikacji
2014-02-11 20:45 - 2009-07-02 02:14 - 00000000 ___HD () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji
2014-02-11 20:40 - 2014-01-07 22:27 - 00000000 ____D () C:\Documents and Settings\Hubert\Menu Start\Programy\Mobogenie
2014-02-11 20:40 - 2011-10-18 18:40 - 00000478 _____ () C:\WINDOWS\Tasks\At2.job
2014-02-11 20:29 - 2014-02-11 20:29 - 00000000 ____D () C:\Documents and Settings\Hubert\Pulpit\Stare dane programu Firefox
2014-02-11 20:27 - 2010-05-20 13:40 - 00000000 ____D () C:\Program Files\SkanerOnline
2014-02-11 20:27 - 2010-02-21 11:27 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-11 20:26 - 2009-07-02 03:59 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-02-11 20:26 - 2009-07-02 03:59 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy
2014-02-11 20:26 - 2009-07-02 02:07 - 00000000 ____D () C:\WINDOWS\system32\Macromed
2014-02-11 20:26 - 2009-07-01 20:50 - 00000000 ____D () C:\Documents and Settings\Hubert\Dane aplikacji\Macromedia
2014-02-11 20:26 - 2009-07-01 20:35 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-02-11 20:26 - 2009-07-01 20:35 - 00000000 ____D () C:\Program Files\Adobe
2014-02-11 20:26 - 2009-07-01 20:35 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Adobe
2014-02-11 20:22 - 2009-07-02 02:14 - 00000000 ___RD () C:\Documents and Settings\Hubert\Menu Start\Programy
2014-02-11 20:21 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\YoutubeAdblocker
2014-02-11 20:19 - 2014-01-07 22:28 - 00000000 ____D () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Mobogenie
2014-02-11 20:18 - 2009-07-20 11:03 - 00000000 ____D () C:\Program Files\Java
2014-02-11 20:04 - 2013-03-22 17:42 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2014-02-11 20:04 - 2012-06-21 17:43 - 00001744 _____ () C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk
2014-02-11 20:03 - 2011-06-18 15:48 - 00775952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-02-11 20:03 - 2010-07-13 19:03 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-02-11 20:03 - 2009-07-01 20:33 - 00410784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-02-11 20:03 - 2009-07-01 20:33 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-02-11 20:03 - 2009-07-01 20:33 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-02-11 20:03 - 2009-07-01 20:32 - 00270240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-02-11 18:02 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\greattsAvEr
2014-02-11 18:01 - 2014-02-10 18:20 - 00000000 ____D () C:\Program Files\FindRight
2014-02-11 17:59 - 2011-03-15 20:37 - 00002513 _____ () C:\Documents and Settings\Hubert\Pulpit\Microsoft Office Word 2007.lnk
2014-02-11 17:12 - 2013-02-20 23:27 - 00000000 ____D () C:\Documents and Settings\Hubert\Dane aplikacji\Skype
2014-02-11 00:16 - 2009-07-26 09:59 - 00000464 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{5AEC3E9C-B445-4042-9905-8E7BE7914D48}.job
2014-02-10 20:23 - 2014-02-10 20:23 - 00049772 _____ () C:\Documents and Settings\Hubert\Pulpit\FRST.txt
2014-02-10 20:23 - 2014-02-10 20:23 - 00036548 _____ () C:\Documents and Settings\Hubert\Pulpit\Addition.txt
2014-02-10 20:03 - 2013-08-27 19:03 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji\Foxit Software
2014-02-10 19:40 - 2011-10-18 18:40 - 00000478 _____ () C:\WINDOWS\Tasks\At3.job
2014-02-10 18:28 - 2014-02-10 18:28 - 00054662 _____ () C:\Documents and Settings\Hubert\Pulpit\Extras.Txt
2014-02-10 18:27 - 2014-02-10 18:27 - 00215112 _____ () C:\Documents and Settings\Hubert\Pulpit\OTL.Txt
2014-02-09 21:38 - 2008-04-15 13:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-02-07 21:39 - 2009-07-26 18:36 - 00000116 _____ () C:\WINDOWS\NeroDigital.ini
2014-02-07 20:15 - 2009-09-20 09:58 - 00000000 ____D () C:\Documents and Settings\Hubert\.gstreamer-0.10
2014-02-07 20:13 - 2009-09-20 09:58 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
2014-02-06 22:25 - 2009-08-19 18:34 - 00000000 ____D () C:\Documents and Settings\Hubert\Moje dokumenty\Firma
2014-02-05 22:40 - 2012-01-25 22:40 - 00000288 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-299502267-1035525444-1177238915-1003.job
2014-02-04 22:49 - 2014-02-04 22:49 - 00019230 _____ () C:\Documents and Settings\Hubert\Moje dokumenty\muza luty 2014.txt
2014-02-04 22:49 - 2009-07-02 02:14 - 00000000 ___RD () C:\Documents and Settings\Hubert\Moje dokumenty
2014-02-04 22:31 - 2014-02-04 22:31 - 00006873 _____ () C:\Documents and Settings\Hubert\Pulpit\xxxxxxxxxxxxxxxxxx.nri
2014-02-04 18:48 - 2009-07-01 20:37 - 00000000 ____D () C:\Documents and Settings\Hubert\Dane aplikacji\Winamp
2014-02-04 18:32 - 2010-07-13 19:16 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-02-01 08:38 - 2009-07-08 20:11 - 00166400 _____ () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-01 08:37 - 2009-09-20 09:43 - 00000000 ____D () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\cache
2014-01-29 18:43 - 2009-07-05 08:37 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-28 23:35 - 2009-07-02 02:14 - 00000000 ___RD () C:\Documents and Settings\Hubert\Ulubione
2014-01-28 23:21 - 2009-07-05 09:20 - 00000000 ____D () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 23:10 - 2011-10-18 18:41 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight
2014-01-28 22:37 - 2014-01-28 22:37 - 00005724 _____ () C:\WINDOWS\system32\jupdate-1.7.0_51-b13.log
2014-01-28 22:37 - 2014-01-28 22:37 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Java
2014-01-28 22:37 - 2009-07-20 11:01 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-01-28 22:36 - 2009-07-02 03:59 - 01097792 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-28 22:36 - 2008-04-15 13:00 - 00494354 _____ () C:\WINDOWS\system32\perfh015.dat
2014-01-28 22:36 - 2008-04-15 13:00 - 00085514 _____ () C:\WINDOWS\system32\perfc015.dat
2014-01-28 22:16 - 2011-10-02 17:54 - 00000000 ____D () C:\Documents and Settings\Hubert\dwhelper
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Program Files\YoutubeAdblocker
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Program Files\greattsAvEr
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne\Dane aplikacji\Torch
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne\Dane aplikacji
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0\Ustawienia lokalne
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\SUPPORT_388945a0
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne\Dane aplikacji\Torch
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne\Dane aplikacji
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik\Ustawienia lokalne
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Pomocnik
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji\Torch
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne\Dane aplikacji
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość\Ustawienia lokalne
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Gość
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\a3e3a92aef77a455
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Torch
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Comodo
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator\Ustawienia lokalne
2014-01-28 22:03 - 2014-01-28 22:03 - 00000000 ____D () C:\Documents and Settings\Administrator
2014-01-28 22:01 - 2014-01-28 22:01 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\InstallMate
2014-01-20 21:59 - 2010-11-05 17:35 - 00000000 ____D () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\BearShare
2014-01-19 22:11 - 2014-01-07 22:28 - 00000000 ____D () C:\Documents and Settings\Hubert\Ustawienia lokalne\Dane aplikacji\genienext
2014-01-16 21:40 - 2010-05-20 17:12 - 00000000 ____D () C:\jzk
2014-01-12 21:23 - 2014-01-12 21:23 - 00001703 _____ () C:\Documents and Settings\All Users\Pulpit\Foxit Reader.lnk
2014-01-12 21:23 - 2014-01-12 21:23 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Foxit Reader
2014-01-12 21:23 - 2014-01-12 21:23 - 00000000 ____D () C:\Documents and Settings\All Users\Foxit Software
2014-01-12 21:23 - 2013-04-04 17:09 - 00000000 ____D () C:\Documents and Settings\Hubert\Dane aplikacji\Foxit Software

Files to move or delete:
====================
C:\Windows\Tasks\At1.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At3.job
C:\Windows\Tasks\At4.job


Some content of TEMP:
====================
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\Checkupdate.exe
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\down.2448.assistant_v3.exe
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\Foxit Reader Updater.exe
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\Foxit Updater.exe
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\gcapi_dll.dll
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\gtapi_signed.dll
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\Quarantine.exe
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\t.dll
C:\Documents and Settings\Hubert\Ustawienia lokalne\Temp\TsuE8307100.dll


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2009-04-22 19:58] - [2009-04-22 19:58] - 1850368 ____A (Microsoft Corporation) 1f989c8f6c31ab765cd2134e2d13f789 

C:\WINDOWS\system32\winlogon.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0111104 ____A (Microsoft Corporation) 8816e60bf654353e8e0d35ed98875445 

C:\WINDOWS\system32\User32.dll
[2008-04-15 13:00] - [2008-04-15 13:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2008-04-15 13:00] - [2008-04-15 13:00] - 0401408 ____A (Microsoft Corporation) c9e5ac78d9a00b1de8ce2ad1bdde7e42 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2008-04-15 13:00] - [2008-04-15 13:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================