Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-03-2014 01
Ran by x (administrator) on PECECIK on 10-03-2014 22:43:14
Running from C:\Documents and Settings\x\Moje dokumenty\Downloads
Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Lexmark International, Inc.) C:\WINDOWS\system32\LEXBCES.EXE
(Lexmark International, Inc.) C:\WINDOWS\system32\LEXPPS.EXE
() C:\Documents and Settings\All Users\Dane aplikacji\BitGuard\2.7.1832.68\{16cdff19-861d-48e3-a751-d99a27784753}\BitGuard.exe
() C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe
() C:\Program Files\Mobogenie\MgAssist.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
() C:\Program Files\Mobogenie\DaemonProcess.exe
() C:\Documents and Settings\All Users\Dane aplikacji\BitGuard\2.7.1832.68\{16cdff19-861d-48e3-a751-d99a27784753}\BitGuard.exe
() C:\Program Files\iPlus\iPlusChecker.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\update\realsched.exe
() C:\Documents and Settings\All Users\Dane aplikacji\Mobile Partner\OnlineUpdate\ouc.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Documents and Settings\x\Moje dokumenty\Downloads\727qukid.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] - C:\WINDOWS\system32\NvCpl.dll [13762560 2009-07-08] (NVIDIA Corporation)
HKLM\...\Run: [iPlusManager] - C:\Program Files\iPlus\iPlusChecker.exe [446464 2010-01-04] ()
HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\update\realsched.exe [273544 2011-02-12] (RealNetworks, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [249064 2010-10-29] (Sun Microsystems, Inc.)
HKLM\...\Run: [WinampAgent] - C:\Program Files\Winamp\winampa.exe [74752 2010-07-12] (Nullsoft, Inc.)
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [18789920 2009-12-08] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [32768 2004-11-02] (Cyberlink Corp.)
HKLM\...\Run: [nwiz] - nwiz.exe /installquiet
HKLM\...\Run: [NvMediaCenter] - C:\WINDOWS\system32\NvMcTray.dll [86016 2009-07-08] (NVIDIA Corporation)
HKLM\...\Run: [NeroFilterCheck] - C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [761536 2014-01-06] ()
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\Run: [uTorrent] - C:\Program Files\uTorrent\uTorrent.exe [328568 2010-11-05] (BitTorrent, Inc.)
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\Run: [IPLA!] - C:\Program Files\ipla\ipla.exe [21205088 2013-09-12] (Redefine Sp z o.o.)
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\Run: [Gadu-Gadu 10] - C:\Program Files\Gadu-Gadu 10\gg.exe [12653152 2010-09-08] (GG Network S.A.)
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\Run: [Facebook Update] - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2013-04-05] (Facebook Inc.)
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\Run: [MSConfig] - C:\Documents and Settings\x\nrimovzj.exe [35004416 2014-03-02] (Daniel Pistelli)
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS\system32\Macromed\Flash\FlashUtil11e_Plugin.exe [247968 2012-01-27] (Adobe Systems, Inc.)
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {0530887e-bcfd-11df-8066-6cf049d09004} - G:\AutoRun.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {1ee22890-204f-11e1-8345-001e101f5adc} - J:\RunGame.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {3802155c-c14a-11e2-992b-6cf049d09004} - K:\AutoRun.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {3b191c80-317d-11e1-8374-001e101f9308} - M:\AutoRun.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {746aeaf0-8d6a-11e2-98b2-6cf049d09004} - H:\AutoRun.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {7983b582-34a4-11e1-837e-001e101f4bce} - K:\AutoRun.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {8bcbbc2f-1965-11e3-afff-6cf049d09004} - H:\LGAutoRun.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {8daafcd0-9caf-11e3-b028-6cf049d09004} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RECYCLER\S-0-7-73-313979278-2344835155-148054291-098\urgklo.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {9123c88a-4c86-11e2-982e-001e101f4c53} - J:\RunClubSanDisk.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {949827b2-711f-11e1-9727-001e101f731c} - G:\RunGame.exe
HKU\S-1-5-21-839522115-484763869-1417001333-1003\...\MountPoints2: {b3a4db70-9ed3-11e2-98d9-6cf049d09004} - H:\AutoRun.exe
AppInit_DLLs: c:\docume~1\alluse~1\daneap~1\bitguard\271832~1.68\{16cdf~1\bitguard.dll => C:\Documents and Settings\All Users\Dane aplikacji\BitGuard\2.7.1832.68\{16cdff19-861d-48e3-a751-d99a27784753}\BitGuard.dll [3618304 2013-11-18] ()
Lsa: [Authentication Packages] msv1_0 nwprovau

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112670&tt=4712_1&babsrc=HP_sst&mntrId=1467a05b000000000000001e101fbcad
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?barid={A4056996-4755-4AE7-899B-C835AC1D870D}
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={A4056996-4755-4AE7-899B-C835AC1D870D}
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={A4056996-4755-4AE7-899B-C835AC1D870D}
SearchScopes: HKLM - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=112670&tt=4712_1&babsrc=SP_sst&mntrId=1467a05b000000000000001e101fbcad
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=112670&tt=4712_1&babsrc=SP_sst&mntrId=1467a05b000000000000001e101fbcad
SearchScopes: HKCU - {85039B6F-5035-430B-87DD-7234D4C419D8} URL = http://websearch.ask.com/redirect?client=ie&tb=MPC2&o=41647997&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=8E&apn_dtid=YYYYYYM4PL&apn_uid=653fffd0-2127-479f-a275-76566b301c66&apn_sauid=1ED16C7F-85D9-4836-AC75-2145862D468A&
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={A4056996-4755-4AE7-899B-C835AC1D870D}
SearchScopes: HKCU - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
Toolbar: HKLM - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 212.2.96.51 212.2.96.52

FireFox:
========
FF ProfilePath: C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default
FF user.js: detected! => C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\user.js
FF SelectedSearchEngine: SweetIM Search
FF Homepage: hxxp://home.sweetim.com/?barid={A4056996-4755-4AE7-899B-C835AC1D870D}
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\WINDOWS\system32\C2MP\npdivx32.dll (DivX,Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=12.0.1.633 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=12.0.1.633 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.633 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=12.0.1.633 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\searchplugins\browsemngr.xml
FF SearchPlugin: C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\searchplugins\winamp-search.xml
FF SearchPlugin: C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\searchplugins\wrzuta.xml
FF Extension: Conduit Engine  - C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\Extensions\engine@conduit.com [2011-05-07]
FF Extension: Winamp Toolbar - C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\Extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2010-09-11]
FF Extension: uTorrentBar Community Toolbar - C:\Documents and Settings\x\Dane aplikacji\Mozilla\Firefox\Profiles\p8yb89ra.default\Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2012-01-13]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-02-12]
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2010-09-13]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
CHR DefaultSearchKeyword: babylon.com
CHR DefaultSearchProvider: Search the web (Babylon)
CHR DefaultSearchURL: http://search.babylon.com/?q={searchTerms}&affID=112670&tt=4712_1&babsrc=SP_sst&mntrId=1467a05b000000000000001e101fbcad
CHR DefaultNewTabURL: 
CHR Plugin: (Widevine Content Decryption Module) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\pdf.dll ()
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (BonanzaDealsLive Update) - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (DivX Web Player) - C:\WINDOWS\system32\C2MP\npdivx32.dll (DivX,Inc.)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-02]
CHR Extension: (Dysk Google) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-02]
CHR Extension: (YouTube) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-02]
CHR Extension: (Szukaj w Google) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-02]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-06-02]
CHR Extension: (Google Wallet) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25]
CHR Extension: (Gmail) - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-02]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-02-12]

========================== Services (Whitelisted) =================

R2 BitGuard; C:\Documents and Settings\All Users\Dane aplikacji\BitGuard\2.7.1832.68\{16cdff19-861d-48e3-a751-d99a27784753}\BitGuard.exe [3780064 2013-11-18] ()
R2 HWDeviceService.exe; C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2011-02-02] (Sun Microsystems, Inc.)
R2 LexBceS; C:\WINDOWS\system32\LEXBCES.EXE [303104 2003-02-25] (Lexmark International, Inc.)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MgAssistService; C:\Program Files\Mobogenie\MgAssist.exe [70848 2014-03-03] ()
S2 Mobile Partner. RunOuc; C:\Program Files\Mobile Partner\UpdateDog\ouc.exe [655744 2012-09-22] ()
R2 NWCWorkstation; C:\WINDOWS\System32\nwwks.dll [65536 2009-09-10] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [43520 2006-07-01] (Advanced Micro Devices)
S3 AndNetDiag; C:\WINDOWS\System32\DRIVERS\lgandnetdiag.sys [23168 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\WINDOWS\System32\DRIVERS\lgandnetmodem.sys [27776 2013-06-28] (LG Electronics Inc.)
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2009-04-07] ()
R3 huawei_cdcacm; C:\WINDOWS\System32\DRIVERS\ew_jucdcacm.sys [96000 2012-08-20] (Huawei Technologies Co., Ltd.)
R3 huawei_cdcecm; C:\WINDOWS\System32\DRIVERS\ew_jucdcecm.sys [69760 2012-08-20] (Huawei Technologies Co., Ltd.)
R3 huawei_ext_ctrl; C:\WINDOWS\System32\DRIVERS\ew_juextctrl.sys [27520 2012-08-20] (Huawei Technologies Co., Ltd.)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R0 nvatabus; C:\WINDOWS\system32\Drivers\nvatabus.sys [100736 2009-09-10] (NVIDIA Corporation)
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [66688 2009-07-01] (NVIDIA Corporation)
R0 nvgts; C:\WINDOWS\System32\DRIVERS\nvgts.sys [164896 2009-06-30] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [13824 2009-07-01] (NVIDIA Corporation)
R2 NwlnkIpx; C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys [88320 2009-09-10] (Microsoft Corporation)
R2 NwlnkNb; C:\WINDOWS\System32\DRIVERS\nwlnknb.sys [63232 2009-09-10] (Microsoft Corporation)
R2 NwlnkSpx; C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys [55936 2009-09-10] (Microsoft Corporation)
R3 NWRDR; C:\WINDOWS\System32\DRIVERS\nwrdr.sys [163584 2009-09-10] (Microsoft Corporation)
R1 prodrv06; C:\WINDOWS\System32\drivers\prodrv06.sys [54272 2004-04-08] (Protection Technology)
R0 prohlp02; C:\WINDOWS\System32\drivers\prohlp02.sys [70400 2004-04-08] (Protection Technology)
R0 prosync1; C:\WINDOWS\System32\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)
R0 sfhlp01; C:\WINDOWS\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)
R0 Si3112; C:\WINDOWS\system32\Drivers\Si3112.sys [62336 2009-09-10] (Silicon Image, Inc.)
S0 Si3114r5; C:\WINDOWS\system32\Drivers\Si3114r5.sys [195072 2009-09-10] (Silicon Image, Inc)
R0 Si3124; C:\WINDOWS\system32\Drivers\Si3124.sys [69248 2009-09-10] (Silicon Image, Inc.)
R0 Si3132; C:\WINDOWS\system32\Drivers\Si3132.sys [74672 2009-09-10] (Silicon Image, Inc.)
R0 Si3132r5; C:\WINDOWS\system32\Drivers\Si3132r5.sys [215856 2009-09-10] (Silicon Image, Inc)
R0 Si3531; C:\WINDOWS\system32\Drivers\Si3531.sys [212520 2009-09-10] (Silicon Image, Inc)
R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 gdrv; \??\C:\WINDOWS\gdrv.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S4 IntelIde; No ImagePath
S4 sptd; System32\Drivers\sptd.sys [X]
U1 WS2IFSL; 
U3 pxldapow; \??\C:\DOCUME~1\x\USTAWI~1\Temp\pxldapow.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-10 22:41 - 2014-03-10 22:43 - 00000000 ____D () C:\FRST
2014-03-10 22:39 - 2014-03-10 22:39 - 00051339 _____ () C:\Documents and Settings\x\Pulpit\gmer.txt
2014-03-07 20:51 - 2014-03-08 03:00 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempLS3676.html
2014-03-07 20:51 - 2014-03-08 03:00 - 00002089 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempVp3676.html
2014-03-07 11:55 - 2014-03-07 13:46 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempZPq216.html
2014-03-07 11:55 - 2014-03-07 13:46 - 00002089 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempZMc216.html
2014-03-05 17:24 - 2014-03-05 17:24 - 00311296 _____ () C:\Documents and Settings\x\dbupwj.exe
2014-03-05 17:18 - 2014-03-05 22:36 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempPr3688.html
2014-03-04 07:27 - 2014-03-04 07:43 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempTMu524.html
2014-03-04 07:27 - 2014-03-04 07:43 - 00002089 _____ () C:\Documents and Settings\x\Ustawienia lokalne\Tempryx524.html
2014-03-03 20:50 - 2014-03-03 20:50 - 00000676 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\e-Deklaracje.lnk
2014-03-03 20:50 - 2014-03-03 20:50 - 00000670 _____ () C:\Documents and Settings\All Users\Pulpit\e-Deklaracje.lnk
2014-03-03 20:50 - 2014-03-03 20:50 - 00000000 ____D () C:\Program Files\e-Deklaracje
2014-03-03 20:50 - 2014-03-03 20:50 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
2014-03-03 20:50 - 2014-03-03 20:50 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\e-Deklaracje
2014-03-03 20:50 - 2014-03-03 20:50 - 00000000 ____D () C:\Documents and Settings\Default User\Dane aplikacji\Macromedia
2014-03-03 20:49 - 2014-03-03 20:49 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2014-03-03 20:25 - 2014-03-03 20:32 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempUa2784.html
2014-03-02 20:43 - 2014-03-02 20:43 - 00000000 ____D () C:\Documents and Settings\x\Pulpit\mp3
2014-03-02 20:38 - 2014-03-02 20:38 - 35004416 ____H (Daniel Pistelli) C:\Documents and Settings\x\nrimovzj.exe
2014-02-28 19:43 - 2014-03-02 20:37 - 00000000 ____D () C:\Documents and Settings\x\Pulpit\Nowy folder
2014-02-28 18:06 - 2014-02-28 18:10 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\Tempxa1128.html
2014-02-28 18:06 - 2014-02-28 18:10 - 00002089 _____ () C:\Documents and Settings\x\Ustawienia lokalne\Tempnl1128.html
2014-02-23 22:31 - 2014-02-23 22:59 - 00065536 _____ () C:\WINDOWS\system32\config\TuneUp.evt
2014-02-23 22:31 - 2014-02-23 22:31 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\TuneUp Software
2014-02-23 22:30 - 2014-02-23 22:31 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
2014-02-23 22:29 - 2014-02-23 22:42 - 00000000 __SHD () C:\Documents and Settings\All Users\Dane aplikacji\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2014-02-23 21:25 - 2014-02-23 21:25 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
2014-02-23 20:51 - 2014-02-23 20:51 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\Malwarebytes
2014-02-23 20:50 - 2014-02-23 20:50 - 00000784 _____ () C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
2014-02-23 20:50 - 2014-02-23 20:50 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-23 20:50 - 2014-02-23 20:50 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware
2014-02-23 20:50 - 2014-02-23 20:50 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-02-23 20:50 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-02-23 20:29 - 2014-03-10 22:18 - 00000270 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-839522115-484763869-1417001333-1003.job
2014-02-23 20:10 - 2014-02-23 20:10 - 00000000 ____D () C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\ESET
2014-02-23 19:55 - 2014-02-23 19:55 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\BinarySense
2014-02-23 19:55 - 2014-02-23 19:55 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Licenses
2014-02-23 18:36 - 2014-02-23 18:36 - 00000000 ____D () C:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji\Google
2014-02-23 18:20 - 2014-02-23 18:56 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TemplE3588.html

==================== One Month Modified Files and Folders =======

2014-03-10 22:43 - 2014-03-10 22:41 - 00000000 ____D () C:\FRST
2014-03-10 22:40 - 2010-09-10 23:07 - 00000000 ____D () C:\Documents and Settings\x\Pulpit
2014-03-10 22:39 - 2014-03-10 22:39 - 00051339 _____ () C:\Documents and Settings\x\Pulpit\gmer.txt
2014-03-10 22:33 - 2010-09-13 11:08 - 00001026 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-10 22:18 - 2014-02-23 20:29 - 00000270 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-839522115-484763869-1417001333-1003.job
2014-03-10 22:18 - 2011-02-12 14:57 - 00000278 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-839522115-484763869-1417001333-1003.job
2014-03-10 22:12 - 2014-01-06 15:50 - 00005479 _____ () C:\Documents and Settings\x\daemonprocess.txt
2014-03-10 21:43 - 2010-09-10 22:59 - 00378230 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-10 21:39 - 2013-06-06 10:35 - 06360114 _____ () C:\Documents and Settings\x\debug.log
2014-03-10 21:39 - 2010-11-05 12:04 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\uTorrent
2014-03-10 21:39 - 2010-09-10 23:07 - 00000000 ___HD () C:\Documents and Settings\x\Ustawienia lokalne
2014-03-10 21:38 - 2010-09-10 18:39 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\ipla
2014-03-10 21:37 - 2013-04-04 15:31 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-03-10 21:37 - 2013-04-04 15:31 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-03-10 21:37 - 2010-09-13 11:08 - 00001022 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-10 21:37 - 2009-07-08 09:58 - 00237301 _____ () C:\WINDOWS\system32\NvApps.xml
2014-03-10 21:36 - 2010-09-10 23:05 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-03-10 21:35 - 2010-09-10 23:07 - 00000188 ___SH () C:\Documents and Settings\x\ntuser.ini
2014-03-10 21:35 - 2010-09-10 23:05 - 00032536 _____ () C:\WINDOWS\SchedLgU.Txt
2014-03-10 21:31 - 2012-11-20 14:47 - 00000000 ____D () C:\Program Files\DAEMON Tools Toolbar
2014-03-10 21:25 - 2013-04-05 11:20 - 00000986 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-839522115-484763869-1417001333-1003UA.job
2014-03-10 21:08 - 2009-09-10 14:45 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-03-08 03:00 - 2014-03-07 20:51 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempLS3676.html
2014-03-08 03:00 - 2014-03-07 20:51 - 00002089 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempVp3676.html
2014-03-08 02:59 - 2010-12-18 21:25 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\AIMP
2014-03-07 23:35 - 2013-11-14 16:20 - 00000000 ____D () C:\Documents and Settings\x\Pulpit\muzyka
2014-03-07 13:46 - 2014-03-07 11:55 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempZPq216.html
2014-03-07 13:46 - 2014-03-07 11:55 - 00002089 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempZMc216.html
2014-03-07 12:25 - 2013-04-05 11:20 - 00000964 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-839522115-484763869-1417001333-1003Core.job
2014-03-05 22:36 - 2014-03-05 17:18 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempPr3688.html
2014-03-05 19:38 - 2010-09-22 14:49 - 00000116 ____C () C:\WINDOWS\NeroDigital.ini
2014-03-05 17:24 - 2014-03-05 17:24 - 00311296 _____ () C:\Documents and Settings\x\dbupwj.exe
2014-03-05 17:24 - 2010-09-10 23:07 - 00000000 ____D () C:\Documents and Settings\x
2014-03-04 07:43 - 2014-03-04 07:27 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempTMu524.html
2014-03-04 07:43 - 2014-03-04 07:27 - 00002089 _____ () C:\Documents and Settings\x\Ustawienia lokalne\Tempryx524.html
2014-03-03 20:50 - 2014-03-03 20:50 - 00000676 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\e-Deklaracje.lnk
2014-03-03 20:50 - 2014-03-03 20:50 - 00000670 _____ () C:\Documents and Settings\All Users\Pulpit\e-Deklaracje.lnk
2014-03-03 20:50 - 2014-03-03 20:50 - 00000000 ____D () C:\Program Files\e-Deklaracje
2014-03-03 20:50 - 2014-03-03 20:50 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
2014-03-03 20:50 - 2014-03-03 20:50 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\e-Deklaracje
2014-03-03 20:50 - 2014-03-03 20:50 - 00000000 ____D () C:\Documents and Settings\Default User\Dane aplikacji\Macromedia
2014-03-03 20:50 - 2012-02-21 08:38 - 00000000 ____D () C:\Program Files\Adobe
2014-03-03 20:50 - 2010-09-11 00:53 - 00000000 __RHD () C:\Documents and Settings\Default User\Dane aplikacji
2014-03-03 20:50 - 2010-09-11 00:53 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-03-03 20:50 - 2010-09-11 00:53 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-03-03 20:50 - 2010-09-10 23:07 - 00000000 __RHD () C:\Documents and Settings\x\Dane aplikacji
2014-03-03 20:50 - 2010-09-10 17:20 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Adobe
2014-03-03 20:49 - 2014-03-03 20:49 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2014-03-03 20:46 - 2014-01-06 14:57 - 00000000 ____D () C:\Program Files\Mobogenie
2014-03-03 20:43 - 2010-09-10 17:21 - 00000000 ____D () C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Adobe
2014-03-03 20:43 - 2010-09-10 17:21 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\Adobe
2014-03-03 20:32 - 2014-03-03 20:25 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TempUa2784.html
2014-03-02 20:43 - 2014-03-02 20:43 - 00000000 ____D () C:\Documents and Settings\x\Pulpit\mp3
2014-03-02 20:38 - 2014-03-02 20:38 - 35004416 ____H (Daniel Pistelli) C:\Documents and Settings\x\nrimovzj.exe
2014-03-02 20:37 - 2014-02-28 19:43 - 00000000 ____D () C:\Documents and Settings\x\Pulpit\Nowy folder
2014-02-28 18:10 - 2014-02-28 18:06 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\Tempxa1128.html
2014-02-28 18:10 - 2014-02-28 18:06 - 00002089 _____ () C:\Documents and Settings\x\Ustawienia lokalne\Tempnl1128.html
2014-02-23 22:59 - 2014-02-23 22:31 - 00065536 _____ () C:\WINDOWS\system32\config\TuneUp.evt
2014-02-23 22:48 - 2010-09-11 00:53 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-02-23 22:42 - 2014-02-23 22:29 - 00000000 __SHD () C:\Documents and Settings\All Users\Dane aplikacji\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2014-02-23 22:42 - 2012-01-19 15:04 - 00000000 ____D () C:\Documents and Settings\x\Menu Start\Programy\DoubleGames
2014-02-23 22:42 - 2012-01-04 22:36 - 00000000 ____D () C:\Documents and Settings\x\Menu Start\Programy\FoxTab PDF Creator
2014-02-23 22:42 - 2011-02-18 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\NapiProjekt
2014-02-23 22:42 - 2010-12-08 20:40 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Liceum klasa 2
2014-02-23 22:42 - 2010-09-11 13:02 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Winamp
2014-02-23 22:42 - 2010-09-11 12:08 - 00000000 ____D () C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Downloaded Installations
2014-02-23 22:42 - 2010-09-10 23:07 - 00000000 ___RD () C:\Documents and Settings\x\Menu Start\Programy\Autostart
2014-02-23 22:42 - 2010-09-10 23:07 - 00000000 ___RD () C:\Documents and Settings\x\Menu Start
2014-02-23 22:42 - 2010-09-10 17:23 - 00000000 ____D () C:\Documents and Settings\x\Menu Start\Programy\XP Codec Pack 2.4.3
2014-02-23 22:31 - 2014-02-23 22:31 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\TuneUp Software
2014-02-23 22:31 - 2014-02-23 22:30 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
2014-02-23 22:31 - 2013-06-05 16:17 - 00000000 ____D () C:\a
2014-02-23 22:05 - 2014-01-06 15:50 - 00000000 ____D () C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\genienext
2014-02-23 22:05 - 2010-09-10 23:07 - 00000000 ___HD () C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji
2014-02-23 21:25 - 2014-02-23 21:25 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
2014-02-23 21:25 - 2010-09-10 23:05 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji
2014-02-23 20:51 - 2014-02-23 20:51 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\Malwarebytes
2014-02-23 20:50 - 2014-02-23 20:50 - 00000784 _____ () C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
2014-02-23 20:50 - 2014-02-23 20:50 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-23 20:50 - 2014-02-23 20:50 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware
2014-02-23 20:50 - 2014-02-23 20:50 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-02-23 20:10 - 2014-02-23 20:10 - 00000000 ____D () C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\ESET
2014-02-23 19:55 - 2014-02-23 19:55 - 00000000 ____D () C:\Documents and Settings\x\Dane aplikacji\BinarySense
2014-02-23 19:55 - 2014-02-23 19:55 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Licenses
2014-02-23 19:41 - 2014-01-06 14:56 - 00000000 ____D () C:\Program Files\BonanzaDeals
2014-02-23 19:41 - 2010-09-10 23:07 - 00000000 ___RD () C:\Documents and Settings\x\Menu Start\Programy
2014-02-23 18:56 - 2014-02-23 18:20 - 00002432 _____ () C:\Documents and Settings\x\Ustawienia lokalne\TemplE3588.html
2014-02-23 18:40 - 2014-01-06 14:59 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Google Drive
2014-02-23 18:36 - 2014-02-23 18:36 - 00000000 ____D () C:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji\Google
2014-02-23 18:36 - 2010-09-11 00:53 - 00000000 ___HD () C:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji

Files to move or delete:
====================
C:\Documents and Settings\x\dbupwj.exe
C:\Documents and Settings\x\nrimovzj.exe


Some content of TEMP:
====================
C:\Documents and Settings\x\Ustawienia lokalne\Temp\gg10.upgr.exe
C:\Documents and Settings\x\Ustawienia lokalne\Temp\InstHelper.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2009-09-10 14:45] - [2009-09-10 14:45] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\WINDOWS\system32\winlogon.exe
[2009-09-10 14:45] - [2009-09-10 14:45] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\WINDOWS\system32\svchost.exe
[2009-09-10 14:45] - [2009-09-10 14:45] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\WINDOWS\system32\services.exe
[2009-09-10 14:45] - [2009-09-10 14:45] - 0111104 ____A (Microsoft Corporation) 8816e60bf654353e8e0d35ed98875445 

C:\WINDOWS\system32\User32.dll
[2009-09-10 14:45] - [2009-09-10 14:45] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\WINDOWS\system32\userinit.exe
[2009-09-10 14:45] - [2009-09-10 14:45] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\WINDOWS\system32\rpcss.dll
[2009-09-10 14:45] - [2009-09-10 14:45] - 0401408 ____A (Microsoft Corporation) c9e5ac78d9a00b1de8ce2ad1bdde7e42 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2009-09-10 14:45] - [2009-09-10 14:45] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================