Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by admin (administrator) on JAREK on 16-09-2014 16:37:10
Running from C:\rosita\Downloads
Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
( ) C:\WINDOWS\system32\lmabcoms.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(SafeNet, Inc.) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(SafeNet, Inc) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
(SafeNet, Inc.) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(NOVUS SECURITY) C:\Program Files\DVR System\Web\DirectWeb.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [ASUS Ai Charger] => C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984 2012-08-13] (ASUSTek Computer Inc.)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20117648 2012-10-30] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-07-30] (Oracle Corporation)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3593744 2014-09-05] (AVG Technologies CZ, s.r.o.)
HKLM\...99B7938DA9E4}\LocalServer32: [Default-wmiprvse]  <==== ATTENTION!
HKU\S-1-5-21-3867638132-671925601-1608792838-1006\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-3867638132-671925601-1608792838-1006\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Direct Web.lnk
ShortcutTarget: Direct Web.lnk -> C:\Program Files\DVR System\Web\DirectWeb.exe (NOVUS SECURITY)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2015\avgrsx.exe /sync /restart

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mbank.pl/logout.html?lang=P
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {E75C08D0-7828-4547-B904-921F5D4D4889} URL = http://uk.search.yahoo.com/search?p={searchTerms}&fr=FP-tab-web-t340&ei=UTF-8&meta=vc%3D
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} ->  No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: No Name -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} 
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1
Tcpip\..\Interfaces\{20C8E35A-9881-4CA9-AE13-47FB9B6BD8FF}: [NameServer] 194.204.159.1,194.204.152.34
Tcpip\..\Interfaces\{6D16F032-9851-448E-A79B-1C7A873B3263}: [NameServer] 194.204.152.34,194.204.159.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: PDF Architect 2 -> C:\Program Files\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-07-17]

Chrome: 
=======
CHR HomePage: Default -> https://www.google.pl/
CHR StartupUrls: Default -> "about:blank"
CHR DefaultSearchKeyword: Default -> 1B5EB7B53D671316CEB175E32E1C19D9337A3718B7522DF6EC9D4DE6B4A705F1
CHR DefaultSearchURL: Default -> 2AAA6B7C79B08325E8257245B3C7561D1D46654EB6519CD84BB2F5FA6F3F8DD9
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\37.0.2062.120\gcswf32.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.7) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U13) - C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U15) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Chrome NaCl) - C:\Program Files\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.120\pdf.dll ()
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR CustomProfile: C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Google Wallet) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-27]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3364368 2014-09-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [293448 2014-09-05] (AVG Technologies CZ, s.r.o.)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2009-07-17] (Macrovision Europe Ltd.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [458464 2012-02-02] (Intel(R) Corporation)
S2 iSafeService; C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [118048 2014-08-08] (Elex do Brasil Participações Ltda)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-07-25] (Oracle Corporation)
R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation)
R2 lmab_device; C:\WINDOWS\system32\LMabcoms.exe [590504 2008-04-01] ( )
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
S3 PDF Architect 2; C:\Program Files\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
R2 SentinelKeysServer; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [369952 2009-09-17] (SafeNet, Inc.)
R2 SentinelProtectionServer; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1246496 2009-09-17] (SafeNet, Inc)
R2 SentinelSecurityRuntime; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [292128 2009-09-17] (SafeNet, Inc.)
R2 tor; C:\Program Files\Tor\tor.exe [3233806 2013-08-31] () [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AiCharger; C:\WINDOWS\System32\drivers\AiCharger.sys [13952 2012-03-22] (ASUSTek Computer Inc.)
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R1 Avgdiskx; C:\WINDOWS\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriverl; C:\WINDOWS\System32\DRIVERS\avgidsdriverlx.sys [192280 2014-07-24] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [147736 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [193304 2014-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [98584 2014-08-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [199448 2014-07-02] (AVG Technologies CZ, s.r.o.)
R2 DivisCTP; C:\WINDOWS\System32\Drivers\Divis7146.sys [54528 2002-12-14] (Philips Semiconductors GmbH)
R2 DivisCTS; C:\WINDOWS\System32\Drivers\SAA7146.SYS [76576 2002-12-14] (Philips Semiconductors) [File not signed]
S3 DM9USB; C:\WINDOWS\System32\DRIVERS\dm9usb.sys [26674 2002-03-20] (DAVICOM Semiconductor, Inc.                                                    )
S3 gdrv; C:\WINDOWS\gdrv.sys [16608 2008-10-22] (Windows (R) 2000 DDK provider)
R1 iSafeKrnl; C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys [214592 2014-08-08] (Elex do Brasil Participações Ltda)
S3 iSafeKrnlBoot; C:\WINDOWS\System32\DRIVERS\iSafeKrnlBoot.sys [40768 2014-08-08] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys [68288 2014-08-08] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys [37696 2014-08-08] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Program Files\Elex-tech\YAC\iSafeNetFilter.sys [55464 2014-08-06] (Elex do Brasil Participações Ltda)
R3 MEI; C:\WINDOWS\System32\DRIVERS\HECI.sys [46080 2011-11-10] (Intel Corporation)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R2 Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [76288 2002-12-17] (Rainbow Technologies, Inc.) [File not signed]
S3 Sntnlusb; C:\WINDOWS\System32\DRIVERS\SNTNLUSB.SYS [26120 2002-12-17] (Rainbow Technologies Inc.)
S3 SONYPVU1; C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)
S3 catchme; \??\C:\DOCUME~1\admin\USTAWI~1\Temp\catchme.sys [X]
S4 IntelIde; No ImagePath
U3 TlntSvr; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-16 16:36 - 2014-09-16 16:37 - 00000000 ____D () C:\FRST
2014-09-15 14:27 - 2014-09-15 14:27 - 00023796 _____ () C:\Documents and Settings\admin\Pulpit\gmer.txt
2014-09-15 14:26 - 2014-09-15 14:26 - 00023796 _____ () C:\Documents and Settings\admin\Pulpit\gmer xx.lxg
2014-09-15 12:05 - 2014-09-15 12:05 - 00056902 _____ () C:\Documents and Settings\admin\Pulpit\Extras.Txt
2014-09-15 12:04 - 2014-09-15 12:04 - 02540428 _____ () C:\Documents and Settings\admin\Pulpit\OTL.Txt1.txt
2014-09-10 17:27 - 2014-09-10 17:27 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\AVG2015
2014-09-10 17:26 - 2014-09-10 17:26 - 00000732 _____ () C:\Documents and Settings\All Users\Pulpit\AVG 2015.lnk
2014-09-10 17:26 - 2014-09-10 17:26 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG
2014-09-10 17:26 - 2014-09-10 17:26 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\TuneUp Software
2014-09-10 17:25 - 2014-09-11 07:41 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVG2015
2014-09-10 17:25 - 2014-09-10 17:26 - 00007834 _____ () C:\WINDOWS\setupapi.log
2014-09-10 17:25 - 2014-09-10 17:25 - 00000000 ___HD () C:\$AVG
2014-09-10 17:23 - 2014-09-10 17:23 - 00000000 ____D () C:\Program Files\AVG
2014-09-10 17:19 - 2014-09-16 08:14 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\MFAData
2014-09-10 17:19 - 2014-09-10 17:34 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Avg2015
2014-09-10 17:19 - 2014-09-10 17:19 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\MFAData
2014-09-10 10:08 - 2014-09-16 16:37 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\temp
2014-09-10 10:08 - 2014-09-10 10:08 - 00013121 _____ () C:\Documents and Settings\admin\Pulpit\ComboFix.txt
2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\user\Ustawienia lokalne\temp
2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp
2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\temp
2014-09-10 08:21 - 2014-09-08 14:26 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140910-082151.backup
2014-09-10 08:09 - 2014-09-10 08:09 - 00000700 _____ () C:\Documents and Settings\All Users\Pulpit\PDF Architect 2.lnk
2014-09-10 08:09 - 2014-09-10 08:09 - 00000000 ____D () C:\Program Files\PDF Architect 2
2014-09-10 08:09 - 2014-09-10 08:09 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDF Architect 2
2014-09-10 08:07 - 2014-09-10 08:07 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PDF Architect 2
2014-09-10 08:06 - 2014-09-10 08:10 - 00000000 ____D () C:\Program Files\PDFCreator
2014-09-10 08:06 - 2014-09-10 08:06 - 00000706 _____ () C:\Documents and Settings\All Users\Pulpit\PDFCreator.lnk
2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator
2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\VOPackage
2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\pdfforge
2014-09-10 08:06 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSCOMCT2.OCX
2014-09-10 08:06 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMAPI32.OCX
2014-09-10 08:06 - 2014-04-25 17:44 - 00095416 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2014-09-10 08:06 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPIDE.DLL
2014-09-10 08:03 - 2014-09-10 08:05 - 00000000 ____D () C:\appstoredl
2014-09-10 08:03 - 2014-09-10 08:03 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\isafeYAC App Store
2014-09-09 17:12 - 2014-09-09 17:12 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\computer software market
2014-09-09 16:38 - 2014-09-09 16:38 - 00001555 _____ () C:\Documents and Settings\All Users\Pulpit\YAC.lnk
2014-09-09 16:38 - 2014-09-09 16:38 - 00001555 _____ () C:\Documents and Settings\All Users\Menu Start\YAC.lnk
2014-09-09 16:38 - 2014-09-09 16:38 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\YAC
2014-09-09 16:38 - 2014-08-08 08:24 - 00040768 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeKrnlBoot.sys
2014-09-09 16:37 - 2014-09-10 07:33 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\iSafe
2014-09-09 16:37 - 2014-09-09 16:37 - 00000000 ____D () C:\Program Files\Elex-tech
2014-09-09 16:36 - 2014-09-09 16:38 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\eCyber
2014-09-09 07:27 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\system32\sqlite3.dll
2014-09-08 14:26 - 2014-09-08 14:12 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-142636.backup
2014-09-08 14:12 - 2014-09-08 13:53 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-141234.backup
2014-09-08 13:53 - 2014-09-08 13:52 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-135327.backup
2014-09-08 13:52 - 2014-09-08 13:15 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-135258.backup
2014-09-08 13:15 - 2014-09-08 08:00 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-131513.backup
2014-09-08 12:08 - 2014-09-09 17:09 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware
2014-09-08 12:08 - 2014-09-08 12:08 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-09-08 12:07 - 2014-09-08 12:07 - 00000000 ____D () C:\Program Files\AmiBroker
2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Program Files\Dropbox
2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\Dropbox
2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\DropboxMaster
2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Program Files\Common Files\BiesseGroup
2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\McAfee Security Scan Plus
2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Intermac
2014-09-08 12:04 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan
2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Program Files\Kolorowanka Świąteczna
2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Kolorowanka Świąteczna
2014-09-08 12:03 - 2014-09-08 12:03 - 00000000 ____D () C:\Documents and Settings\admin\Pulpit\Jurata
2014-09-08 11:21 - 2014-09-08 11:21 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\DYNALOG
2014-09-08 10:06 - 2014-09-09 16:35 - 00003994 _____ () C:\Documents and Settings\admin\Pulpit\Rkill.txt
2014-09-08 08:00 - 2014-09-08 07:50 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-080016.backup
2014-09-08 07:50 - 2014-09-05 15:45 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-075053.backup
2014-09-05 15:45 - 2014-09-04 16:06 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140905-154531.backup
2014-09-05 08:14 - 2014-09-09 07:28 - 00000000 ____D () C:\AdwCleaner
2014-09-04 16:06 - 2014-09-02 07:40 - 00449915 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.20140904-160622.backup
2014-09-02 09:24 - 2014-09-08 12:05 - 00000000 ____D () C:\Program Files\Adobe Download Assistant
2014-09-02 09:24 - 2014-09-02 09:24 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2014-09-02 09:24 - 2014-09-02 09:24 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-09-02 08:26 - 2014-09-02 08:26 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-09-02 07:40 - 2014-09-01 07:48 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140902-074023.backup
2014-09-01 07:48 - 2014-08-29 16:30 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140901-074856.backup
2014-08-29 16:30 - 2014-08-29 07:43 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-163012.backup
2014-08-29 07:43 - 2014-08-29 07:09 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-074330.backup
2014-08-29 07:09 - 2014-08-12 07:14 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-070900.backup
2014-08-26 07:46 - 2014-09-08 11:26 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-08-26 07:45 - 2014-08-26 07:45 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Oracle
2014-08-20 21:49 - 2014-08-20 21:49 - 00193304 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgldx86.sys
2014-08-18 07:10 - 2014-09-09 07:34 - 05576885 ____R (Swearware) C:\ComboFix.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-16 16:37 - 2014-09-16 16:36 - 00000000 ____D () C:\FRST
2014-09-16 16:37 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\temp
2014-09-16 16:36 - 2013-07-30 13:15 - 00000460 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{07359834-EE20-4772-A75D-94330AD0A25A}.job
2014-09-16 16:21 - 2013-08-31 14:45 - 00000000 ____D () C:\Documents and Settings\LocalService\Dane aplikacji\tor
2014-09-16 15:53 - 2014-01-30 16:17 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-09-16 15:44 - 2012-08-09 07:34 - 00001034 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-16 08:14 - 2014-09-10 17:19 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\MFAData
2014-09-16 07:50 - 2008-10-22 19:59 - 01865400 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-16 07:37 - 2014-03-17 08:49 - 00000222 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2014-09-16 07:37 - 2012-08-09 07:34 - 00001030 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-16 07:37 - 2008-10-22 21:55 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-09-16 07:37 - 2008-10-22 21:55 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-09-16 07:36 - 2008-10-22 20:07 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-15 18:53 - 2008-11-24 23:57 - 00000188 ___SH () C:\Documents and Settings\admin\ntuser.ini
2014-09-15 18:53 - 2008-10-22 20:07 - 00032424 _____ () C:\WINDOWS\SchedLgU.Txt
2014-09-15 14:28 - 2008-11-24 23:57 - 00000000 ____D () C:\Documents and Settings\admin\Pulpit
2014-09-15 14:27 - 2014-09-15 14:27 - 00023796 _____ () C:\Documents and Settings\admin\Pulpit\gmer.txt
2014-09-15 14:26 - 2014-09-15 14:26 - 00023796 _____ () C:\Documents and Settings\admin\Pulpit\gmer xx.lxg
2014-09-15 12:05 - 2014-09-15 12:05 - 00056902 _____ () C:\Documents and Settings\admin\Pulpit\Extras.Txt
2014-09-15 12:04 - 2014-09-15 12:04 - 02540428 _____ () C:\Documents and Settings\admin\Pulpit\OTL.Txt1.txt
2014-09-15 07:40 - 2008-04-15 14:00 - 00012598 _____ () C:\WINDOWS\system32\wpa.dbl
2014-09-12 08:27 - 2014-01-21 17:20 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-09-11 09:13 - 2008-10-22 20:02 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2014-09-11 07:41 - 2014-09-10 17:25 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVG2015
2014-09-10 17:34 - 2014-09-10 17:19 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Avg2015
2014-09-10 17:27 - 2014-09-10 17:27 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\AVG2015
2014-09-10 17:27 - 2008-11-24 23:57 - 00000000 __RHD () C:\Documents and Settings\admin\Dane aplikacji
2014-09-10 17:26 - 2014-09-10 17:26 - 00000732 _____ () C:\Documents and Settings\All Users\Pulpit\AVG 2015.lnk
2014-09-10 17:26 - 2014-09-10 17:26 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\AVG
2014-09-10 17:26 - 2014-09-10 17:26 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\TuneUp Software
2014-09-10 17:26 - 2014-09-10 17:25 - 00007834 _____ () C:\WINDOWS\setupapi.log
2014-09-10 17:26 - 2008-10-22 21:53 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-09-10 17:26 - 2008-10-22 21:53 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-09-10 17:25 - 2014-09-10 17:25 - 00000000 ___HD () C:\$AVG
2014-09-10 17:25 - 2008-10-22 21:51 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-09-10 17:23 - 2014-09-10 17:23 - 00000000 ____D () C:\Program Files\AVG
2014-09-10 17:19 - 2014-09-10 17:19 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\MFAData
2014-09-10 17:19 - 2008-11-24 23:57 - 00000000 ___HD () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji
2014-09-10 17:16 - 2008-10-22 21:53 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start
2014-09-10 15:53 - 2014-01-30 16:17 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-09-10 15:53 - 2012-08-09 07:34 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-09-10 10:08 - 2014-09-10 10:08 - 00013121 _____ () C:\Documents and Settings\admin\Pulpit\ComboFix.txt
2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\user\Ustawienia lokalne\temp
2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp
2014-09-10 10:08 - 2014-09-10 10:08 - 00000000 ____D () C:\Documents and Settings\LocalService\Ustawienia lokalne\temp
2014-09-10 10:08 - 2014-01-30 09:49 - 00000000 ____D () C:\Qoobox
2014-09-10 10:08 - 2008-11-24 23:57 - 00000000 ___HD () C:\Documents and Settings\admin\Ustawienia lokalne
2014-09-10 10:08 - 2008-10-22 20:11 - 00000000 ___HD () C:\Documents and Settings\user\Ustawienia lokalne
2014-09-10 10:08 - 2008-10-22 20:07 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne
2014-09-10 10:08 - 2008-10-22 20:02 - 00000000 ___HD () C:\Documents and Settings\NetworkService\Ustawienia lokalne
2014-09-10 10:06 - 2008-04-15 14:00 - 00000227 _____ () C:\WINDOWS\system.ini
2014-09-10 08:10 - 2014-09-10 08:06 - 00000000 ____D () C:\Program Files\PDFCreator
2014-09-10 08:09 - 2014-09-10 08:09 - 00000700 _____ () C:\Documents and Settings\All Users\Pulpit\PDF Architect 2.lnk
2014-09-10 08:09 - 2014-09-10 08:09 - 00000000 ____D () C:\Program Files\PDF Architect 2
2014-09-10 08:09 - 2014-09-10 08:09 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDF Architect 2
2014-09-10 08:09 - 2008-11-24 18:21 - 00000000 ___RD () C:\rosita
2014-09-10 08:07 - 2014-09-10 08:07 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\PDF Architect 2
2014-09-10 08:06 - 2014-09-10 08:06 - 00000706 _____ () C:\Documents and Settings\All Users\Pulpit\PDFCreator.lnk
2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator
2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\VOPackage
2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\pdfforge
2014-09-10 08:06 - 2008-11-24 23:57 - 00000000 ___RD () C:\Documents and Settings\admin\Menu Start\Programy
2014-09-10 08:05 - 2014-09-10 08:03 - 00000000 ____D () C:\appstoredl
2014-09-10 08:03 - 2014-09-10 08:03 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\isafeYAC App Store
2014-09-10 08:01 - 2012-08-09 07:35 - 00001819 _____ () C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-09-10 07:35 - 2014-06-17 08:42 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\IP Camera Super Client(PnP)
2014-09-10 07:33 - 2014-09-09 16:37 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\iSafe
2014-09-10 07:31 - 2008-10-22 21:51 - 00322728 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-09-10 07:25 - 2008-11-24 18:12 - 00000000 ____D () C:\Program Files\DVR System
2014-09-09 17:12 - 2014-09-09 17:12 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\computer software market
2014-09-09 17:09 - 2014-09-08 12:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware
2014-09-09 17:09 - 2013-05-15 11:36 - 00000000 ____D () C:\WINDOWS\Minidump
2014-09-09 16:38 - 2014-09-09 16:38 - 00001555 _____ () C:\Documents and Settings\All Users\Pulpit\YAC.lnk
2014-09-09 16:38 - 2014-09-09 16:38 - 00001555 _____ () C:\Documents and Settings\All Users\Menu Start\YAC.lnk
2014-09-09 16:38 - 2014-09-09 16:38 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\YAC
2014-09-09 16:38 - 2014-09-09 16:36 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\eCyber
2014-09-09 16:38 - 2008-11-24 23:58 - 00062832 _____ () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2014-09-09 16:37 - 2014-09-09 16:37 - 00000000 ____D () C:\Program Files\Elex-tech
2014-09-09 16:35 - 2014-09-08 10:06 - 00003994 _____ () C:\Documents and Settings\admin\Pulpit\Rkill.txt
2014-09-09 07:34 - 2014-08-18 07:10 - 05576885 ____R (Swearware) C:\ComboFix.exe
2014-09-09 07:28 - 2014-09-05 08:14 - 00000000 ____D () C:\AdwCleaner
2014-09-08 15:00 - 2014-03-17 08:49 - 00000216 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
2014-09-08 14:26 - 2014-09-10 08:21 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140910-082151.backup
2014-09-08 14:12 - 2014-09-08 14:26 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-142636.backup
2014-09-08 13:53 - 2014-09-08 14:12 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-141234.backup
2014-09-08 13:52 - 2014-09-08 13:53 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-135327.backup
2014-09-08 13:15 - 2014-09-08 13:52 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-135258.backup
2014-09-08 12:11 - 2012-08-04 11:56 - 00000000 ___SD () C:\Documents and Settings\Administrator
2014-09-08 12:11 - 2008-11-24 23:57 - 00000000 ____D () C:\Documents and Settings\admin
2014-09-08 12:11 - 2008-10-22 20:07 - 00000000 __SHD () C:\Documents and Settings\LocalService
2014-09-08 12:10 - 2008-10-22 19:57 - 00000000 ____D () C:\WINDOWS\Registration
2014-09-08 12:08 - 2014-09-08 12:08 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-09-08 12:07 - 2014-09-08 12:07 - 00000000 ____D () C:\Program Files\AmiBroker
2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Program Files\Dropbox
2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\Dropbox
2014-09-08 12:06 - 2014-09-08 12:06 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\DropboxMaster
2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Program Files\Common Files\BiesseGroup
2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\McAfee Security Scan Plus
2014-09-08 12:05 - 2014-09-08 12:05 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Intermac
2014-09-08 12:05 - 2014-09-08 12:04 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan
2014-09-08 12:05 - 2014-09-02 09:24 - 00000000 ____D () C:\Program Files\Adobe Download Assistant
2014-09-08 12:05 - 2014-07-21 08:19 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\Dropbox
2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Program Files\Kolorowanka Świąteczna
2014-09-08 12:04 - 2014-09-08 12:04 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Kolorowanka Świąteczna
2014-09-08 12:03 - 2014-09-08 12:03 - 00000000 ____D () C:\Documents and Settings\admin\Pulpit\Jurata
2014-09-08 11:26 - 2014-08-26 07:46 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-09-08 11:26 - 2014-01-30 12:46 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
2014-09-08 11:22 - 2010-09-29 08:25 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight
2014-09-08 11:21 - 2014-09-08 11:21 - 00000000 ____D () C:\Documents and Settings\admin\Menu Start\Programy\DYNALOG
2014-09-08 11:10 - 2014-07-18 11:22 - 00000000 ____D () C:\Program Files\DYNALOG
2014-09-08 11:05 - 2010-09-29 08:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-08 08:00 - 2014-09-08 13:15 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-131513.backup
2014-09-08 07:50 - 2014-09-08 08:00 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-080016.backup
2014-09-08 07:48 - 2009-11-23 09:58 - 00000000 ____D () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Adobe
2014-09-05 15:45 - 2014-09-08 07:50 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140908-075053.backup
2014-09-05 08:23 - 2012-08-18 13:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-04 16:06 - 2014-09-05 15:45 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140905-154531.backup
2014-09-02 09:28 - 2008-10-22 21:53 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
2014-09-02 09:24 - 2014-09-02 09:24 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2014-09-02 09:24 - 2014-09-02 09:24 - 00000000 ____D () C:\Documents and Settings\admin\Dane aplikacji\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-09-02 09:24 - 2008-11-24 18:14 - 00000000 ____D () C:\Program Files\Adobe
2014-09-02 08:50 - 2008-10-22 20:11 - 00001593 _____ () C:\Documents and Settings\user\Menu Start\Programy\Pomoc zdalna.lnk
2014-09-02 08:50 - 2008-10-22 20:00 - 00001607 _____ () C:\Documents and Settings\All Users\Menu Start\Określ dostęp do programów i ich ustawienia domyślne.lnk
2014-09-02 08:50 - 2008-10-22 20:00 - 00001593 _____ () C:\Documents and Settings\Default User\Menu Start\Programy\Pomoc zdalna.lnk
2014-09-02 08:50 - 2008-10-22 20:00 - 00001507 _____ () C:\Documents and Settings\All Users\Menu Start\Windows Update.lnk
2014-09-02 08:26 - 2014-09-02 08:26 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-09-02 07:40 - 2014-09-04 16:06 - 00449915 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.20140904-160622.backup
2014-09-01 07:48 - 2014-09-02 07:40 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140902-074023.backup
2014-08-29 16:30 - 2014-09-01 07:48 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140901-074856.backup
2014-08-29 13:01 - 2008-11-26 08:58 - 98758480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-29 08:24 - 2008-10-22 20:11 - 00000000 __RHD () C:\Documents and Settings\user\Dane aplikacji
2014-08-29 07:43 - 2014-08-29 16:30 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-163012.backup
2014-08-29 07:09 - 2014-08-29 07:43 - 00449915 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140829-074330.backup
2014-08-26 07:45 - 2014-08-26 07:45 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Oracle
2014-08-26 07:45 - 2014-08-11 07:23 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-08-26 07:45 - 2009-04-16 13:07 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-08-26 07:44 - 2009-04-16 13:06 - 00000000 ____D () C:\Program Files\Java
2014-08-20 21:49 - 2014-08-20 21:49 - 00193304 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgldx86.sys

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================