Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2014 03
Ran by Wlasciciel (administrator) on NOSALIN-0379FA2 on 11-01-2014 18:12:03
Running from C:\Documents and Settings\Wlasciciel\Moje dokumenty\Pobieranie
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
() C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\fst_pl_30\upfst_pl_30.exe
() C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\GPUTemp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
(Logitech Inc.) C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Cashobarre) C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Apps\2.0\NGTWK6X3.N5Z\AK1MTKC5.Z2V\cash..tion_54ed918de7d1b2a3_0001.0000_fcaf0e0a0502c7e0\Cashobarre.exe
(Legend Edition) C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Apps\2.0\NGTWK6X3.N5Z\AK1MTKC5.Z2V\dead..tion_0000000000000000_0001.0002_520e3f142c847c25\deadsurfv1.2.exe
(BPMconcept) C:\Program Files\PackBarre\PackBarre.exe
() C:\agia3d\Tirocado\tirocado.exe
() C:\agia3d\AndroozBarre\barre.exe
(TunesBarre) C:\Program Files\TunesBarre\TunesBarre.exe
(WTW.im, Kaworu) C:\Program Files\K2T\WTW\wtw.exe
() C:\agia3d\DiscoveryBarre\barre.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [itype] - C:\Program Files\Microsoft IntelliType Pro\itype.exe [1505144 2009-11-05] (Microsoft Corporation)
HKLM\...\Run: [FullBarre (http://www.laboitakados.com)] - C:\Program Files\Full Web\FullBarre\LaBoitaKadosBarre (www.laboitakados.com)\start.exe [569344 2013-06-18] (Full Web SARL)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5078504 2013-03-21] (ESET)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [upfst_pl_30.exe] - C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\fst_pl_30\upfst_pl_30.exe [3153904 2014-01-02] ()
HKLM\...\Run: [GPUTemp] - C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\GPUTemp.exe [1305312 2014-01-08] () <===== ATTENTION
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKCU\...\Run: [NextLive] - C:\Documents and Settings\Wlasciciel\Dane aplikacji\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe)
HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe
IFEO\chrome.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\quickcam.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech Desktop Messenger.lnk
ShortcutTarget: Logitech Desktop Messenger.lnk -> C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.packbarre.com/index.php?id_msg=50
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Przelewy24.BHO - {8a194578-81ea-4850-9911-13ba2d71efbd} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 secure.tune-up.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{C86328B3-5D7B-4EC0-8902-D85A104E855A}: [NameServer]87.204.204.204,62.233.233.233

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\ed0wcfmo.default
FF user.js: detected! => C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\ed0wcfmo.default\user.js
FF Homepage: hxxp://poczta10.o2.pl/?id=0&o=0&view=inbox|hxxp://www.mlody1313.republika.pl/linki3.html
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\ed0wcfmo.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\ed0wcfmo.default\searchplugins\browsemngr.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF Extension: Ghostery - C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\ed0wcfmo.default\Extensions\firefox@ghostery.com.xpi [2013-09-17]
FF Extension: Linky - C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\ed0wcfmo.default\Extensions\linky@gemal.dk.xpi [2011-12-02]
FF Extension: Multi Links - C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\ed0wcfmo.default\Extensions\multilinks@plugin.xpi [2012-07-08]
FF Extension: Przelewy24 - C:\Documents and Settings\Wlasciciel\Dane aplikacji\Mozilla\Firefox\Profiles\ed0wcfmo.default\Extensions\p24ext@przelewy24.pl.xpi [2012-04-20]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-20]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-08-31]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Winamp Application Detector) - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll No File
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll No File
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\WINDOWS\system32\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Google Wallet) - C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-30]
CHR HKLM\...\Chrome\Extension: [gdnafjfahbdfphihncgadbegiaebehio] - C:\Program Files\SquirrelWeb\gdnafjfahbdfphihncgadbegiaebehio.crx [2013-12-30]

========================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1341664 2013-03-21] (ESET)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-01-09] (Oracle Corporation)
S4 LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [186904 2007-07-20] (Logitech Inc.)
S4 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [141848 2007-07-20] (Logitech Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-31] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R1 eamon; C:\Windows\System32\DRIVERS\eamon.sys [161368 2013-01-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [122240 2013-01-10] (ESET)
R1 epfwtdir; C:\Windows\System32\DRIVERS\epfwtdir.sys [105784 2013-01-10] (ESET)
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2007-10-30] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2007-10-30] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2007-10-30] (HP)
S3 LVcKap; C:\Windows\System32\DRIVERS\LVcKap.sys [2109592 2007-07-20] (Logitech Inc.)
S3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2142488 2007-07-20] (Logitech Inc.)
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25624 2007-07-18] ()
R3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2007-07-19] (Logitech Inc.)
S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [1278104 2007-07-19] (Logitech Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S4 IntelIde; No ImagePath
U3 TlntSvr; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-11 18:10 - 2014-01-11 18:10 - 00000000 ____D C:\FRST
2014-01-10 18:04 - 2014-01-10 18:04 - 00000000 ____D C:\Program Files\predm
2014-01-09 15:11 - 2014-01-09 15:11 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-09 15:11 - 2014-01-09 15:10 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-09 15:11 - 2014-01-09 15:10 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-09 15:10 - 2014-01-09 15:10 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-09 15:10 - 2014-01-09 15:10 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-09 15:10 - 2014-01-09 15:10 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-09 15:10 - 2014-01-09 15:10 - 00000000 ____D C:\Program Files\Java
2014-01-09 15:10 - 2014-01-09 15:10 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java
2014-01-08 19:12 - 2014-01-10 18:03 - 00000000 ____D C:\Program Files\VLC Player GPU+
2014-01-08 19:12 - 2014-01-08 19:12 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Dane aplikacji\0C1I1L1R1J0M1P0I1G
2014-01-08 19:12 - 2014-01-08 19:11 - 00823160 _____ (AnyProtect.com) C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\Setup(5).exe
2014-01-08 19:11 - 2014-01-11 17:12 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\fst_pl_30
2014-01-08 19:10 - 2014-01-08 16:03 - 00823160 _____ (AnyProtect.com) C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\AnyProtectScannerSetup.exe
2014-01-08 19:09 - 2014-01-08 20:12 - 00000000 ____D C:\Program Files\SquirrelWeb
2014-01-08 19:09 - 2014-01-08 19:36 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Dane aplikacji\systweak
2014-01-08 19:09 - 2012-01-20 14:14 - 00017280 _____ (Systweak Inc., (www.systweak.com)) C:\WINDOWS\system32\roboot.exe
2014-01-08 19:06 - 2014-01-11 18:11 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Dane aplikacji\newnext.me
2014-01-08 19:06 - 2014-01-08 19:26 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\Mobogenie
2014-01-08 19:06 - 2014-01-08 19:14 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\cache
2014-01-08 19:06 - 2014-01-08 19:09 - 00000204 _____ C:\Documents and Settings\Wlasciciel\daemonprocess.txt
2014-01-08 19:06 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\genienext
2014-01-08 19:06 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Moje dokumenty\Mobogenie
2014-01-08 19:06 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\.android
2014-01-08 14:03 - 2014-01-08 14:03 - 00000638 _____ C:\Documents and Settings\All Users\Pulpit\DiscoveryBarre.lnk
2014-01-08 14:03 - 2014-01-08 14:03 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\DiscoveryBarre
2013-12-20 12:12 - 2013-12-20 12:12 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-01-11 18:12 - 2011-12-01 08:50 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Moje dokumenty\Pobieranie
2014-01-11 18:11 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Dane aplikacji\newnext.me
2014-01-11 18:10 - 2014-01-11 18:10 - 00000000 ____D C:\FRST
2014-01-11 18:08 - 2012-07-23 08:00 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-11 17:12 - 2014-01-08 19:11 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\fst_pl_30
2014-01-11 12:14 - 2013-04-15 19:31 - 00002271 _____ C:\Documents and Settings\Wlasciciel\Pulpit\PackBarre.lnk
2014-01-11 12:13 - 2013-02-18 00:05 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\Deployment
2014-01-11 12:12 - 2011-11-30 14:14 - 01311151 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-11 12:09 - 2011-11-30 15:05 - 00000159 _____ C:\WINDOWS\wiadebug.log
2014-01-11 12:09 - 2011-11-30 15:05 - 00000050 _____ C:\WINDOWS\wiaservc.log
2014-01-11 12:09 - 2011-11-30 14:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-10 19:59 - 2013-09-19 16:13 - 00065536 _____ C:\WINDOWS\system32\config\TuneUp.evt
2014-01-10 19:59 - 2011-11-30 14:19 - 00000188 ___SH C:\Documents and Settings\Wlasciciel\ntuser.ini
2014-01-10 19:59 - 2011-11-30 14:18 - 00032530 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-10 19:05 - 2011-11-30 14:19 - 00000000 ___RD C:\Documents and Settings\Wlasciciel\Menu Start
2014-01-10 18:08 - 2011-11-30 14:19 - 00000000 __RHD C:\Documents and Settings\Wlasciciel\Dane aplikacji
2014-01-10 18:04 - 2014-01-10 18:04 - 00000000 ____D C:\Program Files\predm
2014-01-10 18:04 - 2011-11-30 15:03 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy
2014-01-10 18:03 - 2014-01-08 19:12 - 00000000 ____D C:\Program Files\VLC Player GPU+
2014-01-10 18:01 - 2011-11-30 15:03 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2014-01-10 17:59 - 2011-11-30 14:19 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Menu Start\Programy
2014-01-10 17:55 - 2011-11-30 14:19 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Pulpit
2014-01-09 15:11 - 2014-01-09 15:11 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-09 15:10 - 2014-01-09 15:11 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-09 15:10 - 2014-01-09 15:11 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-09 15:10 - 2014-01-09 15:10 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-09 15:10 - 2014-01-09 15:10 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-09 15:10 - 2014-01-09 15:10 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-09 15:10 - 2014-01-09 15:10 - 00000000 ____D C:\Program Files\Java
2014-01-09 15:10 - 2014-01-09 15:10 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java
2014-01-08 22:46 - 2013-08-27 15:39 - 00001044 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-08 22:46 - 2013-08-27 15:39 - 00001040 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-08 20:12 - 2014-01-08 19:09 - 00000000 ____D C:\Program Files\SquirrelWeb
2014-01-08 19:36 - 2014-01-08 19:09 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Dane aplikacji\systweak
2014-01-08 19:36 - 2011-11-30 15:03 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2014-01-08 19:30 - 2012-11-09 08:36 - 00065536 _____ C:\WINDOWS\system32\config\WindowsPowerShell.evt
2014-01-08 19:26 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\Mobogenie
2014-01-08 19:14 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\cache
2014-01-08 19:12 - 2014-01-08 19:12 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Dane aplikacji\0C1I1L1R1J0M1P0I1G
2014-01-08 19:12 - 2011-11-30 14:19 - 00000000 ___HD C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji
2014-01-08 19:11 - 2014-01-08 19:12 - 00823160 _____ (AnyProtect.com) C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\Setup(5).exe
2014-01-08 19:09 - 2014-01-08 19:06 - 00000204 _____ C:\Documents and Settings\Wlasciciel\daemonprocess.txt
2014-01-08 19:06 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\genienext
2014-01-08 19:06 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\Moje dokumenty\Mobogenie
2014-01-08 19:06 - 2014-01-08 19:06 - 00000000 ____D C:\Documents and Settings\Wlasciciel\.android
2014-01-08 19:06 - 2011-11-30 14:19 - 00000000 ___RD C:\Documents and Settings\Wlasciciel\Moje dokumenty
2014-01-08 19:06 - 2011-11-30 14:19 - 00000000 ____D C:\Documents and Settings\Wlasciciel
2014-01-08 16:03 - 2014-01-08 19:10 - 00823160 _____ (AnyProtect.com) C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\Dane aplikacji\AnyProtectScannerSetup.exe
2014-01-08 14:03 - 2014-01-08 14:03 - 00000638 _____ C:\Documents and Settings\All Users\Pulpit\DiscoveryBarre.lnk
2014-01-08 14:03 - 2014-01-08 14:03 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\DiscoveryBarre
2014-01-08 14:03 - 2013-05-01 19:33 - 00000000 ____D C:\agia3d
2014-01-07 12:47 - 2008-04-15 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-06 11:21 - 2012-09-04 08:24 - 00000000 ____D C:\Program Files\Z-Barre.com
2014-01-04 15:06 - 2011-12-04 12:22 - 00003716 _____ C:\Documents and Settings\Wlasciciel\Pulpit\wypłaty z carmen.txt
2013-12-30 00:51 - 2013-08-27 15:42 - 00001819 _____ C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2013-12-22 11:15 - 2012-06-20 21:24 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-20 12:12 - 2013-12-20 12:12 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-17 17:48 - 2011-11-30 14:19 - 00000000 ___RD C:\Documents and Settings\Wlasciciel\Ulubione
2013-12-16 21:23 - 2013-11-12 12:05 - 00000638 _____ C:\Documents and Settings\All Users\Pulpit\GlaceoKdoBarre.lnk
2013-12-16 21:23 - 2013-11-12 12:05 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\GlaceoKdoBarre
2013-12-12 09:38 - 2011-11-30 15:02 - 00126912 _____ C:\WINDOWS\system32\FNTCACHE.DAT

Files to move or delete:
====================
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\GPUTemp.exe


Some content of TEMP:
====================
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\75981uninstall.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\GPUTemp.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\nsj4B6.tmp.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\nsv474.tmp.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\OpenCL.dll
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\prefetch.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\Setup1.exe
C:\Documents and Settings\Wlasciciel\Ustawienia lokalne\temp\Sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2008-04-15 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\Windows\System32\User32.dll
[2008-04-15 13:00] - [2008-04-15 13:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2008-04-15 13:00] - [2008-04-15 13:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\rpcss.dll
[2008-04-15 13:00] - [2009-02-09 11:53] - 0401408 ____A (Microsoft Corporation) a37311d9d628c1042a2836731787f0f3 

C:\Windows\System32\Drivers\volsnap.sys
[2008-04-15 13:00] - [2008-04-15 13:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================