Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-07-2014 01
Ran by Pc (administrator) on PC-C10F478E272D on 06-07-2014 13:27:46
Running from G:\Narzedzia\Diagnostyka dla Picasso\FIRST
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(ATI Technologies Inc.) G:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) G:\WINDOWS\system32\ati2evxx.exe
(ABBYY) G:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Google Inc.) G:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Oracle Corporation) G:\Program Files\Java\jre7\bin\jqs.exe
(Nuance Communications, Inc.) G:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Realtek Semiconductor Corp.) G:\WINDOWS\RTHDCPL.EXE
(Hewlett-Packard Company) G:\Program Files\HP\hpcoretech\hpcmpmgr.exe
(HP) G:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
(Hewlett-Packard Company) G:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe
(ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(SEIKO EPSON CORPORATION) G:\Program Files\Epson Software\Event Manager\EEventManager.exe
(Brother Industries, Ltd.) G:\Program Files\Browny02\Brother\BrStMonW.exe
(ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
(Oracle Corporation) G:\Program Files\Common Files\Java\Java Update\jusched.exe
() G:\Program Files\Winamp\winampa.exe
() G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\fst_pl_6\upfst_pl_6.exe
(Brother Industries, Ltd.) G:\Program Files\ControlCenter4\BrCtrlCntr.exe
(MusicLab, LLC) G:\Program Files\BearShare Applications\BearShare\BearShare.exe
(Hewlett-Packard Company) G:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
(Brother Industries, Ltd.) G:\Program Files\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) G:\Program Files\Browny02\BrYNSvc.exe
(Microsoft Corporation) G:\WINDOWS\system32\wscntfy.exe
(Oracle Corporation) G:\Program Files\Common Files\Java\Java Update\jucheck.exe
() G:\Program Files\ScanTack\bin\utilScanTack.exe
() G:\Program Files\ScanTack\bin\ScanTack.PurBrowse.exe
() G:\Program Files\ScanTack\updateScanTack.exe
() G:\Program Files\ScanTack\bin\ScanTack.BrowserAdapter.exe
(BitTorrent Inc.) G:\Documents and Settings\Pc\Dane aplikacji\BitTorrent\BitTorrent.exe
(Mozilla Corporation) G:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) G:\Program Files\Mozilla Firefox\plugin-container.exe
(Gadwin Systems, Inc.) G:\Narzedzia\Gadwin PrintScreen 2.6\PrintScreen.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] => G:\WINDOWS\RTHDCPL.EXE [20117648 2012-10-30] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Adobe ARM] => G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Component Manager] => G:\Program Files\HP\hpcoretech\hpcmpmgr.exe [241664 2003-12-22] (Hewlett-Packard Company)
HKLM\...\Run: [HPDJ Taskbar Utility] => G:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [172032 2004-03-04] (HP)
HKLM\...\Run: [HP Software Update] => G:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [49152 2004-02-18] (Hewlett-Packard Company)
HKLM\...\Run: [BCSSync] => G:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [ArcSoft Connection Service] => G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [EEventManager] => G:\Program Files\Epson Software\Event Manager\EEventManager.exe [976832 2009-12-17] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [ControlCenter4] => G:\Program Files\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => G:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM\...\Run: [APSDaemon] => G:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => G:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => G:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [WinampAgent] => G:\Program Files\Winamp\winampa.exe [33792 2003-12-13] ()
HKLM\...\Run: [upfst_pl_6.exe] => G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\fst_pl_6\upfst_pl_6.exe [3154416 2013-11-12] ()
Winlogon\Notify\AtiExtEvent: G:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\.DEFAULT\...\Run: [DWQueuedReporting] => G:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [520424 2013-03-06] (Microsoft Corporation)
HKU\S-1-5-21-1275210071-117609710-839522115-1003\...\Run: [NextLive] => G:\WINDOWS\system32\rundll32.exe "G:\Documents and Settings\Pc\Dane aplikacji\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1275210071-117609710-839522115-1003\...\Run: [BearShare] => G:\Program Files\BearShare Applications\BearShare\BearShare.exe [31154176 2013-11-19] (MusicLab, LLC)
HKU\S-1-5-21-1275210071-117609710-839522115-1003\...\Run: [BitTorrent] => G:\Documents and Settings\Pc\Dane aplikacji\BitTorrent\BitTorrent.exe [1267032 2014-07-02] (BitTorrent Inc.)
Startup: G:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk
ShortcutTarget: Adobe Gamma Loader.lnk -> G:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1387057061&from=cor&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1387057061&from=cor&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E
StartMenuInternet: IEXPLORE.EXE - G:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com/?type=sc&ts=1387057061&from=cor&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E&q={searchTerms}
BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - G:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - G:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - G:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - G:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - G:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - G:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: G:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\oiw712qh.default
FF NewTab: hxxp://isearch.omiga-plus.com/newtab/?type=nt&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E
FF Homepage: www.google.pl
FF Plugin: @adobe.com/FlashPlayer - G:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - G:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - G:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - G:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - g:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - G:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - G:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - g:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 - G:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 - G:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @tools.google.com/Google Update;version=3 - G:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - G:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - G:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: BearSharePlugin - G:\Program Files\BearShare Applications\BearShare\npBearSharePlugin.dll (BearShare)
FF SearchPlugin: G:\Program Files\mozilla firefox\browser\searchplugins\omiga-plus.xml
FF Extension: Torntv V9.0 - G:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\oiw712qh.default\Extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com [2014-06-24]
FF Extension: Fast Start - G:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\oiw712qh.default\Extensions\faststartff@gmail.com [2014-07-02]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - G:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\oiw712qh.default\extensions\faststartff@gmail.com
FF Extension: Fast Start - G:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\oiw712qh.default\extensions\faststartff@gmail.com [2014-07-02]

Chrome: 
=======
CHR HomePage: hxxp://isearch.omiga-plus.com/?type=hp&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E
CHR StartupUrls: "hxxp://isearch.omiga-plus.com/?type=hp&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E"
CHR NewTab: "chrome-extension://pelmeidfhdlhlbjimpabfcbnnojbboma/index.html"
CHR DefaultSearchKeyword: omiga-plus
CHR DefaultSearchProvider: omiga-plus
CHR DefaultSearchURL: http://isearch.omiga-plus.com/web/?type=ds&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E&q={searchTerms}
CHR Extension: (Google Wallet) - G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-29]
CHR Extension: (Quick start) - G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-06-19]
CHR StartMenuInternet: Google Chrome - G:\Program Files\Google\Chrome\Application\chrome.exe http://isearch.omiga-plus.com/?type=sc&ts=1403191939&from=ild&uid=ST500DM002-1BD142_S2AH3K6EXXXXS2AH3K6E
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; G:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 ACDaemon; G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 AppleChargerSrv; G:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R3 BrYNSvc; G:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
S2 globalUpdate; G:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-19] (globalUpdate) [File not signed]
S3 globalUpdatem; G:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-19] (globalUpdate) [File not signed]
R2 JavaQuickStarterService; G:\Program Files\Java\jre7\bin\jqs.exe [182696 2013-12-18] (Oracle Corporation)
S2 KMService; G:\WINDOWS\system32\srvany.exe [8192 2013-10-31] () [File not signed]
R2 PDFProFiltSrvPP; G:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
R2 Update ScanTack; G:\Program Files\ScanTack\updateScanTack.exe [318752 2014-07-06] ()
R2 Util ScanTack; G:\Program Files\ScanTack\bin\utilScanTack.exe [318752 2014-07-06] ()

==================== Drivers (Whitelisted) ====================

R3 Afc; G:\WINDOWS\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
S3 Ambfilt; G:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R1 AmdPPM; G:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R1 AppleCharger; G:\WINDOWS\System32\DRIVERS\AppleCharger.sys [19608 2012-10-25] ()
R3 AR9271; G:\WINDOWS\System32\DRIVERS\athuw.sys [1763584 2012-10-18] (Atheros Communications, Inc.)
S3 BrScnUsb; G:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2010-03-16] (Brother Industries Ltd.)
R3 L1c; G:\WINDOWS\System32\DRIVERS\l1c51x86.sys [82032 2012-04-25] (Atheros Communications, Inc.)
S3 Monfilt; G:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R0 PxHelp20; G:\WINDOWS\System32\DRIVERS\PxHelp20.sys [20016 2003-10-28] (Sonic Solutions) [File not signed]
S3 SONYPVU1; G:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)
R0 sptd; G:\WINDOWS\System32\Drivers\sptd.sys [691696 2013-10-31] () [File not signed]
R1 {9acd1534-e8f8-40cb-b5ac-4996fe01175b}t; G:\WINDOWS\System32\drivers\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}t.sys [55224 2014-04-24] (StdLib)
U3 aut4kj6j; G:\WINDOWS\system32\Drivers\aut4kj6j.sys [0 ] (Microsoft Corporation)
S3 gdrv; \??\G:\WINDOWS\gdrv.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; G:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-06 13:19 - 2014-07-06 13:27 - 00000000 ____D () G:\FRST
2014-07-06 09:32 - 2014-07-06 09:32 - 00000000 ____D () G:\Documents and Settings\All Users\Dane aplikacji\2E2FD
2014-07-05 08:18 - 2014-07-05 08:18 - 00000000 ____D () G:\Documents and Settings\Pc\Moje dokumenty\Pobrane
2014-06-19 17:32 - 2014-07-06 12:32 - 00001408 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-7.job
2014-06-19 17:32 - 2014-07-06 11:32 - 00002268 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-4.job
2014-06-19 17:32 - 2014-07-06 11:32 - 00001460 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-1.job
2014-06-19 17:32 - 2014-07-06 11:32 - 00001404 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-5.job
2014-06-19 17:32 - 2014-07-06 11:32 - 00001306 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-2.job
2014-06-19 17:31 - 2014-07-06 11:36 - 00000926 _____ () G:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-06-19 17:31 - 2014-07-06 11:32 - 00001476 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-6.job
2014-06-19 17:31 - 2014-07-06 11:31 - 00003438 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-11.job
2014-06-19 17:31 - 2014-07-06 09:32 - 00000922 _____ () G:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-06-19 17:31 - 2014-06-19 17:31 - 00000000 ____D () G:\Program Files\globalUpdate
2014-06-19 17:31 - 2014-06-19 17:31 - 00000000 ____D () G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\globalUpdate

==================== One Month Modified Files and Folders =======

2014-07-06 13:27 - 2014-07-06 13:19 - 00000000 ____D () G:\FRST
2014-07-06 13:27 - 2013-10-29 16:47 - 00000000 ____D () G:\Documents and Settings\Pc\Ustawienia lokalne\Temp
2014-07-06 13:26 - 2014-05-04 20:08 - 00000000 ____D () G:\Documents and Settings\Pc\Dane aplikacji\BitTorrent
2014-07-06 12:57 - 2013-10-29 17:21 - 00001028 _____ () G:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-06 12:50 - 2013-10-29 17:21 - 00000930 _____ () G:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-06 12:47 - 2013-10-30 22:48 - 00000000 ____D () G:\Narzedzia
2014-07-06 12:35 - 2013-11-15 20:53 - 00000000 ____D () G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\fst_pl_6
2014-07-06 12:32 - 2014-06-19 17:32 - 00001408 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-7.job
2014-07-06 11:36 - 2014-06-19 17:31 - 00000926 _____ () G:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-07-06 11:32 - 2014-06-19 17:32 - 00002268 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-4.job
2014-07-06 11:32 - 2014-06-19 17:32 - 00001460 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-1.job
2014-07-06 11:32 - 2014-06-19 17:32 - 00001404 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-5.job
2014-07-06 11:32 - 2014-06-19 17:32 - 00001306 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-2.job
2014-07-06 11:32 - 2014-06-19 17:31 - 00001476 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-6.job
2014-07-06 11:31 - 2014-06-19 17:31 - 00003438 _____ () G:\WINDOWS\Tasks\7e291e36-3b2c-4996-b476-f6e204f59931-11.job
2014-07-06 10:03 - 2014-01-25 18:26 - 00000326 _____ () G:\WINDOWS\Tasks\bench-sys.job
2014-07-06 09:40 - 2013-10-29 16:47 - 00000000 ____D () G:\Documents and Settings\Pc
2014-07-06 09:39 - 2004-08-04 14:00 - 00000654 _____ () G:\WINDOWS\win.ini
2014-07-06 09:34 - 2014-01-02 21:45 - 00000000 ____D () G:\Documents and Settings\Pc\Dane aplikacji\newnext.me
2014-07-06 09:33 - 2013-10-29 16:41 - 01200082 ____N () G:\WINDOWS\WindowsUpdate.log
2014-07-06 09:32 - 2014-07-06 09:32 - 00000000 ____D () G:\Documents and Settings\All Users\Dane aplikacji\2E2FD
2014-07-06 09:32 - 2014-06-19 17:31 - 00000922 _____ () G:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-07-06 09:32 - 2014-03-09 15:26 - 00000216 _____ () G:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2014-07-06 09:32 - 2013-10-30 00:32 - 00000159 ____N () G:\WINDOWS\wiadebug.log
2014-07-06 09:32 - 2013-10-30 00:32 - 00000050 ____N () G:\WINDOWS\wiaservc.log
2014-07-06 09:32 - 2013-10-30 00:30 - 00000000 __RHD () G:\Documents and Settings\All Users\Dane aplikacji
2014-07-06 09:32 - 2013-10-29 17:21 - 00001024 _____ () G:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-06 09:32 - 2013-10-29 16:47 - 00000006 ____H () G:\WINDOWS\Tasks\SA.DAT
2014-07-06 09:32 - 2004-08-04 14:00 - 00013646 _____ () G:\WINDOWS\system32\wpa.dbl
2014-07-06 09:31 - 2013-10-29 16:47 - 00032274 ____N () G:\WINDOWS\SchedLgU.Txt
2014-07-06 09:31 - 2013-10-29 16:47 - 00000188 ___SH () G:\Documents and Settings\Pc\ntuser.ini
2014-07-05 08:18 - 2014-07-05 08:18 - 00000000 ____D () G:\Documents and Settings\Pc\Moje dokumenty\Pobrane
2014-07-05 08:18 - 2013-10-29 16:47 - 00000000 ___RD () G:\Documents and Settings\Pc\Moje dokumenty
2014-07-01 20:09 - 2013-10-31 22:53 - 00002493 _____ () G:\Documents and Settings\Pc\Pulpit\Excel 2010.lnk
2014-07-01 19:56 - 2014-05-04 20:10 - 00000827 _____ () G:\Documents and Settings\Pc\Pulpit\BitTorrent.lnk
2014-07-01 19:56 - 2014-05-04 20:10 - 00000827 _____ () G:\Documents and Settings\Pc\Menu Start\BitTorrent.lnk
2014-06-29 23:18 - 2013-10-31 22:44 - 00131072 _____ () G:\WINDOWS\system32\config\OAlerts.evt
2014-06-26 22:12 - 2013-10-31 22:52 - 00002499 _____ () G:\Documents and Settings\Pc\Pulpit\Word 2010.lnk
2014-06-26 19:45 - 2014-01-09 21:34 - 00000000 ____D () G:\Program Files\Mozilla Maintenance Service
2014-06-26 19:45 - 2014-01-09 21:34 - 00000000 ____D () G:\Program Files\Mozilla Firefox
2014-06-24 00:02 - 2013-12-08 20:13 - 00000000 ____D () G:\Program Files\Winamp
2014-06-23 23:57 - 2013-12-08 20:13 - 00000155 _____ () G:\WINDOWS\winamp.ini
2014-06-23 22:09 - 2013-11-03 12:21 - 00000000 ____D () G:\Obrazy
2014-06-19 22:41 - 2014-02-06 20:00 - 00000000 ____D () G:\Tymczasowe
2014-06-19 18:01 - 2013-10-29 16:47 - 00000000 ____D () G:\Documents and Settings\Pc\Pulpit
2014-06-19 18:01 - 2013-10-29 16:47 - 00000000 ____D () G:\Documents and Settings\Pc\Menu Start\Programy
2014-06-19 17:32 - 2014-01-09 21:34 - 00000940 _____ () G:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2014-06-19 17:32 - 2014-01-09 21:34 - 00000934 _____ () G:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2014-06-19 17:32 - 2013-10-29 17:23 - 00000971 _____ () G:\Documents and Settings\Pc\Pulpit\Internet Explorer.lnk
2014-06-19 17:32 - 2013-10-29 17:22 - 00002029 _____ () G:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2014-06-19 17:32 - 2013-10-29 16:47 - 00001013 _____ () G:\Documents and Settings\Pc\Menu Start\Programy\Internet Explorer.lnk
2014-06-19 17:31 - 2014-06-19 17:31 - 00000000 ____D () G:\Program Files\globalUpdate
2014-06-19 17:31 - 2014-06-19 17:31 - 00000000 ____D () G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\globalUpdate
2014-06-19 17:31 - 2013-10-29 16:47 - 00000000 ___HD () G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji
2014-06-16 19:54 - 2013-11-01 23:30 - 00000055 _____ () G:\WINDOWS\hcomw32.ini
2014-06-16 19:54 - 2013-11-01 23:30 - 00000000 ____D () G:\My Projects
2014-06-16 07:15 - 2013-10-31 22:35 - 00000000 ____D () G:\Documents and Settings\Pc\Dane aplikacji\DAEMON Tools Lite
2014-06-13 20:42 - 2013-10-30 22:21 - 00000000 ____D () G:\Zdjęcia
2014-06-12 22:57 - 2013-11-07 11:42 - 00000000 ____D () G:\WINDOWS\Minidump
2014-06-11 23:25 - 2013-11-28 19:43 - 00000000 ____D () G:\WINDOWS\system32\MRT
2014-06-11 23:25 - 2013-10-31 22:40 - 00000000 ____D () G:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2014-06-11 23:23 - 2013-11-03 02:13 - 92708840 _____ (Microsoft Corporation) G:\WINDOWS\system32\MRT.exe
2014-06-08 15:00 - 2014-03-09 15:26 - 00000210 _____ () G:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
2014-06-06 19:09 - 2013-11-03 12:39 - 00000000 ____D () G:\NC

Some content of TEMP:
====================
G:\Documents and Settings\Pc\Ustawienia lokalne\Temp\jre-7u60-windows-i586-iftw.exe


==================== Bamital & volsnap Check =================

G:\WINDOWS\explorer.exe => File is digitally signed
G:\WINDOWS\system32\winlogon.exe => File is digitally signed
G:\WINDOWS\system32\svchost.exe => File is digitally signed
G:\WINDOWS\system32\services.exe => File is digitally signed
G:\WINDOWS\system32\User32.dll => File is digitally signed
G:\WINDOWS\system32\userinit.exe => File is digitally signed
G:\WINDOWS\system32\rpcss.dll => File is digitally signed
G:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================