Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-07-2014 01 Ran by Pc (administrator) on PC-C10F478E272D on 08-07-2014 21:23:40 Running from G:\Narzedzia\Diagnostyka dla Picasso\FIRST Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (ATI Technologies Inc.) G:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.) G:\WINDOWS\system32\ati2evxx.exe (ABBYY) G:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Nuance Communications, Inc.) G:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe (Google Inc.) G:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe (Microsoft Corporation) G:\WINDOWS\system32\wuauclt.exe (Realtek Semiconductor Corp.) G:\WINDOWS\RTHDCPL.EXE (Hewlett-Packard Company) G:\Program Files\HP\hpcoretech\hpcmpmgr.exe (HP) G:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe (Hewlett-Packard Company) G:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe (ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (SEIKO EPSON CORPORATION) G:\Program Files\Epson Software\Event Manager\EEventManager.exe (Brother Industries, Ltd.) G:\Program Files\Browny02\Brother\BrStMonW.exe (ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac () G:\Program Files\Winamp\winampa.exe (Brother Industries, Ltd.) G:\Program Files\ControlCenter4\BrCtrlCntr.exe (Brother Industries, Ltd.) G:\Program Files\Browny02\BrYNSvc.exe (Microsoft Corporation) G:\WINDOWS\system32\wscntfy.exe (Hewlett-Packard Company) G:\Program Files\HP\hpcoretech\comp\hptskmgr.exe (Brother Industries, Ltd.) G:\Program Files\ControlCenter4\BrCcUxSys.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDCPL] => G:\WINDOWS\RTHDCPL.EXE [20117648 2012-10-30] (Realtek Semiconductor Corp.) HKLM\...\Run: [Adobe ARM] => G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [HP Component Manager] => G:\Program Files\HP\hpcoretech\hpcmpmgr.exe [241664 2003-12-22] (Hewlett-Packard Company) HKLM\...\Run: [HPDJ Taskbar Utility] => G:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [172032 2004-03-04] (HP) HKLM\...\Run: [HP Software Update] => G:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [49152 2004-02-18] (Hewlett-Packard Company) HKLM\...\Run: [BCSSync] => G:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [ArcSoft Connection Service] => G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.) HKLM\...\Run: [EEventManager] => G:\Program Files\Epson Software\Event Manager\EEventManager.exe [976832 2009-12-17] (SEIKO EPSON CORPORATION) HKLM\...\Run: [ControlCenter4] => G:\Program Files\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.) HKLM\...\Run: [BrStsMon00] => G:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.) HKLM\...\Run: [APSDaemon] => G:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [QuickTime Task] => G:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [WinampAgent] => G:\Program Files\Winamp\winampa.exe [33792 2003-12-13] () HKLM\...\Run: [upfst_pl_6.exe] => G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\fst_pl_6\upfst_pl_6.exe -runhelper HKLM\...\Run: [fst_pl_19] => [X] HKLM\...\Run: [fst_pl_6] => [X] HKLM\...\Run: [fst_pl_73] => [X] HKLM\...\Run: [fst_pl_99] => [X] Winlogon\Notify\AtiExtEvent: G:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.) HKU\.DEFAULT\...\Run: [DWQueuedReporting] => G:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [520424 2013-03-06] (Microsoft Corporation) HKU\S-1-5-21-1275210071-117609710-839522115-1003\...\Run: [BearShare] => "G:\Program Files\BearShare Applications\BearShare\BearShare.exe" --lightmode Startup: G:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk ShortcutTarget: Adobe Gamma Loader.lnk -> G:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - G:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - G:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - G:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - G:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/products/plugin/autodl/jinstall-170-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-170-windows-i586.cab Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - G:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: G:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\yygpirum.default-1404846490562 FF Plugin: @adobe.com/FlashPlayer - G:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin: @Google.com/GoogleEarthPlugin - G:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - g:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - G:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - G:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - g:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - G:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - G:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - G:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR Plugin: (Widevine Content Decryption Module) - G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.4.600\_platform_specific\win_x86\widevinecdmadapter.dll () CHR Plugin: (Shockwave Flash) - G:\Program Files\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - G:\Program Files\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - G:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll () CHR Plugin: (QuickTime Plug-in 7.7.4) - G:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - G:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - G:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - G:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.4) - G:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Microsoft® DRM) - G:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation) CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - G:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.)) CHR Plugin: (Microsoft® DRM) - G:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - G:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - G:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - G:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Earth Plugin) - G:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - G:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - G:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll () CHR Plugin: (Silverlight Plug-In) - g:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (Windows Presentation Foundation) - g:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (Google Wallet) - G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-29] ========================== Services (Whitelisted) ================= R2 ABBYY.Licensing.FineReader.Sprint.9.0; G:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY) R2 ACDaemon; G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S3 AppleChargerSrv; G:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] () R3 BrYNSvc; G:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed] S2 KMService; G:\WINDOWS\system32\srvany.exe [8192 2013-10-31] () [File not signed] R2 PDFProFiltSrvPP; G:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.) ==================== Drivers (Whitelisted) ==================== R3 Afc; G:\WINDOWS\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.) S3 Ambfilt; G:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative) R1 AmdPPM; G:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices) R1 AppleCharger; G:\WINDOWS\System32\DRIVERS\AppleCharger.sys [19608 2012-10-25] () R3 AR9271; G:\WINDOWS\System32\DRIVERS\athuw.sys [1763584 2012-10-18] (Atheros Communications, Inc.) R3 BrScnUsb; G:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2010-03-16] (Brother Industries Ltd.) R3 L1c; G:\WINDOWS\System32\DRIVERS\l1c51x86.sys [82032 2012-04-25] (Atheros Communications, Inc.) S3 Monfilt; G:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.) R0 PxHelp20; G:\WINDOWS\System32\DRIVERS\PxHelp20.sys [20016 2003-10-28] (Sonic Solutions) [File not signed] S3 SONYPVU1; G:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation) R0 sptd; G:\WINDOWS\System32\Drivers\sptd.sys [691696 2013-10-31] () [File not signed] U3 a0ymuutp; G:\WINDOWS\system32\Drivers\a0ymuutp.sys [0 ] (Microsoft Corporation) S4 IntelIde; No ImagePath U5 ScsiPort; G:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-08 21:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) G:\WINDOWS\system32\sqlite3.dll 2014-07-08 21:08 - 2014-07-08 21:08 - 00000000 ____D () G:\Documents and Settings\Pc\Pulpit\Stare dane programu Firefox 2014-07-08 21:06 - 2014-07-08 21:06 - 00000000 ____D () G:\WINDOWS\system32\appmgmt 2014-07-08 21:00 - 2014-07-08 21:00 - 00000000 ____D () G:\Documents and Settings\All Users\Dane aplikacji\235D 2014-07-08 20:55 - 2014-07-08 21:21 - 00000000 ____D () G:\AdwCleaner 2014-07-06 13:19 - 2014-07-08 21:23 - 00000000 ____D () G:\FRST 2014-07-05 08:18 - 2014-07-05 08:18 - 00000000 ____D () G:\Documents and Settings\Pc\Moje dokumenty\Pobrane ==================== One Month Modified Files and Folders ======= 2014-07-08 21:23 - 2014-07-06 13:19 - 00000000 ____D () G:\FRST 2014-07-08 21:23 - 2013-10-29 16:47 - 00000000 ____D () G:\Documents and Settings\Pc\Ustawienia lokalne\Temp 2014-07-08 21:22 - 2013-10-29 16:41 - 01285102 _____ () G:\WINDOWS\WindowsUpdate.log 2014-07-08 21:21 - 2014-07-08 20:55 - 00000000 ____D () G:\AdwCleaner 2014-07-08 21:21 - 2014-03-09 15:26 - 00000216 _____ () G:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2014-07-08 21:21 - 2013-10-30 00:32 - 00000159 _____ () G:\WINDOWS\wiadebug.log 2014-07-08 21:21 - 2013-10-30 00:32 - 00000050 _____ () G:\WINDOWS\wiaservc.log 2014-07-08 21:21 - 2013-10-29 17:21 - 00001024 _____ () G:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-08 21:21 - 2013-10-29 16:47 - 00000006 ____H () G:\WINDOWS\Tasks\SA.DAT 2014-07-08 21:21 - 2004-08-04 14:00 - 00013646 _____ () G:\WINDOWS\system32\wpa.dbl 2014-07-08 21:19 - 2013-10-29 16:47 - 00032550 _____ () G:\WINDOWS\SchedLgU.Txt 2014-07-08 21:19 - 2013-10-29 16:47 - 00000188 ___SH () G:\Documents and Settings\Pc\ntuser.ini 2014-07-08 21:18 - 2013-10-29 16:47 - 00000000 ___RD () G:\Documents and Settings\Pc\Moje dokumenty 2014-07-08 21:18 - 2013-10-29 16:47 - 00000000 ___HD () G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji 2014-07-08 21:18 - 2013-10-29 16:47 - 00000000 ____D () G:\Documents and Settings\Pc 2014-07-08 21:08 - 2014-07-08 21:08 - 00000000 ____D () G:\Documents and Settings\Pc\Pulpit\Stare dane programu Firefox 2014-07-08 21:08 - 2013-10-29 16:47 - 00000000 ____D () G:\Documents and Settings\Pc\Pulpit 2014-07-08 21:06 - 2014-07-08 21:06 - 00000000 ____D () G:\WINDOWS\system32\appmgmt 2014-07-08 21:06 - 2013-10-30 00:31 - 00000000 ___RD () G:\Documents and Settings\All Users\Menu Start\Programy 2014-07-08 21:06 - 2013-10-30 00:31 - 00000000 ____D () G:\Documents and Settings\All Users\Pulpit 2014-07-08 21:00 - 2014-07-08 21:00 - 00000000 ____D () G:\Documents and Settings\All Users\Dane aplikacji\235D 2014-07-08 21:00 - 2014-01-25 18:26 - 00000008 __RSH () G:\Documents and Settings\All Users\ntuser.pol 2014-07-08 21:00 - 2013-10-30 00:30 - 00000000 __RHD () G:\Documents and Settings\All Users\Dane aplikacji 2014-07-08 20:59 - 2014-04-17 16:40 - 00000000 ____D () G:\WINDOWS\pss 2014-07-08 20:59 - 2014-01-25 18:26 - 00000000 ___HD () G:\WINDOWS\system32\GroupPolicy 2014-07-08 20:59 - 2013-10-31 22:44 - 00131072 _____ () G:\WINDOWS\system32\config\OAlerts.evt 2014-07-08 20:59 - 2013-10-29 16:47 - 00000000 __RHD () G:\Documents and Settings\Pc\Dane aplikacji 2014-07-08 20:58 - 2014-01-09 21:34 - 00000942 _____ () G:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk 2014-07-08 20:58 - 2014-01-09 21:34 - 00000936 _____ () G:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk 2014-07-08 20:58 - 2013-10-29 17:23 - 00000973 _____ () G:\Documents and Settings\Pc\Pulpit\Internet Explorer.lnk 2014-07-08 20:58 - 2013-10-29 17:22 - 00002031 _____ () G:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2014-07-08 20:58 - 2013-10-29 17:22 - 00000000 ____D () G:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome 2014-07-08 20:58 - 2013-10-29 16:47 - 00001015 _____ () G:\Documents and Settings\Pc\Menu Start\Programy\Internet Explorer.lnk 2014-07-08 20:58 - 2013-10-29 16:47 - 00000000 ____D () G:\Documents and Settings\Pc\Menu Start\Programy 2014-07-08 20:57 - 2014-05-04 20:08 - 00000000 ____D () G:\Documents and Settings\Pc\Dane aplikacji\BitTorrent 2014-07-08 20:57 - 2013-10-29 17:21 - 00001028 _____ () G:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-08 20:55 - 2013-10-30 22:48 - 00000000 ____D () G:\Narzedzia 2014-07-08 20:50 - 2013-10-31 22:52 - 00002499 _____ () G:\Documents and Settings\Pc\Pulpit\Word 2010.lnk 2014-07-08 20:50 - 2013-10-29 17:21 - 00000930 _____ () G:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-07-08 20:28 - 2004-08-04 14:00 - 00000654 _____ () G:\WINDOWS\win.ini 2014-07-08 19:50 - 2013-10-31 22:53 - 00002493 _____ () G:\Documents and Settings\Pc\Pulpit\Excel 2010.lnk 2014-07-08 19:11 - 2013-10-30 22:21 - 00000000 ____D () G:\Zdjęcia 2014-07-08 18:58 - 2013-11-03 12:10 - 00000000 ____D () G:\Muzyka 2014-07-07 07:33 - 2013-11-03 12:21 - 00000000 ____D () G:\Obrazy 2014-07-05 08:18 - 2014-07-05 08:18 - 00000000 ____D () G:\Documents and Settings\Pc\Moje dokumenty\Pobrane 2014-07-01 19:56 - 2014-05-04 20:10 - 00000827 _____ () G:\Documents and Settings\Pc\Pulpit\BitTorrent.lnk 2014-07-01 19:56 - 2014-05-04 20:10 - 00000827 _____ () G:\Documents and Settings\Pc\Menu Start\BitTorrent.lnk 2014-06-26 19:45 - 2014-01-09 21:34 - 00000000 ____D () G:\Program Files\Mozilla Maintenance Service 2014-06-26 19:45 - 2014-01-09 21:34 - 00000000 ____D () G:\Program Files\Mozilla Firefox 2014-06-24 00:02 - 2013-12-08 20:13 - 00000000 ____D () G:\Program Files\Winamp 2014-06-23 23:57 - 2013-12-08 20:13 - 00000155 _____ () G:\WINDOWS\winamp.ini 2014-06-19 22:41 - 2014-02-06 20:00 - 00000000 ____D () G:\Tymczasowe 2014-06-16 19:54 - 2013-11-01 23:30 - 00000055 _____ () G:\WINDOWS\hcomw32.ini 2014-06-16 19:54 - 2013-11-01 23:30 - 00000000 ____D () G:\My Projects 2014-06-16 07:15 - 2013-10-31 22:35 - 00000000 ____D () G:\Documents and Settings\Pc\Dane aplikacji\DAEMON Tools Lite 2014-06-12 22:57 - 2013-11-07 11:42 - 00000000 ____D () G:\WINDOWS\Minidump 2014-06-11 23:25 - 2013-11-28 19:43 - 00000000 ____D () G:\WINDOWS\system32\MRT 2014-06-11 23:25 - 2013-10-31 22:40 - 00000000 ____D () G:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help 2014-06-11 23:23 - 2013-11-03 02:13 - 92708840 _____ (Microsoft Corporation) G:\WINDOWS\system32\MRT.exe 2014-06-08 15:00 - 2014-03-09 15:26 - 00000210 _____ () G:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job Some content of TEMP: ==================== G:\Documents and Settings\Pc\Ustawienia lokalne\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= G:\WINDOWS\explorer.exe => File is digitally signed G:\WINDOWS\system32\winlogon.exe => File is digitally signed G:\WINDOWS\system32\svchost.exe => File is digitally signed G:\WINDOWS\system32\services.exe => File is digitally signed G:\WINDOWS\system32\User32.dll => File is digitally signed G:\WINDOWS\system32\userinit.exe => File is digitally signed G:\WINDOWS\system32\rpcss.dll => File is digitally signed G:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================