Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:26-08-2014
Ran by MICHAŁ (administrator) on MACHINA on 27-08-2014 21:10:20
Running from J:\heal
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\TotalProtection\AVK\AVKWCtl.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\TotalProtection\AVK\AVKService.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer.exe
(G Data Software AG) C:\Program Files\G Data\TotalProtection\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files\G Data\TotalProtection\Firewall\GDFwSvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Hewlett-Packard Development Company, L.P.) H:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Creative Technology Ltd.) H:\Program Files\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe
(Creative Technology Ltd.) C:\WINDOWS\V0415Mon.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(G Data Software AG) C:\Program Files\G Data\TotalProtection\Firewall\GDFirewallTray.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Hewlett-Packard Development Company, L.P.) H:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Hewlett-Packard Development Company, L.P.) H:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20064872 2011-08-17] (Realtek Semiconductor Corp.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AdobeCS4ServiceManager] => C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Software Update] => H:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-02-19] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [Live! Central] => H:\Program Files\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe [438399 2008-08-22] (Creative Technology Ltd.)
HKLM\...\Run: [V0415Mon.exe] => C:\WINDOWS\V0415Mon.exe [28672 2008-08-07] (Creative Technology Ltd.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2586912 2013-07-09] ()
HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\TotalProtection\Firewall\GDFirewallTray.exe [1756792 2014-05-20] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\system32\userinit.exe,C:\Program Files\G Data\TotalProtection\AVKTray\AVKTray.exe,c:\program files\g data\totalprotection\avkkid\avkcks.exe
Winlogon\Notify\WgaLogon: WgaLogon.dll [X]
HKU\.DEFAULT\...\RunOnce: [VF0415Inst] => RunDll32.exe C:\WINDOWS\system32\V0415Pin.dll,RunDLL32EP 515
HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\Run: [ALLUpdate] => H:\Program Files\ALLPlayer\ALLUpdate.exe [1379840 2011-08-16] ()
HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\Run: [Steam] => H:\Program Files\Steam\Steam.exe [1937600 2014-08-14] (Valve Corporation)
HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\Run: [ares] => "H:\Program Files\Ares\Ares.exe" -h
HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\MountPoints2: {11357072-50f5-11e1-8b90-6c626dd8a9c8} - K:\Autorun.exe
HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\MountPoints2: {c2a264fc-5001-11e1-8b8b-6c626dd8a9c8} - J:\Autorun.exe
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> H:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Development Company, L.P.)
Startup: C:\Documents and Settings\MICHAŁ\Menu Start\Programy\Autostart\Spis treści programu OneNote.onetoc2 ()
Startup: C:\Documents and Settings\MICHAŁ\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=19946&mntrId=44767c630000000000006c626dd8a9c8
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=19946&mntrId=44767c630000000000006c626dd8a9c8
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> H:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\MICHAŁ\Dane aplikacji\Mozilla\Firefox\Profiles\gnjn10bf.default
FF SelectedSearchEngine: Search the web (Babylon)
FF Homepage: hxxp://search.babylon.com/?babsrc=HP_ss&affID=19946&mntrId=44767c630000000000006c626dd8a9c8
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @protectdisc.com/NPMPDRM -> C:\Program Files\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Babylon - C:\Documents and Settings\MICHAŁ\Dane aplikacji\Mozilla\Firefox\Profiles\gnjn10bf.default\Extensions\ffxtlbr@babylon.com [2011-10-09]
FF Extension: DealPly - C:\Documents and Settings\MICHAŁ\Dane aplikacji\Mozilla\Firefox\Profiles\gnjn10bf.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2011-10-09]
FF Extension: Iplex to ALLPlayer - C:\Documents and Settings\MICHAŁ\Dane aplikacji\Mozilla\Firefox\Profiles\gnjn10bf.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2011-10-10]
FF Extension: Torntv - C:\Documents and Settings\MICHAŁ\Dane aplikacji\Mozilla\Firefox\Profiles\gnjn10bf.default\Extensions\torntv@torntv.com.xpi [2012-12-09]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-09-30]

Chrome: 
=======
CHR HomePage: Default -> hxxp://pl.v9.com/opc/opc_1328454034_060346
CHR RestoreOnStartup: Default -> "hxxp://www.google.pl/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\25.0.1364.152\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\25.0.1364.152\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\25.0.1364.152\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Documents and Settings\MICHA\u0141\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (fluxDVD Browser Plugin) - C:\Program Files\Common Files\mpDRM\NPMPDRM.dll ( )
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR CustomProfile: C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-16]
CHR Extension: (Szukaj w Google) - C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-16]
CHR Extension: (Gmail) - C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-16]
CHR HKLM\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx []
CHR HKLM\...\Chrome\Extension: [jbpkiefagocgkmemidfngdkamloieekf] - C:\Program Files\TornTV.com\torn11.crx []
CHR HKCU\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx []

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2250360 2014-05-27] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\TotalProtection\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\TotalProtection\AVK\AVKWCtl.exe [2123416 2014-05-20] (G Data Software AG)
R3 GDFwSvc; C:\Program Files\G Data\TotalProtection\Firewall\GDFwSvc.exe [2564816 2014-05-20] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700536 2014-05-20] (G Data Software AG)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 acedrv11; C:\WINDOWS\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [16384 2004-07-09] (Microsoft Corporation)
R0 GDBehave; C:\WINDOWS\System32\drivers\GDBehave.sys [41728 2014-08-21] (G Data Software AG)
S3 GDKBFlt; C:\WINDOWS\system32\drivers\GDKBFlt32.sys [20096 2014-08-21] (G Data Software AG)
R1 GDMnIcpt; C:\WINDOWS\system32\drivers\MiniIcpt.sys [102400 2014-08-21] (G Data Software AG)
R0 GDNdisIc; C:\WINDOWS\System32\drivers\GDNdisIc.sys [30200 2014-08-21] (G Data Software AG)
R2 GDTdiInterceptor; C:\WINDOWS\system32\drivers\GDTdiIcpt.sys [53248 2014-08-21] (G Data Software AG)
R1 GRD; C:\WINDOWS\system32\drivers\GRD.sys [69024 2014-08-21] (G Data Software)
R1 HookCentre; C:\WINDOWS\system32\drivers\HookCentre.sys [42752 2014-08-21] (G Data Software AG)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49664 2006-04-13] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2006-04-13] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2006-04-13] (HP)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10112 2004-07-09] (Microsoft Corporation)
R3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [128672 2013-07-09] (NVIDIA Corporation)
R3 RLDesignVirtualAudioCableWdm; C:\WINDOWS\System32\DRIVERS\livecamv.sys [31616 2007-01-15] ()
S3 V0415Afx; C:\WINDOWS\System32\DRIVERS\V0415Afx.sys [160768 2008-04-30] (Creative Technology Ltd.)
S3 V0415Vid; C:\WINDOWS\System32\DRIVERS\V0415Vid.sys [282464 2008-08-14] (Creative Technology Ltd.)
S4 IntelIde; No ImagePath
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
S3 MREMP50; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [X]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
S3 MRESP50; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [X]
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-27 21:08 - 2014-08-27 21:10 - 00000000 ___DC () C:\FRST
2014-08-22 00:37 - 2014-08-22 00:38 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Pulpit\AMD
2014-08-21 19:37 - 2014-08-21 19:37 - 00069024 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys
2014-08-21 19:37 - 2014-08-21 19:37 - 00015192 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys
2014-08-21 19:22 - 2014-08-21 19:22 - 00000000 _____ () C:\WINDOWS\GDDevCtrl.INI
2014-08-21 12:31 - 2014-08-21 12:31 - 00030200 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDNdisIc.sys
2014-08-21 12:31 - 2014-08-21 12:31 - 00001674 _____ () C:\Documents and Settings\All Users\Pulpit\G Data TotalProtection.lnk
2014-08-21 12:31 - 2014-08-21 12:31 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\G Data TotalProtection
2014-08-21 12:30 - 2014-08-21 12:30 - 00053248 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDTdiIcpt.sys
2014-08-21 12:30 - 2014-08-21 12:30 - 00020096 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBFlt32.sys
2014-08-21 12:30 - 2014-08-21 12:30 - 00000621 _____ () C:\WINDOWS\KB918997.log
2014-08-21 12:30 - 2014-08-21 12:30 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_GDKBFlt32_01007.Wdf
2014-08-21 12:30 - 2014-08-21 12:30 - 00000000 _____ () C:\Documents and Settings\MICHAŁ\Dane aplikacji\gdfw.log
2014-08-21 12:29 - 2014-08-21 12:29 - 00102400 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys
2014-08-21 12:29 - 2014-08-21 12:29 - 00042752 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys
2014-08-21 12:29 - 2014-08-21 12:29 - 00041728 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys
2014-08-21 12:29 - 2014-08-21 12:29 - 00000779 _____ () C:\Documents and Settings\MICHAŁ\Dane aplikacji\gdscan.log
2014-08-21 12:29 - 2014-08-21 12:29 - 00000000 __HDC () C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2014-08-21 12:28 - 2014-08-21 12:29 - 00007366 _____ () C:\WINDOWS\IDNMitigationAPIs.log
2014-08-21 12:28 - 2014-08-21 12:28 - 00002214 _____ () C:\WINDOWS\DPINST.LOG
2014-08-21 12:27 - 2014-08-21 12:27 - 00000000 ____D () C:\Program Files\G Data
2014-08-21 12:27 - 2014-08-21 12:27 - 00000000 ____D () C:\Program Files\Common Files\G Data
2014-08-21 12:26 - 2014-08-21 19:20 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\G Data
2014-08-21 11:41 - 2014-08-21 11:41 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-08-21 11:27 - 2014-08-21 11:56 - 00065536 _____ () C:\WINDOWS\system32\config\Doctor Web.evt
2014-08-21 11:27 - 2014-08-21 11:38 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Doctor Web
2014-08-14 13:25 - 2014-08-14 13:25 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Dane aplikacji\Help
2014-08-03 01:07 - 2001-10-26 17:29 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpusb.dll
2014-08-03 01:06 - 2008-04-14 22:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpusd.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-27 21:10 - 2014-08-27 21:08 - 00000000 ___DC () C:\FRST
2014-08-27 21:10 - 2011-09-29 23:31 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp
2014-08-27 21:07 - 2014-02-10 21:47 - 00002890 _____ () C:\WINDOWS\system32\nvAppTimestamps
2014-08-27 21:04 - 2011-09-29 23:22 - 01570150 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-27 21:03 - 2011-09-30 00:53 - 01197474 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-27 21:03 - 2008-04-15 14:00 - 00528954 _____ () C:\WINDOWS\system32\perfh015.dat
2014-08-27 21:03 - 2008-04-15 14:00 - 00103104 _____ () C:\WINDOWS\system32\perfc015.dat
2014-08-27 21:02 - 2011-11-22 20:11 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Dane aplikacji\Skype
2014-08-27 21:00 - 2012-11-27 22:55 - 00014856 _____ () C:\WINDOWS\setupact.log
2014-08-27 21:00 - 2012-11-27 22:54 - 00573687 _____ () C:\WINDOWS\setupapi.log
2014-08-27 20:59 - 2014-03-30 10:29 - 00000224 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2014-08-27 20:59 - 2011-10-01 09:41 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-27 20:59 - 2011-09-30 00:55 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-08-27 20:59 - 2011-09-30 00:55 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-08-27 20:59 - 2011-09-29 23:30 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-08-27 20:59 - 2008-04-15 14:00 - 00013734 _____ () C:\WINDOWS\system32\wpa.dbl
2014-08-23 23:42 - 2011-09-29 23:30 - 00032544 _____ () C:\WINDOWS\SchedLgU.Txt
2014-08-23 23:41 - 2011-09-29 23:31 - 00000188 ___SH () C:\Documents and Settings\MICHAŁ\ntuser.ini
2014-08-23 23:26 - 2011-10-01 09:41 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-23 22:44 - 2013-04-18 20:58 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-08-22 00:40 - 2012-02-05 14:35 - 00000000 ____D () C:\WINDOWS\system32\ReinstallBackups
2014-08-22 00:40 - 2011-09-30 08:16 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-08-22 00:38 - 2014-08-22 00:37 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Pulpit\AMD
2014-08-22 00:37 - 2011-09-29 23:31 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Pulpit
2014-08-21 23:50 - 2011-09-30 00:52 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-08-21 23:50 - 2011-09-30 00:52 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-08-21 20:40 - 2011-09-30 00:45 - 00000000 ____D () C:\WINDOWS\repair
2014-08-21 20:39 - 2011-09-29 23:20 - 00000000 ____D () C:\WINDOWS\Registration
2014-08-21 19:44 - 2011-10-02 11:21 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2014-08-21 19:39 - 2013-08-14 14:35 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-21 19:37 - 2014-08-21 19:37 - 00069024 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys
2014-08-21 19:37 - 2014-08-21 19:37 - 00015192 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys
2014-08-21 19:24 - 2013-08-21 22:15 - 00002347 _____ () C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader XI.lnk
2014-08-21 19:22 - 2014-08-21 19:22 - 00000000 _____ () C:\WINDOWS\GDDevCtrl.INI
2014-08-21 19:20 - 2014-08-21 12:26 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\G Data
2014-08-21 13:44 - 2013-04-18 20:58 - 00699056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-08-21 13:44 - 2013-04-18 20:58 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-08-21 12:55 - 2011-09-29 23:31 - 00000000 ____D () C:\Documents and Settings\MICHAŁ
2014-08-21 12:31 - 2014-08-21 12:31 - 00030200 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDNdisIc.sys
2014-08-21 12:31 - 2014-08-21 12:31 - 00001674 _____ () C:\Documents and Settings\All Users\Pulpit\G Data TotalProtection.lnk
2014-08-21 12:31 - 2014-08-21 12:31 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\G Data TotalProtection
2014-08-21 12:30 - 2014-08-21 12:30 - 00053248 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDTdiIcpt.sys
2014-08-21 12:30 - 2014-08-21 12:30 - 00020096 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBFlt32.sys
2014-08-21 12:30 - 2014-08-21 12:30 - 00000621 _____ () C:\WINDOWS\KB918997.log
2014-08-21 12:30 - 2014-08-21 12:30 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_GDKBFlt32_01007.Wdf
2014-08-21 12:30 - 2014-08-21 12:30 - 00000000 _____ () C:\Documents and Settings\MICHAŁ\Dane aplikacji\gdfw.log
2014-08-21 12:30 - 2011-09-29 23:31 - 00000000 __RHD () C:\Documents and Settings\MICHAŁ\Dane aplikacji
2014-08-21 12:29 - 2014-08-21 12:29 - 00102400 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys
2014-08-21 12:29 - 2014-08-21 12:29 - 00042752 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys
2014-08-21 12:29 - 2014-08-21 12:29 - 00041728 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys
2014-08-21 12:29 - 2014-08-21 12:29 - 00000779 _____ () C:\Documents and Settings\MICHAŁ\Dane aplikacji\gdscan.log
2014-08-21 12:29 - 2014-08-21 12:29 - 00000000 __HDC () C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2014-08-21 12:29 - 2014-08-21 12:28 - 00007366 _____ () C:\WINDOWS\IDNMitigationAPIs.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00529714 _____ () C:\WINDOWS\iis6.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00456197 _____ () C:\WINDOWS\FaxSetup.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00227210 _____ () C:\WINDOWS\ocgen.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00211885 _____ () C:\WINDOWS\tsoc.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00153137 _____ () C:\WINDOWS\comsetup.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00149482 _____ () C:\WINDOWS\msmqinst.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00093718 _____ () C:\WINDOWS\ntdtcsetup.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00080137 _____ () C:\WINDOWS\netfxocm.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00031807 _____ () C:\WINDOWS\MedCtrOC.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00028677 _____ () C:\WINDOWS\ocmsn.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00023287 _____ () C:\WINDOWS\tabletoc.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00023125 _____ () C:\WINDOWS\msgsocm.log
2014-08-21 12:29 - 2012-12-14 23:46 - 00001374 _____ () C:\WINDOWS\imsins.log
2014-08-21 12:28 - 2014-08-21 12:28 - 00002214 _____ () C:\WINDOWS\DPINST.LOG
2014-08-21 12:27 - 2014-08-21 12:27 - 00000000 ____D () C:\Program Files\G Data
2014-08-21 12:27 - 2014-08-21 12:27 - 00000000 ____D () C:\Program Files\Common Files\G Data
2014-08-21 12:26 - 2011-09-30 00:52 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-08-21 12:03 - 2011-09-30 00:52 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
2014-08-21 11:57 - 2011-09-30 09:54 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB959426$
2014-08-21 11:56 - 2014-08-21 11:27 - 00065536 _____ () C:\WINDOWS\system32\config\Doctor Web.evt
2014-08-21 11:41 - 2014-08-21 11:41 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2014-08-21 11:38 - 2014-08-21 11:27 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Doctor Web
2014-08-14 13:25 - 2014-08-14 13:25 - 00000000 ____D () C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Dane aplikacji\Help
2014-08-14 13:25 - 2011-09-30 00:45 - 00000000 ____D () C:\WINDOWS\Help
2014-08-14 13:25 - 2011-09-29 23:31 - 00000000 ___HD () C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Dane aplikacji
2014-08-14 13:23 - 2014-03-30 10:29 - 00000218 _____ () C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
2014-08-03 11:16 - 2011-09-29 23:31 - 00000000 ___RD () C:\Documents and Settings\MICHAŁ\Moje dokumenty\Moje obrazy
2014-07-31 23:42 - 2011-09-30 09:46 - 96303304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

Some content of TEMP:
====================
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\AutoRun.exe
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\AutoRunGUI.dll
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\drm_dyndata_7330014.dll
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\eauninstall.exe
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\setup_wm.exe
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\SkypeSetup.exe
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\t.dll
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\The Battle for Middle-earth II_uninst.exe
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\_is43F.exe
C:\Documents and Settings\MICHAŁ\Ustawienia lokalne\Temp\{4B131C49-042E-445C-A5FC-43B191FFD563}-25.0.1364.97_24.0.1312.57_chrome_updater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================