Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by Admin (administrator) on KONRAD-KOMPUTER on 05-01-2014 18:09:27
Running from D:\J.LO\c1
Windows 7 Home Premium (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Windows\AsScrPro.exe
() C:\Program Files (x86)\blueconnect\BackgroundService\ServiceManager.exe
(Memeo) C:\Program Files (x86)\Seagate\Seagate Dashboard\SeagateDashboardService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
() C:\Program Files (x86)\blueconnect\BackgroundService\ModemListener.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-08-05] ()
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2245120 2009-09-17] (VIA)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [6859392 2009-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [170624 2009-08-20] (ASUS)
HKLM-x32\...\Run: [ERA_SEPANG ModemListener] - C:\Program Files (x86)\blueconnect\BackgroundService\ModemListener.exe [102400 2010-12-07] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2014-01-04] (RealNetworks, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-12-04] (Google Inc.)
MountPoints2: {12033c57-7073-11e2-b488-20cf303120c4} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\wpavi.avi
MountPoints2: {12033c6c-7073-11e2-b488-20cf303120c4} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\wpavi.avi

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - D:\PROG FILES\DESKOP SIDEBAR\sbhelp.dll (Idea2)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Homepage Print 2BHO - {EFC91ACA-519F-428D-8472-81E158609D25} - C:\Program Files (x86)\Homepage Print 2\IEBand.dll (CORPUS CORPORATION)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Homepage Print 2 - {C4FB9EEC-5B29-486B-ACD1-D93A4396E567} - C:\Program Files (x86)\Homepage Print 2\IEBand.dll (CORPUS CORPORATION)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT
CHR RestoreOnStartup: "hxxp://www.google.pl/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Google\Chrome\Application\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Google\Chrome\Application\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\SysWOW64\npdeployJava1.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Extension: (Weather (extension)) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\beapnbfmjmjhhfpaoajfhjbbfnnlfpnc\0.9.0.7_0
CHR Extension: (AdBlock) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (avast! Online Security) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2011.70_0
CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx

==================== Services (Whitelisted) =================

R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\2.0.189\McCHSvc.exe [227232 2010-09-02] (McAfee, Inc.)
R2 Modem Device Helper; C:\Program Files (x86)\blueconnect\BackgroundService\ServiceManager.exe [45056 2010-07-23] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

==================== Drivers (Whitelisted) ====================

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
S3 jrdusbser; C:\Windows\System32\DRIVERS\jrdusbser.sys [119680 2010-07-23] (TCT International Mobile Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] ()
U3 tmlwf; 
U3 tmwfp; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-05 18:08 - 2014-01-05 18:08 - 00000000 ____D C:\FRST
2014-01-05 14:52 - 2014-01-05 14:52 - 00000000 ____D C:\Windows\system32\SPReview
2014-01-04 21:51 - 2014-01-04 21:51 - 00000000 ____D C:\Users\Admin\AppData\Local\{8B6A7852-3685-4055-9E8A-58F981AD5E2D}
2014-01-04 21:48 - 2014-01-05 14:49 - 00003354 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4052432272-283152620-2328754637-1000
2014-01-04 21:48 - 2014-01-05 14:49 - 00003220 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4052432272-283152620-2328754637-1000
2014-01-04 21:48 - 2014-01-04 21:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RealNetworks
2014-01-04 21:47 - 2014-01-04 21:47 - 00001266 _____ C:\Users\Public\Desktop\RealPlayer.lnk
2014-01-04 21:47 - 2014-01-04 21:47 - 00000000 ____D C:\ProgramData\RealNetworks
2014-01-04 21:47 - 2014-01-04 21:47 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2014-01-04 21:46 - 2014-01-04 21:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Real
2014-01-04 21:46 - 2014-01-04 21:47 - 00000000 ____D C:\Program Files (x86)\Real
2014-01-04 21:44 - 2014-01-04 21:53 - 00000000 ____D C:\ProgramData\Real
2014-01-04 21:32 - 2014-01-04 21:32 - 00000000 ____D C:\ProgramData\Oracle
2014-01-04 21:32 - 2014-01-04 21:30 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-04 21:31 - 2014-01-04 21:31 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-04 21:31 - 2014-01-04 21:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-04 21:31 - 2014-01-04 21:30 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-03 18:34 - 2014-01-03 18:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-03 18:10 - 2014-01-03 18:13 - 00000000 ____D C:\7fabf13a64e4514451206201832b5f43
2013-12-23 21:06 - 2013-12-23 21:06 - 00000000 ____D C:\Users\Admin\Nowy folder
2013-12-22 21:56 - 2013-12-22 21:56 - 00000000 ____D C:\Users\Admin\AppData\Roaming\GoBoingo
2013-12-19 17:34 - 2013-12-19 17:38 - 00000000 ____D C:\Windows\system32\MRT
2013-12-17 23:32 - 2013-12-17 23:32 - 00012391 _____ C:\Users\Admin\Documents\os1.odt
2013-12-10 19:29 - 2013-12-10 19:29 - 00000000 ___HD C:\ProgramData\.syncID
2013-12-10 19:29 - 2013-12-10 19:29 - 00000000 ___HD C:\ProgramData\.Syncables
2013-12-10 19:28 - 2013-12-10 19:28 - 00000024 _____ C:\Windows\ATKPF.ini
2013-12-07 14:28 - 2013-12-07 14:29 - 00000000 ____D C:\Users\Admin\AppData\Local\{F53BD07D-D66A-49CC-BA4C-6A4A5897C671}

==================== One Month Modified Files and Folders =======

2014-01-05 18:08 - 2014-01-05 18:08 - 00000000 ____D C:\FRST
2014-01-05 17:51 - 2010-08-05 17:27 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-05 16:53 - 2013-09-12 19:28 - 01154379 _____ C:\Windows\WindowsUpdate.log
2014-01-05 14:52 - 2014-01-05 14:52 - 00000000 ____D C:\Windows\system32\SPReview
2014-01-05 14:49 - 2014-01-04 21:48 - 00003354 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4052432272-283152620-2328754637-1000
2014-01-05 14:49 - 2014-01-04 21:48 - 00003220 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4052432272-283152620-2328754637-1000
2014-01-04 21:53 - 2014-01-04 21:44 - 00000000 ____D C:\ProgramData\Real
2014-01-04 21:51 - 2014-01-04 21:51 - 00000000 ____D C:\Users\Admin\AppData\Local\{8B6A7852-3685-4055-9E8A-58F981AD5E2D}
2014-01-04 21:48 - 2014-01-04 21:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RealNetworks
2014-01-04 21:48 - 2014-01-04 21:46 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Real
2014-01-04 21:47 - 2014-01-04 21:47 - 00001266 _____ C:\Users\Public\Desktop\RealPlayer.lnk
2014-01-04 21:47 - 2014-01-04 21:47 - 00000000 ____D C:\ProgramData\RealNetworks
2014-01-04 21:47 - 2014-01-04 21:47 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2014-01-04 21:47 - 2014-01-04 21:46 - 00000000 ____D C:\Program Files (x86)\Real
2014-01-04 21:47 - 2011-10-07 10:25 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2014-01-04 21:46 - 2011-10-07 10:25 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2014-01-04 21:46 - 2011-10-07 10:25 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2014-01-04 21:46 - 2011-10-07 10:24 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2014-01-04 21:46 - 2011-10-07 10:24 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2014-01-04 21:39 - 2011-12-04 15:15 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2014-01-04 21:32 - 2014-01-04 21:32 - 00000000 ____D C:\ProgramData\Oracle
2014-01-04 21:31 - 2014-01-04 21:31 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-04 21:30 - 2014-01-04 21:32 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-04 21:30 - 2014-01-04 21:31 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-04 21:30 - 2014-01-04 21:31 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-04 21:30 - 2012-01-18 19:29 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-04 19:51 - 2010-08-05 17:27 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-04 18:56 - 2011-10-08 11:21 - 00003234 _____ C:\Windows\System32\Tasks\{349DE374-E4D6-48F4-BF8C-C43CB3225F57}
2014-01-04 18:55 - 2013-08-14 19:50 - 00003050 _____ C:\Windows\System32\Tasks\{3BF8CC7A-4864-4771-9F03-D85CD8F188CA}
2014-01-04 18:55 - 2011-10-07 19:57 - 00003054 _____ C:\Windows\System32\Tasks\{4B66C08D-51CC-4B70-B566-D0F5F369F7F2}
2014-01-04 18:54 - 2013-01-27 21:51 - 00002970 _____ C:\Windows\System32\Tasks\{6385F690-B2D3-44AB-A82A-02BF62FD3301}
2014-01-04 18:48 - 2013-06-11 19:13 - 00002962 _____ C:\Windows\System32\Tasks\{53F11F74-5A60-429C-8EF7-73BC41E97D1F}
2014-01-04 18:48 - 2012-09-21 21:35 - 00002936 _____ C:\Windows\System32\Tasks\{32D4CD63-0327-4A89-A75F-9685E65B3AF7}
2014-01-04 18:47 - 2013-11-24 18:43 - 00002998 _____ C:\Windows\System32\Tasks\{7D8BD6A5-CB78-465A-8FBC-AF9F3BDA87B9}
2014-01-04 18:47 - 2013-06-11 19:14 - 00002962 _____ C:\Windows\System32\Tasks\{BB4301CF-9D6C-4F81-A264-0B2E36ED1019}
2014-01-04 18:47 - 2013-03-26 20:55 - 00002998 _____ C:\Windows\System32\Tasks\{8171F409-995D-46D5-8B08-E895C5E16598}
2014-01-04 18:47 - 2012-09-21 21:34 - 00002936 _____ C:\Windows\System32\Tasks\{D61749B8-780B-42AC-8081-6B1FCB56BA89}
2014-01-03 18:34 - 2014-01-03 18:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-03 18:13 - 2014-01-03 18:10 - 00000000 ____D C:\7fabf13a64e4514451206201832b5f43
2014-01-01 13:24 - 2009-07-14 05:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-01 13:24 - 2009-07-14 05:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-30 21:44 - 2011-10-07 20:35 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Winamp
2013-12-29 16:02 - 2009-08-03 20:55 - 00698146 _____ C:\Windows\system32\perfh015.dat
2013-12-29 16:02 - 2009-08-03 20:55 - 00135224 _____ C:\Windows\system32\perfc015.dat
2013-12-29 16:02 - 2009-07-14 06:13 - 01549932 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-23 21:37 - 2011-10-07 09:52 - 00000000 ___HD C:\ASUS.DAT
2013-12-23 21:35 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-23 21:06 - 2013-12-23 21:06 - 00000000 ____D C:\Users\Admin\Nowy folder
2013-12-23 21:06 - 2011-10-07 09:51 - 00000000 ____D C:\Users\Admin
2013-12-22 21:56 - 2013-12-22 21:56 - 00000000 ____D C:\Users\Admin\AppData\Roaming\GoBoingo
2013-12-22 21:39 - 2012-05-10 17:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-22 21:39 - 2012-05-10 17:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-12-21 21:01 - 2012-01-29 21:06 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-21 21:01 - 2010-08-05 17:24 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-21 20:59 - 2013-01-31 17:43 - 00000000 ____D C:\Program Files (x86)\3DO
2013-12-19 17:43 - 2011-11-30 17:30 - 00001912 _____ C:\Windows\epplauncher.mif
2013-12-19 17:42 - 2011-11-30 17:29 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-12-19 17:42 - 2011-11-30 17:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-12-19 17:38 - 2013-12-19 17:34 - 00000000 ____D C:\Windows\system32\MRT
2013-12-18 22:24 - 2011-12-04 15:42 - 00000000 ____D C:\Users\Admin\AppData\Local\Google
2013-12-17 23:32 - 2013-12-17 23:32 - 00012391 _____ C:\Users\Admin\Documents\os1.odt
2013-12-17 19:46 - 2010-08-05 17:27 - 00004058 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-17 19:46 - 2010-08-05 17:27 - 00003806 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-13 20:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-13 20:01 - 2011-10-07 10:01 - 00000000 ___RD C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-10 19:29 - 2013-12-10 19:29 - 00000000 ___HD C:\ProgramData\.syncID
2013-12-10 19:29 - 2013-12-10 19:29 - 00000000 ___HD C:\ProgramData\.Syncables
2013-12-10 19:28 - 2013-12-10 19:28 - 00000024 _____ C:\Windows\ATKPF.ini
2013-12-10 19:04 - 2010-08-05 17:54 - 00001391 _____ C:\Windows\system32\ServiceFilter.ini
2013-12-09 18:19 - 2013-01-15 10:03 - 00300872 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-07 14:29 - 2013-12-07 14:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{F53BD07D-D66A-49CC-BA4C-6A4A5897C671}
2013-12-07 14:29 - 2011-11-01 17:18 - 00000000 ____D C:\Users\Admin\AppData\Local\Windows Live
2013-12-06 19:29 - 2012-12-22 19:34 - 00000000 ____D C:\Users\Admin\Desktop\PRIMES1

Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\lowproc.exe
C:\Users\Admin\AppData\Local\Temp\stubhelper.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-21 14:06

==================== End Of Log ============================