Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-01-2014 01
Ran by asus (administrator) on HELCIA on 23-01-2014 20:40:15
Running from C:\Users\asus\Downloads
Windows 8 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Atheros Commnucations) C:\Windows\System32\AdminService.exe
(TMRG,  Inc.) C:\Program Files (x86)\RelevantKnowledge\rlservice.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(GG Network S.A.) C:\Users\asus\AppData\Local\GG\Application\gghub.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(GG Network S.A.) C:\Users\asus\AppData\Local\GG\Application\ggapp.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\ASUS Sonic Focus\SonicFocusTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(TMRG,  Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe
(TMRG,  Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe
(TMRG,  Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe
(GG Network S.A.) C:\Users\asus\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(GG Network S.A.) C:\Users\asus\AppData\Local\GG\Application\xulrunner\gghub.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Farbar) C:\Users\asus\Downloads\FRST64 (2).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212560 2012-06-13] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [SynAsusGestureAPIMgr] - C:\Program Files\Synaptics\SynTP\SynAsusGestureAPIMgr.exe [736568 2012-08-16] (Synaptics)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\ASUS Sonic Focus\SonicFocusTray.exe [984400 2010-07-09] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-13] (AVAST Software)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [761024 2013-12-13] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [GG] - C:\Users\asus\AppData\Local\GG\Application\gghub.exe [4047424 2013-12-11] (GG Network S.A.)
HKCU\...\Run: [NextLive] - C:\Users\asus\AppData\Roaming\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe)
MountPoints2: F - "F:\SETUP.EXE" 

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100&type=default&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100&type=default&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100&type=default&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100&type=default&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.dosearches.com/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=sc&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100&type=default&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E2P3121L1UDY3P1UDY3PX&ts=1383850100&type=default&q={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 94.75.115.220 46.31.32.1 94.75.115.221

Chrome: 
=======
CHR Extension: (Dokumenty Google) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-05]
CHR Extension: (Dysk Google) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-05]
CHR Extension: (YouTube) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-05]
CHR Extension: (Szukaj w Google) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-05]
CHR Extension: (avast! Online Security) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-11-05]
CHR Extension: (RelevantKnowledge) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle [2013-11-05]
CHR Extension: (Google Wallet) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-05]
CHR Extension: (Gmail) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-05]
CHR HKLM-x32\...\Chrome\Extension: [bcjagnifjocnddgeknajocbkkhlgibem] - C:\Program Files (x86)\Surf Canyon\surfcanyon.crx [2013-11-05]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-11-05]
CHR HKLM-x32\...\Chrome\Extension: [mkndcbhcgphcfkkddanakjiepeknbgle] - C:\Program Files (x86)\RelevantKnowledge\rlcm.crx [2013-10-22]

==================== Services (Whitelisted) =================

U2 AtherosSvc; C:\Windows\system32\AdminService.exe [208384 2013-06-25] (Atheros Commnucations)
U2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-13] (AVAST Software)
U3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [331776 2012-07-26] (Microsoft Corporation)
U2 RelevantKnowledge; C:\Program Files (x86)\RelevantKnowledge\rlservice.exe [198424 2013-11-13] (TMRG,  Inc.)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

U2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
U2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-13] (AVAST Software)
U1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-05] (AVAST Software)
U0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-05] ()
U1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-13] (AVAST Software)
U1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-13] (AVAST Software)
U3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-13] (AVAST Software)
U0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-13] ()
U3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
U3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [117632 2013-06-01] (Microsoft Corporation)
U3 BthHFAud; C:\Windows\system32\DRIVERS\BthHfAud.sys [30720 2013-02-02] (Microsoft Corporation)
U3 ALSysIO; \??\C:\Users\asus\AppData\Local\Temp\ALSysIO64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-23 20:40 - 2014-01-23 20:40 - 00000000 ____D C:\FRST
2014-01-23 20:38 - 2014-01-23 20:39 - 02077696 _____ (Farbar) C:\Users\asus\Downloads\FRST64 (2).exe
2014-01-23 20:35 - 2014-01-23 20:36 - 02077696 _____ (Farbar) C:\Users\asus\Downloads\FRST64 (1).exe
2014-01-23 20:34 - 2014-01-23 20:35 - 02077696 _____ (Farbar) C:\Users\asus\Downloads\FRST64.exe
2014-01-23 20:15 - 2014-01-23 20:41 - 00012435 _____ C:\Users\asus\Downloads\FRST.txt
2014-01-21 21:22 - 2014-01-21 21:23 - 01696367 _____ (Igor Pavlov) C:\Users\asus\Downloads\pmb1.exe
2014-01-21 17:56 - 2014-01-21 17:56 - 00715189 _____ C:\Users\asus\Downloads\wykaz_opp_uprawnionych_do_1_proc_za_2013_r_wraz_z_numerami_rachunkow_bankowych.xlsx
2014-01-21 16:38 - 2014-01-23 20:07 - 00000000 ____D C:\PIT Format 2013
2014-01-21 16:30 - 2014-01-21 16:34 - 12364816 _____ (FORMAT Biuro Informatyki Stosowanej                         ) C:\Users\asus\Downloads\Instaluj_PIT_Format_2013.exe
2014-01-21 16:29 - 2014-01-21 16:29 - 00000000 ____D C:\Users\asus\AppData\Local\Adobe
2014-01-21 16:14 - 2014-01-21 16:14 - 01308632 _____ (Ministerstwo Finansów                                       ) C:\Users\asus\Downloads\e-Deklaracje-wtyczka (1).exe
2014-01-21 16:12 - 2014-01-21 16:12 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-21 16:12 - 2014-01-21 16:12 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-21 16:10 - 2014-01-21 16:37 - 00000000 ____D C:\ProgramData\Adobe
2014-01-21 16:10 - 2014-01-21 16:10 - 38966928 _____ (Adobe Systems Incorporated) C:\Users\asus\Downloads\AdbeRdr11000_pl_PL.exe
2014-01-21 16:02 - 2014-01-23 20:10 - 00000000 ____D C:\Users\asus\AppData\Roaming\newnext.me
2014-01-21 16:02 - 2014-01-21 16:07 - 00000000 ____D C:\Users\asus\AppData\Local\Mobogenie
2014-01-21 16:02 - 2014-01-21 16:04 - 00000000 ____D C:\Users\asus\AppData\Local\genienext
2014-01-21 16:02 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\Documents\Mobogenie
2014-01-21 16:02 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\AppData\Local\cache
2014-01-21 16:02 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\.android
2014-01-21 16:02 - 2014-01-21 16:02 - 00000000 _____ C:\Users\asus\daemonprocess.txt
2014-01-21 16:00 - 2014-01-21 16:07 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-21 15:48 - 2014-01-21 15:48 - 00666648 _____ C:\Users\asus\Downloads\Adobe-Reader-XI(21590).exe
2014-01-21 15:46 - 2014-01-21 15:46 - 01308632 _____ (Ministerstwo Finansów                                       ) C:\Users\asus\Downloads\e-Deklaracje-wtyczka.exe
2014-01-20 21:05 - 2014-01-20 21:05 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2014-01-20 21:05 - 2014-01-20 21:05 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-16 06:16 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-01-16 06:16 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2014-01-16 06:16 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2014-01-16 06:16 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2014-01-16 06:16 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-01-16 06:16 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-01-16 06:16 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2014-01-16 06:16 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-16 06:16 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-16 06:16 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-01-16 06:16 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-01-15 20:40 - 2014-01-22 09:11 - 00000000 ____D C:\Users\asus\Desktop\pdf zapłaty-asm,us
2014-01-14 17:31 - 2014-01-14 17:32 - 00000000 ___SD C:\Users\asus\GG dysk
2014-01-14 17:31 - 2014-01-14 17:31 - 00001613 _____ C:\Users\asus\Desktop\GG dysk.lnk
2014-01-14 17:29 - 2014-01-23 20:09 - 00000000 ____D C:\Users\asus\AppData\Roaming\GG
2014-01-14 17:29 - 2014-01-14 17:29 - 00001136 _____ C:\Users\asus\Desktop\GG.lnk
2014-01-14 17:29 - 2014-01-14 17:29 - 00000000 ____D C:\Users\asus\AppData\Roaming\Mozilla
2014-01-14 17:28 - 2014-01-14 17:31 - 00000000 ____D C:\Users\asus\AppData\Local\GG
2014-01-14 17:28 - 2014-01-14 17:28 - 00001144 _____ C:\Users\asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2014-01-14 16:58 - 2014-01-14 16:59 - 00389952 _____ C:\Users\asus\Downloads\gg-install (1).exe
2014-01-14 16:58 - 2014-01-14 16:58 - 00389952 _____ C:\Users\asus\Downloads\gg-install.exe
2014-01-13 21:06 - 2014-01-13 21:07 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2013-12-26 12:35 - 2013-12-26 12:35 - 00000000 ____D C:\Users\asus\AppData\Roaming\Media Player Classic
2013-12-26 10:48 - 2014-01-20 21:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-12-26 10:48 - 2013-12-26 10:48 - 00001228 _____ C:\Users\Public\Desktop\EaseUS Data Recovery Wizard 5.6.5 .lnk
2013-12-26 10:48 - 2013-12-26 10:48 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-26 10:46 - 2013-12-26 10:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-12-26 10:40 - 2013-12-26 10:40 - 00000000 ____D C:\Program Files\Microsoft Office
2013-12-26 10:40 - 2013-12-26 10:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-12-26 10:38 - 2014-01-21 22:20 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-26 10:38 - 2013-12-26 10:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-12-26 10:38 - 2013-12-26 10:38 - 00000000 ____D C:\Users\asus\AppData\Local\Microsoft Help
2013-12-26 10:37 - 2013-12-26 10:37 - 00000000 __RHD C:\MSOCache
2013-12-26 10:37 - 2013-12-26 10:37 - 00000000 ____D C:\ProgramData\Synaptics
2013-12-26 10:30 - 2013-12-26 10:30 - 00001011 _____ C:\Users\Public\Desktop\PowerISO.lnk
2013-12-26 10:30 - 2013-12-26 10:30 - 00000000 ____D C:\Program Files (x86)\PowerISO
2013-12-26 10:30 - 2010-04-12 09:55 - 00091568 _____ (PowerISO Computing, Inc.) C:\Windows\system32\Drivers\scdemu.sys
2013-12-26 10:27 - 2007-02-21 21:00 - 00010752 _____ C:\Windows\SysWOW64\ff_vfw.dll
2013-12-26 10:27 - 2007-02-01 05:56 - 00639066 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx.dll
2013-12-26 10:27 - 2007-01-30 06:03 - 03596288 _____ C:\Windows\SysWOW64\qt-dx331.dll
2013-12-26 10:27 - 2007-01-30 06:03 - 01044480 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\libdivx.dll
2013-12-26 10:27 - 2007-01-30 06:03 - 00200704 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\ssldivx.dll
2013-12-26 10:27 - 2007-01-30 05:56 - 00196608 _____ (DivX, Inc.) C:\Windows\SysWOW64\dtu100.dll
2013-12-26 10:27 - 2007-01-30 05:56 - 00073728 _____ (DivX, Inc.) C:\Windows\SysWOW64\dpl100.dll
2013-12-26 10:27 - 2007-01-20 21:26 - 01565480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmv9vcm.dll
2013-12-26 10:27 - 2006-11-01 14:54 - 00180224 _____ C:\Windows\SysWOW64\xvidvfw.dll
2013-12-26 10:27 - 2006-11-01 14:52 - 00765952 _____ C:\Windows\SysWOW64\xvidcore.dll
2013-12-26 10:27 - 2006-05-13 23:16 - 00118784 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2013-12-26 10:27 - 2005-02-24 18:56 - 00000547 _____ C:\Windows\SysWOW64\ff_vfw.dll.manifest
2013-12-26 10:27 - 2004-01-25 18:18 - 00217088 _____ (www.helixcommunity.org) C:\Windows\SysWOW64\yv12vfw.dll
2013-12-26 10:26 - 2013-12-26 10:27 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2013-12-24 12:24 - 2013-12-29 16:18 - 00000000 ____D C:\Users\asus\Desktop\rehabilitacja
2013-12-24 12:23 - 2013-12-29 16:14 - 00000000 ____D C:\Users\asus\Desktop\pulpit pliki z asus
2013-12-24 12:12 - 2013-12-29 17:10 - 00000000 ____D C:\Users\asus\Desktop\laptop-asus-materialy  z kompa
2013-12-24 11:18 - 2014-01-12 10:58 - 00000000 ____D C:\Users\asus\Desktop\!!! TERAPIA MANUALNA KURS MT1!!!
2013-12-24 10:54 - 2013-12-24 10:54 - 00000017 _____ C:\Users\asus\AppData\Local\resmon.resmoncfg

==================== One Month Modified Files and Folders =======

2014-01-23 20:41 - 2014-01-23 20:15 - 00012435 _____ C:\Users\asus\Downloads\FRST.txt
2014-01-23 20:40 - 2014-01-23 20:40 - 00000000 ____D C:\FRST
2014-01-23 20:39 - 2014-01-23 20:38 - 02077696 _____ (Farbar) C:\Users\asus\Downloads\FRST64 (2).exe
2014-01-23 20:36 - 2014-01-23 20:35 - 02077696 _____ (Farbar) C:\Users\asus\Downloads\FRST64 (1).exe
2014-01-23 20:35 - 2014-01-23 20:34 - 02077696 _____ (Farbar) C:\Users\asus\Downloads\FRST64.exe
2014-01-23 20:31 - 2013-11-07 20:24 - 00000000 ____D C:\Users\asus\AppData\Roaming\Skype
2014-01-23 20:27 - 2013-10-04 15:48 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-23 20:25 - 2013-11-05 08:55 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-23 20:15 - 2013-10-22 21:44 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1068802082-2671451997-4048540543-1005
2014-01-23 20:12 - 2013-11-05 09:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-23 20:12 - 2013-09-14 12:03 - 00000000 ____D C:\Program Files (x86)\RelevantKnowledge
2014-01-23 20:10 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\AppData\Roaming\newnext.me
2014-01-23 20:10 - 2013-11-05 08:55 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-23 20:09 - 2014-01-14 17:29 - 00000000 ____D C:\Users\asus\AppData\Roaming\GG
2014-01-23 20:09 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-23 20:08 - 2012-07-26 06:26 - 00524288 ___SH C:\Windows\system32\config\BBI
2014-01-23 20:07 - 2014-01-21 16:38 - 00000000 ____D C:\PIT Format 2013
2014-01-23 20:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2014-01-23 19:28 - 2013-08-25 19:24 - 00000000 ____D C:\Program Files\WinRAR
2014-01-23 18:26 - 2013-10-22 21:47 - 01749040 _____ C:\Windows\WindowsUpdate.log
2014-01-22 09:12 - 2013-11-01 17:22 - 00000000 ____D C:\Users\asus\Desktop\telefon 8.09.20313 nagrania i zdjeciaumowa najmu okazonalnego-druki
2014-01-22 09:11 - 2014-01-15 20:40 - 00000000 ____D C:\Users\asus\Desktop\pdf zapłaty-asm,us
2014-01-22 09:02 - 2012-07-26 10:51 - 00794946 _____ C:\Windows\system32\perfh015.dat
2014-01-22 09:02 - 2012-07-26 10:51 - 00159530 _____ C:\Windows\system32\perfc015.dat
2014-01-22 09:02 - 2012-07-26 08:28 - 01793398 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-22 07:38 - 2013-12-18 07:57 - 00597312 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-21 22:20 - 2013-12-26 10:38 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-21 22:03 - 2013-08-27 17:56 - 00000000 ____D C:\Windows\system32\MRT
2014-01-21 22:00 - 2013-08-27 17:56 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-21 21:57 - 2012-07-26 06:26 - 00000167 _____ C:\Windows\win.ini
2014-01-21 21:23 - 2014-01-21 21:22 - 01696367 _____ (Igor Pavlov) C:\Users\asus\Downloads\pmb1.exe
2014-01-21 19:37 - 2013-11-05 09:06 - 00002231 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-21 17:56 - 2014-01-21 17:56 - 00715189 _____ C:\Users\asus\Downloads\wykaz_opp_uprawnionych_do_1_proc_za_2013_r_wraz_z_numerami_rachunkow_bankowych.xlsx
2014-01-21 16:37 - 2014-01-21 16:10 - 00000000 ____D C:\ProgramData\Adobe
2014-01-21 16:34 - 2014-01-21 16:30 - 12364816 _____ (FORMAT Biuro Informatyki Stosowanej                         ) C:\Users\asus\Downloads\Instaluj_PIT_Format_2013.exe
2014-01-21 16:29 - 2014-01-21 16:29 - 00000000 ____D C:\Users\asus\AppData\Local\Adobe
2014-01-21 16:29 - 2013-10-22 21:33 - 00000000 ____D C:\Users\asus\AppData\Roaming\Adobe
2014-01-21 16:14 - 2014-01-21 16:14 - 01308632 _____ (Ministerstwo Finansów                                       ) C:\Users\asus\Downloads\e-Deklaracje-wtyczka (1).exe
2014-01-21 16:12 - 2014-01-21 16:12 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-21 16:12 - 2014-01-21 16:12 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-21 16:10 - 2014-01-21 16:10 - 38966928 _____ (Adobe Systems Incorporated) C:\Users\asus\Downloads\AdbeRdr11000_pl_PL.exe
2014-01-21 16:07 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\AppData\Local\Mobogenie
2014-01-21 16:07 - 2014-01-21 16:00 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-21 16:04 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\AppData\Local\genienext
2014-01-21 16:02 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\Documents\Mobogenie
2014-01-21 16:02 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\AppData\Local\cache
2014-01-21 16:02 - 2014-01-21 16:02 - 00000000 ____D C:\Users\asus\.android
2014-01-21 16:02 - 2014-01-21 16:02 - 00000000 _____ C:\Users\asus\daemonprocess.txt
2014-01-21 16:02 - 2013-10-22 21:31 - 00000000 ____D C:\Users\asus
2014-01-21 15:48 - 2014-01-21 15:48 - 00666648 _____ C:\Users\asus\Downloads\Adobe-Reader-XI(21590).exe
2014-01-21 15:46 - 2014-01-21 15:46 - 01308632 _____ (Ministerstwo Finansów                                       ) C:\Users\asus\Downloads\e-Deklaracje-wtyczka.exe
2014-01-20 21:18 - 2013-12-26 10:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2014-01-20 21:05 - 2014-01-20 21:05 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2014-01-20 21:05 - 2014-01-20 21:05 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-15 10:33 - 2013-11-24 21:03 - 00002056 _____ C:\Windows\PFRO.log
2014-01-14 17:32 - 2014-01-14 17:31 - 00000000 ___SD C:\Users\asus\GG dysk
2014-01-14 17:31 - 2014-01-14 17:31 - 00001613 _____ C:\Users\asus\Desktop\GG dysk.lnk
2014-01-14 17:31 - 2014-01-14 17:28 - 00000000 ____D C:\Users\asus\AppData\Local\GG
2014-01-14 17:29 - 2014-01-14 17:29 - 00001136 _____ C:\Users\asus\Desktop\GG.lnk
2014-01-14 17:29 - 2014-01-14 17:29 - 00000000 ____D C:\Users\asus\AppData\Roaming\Mozilla
2014-01-14 17:28 - 2014-01-14 17:28 - 00001144 _____ C:\Users\asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2014-01-14 16:59 - 2014-01-14 16:58 - 00389952 _____ C:\Users\asus\Downloads\gg-install (1).exe
2014-01-14 16:58 - 2014-01-14 16:58 - 00389952 _____ C:\Users\asus\Downloads\gg-install.exe
2014-01-13 21:07 - 2014-01-13 21:06 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-13 21:07 - 2013-11-05 09:48 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-13 21:06 - 2013-11-05 09:47 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-13 21:06 - 2013-11-05 09:47 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-01-13 21:06 - 2013-11-05 09:47 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-13 21:06 - 2013-11-05 09:47 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-13 21:06 - 2013-11-05 09:47 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-13 21:06 - 2013-11-05 09:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-13 20:52 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2014-01-12 10:58 - 2013-12-24 11:18 - 00000000 ____D C:\Users\asus\Desktop\!!! TERAPIA MANUALNA KURS MT1!!!
2014-01-09 09:02 - 2013-11-27 20:42 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-09 09:02 - 2013-11-27 20:42 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-29 17:10 - 2013-12-24 12:12 - 00000000 ____D C:\Users\asus\Desktop\laptop-asus-materialy  z kompa
2013-12-29 16:33 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\NDF
2013-12-29 16:18 - 2013-12-24 12:24 - 00000000 ____D C:\Users\asus\Desktop\rehabilitacja
2013-12-29 16:14 - 2013-12-24 12:23 - 00000000 ____D C:\Users\asus\Desktop\pulpit pliki z asus
2013-12-26 12:35 - 2013-12-26 12:35 - 00000000 ____D C:\Users\asus\AppData\Roaming\Media Player Classic
2013-12-26 10:48 - 2013-12-26 10:48 - 00001228 _____ C:\Users\Public\Desktop\EaseUS Data Recovery Wizard 5.6.5 .lnk
2013-12-26 10:48 - 2013-12-26 10:48 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-26 10:47 - 2013-12-26 10:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-12-26 10:47 - 2013-09-22 18:34 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-26 10:46 - 2013-12-26 10:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-12-26 10:42 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-26 10:40 - 2013-12-26 10:40 - 00000000 ____D C:\Program Files\Microsoft Office
2013-12-26 10:40 - 2013-12-26 10:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-12-26 10:39 - 2012-07-26 10:53 - 00000000 ____D C:\Windows\ShellNew
2013-12-26 10:38 - 2013-12-26 10:38 - 00000000 ____D C:\Users\asus\AppData\Local\Microsoft Help
2013-12-26 10:37 - 2013-12-26 10:37 - 00000000 __RHD C:\MSOCache
2013-12-26 10:37 - 2013-12-26 10:37 - 00000000 ____D C:\ProgramData\Synaptics
2013-12-26 10:30 - 2013-12-26 10:30 - 00001011 _____ C:\Users\Public\Desktop\PowerISO.lnk
2013-12-26 10:30 - 2013-12-26 10:30 - 00000000 ____D C:\Program Files (x86)\PowerISO
2013-12-26 10:27 - 2013-12-26 10:26 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2013-12-24 10:54 - 2013-12-24 10:54 - 00000017 _____ C:\Users\asus\AppData\Local\resmon.resmoncfg

Some content of TEMP:
====================
C:\Users\asus\AppData\Local\Temp\ose00000.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-01 16:07

==================== End Of Log ============================