Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Damian (administrator) on DAMIAN-KOMPUTER on 27-05-2014 16:11:22
Running from C:\Users\Damian\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2013-11-19] (RealNetworks, Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5181456 2014-05-13] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Runonce: [GrpConv] - grpconv -o [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\Run: [Facebook Update] => C:\Users\Damian\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-12-12] (Facebook Inc.)
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\Run: [Mobile Partner] => C:\Program Files (x86)\Huawei E5372\Huawei E5372
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {33f03761-7097-11e3-a124-b4749fd5b68e} - H:\LGAutoRun.exe
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {882304e3-5140-11e3-8905-b4749fd5b68e} - F:\AutoRun.exe
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {882304f3-5140-11e3-8905-b4749fd5b68e} - F:\AutoRun.exe
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {af672467-a84c-11e3-b53f-b4749fd5b68e} - F:\AutoRun.exe
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {af67248b-a84c-11e3-b53f-b4749fd5b68e} - F:\AutoRun.exe
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {b4b7921a-552f-11e3-b792-b4749fd5b68e} - G:\AutoRun.exe
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {b4b7922c-552f-11e3-b792-b4749fd5b68e} - F:\AutoRun.exe
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {c40f5505-ad43-11e3-a439-b4749fd5b68e} - F:\AutoRun.exe
HKU\S-1-5-21-1405667913-2229257574-1355565730-1000\...\MountPoints2: {c5e759eb-b05c-11e3-8db8-b4749fd5b68e} - F:\AutoRun.exe

==================== Internet (Whitelisted) ====================

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 87.204.204.204 62.233.233.233

FireFox:
========
FF ProfilePath: C:\Users\Damian\AppData\Roaming\Mozilla\Firefox\Profiles\28hqkfvp.default
FF SearchEngineOrder.3: Bing 
FF Homepage: hxxp://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @idsoftware.com/QuakeLive - C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Damian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Extension: Premium Codec - C:\Users\Damian\AppData\Roaming\Mozilla\Firefox\Profiles\28hqkfvp.default\Extensions\Premium_Codec@CrossBrowser.xpi [2014-03-15]
FF Extension: Updated Ad Blocker for Firefox 11+ - C:\Users\Damian\AppData\Roaming\Mozilla\Firefox\Profiles\28hqkfvp.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi [2014-02-02]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

==================== Services (Whitelisted) =================

R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1473792 2014-05-13] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3644432 2014-05-13] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [292424 2014-05-13] (AVG Technologies CZ, s.r.o.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2013-04-10] ()
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2013-11-19] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S2 SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [X]

==================== Drivers (Whitelisted) ====================

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-05-13] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [236312 2014-05-13] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [191768 2014-05-13] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-05-13] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [323352 2014-05-13] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130328 2014-05-13] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-05-13] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [273176 2014-05-13] (AVG Technologies CZ, s.r.o.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [246272 2013-06-29] (Huawei Technologies Co., Ltd.)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-27 16:11 - 2014-05-27 16:11 - 00009726 _____ () C:\Users\Damian\Desktop\FRST.txt
2014-05-27 16:10 - 2014-05-27 16:11 - 00000000 ____D () C:\FRST
2014-05-27 16:08 - 2014-05-27 15:59 - 02066944 _____ (Farbar) C:\Users\Damian\Desktop\FRST64.exe
2014-05-27 16:08 - 2014-05-27 15:59 - 00602112 _____ (OldTimer Tools) C:\Users\Damian\Desktop\OTL.exe
2014-05-27 16:04 - 2014-02-11 16:23 - 00000426 _____ () C:\AVScanner.ini
2014-05-27 16:01 - 2014-05-27 16:07 - 00000000 ____D () C:\Users\Damian\Desktop\MUZYKA FILMY
2014-05-27 15:47 - 2014-05-27 15:48 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-27 15:47 - 2014-05-27 15:47 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-27 15:47 - 2014-05-27 15:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-27 15:47 - 2014-05-27 15:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-27 15:47 - 2014-05-27 15:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-27 15:47 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-27 15:47 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-27 15:47 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-27 15:45 - 2014-05-27 15:45 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-05-27 15:43 - 2014-05-27 15:43 - 00000314 _____ () C:\Windows\PFRO.log
2014-05-27 15:41 - 2014-05-27 15:42 - 00000000 ____D () C:\AdwCleaner
2014-05-27 15:40 - 2014-05-27 15:36 - 03386520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Damian\Desktop\avg_remover_stf_x64_2014_4116.exe
2014-05-27 15:40 - 2014-05-27 15:35 - 138734136 _____ () C:\Users\Damian\Desktop\setup_11.0.1.1245.x01_2014_05_27_15_01.exe
2014-05-27 15:40 - 2014-05-27 15:33 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Damian\Desktop\mbam-setup-2.0.2.1012.exe
2014-05-27 15:40 - 2014-05-27 15:31 - 01327971 _____ () C:\Users\Damian\Desktop\AdwCleaner.exe
2014-05-16 16:29 - 2014-05-16 16:29 - 00000967 _____ () C:\Users\Public\Desktop\Tibia.lnk
2014-05-16 16:29 - 2014-05-16 16:29 - 00000000 ____D () C:\Users\Damian\AppData\Roaming\Tibia
2014-05-16 16:29 - 2014-05-16 16:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia
2014-05-16 16:29 - 2014-05-16 16:29 - 00000000 ____D () C:\Program Files (x86)\Tibia
2014-05-15 19:21 - 2014-05-15 19:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 14:54 - 2014-05-15 14:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-15 14:46 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 14:46 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 14:46 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 14:46 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 14:46 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 14:46 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 14:46 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 14:46 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 14:46 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 14:46 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 14:46 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 14:46 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 14:46 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 14:46 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 14:46 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 14:46 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 14:46 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 14:46 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 14:46 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 14:46 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 14:46 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 14:46 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 14:46 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 14:46 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 14:46 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 14:46 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 14:46 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 14:46 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 14:46 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 14:46 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 14:46 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 14:46 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 14:46 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 14:46 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-13 14:20 - 2014-05-13 14:20 - 00273176 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2014-05-13 14:20 - 2014-05-13 14:20 - 00235800 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2014-05-13 14:06 - 2014-05-13 14:06 - 00323352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2014-05-13 14:05 - 2014-05-13 14:05 - 00191768 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2014-05-13 14:05 - 2014-05-13 14:05 - 00152344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2014-05-13 14:05 - 2014-05-13 14:05 - 00130328 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2014-05-13 14:04 - 2014-05-13 14:04 - 00236312 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-05-13 14:04 - 2014-05-13 14:04 - 00031512 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys

==================== One Month Modified Files and Folders =======

2014-05-27 16:11 - 2014-05-27 16:11 - 00009726 _____ () C:\Users\Damian\Desktop\FRST.txt
2014-05-27 16:11 - 2014-05-27 16:10 - 00000000 ____D () C:\FRST
2014-05-27 16:07 - 2014-05-27 16:01 - 00000000 ____D () C:\Users\Damian\Desktop\MUZYKA FILMY
2014-05-27 16:04 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-27 15:59 - 2014-05-27 16:08 - 02066944 _____ (Farbar) C:\Users\Damian\Desktop\FRST64.exe
2014-05-27 15:59 - 2014-05-27 16:08 - 00602112 _____ (OldTimer Tools) C:\Users\Damian\Desktop\OTL.exe
2014-05-27 15:51 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-27 15:51 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-27 15:49 - 2013-11-19 14:59 - 00000000 ___RD () C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-27 15:48 - 2014-05-27 15:47 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-27 15:48 - 2011-03-21 21:49 - 00740348 _____ () C:\Windows\system32\perfh015.dat
2014-05-27 15:48 - 2011-03-21 21:49 - 00155890 _____ () C:\Windows\system32\perfc015.dat
2014-05-27 15:48 - 2009-07-14 07:13 - 01669190 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-27 15:47 - 2014-05-27 15:47 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-27 15:47 - 2014-05-27 15:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-27 15:47 - 2014-05-27 15:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-27 15:47 - 2014-05-27 15:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-27 15:47 - 2013-11-19 14:58 - 02073640 _____ () C:\Windows\WindowsUpdate.log
2014-05-27 15:45 - 2014-05-27 15:45 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-05-27 15:43 - 2014-05-27 15:43 - 00000314 _____ () C:\Windows\PFRO.log
2014-05-27 15:43 - 2014-03-31 16:14 - 00006914 _____ () C:\Windows\setupact.log
2014-05-27 15:43 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-27 15:42 - 2014-05-27 15:41 - 00000000 ____D () C:\AdwCleaner
2014-05-27 15:41 - 2014-03-22 08:57 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-05-27 15:38 - 2013-11-23 18:23 - 00000000 ____D () C:\Users\Damian\AppData\Roaming\Skype
2014-05-27 15:36 - 2014-05-27 15:40 - 03386520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Damian\Desktop\avg_remover_stf_x64_2014_4116.exe
2014-05-27 15:35 - 2014-05-27 15:40 - 138734136 _____ () C:\Users\Damian\Desktop\setup_11.0.1.1245.x01_2014_05_27_15_01.exe
2014-05-27 15:34 - 2014-01-22 12:22 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-27 15:33 - 2014-05-27 15:40 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Damian\Desktop\mbam-setup-2.0.2.1012.exe
2014-05-27 15:33 - 2013-11-19 16:18 - 00000000 ____D () C:\ProgramData\MFAData
2014-05-27 15:31 - 2014-05-27 15:40 - 01327971 _____ () C:\Users\Damian\Desktop\AdwCleaner.exe
2014-05-27 15:10 - 2014-04-24 11:40 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1405667913-2229257574-1355565730-1000
2014-05-27 15:10 - 2013-12-14 23:56 - 00003224 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1405667913-2229257574-1355565730-1000
2014-05-27 14:44 - 2013-12-12 18:15 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1405667913-2229257574-1355565730-1000UA.job
2014-05-26 21:25 - 2013-12-12 18:15 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1405667913-2229257574-1355565730-1000Core.job
2014-05-22 16:53 - 2014-03-19 23:21 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-22 16:53 - 2013-11-23 18:23 - 00000000 ____D () C:\ProgramData\Skype
2014-05-19 16:05 - 2014-04-01 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-05-19 16:05 - 2013-11-19 16:22 - 00000995 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-05-18 08:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 16:29 - 2014-05-16 16:29 - 00000967 _____ () C:\Users\Public\Desktop\Tibia.lnk
2014-05-16 16:29 - 2014-05-16 16:29 - 00000000 ____D () C:\Users\Damian\AppData\Roaming\Tibia
2014-05-16 16:29 - 2014-05-16 16:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia
2014-05-16 16:29 - 2014-05-16 16:29 - 00000000 ____D () C:\Program Files (x86)\Tibia
2014-05-15 20:35 - 2014-01-22 12:22 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-15 20:35 - 2013-11-19 15:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-15 20:35 - 2013-11-19 15:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-15 19:24 - 2013-11-19 14:59 - 00000000 ___RD () C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 19:21 - 2014-05-15 19:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 15:24 - 2013-11-19 16:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 15:23 - 2013-11-19 16:29 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 15:11 - 2013-11-19 15:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-15 14:55 - 2014-05-15 14:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-13 14:20 - 2014-05-13 14:20 - 00273176 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2014-05-13 14:20 - 2014-05-13 14:20 - 00235800 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2014-05-13 14:06 - 2014-05-13 14:06 - 00323352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2014-05-13 14:05 - 2014-05-13 14:05 - 00191768 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2014-05-13 14:05 - 2014-05-13 14:05 - 00152344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2014-05-13 14:05 - 2014-05-13 14:05 - 00130328 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2014-05-13 14:04 - 2014-05-13 14:04 - 00236312 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-05-13 14:04 - 2014-05-13 14:04 - 00031512 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys
2014-05-12 07:26 - 2014-05-27 15:47 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-05-27 15:47 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-05-27 15:47 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-09 08:14 - 2014-05-15 14:46 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 14:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\Damian\AppData\Local\Temp\Quarantine.exe
C:\Users\Damian\AppData\Local\Temp\SHSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 20:35

==================== End Of Log ============================