Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:06-06-2014
Ran by Argo80 (administrator) on ARGO80-KOMPUTER on 06-06-2014 17:57:23
Running from C:\Users\Argo80\Downloads
Platform: Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Safe Mode (with Networking)

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Users\Argo80\Downloads\5wnjqffm.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10119784 2011-06-24] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files\Intel\Bluetooth\btmshell.dll [9891840 2011-05-19] (Intel Corporation)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\Update\realsched.exe [296520 2014-04-26] (RealNetworks, Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3737510759-1347875379-4076580047-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackUpdateChecker.lnk
ShortcutTarget: CodecPackUpdateChecker.lnk -> C:\Windows\System32\C2MP\UpdateChecker.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)

==================== Internet (Whitelisted) ====================

BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Rock Turner - {527b365c-1bd3-4a66-906f-8729805ce78c} - C:\Program Files\Rock Turner\RockTurnerbho.dll (Rock Turner)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 178.217.112.1 8.8.8.8

FireFox:
========
FF Plugin: @real.com/nppl3260;version=17.0.9.17 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=17.0.9.17 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

Chrome: 
=======
CHR HomePage: hxxp://google.pl/
CHR StartupUrls: "https://www.google.pl/"
CHR Extension: (Beautiful landscape) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\ambfimhigppdidfmelpjmojccbfdoeig [2014-04-25]
CHR Extension: (Dokumenty Google) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-25]
CHR Extension: (Dysk Google) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-25]
CHR Extension: (YouTube) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-25]
CHR Extension: (Szukaj w Google) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-25]
CHR Extension: (Poczta INTERIA.PL) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\eabkbmhhkbgjcodncffjdiobelekhpdb [2014-04-25]
CHR Extension: (RealPlayer Downloader) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-04-26]
CHR Extension: (Google Wallet) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-25]
CHR Extension: (Gmail) - C:\Users\Argo80\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-25]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06]

========================== Services (Whitelisted) =================

S2 AMPPALR3; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [509440 2011-12-05] (Intel Corporation)
S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-05] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-05] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
S2 Bluetooth Device Monitor; C:\Program Files\Intel\Bluetooth\devmonsrv.exe [921664 2011-05-19] (Intel Corporation)
S3 Bluetooth Media Service; C:\Program Files\Intel\Bluetooth\mediasrv.exe [1335360 2011-05-19] (Intel Corporation)
S2 Bluetooth OBEX Service; C:\Program Files\Intel\Bluetooth\obexsrv.exe [995392 2011-05-19] (Intel Corporation)
S2 BTHSSecurityMgr; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [104208 2011-12-05] (Intel(R) Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [241936 2011-12-08] ()
S2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
S2 RealPlayer Cloud Service; C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1141848 2014-04-26] (RealNetworks, Inc.)
S2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] ()
S2 Update Rock Turner; C:\Program Files\Rock Turner\updateRockTurner.exe [317728 2014-06-05] ()
S2 Util Rock Turner; C:\Program Files\Rock Turner\bin\utilRockTurner.exe [317728 2014-06-05] ()
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [722704 2011-12-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [141312 2011-12-05] (Windows (R) Win 7 DDK provider)
S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [141312 2011-12-05] (Windows (R) Win 7 DDK provider)
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-06-05] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-05] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-02-25] (Avira Operations GmbH & Co. KG)
S3 btmaudio; C:\Windows\System32\drivers\btmaud.sys [42496 2011-05-19] (Intel Corporation)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [42496 2011-05-19] (Intel Corporation)
S3 BTWAMPFL; C:\Windows\system32\drivers\btwampfl.sys [302120 2011-08-25] (Broadcom Corporation.)
S3 samsung_hspa_datacard_cdc_acm; C:\Windows\System32\DRIVERS\samsung_hspa_datacard_cdc_acm.sys [42496 2011-05-09] (Samsung)
R3 samsung_hspa_datacard_cdc_ecm; C:\Windows\System32\DRIVERS\samsung_hspa_datacard_cdc_ecm.sys [52224 2011-05-09] (Samsung)
R3 samsung_hspa_datacard_dc_enum; C:\Windows\System32\DRIVERS\samsung_hspa_datacard_dc_enum.sys [50816 2011-05-09] (Samsung)
S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-02-25] (Avira GmbH)
R1 {8ce1c375-1e13-43f7-a4fd-6530f47c4fde}Gw; C:\Windows\System32\drivers\{8ce1c375-1e13-43f7-a4fd-6530f47c4fde}Gw.sys [52928 2014-05-22] (StdLib)
U3 fwrdypow; \??\C:\Users\Argo80\AppData\Local\Temp\fwrdypow.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-06 17:57 - 2014-06-06 17:57 - 00010312 _____ () C:\Users\Argo80\Downloads\FRST.txt
2014-06-06 17:55 - 2014-06-06 17:57 - 00000000 ____D () C:\FRST
2014-06-06 17:55 - 2014-06-06 17:55 - 01063424 _____ (Farbar) C:\Users\Argo80\Downloads\FRST.exe
2014-06-06 17:51 - 2014-06-06 17:51 - 00029061 _____ () C:\Users\Argo80\Downloads\gmer.txt
2014-06-06 16:52 - 2014-06-06 16:52 - 00380416 _____ () C:\Users\Argo80\Downloads\5wnjqffm.exe
2014-06-06 16:48 - 2014-06-06 16:48 - 00021292 _____ () C:\Users\Argo80\Downloads\Extras.Txt
2014-06-06 16:47 - 2014-06-06 16:47 - 00057620 _____ () C:\Users\Argo80\Downloads\OTL.Txt
2014-06-06 16:39 - 2014-06-06 16:39 - 00602112 _____ (OldTimer Tools) C:\Users\Argo80\Downloads\OTL.exe
2014-06-06 16:35 - 2014-06-06 16:35 - 198008673 _____ () C:\Windows\MEMORY.DMP
2014-06-06 16:35 - 2014-06-06 16:35 - 00139104 _____ () C:\Windows\Minidump\060614-18454-01.dmp
2014-06-06 16:35 - 2014-06-06 16:35 - 00000000 ____D () C:\Windows\Minidump
2014-06-06 16:34 - 2014-06-06 16:34 - 00259584 _____ (OldTimer Tools) C:\Users\Argo80\Downloads\OTH.exe
2014-06-05 10:30 - 2014-06-05 10:30 - 00000146 _____ () C:\Windows\system32\Avira.OE.ServiceHost.log
2014-06-01 12:19 - 2014-06-01 12:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-31 23:15 - 2014-05-09 09:06 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-31 23:15 - 2014-05-09 09:04 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-31 23:15 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-05-31 23:15 - 2012-07-06 21:23 - 00393728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-05-31 23:15 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-05-31 23:14 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-05-31 23:14 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-05-31 23:14 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-05-31 23:14 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-05-31 23:14 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-05-31 23:14 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-05-31 23:14 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-05-31 23:14 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-05-31 23:14 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-05-31 23:14 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-05-30 00:19 - 2014-05-22 18:24 - 00052928 _____ (StdLib) C:\Windows\system32\Drivers\{8ce1c375-1e13-43f7-a4fd-6530f47c4fde}Gw.sys
2014-05-29 22:42 - 2014-06-05 10:40 - 00000000 ____D () C:\Program Files\Rock Turner
2014-05-29 22:41 - 2014-05-29 22:41 - 00040960 _____ () C:\Users\Argo80\Downloads\Starter Wallpaper Changer [1].exe
2014-05-29 22:40 - 2014-05-29 22:40 - 00607048 _____ () C:\Users\Argo80\Downloads\Starter Wallpaper Changer.exe
2014-05-27 18:31 - 2014-05-27 19:18 - 00000000 ____D () C:\Users\Argo80\AppData\Local\Microsoft Games
2014-05-27 10:25 - 2014-05-27 10:25 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-26 01:56 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-25 15:59 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-25 15:59 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-25 15:59 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-25 15:57 - 2014-05-25 15:57 - 00000000 ____D () C:\Users\Argo80\AppData\Roaming\OpenCandy
2014-05-25 15:56 - 2014-05-25 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 7 - Codec Pack
2014-05-25 15:55 - 2014-05-25 15:57 - 00000000 ____D () C:\Windows\system32\C2MP
2014-05-25 15:51 - 2014-05-25 15:54 - 22843808 _____ (Windows 7 - Codec Pack) C:\Users\Argo80\Downloads\windows.7.codec.pack.v4.0.9.setup.exe
2014-05-25 15:50 - 2014-04-12 04:11 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-25 15:50 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-05-25 15:50 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-25 15:50 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-25 15:50 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-25 15:50 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-25 15:50 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-25 15:50 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-25 15:50 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-25 15:50 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-25 15:49 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-25 15:49 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-25 15:49 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-25 15:49 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-25 15:49 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-25 15:49 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-25 15:49 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-25 15:49 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-25 15:49 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-25 15:49 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-25 15:49 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-25 15:49 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-25 15:49 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-25 15:49 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-25 15:47 - 2011-04-28 05:15 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-05-25 15:43 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-25 15:40 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-05-25 15:40 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-05-23 01:43 - 2014-05-23 01:43 - 00000000 __SHD () C:\Users\Argo80\AppData\Local\EmieUserList
2014-05-23 01:43 - 2014-05-23 01:43 - 00000000 __SHD () C:\Users\Argo80\AppData\Local\EmieSiteList
2014-05-20 15:03 - 2014-05-20 15:03 - 00045384 _____ () C:\Windows\system32\DiscHandler.exe
2014-05-14 00:59 - 2014-05-14 00:59 - 00001091 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-05-13 17:02 - 2014-05-13 17:02 - 03916288 _____ () C:\Windows\system32\ffmpeg.dll
2014-05-13 17:01 - 2014-05-13 17:01 - 03502592 _____ () C:\Windows\system32\ffdshow.ax
2014-05-13 17:01 - 2014-05-13 17:01 - 00271360 _____ () C:\Windows\system32\TomsMoComp_ff.dll
2014-05-13 17:01 - 2014-05-13 17:01 - 00112640 _____ () C:\Windows\system32\ff_vfw.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 01525760 _____ () C:\Windows\system32\ff_samplerate.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00211968 _____ () C:\Windows\system32\ff_libdts.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00157184 _____ () C:\Windows\system32\ff_unrar.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00147456 _____ () C:\Windows\system32\ff_libmad.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00136704 _____ () C:\Windows\system32\libmpeg2_ff.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00114688 _____ () C:\Windows\system32\ff_liba52.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00099840 _____ () C:\Windows\system32\ff_wmv9.dll
2014-05-09 01:46 - 2014-05-09 01:47 - 00495104 _____ () C:\Users\Argo80\Downloads\Java.exe

==================== One Month Modified Files and Folders =======

2014-06-06 17:58 - 2014-04-25 13:09 - 00000000 ____D () C:\Users\Argo80\AppData\Local\Temp
2014-06-06 17:57 - 2014-06-06 17:57 - 00010312 _____ () C:\Users\Argo80\Downloads\FRST.txt
2014-06-06 17:57 - 2014-06-06 17:55 - 00000000 ____D () C:\FRST
2014-06-06 17:55 - 2014-06-06 17:55 - 01063424 _____ (Farbar) C:\Users\Argo80\Downloads\FRST.exe
2014-06-06 17:51 - 2014-06-06 17:51 - 00029061 _____ () C:\Users\Argo80\Downloads\gmer.txt
2014-06-06 16:52 - 2014-06-06 16:52 - 00380416 _____ () C:\Users\Argo80\Downloads\5wnjqffm.exe
2014-06-06 16:48 - 2014-06-06 16:48 - 00021292 _____ () C:\Users\Argo80\Downloads\Extras.Txt
2014-06-06 16:47 - 2014-06-06 16:47 - 00057620 _____ () C:\Users\Argo80\Downloads\OTL.Txt
2014-06-06 16:39 - 2014-06-06 16:39 - 00602112 _____ (OldTimer Tools) C:\Users\Argo80\Downloads\OTL.exe
2014-06-06 16:35 - 2014-06-06 16:35 - 198008673 _____ () C:\Windows\MEMORY.DMP
2014-06-06 16:35 - 2014-06-06 16:35 - 00139104 _____ () C:\Windows\Minidump\060614-18454-01.dmp
2014-06-06 16:35 - 2014-06-06 16:35 - 00000000 ____D () C:\Windows\Minidump
2014-06-06 16:35 - 2010-11-20 23:48 - 00115494 _____ () C:\Windows\PFRO.log
2014-06-06 16:34 - 2014-06-06 16:34 - 00259584 _____ (OldTimer Tools) C:\Users\Argo80\Downloads\OTH.exe
2014-06-06 16:12 - 2014-04-25 12:45 - 01951061 _____ () C:\Windows\WindowsUpdate.log
2014-06-06 16:12 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini
2014-06-06 16:10 - 2014-04-26 19:37 - 00000000 ____D () C:\Users\Argo80\AppData\Roaming\Skype
2014-06-06 16:10 - 2014-04-25 22:27 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-06 16:09 - 2014-04-25 22:27 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-06 16:09 - 2014-04-25 22:23 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-05 10:55 - 2009-07-14 06:34 - 00017328 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-05 10:55 - 2009-07-14 06:34 - 00017328 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-05 10:41 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-05 10:41 - 2009-07-14 06:39 - 00032577 _____ () C:\Windows\setupact.log
2014-06-05 10:40 - 2014-05-29 22:42 - 00000000 ____D () C:\Program Files\Rock Turner
2014-06-05 10:32 - 2014-04-25 23:34 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-05 10:32 - 2014-04-25 23:34 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-05 10:30 - 2014-06-05 10:30 - 00000146 _____ () C:\Windows\system32\Avira.OE.ServiceHost.log
2014-06-01 12:19 - 2014-06-01 12:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-01 12:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-06-01 00:18 - 2011-04-12 07:08 - 00739932 _____ () C:\Windows\system32\perfh015.dat
2014-06-01 00:18 - 2011-04-12 07:08 - 00155474 _____ () C:\Windows\system32\perfc015.dat
2014-06-01 00:18 - 2010-11-20 23:01 - 01641016 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-29 22:41 - 2014-05-29 22:41 - 00040960 _____ () C:\Users\Argo80\Downloads\Starter Wallpaper Changer [1].exe
2014-05-29 22:40 - 2014-05-29 22:40 - 00607048 _____ () C:\Users\Argo80\Downloads\Starter Wallpaper Changer.exe
2014-05-27 19:18 - 2014-05-27 18:31 - 00000000 ____D () C:\Users\Argo80\AppData\Local\Microsoft Games
2014-05-27 14:23 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-05-27 10:25 - 2014-05-27 10:25 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-27 10:25 - 2014-04-26 19:37 - 00000000 ___RD () C:\Program Files\Skype
2014-05-27 10:25 - 2014-04-26 19:37 - 00000000 ____D () C:\ProgramData\Skype
2014-05-26 16:15 - 2014-04-25 22:28 - 00002135 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-25 18:44 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-25 16:19 - 2014-04-26 12:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-25 16:15 - 2014-04-26 12:29 - 90547776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-25 15:57 - 2014-05-25 15:57 - 00000000 ____D () C:\Users\Argo80\AppData\Roaming\OpenCandy
2014-05-25 15:57 - 2014-05-25 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 7 - Codec Pack
2014-05-25 15:57 - 2014-05-25 15:55 - 00000000 ____D () C:\Windows\system32\C2MP
2014-05-25 15:54 - 2014-05-25 15:51 - 22843808 _____ (Windows 7 - Codec Pack) C:\Users\Argo80\Downloads\windows.7.codec.pack.v4.0.9.setup.exe
2014-05-23 01:43 - 2014-05-23 01:43 - 00000000 __SHD () C:\Users\Argo80\AppData\Local\EmieUserList
2014-05-23 01:43 - 2014-05-23 01:43 - 00000000 __SHD () C:\Users\Argo80\AppData\Local\EmieSiteList
2014-05-22 18:24 - 2014-05-30 00:19 - 00052928 _____ (StdLib) C:\Windows\system32\Drivers\{8ce1c375-1e13-43f7-a4fd-6530f47c4fde}Gw.sys
2014-05-20 15:03 - 2014-05-20 15:03 - 00045384 _____ () C:\Windows\system32\DiscHandler.exe
2014-05-15 09:28 - 2014-04-25 22:23 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-15 09:28 - 2014-04-25 22:23 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-14 00:59 - 2014-05-14 00:59 - 00001091 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-05-14 00:59 - 2014-04-25 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-14 00:59 - 2014-04-25 23:29 - 00000000 ____D () C:\Program Files\Avira
2014-05-14 00:59 - 2014-04-25 22:37 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-13 17:02 - 2014-05-13 17:02 - 03916288 _____ () C:\Windows\system32\ffmpeg.dll
2014-05-13 17:01 - 2014-05-13 17:01 - 03502592 _____ () C:\Windows\system32\ffdshow.ax
2014-05-13 17:01 - 2014-05-13 17:01 - 00271360 _____ () C:\Windows\system32\TomsMoComp_ff.dll
2014-05-13 17:01 - 2014-05-13 17:01 - 00112640 _____ () C:\Windows\system32\ff_vfw.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 01525760 _____ () C:\Windows\system32\ff_samplerate.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00211968 _____ () C:\Windows\system32\ff_libdts.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00157184 _____ () C:\Windows\system32\ff_unrar.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00147456 _____ () C:\Windows\system32\ff_libmad.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00136704 _____ () C:\Windows\system32\libmpeg2_ff.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00114688 _____ () C:\Windows\system32\ff_liba52.dll
2014-05-13 17:00 - 2014-05-13 17:00 - 00099840 _____ () C:\Windows\system32\ff_wmv9.dll
2014-05-09 09:06 - 2014-05-31 23:15 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 09:04 - 2014-05-31 23:15 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-09 01:47 - 2014-05-09 01:46 - 00495104 _____ () C:\Users\Argo80\Downloads\Java.exe

Some content of TEMP:
====================
C:\Users\Argo80\AppData\Local\Temp\avgnt.exe
C:\Users\Argo80\AppData\Local\Temp\lowproc.exe
C:\Users\Argo80\AppData\Local\Temp\nsvA48C.exe
C:\Users\Argo80\AppData\Local\Temp\stubhelper.dll
C:\Users\Argo80\AppData\Local\Temp\{E7867A8E-A022-4ED4-B75E-68089524AD99}-34.0.1847.137_chrome_installer.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-24 05:37

==================== End Of Log ============================