Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-06-2014 02
Ran by Robert (administrator) on KOMP on 30-06-2014 14:12:30
Running from C:\Users\Robert\Downloads
Platform: Windows 8.1 (Update 1) (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Innova Co S.a r.l.) C:\Program Files (x86)\4game\3.2.0.214\4game-service.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(OldTimer Tools) C:\Users\Robert\Desktop\OTL.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Robert\Downloads\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-11-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-03-26] (Dritek System Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3899765010-829146191-1164625339-1001\...\Run: [Internet Manager] => C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe [85088 2012-11-06] ()
HKU\S-1-5-21-3899765010-829146191-1164625339-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3595608 2014-06-26] (Electronic Arts)
HKU\S-1-5-21-3899765010-829146191-1164625339-1001\...\Run: [uTorrent] => C:\Users\Robert\AppData\Roaming\uTorrent\uTorrent.exe [1267536 2014-06-21] (BitTorrent Inc.)
HKU\S-1-5-21-3899765010-829146191-1164625339-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-3899765010-829146191-1164625339-1001\...\Run: [GG] => C:\Users\Robert\AppData\Local\GG\Application\gghub.exe [4023360 2014-03-25] (GG Network S.A.)
HKU\S-1-5-21-3899765010-829146191-1164625339-1001\...\MountPoints2: {0b6ba6b0-bb46-11e3-beb0-208984839cfe} - "E:\AutoRun.exe" 
HKU\S-1-5-21-3899765010-829146191-1164625339-1001\...\MountPoints2: {80c87ca1-b101-11e3-bead-208984839cfe} - "E:\AutoRun.exe" 
HKU\S-1-5-21-3899765010-829146191-1164625339-1001\...\MountPoints2: {80c87cc9-b101-11e3-bead-208984839cfe} - "E:\AutoRun.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140621
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5EADF8C6E361CF01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140621
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140621
SearchScopes: HKLM - {0C974D2E-151A-44B5-AE30-E990F10EBDA5} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=210&systemid=488&v=a12834-353&apn_uid=2727338355874053&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0C974D2E-151A-44B5-AE30-E990F10EBDA5} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=210&systemid=488&v=a12834-353&apn_uid=2727338355874053&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKCU - {0C974D2E-151A-44B5-AE30-E990F10EBDA5} URL = 
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=210&systemid=488&v=a12834-353&apn_uid=2727338355874053&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 217.172.224.160 89.231.1.206
Tcpip\..\Interfaces\{55593A8D-FC79-4AAD-8477-28D799BA244B}: [NameServer]213.158.199.5 213.158.199.1
Tcpip\..\Interfaces\{F76547D3-556F-4E41-9FE0-50AE573FE9DA}: [NameServer]213.158.199.5 213.158.199.1

FireFox:
========
FF ProfilePath: C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\qldfv2ae.default
FF Homepage: hxxp://www.gazeta.pl/0,0.html?p=180&d=20140621
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @4game.com/plugin - C:\Program Files (x86)\4game\3.2.0.214\npplugin4game.dll (Innova Co S.a r.l.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: Ask New Tabs - C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\qldfv2ae.default\Extensions\{A71BB42A-A7C4-8C7D-50D8-5CD7D7CA310F} [2014-05-30]
FF Extension: Greener Web - C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\qldfv2ae.default\Extensions\{a3f28269-ad17-41a8-b032-3e0313ef8979}.xpi [2014-06-22]
FF Extension: Adblock Plus - C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\qldfv2ae.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-04]

Chrome: 
=======
CHR HomePage: https://www.google.pl/
CHR StartupUrls: "hxxp://www.google.pl/", "hxxp://www.shinysearch.com/myhome.php?theme=nike&ltext=Robert", "hxxp://www.search.ask.com/?o=APN11459&gct=hp&d=488-210&v=a12834-353&t=4"
CHR NewTab: "chrome-extension://nhbfhddhlcdaijmhfngbpihbhnbhjhgj/ios7/index.html"
CHR Extension: (Dysk Google) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-11]
CHR Extension: (YouTube) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-11]
CHR Extension: (Adblock Plus) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-26]
CHR Extension: (Szukaj w Google) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-11]
CHR Extension: (IOS 7 New Tab Page) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhbfhddhlcdaijmhfngbpihbhnbhjhgj [2014-02-16]
CHR Extension: (Google Wallet) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-21]
CHR Extension: (Gmail) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-11]

==================== Services (Whitelisted) =================

R2 4game-service; C:\Program Files (x86)\4game\3.2.0.214\4game-service.exe [1290752 2014-02-04] (Innova Co S.a r.l.)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-21] (Broadcom Corp.) [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2449552 2012-10-26] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-17] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658064 2012-10-23] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-06-14] (WildTangent)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-11-03] (NTI Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2014-04-04] ()
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-03-26] (Dritek System INC.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [239104 2012-09-18] (Huawei Technologies Co., Ltd.)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-03-26] (Dritek System Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S1 {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64; system32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-30 14:12 - 2014-06-30 14:12 - 02083328 _____ (Farbar) C:\Users\Robert\Downloads\FRST64 (1).exe
2014-06-30 13:48 - 2014-06-30 14:11 - 00000000 ____D () C:\Users\Robert\Desktop\LOGI
2014-06-30 13:46 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-06-30 13:45 - 2014-06-30 13:46 - 00000000 ____D () C:\AdwCleaner
2014-06-30 13:45 - 2014-06-30 13:45 - 01346519 _____ () C:\Users\Robert\Downloads\AdwCleaner.exe
2014-06-22 01:15 - 2014-06-22 01:26 - 00000000 ____D () C:\Fraps
2014-06-22 01:14 - 2014-06-22 01:15 - 02628431 _____ () C:\Users\Robert\Downloads\Fraps3.5.9FullVersion2013.zip
2014-06-22 01:02 - 2014-06-30 13:46 - 00000000 ____D () C:\Program Files (x86)\Greener Web
2014-06-22 01:01 - 2014-06-22 01:01 - 00702504 _____ () C:\Users\Robert\Downloads\Audacity(11826).exe
2014-06-21 22:43 - 2014-06-21 22:43 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\gBurner
2014-06-21 21:40 - 2014-06-21 21:59 - 00000000 ____D () C:\Users\Robert\Downloads\CALL OF DUTY 2 PC DVD + Key + 1.3 Patch + NoCd Crack
2014-06-19 09:16 - 2014-06-19 09:16 - 00000024 _____ () C:\Users\Robert\AppData\Roaming\temp.ini
2014-06-18 15:26 - 2014-06-18 15:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 20:47 - 2014-06-17 20:47 - 00001006 _____ () C:\Users\Robert\AppData\Local\recently-used.xbel
2014-06-06 14:00 - 2014-06-30 14:12 - 00017359 _____ () C:\Users\Robert\Downloads\FRST.txt
2014-06-06 14:00 - 2014-06-06 14:00 - 02068992 _____ (Farbar) C:\Users\Robert\Downloads\FRST64.exe
2014-06-05 17:47 - 2014-06-05 17:47 - 00602112 _____ (OldTimer Tools) C:\Users\Robert\Desktop\OTL.exe

==================== One Month Modified Files and Folders =======

2014-06-30 14:12 - 2014-06-30 14:12 - 02083328 _____ (Farbar) C:\Users\Robert\Downloads\FRST64 (1).exe
2014-06-30 14:12 - 2014-06-06 14:00 - 00017359 _____ () C:\Users\Robert\Downloads\FRST.txt
2014-06-30 14:12 - 2014-04-03 15:12 - 00000000 ____D () C:\FRST
2014-06-30 14:11 - 2014-06-30 13:48 - 00000000 ____D () C:\Users\Robert\Desktop\LOGI
2014-06-30 14:06 - 2013-07-11 03:13 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3899765010-829146191-1164625339-1001
2014-06-30 14:00 - 2014-03-09 21:11 - 01233611 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-30 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-06-30 13:48 - 2013-10-29 23:45 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-06-30 13:48 - 2013-07-11 21:43 - 00001054 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-30 13:47 - 2014-03-09 20:52 - 00000000 ____D () C:\Users\Robert
2014-06-30 13:47 - 2013-11-14 00:22 - 00031764 _____ () C:\WINDOWS\PFRO.log
2014-06-30 13:47 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-30 13:47 - 2013-07-11 21:43 - 00001058 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-30 13:46 - 2014-06-30 13:45 - 00000000 ____D () C:\AdwCleaner
2014-06-30 13:46 - 2014-06-22 01:02 - 00000000 ____D () C:\Program Files (x86)\Greener Web
2014-06-30 13:46 - 2014-03-03 21:24 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-06-30 13:46 - 2012-07-26 07:26 - 00000420 _____ () C:\WINDOWS\win.ini
2014-06-30 13:45 - 2014-06-30 13:45 - 01346519 _____ () C:\Users\Robert\Downloads\AdwCleaner.exe
2014-06-30 13:25 - 2014-04-03 16:24 - 01078272 ___SH () C:\Users\Robert\Desktop\Thumbs.db
2014-06-30 12:22 - 2013-07-16 21:52 - 00000000 ____D () C:\ProgramData\Origin
2014-06-30 12:07 - 2014-04-02 15:37 - 00003972 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{53D85DBD-F836-495C-B378-1027B1FDBF5C}
2014-06-30 02:18 - 2014-03-12 15:30 - 00000356 _____ () C:\WINDOWS\Tasks\bench-S-1-5-21-3899765010-829146191-1164625339-1001.job
2014-06-30 01:52 - 2014-02-07 01:22 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\TS3Client
2014-06-30 01:30 - 2014-04-17 22:46 - 00000000 ____D () C:\Users\Robert\Documents\FIFA 14
2014-06-29 19:59 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-06-28 01:54 - 2014-04-04 21:42 - 00000000 ____D () C:\Users\Robert\AppData\Local\Windows Live
2014-06-26 16:10 - 2014-03-03 21:24 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-06-23 08:51 - 2013-11-14 09:33 - 01825074 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-23 08:51 - 2013-11-14 09:13 - 00807160 _____ () C:\WINDOWS\system32\perfh015.dat
2014-06-23 08:51 - 2013-11-14 09:13 - 00163478 _____ () C:\WINDOWS\system32\perfc015.dat
2014-06-22 03:37 - 2014-01-15 23:54 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\uTorrent
2014-06-22 01:26 - 2014-06-22 01:15 - 00000000 ____D () C:\Fraps
2014-06-22 01:26 - 2014-03-04 21:08 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-06-22 01:15 - 2014-06-22 01:14 - 02628431 _____ () C:\Users\Robert\Downloads\Fraps3.5.9FullVersion2013.zip
2014-06-22 01:15 - 2014-03-04 21:09 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Audacity
2014-06-22 01:01 - 2014-06-22 01:01 - 00702504 _____ () C:\Users\Robert\Downloads\Audacity(11826).exe
2014-06-22 01:01 - 2014-03-04 21:07 - 22180353 _____ (Audacity Team ) C:\Users\Robert\Downloads\audacity-win-2.0.5.exe
2014-06-21 22:43 - 2014-06-21 22:43 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\gBurner
2014-06-21 21:59 - 2014-06-21 21:40 - 00000000 ____D () C:\Users\Robert\Downloads\CALL OF DUTY 2 PC DVD + Key + 1.3 Patch + NoCd Crack
2014-06-21 15:42 - 2013-07-11 21:43 - 00004030 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-21 15:42 - 2013-07-11 21:43 - 00003794 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 19:00 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-06-19 15:03 - 2014-03-03 21:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-19 09:16 - 2014-06-19 09:16 - 00000024 _____ () C:\Users\Robert\AppData\Roaming\temp.ini
2014-06-18 15:27 - 2014-06-18 15:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 20:55 - 2014-03-26 17:46 - 00000000 ____D () C:\Users\Robert\.gimp-2.8
2014-06-17 20:47 - 2014-06-17 20:47 - 00001006 _____ () C:\Users\Robert\AppData\Local\recently-used.xbel
2014-06-17 20:42 - 2014-03-26 17:59 - 00000000 ____D () C:\Users\Robert\AppData\Local\gtk-2.0
2014-06-15 01:59 - 2014-04-23 00:08 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\GG
2014-06-14 09:54 - 2012-11-23 07:49 - 00002118 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games App - acer.lnk
2014-06-14 09:54 - 2012-11-23 07:49 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-14 09:54 - 2012-11-23 07:49 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-06-06 14:00 - 2014-06-06 14:00 - 02068992 _____ (Farbar) C:\Users\Robert\Downloads\FRST64.exe
2014-06-05 17:47 - 2014-06-05 17:47 - 00602112 _____ (OldTimer Tools) C:\Users\Robert\Desktop\OTL.exe
2014-06-04 16:06 - 2013-07-12 10:42 - 00243454 _____ () C:\WINDOWS\DirectX.log

Some content of TEMP:
====================
C:\Users\Robert\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\Robert\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\Robert\AppData\Local\Temp\installstats.exe
C:\Users\Robert\AppData\Local\Temp\Quarantine.exe
C:\Users\Robert\AppData\Local\Temp\sonarinst.exe
C:\Users\Robert\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Robert\AppData\Local\Temp\utt4728.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-30 14:07

==================== End Of Log ============================