Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-11-2013 Ran by MARCINO at 2013-11-21 21:56:16 Run:1 Running from C:\Users\MARCINO\Desktop\wirus 3 Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {349DBF7E-54F0-4344-AEFC-6B859D4D819C} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2013-11-20] (SaveSense) Task: {44C7A8CC-5895-4925-9F0C-F79829642C28} - System32\Tasks\SaveSense => C:\Users\MARCINO\AppData\Roaming\SaveSense\UpdateProc\UpdateTask.exe [2013-04-12] () C:\Program Files (x86)\SaveSenseLive C:\Users\MARCINO\AppData\Roaming\SaveSense Task: {554649C8-AF54-4D07-B9AB-BFA39C1730C1} - System32\Tasks\PutLockerDownloader V6.0-enabler => C:\Program Files (x86)\PutLockerDownloader V6.0\PutLockerDownloader V6.0-enabler.exe [2013-11-20] (installdaddy) C:\Program Files (x86)\PutLockerDownloader V6.0 Task: {C4AFFD60-3C88-4C26-8B3B-8ECACD243EBE} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2013-11-20] (SaveSense) Task: {E98817ED-792F-4257-9F4F-298B6FF01400} - System32\Tasks\PutLockerDownloader V6.0-codedownloader => C:\Program Files (x86)\PutLockerDownloader V6.0\PutLockerDownloader V6.0-codedownloader.exe [2013-11-20] (installdaddy) Task: {EB3B3D3C-C3BC-43B0-B637-A6117F828745} - System32\Tasks\PutLockerDownloader V6.0-updater => C:\Program Files (x86)\PutLockerDownloader V6.0\PutLockerDownloader V6.0-updater.exe [2013-11-20] (installdaddy) Task: C:\Windows\Tasks\PutLockerDownloader V6.0-codedownloader.job => C:\Program Files (x86)\PutLockerDownloader V6.0\PutLockerDownloader V6.0-codedownloader.exe Task: C:\Windows\Tasks\PutLockerDownloader V6.0-enabler.job => C:\Program Files (x86)\PutLockerDownloader V6.0\PutLockerDownloader V6.0-enabler.exe Task: C:\Windows\Tasks\PutLockerDownloader V6.0-updater.job => C:\Program Files (x86)\PutLockerDownloader V6.0\PutLockerDownloader V6.0-updater.exe Task: C:\Windows\Tasks\SaveSense.job => C:\Users\MARCINO\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe 2013-11-20 14:13 - 2013-11-20 14:13 - 00697884 _____ () C:\Users\MARCINO\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0006\~df394b.tmp 2013-11-20 14:13 - 2013-11-20 14:13 - 00592896 _____ () C:\Users\MARCINO\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0006\~de6248.tmp 2013-11-20 20:12 - 2013-09-29 13:11 - 00520234 _____ () C:\Program Files (x86)\Optimizer Pro\sqlite3.dll C:\Program Files (x86)\Optimizer Pro C:\Program Files (x86)\AskPartnerNetwork C:\Program Files (x86)\SecretSauce HKLM-x32\...\Runonce: [Del21590959] - cmd.exe /Q /D /c del "C:\Users\MARCINO\AppData\Local\Temp\0.del" [x] HKCU\...\Run: [AdobeBridge] - [x] HKCU\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [134648 2013-10-28] () HKCU\...\Runonce: [Del21590959] - cmd.exe /Q /D /c del "C:\Users\MARCINO\AppData\Local\Temp\0.del" HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1707472 2013-11-06] (APN) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.as...D10717%26ppd%3D URLSearchHook: HKCU - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.) SearchScopes: HKCU - DefaultScope {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = http://www.search.as...D10717%26ppd%3D SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = http://www.search.as...D10717%26ppd%3D BHO: PutLockerDownloader V6.0 - {11111111-1111-1111-1111-110411591162} - C:\Program Files (x86)\PutLockerDownloader V6.0\PutLockerDownloader V6.0-bho64.dll (installdaddy) BHO: Ask Toolbar - {434D452D-5637-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\CME-V7\Passport_x64.dll (APN LLC.) BHO-x32: SaveSense - {0f21b1e5-5afc-43c9-9c66-515046e92ec2} - C:\Program Files (x86)\SaveSense\SaveSenseIE.dll (SaveSense) BHO-x32: PutLockerDownloader V6.0 - {11111111-1111-1111-1111-110411591162} - C:\Program Files (x86)\PutLockerDownloader V6.0\PutLockerDownloader V6.0-bho.dll (installdaddy) HO-x32: Ask Toolbar - {434D452D-5637-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\CME-V7\Passport.dll (APN LLC.) Toolbar: HKLM - Ask Toolbar - {434D452D-5637-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\CME-V7\Passport_x64.dll (APN LLC.) Toolbar: HKLM-x32 - Ask Toolbar - {434D452D-5637-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\CME-V7\Passport.dll (APN LLC.) FF Extension: SaveSense - C:\Users\MARCINO\AppData\Roaming\Mozilla\Firefox\Profiles\cb81d5wp.default\Extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36} C:\Users\MARCINO\AppData\Local\Google\Chrome\User Data\Default\Extensions\khcceooakamlehbimaepcldnnlnkcmfk R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-11-06] (APN LLC.) S2 savesenselive; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2013-11-20] (SaveSense) S3 savesenselivem; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2013-11-20] (SaveSense) R2 Update SecretSauce; C:\Program Files (x86)\SecretSauce\updateSecretSauce.exe [66848 2013-11-13] () R2 yksvc; RUNDLL32.EXE ykx64mpcoinst,serviceStartProc [x] 2013-11-20 20:17 - 2013-11-20 20:17 - 00000000 ____D C:\Users\MARCINO\Documents\Optimizer Pro 2013-11-20 20:17 - 2013-11-20 20:17 - 00000000 ____D C:\Users\MARCINO\AppData\Roaming\Optimizer Pro 2013-11-20 20:12 - 2013-11-20 23:17 - 00000934 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job 2013-11-20 20:12 - 2013-11-20 23:13 - 00000300 _____ C:\Windows\Tasks\SaveSense.job 2013-11-20 20:12 - 2013-11-20 20:17 - 00000930 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job 2013-11-20 20:12 - 2013-11-20 20:12 - 00003930 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA 2013-11-20 20:12 - 2013-11-20 20:12 - 00003678 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore 2013-11-20 20:12 - 2013-11-20 20:12 - 00003248 _____ C:\Windows\System32\Tasks\SaveSense 2013-11-20 20:12 - 2013-11-20 20:12 - 00000901 _____ C:\Users\MARCINO\Desktop\Optimizer Pro.lnk 2013-11-20 20:12 - 2013-11-20 20:12 - 00000000 ____D C:\Users\MARCINO\AppData\Roaming\SaveSense 2013-11-20 20:12 - 2013-11-20 20:12 - 00000000 ____D C:\Users\MARCINO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense 2013-11-20 20:12 - 2013-11-20 20:12 - 00000000 ____D C:\Users\MARCINO\AppData\Local\SaveSenseLive 2013-11-20 20:12 - 2013-11-20 20:12 - 00000000 ____D C:\Program Files (x86)\SaveSenseLive 2013-11-20 20:12 - 2013-11-20 20:12 - 00000000 ____D C:\Program Files (x86)\SaveSense 2013-11-20 20:12 - 2013-11-20 20:12 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 2013-11-20 20:11 - 2013-11-20 20:11 - 00000000 ____D C:\Program Files (x86)\SecretSauce 2013-11-20 19:31 - 2013-11-20 20:11 - 00004408 _____ C:\Windows\System32\Tasks\PutLockerDownloader V6.0-updater 2013-11-20 19:31 - 2013-11-20 20:11 - 00004210 _____ C:\Windows\System32\Tasks\PutLockerDownloader V6.0-enabler 2013-11-20 19:31 - 2013-11-20 20:11 - 00001378 _____ C:\Windows\Tasks\PutLockerDownloader V6.0-updater.job 2013-11-20 19:31 - 2013-11-20 20:11 - 00001180 _____ C:\Windows\Tasks\PutLockerDownloader V6.0-enabler.job 2013-11-20 19:31 - 2013-11-20 19:31 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-11-20 19:30 - 2013-11-20 20:11 - 00001270 _____ C:\Windows\Tasks\PutLockerDownloader V6.0-codedownloader.job 2013-11-20 19:30 - 2013-11-20 20:11 - 00001010 _____ C:\Users\MARCINO\Desktop\PutLockerDownloader.lnk 2013-11-20 19:30 - 2013-11-20 20:11 - 00000000 ____D C:\Program Files (x86)\PutLockerDownloader.com 2013-11-20 19:30 - 2013-11-20 19:31 - 00000000 ____D C:\Program Files (x86)\PutLockerDownloader V6.0 C:\Users\MARCINO\AppData\Local\Temp\AcDeltree.exe C:\Users\MARCINO\AppData\Local\Temp\chutil.dll C:\Users\MARCINO\AppData\Local\Temp\IMsetup.exe C:\Users\MARCINO\AppData\Local\Temp\mgsqlite3.dll C:\Users\MARCINO\AppData\Local\Temp\nsmF924.tmp.exe C:\Users\MARCINO\AppData\Local\Temp\PhoneSMSAPI.dll C:\Users\MARCINO\AppData\Local\Temp\sqlite3.dll C:\Users\MARCINO\AppData\Local\Temp\USmartEditor.exe C:\Users\MARCINO\AppData\Local\Temp\_isB26.exe ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{349DBF7E-54F0-4344-AEFC-6B859D4D819C} => Key not found. C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SaveSenseLiveUpdateTaskMachineCore => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44C7A8CC-5895-4925-9F0C-F79829642C28} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44C7A8CC-5895-4925-9F0C-F79829642C28} => Key deleted successfully. C:\Windows\System32\Tasks\SaveSense => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SaveSense => Key deleted successfully. C:\Program Files (x86)\SaveSenseLive => Moved successfully. "C:\Users\MARCINO\AppData\Roaming\SaveSense" directory move: C:\Users\MARCINO\AppData\Roaming\SaveSense\UpdateProc\config.dat => Moved successfully. Could not move "C:\Users\MARCINO\AppData\Roaming\SaveSense" directory. => Scheduled to move on reboot. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{554649C8-AF54-4D07-B9AB-BFA39C1730C1} => Key not found. C:\Windows\System32\Tasks\PutLockerDownloader V6.0-enabler not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PutLockerDownloader V6.0-enabler => Key not found. "C:\Program Files (x86)\PutLockerDownloader V6.0" => File/Directory not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4AFFD60-3C88-4C26-8B3B-8ECACD243EBE} => Key not found. C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SaveSenseLiveUpdateTaskMachineUA => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E98817ED-792F-4257-9F4F-298B6FF01400} => Key not found. C:\Windows\System32\Tasks\PutLockerDownloader V6.0-codedownloader not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PutLockerDownloader V6.0-codedownloader => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB3B3D3C-C3BC-43B0-B637-A6117F828745} => Key not found. C:\Windows\System32\Tasks\PutLockerDownloader V6.0-updater not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PutLockerDownloader V6.0-updater => Key not found. C:\Windows\Tasks\PutLockerDownloader V6.0-codedownloader.job not found. C:\Windows\Tasks\PutLockerDownloader V6.0-enabler.job not found. C:\Windows\Tasks\PutLockerDownloader V6.0-updater.job not found. C:\Windows\Tasks\SaveSense.job => Moved successfully. C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job not found. C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job not found. "C:\Users\MARCINO\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0006\~df394b.tmp" => File/Directory not found. "C:\Users\MARCINO\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0006\~de6248.tmp" => File/Directory not found. "C:\Program Files (x86)\Optimizer Pro\sqlite3.dll" => File/Directory not found. "C:\Program Files (x86)\Optimizer Pro" => File/Directory not found. "C:\Program Files (x86)\AskPartnerNetwork" => File/Directory not found. C:\Program Files (x86)\SecretSauce => Moved successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\Del21590959 => Value not found. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Optimizer Pro => Value not found. HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Del21590959 => Value not found. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ApnTBMon => Value not found. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D8278076-BC68-4484-9233-6E7F1628B56C} => Value not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} => Key not found. HKCR\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411591162} => Key not found. HKCR\CLSID\{11111111-1111-1111-1111-110411591162} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{434D452D-5637-006A-76A7-7A786E7484D7} => Key not found. HKCR\CLSID\{434D452D-5637-006A-76A7-7A786E7484D7} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0f21b1e5-5afc-43c9-9c66-515046e92ec2} => Key not found. HKCR\Wow6432Node\CLSID\{0f21b1e5-5afc-43c9-9c66-515046e92ec2} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411591162} => Key not found. HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110411591162} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{434D452D-5637-006A-76A7-7A786E7484D7} => Value not found. HKCR\CLSID\{434D452D-5637-006A-76A7-7A786E7484D7} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{434D452D-5637-006A-76A7-7A786E7484D7} => Value not found. HKCR\Wow6432Node\CLSID\{434D452D-5637-006A-76A7-7A786E7484D7} => Key not found. C:\Users\MARCINO\AppData\Roaming\Mozilla\Firefox\Profiles\cb81d5wp.default\Extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36} not found. "C:\Users\MARCINO\AppData\Local\Google\Chrome\User Data\Default\Extensions\khcceooakamlehbimaepcldnnlnkcmfk" => File/Directory not found. APNMCP => Service not found. savesenselive => Service not found. savesenselivem => Service not found. Update SecretSauce => Service not found. yksvc => Service deleted successfully. "C:\Users\MARCINO\Documents\Optimizer Pro" => File/Directory not found. "C:\Users\MARCINO\AppData\Roaming\Optimizer Pro" => File/Directory not found. "C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job" => File/Directory not found. "C:\Windows\Tasks\SaveSense.job" => File/Directory not found. "C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job" => File/Directory not found. "C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA" => File/Directory not found. "C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore" => File/Directory not found. "C:\Windows\System32\Tasks\SaveSense" => File/Directory not found. "C:\Users\MARCINO\Desktop\Optimizer Pro.lnk" => File/Directory not found. "C:\Users\MARCINO\AppData\Roaming\SaveSense" directory move: Could not move "C:\Users\MARCINO\AppData\Roaming\SaveSense" directory. => Scheduled to move on reboot. "C:\Users\MARCINO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense" => File/Directory not found. C:\Users\MARCINO\AppData\Local\SaveSenseLive => Moved successfully. "C:\Program Files (x86)\SaveSenseLive" => File/Directory not found. "C:\Program Files (x86)\SaveSense" => File/Directory not found. "C:\Program Files (x86)\Optimizer Pro" => File/Directory not found. "C:\Program Files (x86)\SecretSauce" => File/Directory not found. "C:\Windows\System32\Tasks\PutLockerDownloader V6.0-updater" => File/Directory not found. "C:\Windows\System32\Tasks\PutLockerDownloader V6.0-enabler" => File/Directory not found. "C:\Windows\Tasks\PutLockerDownloader V6.0-updater.job" => File/Directory not found. "C:\Windows\Tasks\PutLockerDownloader V6.0-enabler.job" => File/Directory not found. "C:\Program Files (x86)\AskPartnerNetwork" => File/Directory not found. "C:\Windows\Tasks\PutLockerDownloader V6.0-codedownloader.job" => File/Directory not found. "C:\Users\MARCINO\Desktop\PutLockerDownloader.lnk" => File/Directory not found. "C:\Program Files (x86)\PutLockerDownloader.com" => File/Directory not found. "C:\Program Files (x86)\PutLockerDownloader V6.0" => File/Directory not found. C:\Users\MARCINO\AppData\Local\Temp\AcDeltree.exe => Moved successfully. C:\Users\MARCINO\AppData\Local\Temp\chutil.dll => Moved successfully. C:\Users\MARCINO\AppData\Local\Temp\IMsetup.exe => Moved successfully. C:\Users\MARCINO\AppData\Local\Temp\mgsqlite3.dll => Moved successfully. C:\Users\MARCINO\AppData\Local\Temp\nsmF924.tmp.exe => Moved successfully. C:\Users\MARCINO\AppData\Local\Temp\PhoneSMSAPI.dll => Moved successfully. C:\Users\MARCINO\AppData\Local\Temp\sqlite3.dll => Moved successfully. C:\Users\MARCINO\AppData\Local\Temp\USmartEditor.exe => Moved successfully. C:\Users\MARCINO\AppData\Local\Temp\_isB26.exe => Moved successfully. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2013-11-21 21:58:45)<= C:\Users\MARCINO\AppData\Roaming\SaveSense => Is moved successfully. C:\Users\MARCINO\AppData\Roaming\SaveSense => Is moved successfully. ==== End of Fixlog ====