Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 05
Ran by Krystian (administrator) on ZIOMIUSZ on 19-12-2013 01:07:11
Running from C:\Users\Krystian\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Adobe Systems Incorporated) F:\Programy\PSE7\PhotoshopElementsFileAgent.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Hi-Rez Studios) D:\GRY\Steam\steamapps\common\Hi-rez Studios\HiPatchService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Spigot, Inc.) C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Valve Corporation) D:\GRY\Steam\Steam.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Spotify Ltd) C:\Users\Krystian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKCU\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [4359680 2012-12-29] ()
HKCU\...\Run: [Advanced SystemCare 6] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-04-19] (AMD)
HKCU\...\Run: [Spotify] - C:\Users\Krystian\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-18] (Spotify Ltd)
HKCU\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Krystian\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Krystian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-18] (Spotify Ltd)
MountPoints2: {066fdbf8-3345-11e3-9756-50e549d61314} - E:\Startme.exe
MountPoints2: {ca3ae040-25e9-11e2-a191-806e6f6e6963} - I:\wubi.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [STCAgent] - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe [776064 2011-03-04] (Splashtop Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [ZyngaGamesAgent] - C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe [841544 2010-11-15] (Splashtop Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [SearchSettings] - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1383232 2013-12-13] (Spigot, Inc.)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
AppInit_DLLs-x32: C:\PROGRA~2\Google\GOOGLE~1\GO36F4~1.DLL [123392 2013-01-07] (Google)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com/?type=hp&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com/?type=hp&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com/?type=hp&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com/?type=hp&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com/?type=hp&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com/?type=hp&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
URLSearchHook: HKLM-x32 - BitTorrentControl_v12 Toolbar - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files (x86)\BitTorrentControl_v12\prxtbBit2.dll (Conduit Ltd.)
URLSearchHook: HKCU - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.5\iobitappsToolbarIE64.dll (Spigot, Inc.)
URLSearchHook: HKCU - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.5\iobitappsToolbarIE.dll (Spigot, Inc.)
URLSearchHook: HKCU - Splashtop Connect SearchHook - {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll (Splashtop Inc.)
URLSearchHook: HKCU - BitTorrentControl_v12 Toolbar - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files (x86)\BitTorrentControl_v12\prxtbBit2.dll (Conduit Ltd.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://aartemis.com/?type=sc&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {09EBE041-F030-49CE-8D26-AD7601BE6473} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
SearchScopes: HKCU - {489D7943-C7A9-470A-A0DC-64A14EE41A61} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3225826&CUI=UN38416867572660322&UM=1
SearchScopes: HKCU - {70D46D94-BF1E-45ED-B567-48701376298E} URL = http://127.0.0.1:4664/search&s=J-01f-851itUjroTDStQkmPEXxo?q={searchTerms}
SearchScopes: HKCU - {960FA8AD-08C8-4810-9C63-D97F66FC3D37} URL = http://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb201/?search={searchTerms}&loc=IB_DS&a=6R8OiTRttd&i=26
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.5\iobitappsToolbarIE.dll (Spigot, Inc.)
BHO-x32: Splashtop Connect VisualBookmark - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (Splashtop Inc.)
BHO-x32: WebCake - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\WebCake\WebCakeIEClient.dll (WebCake LLC)
BHO-x32: ALLYouTubeDownloader - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files (x86)\ALLYouTubeDownloader\ALLYouTubeDownloader.dll (ALLCinema Ltd.)
BHO-x32: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programy\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: BitTorrentControl_v12 Toolbar - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files (x86)\BitTorrentControl_v12\prxtbBit2.dll (Conduit Ltd.)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
BHO-x32: BonanzaDeals - {fe063412-bea4-4d76-8ed3-183be6220d17} - C:\Program Files (x86)\BonanzaDeals\BonanzaDealsIE.dll (BonanzaDeals)
Toolbar: HKLM - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.5\iobitappsToolbarIE64.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM-x32 - BitTorrentControl_v12 Toolbar - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files (x86)\BitTorrentControl_v12\prxtbBit2.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.5\iobitappsToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - No Name - {B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14} -  No File
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63
Tcpip\..\Interfaces\{0F4A4D99-E3D2-4C17-B653-BB08CA022A01}: [NameServer]194.204.159.1,194.204.152.33
Tcpip\..\Interfaces\{13965807-8E32-4408-984D-645174C090E9}: [NameServer]194.204.159.1,194.204.152.21

FireFox:
========
FF ProfilePath: C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default
FF user.js: detected! => C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\user.js
FF NewTab: hxxp://aartemis.com/newtab/?type=nt&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
FF DefaultSearchEngine: aartemis
FF SelectedSearchEngine: aartemis
FF Homepage: https://www.google.pl/
FF Keyword.URL: hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Programy\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programy\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\aartemis.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\googledesktop.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: incredibar.com - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\ffxtlbr@incredibar.com
FF Extension: WebCake - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\plugin@getwebcake.com
FF Extension: BitTorrentControl_v12  - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\{b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14}
FF Extension: BonanzaDeals - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}
FF Extension: No Name - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\iobitapps@mybrowserbar.com
FF Extension: Iplex to ALLPlayer - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\IplextoALL@ALLPlayer.org.xpi
FF Extension: ALLYouTubeDownloader - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\YouTubetoALL@ALLPlayer.org.xpi
FF Extension: Address Bar Search - C:\Users\Krystian\AppData\Roaming\Mozilla\Firefox\Profiles\h1bp10c2.default\Extensions\{badea1ae-72ed-4f6a-8c37-4db9a4ac7bc9}.xpi
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF Extension: Splashtop Connect Companion - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF Extension: Splashtop Connect - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF HKLM-x32\...\Firefox\Extensions: [{d9284e50-81fc-11da-a72b-0800200c9a66}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}
FF Extension: Yoono - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://aartemis.com/?type=sc&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17

Chrome: 
=======
CHR HomePage: hxxp://aartemis.com/?type=hp&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17
CHR RestoreOnStartup: "hxxp://aartemis.com/?type=hp&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17"
CHR DefaultSearchKeyword: aartemis
CHR DefaultSearchProvider: aartemis
CHR DefaultSearchURL: http://www.aartemis.com/web/?type=ds&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17&q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_0\plugin/npUrlAdvisor.dll No File
CHR Plugin: (Injovo Extension Plugin) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.557_0\npbrowserext.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_0\plugin/online_banking_npapi.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_0\plugin/content_blocker_npapi.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4190_0\plugin/npVKPlugin.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_0\plugin/npABPlugin.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U13) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.130.20) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Google Docs) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Extended Protection) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0
CHR Extension: (Google Search) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (BitTorrentControl_v12) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf\10.16.4.512_0
CHR Extension: (WebCake) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh\1.0.3_0
CHR Extension: (Ebay Shopping Assistant by Spigot) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj\1.0_0
CHR Extension: (Domain Error Assistant) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.1_0
CHR Extension: (BonanzaDeals) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj\3.5.0.0_0
CHR Extension: (Slick Savings) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Amazon Shopping Assistant by Spigot) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0
CHR Extension: (Gmail) - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [dknkjnkhedbanphkkpbpcgoblmkbfhlf] - C:\Users\Krystian\AppData\Local\CRE\dknkjnkhedbanphkkpbpcgoblmkbfhlf.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files (x86)\WebCake\WebCakeLayers.crx
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.2.crx
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Krystian\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://aartemis.com/?type=sc&ts=1387393279&from=cor&uid=ST3250310AS_6RY8QC17XXXX6RY8QC17

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor7.0; F:\Programy\PSE7\PhotoshopElementsFileAgent.exe [169312 2008-09-16] (Adobe Systems Incorporated)
R2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-09-28] (Advanced Micro Devices, Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S2 bonanzadealslive; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-12-18] (BonanzaDeals)
S3 bonanzadealslivem; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-12-18] (BonanzaDeals)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1501144 2013-08-19] (Echobit LLC)
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2013-01-07] (Google)
R2 HiPatchService; D:\GRY\Steam\steamapps\common\Hi-rez Studios\HiPatchService.exe [9216 2013-04-23] (Hi-Rez Studios)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)
S3 Microsoft SharePoint Workspace Audit Service; D:\Programy\Office\Office14\GROOVE.EXE [31124344 2010-12-27] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-04] ()
R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4241920 2013-09-18] (A-Volute)
R2 SCBackService; C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe [477000 2010-11-15] (Splashtop Inc.)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 WCUService_STC_FF; C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [493384 2011-03-24] (Splashtop Inc.)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2013-12-18] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11832 2010-06-29] (Advanced Micro Devices Inc.)
S3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
S3 athrusb; C:\Windows\System32\DRIVERS\athrxusb.sys [1075712 2008-07-29] (Atheros Communications, Inc.)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2012-12-18] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [23904 2013-05-20] (IVT Corporation.)
S3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [31480 2012-12-24] (IVT Corporation.)
R3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2013-07-18] (Echobit, LLC)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-01-20] ()
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
S3 IvtAudioBusSrv; C:\Windows\System32\Drivers\IvtBtBus.sys [27256 2012-12-24] (IVT Corporation.)
S3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [27256 2012-12-24] (IVT Corporation.)
S3 IvtPanBusSrv; C:\Windows\System32\Drivers\btnetBus.sys [31480 2012-12-24] (IVT Corporation.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2012-12-18] ()
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-09-18] (Windows (R) Win 7 DDK provider)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-11-03] (Duplex Secure Ltd.)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 V0220Dev; C:\Windows\System32\DRIVERS\V0220Dev.sys [194592 2006-06-29] (Creative Technology Ltd.)
S3 V0220Vfx; C:\Windows\System32\DRIVERS\V0220Vfx.sys [10752 2006-06-08] (EyePower Games Pte. Ltd.)
U3 a9xqmrn7; C:\Windows\System32\Drivers\a9xqmrn7.sys [0 ] (Advanced Micro Devices)
S3 BT; system32\DRIVERS\btnetdrv.sys [x]
S3 BTCOM; system32\DRIVERS\btcomport.sys [x]
S3 BTCOMBUS; System32\Drivers\btcombus.sys [x]
S3 Btcsrusb; System32\Drivers\btcusb.sys [x]
S3 IvtComBusSrv; System32\Drivers\btcombus.sys [x]
S3 VHidMinidrv; system32\drivers\VHIDMini.sys [x]
S0 vmci; system32\DRIVERS\vmci.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-19 01:07 - 2013-12-19 01:07 - 00033857 _____ C:\Users\Krystian\Desktop\FRST.txt
2013-12-19 01:06 - 2013-12-19 01:06 - 00000000 ____D C:\FRST
2013-12-19 01:06 - 2013-12-19 01:05 - 02192805 _____ (Farbar) C:\Users\Krystian\Desktop\FRST64.exe
2013-12-19 01:05 - 2013-12-19 01:05 - 00602112 _____ (OldTimer Tools) C:\Users\Krystian\Desktop\OTL.scr
2013-12-19 01:05 - 2013-12-19 01:05 - 00377856 _____ C:\Users\Krystian\Desktop\ln48xtp2.exe
2013-12-18 21:57 - 2013-12-18 21:57 - 00000218 _____ C:\Users\Krystian\AppData\Local\recently-used.xbel
2013-12-18 20:13 - 2013-12-18 21:57 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\BitLord
2013-12-18 20:13 - 2013-12-18 20:13 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Python-Eggs
2013-12-18 20:12 - 2013-12-18 20:12 - 00002023 _____ C:\Users\Krystian\Desktop\BitLord.lnk
2013-12-18 20:12 - 2013-12-18 20:12 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord
2013-12-18 20:03 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\AppData\Local\cache
2013-12-18 20:03 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\.android
2013-12-18 20:02 - 2013-12-18 20:13 - 00000000 ____D C:\Users\Krystian\AppData\Local\Mobogenie
2013-12-18 20:02 - 2013-12-18 20:04 - 00000000 ____D C:\Users\Krystian\AppData\Local\genienext
2013-12-18 20:02 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\newnext.me
2013-12-18 20:02 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\Documents\Mobogenie
2013-12-18 20:02 - 2013-12-18 20:02 - 00000000 _____ C:\Users\Krystian\daemonprocess.txt
2013-12-18 20:01 - 2013-12-19 01:06 - 00000930 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-12-18 20:01 - 2013-12-18 20:12 - 00000000 ____D C:\Program Files (x86)\BitLord 2
2013-12-18 20:01 - 2013-12-18 20:06 - 00000926 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-12-18 20:01 - 2013-12-18 20:01 - 00003926 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA
2013-12-18 20:01 - 2013-12-18 20:01 - 00003674 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore
2013-12-18 20:01 - 2013-12-18 20:01 - 00003392 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Users\Krystian\Documents\BitLord
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\aartemis
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Users\Krystian\AppData\Local\BonanzaDealsLive
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\ProgramData\WPM
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-12-18 18:02 - 2013-12-18 21:56 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Spotify
2013-12-18 18:02 - 2013-12-18 18:03 - 00000000 ____D C:\Users\Krystian\AppData\Local\Spotify
2013-12-18 18:02 - 2013-12-18 18:02 - 00001820 _____ C:\Users\Krystian\Desktop\Spotify.lnk
2013-12-18 18:02 - 2013-12-18 18:02 - 00001806 _____ C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-18 17:19 - 2013-12-18 17:19 - 00000000 ____D C:\Program Files (x86)\IObit Apps Toolbar
2013-12-18 17:19 - 2013-12-18 17:19 - 00000000 ____D C:\Program Files (x86)\Application Updater
2013-12-15 23:18 - 2013-12-15 23:18 - 00000000 ____D C:\Users\Krystian\Desktop\My Game
2013-12-15 13:22 - 2013-12-15 13:22 - 00001016 _____ C:\Users\Krystian\Desktop\5.lnk
2013-12-15 07:13 - 2013-12-18 11:33 - 00002240 _____ C:\Windows\PFRO.log
2013-12-13 15:34 - 2013-12-13 15:34 - 00160689 _____ C:\wubildr
2013-12-13 15:34 - 2013-12-13 15:34 - 00008192 _____ C:\wubildr.mbr
2013-12-13 15:33 - 2013-12-13 15:33 - 00000000 ____D C:\ubuntu
2013-12-11 16:45 - 2013-12-18 17:18 - 00000504 _____ C:\Windows\setupact.log
2013-12-11 16:45 - 2013-12-11 16:45 - 00000000 _____ C:\Windows\setuperr.log
2013-12-10 23:39 - 2013-12-10 23:39 - 00000872 _____ C:\Users\Public\Desktop\Grand Theft Auto IV.lnk
2013-12-06 16:41 - 2013-12-06 16:41 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Fatshark
2013-12-06 15:45 - 2013-12-06 15:45 - 00000672 _____ C:\Users\Public\Desktop\7 Days to Die - Alpha.lnk
2013-12-06 01:24 - 2013-12-06 01:24 - 00000000 ____D C:\Users\Krystian\AppData\Local\Arktos Entertainment
2013-12-05 18:47 - 2013-12-05 18:47 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\StunlockStudios
2013-11-26 11:54 - 2013-11-26 11:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-11-26 11:54 - 2013-11-26 11:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-11-22 20:30 - 2013-11-22 20:30 - 00012342 _____ C:\Users\Krystian\Desktop\lost.bmp
2013-11-20 15:04 - 2013-11-20 15:04 - 00000000 ____D C:\Users\Krystian\AppData\Local\{51F48D98-B482-4289-9535-7298D665B43C}

==================== One Month Modified Files and Folders =======

2013-12-19 01:07 - 2013-12-19 01:07 - 00033857 _____ C:\Users\Krystian\Desktop\FRST.txt
2013-12-19 01:06 - 2013-12-19 01:06 - 00000000 ____D C:\FRST
2013-12-19 01:06 - 2013-12-18 20:01 - 00000930 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-12-19 01:05 - 2013-12-19 01:06 - 02192805 _____ (Farbar) C:\Users\Krystian\Desktop\FRST64.exe
2013-12-19 01:05 - 2013-12-19 01:05 - 00602112 _____ (OldTimer Tools) C:\Users\Krystian\Desktop\OTL.scr
2013-12-19 01:05 - 2013-12-19 01:05 - 00377856 _____ C:\Users\Krystian\Desktop\ln48xtp2.exe
2013-12-19 00:51 - 2013-06-08 12:00 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\TS3Client
2013-12-19 00:14 - 2012-11-01 18:57 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-18 22:03 - 2013-02-20 11:52 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-12-18 22:03 - 2013-02-20 11:48 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-18 21:57 - 2013-12-18 21:57 - 00000218 _____ C:\Users\Krystian\AppData\Local\recently-used.xbel
2013-12-18 21:57 - 2013-12-18 20:13 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\BitLord
2013-12-18 21:56 - 2013-12-18 18:02 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Spotify
2013-12-18 21:48 - 2013-05-02 11:47 - 00000000 ____D C:\Users\Krystian\AppData\Local\Warframe
2013-12-18 21:14 - 2012-12-16 22:34 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\vlc
2013-12-18 20:13 - 2013-12-18 20:13 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Python-Eggs
2013-12-18 20:13 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\AppData\Local\Mobogenie
2013-12-18 20:12 - 2013-12-18 20:12 - 00002023 _____ C:\Users\Krystian\Desktop\BitLord.lnk
2013-12-18 20:12 - 2013-12-18 20:12 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord
2013-12-18 20:12 - 2013-12-18 20:01 - 00000000 ____D C:\Program Files (x86)\BitLord 2
2013-12-18 20:10 - 2013-06-26 02:29 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Azureus
2013-12-18 20:06 - 2013-12-18 20:01 - 00000926 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-12-18 20:04 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\AppData\Local\genienext
2013-12-18 20:03 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\AppData\Local\cache
2013-12-18 20:03 - 2013-12-18 20:03 - 00000000 ____D C:\Users\Krystian\.android
2013-12-18 20:03 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\newnext.me
2013-12-18 20:03 - 2012-11-01 14:58 - 00000000 ____D C:\Users\Krystian
2013-12-18 20:02 - 2013-12-18 20:02 - 00000000 ____D C:\Users\Krystian\Documents\Mobogenie
2013-12-18 20:02 - 2013-12-18 20:02 - 00000000 _____ C:\Users\Krystian\daemonprocess.txt
2013-12-18 20:01 - 2013-12-18 20:01 - 00003926 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA
2013-12-18 20:01 - 2013-12-18 20:01 - 00003674 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore
2013-12-18 20:01 - 2013-12-18 20:01 - 00003392 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Users\Krystian\Documents\BitLord
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\aartemis
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Users\Krystian\AppData\Local\BonanzaDealsLive
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\ProgramData\WPM
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-12-18 20:01 - 2013-12-18 20:01 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-12-18 20:01 - 2012-11-01 14:58 - 00001629 _____ C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-18 20:01 - 2012-11-01 14:58 - 00001607 _____ C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-12-18 19:39 - 2012-12-28 19:42 - 00000000 ____D C:\Users\Krystian\AppData\Local\LogMeIn Hamachi
2013-12-18 19:35 - 2011-02-04 18:20 - 00737942 _____ C:\Windows\system32\perfh015.dat
2013-12-18 19:35 - 2011-02-04 18:20 - 00154630 _____ C:\Windows\system32\perfc015.dat
2013-12-18 19:35 - 2009-07-14 06:13 - 01663412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-18 18:22 - 2012-11-01 14:52 - 01653375 _____ C:\Windows\WindowsUpdate.log
2013-12-18 18:03 - 2013-12-18 18:02 - 00000000 ____D C:\Users\Krystian\AppData\Local\Spotify
2013-12-18 18:02 - 2013-12-18 18:02 - 00001820 _____ C:\Users\Krystian\Desktop\Spotify.lnk
2013-12-18 18:02 - 2013-12-18 18:02 - 00001806 _____ C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-18 17:19 - 2013-12-18 17:19 - 00000000 ____D C:\Program Files (x86)\IObit Apps Toolbar
2013-12-18 17:19 - 2013-12-18 17:19 - 00000000 ____D C:\Program Files (x86)\Application Updater
2013-12-18 17:18 - 2013-12-11 16:45 - 00000504 _____ C:\Windows\setupact.log
2013-12-18 17:18 - 2013-01-22 15:48 - 00000354 _____ C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job
2013-12-18 17:18 - 2013-01-08 15:13 - 00000000 ____D C:\Users\Krystian\.rainlendar2
2013-12-18 17:18 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-18 15:36 - 2013-03-15 15:42 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\.minecraft
2013-12-18 11:39 - 2013-11-08 13:41 - 00000000 ____D C:\ProgramData\MFAData
2013-12-18 11:33 - 2013-12-15 07:13 - 00002240 _____ C:\Windows\PFRO.log
2013-12-17 22:29 - 2013-02-20 11:48 - 00291128 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-16 22:48 - 2013-11-16 18:18 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-15 23:18 - 2013-12-15 23:18 - 00000000 ____D C:\Users\Krystian\Desktop\My Game
2013-12-15 13:22 - 2013-12-15 13:22 - 00001016 _____ C:\Users\Krystian\Desktop\5.lnk
2013-12-14 02:01 - 2013-11-08 17:19 - 00000000 ____D C:\ProgramData\Tunngle
2013-12-14 02:01 - 2013-06-07 14:17 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Tunngle
2013-12-13 15:34 - 2013-12-13 15:34 - 00160689 _____ C:\wubildr
2013-12-13 15:34 - 2013-12-13 15:34 - 00008192 _____ C:\wubildr.mbr
2013-12-13 15:33 - 2013-12-13 15:33 - 00000000 ____D C:\ubuntu
2013-12-13 02:22 - 2013-02-11 22:09 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-13 00:52 - 2012-11-03 20:06 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\DAEMON Tools Lite
2013-12-11 18:14 - 2012-11-01 18:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 18:14 - 2012-11-01 18:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 18:14 - 2012-11-01 18:57 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 16:45 - 2013-12-11 16:45 - 00000000 _____ C:\Windows\setuperr.log
2013-12-11 12:44 - 2012-11-06 15:19 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Media Player Classic
2013-12-10 23:39 - 2013-12-10 23:39 - 00000872 _____ C:\Users\Public\Desktop\Grand Theft Auto IV.lnk
2013-12-10 23:32 - 2012-11-01 15:29 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-08 01:35 - 2012-11-02 21:30 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\foobar2000
2013-12-06 16:41 - 2013-12-06 16:41 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\Fatshark
2013-12-06 15:45 - 2013-12-06 15:45 - 00000672 _____ C:\Users\Public\Desktop\7 Days to Die - Alpha.lnk
2013-12-06 01:24 - 2013-12-06 01:24 - 00000000 ____D C:\Users\Krystian\AppData\Local\Arktos Entertainment
2013-12-05 18:47 - 2013-12-05 18:47 - 00000000 ____D C:\Users\Krystian\AppData\Roaming\StunlockStudios
2013-12-05 03:42 - 2009-07-14 05:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-05 03:42 - 2009-07-14 05:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-03 11:52 - 2013-02-19 12:41 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-03 11:52 - 2013-02-19 12:41 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-02 12:26 - 2013-02-19 12:41 - 00004050 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-02 12:26 - 2013-02-19 12:41 - 00003798 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-26 19:38 - 2013-10-13 00:51 - 00002026 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-11-26 12:42 - 2013-11-14 21:04 - 00000000 ____D C:\Users\Krystian\Desktop\oposland
2013-11-26 11:54 - 2013-11-26 11:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-11-26 11:54 - 2013-11-26 11:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2013-11-22 20:30 - 2013-11-22 20:30 - 00012342 _____ C:\Users\Krystian\Desktop\lost.bmp
2013-11-20 15:04 - 2013-11-20 15:04 - 00000000 ____D C:\Users\Krystian\AppData\Local\{51F48D98-B482-4289-9535-7298D665B43C}

Some content of TEMP:
====================
C:\Users\Krystian\AppData\Local\Temp\i4jdel0.exe
C:\Users\Krystian\AppData\Local\Temp\i4jdel1.exe
C:\Users\Krystian\AppData\Local\Temp\pyl367C.tmp.exe
C:\Users\Krystian\AppData\Local\Temp\pyl3889.tmp.exe
C:\Users\Krystian\AppData\Local\Temp\pylD07A.tmp.exe
C:\Users\Krystian\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Krystian\AppData\Local\Temp\SRLDetectionLibrary3680215110142458106.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 12:56

==================== End Of Log ============================