Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2014 01 Ran by Anna (administrator) on ANEKS-KOMP on 12-02-2014 23:37:02 Running from C:\Users\Anna\Downloads Microsoft Windows 8.1 Pro N (X86) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Atheros Commnucations) C:\Windows\system32\AdminService.exe (Microsoft Corporation) C:\Windows\system32\dashost.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe () C:\Program Files\BuzzSearch\updateBuzzSearch.exe () C:\Program Files\BuzzSearch\bin\utilBuzzSearch.exe (AMD) C:\Windows\system32\atieclxx.exe (ASUS) C:\Program Files\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\WDC.exe (Microsoft Corporation) C:\Windows\System32\skydrive.exe (ASUSTeK) C:\Windows\System32\ACEngSvr.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe () C:\Program Files\RocketDock\RocketDock.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe (TeamViewer GmbH) c:\program files\teamviewer\version8\TeamViewer_Desktop.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-04-19] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS) HKLM\...\Run: [ATKMEDIA] - C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS) HKLM\...\Run: [HControlUser] - C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [1812264 2010-12-31] (ELAN Microelectronics Corp.) HKU\S-1-5-21-3859302846-4071715073-4289997142-1001\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20586656 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-3859302846-4071715073-4289997142-1001\...\Run: [AQQ] - C:\Program Files\WapSter\WapSter AQQ\AQQ.exe [8174592 2013-10-16] (AQQ Sp. z o.o.) HKU\S-1-5-21-3859302846-4071715073-4289997142-1001\...\Run: [RocketDock] - C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-3859302846-4071715073-4289997142-1001\...\Run: [Facebook Update] - C:\Users\Anna\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-12-03] (Facebook Inc.) AppInit_DLLs: C:\PROGRA~2\Wincert\WIN32C~1.DLL => C:\ProgramData\Wincert\win32cert.dll [7168 2013-11-04] () AppInit_DLLs: C:\PROGRA~1\MOVIES~1\Datamngr\mgrldr.dll => File Not Found IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browsemngr.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browsermngr.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe IFEO\cltmngsvc.exe: [Debugger] tasklist.exe IFEO\delta babylon.exe: [Debugger] tasklist.exe IFEO\delta tb.exe: [Debugger] tasklist.exe IFEO\delta2.exe: [Debugger] tasklist.exe IFEO\deltainstaller.exe: [Debugger] tasklist.exe IFEO\deltasetup.exe: [Debugger] tasklist.exe IFEO\deltatb.exe: [Debugger] tasklist.exe IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe IFEO\iminentsetup.exe: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\rjatydimofu.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\sweetimsetup.exe: [Debugger] tasklist.exe IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Anna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) HKLM\...\AppCertDlls: [x86] -> C:\Program Files\Movies Toolbar\Datamngr\apcrtldr.dll <===== ATTENTION HKLM\...\AppCertDlls: [x64] -> c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll <===== ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-429&v=n10781-213&t=4 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5BE1731F8BF9CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-PL SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=429&systemid=406&v=n10781-213&apn_uid=4516562624904700&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms} SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=429&systemid=406&v=n10781-213&apn_uid=4516562624904700&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms} BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Movies Toolbar (Dist. by Bandoo Media, Inc.) - {3d86a75b-cb6b-4764-885d-ca6336f04ba2} - C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll () BHO: BuzzSearch - {5cf5a690-c8f4-488e-9d20-f21aef602d41} - C:\Program Files\BuzzSearch\BuzzSearchBHO.dll (BuzzSearch) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: BonanzaDeals - {fe063412-bea4-4d76-8ed3-183be6220d17} - C:\Program Files\BonanzaDeals\BonanzaDealsIE.dll (BonanzaDeals) Toolbar: HKLM - Movies Toolbar (Dist. by Bandoo Media, Inc.) - {3d86a75b-cb6b-4764-885d-ca6336f04ba2} - C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll () Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 FireFox: ======== FF ProfilePath: C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\85gt4se2.default FF DefaultSearchEngine: Allegro FF SearchEngineOrder.1: Search the web (Babylon) FF SelectedSearchEngine: Allegro FF Homepage: hxxp://www.google.pl/ FF Keyword.URL: hxxp://search.babylon.com/?AF=108921&babsrc=adbartrp&mntrId=f09cdd600000000000009439e5104a07&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.) FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals) FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Anna\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Extension: BuzzSearch - C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\85gt4se2.default\Extensions\{ba099a85-e825-4802-83e7-d386a5b4a734}.xpi [2014-02-04] FF Extension: Adblock Plus - C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\85gt4se2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-26] FF Extension: BonanzaDeals - C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\85gt4se2.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}.xpi [2013-12-18] Chrome: ======= CHR Extension: (Dokumenty Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-27] CHR Extension: (Dysk Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-27] CHR Extension: (YouTube) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-27] CHR Extension: (Szukaj w Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-27] CHR Extension: (Google Wallet) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-27] CHR Extension: (Gmail) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-27] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-17] (Avira Operations GmbH & Co. KG) R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536 2009-06-15] (ASUS) R2 AtherosSvc; C:\Windows\system32\AdminService.exe [174080 2012-08-29] (Atheros Commnucations) R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2009-12-15] (ASUS) S2 bonanzadealslive; C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-11-27] (BonanzaDeals) S3 bonanzadealslivem; C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-11-27] (BonanzaDeals) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.) S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation) R2 Update BuzzSearch; C:\Program Files\BuzzSearch\updateBuzzSearch.exe [80160 2014-02-11] () R2 Util BuzzSearch; C:\Program Files\BuzzSearch\bin\utilBuzzSearch.exe [80160 2014-02-11] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [278264 2013-08-22] (Microsoft Corporation) S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22240 2013-08-22] (Microsoft Corporation) S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1210368 2013-10-22] (Microsoft Corporation) S2 DatamngrCoordinator; C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe [X] ==================== Drivers (Whitelisted) ==================== R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-02] (ASUS) R3 asmthub3; C:\Windows\System32\drivers\asmthub3.sys [101352 2011-06-02] (ASMedia Technology Inc) R3 asmtxhci; C:\Windows\System32\drivers\asmtxhci.sys [317416 2011-06-02] (ASMedia Technology Inc) R3 athr; C:\Windows\system32\DRIVERS\athwn.sys [2795520 2013-06-18] (Qualcomm Atheros Communications, Inc.) R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [14080 2010-07-26] (ASUS) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [135648 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [37352 2013-10-31] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [68728 2013-12-17] (Avira Operations GmbH & Co. KG) R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [25600 2013-08-22] (Microsoft Corporation) R3 BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [480256 2012-08-29] (Qualcomm Atheros) R3 ETD; C:\Windows\system32\DRIVERS\ETD.sys [116008 2010-12-31] (ELAN Microelectronics Corp.) S3 GPIO; C:\Windows\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation) R1 ISODrive; C:\Program Files\UltraISO\drivers\ISODrive.sys [73728 2008-05-24] (EZB Systems, Inc.) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [13880 2009-07-20] ( ) R3 L1C; C:\Windows\system32\DRIVERS\L1C63x86.sys [110792 2013-06-18] (Qualcomm Atheros Co., Ltd.) R3 MEI; C:\Windows\System32\drivers\HECI.sys [41088 2010-10-19] (Intel Corporation) R1 ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [28520 2013-10-31] (Avira GmbH) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [93024 2013-08-22] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-12 23:37 - 2014-02-12 23:37 - 00017382 _____ () C:\Users\Anna\Downloads\FRST.txt 2014-02-12 23:31 - 2014-02-12 23:31 - 00000000 ____D () C:\Users\Anna\Downloads\FRST-OlderVersion 2014-02-08 15:27 - 2014-02-12 23:27 - 00000310 _____ () C:\Windows\Tasks\Update Bonanza.job 2014-02-08 15:27 - 2014-02-08 15:27 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\UpdateBonanza 2014-02-07 14:10 - 2014-02-12 23:28 - 00623599 _____ () C:\Windows\WindowsUpdate.log 2014-02-05 15:58 - 2014-02-05 15:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-03 15:46 - 2014-02-03 15:46 - 00278294 _____ () C:\Users\Anna\Downloads\serduszka.bmp 2014-02-01 23:49 - 2014-02-12 23:37 - 00000000 ____D () C:\FRST 2014-02-01 23:41 - 2014-02-12 23:31 - 01141248 _____ (Farbar) C:\Users\Anna\Downloads\FRST.exe 2014-02-01 23:36 - 2014-02-01 23:36 - 00602112 _____ (OldTimer Tools) C:\Users\Anna\Downloads\OTL.exe 2014-02-01 23:18 - 2014-02-01 23:21 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Audacity 2014-02-01 23:13 - 2014-02-01 23:13 - 00000981 _____ () C:\Users\Public\Desktop\Audacity.lnk 2014-02-01 23:13 - 2014-02-01 23:13 - 00000000 ____D () C:\Program Files\Audacity 2014-02-01 23:08 - 2014-02-01 23:11 - 22180353 _____ (Audacity Team ) C:\Users\Anna\Downloads\audacity-win-2.0.5.exe 2014-01-27 16:01 - 2014-02-12 11:21 - 00000000 ___RD () C:\Users\Anna\SkyDrive 2014-01-21 15:58 - 2014-01-21 15:59 - 08040309 _____ () C:\Users\Anna\Downloads\Jan Pawe é II. (1).pptx 2014-01-20 17:48 - 2014-01-20 17:48 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-20 17:41 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-01-20 17:41 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-20 17:41 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-20 17:41 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-20 17:40 - 2014-01-20 17:41 - 00005134 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log 2014-01-17 19:03 - 2014-01-17 19:03 - 07627740 _____ () C:\Users\Anna\Downloads\Jan PaweĹ‚ II.pptx 2014-01-17 17:46 - 2014-01-18 23:02 - 00002028 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-01-17 17:46 - 2014-01-18 23:02 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-01-17 17:46 - 2014-01-17 17:46 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-01-16 19:41 - 2014-01-16 19:41 - 00001137 _____ () C:\Users\Anna\Desktop\Moo0 YouTube Downloader 1.07.lnk 2014-01-16 19:40 - 2014-01-16 19:41 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moo0 2014-01-16 19:40 - 2014-01-16 19:41 - 00000000 ____D () C:\Program Files\Moo0 2014-01-16 19:40 - 2014-01-16 19:40 - 00001195 _____ () C:\Users\Anna\Desktop\Moo0 Audio Converter 1.32.lnk 2014-01-15 12:26 - 2013-12-09 00:43 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2014-01-15 12:26 - 2013-11-27 15:09 - 02872688 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll 2014-01-15 12:26 - 2013-11-27 11:46 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe 2014-01-15 12:26 - 2013-11-27 10:54 - 00103936 _____ () C:\Windows\system32\OEMLicense.dll 2014-01-15 12:26 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-01-15 12:26 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll 2014-01-15 12:26 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll ==================== One Month Modified Files and Folders ======= 2014-02-12 23:37 - 2014-02-12 23:37 - 00017382 _____ () C:\Users\Anna\Downloads\FRST.txt 2014-02-12 23:37 - 2014-02-01 23:49 - 00000000 ____D () C:\FRST 2014-02-12 23:33 - 2013-11-26 23:31 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Skype 2014-02-12 23:31 - 2014-02-12 23:31 - 00000000 ____D () C:\Users\Anna\Downloads\FRST-OlderVersion 2014-02-12 23:31 - 2014-02-01 23:41 - 01141248 _____ (Farbar) C:\Users\Anna\Downloads\FRST.exe 2014-02-12 23:30 - 2013-11-27 19:06 - 00466432 ___SH () C:\Users\Anna\Downloads\Thumbs.db 2014-02-12 23:28 - 2014-02-07 14:10 - 00623599 _____ () C:\Windows\WindowsUpdate.log 2014-02-12 23:27 - 2014-02-08 15:27 - 00000310 _____ () C:\Windows\Tasks\Update Bonanza.job 2014-02-12 23:27 - 2013-12-29 12:27 - 00000308 _____ () C:\Windows\Tasks\Bonanza.job 2014-02-12 23:26 - 2013-11-27 20:21 - 00000932 _____ () C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job 2014-02-12 23:18 - 2013-11-26 21:03 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-12 23:10 - 2013-12-03 19:56 - 00000946 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3859302846-4071715073-4289997142-1001UA.job 2014-02-12 23:02 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\system32\sru 2014-02-12 22:47 - 2013-12-01 12:37 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-12 22:18 - 2013-11-26 21:03 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-12 20:26 - 2013-11-27 20:21 - 00000928 _____ () C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job 2014-02-12 20:21 - 2013-11-27 20:21 - 00000000 ____D () C:\Program Files\BonanzaDeals 2014-02-12 20:10 - 2013-12-03 19:56 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3859302846-4071715073-4289997142-1001Core.job 2014-02-12 14:11 - 2013-11-28 18:16 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\vlc 2014-02-12 13:47 - 2013-11-26 21:02 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-12 13:47 - 2013-08-22 15:35 - 00807160 _____ () C:\Windows\system32\perfh015.dat 2014-02-12 13:47 - 2013-08-22 15:35 - 00163478 _____ () C:\Windows\system32\perfc015.dat 2014-02-12 12:31 - 2013-12-04 14:09 - 00114296 _____ () C:\Users\Anna\keylog.log 2014-02-12 11:27 - 2014-01-08 19:27 - 00000142 _____ () C:\Users\Anna\AppData\Roaming\WB.CFG 2014-02-12 11:21 - 2014-01-27 16:01 - 00000000 ___RD () C:\Users\Anna\SkyDrive 2014-02-11 16:01 - 2013-08-22 09:16 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-02-11 14:23 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\rescache 2014-02-11 13:28 - 2013-12-05 22:43 - 00218112 ___SH () C:\Users\Anna\Desktop\Thumbs.db 2014-02-11 00:02 - 2013-11-26 21:10 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Dropbox 2014-02-10 11:21 - 2013-11-29 18:40 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-02-10 11:15 - 2013-08-22 08:23 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-10 11:14 - 2013-11-26 21:03 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-02-10 11:14 - 2013-08-22 07:13 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-02-10 11:13 - 2013-08-22 09:17 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-02-10 11:13 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-02-10 11:13 - 2013-08-22 09:17 - 00000000 ____D () C:\Program Files\Windows Defender 2014-02-08 15:27 - 2014-02-08 15:27 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\UpdateBonanza 2014-02-05 15:58 - 2014-02-05 15:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-04 15:14 - 2013-11-27 20:21 - 00000000 ____D () C:\Program Files\BuzzSearch 2014-02-04 13:43 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\AppReadiness 2014-02-03 15:46 - 2014-02-03 15:46 - 00278294 _____ () C:\Users\Anna\Downloads\serduszka.bmp 2014-02-01 23:36 - 2014-02-01 23:36 - 00602112 _____ (OldTimer Tools) C:\Users\Anna\Downloads\OTL.exe 2014-02-01 23:21 - 2014-02-01 23:18 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Audacity 2014-02-01 23:13 - 2014-02-01 23:13 - 00000981 _____ () C:\Users\Public\Desktop\Audacity.lnk 2014-02-01 23:13 - 2014-02-01 23:13 - 00000000 ____D () C:\Program Files\Audacity 2014-02-01 23:11 - 2014-02-01 23:08 - 22180353 _____ (Audacity Team ) C:\Users\Anna\Downloads\audacity-win-2.0.5.exe 2014-01-30 21:47 - 2013-08-22 09:18 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-01-30 21:47 - 2013-08-22 09:18 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-01-27 16:01 - 2013-11-26 20:57 - 00000000 __RDO () C:\Users\Anna\SkyDrive.old 2014-01-27 16:01 - 2013-11-26 20:54 - 00000000 ____D () C:\Users\Anna 2014-01-22 21:02 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\WinStore 2014-01-21 15:59 - 2014-01-21 15:58 - 08040309 _____ () C:\Users\Anna\Downloads\Jan Pawe é II. (1).pptx 2014-01-20 17:48 - 2014-01-20 17:48 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-20 17:41 - 2014-01-20 17:40 - 00005134 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log 2014-01-20 17:41 - 2013-11-26 22:46 - 00000000 ____D () C:\Program Files\Java 2014-01-18 23:02 - 2014-01-17 17:46 - 00002028 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-01-18 23:02 - 2014-01-17 17:46 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-01-18 20:14 - 2013-11-28 22:05 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-18 20:12 - 2013-11-28 22:05 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-17 19:03 - 2014-01-17 19:03 - 07627740 _____ () C:\Users\Anna\Downloads\Jan PaweĹ‚ II.pptx 2014-01-17 17:59 - 2013-11-26 21:04 - 00000000 ____D () C:\Users\Anna\AppData\Local\Adobe 2014-01-17 17:46 - 2014-01-17 17:46 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-01-16 20:08 - 2013-11-26 21:09 - 00001044 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-01-16 19:41 - 2014-01-16 19:41 - 00001137 _____ () C:\Users\Anna\Desktop\Moo0 YouTube Downloader 1.07.lnk 2014-01-16 19:41 - 2014-01-16 19:40 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moo0 2014-01-16 19:41 - 2014-01-16 19:40 - 00000000 ____D () C:\Program Files\Moo0 2014-01-16 19:40 - 2014-01-16 19:40 - 00001195 _____ () C:\Users\Anna\Desktop\Moo0 Audio Converter 1.32.lnk 2014-01-15 21:03 - 2013-11-26 22:52 - 00000000 ____D () C:\ProgramData\Microsoft Help Some content of TEMP: ==================== C:\Users\Anna\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 16:31 ==================== End Of Log ============================