Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01 ([color=red]ATTENTION: ====> FRST version is 26 days old and could be outdated[/color])
Ran by Domunuta (administrator) on COMPUTER on 08-04-2014 17:21:02
Running from C:\Users\Domunuta\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(TODO: <Company name>) C:\Users\Domunuta\AppData\Local\ConvertAd\ConvertAd.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Users\Domunuta\AppData\Roaming\defaulttab\defaulttab\dtupdate.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(http://www.tinydm.com/) C:\Users\Domunuta\AppData\Local\DM\TinyDM.exe
(Overwolf LTD) C:\Program Files\Overwolf\Overwolf.exe
() C:\Program Files\LinkSwift\bin\utilLinkSwift.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(www.BitComet.com) C:\Program Files\BitComet\BitComet.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Overwolf LTD) C:\Program Files\Common Files\Overwolf\OverwolfHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files\LinkSwift\updateLinkSwift.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(GG Network S.A.) C:\Users\Domunuta\AppData\Local\GG\Application\gghub.exe
(GG Network S.A.) C:\Users\Domunuta\AppData\Local\GG\Application\ggapp.exe
(GG Network S.A.) C:\Users\Domunuta\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(GG Network S.A.) C:\Users\Domunuta\AppData\Local\GG\Application\xulrunner\gghub.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)
HKLM\...\Run: [ConvertAd] - C:\Users\Domunuta\AppData\Local\ConvertAd\ConvertAd.exe [1776640 2013-09-30] (TODO: <Company name>)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [161064 2007-07-04] (Nero AG)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3774312 2014-04-01] (AVAST Software)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-08-26] (Microsoft Corporation)
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\Run: [Tiny download manager] - C:\Users\Domunuta\AppData\Local\DM\TinyDM.exe [288728 2013-09-04] (http://www.tinydm.com/)
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\Run: [Overwolf] - C:\Program Files\Overwolf\Overwolf.exe [37664 2014-03-05] (Overwolf LTD)
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [148776 2007-07-04] (Nero AG)
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\Run: [EA Core] - "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\Run: [Softonic for Windows] - C:\Users\Domunuta\AppData\Local\Softonic\Softonic.exe [4144112 2014-02-11] (Softonic)
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\Run: [BitComet] - C:\Program Files\BitComet\BitComet.exe [12805888 2013-05-02] (www.BitComet.com)
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\Run: [Facebook Update] - C:\Users\Domunuta\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-03-31] (Facebook Inc.)
HKU\S-1-5-21-3867551667-1530956314-2525137787-1001\...\MountPoints2: {d1e428f1-0db4-11e3-aaff-806e6f6e6963} - E:\autorun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mysearchresults.com/?c=3524&t=01
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/?type=hp&ts=1382507543&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXA1A10F9699F9699
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/?type=hp&ts=1382507543&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXA1A10F9699F9699
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.qone8.com/?type=hp&ts=1382507543&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXA1A10F9699F9699
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://start.qone8.com/?type=sc&ts=1382507543&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXA1A10F9699F9699
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382507543&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXA1A10F9699F9699&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382507543&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXA1A10F9699F9699&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=22760C6076C5A678&affID=120695&tsp=4995
SearchScopes: HKCU - {69AACB7B-1D29-44CD-B7A1-ADCCFFFBDF23} URL = http://www.mysearchresults.com/search?c=3524&t=01&q={searchTerms}
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: LinkSwift - {323420b6-65e5-4657-8106-a27392d4d4aa} - C:\Program Files\LinkSwift\LinkSwiftBHO.dll (LinkSwift)
BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: DefaultTab Browser Helper - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Domunuta\AppData\Roaming\defaulttab\defaulttab\DefaultTabBHO.dll (Search Results LLC.)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: BonanzaDeals - {fe063412-bea4-4d76-8ed3-183be6220d17} - C:\Program Files\BonanzaDeals\BonanzaDealsIE.dll (BonanzaDeals)
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Domunuta\AppData\Roaming\Mozilla\Firefox\Profiles\e1bds0zl.default
FF user.js: detected! => C:\Users\Domunuta\AppData\Roaming\Mozilla\Firefox\Profiles\e1bds0zl.default\user.js
FF NewTab: hxxp://start.qone8.com/newtab/?type=nt&ts=1382507543&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXA1A10F9699F9699
FF DefaultSearchEngine: qone8
FF SelectedSearchEngine: qone8
FF Homepage: hxxp://start.qone8.com/?type=hp&ts=1382507543&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXA1A10F9699F9699
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Domunuta\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Domunuta\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\qone8.xml
FF Extension: BitComet Video Downloader - C:\Users\Domunuta\AppData\Roaming\Mozilla\Firefox\Profiles\e1bds0zl.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2013-12-29]
FF Extension: LinkSwift - C:\Users\Domunuta\AppData\Roaming\Mozilla\Firefox\Profiles\e1bds0zl.default\Extensions\{25d71abf-7776-46f5-a269-9951331f9030}.xpi [2014-02-04]
FF Extension: Adblock Plus - C:\Users\Domunuta\AppData\Roaming\Mozilla\Firefox\Profiles\e1bds0zl.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-10]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-12-09]

Chrome: 
=======
CHR Extension: (Dokumenty Google) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-27]
CHR Extension: (Dysk Google) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-17]
CHR Extension: (YouTube) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-17]
CHR Extension: (Szukaj w Google) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-17]
CHR Extension: (Video Downloader professional) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-03-16]
CHR Extension: (Delta Toolbar) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde [2013-09-04]
CHR Extension: (avast! Online Security) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-11-07]
CHR Extension: (RealDownloader) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-08-27]
CHR Extension: (DefaultTab) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc [2013-11-12]
CHR Extension: (Google Wallet) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-27]
CHR Extension: (LinkSwift) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\odpccdgkmiicgocepijnaeihjnjnomca [2013-09-04]
CHR Extension: (Gmail) - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-17]
CHR HKLM\...\Chrome\Extension: [cekcjpgehmohobmdiikfnopibipmgnml] - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ [2014-01-17]
CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Domunuta\AppData\Roaming\BabSolution\CR\Delta.crx [2013-09-04]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-09]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Domunuta\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [kdidombaedgpfiiedeimiebkmbilgmlc] - C:\Program Files\DefaultTab\DefaultTab.crx [2013-10-07]
CHR HKLM\...\Chrome\Extension: [odpccdgkmiicgocepijnaeihjnjnomca] - C:\Program Files\LinkSwift\odpccdgkmiicgocepijnaeihjnjnomca.crx [2014-02-01]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-16] (AVAST Software)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
S2 bonanzadealslive; C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-09-16] (BonanzaDeals)
S3 bonanzadealslivem; C:\Program Files\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-09-16] (BonanzaDeals)
R2 DefaultTabUpdate; C:\Users\Domunuta\AppData\Roaming\defaulttab\defaulttab\dtupdate.exe [107520 2013-11-12] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [235696 2014-01-16] (McAfee, Inc.)
S3 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 Update LinkSwift; C:\Program Files\LinkSwift\updateLinkSwift.exe [350496 2014-04-08] ()
R2 Util LinkSwift; C:\Program Files\LinkSwift\bin\utilLinkSwift.exe [350496 2014-04-08] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-02-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2013-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2013-12-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-02-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410784 2014-02-16] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [64168 2014-02-16] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180248 2014-02-16] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-08 17:21 - 2014-04-08 17:21 - 00019408 _____ () C:\Users\Domunuta\Downloads\FRST.txt
2014-04-08 17:20 - 2014-04-08 17:21 - 00000000 ____D () C:\FRST
2014-04-08 17:18 - 2014-04-08 17:18 - 01145856 _____ (Farbar) C:\Users\Domunuta\Downloads\FRST.exe
2014-04-08 17:17 - 2014-04-08 17:17 - 02157056 _____ (Farbar) C:\Users\Domunuta\Downloads\FRST64.exe
2014-04-08 07:03 - 2014-04-08 07:03 - 00143680 _____ () C:\Windows\Minidump\040814-15537-01.dmp
2014-04-07 12:56 - 2014-04-07 12:56 - 00000000 ____D () C:\Users\Domunuta\Downloads\Gameforge Live
2014-04-03 17:10 - 2014-04-08 07:08 - 00000000 ____D () C:\Users\Domunuta\Desktop\Originals
2014-04-03 16:30 - 2014-04-03 16:30 - 00000000 ____D () C:\Windows\system32\LinkSwift
2014-03-31 20:52 - 2014-04-08 15:36 - 00000940 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3867551667-1530956314-2525137787-1001UA.job
2014-03-31 20:52 - 2014-04-07 20:57 - 00000918 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3867551667-1530956314-2525137787-1001Core.job
2014-03-31 20:52 - 2014-03-31 20:53 - 00000000 ____D () C:\Users\Domunuta\AppData\Local\Facebook
2014-03-31 20:52 - 2014-03-31 20:52 - 00501248 _____ (Facebook Inc.) C:\Users\Domunuta\Downloads\FacebookVideoCallSetup_v1.2.205.0.exe
2014-03-23 18:51 - 2014-03-23 18:51 - 00004912 _____ () C:\Users\Domunuta\AppData\Local\recently-used.xbel
2014-03-23 18:21 - 2014-03-23 18:21 - 00000000 ____D () C:\output
2014-03-23 14:49 - 2014-03-23 15:30 - 314834106 _____ () C:\Users\Domunuta\Downloads\Pod Mocnym Anioem (2014) - Zalukajtv.flv
2014-03-19 17:44 - 2014-03-19 17:44 - 00902264 _____ () C:\Users\Domunuta\Downloads\yet_another_cleaner_mar.exe
2014-03-16 11:54 - 2014-03-16 12:03 - 880576339 _____ () C:\Users\Domunuta\Downloads\Mj Biegun 2013 FilmPL - video w cdapl.flv
2014-03-13 07:34 - 2014-03-13 07:34 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-03-12 18:12 - 2014-04-03 17:16 - 00000000 ____D () C:\Users\Domunuta\Desktop\muzyja
2014-03-12 08:33 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 08:33 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 08:33 - 2014-03-01 06:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 08:33 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 08:33 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 08:33 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 08:33 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 08:33 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 08:33 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 08:33 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 08:33 - 2014-03-01 05:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 08:33 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 08:33 - 2014-03-01 05:31 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 08:33 - 2014-03-01 05:25 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 08:33 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 08:33 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 08:33 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 08:33 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 08:33 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 08:33 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 08:33 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 08:33 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 08:33 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 08:32 - 2014-02-07 03:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 08:32 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 08:32 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 08:32 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-09 13:07 - 2014-03-09 13:08 - 00149904 _____ () C:\Windows\Minidump\030914-26317-01.dmp

==================== One Month Modified Files and Folders =======

2014-04-08 17:21 - 2014-04-08 17:21 - 00019408 _____ () C:\Users\Domunuta\Downloads\FRST.txt
2014-04-08 17:21 - 2014-04-08 17:20 - 00000000 ____D () C:\FRST
2014-04-08 17:21 - 2013-12-29 17:00 - 00000000 ____D () C:\Users\Domunuta\AppData\Roaming\BitComet
2014-04-08 17:18 - 2014-04-08 17:18 - 01145856 _____ (Farbar) C:\Users\Domunuta\Downloads\FRST.exe
2014-04-08 17:17 - 2014-04-08 17:17 - 02157056 _____ (Farbar) C:\Users\Domunuta\Downloads\FRST64.exe
2014-04-08 17:12 - 2013-08-26 11:53 - 00000000 ____D () C:\Users\Domunuta\AppData\Roaming\GG
2014-04-08 17:08 - 2013-08-25 20:36 - 01599652 _____ () C:\Windows\WindowsUpdate.log
2014-04-08 16:58 - 2013-09-16 23:53 - 00000918 _____ () C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2014-04-08 16:52 - 2013-08-26 14:54 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-08 16:33 - 2013-08-27 00:43 - 00001040 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-08 15:56 - 2013-11-12 18:25 - 00000266 __RSH () C:\Users\Domunuta\ntuser.pol
2014-04-08 15:56 - 2013-08-25 20:44 - 00000000 ____D () C:\Users\Domunuta
2014-04-08 15:47 - 2013-08-27 00:43 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-08 15:36 - 2014-03-31 20:52 - 00000940 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3867551667-1530956314-2525137787-1001UA.job
2014-04-08 08:15 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-08 08:15 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-08 08:10 - 2013-09-16 23:53 - 00000000 ____D () C:\Users\Domunuta\AppData\Roaming\Skype
2014-04-08 08:08 - 2013-11-10 18:48 - 00000000 ____D () C:\Users\Domunuta\AppData\Local\Overwolf
2014-04-08 08:07 - 2013-09-16 23:53 - 00000914 _____ () C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2014-04-08 08:07 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-08 08:07 - 2009-07-14 06:39 - 00078453 _____ () C:\Windows\setupact.log
2014-04-08 07:08 - 2014-04-03 17:10 - 00000000 ____D () C:\Users\Domunuta\Desktop\Originals
2014-04-08 07:07 - 2013-08-29 16:11 - 00023552 ____H () C:\Users\Domunuta\Desktop\photothumb.db
2014-04-08 07:03 - 2014-04-08 07:03 - 00143680 _____ () C:\Windows\Minidump\040814-15537-01.dmp
2014-04-08 07:03 - 2013-12-15 18:27 - 312237598 _____ () C:\Windows\MEMORY.DMP
2014-04-08 07:03 - 2013-12-15 18:27 - 00000000 ____D () C:\Windows\Minidump
2014-04-07 20:57 - 2014-03-31 20:52 - 00000918 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3867551667-1530956314-2525137787-1001Core.job
2014-04-07 16:59 - 2013-11-11 19:59 - 00000000 ____D () C:\Users\Domunuta\AppData\Roaming\TS3Client
2014-04-07 12:56 - 2014-04-07 12:56 - 00000000 ____D () C:\Users\Domunuta\Downloads\Gameforge Live
2014-04-07 12:56 - 2013-12-29 18:13 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-04-05 22:05 - 2013-08-25 20:46 - 01668226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-05 22:05 - 2009-09-30 05:25 - 00739932 _____ () C:\Windows\system32\perfh015.dat
2014-04-05 22:05 - 2009-09-30 05:25 - 00155474 _____ () C:\Windows\system32\perfc015.dat
2014-04-03 17:16 - 2014-03-12 18:12 - 00000000 ____D () C:\Users\Domunuta\Desktop\muzyja
2014-04-03 16:52 - 2009-07-14 06:53 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-03 16:47 - 2014-02-23 11:06 - 00000000 ____D () C:\Users\Domunuta\Desktop\foto-ślub
2014-04-03 16:30 - 2014-04-03 16:30 - 00000000 ____D () C:\Windows\system32\LinkSwift
2014-04-01 21:06 - 2014-02-24 08:47 - 00000000 ____D () C:\Users\Domunuta\Desktop\ŚLUB
2014-03-31 20:53 - 2014-03-31 20:52 - 00000000 ____D () C:\Users\Domunuta\AppData\Local\Facebook
2014-03-31 20:52 - 2014-03-31 20:52 - 00501248 _____ (Facebook Inc.) C:\Users\Domunuta\Downloads\FacebookVideoCallSetup_v1.2.205.0.exe
2014-03-29 21:59 - 2013-08-26 11:48 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-29 19:22 - 2014-02-15 14:09 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-28 21:05 - 2013-08-26 11:53 - 00000000 ____D () C:\Users\Domunuta\AppData\Local\GG
2014-03-26 01:27 - 2013-08-26 08:52 - 00002002 _____ () C:\Users\Domunuta\Desktop\Nowy dokument tekstowy.txt
2014-03-23 18:51 - 2014-03-23 18:51 - 00004912 _____ () C:\Users\Domunuta\AppData\Local\recently-used.xbel
2014-03-23 18:21 - 2014-03-23 18:21 - 00000000 ____D () C:\output
2014-03-23 15:30 - 2014-03-23 14:49 - 314834106 _____ () C:\Users\Domunuta\Downloads\Pod Mocnym Anioem (2014) - Zalukajtv.flv
2014-03-20 07:54 - 2013-08-25 21:12 - 00001130 _____ () C:\Users\Domunuta\Desktop\Internet Explorer.lnk
2014-03-20 07:54 - 2013-08-25 20:44 - 00001417 _____ () C:\Users\Domunuta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-19 17:44 - 2014-03-19 17:44 - 00902264 _____ () C:\Users\Domunuta\Downloads\yet_another_cleaner_mar.exe
2014-03-19 08:30 - 2013-09-23 16:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 00:12 - 2013-09-23 16:08 - 87350280 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-16 12:03 - 2014-03-16 11:54 - 880576339 _____ () C:\Users\Domunuta\Downloads\Mj Biegun 2013 FilmPL - video w cdapl.flv
2014-03-14 21:31 - 2014-02-23 11:35 - 00000000 ____D () C:\Users\Domunuta\Desktop\miuzik-weele
2014-03-13 07:34 - 2014-03-13 07:34 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-03-13 07:34 - 2013-12-30 21:03 - 00000000 ____D () C:\Program Files\Overwolf
2014-03-12 17:52 - 2013-08-25 20:50 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-12 17:52 - 2013-08-25 20:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 12:52 - 2009-07-14 06:33 - 00267880 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-11 17:53 - 2013-12-08 19:29 - 00000000 ____D () C:\Program Files\Mobogenie
2014-03-11 15:12 - 2013-12-08 19:30 - 00108387 _____ () C:\Users\Domunuta\daemonprocess.txt
2014-03-10 18:41 - 2014-02-24 19:58 - 00001177 _____ () C:\Users\Domunuta\Desktop\PIT pro 2013.lnk
2014-03-09 17:19 - 2013-10-30 16:06 - 00000000 ____D () C:\Users\Domunuta\Desktop\Nowy folder (2)
2014-03-09 13:08 - 2014-03-09 13:07 - 00149904 _____ () C:\Windows\Minidump\030914-26317-01.dmp

Some content of TEMP:
====================
C:\Users\Domunuta\AppData\Local\Temp\banner.exe
C:\Users\Domunuta\AppData\Local\Temp\DefaultTabSetup2.exe
C:\Users\Domunuta\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Domunuta\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\Domunuta\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\Domunuta\AppData\Local\Temp\GoogleSetup.exe
C:\Users\Domunuta\AppData\Local\Temp\ikonkasims3.exe
C:\Users\Domunuta\AppData\Local\Temp\installerdll6661133.dll
C:\Users\Domunuta\AppData\Local\Temp\installerdll6678964.dll
C:\Users\Domunuta\AppData\Local\Temp\installstats.exe
C:\Users\Domunuta\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Domunuta\AppData\Local\Temp\NeroSearchTrayHook_{9180754F-09A5-4EE2-887C-5AF4EA8BB4C2}.dll
C:\Users\Domunuta\AppData\Local\Temp\NeroSearchTrayHook_{CCFE2C3D-C5A9-45BB-BBC8-DC034B3E734D}.dll
C:\Users\Domunuta\AppData\Local\Temp\nsh145D.tmp.exe
C:\Users\Domunuta\AppData\Local\Temp\Quarantine.exe
C:\Users\Domunuta\AppData\Local\Temp\rootsupd.exe
C:\Users\Domunuta\AppData\Local\Temp\sciagnij-dodatki.exe
C:\Users\Domunuta\AppData\Local\Temp\Shockwave_Installer_FF.exe
C:\Users\Domunuta\AppData\Local\Temp\sims3-instalator.exe
C:\Users\Domunuta\AppData\Local\Temp\Softonic_PL_1-5-4_PL-Production_10_CleanRelease.exe
C:\Users\Domunuta\AppData\Local\Temp\Softonic_PL_1-5-4_PL-Production_10_CleanRelease[1].exe
C:\Users\Domunuta\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Domunuta\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Domunuta\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Domunuta\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-13 15:31

==================== End Of Log ============================