Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 26-08-2013 Ran by Soesje at 2013-08-26 21:36:30 Run:1 Running from C:\Users\Soesje\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** CMD: attrib /d /s -s -h F:\* CMD: rd /s /q F:\$RECYCLE.BIN CMD: sc delete "WebCake Desktop Updater" Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d about:blank /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{94657570-2012-4164-B9BA-9FB0BABDEFB1}" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\MenuExt\ÅšciÄ…gaj z Mipony" /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\MenuExt\ÅšciÄ…gaj z Mipony" /f C:\Users\Soesje\AppData\Local\funmoods-speeddial_sf.crx C:\Users\Soesje\AppData\Local\funmoods.crx C:\Users\Soesje\AppData\Roaming\Funmoods C:\Users\Soesje\AppData\Roaming\Mipony C:\Users\Soesje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk ***************** ========= attrib /d /s -s -h F:\* ========= Odmowa dost©pu - F:\System Volume Information ========= End of CMD: ========= ========= rd /s /q F:\$RECYCLE.BIN ========= ========= End of CMD: ========= ========= sc delete "WebCake Desktop Updater" ========= [SC] DeleteService SUKCES ========= End of CMD: ========= ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d about:blank /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{94657570-2012-4164-B9BA-9FB0BABDEFB1}" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\MenuExt\ÅšciÄ…gaj z Mipony" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\MenuExt\ÅšciÄ…gaj z Mipony" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= C:\Users\Soesje\AppData\Local\funmoods-speeddial_sf.crx => Moved successfully. C:\Users\Soesje\AppData\Local\funmoods.crx => Moved successfully. C:\Users\Soesje\AppData\Roaming\Funmoods => Moved successfully. C:\Users\Soesje\AppData\Roaming\Mipony => Moved successfully. C:\Users\Soesje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk => Moved successfully. ==== End of Fixlog ====