Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 28-08-2013 Ran by Administrator at 2013-08-29 23:56:58 Run:1 Running from C:\Documents and Settings\Administrator\Pulpit\Programy skan Boot Mode: Normal ============================================== Content of fixlist: ***************** Winsock: Catalog5 01 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll" Winsock: Catalog5 03 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll" HKLM\...\Run: [dideap] - C:\Documents and Settings\Administrator\Dane aplikacji\dideap.dll [155648 2013-07-05] (Broadcom Corporation) HKCU\...\Run: [MSConfig] - C:\Documents and Settings\Administrator\leajbjp.exe [49671168 2013-02-10] () HKCU\...\Run: [PC Performer43885.exe] - C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\1C0.tmp [6077 2013-07-08] () <===== ATTENTION HKCU\...\Run: [Overwolf] - C:\Program Files\Overwolf\Overwolf.exe -silent [x] HKCU\...\Run: [RGSC] - F:\gta\Rockstar Games Social Club\RGSCLauncher.exe /silent [x] URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://pl.v9.com/?utm_source=b&utm_medium=nps SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} URL = http://search.imesh.com/web?src=ieb&systemid=1&q={searchTerms} SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=119370&babsrc=SP_ss_gin2g&mntrId=843664700222AC86 SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=119370&babsrc=SP_ss_gin2g&mntrId=843664700222AC86 SearchScopes: HKCU - {1F096B29-E9DA-4D64-8D63-936BE7762CC5} URL = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=84369321000000000000001d7d96b835&tlver=1.4.19.19&affID=19949 SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} URL = http://search.imesh.com/web?src=ieb&systemid=1&q={searchTerms} SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9} URL = http://www.daemon-search.com/search/web?q={searchTerms} SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678 SearchScopes: HKCU - {B0913AE6-ECE6-49BA-B228-404620E2EE20} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=FC81F599-06B1-4456-9A4A-499B3E0CAB17&apn_sauid=C4C7E94C-10BD-4383-88E0-D366A6A99878 BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) BHO: Bcool Class - {8FC51463-2E71-7EC4-737B-DABC51BCF47E} - C:\Documents and Settings\All Users\Dane aplikacji\Bcool\bhoclass.dll () BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll No File Toolbar: HKLM - No Name - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - No File Toolbar: HKLM - No Name - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File Toolbar: HKLM - No Name - !{30F9B915-B755-4826-820B-08FBA6BD249D} - No File Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File Toolbar: HKLM - No Name - !{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No File Toolbar: HKCU -No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll No File FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\iMeshWebSearch.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\v9.xml CHR HKLM\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\crxBB.tmp CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx CHR HKLM\...\Chrome\Extension: [kblmphpogdfcdifooapmpfigpjdipnhd] - C:\Documents and Settings\All Users\Dane aplikacji\Bcool\kblmphpogdfcdifooapmpfigpjdipnhd.crx R2 IBUpdaterService; C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService\ibsvc.exe [622336 2013-07-08] () S3 EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [x] S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [x] S3 sony_ssm.sys; \??\C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\sony_ssm.sys [x] C:\Documents and Settings\Administrator\leajbjp.exe C:\Documents and Settings\Administrator\Dane aplikacji\dideap.dll C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\1C0.tmp C:\WINDOWS\$NtUninstallKB25440$ CMD: reg import C:\FIX.REG CMD: netsh winsock reset ***************** Winsock: Catalog5 entry 000000000001\\LibraryPath was set successfully to %SystemRoot%\System32\mswsock.dll Winsock: Catalog5 entry 000000000003\\LibraryPath was set successfully to %SystemRoot%\System32\mswsock.dll HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\dideap => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\MSConfig => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\PC Performer43885.exe => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Overwolf => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\RGSC => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => Value deleted successfully. HKCR\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => Key deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B0913AE6-ECE6-49BA-B228-404620E2EE20} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{B0913AE6-ECE6-49BA-B228-404620E2EE20} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key deleted successfully. HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8FC51463-2E71-7EC4-737B-DABC51BCF47E} => Key deleted successfully. HKCR\CLSID\{8FC51463-2E71-7EC4-737B-DABC51BCF47E} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => Key deleted successfully. HKCR\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{28387537-e3f9-4ed7-860c-11e69af4a8a0} => Value deleted successfully. HKCR\CLSID\{28387537-e3f9-4ed7-860c-11e69af4a8a0} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{2318C2B1-4965-11d4-9B18-009027A5CD4F} => Value deleted successfully. HKCR\CLSID\!{2318C2B1-4965-11d4-9B18-009027A5CD4F} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{30F9B915-B755-4826-820B-08FBA6BD249D} => Value deleted successfully. HKCR\CLSID\!{30F9B915-B755-4826-820B-08FBA6BD249D} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{98889811-442D-49dd-99D7-DC866BE87DBC} => Value deleted successfully. HKCR\CLSID\!{98889811-442D-49dd-99D7-DC866BE87DBC} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => Value deleted successfully. HKCR\CLSID\!{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Value deleted successfully. HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found. HKLM\Software\MozillaPlugins\@java.com/JavaPlugin => Key deleted successfully. C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll not found. C:\Program Files\mozilla firefox\searchplugins\babylon.xml => Moved successfully. C:\Program Files\mozilla firefox\searchplugins\iMeshWebSearch.xml => Moved successfully. C:\Program Files\mozilla firefox\searchplugins\v9.xml => Moved successfully. HKLM\SOFTWARE\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj => Key deleted successfully. "C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\crxBB.tmp" => File/Directory not found. HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb => Key deleted successfully. "C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx" => File/Directory not found. HKLM\SOFTWARE\Google\Chrome\Extensions\kblmphpogdfcdifooapmpfigpjdipnhd => Key deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\Bcool\kblmphpogdfcdifooapmpfigpjdipnhd.crx => Moved successfully. IBUpdaterService => Service deleted successfully. EagleNT => Service deleted successfully. EagleXNt => Service deleted successfully. sony_ssm.sys => Service deleted successfully. C:\Documents and Settings\Administrator\leajbjp.exe => Moved successfully. C:\Documents and Settings\Administrator\Dane aplikacji\dideap.dll => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService => Moved successfully. C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\1C0.tmp => Moved successfully. C:\WINDOWS\$NtUninstallKB25440$ => Moved successfully. ========= reg import C:\FIX.REG ========= Operacja ukoñczona pomyœlnie ========= End of CMD: ========= ========= netsh winsock reset ========= Pomy˜lnie zresetowano Winsock Catalog. Musisz ponownie uruchomi† komputer, aby ukoäczy† resetowanie. ========= End of CMD: ========= The system needs a manual reboot. ==== End of Fixlog ====