Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 02-09-2013 04 Ran by Sapper at 2013-09-03 16:56:09 Run:1 Running from C:\Documents and Settings\Sapper\Pulpit\Nowy folder Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\...\Run: [WinUpdates] - D:\Program Files\Java\jre7\bin\javaw.exe [175016 2013-08-02] (Oracle Corporation) HKCU\...\Policies\Explorer: [DisallowRun] 1 HKCU\...\Policies\Explorer\DisallowRun: [1] hamachi-2-ui.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = BHO: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - C:\Documents and Settings\Sapper\Ustawienia lokalne\Dane aplikacji\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll No File CHR HKLM\...\Chrome\Extension: [fagpjgjmoaccgkkpjeoinehnoaimnbla] - C:\Documents and Settings\Sapper\Dane aplikacji\BabSolution\CR\hola.crx R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx86.sys [37664 2013-08-14] (AVG Technologies) C:\WINDOWS\system32\drivers\avgtpx86.sys S2 vToolbarUpdater15.5.0; D:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [x] S3 GenericMount Helper Service; "D:\Program Files\Norton Ghost\Shared\Drivers\GenericMountHelper.exe" [x] S3 SymSnapService; "D:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe" [x] S3 GenericMount; system32\DRIVERS\GenericMount.sys [x] S3 PCANDIS5; \??\C:\WINDOWS\system32\PCANDIS5.SYS [x] Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f C:\Documents and Settings\Sapper\Dane aplikacji\WinZipper ***************** HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\WinUpdates => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\DisallowRun => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\\1 => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED} => Key deleted successfully. HKCR\CLSID\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED} => Key deleted successfully. HKLM\SOFTWARE\Google\Chrome\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla => Key deleted successfully. "C:\Documents and Settings\Sapper\Dane aplikacji\BabSolution\CR\hola.crx" => File/Directory not found. avgtp => Service deleted successfully. C:\WINDOWS\system32\drivers\avgtpx86.sys => Moved successfully. vToolbarUpdater15.5.0 => Service deleted successfully. GenericMount Helper Service => Service deleted successfully. SymSnapService => Service deleted successfully. GenericMount => Service deleted successfully. PCANDIS5 => Service deleted successfully. ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= C:\Documents and Settings\Sapper\Dane aplikacji\WinZipper => Moved successfully. The system needs a manual reboot. ==== End of Fixlog ====