Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 06-09-2013 Ran by Marek at 2013-09-09 16:37:51 Run:2 Running from C:\ Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM\...\Policies\Explorer\Run: [1220] - C:\DOCUME~1\ALLUSE~1\LOCALS~1\Temp\ccrnra.exe [136840 2006-03-02] ( (Lampi)) HKCU\...\Run: [AdobeBridge] - [x] HKCU\...\Run: [NTRedirect] - C:\Documents and Settings\Marek\Dane aplikacji\BabSolution\Shared\enhancedNT.dll [187888 2013-08-22] () HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=78EAE0CB4E80DEF8&affID=119357&tt=200813_246&tsp=4982 HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=78EAE0CB4E80DEF8&affID=119357&tt=200813_246&tsp=4982 URLSearchHook: ATTENTION ==> Default URLSearchHook is missing. URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&ptr=100&q={searchTerms}&crg=3.1010006.10029&barid={700466CC-ED1B-4428-9F12-38472049C833} SearchScopes: HKCU - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&ptr=100&q={searchTerms}&crg=3.1010006.10029&barid={700466CC-ED1B-4428-9F12-38472049C833} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=78EAE0CB4E80DEF8&affID=119357&tt=200813_246&tsp=4982 SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&ptr=100&q={searchTerms}&crg=3.1010006.10029&barid={700466CC-ED1B-4428-9F12-38472049C833} BHO: WebConnect - {2316c625-b487-4410-a1a5-ff040b65245f} - C:\Program Files\WebConnect\WebConnectbho.dll (Web Connect) BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com) BHO: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com) Toolbar: HKCU -SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) R2 BrowserDefendert; C:\Documents and Settings\All Users\Dane aplikacji\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2838480 2013-08-13] () R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1016112 2013-05-16] () Task: C:\WINDOWS\Tasks\EPUpdater.job => C:\DOCUME~1\Marek\DANEAP~1\BABSOL~1\Shared\BabMaint.exe C:\Documents and Settings\All Users\Local Settings\Temp\ccrnra.exe C:\Documents and Settings\All Users\Dane aplikacji\Babylon C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService C:\Documents and Settings\Marek\Dane aplikacji\BabSolution C:\Documents and Settings\Marek\Dane aplikacji\Babylon C:\Documents and Settings\Marek\Dane aplikacji\DealPly C:\Documents and Settings\Marek\Dane aplikacji\PerformerSoft C:\Windows\system32\dmwu.exe C:\WINDOWS\system32\jmdp G:\NIEBIESKI (4GB).lnk G:\~%VWXMESSAG.ini G:\autorun.inf G:\desktop.ini G:\Thumbs.db CMD: attrib /d /s -s -h G:\* CMD: netsh firewall reset ***************** HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\1220 => Value not found. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value not found. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\NTRedirect => Value not found. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\bProtector Start Page => Value not found. Default URLSearchHook was restored successfully . HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} => Value not found. HKCR\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found. HKCR\Wow6432Node\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\bProtectorDefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found. HKCR\Wow6432Node\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316c625-b487-4410-a1a5-ff040b65245f} => Key not found. HKCR\CLSID\{2316c625-b487-4410-a1a5-ff040b65245f} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} => Key not found. HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847} => Key not found. HKCR\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{EEE6C35B-6118-11DC-9C72-001320C79847} => Value not found. HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{82E1477C-B154-48D3-9891-33D83C26BCD3} => Value not found. HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} => Value not found. HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847} => Key not found. BrowserDefendert => Service not found. IBUpdaterService => Service not found. C:\WINDOWS\Tasks\EPUpdater.job not found. "C:\Documents and Settings\All Users\Local Settings\Temp\ccrnra.exe" => File/Directory not found. "C:\Documents and Settings\All Users\Dane aplikacji\Babylon" => File/Directory not found. "C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService" => File/Directory not found. "C:\Documents and Settings\Marek\Dane aplikacji\BabSolution" => File/Directory not found. "C:\Documents and Settings\Marek\Dane aplikacji\Babylon" => File/Directory not found. "C:\Documents and Settings\Marek\Dane aplikacji\DealPly" => File/Directory not found. "C:\Documents and Settings\Marek\Dane aplikacji\PerformerSoft" => File/Directory not found. C:\Windows\system32\dmwu.exe => Moved successfully. "C:\WINDOWS\system32\jmdp" => File/Directory not found. G:\NIEBIESKI (4GB).lnk => Moved successfully. G:\~%VWXMESSAG.ini => Moved successfully. G:\autorun.inf => Moved successfully. G:\desktop.ini => Moved successfully. G:\Thumbs.db => Moved successfully. ========= attrib /d /s -s -h G:\* ========= ========= End of CMD: ========= ========= netsh firewall reset ========= Ok. ========= End of CMD: ========= ==== End of Fixlog ====