Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 09-09-2013
Ran by SYSTEM at 2013-09-11 11:26:25 Run:1
Running from G:\
Boot Mode: Recovery

==============================================

Content of fixlist:
*****************
HKLM\...\Run: [ConvertAd] - C:\Users\Mariusz\AppData\Local\ConvertAd\ConvertAd.exe
HKU\Mariusz\...\Run: [Softonic for Windows] - C:\Users\Mariusz\AppData\Local\Softonic\Softonic.exe [ 2013-06-26] (Softonic)
HKU\Mariusz\...\Winlogon: [Shell] explorer.exe <==== ATTENTION
C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rfobeirosdrysapihpx.lnk
C:\Users\Mariusz\AppData\Local\Temp\*.exe
C:\Users\Mariusz\AppData\Local\ConvertAd
C:\Users\Mariusz\AppData\Roaming\settings.ini
C:\Users\Mariusz\AppData\Roaming\0C1I1L1R1J0M1P0I1G
C:\Users\Mariusz\AppData\Roaming\Babylon
C:\Users\Mariusz\Desktop\Wyczyść rejestr za darmo!.lnk
C:\ProgramData\Babylon
C:\Windows\System32\searchplugins
C:\Windows\System32\Extensions
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ConvertAd => Value deleted successfully.
HKU\Mariusz\Software\Microsoft\Windows\CurrentVersion\Run\\Softonic for Windows => Value deleted successfully.
HKU\Mariusz\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rfobeirosdrysapihpx.lnk => Moved successfully.
C:\Users\Mariusz\AppData\Local\Temp\*.exe => Moved successfully.
"C:\Users\Mariusz\AppData\Local\ConvertAd" => File/Directory not found.
C:\Users\Mariusz\AppData\Roaming\settings.ini => Moved successfully.
C:\Users\Mariusz\AppData\Roaming\0C1I1L1R1J0M1P0I1G => Moved successfully.
C:\Users\Mariusz\AppData\Roaming\Babylon => Moved successfully.
C:\Users\Mariusz\Desktop\Wyczyść rejestr za darmo!.lnk => Moved successfully.
C:\ProgramData\Babylon => Moved successfully.
C:\Windows\System32\searchplugins => Moved successfully.
C:\Windows\System32\Extensions => Moved successfully.
ewusbnet => Service deleted successfully.
hwusbdev => Service deleted successfully.
RtsUIR => Service deleted successfully.
USBCCID => Service deleted successfully.

==== End of Fixlog ====