Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-10-2013 Ran by Raster at 2013-10-16 18:12:18 Run:1 Running from C:\Documents and Settings\Raster\Pulpit\Logi\programy Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM\...\Run: [] - [x] Winlogon\Notify\avgrsstarter: C:\Windows\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) URLSearchHook: ATTENTION ==> Default URLSearchHook is missing. SearchScopes: HKLM - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms} SearchScopes: HKCU - DefaultScope {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6a1806cd-94d4-4689-ba73-e35ea1ea9990} URL = SearchScopes: HKCU - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms} DPF: {5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} http://mks.com.pl/skaner/SkanerOnline.cab DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File FF Homepage: user_pref("browser.startup.homepage", ""); FF Keyword.URL: hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avgb&type=yahoo_avg_hs2-tb-web_us&p= FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.) FF Plugin: @nosltd.com/getPlus+®,version=1.6.2.91 - C:\Program Files\NOS\bin\np_gp.dll No File FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [x] S3 esihdrv; \??\C:\DOCUME~1\Raster\USTAWI~1\Temp\esihdrv.sys [x] S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x] S3 PORTMON; \??\E:\Installe\_z_CHIPa\SysinternalsSuite\PORTMSYS.SYS [x] U4 RemoteRegistry; S4 vsdatant; [x] C:\Program Files\Yahoo! C:\Documents and Settings\All Users\Dane aplikacji\T23J7 C:\Documents and Settings\All Users\Dane aplikacji\V93GE C:\Documents and Settings\All Users\Dane aplikacji\T09F8 C:\Documents and Settings\All Users\Dane aplikacji\AutoUpdate C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar C:\Documents and Settings\All Users\Dane aplikacji\F-Secure C:\Documents and Settings\Raster\Dane aplikacji\WinPatrol C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\Google\Chrome ***************** HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter => Key deleted successfully. Default URLSearchHook was restored successfully . HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6a1806cd-94d4-4689-ba73-e35ea1ea9990} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{6a1806cd-94d4-4689-ba73-e35ea1ea9990} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} => Key not found. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} => Key deleted successfully. HKCR\CLSID\{5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} => Key not found. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{68282C51-9459-467B-95BF-3C0E89627E55} => Key deleted successfully. HKCR\CLSID\{68282C51-9459-467B-95BF-3C0E89627E55} => Key not found. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} => Key deleted successfully. HKCR\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} => Key not found. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7} => Key deleted successfully. HKCR\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7} => Key not found. HKCR\PROTOCOLS\Handler\linkscanner => Key deleted successfully. HKCR\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} => Key deleted successfully. Firefox homepage deleted successfully. Firefox Keyword.URL deleted successfully. HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 => Key deleted successfully. C:\Program Files\Yahoo!\Common\npyaxmpb.dll => Moved successfully. HKLM\Software\MozillaPlugins\@nosltd.com/getPlus+®,version=1.6.2.91 => Key not found. C:\Program Files\NOS\bin\np_gp.dll not found. C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml => Moved successfully. getPlusHelper => Service deleted successfully. esihdrv => Service deleted successfully. pccsmcfd => Service deleted successfully. PORTMON => Service deleted successfully. RemoteRegistry => Service deleted successfully. vsdatant => Service deleted successfully. C:\Program Files\Yahoo! => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\T23J7 => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\V93GE => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\T09F8 => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AutoUpdate => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG Security Toolbar => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\F-Secure => Moved successfully. C:\Documents and Settings\Raster\Dane aplikacji\WinPatrol => Moved successfully. C:\Documents and Settings\Raster\Ustawienia lokalne\Dane aplikacji\Google\Chrome => Moved successfully. ==== End of Fixlog ====