Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-10-2013 Ran by endorro at 2013-10-20 12:48:26 Run:1 Running from C:\Documents and Settings\endorro\Moje dokumenty\Pobieranie Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-16] (APN) HKCU\...\Run: [UpdateMyDrivers] - C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss HKCU\...\Run: [ALLUpdate] - "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" HKCU\...\Run: [CancelAutoPlay] - C:\Program Files\Telenor\Miniruter_MF91D\CancelAutoPlay.exe HKCU\...\Run: [iLivid] - C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\iLivid\iLivid.exe [6827008 2013-09-09] (Bandoo Media Inc.) AppInit_DLLs: C:\DOCUME~1\ALLUSE~1\DANEAP~1\Wincert\WIN32C~1.DLL C:\PROGRA~1\MOVIES~1\Datamngr\mgrldr.dll [ 2013-09-24] () IMEO\bitguard.exe: [Debugger] tasklist.exe IMEO\bprotect.exe: [Debugger] tasklist.exe IMEO\browserdefender.exe: [Debugger] tasklist.exe IMEO\browserprotect.exe: [Debugger] tasklist.exe HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-420&v=a9396-116&t=4 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=prs&from=prs&uid=67194_16910336_67167133_3219913727_B0DB4E7A&ts=1356562866 HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?babsrc=HP_ss&mntrId=B0DB0025568C05E6&affID=120606&tsp=4931 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=prs&from=prs&uid=67194_16910336_67167133_3219913727_B0DB4E7A&ts=1356562866 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_medium=prs&from=prs&uid=67194_16910336_67167133_3219913727_B0DB4E7A&ts=1356562866 URLSearchHook: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTo0.dll (Conduit Ltd.) SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=420&systemid=406&v=a9396-116&apn_uid=3155637608954780&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms} SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search={searchTerms} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.v9.com/web/?q={searchTerms} SearchScopes: HKCU - {0C2BC48E-A5D0-41B4-A0DF-3ACFF6004369} URL = http://websearch.ask.com/redirect?client=ie&tb=STT&o=102866&src=crm&q={searchTerms}&locale=&apn_ptnrs=^5N&apn_dtid=^YYYYYY^YY^NL&apn_uid=381FFDA9-75E8-4A7E-A08D-13291BBB39B4&apn_sauid=5AAF6651-57BC-419A-927E-ABECD0E240FB SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B0DB0025568C05E6&affID=120606&tsp=4931 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.v9.com/web/?q={searchTerms} SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=420&systemid=406&v=a9396-116&apn_uid=3155637608954780&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms} SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468 SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search={searchTerms} BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD) BHO: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTo0.dll (Conduit Ltd.) BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com) Toolbar: HKLM - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTo0.dll (Conduit Ltd.) Toolbar: HKLM - Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD) Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com) Toolbar: HKCU -uTorrentControl_v2 Toolbar - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - C:\Program Files\uTorrentControl_v2\prxtbuTo0.dll (Conduit Ltd.) FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Ask.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\v9.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-16] (APN LLC.) S2 BitGuard; C:\Documents and Settings\All Users\Dane aplikacji\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [3029472 2013-09-13] () R2 DatamngrCoordinator; C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe [3419136 2013-09-24] (Bandoo Media Inc.) R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1434416 2013-09-15] () S3 massfilter_lte; \??\C:\WINDOWS\system32\drivers\massfilter_lte.sys [x] S3 zgdcat; system32\DRIVERS\zgdcat.sys [x] S3 zgdcdiag; system32\DRIVERS\zgdcdiag.sys [x] S3 zgdcnet; system32\DRIVERS\zgdcnet.sys [x] C:\WINDOWS\Tasks\EPUpdater.job C:\Documents and Settings\All Users\Dane aplikacji\APN C:\Documents and Settings\All Users\Dane aplikacji\AskPartnerNetwork C:\Documents and Settings\All Users\Dane aplikacji\Babylon C:\Documents and Settings\All Users\Dane aplikacji\BitGuard C:\Documents and Settings\All Users\Dane aplikacji\Datamngr C:\Documents and Settings\All Users\Dane aplikacji\Wincert C:\Documents and Settings\endorro\Dane aplikacji\BabSolution C:\Documents and Settings\endorro\Dane aplikacji\Babylon C:\Documents and Settings\endorro\Dane aplikacji\Delta C:\Documents and Settings\endorro\Dane aplikacji\File Scout C:\Documents and Settings\endorro\Dane aplikacji\ilividmoviestoolbarha C:\Documents and Settings\endorro\Dane aplikacji\Incredibar.com C:\Documents and Settings\endorro\Dane aplikacji\PriceGong C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\uTorrentControl_v2 C:\Documents and Settings\LocalService\Dane aplikacji\Delta C:\Documents and Settings\LocalService\Dane aplikacji\Incredibar.com C:\Documents and Settings\LocalService\Dane aplikacji\PriceGong Reg: reg delete "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls" /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ***************** HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ApnTBMon => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\UpdateMyDrivers => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ALLUpdate => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\CancelAutoPlay => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\iLivid => Value deleted successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bitguard.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bprotect.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserdefender.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserprotect.exe => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\bProtector Start Page => Value deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => Value deleted successfully. HKCR\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\bProtectorDefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0C2BC48E-A5D0-41B4-A0DF-3ACFF6004369} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0C2BC48E-A5D0-41B4-A0DF-3ACFF6004369} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} => Key deleted successfully. HKCR\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => Key deleted successfully. HKCR\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} => Key deleted successfully. HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => Value deleted successfully. HKCR\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{F9639E4A-801B-4843-AEE3-03D9DA199E77} => Value deleted successfully. HKCR\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{82E1477C-B154-48D3-9891-33D83C26BCD3} => Value deleted successfully. HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7473B6BD-4691-4744-A82B-7854EB3D70B6} => Value deleted successfully. HKCR\CLSID\{7473B6BD-4691-4744-A82B-7854EB3D70B6} => Key not found. C:\Program Files\mozilla firefox\searchplugins\Ask.xml => Moved successfully. C:\Program Files\mozilla firefox\searchplugins\v9.xml => Moved successfully. C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml => Moved successfully. APNMCP => Service deleted successfully. BitGuard => Service deleted successfully. DatamngrCoordinator => Service deleted successfully. IBUpdaterService => Service deleted successfully. massfilter_lte => Service deleted successfully. zgdcat => Service deleted successfully. zgdcdiag => Service deleted successfully. zgdcnet => Service deleted successfully. C:\WINDOWS\Tasks\EPUpdater.job => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\APN => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AskPartnerNetwork => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Babylon => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\BitGuard => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Datamngr => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Wincert => Moved successfully. C:\Documents and Settings\endorro\Dane aplikacji\BabSolution => Moved successfully. C:\Documents and Settings\endorro\Dane aplikacji\Babylon => Moved successfully. C:\Documents and Settings\endorro\Dane aplikacji\Delta => Moved successfully. C:\Documents and Settings\endorro\Dane aplikacji\File Scout => Moved successfully. C:\Documents and Settings\endorro\Dane aplikacji\ilividmoviestoolbarha => Moved successfully. C:\Documents and Settings\endorro\Dane aplikacji\Incredibar.com => Moved successfully. C:\Documents and Settings\endorro\Dane aplikacji\PriceGong => Moved successfully. C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\uTorrentControl_v2 => Moved successfully. C:\Documents and Settings\LocalService\Dane aplikacji\Delta => Moved successfully. C:\Documents and Settings\LocalService\Dane aplikacji\Incredibar.com => Moved successfully. C:\Documents and Settings\LocalService\Dane aplikacji\PriceGong => Moved successfully. ========= reg delete "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= The system needs a manual reboot. ==== End of Fixlog ====