Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 29-12-2013 01 Ran by palikot at 2013-12-31 09:37:57 Run:1 Running from C:\Documents and Settings\palikot\Pulpit Boot Mode: Normal ============================================== Content of fixlist: ***************** () C:\Program Files\Mobogenie\DaemonProcess.exe HKLM\...\Run: [NPSStartup] - [x] HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [761024 2013-12-13] () HKLM\...\Winlogon: [Userinit] C:\WINDOWS\system32\userinit.exe HKCU\...\Run: [Clownfish] - [x] HKCU\...\Run: [NextLive] - C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\palikot\Dane aplikacji\newnext.me\nengine.dll",EntryPoint -m l Lsa: [Notification Packages] :\WINDOWS\system32\srrstr.dll SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} S2 hpdj3500; C:\Documents and Settings\All Users\Dane aplikacji\TEMP C:\Documents and Settings\palikot\.android C:\Documents and Settings\palikot\daemonprocess.txt C:\Documents and Settings\palikot\Dane aplikacji\newnext.me C:\Documents and Settings\palikot\Moje dokumenty\Mobogenie C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\cache C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\genienext C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\Mobogenie C:\Program Files\Mobogenie C:\Program Files\Mozilla Firefox\updated(2) Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg add "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ***************** [2040] C:\Program Files\Mobogenie\DaemonProcess.exe => Process closed successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NPSStartup => Value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => Value deleted successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => Value was restored successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Clownfish => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive => Value deleted successfully. HKLM\System\CurrentControlSet\Control\Lsa\\Notification Packages => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\ToolbarSearchProviderProgress => Value deleted successfully. hpdj3500 => Service deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\TEMP => Moved successfully. C:\Documents and Settings\palikot\.android => Moved successfully. C:\Documents and Settings\palikot\daemonprocess.txt => Moved successfully. C:\Documents and Settings\palikot\Dane aplikacji\newnext.me => Moved successfully. C:\Documents and Settings\palikot\Moje dokumenty\Mobogenie => Moved successfully. C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\cache => Moved successfully. C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\genienext => Moved successfully. C:\Documents and Settings\palikot\Ustawienia lokalne\Dane aplikacji\Mobogenie => Moved successfully. C:\Program Files\Mobogenie => Moved successfully. C:\Program Files\Mozilla Firefox\updated(2) => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg add "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ==== End of Fixlog ====