Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-12-2013 01 Ran by Admin at 2014-01-01 14:14:52 Run:1 Running from C:\Users\Admin\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** AppInit_DLLs-x32: c:\progra~3\browse~1\25911~1.18\{c16c1~1\mngr.dll [ ] () HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=128 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mikus8mx.default\searchplugins\safeguard-secure-search.xml Task: {0E4B8903-BB43-4405-90B5-DD15BD0CD6D4} - System32\Tasks\{6D8E3F4A-DD2A-4889-9805-A15D79EDE628} => C:\Users\Admin\Desktop\DokanInstall_0.6.0.exe Task: {358320A8-5FE0-4A9C-8535-56D9A9BF8ECE} - System32\Tasks\{96E472B1-B539-4AE0-9ADB-AA3559692670} => C:\Users\Admin\Desktop\DokanInstall_0.6.0.exe FF Homepage: hxxp://www.gazeta.pl/0,0.html?p=128 FF Keyword.URL: user_pref("keyword.URL", ""); FF Plugin-x32: @esn/esnlaunch,version=1.132.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.140.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File CHR HKLM-x32\...\Chrome\Extension: [ojpijjmpahflnipadmlpgbjmagmjchkk] - C:\Users\Admin\AppData\Local\Temp\ccex.crx S3 ALSysIO; \??\C:\Users\Admin\AppData\Local\Temp\ALSysIO64.sys [x] ***************** HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mikus8mx.default\searchplugins\safeguard-secure-search.xml => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0E4B8903-BB43-4405-90B5-DD15BD0CD6D4} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0E4B8903-BB43-4405-90B5-DD15BD0CD6D4} => Key deleted successfully. C:\Windows\System32\Tasks\{6D8E3F4A-DD2A-4889-9805-A15D79EDE628} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6D8E3F4A-DD2A-4889-9805-A15D79EDE628} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{358320A8-5FE0-4A9C-8535-56D9A9BF8ECE} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{358320A8-5FE0-4A9C-8535-56D9A9BF8ECE} => Key deleted successfully. C:\Windows\System32\Tasks\{96E472B1-B539-4AE0-9ADB-AA3559692670} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{96E472B1-B539-4AE0-9ADB-AA3559692670} => Key deleted successfully. Firefox homepage deleted successfully. Firefox Keyword.URL deleted successfully. HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.132.0 => Key deleted successfully. C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll not found. HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.140.0 => Key deleted successfully. C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll not found. HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.3 => Key deleted successfully. C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll not found. HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.7 => Key deleted successfully. C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk => Key deleted successfully. "C:\Users\Admin\AppData\Local\Temp\ccex.crx" => File/Directory not found. ALSysIO => Service deleted successfully. ==== End of Fixlog ====