Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-01-2014 01 Ran by Ja at 2014-01-02 16:22:18 Run:1 Running from D:\Pulpit Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM-x32\...\Run: [SSDMonitor] - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe SearchScopes: HKCU - {D1C5DCED-C041-4E4F-8DBC-4ED839B4ACD5} URL = http://websearch.ask.com/redirect?client=ie&tb=VDJ&o=41647960&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=8R&apn_dtid=YYYYYYYYPL&apn_uid=F75DE8CF-A998-4CE1-81CC-D13D2E24480C&apn_sauid=6AD4DAD1-0145-4DAF-B7F5-65DB24657544 FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird S1 avkmgr; system32\DRIVERS\avkmgr.sys [x] S0 vmci; system32\DRIVERS\vmci.sys [x] 2013-12-30 18:36 - 2013-12-02 12:43 - 00000000 ____D C:\Program Files (x86)\Mobogenie 2013-12-30 17:29 - 2013-12-02 12:44 - 00005604 _____ C:\Users\Ja\daemonprocess.txt Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f CMD: sc config "Internet Mobilny. RunOuc" start= demand ***************** HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SSDMonitor => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D1C5DCED-C041-4E4F-8DBC-4ED839B4ACD5} => Key deleted successfully. HKCR\CLSID\{D1C5DCED-C041-4E4F-8DBC-4ED839B4ACD5} => Key not found. HKLM\Software\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => Value deleted successfully. HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => Value deleted successfully. avkmgr => Service deleted successfully. vmci => Service deleted successfully. C:\Program Files (x86)\Mobogenie => Moved successfully. C:\Users\Ja\daemonprocess.txt => Moved successfully. ========= reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= sc config "Internet Mobilny. RunOuc" start= demand ========= [SC] ChangeServiceConfig SUKCES ========= End of CMD: ========= ==== End of Fixlog ====