Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-01-2014 Ran by Leszek at 2014-01-07 21:37:36 Run:1 Running from F:\Programy\FRST Boot Mode: Normal ============================================== Content of fixlist: ***************** () C:\ProgramData\Adobe\Run.exe () C:\ProgramData\Adobe\start.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe HKLM-x32\...\Run: [Adobe] - C:\ProgramData\Adobe\Color.vbs [101 2013-12-11] () ProxyServer: 211.239.84.244:443 S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe" [x] S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [x] Task: {714214AB-56D8-4DF8-829A-FBBF179F00CE} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe C:\ProgramData\Adobe\Color.vbs C:\ProgramData\Adobe\Run.exe C:\ProgramData\Adobe\start.exe Folder: C:\ProgramData\Adobe C:\Users\Leszek\AppData\Roaming\mozilla Reg: reg delete HKCU\Software\Mozilla /f Reg: reg delete HKCU\Software\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f ***************** C:\ProgramData\Adobe\Run.exe => No running process found C:\ProgramData\Adobe\start.exe => No running process found C:\Windows\SysWOW64\cmd.exe => No running process found HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully. TuneUp.UtilitiesSvc => Service deleted successfully. TuneUpUtilitiesDrv => Service deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{714214AB-56D8-4DF8-829A-FBBF179F00CE} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{714214AB-56D8-4DF8-829A-FBBF179F00CE} => Key deleted successfully. C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TuneUpUtilities_Task_BkGndMaintenance2013 => Key deleted successfully. C:\ProgramData\Adobe\Color.vbs => Moved successfully. C:\ProgramData\Adobe\Run.exe => Moved successfully. C:\ProgramData\Adobe\start.exe => Moved successfully. ========================= Folder: C:\ProgramData\Adobe ======================== 2012-09-29 11:58 - 2012-09-29 11:58 - 0000000 ____D () C:\ProgramData\Adobe\AIR 2012-09-29 11:58 - 2014-01-03 13:41 - 0000000 ____D () C:\ProgramData\Adobe\AIR\Updater 2013-08-05 06:57 - 2013-08-05 06:57 - 0013824 _____ () C:\ProgramData\Adobe\libblkmaker-0.1-0.dll 2013-08-05 06:57 - 2013-08-05 06:57 - 0013824 _____ () C:\ProgramData\Adobe\libblkmaker_jansson-0.1-0.dll 2013-08-05 06:57 - 2013-08-05 06:57 - 0228352 _____ () C:\ProgramData\Adobe\libcurl-4.dll 2008-09-03 20:49 - 2008-09-03 20:49 - 1177600 _____ (GnuWin32 ) C:\ProgramData\Adobe\libeay32.dll 2008-03-14 22:21 - 2008-03-14 22:21 - 1008128 _____ (GnuWin32 ) C:\ProgramData\Adobe\libiconv2.dll 2005-05-06 19:52 - 2005-05-06 19:52 - 0103424 _____ (GNU ) C:\ProgramData\Adobe\libintl3.dll 2013-08-05 06:57 - 2013-08-05 06:57 - 0052736 _____ () C:\ProgramData\Adobe\libjansson-4.dll 2008-09-03 20:49 - 2008-09-03 20:49 - 0232960 _____ (GnuWin32 ) C:\ProgramData\Adobe\libssl32.dll 2013-08-05 06:57 - 2013-08-05 06:57 - 0117760 _____ (libusbx.org) C:\ProgramData\Adobe\libusb-1.0.dll 2013-08-05 06:57 - 2013-08-05 06:57 - 0102912 _____ () C:\ProgramData\Adobe\pdcurses.dll 2013-08-05 06:57 - 2013-08-05 06:57 - 0013056 _____ () C:\ProgramData\Adobe\phatk121016.cl 2013-08-09 16:26 - 2013-08-09 16:26 - 0043810 _____ () C:\ProgramData\Adobe\poclbm130302.cl 2013-08-05 06:57 - 2013-08-05 06:57 - 0045056 _____ (Open Source Software community project) C:\ProgramData\Adobe\pthreadGC2.dll 2013-08-05 06:57 - 2013-08-05 06:57 - 0023825 _____ () C:\ProgramData\Adobe\scrypt130511.cl 2013-12-25 12:20 - 2013-12-25 12:20 - 1380135 _____ () C:\ProgramData\Adobe\scrypt130511IntelRHDGraphics4000glg2tc3392w256l4pOpenCL1_2.bin 2008-12-31 14:03 - 2008-12-31 14:03 - 0449024 _____ (GnuWin32 ) C:\ProgramData\Adobe\wget.exe 2013-08-05 06:57 - 2013-08-05 06:57 - 0088576 _____ () C:\ProgramData\Adobe\zlib1.dll 2012-09-29 11:58 - 2012-09-29 11:58 - 0000001 _____ () C:\ProgramData\Adobe\AIR\eulaAccepted 2013-03-15 15:07 - 2014-01-03 13:41 - 0000000 _____ () C:\ProgramData\Adobe\AIR\Updater\initialPingback 2014-01-03 13:41 - 2014-01-03 13:41 - 0000000 _____ () C:\ProgramData\Adobe\AIR\Updater\updatePingback ====== End of Folder: ====== C:\Users\Leszek\AppData\Roaming\mozilla => Moved successfully. ========= reg delete HKCU\Software\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====