Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-01-2014 01 Ran by Michaś ^^ at 2014-01-13 09:47:14 Run:1 Running from C:\Users\Michaś ^^\Downloads\Nowy folder Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com/?type=hp&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com/?type=hp&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com/?type=hp&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com/?type=hp&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com/?type=hp&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com/?type=hp&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com/?type=sc&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP&q={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP&q={searchTerms} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = CHR StartMenuInternet: Google Chrome - C:\Users\Michaś ^^\AppData\Local\Google\Chrome\Application\chrome.exe http://aartemis.com/?type=sc&ts=1388691044&from=cor&uid=ST9500325AS_S2W6WXJPXXXXS2W6WXJP CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Michaś ^^\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-02] Task: {02514D9E-C80D-4874-8D39-F4275B7AA25E} - System32\Tasks\{BE947749-EF79-4953-9821-7B5AE0606C6C} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158.259/pl/abandoninstall?source=lightinstaller&page=tsInstall C:\Program Files (x86)\qualitink C:\Users\Michaś ^^\AppData\Roaming\aartemis C:\Users\Michaś ^^\AppData\Roaming\ASUS WebStorage C:\Users\Michaś ^^\AppData\Roaming\Babylon C:\Users\Michaś ^^\AppData\Roaming\OpenCandy C:\Users\Michaś ^^\Downloads\everestultimate550_Downloader.exe ***************** HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{02514D9E-C80D-4874-8D39-F4275B7AA25E} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{02514D9E-C80D-4874-8D39-F4275B7AA25E} => Key deleted successfully. C:\Windows\System32\Tasks\{BE947749-EF79-4953-9821-7B5AE0606C6C} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BE947749-EF79-4953-9821-7B5AE0606C6C} => Key deleted successfully. C:\Program Files (x86)\qualitink => Moved successfully. C:\Users\Michaś ^^\AppData\Roaming\aartemis => Moved successfully. C:\Users\Michaś ^^\AppData\Roaming\ASUS WebStorage => Moved successfully. C:\Users\Michaś ^^\AppData\Roaming\Babylon => Moved successfully. C:\Users\Michaś ^^\AppData\Roaming\OpenCandy => Moved successfully. C:\Users\Michaś ^^\Downloads\everestultimate550_Downloader.exe => Moved successfully. ==== End of Fixlog ====