Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-02-2014 Ran by User at 2014-02-07 10:06:56 Run:1 Running from C:\Users\User\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** SearchScopes: HKCU - {68FCDDE3-37BE-465D-979D-6D9BF8F1DBDC} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=902615&p={searchTerms} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb201/?search={searchTerms}&loc=IB_DS&a=6PQVIsQB26&i=26 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\lmntr21i.default\user.js CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx [2012-11-22] CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx [2013-06-07] CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx [2013-04-26] CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22] CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION S1 HssDRV6; \SystemRoot\system32\DRIVERS\hssdrv6.sys [X] AS: COMODO Antivirus (Disabled - Out of date) {0C2D2636-923D-EE52-2A83-E643204A8275} Task: {8F6B6622-E955-44D2-B5AD-B5B9F1C9B893} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2013-09-24] (COMODO) C:\Program Files\COMODO C:\Program Files (x86)\Common Files\Spigot C:\Users\User\AppData\Local\Temp\*.exe C:\Users\User\AppData\Roaming\tmp Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\Search" /f ***************** HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{68FCDDE3-37BE-465D-979D-6D9BF8F1DBDC} => Key deleted successfully. HKCR\CLSID\{68FCDDE3-37BE-465D-979D-6D9BF8F1DBDC} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} => Key deleted successfully. HKCR\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\lmntr21i.default\user.js => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj => Key deleted successfully. C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj => Key deleted successfully. C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk => Key deleted successfully. C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp => Key deleted successfully. C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx => Moved successfully. HKCU\SOFTWARE\Policies\Google => Key deleted successfully. HssDRV6 => Service deleted successfully. AS: COMODO Antivirus (Disabled - Out of date) {0C2D2636-923D-EE52-2A83-E643204A8275} => The item is protected. Make sure the software is uninstalled and its services is removed. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{8F6B6622-E955-44D2-B5AD-B5B9F1C9B893} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8F6B6622-E955-44D2-B5AD-B5B9F1C9B893} => Key deleted successfully. C:\Windows\System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => Key deleted successfully. C:\Program Files\COMODO => Moved successfully. C:\Program Files (x86)\Common Files\Spigot => Moved successfully. C:\Users\User\AppData\Local\Temp\*.exe => Moved successfully. C:\Users\User\AppData\Roaming\tmp => Moved successfully. ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\Search" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====