Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 09-02-2014 03 Ran by Administrator at 2014-02-10 17:21:27 Run:1 Running from C:\Documents and Settings\Administrator\Pulpit\fixit Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Documents and Settings\NetworkService\Dane aplikacji\nukne.dll C:\WINDOWS\D3FD6AF379544998A31AF501C1E0571C.TMP S2 jokft; C:\WINDOWS\system32\svchost.exe [14336 2008-04-14] (Microsoft Corporation) S2 boljsff; C:\WINDOWS\TEMP\\nukne.dll [x] S2 ieebh; C:\WINDOWS\system32\nukne.dll [x] S2 jqvqu; C:\Program Files\Internet Explorer\nukne.dll [x] S2 uafrxmur; C:\Program Files\Movie Maker\nukne.dll [x] S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [x] S3 NTACCESS; \??\D:\NTACCESS.sys [x] S3 SetupNTGLM7X; \??\D:\NTGLM7X.sys [x] NETSVC: ieebh -> C:\WINDOWS\system32\nukne.dll ==> No File. NETSVC: jqvqu -> C:\Program Files\Internet Explorer\nukne.dll ==> No File. NETSVC: jokft -> No Registry Path. NETSVC: uafrxmur -> C:\Program Files\Movie Maker\nukne.dll ==> No File. NETSVC: boljsff -> C:\WINDOWS\TEMP\\nukne.dll ==> No File. Unlock: HKLM\SYSTEM\ControlSet002\Services\boljsff Unlock: HKLM\SYSTEM\ControlSet002\Services\ieebh Unlock: HKLM\SYSTEM\ControlSet002\Services\jokft Unlock: HKLM\SYSTEM\ControlSet002\Services\jqvqu Unlock: HKLM\SYSTEM\ControlSet002\Services\uafrxmur Reg: reg delete HKLM\SYSTEM\ControlSet002\Services\boljsff /f Reg: reg delete HKLM\SYSTEM\ControlSet002\Services\ieebh /f Reg: reg delete HKLM\SYSTEM\ControlSet002\Services\jokft /f Reg: reg delete HKLM\SYSTEM\ControlSet002\Services\jqvqu /f Reg: reg delete HKLM\SYSTEM\ControlSet002\Services\uafrxmur /f CMD: netsh firewall reset ***************** Could not move "C:\Documents and Settings\NetworkService\Dane aplikacji\nukne.dll" => Scheduled to move on reboot. C:\WINDOWS\D3FD6AF379544998A31AF501C1E0571C.TMP => Moved successfully. jokft => Service deleted successfully. boljsff => Service deleted successfully. ieebh => Service deleted successfully. jqvqu => Service deleted successfully. uafrxmur => Service deleted successfully. GMSIPCI => Service deleted successfully. NTACCESS => Service deleted successfully. SetupNTGLM7X => Service deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs ieebh => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs jqvqu => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs jokft => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs uafrxmur => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs boljsff => Value deleted successfully. "HKLM\SYSTEM\ControlSet002\Services\boljsff" => Key unlocked successfully. "HKLM\SYSTEM\ControlSet002\Services\ieebh" => Key unlocked successfully. "HKLM\SYSTEM\ControlSet002\Services\jokft" => Key unlocked successfully. "HKLM\SYSTEM\ControlSet002\Services\jqvqu" => Key unlocked successfully. "HKLM\SYSTEM\ControlSet002\Services\uafrxmur" => Key unlocked successfully. ========= reg delete HKLM\SYSTEM\ControlSet002\Services\boljsff /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKLM\SYSTEM\ControlSet002\Services\ieebh /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKLM\SYSTEM\ControlSet002\Services\jokft /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKLM\SYSTEM\ControlSet002\Services\jqvqu /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKLM\SYSTEM\ControlSet002\Services\uafrxmur /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= netsh firewall reset ========= Ok. ========= End of CMD: ========= => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-02-10 18:19:26)<= "C:\Documents and Settings\NetworkService\Dane aplikacji\nukne.dll" => File could not move. ==== End of Fixlog ====