Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-02-2014 Ran by Artur Machnicki at 2014-02-21 23:07:02 Run:4 Running from C:\Users\Artur Machnicki\My Installs Boot Mode: Normal ============================================== Content of fixlist: ***************** BHO-x32: No Name - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No File Toolbar: HKLM-x32 - No Name - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No File S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [39504 2013-04-11] (ThreatTrack Security) R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-05-28] (GFI Software) S3 Lavasoft Kernexplorer; C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [17152 2012-02-29] () S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X] Task: {B22A9922-3460-48A6-9031-4B7EC3FE614B} - System32\Tasks\RegAce Scheduled Scan - Artur Machnicki => C:\Program Files (x86)\RegAce System Suite\RegAce.exe Task: {C2867CAA-C07B-4477-BD42-2B41A1DADD3F} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe Task: C:\Windows\Tasks\RegAce Scheduled Scan - Artur Machnicki.job => C:\Program Files (x86)\RegAce System Suite\RegAce.exe C:\Program Files (x86)\Avira C:\Program Files (x86)\Lavasoft C:\ProgramData\Avira C:\Users\Artur Machnicki\AppData\Local\AviraResume C:\Windows\System32\drivers\gfiark.sys C:\Windows\System32\drivers\gfibto.sys ***************** HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{6c97a91e-4524-4019-86af-2aa2d567bf5c} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{6c97a91e-4524-4019-86af-2aa2d567bf5c} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{6c97a91e-4524-4019-86af-2aa2d567bf5c} => Key not found. gfiark => Service deleted successfully. gfibto => Service deleted successfully. Lavasoft Kernexplorer => Service deleted successfully. SBRE => Service deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B22A9922-3460-48A6-9031-4B7EC3FE614B} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B22A9922-3460-48A6-9031-4B7EC3FE614B} => Key deleted successfully. C:\Windows\System32\Tasks\RegAce Scheduled Scan - Artur Machnicki => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegAce Scheduled Scan - Artur Machnicki => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C2867CAA-C07B-4477-BD42-2B41A1DADD3F} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C2867CAA-C07B-4477-BD42-2B41A1DADD3F} => Key deleted successfully. C:\Windows\System32\Tasks\Ad-Aware Update (Weekly) => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Ad-Aware Update (Weekly) => Key deleted successfully. C:\Windows\Tasks\RegAce Scheduled Scan - Artur Machnicki.job => Moved successfully. C:\Program Files (x86)\Avira => Moved successfully. C:\Program Files (x86)\Lavasoft => Moved successfully. C:\ProgramData\Avira => Moved successfully. C:\Users\Artur Machnicki\AppData\Local\AviraResume => Moved successfully. C:\Windows\System32\drivers\gfiark.sys => Moved successfully. C:\Windows\System32\drivers\gfibto.sys => Moved successfully. The system needs a manual reboot. ==== End of Fixlog ====