Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01 Ran by Ewa at 2014-03-16 12:14:59 Run:1 Running from C:\Users\Ewa\Desktop\Mateusz - nie kasować Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe HKU\S-1-5-21-3071221329-3485222768-1727919613-1000\...\Run: [NextLive] - C:\Windows\system32\rundll32.exe "C:\Users\Ewa\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l HKU\S-1-5-21-3071221329-3485222768-1727919613-1000\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-21-3071221329-3485222768-1727919613-1000\...\Policies\Explorer: [DisallowCpl] 1 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388083492&from=cor&uid=WDCXWD2500AAKX-60U6AA0_WD-WCC2ERN4661246612&q={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388083492&from=cor&uid=WDCXWD2500AAKX-60U6AA0_WD-WCC2ERN4661246612&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388083492&from=cor&uid=WDCXWD2500AAKX-60U6AA0_WD-WCC2ERN4661246612&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388083492&from=cor&uid=WDCXWD2500AAKX-60U6AA0_WD-WCC2ERN4661246612&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com/?type=sc&ts=1388083492&from=cor&uid=WDCXWD2500AAKX-60U6AA0_WD-WCC2ERN4661246612 FF user.js: detected! => C:\Users\Ewa\AppData\Roaming\Mozilla\Firefox\Profiles\a7kbxg5s.default\user.js C:\Users\Ewa\AppData\Roaming\newnext.me ***************** HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => Value deleted successfully. HKU\S-1-5-21-3071221329-3485222768-1727919613-1000\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive => Value deleted successfully. HKU\S-1-5-21-3071221329-3485222768-1727919613-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\TaskbarNoNotification => Value deleted successfully. HKU\S-1-5-21-3071221329-3485222768-1727919613-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\DisallowCpl => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. C:\Users\Ewa\AppData\Roaming\Mozilla\Firefox\Profiles\a7kbxg5s.default\user.js => Moved successfully. C:\Users\Ewa\AppData\Roaming\newnext.me => Moved successfully. ==== End of Fixlog ====