Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01 Ran by ate at 2014-04-08 19:06:01 Run:1 Running from C:\Documents and Settings\ate\Pulpit\diagn Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\Malwarebytes' Anti-Malware <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\Trend Micro <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\Trend Micro <====== ATTENTION HKU\S-1-5-21-725345543-1078145449-682003330-1003\...\MountPoints2: {96040f95-f2f9-11df-b7a1-0023545b622f} - io3yalc.exe SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3289075&CUI=UN35548851561090154&UM=1 Toolbar: HKCU - No Name - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No File Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File S4 hpt3xx; No ImagePath S3 NLNdisMP; system32\DRIVERS\nlndis.sys [X] S3 NLNdisPT; system32\DRIVERS\nlndis.sys [X] C:\Documents and Settings\All Users\Dane aplikacji\AVG January 2013 Campaign C:\Documents and Settings\All Users\Dane aplikacji\avg9 C:\Documents and Settings\All Users\Dane aplikacji\Conduit C:\Documents and Settings\All Users\Dane aplikacji\TEMP C:\Documents and Settings\All Users\Dane aplikacji\Toolbar4 C:\Documents and Settings\ate\Dane aplikacji\Abheob C:\Documents and Settings\ate\Dane aplikacji\Dyeva C:\Documents and Settings\ate\Dane aplikacji\Etma C:\Documents and Settings\ate\Dane aplikacji\Laufe C:\Documents and Settings\ate\Dane aplikacji\Opvuqy C:\Documents and Settings\TEMP C:\Documents and Settings\TEMP.ATE-PC Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\hmgtvxnv" /f Reg: reg delete HKLM\SOFTWARE\Mozilla /f Reg: reg delete HKCU\Software\Mozilla /f Reboot: ***************** HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKU\S-1-5-21-725345543-1078145449-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{96040f95-f2f9-11df-b7a1-0023545b622f} => Key deleted successfully. HKCR\CLSID\{96040f95-f2f9-11df-b7a1-0023545b622f} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} => Value deleted successfully. HKCR\CLSID\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C55BBCD6-41AD-48AD-9953-3609C48EACC7} => Value deleted successfully. HKCR\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully. HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found. hpt3xx => Service deleted successfully. NLNdisMP => Service deleted successfully. NLNdisPT => Service deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG January 2013 Campaign => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\avg9 => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Conduit => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\TEMP => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Toolbar4 => Moved successfully. C:\Documents and Settings\ate\Dane aplikacji\Abheob => Moved successfully. C:\Documents and Settings\ate\Dane aplikacji\Dyeva => Moved successfully. C:\Documents and Settings\ate\Dane aplikacji\Etma => Moved successfully. C:\Documents and Settings\ate\Dane aplikacji\Laufe => Moved successfully. C:\Documents and Settings\ate\Dane aplikacji\Opvuqy => Moved successfully. C:\Documents and Settings\TEMP => Moved successfully. C:\Documents and Settings\TEMP.ATE-PC => Moved successfully. ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\hmgtvxnv" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Mozilla /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKCU\Software\Mozilla /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====