Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 14-04-2014
Ran by Mateusz at 2014-04-15 02:12:17 Run:1
Running from C:\Users\Mateusz\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
() C:\Program Files\Mobogenie\MgAssist.exe
() C:\Program Files\Mobogenie\DaemonProcess.exe
() C:\Program Files\FindRight\updateFindRight.exe
() C:\Program Files\FindRight\bin\utilFindRight.exe
R2 MgAssistService; C:\Program Files\Mobogenie\MgAssist.exe [70848 2014-03-13] ()
R2 Update FindRight; C:\Program Files\FindRight\updateFindRight.exe [350496 2014-04-09] ()
R2 Util FindRight; C:\Program Files\FindRight\bin\utilFindRight.exe [350496 2014-04-09] ()
R1 tStLibG; C:\Windows\System32\drivers\tStLibG.sys [55224 2014-03-26] (StdLib)
HKLM\...\Run: [eRecoveryService] => [X]
HKLM\...\Run: [NWEReboot] => [X]
HKLM\...\Run: [mobilegeni daemon] => C:\Program Files\Mobogenie\DaemonProcess.exe [764096 2014-03-13] ()
HKLM\...\Policies\Explorer\Run: [39377] => C:\ProgramData\msaakn.exe [69945 2008-01-21] ( ())
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-1051359795-92314991-2884734444-1000\...\Run: [NextLive] => C:\Windows\system32\rundll32.exe "C:\Users\Mateusz\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1051359795-92314991-2884734444-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-1051359795-92314991-2884734444-1000\...\Policies\Explorer: [HideSCAHealth] 0
URLSearchHook: HKLM - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
URLSearchHook: HKCU - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
URLSearchHook: HKCU - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
SearchScopes: HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = http://start.facemoods.com/?a=dpgppc&s={searchTerms}&f=4
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=1101316&mntrId=240e99d10000000000000022694fd779
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92823368497462057
SearchScopes: HKCU - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
BHO: FindRight - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files\FindRight\FindRightBHO.dll (FindRight)
BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll No File
BHO: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
Toolbar: HKLM - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKCU - IncrediMail MediaBar 2 Toolbar - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
Handler: ms-help - No CLSID Value -
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
CHR HKLM\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx [2013-09-08]
CHR HKCU\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx [2012-10-02]
Task: {0815B847-3C5B-4100-938F-7C859142ED2A} - System32\Tasks\{57E19804-1F99-477D-BBED-2BC9847DDC83} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?page=tsProgressBar
Task: {26FC5F4F-ACD0-462A-827A-7F211C282DDC} - System32\Tasks\{077458E5-B0F5-4793-9D41-BAC0D5B777B5} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?page=tsProgressBar
Task: {7105FD43-4B16-4B9E-8B4F-9608F1099605} - System32\Tasks\{AB6999B1-03BF-4FC9-9E1F-9451023324C9} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?page=tsProgressBar
Task: {740D64FD-F613-45E6-85E2-05FD8EF94D86} - System32\Tasks\{7AABB91D-4016-46ED-A9D2-FB56AB88ACAC} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?page=tsProgressBar
Task: {9691F0CF-F969-49B8-8485-657AFA3B0BA3} - System32\Tasks\{D822C48D-C79E-40CC-89A2-1DDA32F7FC74} => Chrome.exe http://ui.skype.com/ui/0/6.9.0.106/pl/abandoninstall?page=tsProgressBar
Task: {A87F5729-71E7-4802-AF09-994CC8A055A2} - System32\Tasks\DealPly => C:\Users\Mateusz\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-05-28] () <==== ATTENTION
Task: {DDF37441-989D-49C6-9455-510A3FB8F2E0} - System32\Tasks\{B430DBA3-F456-4B67-8056-D5FF90A07A77} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?page=tsProgressBar
C:\Program Files\mozilla firefox\searchplugins
C:\ProgramData\*.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly
C:\Users\Mateusz\AppData\Local\cache
C:\Users\Mateusz\AppData\Roaming\*.exe
C:\Users\Mateusz\AppData\Roaming\newnext.me
C:\Users\Mateusz\AppData\Roaming\OpenCandy
C:\Users\Mateusz\Desktop\NATALA\MOJEEEEE\Mobogenie.lnk
C:\Users\Mateusz\Downloads\*.part
C:\Windows\system32\Drivers\tStLibG.sys
C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Search" /f
Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f
CMD: sc config "Mobile Partner. RunOuc" start= demand
CMD: rd /s /q C:\found.000
Reboot:
*****************

[2448] C:\Program Files\Mobogenie\MgAssist.exe => Process closed successfully.
[2728] C:\Program Files\Mobogenie\DaemonProcess.exe => Process closed successfully.
[3368] C:\Program Files\FindRight\updateFindRight.exe => Process closed successfully.
[3632] C:\Program Files\FindRight\bin\utilFindRight.exe => Process closed successfully.
MgAssistService => Service deleted successfully.
Update FindRight => Service deleted successfully.
Util FindRight => Service deleted successfully.
tStLibG => Unable to stop service
tStLibG => Service deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\eRecoveryService => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NWEReboot => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\39377 => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\TaskbarNoNotification => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HideSCAHealth => Value deleted successfully.
HKU\S-1-5-21-1051359795-92314991-2884734444-1000\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive => Value deleted successfully.
HKU\S-1-5-21-1051359795-92314991-2884734444-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\TaskbarNoNotification => Value deleted successfully.
HKU\S-1-5-21-1051359795-92314991-2884734444-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HideSCAHealth => Value deleted successfully.
HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks\\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} => Value deleted successfully.
HKCR\CLSID\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => Value deleted successfully.
HKCR\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0D7562AE-8EF6-416d-A838-AB665251703A} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670} => Key deleted successfully.
HKCR\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2c774641-5504-46a8-b63f-6715ae3fe376} => Key deleted successfully.
HKCR\CLSID\{2c774641-5504-46a8-b63f-6715ae3fe376} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key deleted successfully.
HKCR\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key deleted successfully.
HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} => Key deleted successfully.
HKCR\CLSID\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} => Key deleted successfully.
HKCR\CLSID\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => Value deleted successfully.
HKCR\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} => Value deleted successfully.
HKCR\CLSID\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} => Value deleted successfully.
HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} => Value deleted successfully.
HKCR\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} => Value deleted successfully.
HKCR\CLSID\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} => Key not found.
HKCR\PROTOCOLS\Handler\Handler: ms-help - No CLSID Value - => Key not found.
HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => Value deleted successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje => Key deleted successfully.
"C:\Program Files\DealPly\DealPly.crx" => File/Directory not found.
HKCU\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje => Key deleted successfully.
"C:\Program Files\DealPly\DealPly.crx" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0815B847-3C5B-4100-938F-7C859142ED2A} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0815B847-3C5B-4100-938F-7C859142ED2A} => Key deleted successfully.
C:\Windows\System32\Tasks\{57E19804-1F99-477D-BBED-2BC9847DDC83} => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{57E19804-1F99-477D-BBED-2BC9847DDC83} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{26FC5F4F-ACD0-462A-827A-7F211C282DDC} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{26FC5F4F-ACD0-462A-827A-7F211C282DDC} => Key deleted successfully.
C:\Windows\System32\Tasks\{077458E5-B0F5-4793-9D41-BAC0D5B777B5} => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{077458E5-B0F5-4793-9D41-BAC0D5B777B5} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7105FD43-4B16-4B9E-8B4F-9608F1099605} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7105FD43-4B16-4B9E-8B4F-9608F1099605} => Key deleted successfully.
C:\Windows\System32\Tasks\{AB6999B1-03BF-4FC9-9E1F-9451023324C9} => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AB6999B1-03BF-4FC9-9E1F-9451023324C9} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{740D64FD-F613-45E6-85E2-05FD8EF94D86} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{740D64FD-F613-45E6-85E2-05FD8EF94D86} => Key deleted successfully.
C:\Windows\System32\Tasks\{7AABB91D-4016-46ED-A9D2-FB56AB88ACAC} => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7AABB91D-4016-46ED-A9D2-FB56AB88ACAC} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9691F0CF-F969-49B8-8485-657AFA3B0BA3} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9691F0CF-F969-49B8-8485-657AFA3B0BA3} => Key deleted successfully.
C:\Windows\System32\Tasks\{D822C48D-C79E-40CC-89A2-1DDA32F7FC74} => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D822C48D-C79E-40CC-89A2-1DDA32F7FC74} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A87F5729-71E7-4802-AF09-994CC8A055A2} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A87F5729-71E7-4802-AF09-994CC8A055A2} => Key deleted successfully.
C:\Windows\System32\Tasks\DealPly => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPly => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DDF37441-989D-49C6-9455-510A3FB8F2E0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DDF37441-989D-49C6-9455-510A3FB8F2E0} => Key deleted successfully.
C:\Windows\System32\Tasks\{B430DBA3-F456-4B67-8056-D5FF90A07A77} => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B430DBA3-F456-4B67-8056-D5FF90A07A77} => Key deleted successfully.
C:\Program Files\Mozilla Firefox\searchplugins => Moved successfully.
C:\ProgramData\*.exe => Moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly => Moved successfully.
C:\Users\Mateusz\AppData\Local\cache => Moved successfully.
C:\Users\Mateusz\AppData\Roaming\*.exe => Moved successfully.
C:\Users\Mateusz\AppData\Roaming\newnext.me => Moved successfully.
C:\Users\Mateusz\AppData\Roaming\OpenCandy => Moved successfully.
C:\Users\Mateusz\Desktop\NATALA\MOJEEEEE\Mobogenie.lnk => Moved successfully.
C:\Users\Mateusz\Downloads\*.part => Moved successfully.
C:\Windows\system32\Drivers\tStLibG.sys => Moved successfully.
C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully.

========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Search" /f =========

Operacja ukoäczona pomy˜lnie.



========= End of Reg: =========


========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f =========