Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-04-2014 Ran by Krystian at 2014-04-24 08:41:44 Run:1 Running from C:\Users\Krystian\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** R1 wStLibG64; C:\Windows\System32\drivers\wStLibG64.sys [61120 2014-04-18] (StdLib) S2 Update Jump Flip; C:\Program Files (x86)\Jump Flip\updateJumpFlip.exe [350496 2014-04-21] () S2 Util Jump Flip; C:\Program Files (x86)\Jump Flip\bin\utilJumpFlip.exe [350496 2014-04-21] () HKU\S-1-5-21-81588081-3447371820-785248835-1000\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Krystian\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l HKU\S-1-5-21-81588081-3447371820-785248835-1000\...\Run: [iLivid] => "C:\Users\Krystian\AppData\Local\iLivid\iLivid.exe" -autorun SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=444F20CF3024A2BF&affID=119357&tsp=4994 BHO-x32: Jump Flip - {6db9fdfe-b718-4962-be0c-0a5fce7f7f7b} - C:\Program Files (x86)\Jump Flip\JumpFlipbho.dll () C:\Windows\System32\drivers\wStLibG64.sys C:\Users\Krystian\AppData\Roaming\Babylon C:\Users\Krystian\AppData\Roaming\newnext.me C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnTBMon" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Facebook Update" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mobilegeni daemon" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ooVoo.exe" /f Reboot: ***************** wStLibG64 => Unable to stop service wStLibG64 => Service deleted successfully. Update Jump Flip => Service deleted successfully. Util Jump Flip => Service deleted successfully. HKU\S-1-5-21-81588081-3447371820-785248835-1000\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive => Value deleted successfully. HKU\S-1-5-21-81588081-3447371820-785248835-1000\Software\Microsoft\Windows\CurrentVersion\Run\\iLivid => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6db9fdfe-b718-4962-be0c-0a5fce7f7f7b} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{6db9fdfe-b718-4962-be0c-0a5fce7f7f7b} => Key deleted successfully. C:\Windows\System32\drivers\wStLibG64.sys => Moved successfully. C:\Users\Krystian\AppData\Roaming\Babylon => Moved successfully. C:\Users\Krystian\AppData\Roaming\newnext.me => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X => Moved successfully. ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnTBMon" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Facebook Update" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mobilegeni daemon" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ooVoo.exe" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====