Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-04-2014 Ran by Marek Atłachowicz at 2014-04-24 14:55:40 Run:1 Running from C:\Users\Marek Atłachowicz\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** (Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe (Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe () C:\Users\Marek Atłachowicz\AppData\Local\UpdateChecker\UpdateCheckerApp.exe () C:\Program Files (x86)\qualitink\updatequalitink.exe () C:\Program Files (x86)\qualitink\bin\utilqualitink.exe () C:\Program Files (x86)\qualitink\bin\FilterApp_C64.exe () C:\Users\Marek Atłachowicz\Desktop\AdwCleaner.exe (OldTimer Tools) C:\Windows\SysWOW64\OTL.exe R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED) R2 Update qualitink; C:\Program Files (x86)\qualitink\updatequalitink.exe [350496 2014-04-24] () R2 Util qualitink; C:\Program Files (x86)\qualitink\bin\utilqualitink.exe [350496 2014-04-24] () R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [496640 2014-03-25] (Cherished Technololgy LIMITED) R1 wStLib64; C:\Windows\System32\drivers\wStLib64.sys [61112 2014-03-18] (StdLib) S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [X] S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] HKU\S-1-5-21-2042052474-958444054-2180519110-1001\...\Run: [UpdateChecker] => C:\Users\Marek Atłachowicz\AppData\Local\UpdateChecker\UpdateCheckerApp.exe [7168 2014-02-18] () HKU\S-1-5-21-2042052474-958444054-2180519110-1001\...\CurrentVersion\Windows: [Load] C:\Users\MAREKA~1\LOCALS~1\Temp\msveibk.bat <===== ATTENTION AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => "C:\PROGRA~2\SupTab\SEARCH~1.DLL" File Not Found ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk -> C:\Program Files (x86)\Opera\opera.exe (Opera Software) -> hxxp://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 ShortcutWithArgument: C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 ShortcutWithArgument: C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 ShortcutWithArgument: C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 ShortcutWithArgument: C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera12.11 1661.lnk -> C:\Program Files (x86)\Opera\opera.exe (Opera Software) -> hxxp://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 HKCU\Software\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://search.babylon.com/?AF=100482&babsrc=HP_ss&mntrId=d28af13a000000000000889ffad6cdba HKCU\Software\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com/?affID=44444&tt=3712_7&babsrc=HP_ss&mntrId=d28af13a000000000000889ffad6cdba HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=D28A889FFAD6CDBA&affID=119357&tt=200813_246&tsp=4982 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1395710801&from=cor&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1395710801&from=cor&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1395710801&from=cor&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&q={searchTerms} URLSearchHook: HKCU - (No Name) - {1283e7d0-b598-4b2d-a20f-59a9dde270a8} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1395710801&from=cor&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1395710801&from=cor&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&q={searchTerms} SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1Qzuzzzzzy0F0F0A0DyC0C0D0B0A0FtCtA0AtN0D0Tzu0CtByEtDtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1429869957 SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&appid=418&systemid=406&sr=0&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} SearchScopes: HKLM-x32 - {19C2172F-A98A-47CA-B5E4-2449B0613155} URL = ${SEARCH_URL}{searchTerms} SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1Qzuzzzzzy0F0F0A0DyC0C0D0B0A0FtCtA0AtN0D0Tzu0CtByEtDtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1429869957 SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&appid=418&systemid=406&sr=0&q={searchTerms} SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3065462 SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - Backup.Old.DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - BrowserMngrDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=44444&tt=3712_7&babsrc=SP_ss&mntrId=d28af13a000000000000889ffad6cdba SearchScopes: HKCU - {1688462A-7C5E-9A81-82BF-21CF6B487D4C} URL = http://search.babylon.com/?q={searchTerms}&AF=100482&babsrc=SP_ss&mntrId=d28af13a000000000000889ffad6cdba SearchScopes: HKCU - {19C2172F-A98A-47CA-B5E4-2449B0613155} URL = http://search.babylon.com/?q={searchTerms}&affID=44444&tt=3712_7&babsrc=SP_ss&mntrId=d28af13a000000000000889ffad6cdba SearchScopes: HKCU - {2CFD01E7-33FC-4403-BD2E-63EAC360CA74} URL = http://search.babylon.com/?q={searchTerms}&affID=44444&tt=3712_7&babsrc=SP_ss&mntrId=d28af13a000000000000889ffad6cdba SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKCU - {61651822-E4E3-4D72-BEC9-DA18DD9223A5} URL = http://websearch.ask.com/redirect?client=ie&tb=VDJ&o=41647960&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=8R&apn_dtid=YYYYYYYYPL&apn_uid=C7AB60FF-D641-4F2A-8213-16966CFAE21B&apn_sauid=E49EB9E2-2F51-4C3B-A8B5-6E0B460FF5D9 SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&appid=418&systemid=406&sr=0&q={searchTerms} SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3065462 SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC8} URL = http://search.icq.com/search/results.php?q=%s&ch_id=hm&search_mode=web BHO: HDvid Codec V1 - {11111111-1111-1111-1111-110311431162} - C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-bho64.dll (installdaddy) BHO: HDvid-Codec V9.0 - {11111111-1111-1111-1111-110511131156} - C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-bho64.dll (installdaddy) BHO-x32: HDvid Codec V1 - {11111111-1111-1111-1111-110311431162} - C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-bho.dll (installdaddy) BHO-x32: HDvid-Codec V9.0 - {11111111-1111-1111-1111-110511131156} - C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-bho.dll (installdaddy) Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File Toolbar: HKCU - No Name - {1283E7D0-B598-4B2D-A20F-59A9DDE270A8} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.dosearches.com/?utm_source=b&utm_medium=ild&utm_campaign=rg&utm_content=sc&from=ild&uid=ST9500325AS_5VEEXTPPXXXX5VEEXTPP&ts=1383683058 CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\MAREKA~1\AppData\Local\funmoods.crx [2012-08-27] CHR HKCU\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\MAREKA~1\AppData\Local\funmoods.crx [2012-08-27] CHR HKLM-x32\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\MAREKA~1\AppData\Local\funmoods.crx [2012-08-27] CHR HKLM-x32\...\Chrome\Extension: [dnllcmllkjofnojidnaknldfehfhehoo] - C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx [2013-06-30] CHR HKLM-x32\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files (x86)\WebCake\WebCakeLayers.crx [2013-06-27] CHR HKLM-x32\...\Chrome\Extension: [hfimjncgpflkpkhbnnblhblobjjjhjhd] - C:\Program Files (x86)\qualitink\hfimjncgpflkpkhbnnblhblobjjjhjhd.crx [2013-06-27] CHR HKLM-x32\...\Chrome\Extension: [kkfggacklibaabdomphfdpcodjgihgon] - C:\Program Files (x86)\LSHunter.TV\stv10.crx [2012-07-26] CHR HKLM-x32\...\Chrome\Extension: [ljkcijnbckdflhifmbnfnkjacokloacf] - C:\Program Files (x86)\qualitink\ljkcijnbckdflhifmbnfnkjacokloacf.crx [2012-07-26] CHR HKLM-x32\...\Chrome\Extension: [pbiamblgmkgbcgbcgejjgebalncpmhnp] - C:\Program Files (x86)\LiveVDO plugin\livevdoplg.crx [2012-10-29] Task: {0B052B62-4F1A-4511-AB57-B913DF61F2E6} - System32\Tasks\HDvid-Codec V9.0-updater => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-updater.exe Task: {1795E28D-9849-4C72-8088-9B2DC9D62F8F} - System32\Tasks\HDvid-Codec V9.0-firefoxinstaller => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-firefoxinstaller.exe Task: {5210279E-6033-46B8-9460-6FD4F7FC2B5E} - System32\Tasks\HDvid Codec V1-codedownloader => C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-codedownloader.exe [2013-11-05] (installdaddy) <==== ATTENTION Task: {724F422E-C159-4B3B-A419-81AEAA97E9B1} - System32\Tasks\HDvid-Codec V9.0-chromeinstaller => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-chromeinstaller.exe Task: {8BA9B5D6-E34E-499D-8BA3-9F6B44937F3D} - System32\Tasks\{AD586DCB-7B06-4581-A025-A2EAA16866EC} => C:\Program Files (x86)\VirtualDJ\virtualdj_pro.exe Task: {8E4A541B-3093-477C-8013-500B9F0B7CC5} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert <==== ATTENTION Task: {D8017D7D-D1B9-4493-A740-5696D70EECF1} - System32\Tasks\HDvid-Codec V9.0-enabler => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-enabler.exe Task: {E4755615-787A-471D-A2A4-2E1BB0A713F1} - System32\Tasks\HDvid-Codec V9.0-codedownloader => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-codedownloader.exe Task: {F80D669D-B718-4DAC-AFD8-866F378EC00C} - System32\Tasks\HDvid Codec V1-updater => C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-updater.exe <==== ATTENTION Task: {FD689D2A-A169-4B3C-ACD6-28A8FA6DD43E} - System32\Tasks\HDvid Codec V1-enabler => C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-enabler.exe <==== ATTENTION Task: C:\Windows\Tasks\HDvid Codec V1-codedownloader.job => C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-codedownloader.exe <==== ATTENTION Task: C:\Windows\Tasks\HDvid Codec V1-enabler.job => C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-enabler.exe <==== ATTENTION Task: C:\Windows\Tasks\HDvid Codec V1-updater.job => C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-updater.exe <==== ATTENTION Task: C:\Windows\Tasks\HDvid-Codec V9.0-chromeinstaller.job => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-chromeinstaller.exe Task: C:\Windows\Tasks\HDvid-Codec V9.0-codedownloader.job => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-codedownloader.exe Task: C:\Windows\Tasks\HDvid-Codec V9.0-enabler.job => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-enabler.exe Task: C:\Windows\Tasks\HDvid-Codec V9.0-firefoxinstaller.job => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-firefoxinstaller.exe Task: C:\Windows\Tasks\HDvid-Codec V9.0-updater.job => C:\Program Files (x86)\HDvid-Codec V9.0\HDvid-Codec V9.0-updater.exe C:\Program Files (x86)\mozilla firefox\plugins C:\Program Files (x86)\mozilla firefox\searchplugins C:\Program Files (x86)\LSHunter.TV C:\Program Files (x86)\WebCake C:\ProgramData\iolo C:\Users\Marek Atłachowicz\AppData\Roaming\Babylon C:\Users\Marek Atłachowicz\AppData\Roaming\iolo C:\Users\Marek Atłachowicz\AppData\Roaming\Movdap C:\Users\Marek Atłachowicz\AppData\Roaming\msnmsgr C:\Users\Marek Atłachowicz\AppData\Roaming\OpenCandy C:\Users\Marek Atłachowicz\AppData\Roaming\sweet-page C:\Users\Marek Atłachowicz\AppData\Roaming\WebCake C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTRAX C:\Windows\System32\drivers\wStLib64.sys C:\Windows\SysWOW64\OTL.exe C:\Windows\SysWOW64\RegFile3.txt C:\Windows\SysWOW64\sqlite3.dll Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reboot: ***************** [1476] C:\ProgramData\IePluginService\PluginService.exe => Process closed successfully. [1644] C:\ProgramData\WPM\wprotectmanager.exe => Process closed successfully. [4236] C:\Users\Marek Atłachowicz\AppData\Local\UpdateChecker\UpdateCheckerApp.exe => Process closed successfully. [2052] C:\Program Files (x86)\qualitink\updatequalitink.exe => Process closed successfully. [2288] C:\Program Files (x86)\qualitink\bin\utilqualitink.exe => Process closed successfully. [5328] C:\Program Files (x86)\qualitink\bin\FilterApp_C64.exe => Process closed successfully. C:\Users\Marek Atłachowicz\Desktop\AdwCleaner.exe => No running process found C:\Windows\SysWOW64\OTL.exe => No running process found IePluginService => Service deleted successfully. Update qualitink => Service deleted successfully. Util qualitink => Service deleted successfully. Wpm => Service deleted successfully. wStLib64 => Service stopped successfully. wStLib64 => Service deleted successfully. BootDefragDriver => Service deleted successfully. ewusbmbb => Service deleted successfully. hwdatacard => Service deleted successfully. HKU\S-1-5-21-2042052474-958444054-2180519110-1001\Software\Microsoft\Windows\CurrentVersion\Run\\UpdateChecker => Value deleted successfully. HKU\S-1-5-21-2042052474-958444054-2180519110-1001\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Error setting value. "C:\PROGRA~2\SupTab\SEARCH~2.DLL" => Value Data removed successfully. "C:\PROGRA~2\SupTab\SEARCH~1.DLL" => Value Data removed successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk => Shortcut argument was removed successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk => Shortcut argument was removed successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk => Shortcut argument was removed successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Shortcut argument was removed successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => Shortcut argument was removed successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk => Shortcut argument was removed successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera12.11 1661.lnk => Shortcut argument was removed successfully. C:\Users\Public\Desktop\Mozilla Firefox.lnk => Shortcut argument was removed successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Backup.Old.Start Page => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\BrowserMngr Start Page => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\bProtector Start Page => Value deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{1283e7d0-b598-4b2d-a20f-59a9dde270a8} => Value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully. HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\Backup.Old.DefaultScope => Value deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{19C2172F-A98A-47CA-B5E4-2449B0613155} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{19C2172F-A98A-47CA-B5E4-2449B0613155} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\Backup.Old.DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\BrowserMngrDefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1688462A-7C5E-9A81-82BF-21CF6B487D4C} => Key deleted successfully. HKCR\CLSID\{1688462A-7C5E-9A81-82BF-21CF6B487D4C} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{19C2172F-A98A-47CA-B5E4-2449B0613155} => Key deleted successfully. HKCR\CLSID\{19C2172F-A98A-47CA-B5E4-2449B0613155} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2CFD01E7-33FC-4403-BD2E-63EAC360CA74} => Key deleted successfully. HKCR\CLSID\{2CFD01E7-33FC-4403-BD2E-63EAC360CA74} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key deleted successfully. HKCR\CLSID\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{61651822-E4E3-4D72-BEC9-DA18DD9223A5} => Key deleted successfully. HKCR\CLSID\{61651822-E4E3-4D72-BEC9-DA18DD9223A5} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully. HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC8} => Key deleted successfully. HKCR\CLSID\{FFEBBF0A-C22C-4172-89FF-45215A135AC8} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431162} => Key deleted successfully. HKCR\CLSID\{11111111-1111-1111-1111-110311431162} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131156} => Key deleted successfully. HKCR\CLSID\{11111111-1111-1111-1111-110511131156} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431162} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431162} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131156} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110511131156} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{98889811-442D-49dd-99D7-DC866BE87DBC} => Value deleted successfully. HKCR\CLSID\!{98889811-442D-49dd-99D7-DC866BE87DBC} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1283E7D0-B598-4B2D-A20F-59A9DDE270A8} => Value deleted successfully. HKCR\CLSID\{1283E7D0-B598-4B2D-A20F-59A9DDE270A8} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully. HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh => Key deleted successfully. C:\Users\MAREKA~1\AppData\Local\funmoods.crx => Moved successfully. HKCU\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh => Key deleted successfully. "C:\Users\MAREKA~1\AppData\Local\funmoods.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh => Key deleted successfully. "C:\Users\MAREKA~1\AppData\Local\funmoods.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dnllcmllkjofnojidnaknldfehfhehoo => Key deleted successfully. C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh => Key deleted successfully. C:\Program Files (x86)\WebCake\WebCakeLayers.crx => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hfimjncgpflkpkhbnnblhblobjjjhjhd => Key deleted successfully. "C:\Program Files (x86)\qualitink\hfimjncgpflkpkhbnnblhblobjjjhjhd.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kkfggacklibaabdomphfdpcodjgihgon => Key deleted successfully. "C:\Program Files (x86)\LSHunter.TV\stv10.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ljkcijnbckdflhifmbnfnkjacokloacf => Key deleted successfully. "C:\Program Files (x86)\qualitink\ljkcijnbckdflhifmbnfnkjacokloacf.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp => Key deleted successfully. C:\Program Files (x86)\LiveVDO plugin\livevdoplg.crx => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0B052B62-4F1A-4511-AB57-B913DF61F2E6} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B052B62-4F1A-4511-AB57-B913DF61F2E6} => Key deleted successfully. C:\Windows\System32\Tasks\HDvid-Codec V9.0-updater => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HDvid-Codec V9.0-updater => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1795E28D-9849-4C72-8088-9B2DC9D62F8F} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1795E28D-9849-4C72-8088-9B2DC9D62F8F} => Key deleted successfully. C:\Windows\System32\Tasks\HDvid-Codec V9.0-firefoxinstaller => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HDvid-Codec V9.0-firefoxinstaller => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5210279E-6033-46B8-9460-6FD4F7FC2B5E} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5210279E-6033-46B8-9460-6FD4F7FC2B5E} => Key deleted successfully. C:\Windows\System32\Tasks\HDvid Codec V1-codedownloader => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HDvid Codec V1-codedownloader => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{724F422E-C159-4B3B-A419-81AEAA97E9B1} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{724F422E-C159-4B3B-A419-81AEAA97E9B1} => Key deleted successfully. C:\Windows\System32\Tasks\HDvid-Codec V9.0-chromeinstaller => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HDvid-Codec V9.0-chromeinstaller => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8BA9B5D6-E34E-499D-8BA3-9F6B44937F3D} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8BA9B5D6-E34E-499D-8BA3-9F6B44937F3D} => Key deleted successfully. C:\Windows\System32\Tasks\{AD586DCB-7B06-4581-A025-A2EAA16866EC} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AD586DCB-7B06-4581-A025-A2EAA16866EC} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8E4A541B-3093-477C-8013-500B9F0B7CC5} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E4A541B-3093-477C-8013-500B9F0B7CC5} => Key deleted successfully. C:\Windows\System32\Tasks\BrowserDefendert => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserDefendert => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D8017D7D-D1B9-4493-A740-5696D70EECF1} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8017D7D-D1B9-4493-A740-5696D70EECF1} => Key deleted successfully. C:\Windows\System32\Tasks\HDvid-Codec V9.0-enabler => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HDvid-Codec V9.0-enabler => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E4755615-787A-471D-A2A4-2E1BB0A713F1} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4755615-787A-471D-A2A4-2E1BB0A713F1} => Key deleted successfully. C:\Windows\System32\Tasks\HDvid-Codec V9.0-codedownloader => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HDvid-Codec V9.0-codedownloader => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F80D669D-B718-4DAC-AFD8-866F378EC00C} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F80D669D-B718-4DAC-AFD8-866F378EC00C} => Key deleted successfully. C:\Windows\System32\Tasks\HDvid Codec V1-updater => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HDvid Codec V1-updater => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FD689D2A-A169-4B3C-ACD6-28A8FA6DD43E} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD689D2A-A169-4B3C-ACD6-28A8FA6DD43E} => Key deleted successfully. C:\Windows\System32\Tasks\HDvid Codec V1-enabler => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HDvid Codec V1-enabler => Key deleted successfully. C:\Windows\Tasks\HDvid Codec V1-codedownloader.job => Moved successfully. C:\Windows\Tasks\HDvid Codec V1-enabler.job => Moved successfully. C:\Windows\Tasks\HDvid Codec V1-updater.job => Moved successfully. C:\Windows\Tasks\HDvid-Codec V9.0-chromeinstaller.job => Moved successfully. C:\Windows\Tasks\HDvid-Codec V9.0-codedownloader.job => Moved successfully. C:\Windows\Tasks\HDvid-Codec V9.0-enabler.job => Moved successfully. C:\Windows\Tasks\HDvid-Codec V9.0-firefoxinstaller.job => Moved successfully. C:\Windows\Tasks\HDvid-Codec V9.0-updater.job => Moved successfully. C:\Program Files (x86)\Mozilla Firefox\Plugins => Moved successfully. C:\Program Files (x86)\Mozilla Firefox\searchplugins => Moved successfully. "C:\Program Files (x86)\LSHunter.TV" => File/Directory not found. C:\Program Files (x86)\WebCake => Moved successfully. C:\ProgramData\iolo => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\Babylon => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\iolo => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\Movdap => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\msnmsgr => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\OpenCandy => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\sweet-page => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\WebCake => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com => Moved successfully. C:\Users\Marek Atłachowicz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTRAX => Moved successfully. C:\Windows\System32\drivers\wStLib64.sys => Moved successfully. C:\Windows\SysWOW64\OTL.exe => Moved successfully. C:\Windows\SysWOW64\RegFile3.txt => Moved successfully. C:\Windows\SysWOW64\sqlite3.dll => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====