Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 26-04-2014 03 Ran by apple3 at 2014-04-27 11:34:59 Run:1 Running from C:\Documents and Settings\apple3\Pulpit\INSTALKI\fixit Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe Task: C:\WINDOWS\Tasks\At1.job => C:\DOCUME~1\apple3\DANEAP~1\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\WINDOWS\Tasks\At2.job => C:\DOCUME~1\NETWOR~1\DANEAP~1\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\WINDOWS\Tasks\ROC_JAN2013_TB_rmv.job => C:\Program Files\AVG Secure Search\PostInstall\ROC.exe HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {E0330E2C-F2B2-478F-B629-4EE252F5065A} URL = http://startsear.ch/?aff=1&src=sp&cf=edaa28ae-d9b0-11e1-94db-002608d91702&q={searchTerms} SearchScopes: HKCU - DefaultScope 6F09D7F7060E4EAAB00D19067F92DCC9 URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=081F00FF8894748A&affID=125032&tsp=5033 SearchScopes: HKCU - 6F09D7F7060E4EAAB00D19067F92DCC9 URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=081F00FF8894748A&affID=125032&tsp=5033 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {C0FDD538-41A0-44FE-9E0F-8EA45DA09E22} URL = http://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11406&pf=V7&p2=^BBE^OSJ000^YY^PL&gct=sb&itbv=12.10.3.34&apn_uid=DBD0480D-8181-4B71-A2FA-73F313B1D5BC&apn_ptnrs=BBE&apn_dtid=^OSJ000^YY^PL&apn_dbr=ie_8.0.6001.18702&doi=2014-03-18&trgb=IE&q={searchTerms}&psv= SearchScopes: HKCU - {E0330E2C-F2B2-478F-B629-4EE252F5065A} URL = http://startsear.ch/?aff=1&src=sp&cf=edaa28ae-d9b0-11e1-94db-002608d91702&q={searchTerms} BHO: IEPluginBHO Class - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10\_userdata\ggbho.2.dll No File Toolbar: HKCU - No Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - No File DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S2 zumbus; system32\DRIVERS\zumbus.sys [X] C:\Documents and Settings\All Users\Dane aplikacji\188F1432-103A-4ffb-80F1-36B633C5C9E1 C:\Documents and Settings\All Users\Dane aplikacji\APN C:\Documents and Settings\All Users\Dane aplikacji\Common Files C:\Documents and Settings\All Users\Dane aplikacji\MFAData C:\Documents and Settings\All Users\Dane aplikacji\WPM C:\Documents and Settings\apple3\Dane aplikacji\SupTab C:\Program Files\Mozilla Firefox\extensions C:\Program Files\mozilla firefox\plugins C:\Program Files\Enigma Software Group C:\WINDOWS\455F074C814E4520B69B5584BD90400C.TMP Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ***************** C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => Moved successfully. C:\WINDOWS\Tasks\At1.job => Moved successfully. C:\WINDOWS\Tasks\At2.job => Moved successfully. C:\WINDOWS\Tasks\ROC_JAN2013_TB_rmv.job => Moved successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E0330E2C-F2B2-478F-B629-4EE252F5065A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{E0330E2C-F2B2-478F-B629-4EE252F5065A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\6F09D7F7060E4EAAB00D19067F92DCC9 => Key deleted successfully. HKCR\Wow6432Node\CLSID\6F09D7F7060E4EAAB00D19067F92DCC9 => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C0FDD538-41A0-44FE-9E0F-8EA45DA09E22} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{C0FDD538-41A0-44FE-9E0F-8EA45DA09E22} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E0330E2C-F2B2-478F-B629-4EE252F5065A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{E0330E2C-F2B2-478F-B629-4EE252F5065A} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} => Key deleted successfully. HKCR\CLSID\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4F524A2D-5637-4300-76A7-7A786E7484D7} => Value deleted successfully. HKCR\CLSID\{4F524A2D-5637-4300-76A7-7A786E7484D7} => Key not found. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{68282C51-9459-467B-95BF-3C0E89627E55} => Key deleted successfully. HKCR\CLSID\{68282C51-9459-467B-95BF-3C0E89627E55} => Key deleted successfully. esgiguard => Service deleted successfully. ewusbnet => Service deleted successfully. ew_hwusbdev => Service deleted successfully. huawei_enumerator => Service deleted successfully. hwdatacard => Service deleted successfully. zumbus => Service deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\188F1432-103A-4ffb-80F1-36B633C5C9E1 => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\APN => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Common Files => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\WPM => Moved successfully. C:\Documents and Settings\apple3\Dane aplikacji\SupTab => Moved successfully. C:\Program Files\Mozilla Firefox\extensions => Moved successfully. C:\Program Files\Mozilla Firefox\plugins => Moved successfully. C:\Program Files\Enigma Software Group => Moved successfully. "C:\WINDOWS\455F074C814E4520B69B5584BD90400C.TMP" => File/Directory not found. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ==== End of Fixlog ====