Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:05-07-2014 Ran by Administrator at 2014-07-08 19:42:17 Run:1 Running from C:\Documents and Settings\Administrator\Pulpit Boot Mode: Normal ============================================== Content of fixlist: ***************** RemoveDirectory: C:\RECYCLER SearchScopes: HKCU - DefaultScope {194E6D17-B12F-4c39-8E03-07F49FE499E8} URL = SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File Toolbar: HKLM - No Name - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File FF Plugin: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nppl3260.dll No File FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nppl3260.dll No File FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nprpjplug.dll No File FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nprpjplug.dll No File FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml FF Extension: QuickStores-Toolbar - C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de [2014-06-18] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-10-19] HKLM\...\Run: [UnlockerAssistant] => "C:\Program Files\Unlocker\UnlockerAssistant.exe" S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 gdrv; \??\C:\WINDOWS\gdrv.sys [X] C:\Documents and Settings\Administrator\YYYY C:\Documents and Settings\Administrator\Dane aplikacji\Babylon C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software C:\Documents and Settings\All Users\Dane aplikacji\Babylon C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess C:\Documents and Settings\All Users\Dane aplikacji\CPA_VA C:\Documents and Settings\All Users\Dane aplikacji\SafetyNut C:\Documents and Settings\LocalService\Dane aplikacji\GeekBuddyRSP C:\WINDOWS\4FC9DA9DF608454E8191D7EFFDCC5726.TMP C:\WINDOWS\System32\drivers\aswVmm.sys.sum C:\WINDOWS\System32\drivers\aswSP.sys.sum C:\WINDOWS\System32\drivers\aswSnx.sys.sum CMD: sc config ERSvc start= disabled CMD: sc config hpqddsvc start= disabled ***************** "C:\RECYCLER" => removed successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}' => Key deleted successfully. 'HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}'=> Key not found. 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}' => Key deleted successfully. 'HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}' => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => value deleted successfully. 'HKCR\CLSID\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}'=> Key not found. 'HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852' => Key deleted successfully. C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nppl3260.dll not found. 'HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46' => Key deleted successfully. C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nppl3260.dll not found. 'HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662' => Key deleted successfully. C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nprpjplug.dll not found. 'HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46' => Key deleted successfully. C:\Program Files\McFunSoft Video Capture Convert Burn Solution\codec\real\browser\plugins\nprpjplug.dll not found. C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml => Moved successfully. C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de => Moved successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => value deleted successfully. C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\UnlockerAssistant => value deleted successfully. EagleXNt => Service deleted successfully. esgiguard => Service deleted successfully. gdrv => Service deleted successfully. C:\Documents and Settings\Administrator\YYYY => Moved successfully. C:\Documents and Settings\Administrator\Dane aplikacji\Babylon => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Babylon => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\CPA_VA => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\SafetyNut => Moved successfully. C:\Documents and Settings\LocalService\Dane aplikacji\GeekBuddyRSP => Moved successfully. C:\WINDOWS\4FC9DA9DF608454E8191D7EFFDCC5726.TMP => Moved successfully. C:\WINDOWS\System32\drivers\aswVmm.sys.sum => Moved successfully. C:\WINDOWS\System32\drivers\aswSP.sys.sum => Moved successfully. C:\WINDOWS\System32\drivers\aswSnx.sys.sum => Moved successfully. ========= sc config ERSvc start= disabled ========= [SC] ChangeServiceConfig SUCCESS ========= End of CMD: ========= ========= sc config hpqddsvc start= disabled ========= [SC] ChangeServiceConfig SUCCESS ========= End of CMD: ========= ==== End of Fixlog ====