Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-07-2014 01 Ran by Abi at 2014-08-01 18:31:37 Run:1 Running from C:\Users\Abi\Desktop\Nowy folder Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {653C5B11-BAA9-4161-862F-E9883E0B6AB8} - System32\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4 => C:\Program Files (x86)\P-HD-V1.4\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4.exe [2014-07-17] (P-HD) <==== ATTENTION Task: {A8A47D0B-9AC6-49C7-B980-814239119846} - System32\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11 => C:\Program Files (x86)\P-HD-V1.4\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11.exe [2014-07-17] (P-HD) <==== ATTENTION Task: {AFB2825A-811D-4926-A51E-BBB82B92E855} - System32\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3 => C:\Program Files (x86)\P-HD-V1.4\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3.exe [2014-07-17] (P-HD) <==== ATTENTION Task: {C697B381-4833-415D-A3FD-CAAA38D7E787} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION Task: {E237FB0B-F2A1-4FE7-9198-A5E4CCD4398D} - \5cb9b097-d74b-44f5-a55d-7af3d7a7e7ea-11 No Task File <==== ATTENTION Task: C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11.job => C:\Program Files (x86)\P-HD-V1.4\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11.exe <==== ATTENTION Task: C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3.job => C:\Program Files (x86)\P-HD-V1.4\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3.exe <==== ATTENTION Task: C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4.job => C:\Program Files (x86)\P-HD-V1.4\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: {F5986409-40E2-47F5-B5E1-7187EB0C907C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001UA => C:\Users\Abi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-13] (Facebook Inc.) Task: {F5FB97AD-E632-4894-A338-B1D28553F7E1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001Core => C:\Users\Abi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-13] (Facebook Inc.) Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001Core.job => C:\Users\Abi\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001UA.job => C:\Users\Abi\AppData\Local\Facebook\Update\FacebookUpdate.exe () C:\ProgramData\IBUpdaterService\ibsvc.exe HKLM-x32\...\Run: [tuto4pc_pl_5] => [X] HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/...0&ts=1370266894 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/...0&ts=1370266894 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/...0&ts=1370266894 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/...0&ts=1370266894 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/...0&ts=1370266894 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com/...0&ts=1370266894 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.c...N9470N9470&ts=0 SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.c...N9470N9470&ts=0 SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.c...N9470N9470&ts=0 SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.c...N9470N9470&ts=0 SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.c...N9470N9470&ts=0 SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-se...119676&tsp=4971 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.c...N9470N9470&ts=0 BHO: grreatsaver -> {BE84127E-28DF-A836-D6CC-6C621D810140} -> C:\Program Files (x86)\grreatsaver\2I.x64.dll () BHO-x32: grreatsaver -> {BE84127E-28DF-A836-D6CC-6C621D810140} -> C:\Program Files (x86)\grreatsaver\2I.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1212152.dll No File FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File Task: {D74C80F5-9717-4B3B-A6C9-87AA40C1FEA7} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe Task: {822EC145-73BC-4289-8F79-87204CCD3A7B} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe FF user.js: detected! => C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\user.js FF SearchPlugin: C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\searchplugins\babylon.xml FF Extension: General Crawler - C:\Users\Abi\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com [2013-06-03] FF Extension: P-HD-V1.4 - C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\508d4e2f-a469-421d-a294-135dbb84fe1b@f7b17943-cc9e-4d4a-b223-0bd1e7cfc871.com [2014-07-17] FF Extension: 7Go - C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\7go@7go.com.xpi [2013-10-07] FF Extension: PlusWinks - C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\pluswinks@PlusWinks.xpi [2013-07-20] FF Extension: BonanzaDeals - C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}.xpi [2014-01-01] Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (No Name) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blelaljgakacjdeaggpjilljobdmboff [2014-07-21] FF Extension: GoPhotoIt - C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\gophoto@gophoto.it.xpi CHR HKLM-x32\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Users\Abi\AppData\Roaming\7go\7go.crx [2013-07-30] CHR HKLM-x32\...\Chrome\Extension: [mocblcnaofikinigmceddfghppkkjbog] - C:\Users\Abi\AppData\Roaming\PlusWinks\PlusWinks.crx [2013-05-30] CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /svc [X] S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /medsvc [X] R2 IBUpdaterService; C:\ProgramData\IBUpdaterService\ibsvc.exe R4 kl1; system32\DRIVERS\kl1.sys [X] R4 KLIF; system32\DRIVERS\klif.sys [X] R4 klkbdflt; system32\DRIVERS\klkbdflt.sys [X] R4 klmouflt; system32\DRIVERS\klmouflt.sys [X] R4 kltdi; system32\DRIVERS\kltdi.sys [X] R4 kneps; system32\DRIVERS\kneps.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4.job C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11.job C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3.job C:\Windows\Tasks\5cb9b097-d74b-44f5-a55d-7af3d7a7e7ea-11.job C:\Users\Abi\AppData\Local\Temp\6_Offer_6.exe C:\Users\Abi\AppData\Local\Temp\c0dgfv0w.dll C:\Users\Abi\AppData\Local\Temp\DownloadManager.exe C:\Users\Abi\AppData\Local\Temp\Shockwave_Installer_FF.exe ShortcutWithArgument: C:\Users\Abi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox 3 Beta 4.lnk -> C:\Program Files (x86)\Mozilla Firefox 3 Beta 4\firefox.exe (Mozilla Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=WDCXWD5000BEVT-24A0RT0_WD-WXH1A80N9470N9470&ts=1370266894 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox 3 Beta 4\firefox.exe (Mozilla Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=WDCXWD5000BEVT-24A0RT0_WD-WXH1A80N9470N9470&ts=1370266894 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 3 Beta 4\Mozilla Firefox (Tryb awaryjny).lnk -> C:\Program Files (x86)\Mozilla Firefox 3 Beta 4\firefox.exe (Mozilla Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=WDCXWD5000BEVT-24A0RT0_WD-WXH1A80N9470N9470&ts=1370266894 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 3 Beta 4\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox 3 Beta 4\firefox.exe (Mozilla Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=WDCXWD5000BEVT-24A0RT0_WD-WXH1A80N9470N9470&ts=1370266894 Reboot: ***************** "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{653C5B11-BAA9-4161-862F-E9883E0B6AB8}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{653C5B11-BAA9-4161-862F-E9883E0B6AB8}" => Key deleted successfully. C:\Windows\System32\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A8A47D0B-9AC6-49C7-B980-814239119846}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A8A47D0B-9AC6-49C7-B980-814239119846}" => Key deleted successfully. C:\Windows\System32\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AFB2825A-811D-4926-A51E-BBB82B92E855}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AFB2825A-811D-4926-A51E-BBB82B92E855}" => Key deleted successfully. C:\Windows\System32\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C697B381-4833-415D-A3FD-CAAA38D7E787}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C697B381-4833-415D-A3FD-CAAA38D7E787}" => Key deleted successfully. C:\Windows\System32\Tasks\Desk 365 RunAsStdUser => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E237FB0B-F2A1-4FE7-9198-A5E4CCD4398D}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E237FB0B-F2A1-4FE7-9198-A5E4CCD4398D}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\5cb9b097-d74b-44f5-a55d-7af3d7a7e7ea-11" => Key deleted successfully. C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11.job not found. C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3.job not found. C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4.job not found. C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Moved successfully. C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F5986409-40E2-47F5-B5E1-7187EB0C907C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5986409-40E2-47F5-B5E1-7187EB0C907C}" => Key deleted successfully. C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001UA => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001UA" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F5FB97AD-E632-4894-A338-B1D28553F7E1}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5FB97AD-E632-4894-A338-B1D28553F7E1}" => Key deleted successfully. C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001Core => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001Core" => Key deleted successfully. C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001Core.job => Moved successfully. C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2373459085-1094487338-3103877305-1001UA.job => Moved successfully. C:\ProgramData\IBUpdaterService\ibsvc.exe => No running process found HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\tuto4pc_pl_5 => value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. "HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key deleted successfully. "HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. "HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BE84127E-28DF-A836-D6CC-6C621D810140}" => Key deleted successfully. "HKCR\CLSID\{BE84127E-28DF-A836-D6CC-6C621D810140}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BE84127E-28DF-A836-D6CC-6C621D810140}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{BE84127E-28DF-A836-D6CC-6C621D810140}" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer" => Key deleted successfully. C:\Windows\system32\Adobe\Director\np32dsw_1212152.dll not found. "HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10" => Key deleted successfully. C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll not found. "HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4" => Key deleted successfully. C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D74C80F5-9717-4B3B-A6C9-87AA40C1FEA7}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D74C80F5-9717-4B3B-A6C9-87AA40C1FEA7}" => Key deleted successfully. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{822EC145-73BC-4289-8F79-87204CCD3A7B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{822EC145-73BC-4289-8F79-87204CCD3A7B}" => Key deleted successfully. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key deleted successfully. C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\user.js => Moved successfully. C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\searchplugins\babylon.xml => Moved successfully. C:\Users\Abi\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com => Moved successfully. C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\508d4e2f-a469-421d-a294-135dbb84fe1b@f7b17943-cc9e-4d4a-b223-0bd1e7cfc871.com not found. C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\7go@7go.com.xpi not found. C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\pluswinks@PlusWinks.xpi => Moved successfully. C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}.xpi => Moved successfully. Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION => Error: No automatic fix found for this entry. C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blelaljgakacjdeaggpjilljobdmboff => Moved successfully. FF Extension: GoPhotoIt - C:\Users\Abi\AppData\Roaming\Mozilla\Firefox\Profiles\kcm40lfr.default\Extensions\gophoto@gophoto.it.xpi not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gjajpkikblccgefaibcafkfbanllpefi" => Key deleted successfully. C:\Users\Abi\AppData\Roaming\7go\7go.crx => Moved successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mocblcnaofikinigmceddfghppkkjbog" => Key deleted successfully. C:\Users\Abi\AppData\Roaming\PlusWinks\PlusWinks.crx => Moved successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk" => Key deleted successfully. "CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx" => File/Directory not found. globalUpdate => Service deleted successfully. globalUpdatem => Service deleted successfully. IBUpdaterService => Service not found. kl1 => Service not found. KLIF => Service not found. klkbdflt => Service not found. klmouflt => Service not found. kltdi => Service not found. kneps => Service not found. VGPU => Service deleted successfully. "C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-4.job" => File/Directory not found. "C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job" => File/Directory not found. "C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job" => File/Directory not found. "C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-11.job" => File/Directory not found. "C:\Windows\Tasks\aa0c88a0-b2ee-4822-8fc3-7799d68112b0-3.job" => File/Directory not found. C:\Windows\Tasks\5cb9b097-d74b-44f5-a55d-7af3d7a7e7ea-11.job => Moved successfully. C:\Users\Abi\AppData\Local\Temp\6_Offer_6.exe => Moved successfully. C:\Users\Abi\AppData\Local\Temp\c0dgfv0w.dll => Moved successfully. C:\Users\Abi\AppData\Local\Temp\DownloadManager.exe => Moved successfully. C:\Users\Abi\AppData\Local\Temp\Shockwave_Installer_FF.exe => Moved successfully. C:\Users\Abi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox 3 Beta 4.lnk => Shortcut argument was removed successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk => Shortcut argument was removed successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 3 Beta 4\Mozilla Firefox (Tryb awaryjny).lnk => Shortcut argument was removed successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 3 Beta 4\Mozilla Firefox.lnk => Shortcut argument was removed successfully. The system needed a reboot. ==== End of Fixlog ====