Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:19-08-2014 Ran by użytkownik at 2014-08-21 10:56:44 Run:1 Running from F:\Pobierane pliki Boot Mode: Normal ============================================== Content of fixlist: ***************** R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt; C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys [55224 2014-05-24] (StdLib) C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys S3 gdrv; \??\C:\WINDOWS\gdrv.sys [X] S3 StarOpen; No ImagePath HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1401005059&from=cor&uid=WDCXWD1600AAJS-00PSA0_WD-WMAP9144668346683&q={searchTerms} SearchScopes: HKCU - {9EFF213E-EE6E-4319-9735-E6D65723236A} URL = http://www.google.com/cse?cx=partner-pub-3794288947762788%3A4067623346&ie=UTF-8&q={searchTerms}&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A4067623346 Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\searchplugins\avg-secure-search.xml C:\Program Files\Mozilla Firefox\extensions C:\Program Files\mozilla firefox\plugins C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension AV: AVG Anti-Virus Free Edition 2012 (Disabled - Up to date) {17DDD097-36FF-435F-9E1B-52D74245D6BF} Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sweet-page uninstaller" /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f EmptyTemp: ***************** {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt => Unable to stop service {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt => Service deleted successfully. C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys => Moved successfully. gdrv => Service deleted successfully. StarOpen => Service deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9EFF213E-EE6E-4319-9735-E6D65723236A}" => Key not found. "HKCR\CLSID\{9EFF213E-EE6E-4319-9735-E6D65723236A}" => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => value deleted successfully. "HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}" => Key deleted successfully. HKLM\Software\Mozilla\Firefox\Extensions\\jqs@sun.com => value deleted successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => value deleted successfully. C:\Documents and Settings\użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\gaymxknm.default\searchplugins\avg-secure-search.xml => Moved successfully. C:\Program Files\Mozilla Firefox\extensions => Moved successfully. C:\Program Files\mozilla firefox\plugins => Moved successfully. C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully. AV: AVG Anti-Virus Free Edition 2012 (Disabled - Up to date) {17DDD097-36FF-435F-9E1B-52D74245D6BF} => The item is protected. Make sure the software is uninstalled and its services are removed. ========= reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sweet-page uninstaller" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= EmptyTemp: => Removed 578.5 MB temporary data. The system needed a reboot. ==== End of Fixlog ====