Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 07-09-2014 Ran by Paweł at 2014-09-08 15:54:18 Run:2 Running from C:\Users\Paweł\Desktop\programy do analizy Boot Mode: Normal ============================================== Content of fixlist: ***************** Reg: reg query HKLM\SOFTWARE\MozillaPlugins /s SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f CMD: del /q C:\Users\Paweł\AppData\Roaming\WKPZ.exe CMD: del /q C:\Users\Paweł\AppData\Roaming\INMYOK.exe CMD: del /q C:\windows\system32\sqlite3.dll RemoveDirectory: C:\AdwCleaner RemoveDirectory: C:\Users\Paweł\Desktop\Stare dane programu Firefox DeleteQuarantine: EmptyTemp: ***************** ========= reg query HKLM\SOFTWARE\MozillaPlugins /s ========= HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer Path REG_SZ C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ProductName REG_SZ AdobeR FlashR Player 12.0.0.77 Plugin Vendor REG_SZ Adobe Systems Incorporated Description REG_SZ AdobeR FlashR Player 12.0.0.77 Plugin Version REG_SZ 12.0.0.77 XPTPath REG_SZ C:\windows\system32\Macromed\Flash\flashplayer.xpt HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.51.2 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8 Description REG_SZ VLC Multimedia Plugin Path REG_SZ C:\Program Files\VideoLAN\VLC\npvlc.dll Product REG_SZ VLC media player Vendor REG_SZ VideoLAN Version REG_SZ 2.0.8 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.2 Description REG_SZ VLC Multimedia Plugin Path REG_SZ C:\Program Files\VideoLAN\VLC\npvlc.dll Product REG_SZ VLC media player Vendor REG_SZ VideoLAN Version REG_SZ 2.1.2 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3 Description REG_SZ VLC Multimedia Plugin Path REG_SZ C:\Program Files\VideoLAN\VLC\npvlc.dll Product REG_SZ VLC media player Vendor REG_SZ VideoLAN Version REG_SZ 2.1.3 HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader ========= End of Reg: ========= HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key Deleted successfully. "HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= del /q C:\Users\Paweł\AppData\Roaming\WKPZ.exe ========= ========= End of CMD: ========= ========= del /q C:\Users\Paweł\AppData\Roaming\INMYOK.exe ========= ========= End of CMD: ========= ========= del /q C:\windows\system32\sqlite3.dll ========= ========= End of CMD: ========= "C:\AdwCleaner" => removed successfully. "C:\Users\Paweł\Desktop\Stare dane programu Firefox" => removed successfully. "C:\FRST\Quarantine" => removed successfully. EmptyTemp: => Removed 10 GB temporary data. The system needed a reboot. ==== End of Fixlog ====