Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-09-2014 Ran by Owner at 2014-09-12 16:43:49 Run:5 Running from C:\Users\Owner\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /f Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /ve /t REG_SZ /d Bing /f Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v URL /t REG_SZ /d "http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC" /f Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v DisplayName /t REG_SZ /d "@ieframe.dll,-12512" /f Reg: reg delete HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} /f Reg: reg delete HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} /f Reg: reg delete HKLM\SOFTWARE\SystemK /f Reg: reg delete HKLM\SOFTWARE\VBMZ /f Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4 /f Reg: reg delete HKCU\Software\Linkey /f Reg: reg delete HKCU\Software\Softonic /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com" /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} /f Reg: reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\VisualBee for Microsoft PowerPoint" /f Reg: reg delete "HKU\S-1-5-21-2696247456-811157038-2453434591-1000\Software\Microsoft\Internet Explorer\URLSearchHooks" /v {4c60e5ab-5c68-4c59-abaa-885010b24b32} /f Reg: reg delete "HKU\S-1-5-21-2696247456-811157038-2453434591-1000\Software\Microsoft\Internet Explorer\URLSearchHooks" /v {77f5fe49-12e3-4cf5-abb4-d993a0164d9e} /f Reg: reg delete "HKU\S-1-5-21-2696247456-811157038-2453434591-1000\Software\Microsoft\Internet Explorer\URLSearchHooks" /v {d2cf9842-af95-48cd-b873-bfbb48cd7f5e} /f Reg: reg delete "HKU\S-1-5-21-2696247456-811157038-2453434591-1000\Software\Microsoft\Internet Explorer\URLSearchHooks" /v {da7a20cf-bef4-4342-ad78-0240fdf87055} /f RemoveDirectory: C:\AdwCleaner RemoveDirectory: C:\Program Files (x86)\AVG Security Toolbar RemoveDirectory: C:\Program Files (x86)\AVG SafeGuard toolbar RemoveDirectory: C:\ProgramData\APN RemoveDirectory: C:\ProgramData\AVG Security Toolbar RemoveDirectory: C:\Users\Owner\AppData\Roaming\Settings Manager RemoveDirectory: C:\Users\Owner\Desktop\Stare dane programu Firefox DeleteQuarantine: EmptyTemp: ***************** Processes closed successfully. ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /ve /t REG_SZ /d Bing /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v URL /t REG_SZ /d "http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v DisplayName /t REG_SZ /d "@ieframe.dll,-12512" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\SystemK /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\VBMZ /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4 /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKCU\Software\Linkey /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKCU\Software\Softonic /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\VisualBee for Microsoft PowerPoint" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-21-2696247456-811157038-2453434591-1000\Software\Microsoft\Internet Explorer\URLSearchHooks" /v {4c60e5ab-5c68-4c59-abaa-885010b24b32} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-21-2696247456-811157038-2453434591-1000\Software\Microsoft\Internet Explorer\URLSearchHooks" /v {77f5fe49-12e3-4cf5-abb4-d993a0164d9e} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-21-2696247456-811157038-2453434591-1000\Software\Microsoft\Internet Explorer\URLSearchHooks" /v {d2cf9842-af95-48cd-b873-bfbb48cd7f5e} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-21-2696247456-811157038-2453434591-1000\Software\Microsoft\Internet Explorer\URLSearchHooks" /v {da7a20cf-bef4-4342-ad78-0240fdf87055} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= "C:\AdwCleaner" => removed successfully. "C:\Program Files (x86)\AVG Security Toolbar" => removed successfully. "C:\Program Files (x86)\AVG SafeGuard toolbar" => removed successfully. "C:\ProgramData\APN" => removed successfully. "C:\ProgramData\AVG Security Toolbar" => removed successfully. "C:\Users\Owner\AppData\Roaming\Settings Manager" => removed successfully. "C:\Users\Owner\Desktop\Stare dane programu Firefox" => removed successfully. "C:\FRST\Quarantine" => removed successfully. EmptyTemp: => Removed 6.4 GB temporary data. The system needed a reboot. ==== End of Fixlog ====