Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-09-2014 Ran by ADMIN at 2014-09-17 16:21:41 Run:2 Running from E:\fixit\frst Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: HKLM-x32\...\Run: [avast!] => C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe HKU\S-1-5-21-4014269469-2975056858-994782064-1000\...\Run: [EfkuQpumz] => regsvr32.exe "C:\ProgramData\EfkuQpumz\EfkuQpumz.dat" BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File DPF: HKLM-x32 {3860DD98-0549-4D50-AA72-5D17D200EE10} http://cdn.scan.onecare.live.com/resource/download/scanner/pl-pl/wlscctrl2.cab DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} http://quickscan.bitdefender.com/qsax/qsax.cab FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) S2 aswUpdSv; "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe" [X] S3 amdkmdap; system32\DRIVERS\atikmpag.sys [X] S3 AtiHDAudioService; system32\drivers\AtihdLH6.sys [X] C:\ProgramData\EfkuQpumz C:\ProgramData\PC Tools C:\ProgramData\TEMP C:\Program Files\Alwil Software C:\Program Files (x86)\Spyware Doctor C:\Windows\Sun EmptyTemp: ***************** Processes closed successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\avast! => value deleted successfully. HKU\S-1-5-21-4014269469-2975056858-994782064-1000\Software\Microsoft\Windows\CurrentVersion\Run\\EfkuQpumz => value deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{3860DD98-0549-4D50-AA72-5D17D200EE10}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{3860DD98-0549-4D50-AA72-5D17D200EE10}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A}" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33" => Key deleted successfully. C:\Windows\SysWOW64\npdeployJava1.dll => Moved successfully. aswUpdSv => Service deleted successfully. amdkmdap => Service deleted successfully. AtiHDAudioService => Service deleted successfully. C:\ProgramData\EfkuQpumz => Moved successfully. C:\ProgramData\PC Tools => Moved successfully. C:\ProgramData\TEMP => Moved successfully. C:\Program Files\Alwil Software => Moved successfully. C:\Program Files (x86)\Spyware Doctor => Moved successfully. C:\Windows\Sun => Moved successfully. EmptyTemp: => Removed 83.2 MB temporary data. The system needed a reboot. ==== End of Fixlog ====