Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-09-2014
Ran by x at 2014-09-17 17:14:30 Run:2
Running from C:\Documents and Settings\x\Moje dokumenty\Pobrane
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
CloseProcesses:
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S4 sptd; System32\Drivers\sptd.sys [X]
HKLM\...\Run: [TaskTray] => [X]
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKLM\...\Run: [NPSStartup] => [X]
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
Tcpip\Parameters: [DhcpNameServer] 100.64.0.64
RemoveDirectory: C:\AdwCleaner
RemoveDirectory: C:\Documents and Settings\All Users\Dane aplikacji\Common Files
RemoveDirectory: C:\Documents and Settings\All Users\Dane aplikacji\McAfee
RemoveDirectory: C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan
RemoveDirectory: C:\Documents and Settings\LocalService\Dane aplikacji\McAfee
RemoveDirectory: C:\Documents and Settings\x\Pulpit\Stare dane programu Firefox
RemoveDirectory: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
CMD: del /q C:\Documents and Settings\x\Pulpit\Wyczyść rejestr za darmo!.lnk
Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f
Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\D52E2FDD-4553-4F81-BE20-F1405B80CAA4 /f
DeleteQuarantine:
EmptyTemp:



*****************

Processes closed successfully.
esgiguard => Service deleted successfully.
sptd => Service deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\TaskTray => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NPSStartup => value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Value not found.
"HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}" => Key not found.
HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => value deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value deleted successfully.
"C:\AdwCleaner" => removed successfully.
"C:\Documents and Settings\All Users\Dane aplikacji\Common Files" => removed successfully.
"C:\Documents and Settings\All Users\Dane aplikacji\McAfee" => removed successfully.
"C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan" => removed successfully.
"C:\Documents and Settings\LocalService\Dane aplikacji\McAfee" => removed successfully.
"C:\Documents and Settings\x\Pulpit\Stare dane programu Firefox" => removed successfully.
"C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" => removed successfully.

=========  del /q C:\Documents and Settings\x\Pulpit\Wyczyść rejestr za darmo!.lnk =========

System nie mo¾e odnale«† okre˜lonej ˜cie¾ki.

========= End of CMD: =========


========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f =========


Operacja ukończona pomyślnie


========= End of Reg: =========


========= reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\D52E2FDD-4553-4F81-BE20-F1405B80CAA4 /f =========


Operacja ukończona pomyślnie


========= End of Reg: =========

"C:\FRST\Quarantine" => removed successfully.
EmptyTemp: => Removed 436.2 MB temporary data.


The system needed a reboot. 

==== End of Fixlog ====