Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-09-2014 01 Ran by Bartek at 2014-09-25 18:12:37 Run:2 Running from C:\Users\Bartek\Desktop Loaded Profile: Bartek (Available profiles: Bartek) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622 BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File CMD: del /q C:\Users\Bartek\Downloads\938mzrcx.exe CMD: del /q C:\Windows\SysWOW64\sqlite3.dll RemoveDirectory: C:\AdwCleaner RemoveDirectory: C:\Program Files (x86)\Java RemoveDirectory: C:\Program Files (x86)\MyFree Codec RemoveDirectory: C:\Windows\System32\log RemoveDirectory: C:\Windows\SysWOW64\Adobe RemoveDirectory: C:\Windows\SysWOW64\Macromed DeleteQuarantine: EmptyTemp: ***************** Processes closed successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key Deleted successfully. "HKCR\Wow6432Node\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. ========= del /q C:\Users\Bartek\Downloads\938mzrcx.exe ========= ========= End of CMD: ========= ========= del /q C:\Windows\SysWOW64\sqlite3.dll ========= ========= End of CMD: ========= "C:\AdwCleaner" => removed successfully. "C:\Program Files (x86)\Java" => removed successfully. "C:\Program Files (x86)\MyFree Codec" => removed successfully. "C:\Windows\System32\log" => removed successfully. "C:\Windows\SysWOW64\Adobe" => removed successfully. "C:\Windows\SysWOW64\Macromed" => removed successfully. "C:\FRST\Quarantine" => removed successfully. EmptyTemp: => Removed 228.2 MB temporary data. The system needed a reboot. ==== End of Fixlog ====