Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-10-2014 02 Ran by Andrzej at 2014-10-17 10:07:13 Run:1 Running from C:\Users\Andrzej\Desktop Loaded Profile: Andrzej (Available profiles: Andrzej) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: HKU\S-1-5-21-3681205649-2394694009-2051480217-1000\...\Run: [tsiVideo] => C:\Windows\SysWOW64\rundll32.exe C:\Users\Andrzej\AppData\Local\Temp\\mdi164.dll,asdasd <===== ATTENTION GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe R2 HTService; C:\Users\Andrzej\AppData\Roaming\HTThread\hb.exe [628736 2014-09-25] () [File not signed] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X] S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X] C:\ProgramData\Xunlei C:\ProgramData\Thunder Network C:\Users\Andrzej\AppData\Roaming\HTThread EmptyTemp: ***************** Processes closed successfully. HKU\S-1-5-21-3681205649-2394694009-2051480217-1000\Software\Microsoft\Windows\CurrentVersion\Run\\tsiVideo => value deleted successfully. C:\Windows\system32\GroupPolicy\Machine => Moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HTService => Service deleted successfully. ew_hwusbdev => Service deleted successfully. ew_usbenumfilter => Service deleted successfully. huawei_cdcacm => Service deleted successfully. huawei_enumerator => Service deleted successfully. huawei_ext_ctrl => Service deleted successfully. huawei_wwanecm => Service deleted successfully. C:\ProgramData\Xunlei => Moved successfully. C:\ProgramData\Thunder Network => Moved successfully. C:\Users\Andrzej\AppData\Roaming\HTThread => Moved successfully. EmptyTemp: => Removed 677.1 MB temporary data. The system needed a reboot. ==== End of Fixlog ====