Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-10-2014 Ran by Atreyu at 2014-10-18 15:25:20 Run:1 Running from C:\Users\Atreyu\Downloads Loaded Profile: Atreyu (Available profiles: Atreyu) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION URLSearchHook: HKCU - (No Name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - No File StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKCU - {5539A100-DC83-49a2-8C3B-EBC7CE92D1AA} URL = http://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB SearchScopes: HKCU - {D0069BA1-6C1A-4770-B3E5-59DAD2114225} URL = http://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5369970905&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=pl&q={searchTerms} R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X] DeleteKey: HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes C:\ProgramData\AVAST Software C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppsHat CMD: ipconfig /flushdns EmptyTemp: ***************** Processes closed successfully. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully. "HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}" => Key not found. C:\Windows\system32\GroupPolicy\Machine => Moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} => value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5539A100-DC83-49a2-8C3B-EBC7CE92D1AA}" => Key deleted successfully. "HKCR\CLSID\{5539A100-DC83-49a2-8C3B-EBC7CE92D1AA}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D0069BA1-6C1A-4770-B3E5-59DAD2114225}" => Key deleted successfully. "HKCR\CLSID\{D0069BA1-6C1A-4770-B3E5-59DAD2114225}" => Key not found. IOMap => Unable to stop service IOMap => Error deleting Service HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes => Key Deleted successfully. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes => Key Deleted successfully. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes => Key Deleted successfully. C:\ProgramData\AVAST Software => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppsHat => Moved successfully. ========= ipconfig /flushdns ========= Konfiguracja IP systemu Windows Pomy˜lnie opr¢¾niono pami©† podr©czn¥ programu rozpoznawania nazw DNS. ========= End of CMD: ========= EmptyTemp: => Removed 30 MB temporary data. The system needed a reboot. ==== End of Fixlog ====