Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-10-2014 Ran by DOMOWY at 2014-10-20 13:29:12 Run:2 Running from C:\Users\DOMOWY\Desktop Loaded Profile: DOMOWY (Available profiles: UpdatusUser & DOMOWY) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CHR HKLM-x32\...\Chrome\Extension: [bpeeepmahhfjiediknjejcmcfmjcjdck] - C:\Users\DOMOWY\AppData\Local\Google\Chrome\User Data\Default\Extensions\serach.crx [] CHR HKLM-x32\...\Chrome\Extension: [dkdkpmmkgdbglmfmmmmehbkmnkopingb] - C:\Users\DOMOWY\AppData\Local\Google\Chrome\User Data\Default\Extensions\v9-toolbar.crx [] FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455} Tcpip\..\Interfaces\{B75A06BD-893D-4960-A8AC-616BF6E9EEAF}: [NameServer] CustomCLSID: HKU\S-1-5-21-339540346-3109504209-938711790-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\DOMOWY\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File Task: {0F867F08-13F7-4B62-A917-70F957FA2103} - System32\Tasks\{E2F2D445-6296-4502-BB02-96605217308E} => C:\Users\DOMOWY\Downloads\Setup_1.0.0.250.exe Task: {25F7857E-55B4-423D-A7B9-243F550BC882} - System32\Tasks\{0F2C8259-F2E1-404A-A5CF-D10A56EC2428} => C:\Users\DOMOWY\Downloads\do mhdd\Nowy folder\vfdwin.exe Task: {2F843169-2656-41D2-BC69-2A1B7862C4A5} - \{BAA68613-34A5-4943-B879-1FB59100154C} No Task File <==== ATTENTION Task: {3BE585FC-C237-4C73-9F9E-8F143A29F1F2} - System32\Tasks\{43C99D27-D67C-435A-98B4-6A92BD76D27F} => D:\KomaMail\Koma_Mail.exe Task: {4CC2F2EE-DE40-4B6A-9C84-2AB9DB42F5F0} - System32\Tasks\{12271E48-625F-4B9A-A7FB-E3FFCF0F032A} => C:\Users\DOMOWY\Downloads\do mhdd\Nowy folder\vfdwin.exe Task: {6742CD69-FA5B-451B-93BC-0DEE3BEA2109} - \FacebookUpdateTaskUserS-1-5-21-339540346-3109504209-938711790-1001Core No Task File <==== ATTENTION Task: {76DFD001-8117-4E5D-BE28-8EA978F3CB33} - \FacebookUpdateTaskUserS-1-5-21-339540346-3109504209-938711790-1001UA No Task File <==== ATTENTION Task: {77E6F641-6927-4E8B-9BE2-25122646F223} - System32\Tasks\{76E30545-EE8F-46C3-8181-CF63E9E1C446} => C:\Users\DOMOWY\Downloads\do mhdd\Nowy folder\vfdwin.exe Task: {79591226-2CAC-4C8E-BCF1-F308622CC0CB} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION Task: {860D0494-7766-4D8F-9DCE-9927AA301486} - \YourFile DownloaderUpdate No Task File <==== ATTENTION Task: {922CD63C-7D5A-4F62-AA1B-88C70523CA6F} - System32\Tasks\4660 => Wscript.exe C:\Users\DOMOWY\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION Task: {9C1293F2-2B53-4E88-968C-D22F0E97CCD8} - \{3823199B-B5A3-4B79-9EC8-6578E6941E56} No Task File <==== ATTENTION Task: {B9309EFE-F22E-4E7A-9A59-809010C36D66} - \Express FilesUpdate No Task File <==== ATTENTION Task: {BCEF0BEB-2A3C-4C4C-98FC-398C8AE64914} - \{A8F023C6-15A9-44A6-A880-484FB51D5971} No Task File <==== ATTENTION Task: {BF2A1743-D777-43A9-9A5E-7338871EF84B} - System32\Tasks\{74C94C24-BEFC-477C-8414-9C4E9B75ABA7} => C:\Users\DOMOWY\Desktop\instalacja xap\WP7Connector.exe Task: {C1A44EAA-4D94-4F09-B111-E17ABF56A4E4} - \{C7F868BB-58AA-4BBC-8B4A-6B715FF61787} No Task File <==== ATTENTION Task: {C717557F-4C88-4812-816B-3CF22B025F7F} - System32\Tasks\{8E90934E-D7CA-4DF0-9B92-3E2A19C34642} => Iexplore.exe http://ui.skype.com/ui/0/5.5.0.124.259/pl/abandoninstall?source=lightinstaller&page=tsProblems&LastError=12007&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {D148A48C-DAE4-4E19-A8B9-03AE4C1E5E2E} - \{5FDA4971-6C5F-40BA-B0F8-B180D31D3886} No Task File <==== ATTENTION Task: {D17C0B44-49EB-406A-B4F1-1A1FC99A78AD} - \DriverToolkit Autorun No Task File <==== ATTENTION Task: {D5DCCD12-CE4C-40EE-A915-A1CEB2B91EF9} - System32\Tasks\{1CD35DC9-8F2D-432D-AB6A-4D0F3288AA8B} => C:\Users\DOMOWY\Downloads\do mhdd\Nowy folder\vfd.exe Task: {DBEC9C18-6229-46FE-BFAD-A2DA0BBCFFF3} - System32\Tasks\{CB003FBB-867D-426A-9358-5A14C4F574A1} => G:\AutoRun.exe Task: {FC98ABE6-20E3-4EB6-B4F1-B552EA1B0CD4} - \BitGuard No Task File <==== ATTENTION HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SolutoService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SolutoService => ""="Service" S4 ALSysIO; \??\C:\Users\DOMOWY\AppData\Local\Temp\ALSysIO64.sys [X] S3 MEMSWEEP2; \??\C:\Windows\system32\5F65.tmp [X] DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 DeleteKey: HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes C:\Users\DOMOWY\*.exe C:\Program Files (x86)\Mozilla Firefox C:\ProgramData\TEMP D:\POCZTA\KomaMail\stanley\temp Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {6A1806CD-94D4-4689-BA73-E35EA1EA9990} /f CMD: netsh advfirewall reset EmptyTemp: ***************** Processes closed successfully.