Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-10-2014 Ran by Tomek at 2014-10-29 14:55:36 Run:1 Running from C:\Users\Tomek\Desktop Loaded Profile: Tomek (Available profiles: Tomek) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: R2 BitGuard; C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [3780064 2013-11-18] () R2 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2013-01-29] () [File not signed] R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [2930992 2014-09-17] () R2 Update NetCrawl; C:\Program Files (x86)\NetCrawl\updateNetCrawl.exe [523552 2014-10-28] () R2 Util NetCrawl; C:\Program Files (x86)\NetCrawl\bin\utilNetCrawl.exe [523552 2014-10-29] () R2 Windows Internet Name Service; C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Windows Internet Name Service\wins.exe [2678272 2013-08-31] () [File not signed] R1 {0c6ad4fc-d56b-44cb-a06e-debba12bf68a}w64; C:\Windows\System32\drivers\{0c6ad4fc-d56b-44cb-a06e-debba12bf68a}w64.sys [48824 2014-10-18] (StdLib) R1 {1f1a6417-232f-4d66-b329-9186268a4e91}w64; C:\Windows\System32\drivers\{1f1a6417-232f-4d66-b329-9186268a4e91}w64.sys [48824 2014-10-16] (StdLib) R1 {3578bab3-f189-4578-b860-1ee0580e735d}w64; C:\Windows\System32\drivers\{3578bab3-f189-4578-b860-1ee0580e735d}w64.sys [48824 2014-10-12] (StdLib) R1 {38fc16c9-a7b4-4377-b565-cc5a76f2c89f}w64; C:\Windows\System32\drivers\{38fc16c9-a7b4-4377-b565-cc5a76f2c89f}w64.sys [48824 2014-10-11] (StdLib) R1 {3c9eada7-386c-4a04-ab1e-4eb122397ced}w64; C:\Windows\System32\drivers\{3c9eada7-386c-4a04-ab1e-4eb122397ced}w64.sys [48824 2014-10-21] (StdLib) R1 {44b76908-31ad-4fdd-90ce-abbdbb78f175}w64; C:\Windows\System32\drivers\{44b76908-31ad-4fdd-90ce-abbdbb78f175}w64.sys [48824 2014-10-15] (StdLib) R1 {57f143ae-1ecd-493d-9ddb-32c45a3cecd5}w64; C:\Windows\System32\drivers\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}w64.sys [61112 2014-06-13] (StdLib) R1 {6191cc23-5db4-4079-aaac-546c45b08af1}w64; C:\Windows\System32\drivers\{6191cc23-5db4-4079-aaac-546c45b08af1}w64.sys [48824 2014-10-22] (StdLib) R1 {6fcd6092-9615-4f7f-8898-8df53980e5d2}w64; C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}w64.sys [61112 2014-06-30] (StdLib) R1 {6fd9ae77-e80c-4df0-b53d-23fcb52b001a}w64; C:\Windows\System32\drivers\{6fd9ae77-e80c-4df0-b53d-23fcb52b001a}w64.sys [48824 2014-10-22] (StdLib) R1 {75d07d19-b619-45eb-aba7-fd8d77feb6b6}w64; C:\Windows\System32\drivers\{75d07d19-b619-45eb-aba7-fd8d77feb6b6}w64.sys [48824 2014-10-13] (StdLib) R1 {9cdb10b4-16db-41f0-b75d-2e3cfff0fbde}w64; C:\Windows\System32\drivers\{9cdb10b4-16db-41f0-b75d-2e3cfff0fbde}w64.sys [48824 2014-10-17] (StdLib) R1 {a00759f4-8f6e-4f04-880d-18a7306588c3}w64; C:\Windows\System32\drivers\{a00759f4-8f6e-4f04-880d-18a7306588c3}w64.sys [48824 2014-10-13] (StdLib) R1 {cfbbf934-a234-4282-8ef3-310abb84c3e4}w64; C:\Windows\System32\drivers\{cfbbf934-a234-4282-8ef3-310abb84c3e4}w64.sys [48824 2014-10-20] (StdLib) R1 {d025c1f1-c366-4b43-8131-ad1c8300487b}w64; C:\Windows\System32\drivers\{d025c1f1-c366-4b43-8131-ad1c8300487b}w64.sys [48824 2014-10-17] (StdLib) R1 {df8d93ab-56ab-414d-b711-87b0e2749bbd}w64; C:\Windows\System32\drivers\{df8d93ab-56ab-414d-b711-87b0e2749bbd}w64.sys [48824 2014-10-17] (StdLib) R1 {f0f5249d-53cc-459a-8755-4cd64b179fb4}w64; C:\Windows\System32\drivers\{f0f5249d-53cc-459a-8755-4cd64b179fb4}w64.sys [48824 2014-10-16] (StdLib) R1 {f916f162-d4e9-413b-95d2-589769dc98ff}w64; C:\Windows\System32\drivers\{f916f162-d4e9-413b-95d2-589769dc98ff}w64.sys [48824 2014-10-14] (StdLib) R1 {fe0c5df8-6353-4020-a876-2550aa3760cf}w64; C:\Windows\System32\drivers\{fe0c5df8-6353-4020-a876-2550aa3760cf}w64.sys [48824 2014-10-19] (StdLib) S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X] Task: {938B6109-6153-4382-B9FB-93C104E75815} - System32\Tasks\CPU Grid Computing => C:\Windows\SysWOW64\dfrg\runner.exe [2013-09-19] () Task: {A1068DC6-A65E-4C71-9BE9-00FC07EFE2E9} - System32\Tasks\EPUpdater => C:\Users\Tomek\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-09-01] () <==== ATTENTION Task: {B7A412C4-E867-491F-83D0-5C5CA54F7455} - System32\Tasks\Yahoo! Search => C:\Users\Tomek\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.15.4\dsrlte.exe [2014-10-28] (Pay By Ads LTD) Task: {C32D564C-4688-4BB0-B118-4321FBEA0C16} - System32\Tasks\Yahoo! Search Updater => C:\Users\Tomek\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.15.4\dsrsetup.exe [2014-10-28] (Pay By Ads LTD) HKU\S-1-5-21-742174934-4146700524-2055731102-1000\...\Run: [ChomikBox] => C:\Program Files (x86)\ChomikBox\ChomikBox.exe HKU\S-1-5-21-742174934-4146700524-2055731102-1000\...\Run: [Yahoo! Search] => C:\Users\Tomek\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.15.4\dsrlte.exe [533352 2014-10-28] (Pay By Ads LTD) AppInit_DLLs: c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll => c:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\loader.dll [1958880 2013-11-18] () AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found AppInit_DLLs-x32: c:\progra~3\bitguard\271832~1.68\{c16c1~1\bitguard.dll => c:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll [3618304 2013-11-18] () GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR Extension: (Search-Gol Toolbar) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac [2013-10-14] CHR Extension: (IB Updater) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd [2013-01-15] CHR Extension: (NetCrawl) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhnkainfgebjkhaoadlkjgjhhgpbohg [2014-09-17] CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-15] CHR HKLM-x32\...\Chrome\Extension: [aipfmkinhleccnodemkoofnnofpbbpac] - C:\Users\Tomek\AppData\Roaming\BabSolution\CR\searchgol.crx [2013-10-14] CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-15] CHR HKLM-x32\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\SysWOW64\jmdp\pnte.crx [2013-01-15] CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\SysWOW64\mjcm\SweetNT.crx [2014-06-24] HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rts.dsrlte.com?affID=na HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120141024 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120141024 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/?a=6PQVU5amIp&loc=skw&search={searchTerms}&i=26 SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.max-start.com/?q={searchTerms}&babsrc=SP_ss_mib2&mntrId=269C1C75086B6ED9&affID=125032&tsp=5035 SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKCU - {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} URL = http://www.bigseekpro.com/search/browser/crystalofficetetris/{100B4062-3056-42B4-873C-0ED829B46E4B}?q={searchTerms} SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/?a=6PQVU5amIp&loc=skw&search={searchTerms}&i=26 SearchScopes: HKCU - ŰźĆîZ§’2ąŢpv¨IÍá*X(Ž2s(ŰÎŔJşÔÓµť± vË°!×—(äĽ48иpatm6ęo^Mp`Ëő÷_iŁwľ!„Áű†x˘8€ŮjŔ˙ţ ´Ń;áa´[¦†8 ş~ŹRŮxśňÜ8'Ł-)xä URL = BHO: IB Updater -> {336D0C35-8A85-403a-B9D2-65C292C39087} -> C:\Program Files\IB Updater\Extension64.dll () BHO-x32: IB Updater -> {336D0C35-8A85-403a-B9D2-65C292C39087} -> C:\Program Files\IB Updater\Extension32.dll () BHO-x32: Incredibar.com Helper Object -> {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} -> C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD) BHO-x32: NetCrawl -> {769a91da-209f-47fe-88b9-b0321b0982c8} -> C:\Program Files (x86)\NetCrawl\NetCrawlBHO.dll (NetCrawl) BHO-x32: searchgol Helper Object -> {8F547BDD-FCD4-48F8-A06F-573D6F404A3C} -> C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\bh\searchgol.dll (Montera Technologeis LTD) BHO-x32: delta Helper Object -> {C1AF5FA5-852C-4C90-812E-A7F75E011D87} -> C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll (Delta-search.com) BHO-x32: BitAcceleratorBHO Class -> {CAC42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files (x86)\BitAccelerator\BitAccelerator.dll (TODO: ) Toolbar: HKLM-x32 - xplugin - {DFEFCDEE-CF1A-4FC8-88AD-18272BE37E29} - C:\Users\Tomek\AppData\Roaming\xplugin\toolbar.dll () Toolbar: HKLM-x32 - Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD) Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll (Delta-search.com) Toolbar: HKLM-x32 - searchgol Toolbar - {00078E95-3A4A-4137-8DE7-2824908D1C17} - C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolTlbr.dll (Montera Technologeis LTD) C:\Program Files (x86)\BitAccelerator C:\Program Files (x86)\Mozilla Firefox C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Preferences C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences C:\Users\Tomek\AppData\Local\Mozilla C:\Users\Tomek\AppData\Roaming\chrtmp C:\Users\Tomek\AppData\Roaming\Icy_Tower1.4.exe C:\Users\Tomek\AppData\Roaming\BabSolution C:\Users\Tomek\AppData\Roaming\Babylon C:\Users\Tomek\AppData\Roaming\File Scout C:\Users\Tomek\AppData\Roaming\Mozilla C:\Users\Tomek\AppData\Roaming\Software Informer C:\Users\Tomek\AppData\Roaming\Temp C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTRAX C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard C:\Windows\system32\dmwu.exe C:\Windows\System32\drivers\{0c6ad4fc-d56b-44cb-a06e-debba12bf68a}w64.sys C:\Windows\System32\drivers\{1f1a6417-232f-4d66-b329-9186268a4e91}w64.sys C:\Windows\System32\drivers\{3578bab3-f189-4578-b860-1ee0580e735d}w64.sys C:\Windows\System32\drivers\{38fc16c9-a7b4-4377-b565-cc5a76f2c89f}w64.sys C:\Windows\System32\drivers\{3c9eada7-386c-4a04-ab1e-4eb122397ced}w64.sys C:\Windows\System32\drivers\{44b76908-31ad-4fdd-90ce-abbdbb78f175}w64.sys C:\Windows\System32\drivers\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}w64.sys C:\Windows\System32\drivers\{6191cc23-5db4-4079-aaac-546c45b08af1}w64.sys C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}w64.sys C:\Windows\System32\drivers\{6fd9ae77-e80c-4df0-b53d-23fcb52b001a}w64.sys C:\Windows\System32\drivers\{75d07d19-b619-45eb-aba7-fd8d77feb6b6}w64.sys C:\Windows\System32\drivers\{9cdb10b4-16db-41f0-b75d-2e3cfff0fbde}w64.sys C:\Windows\System32\drivers\{a00759f4-8f6e-4f04-880d-18a7306588c3}w64.sys C:\Windows\System32\drivers\{cfbbf934-a234-4282-8ef3-310abb84c3e4}w64.sys C:\Windows\System32\drivers\{d025c1f1-c366-4b43-8131-ad1c8300487b}w64.sys C:\Windows\System32\drivers\{df8d93ab-56ab-414d-b711-87b0e2749bbd}w64.sys C:\Windows\System32\drivers\{f0f5249d-53cc-459a-8755-4cd64b179fb4}w64.sys C:\Windows\System32\drivers\{f916f162-d4e9-413b-95d2-589769dc98ff}w64.sys C:\Windows\System32\drivers\{fe0c5df8-6353-4020-a876-2550aa3760cf}w64.sys C:\Windows\System32\tprb C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Windows Internet Name Service C:\Windows\SysWOW64\dfrg C:\Windows\SysWOW64\jmdp C:\Windows\SysWOW64\mjcm Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKCU\Software\Mozilla /f Reg: reg delete HKCU\Software\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Mozilla /f Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f ***************** Processes closed successfully. BitGuard => Service deleted successfully. IB Updater => Service stopped successfully. IB Updater => Service deleted successfully. IBUpdaterService => Service deleted successfully. Update NetCrawl => Service deleted successfully. Util NetCrawl => Service deleted successfully. Windows Internet Name Service => Service deleted successfully. {0c6ad4fc-d56b-44cb-a06e-debba12bf68a}w64 => Service stopped successfully. {0c6ad4fc-d56b-44cb-a06e-debba12bf68a}w64 => Service deleted successfully. {1f1a6417-232f-4d66-b329-9186268a4e91}w64 => Service stopped successfully. {1f1a6417-232f-4d66-b329-9186268a4e91}w64 => Service deleted successfully. {3578bab3-f189-4578-b860-1ee0580e735d}w64 => Service stopped successfully. {3578bab3-f189-4578-b860-1ee0580e735d}w64 => Service deleted successfully. {38fc16c9-a7b4-4377-b565-cc5a76f2c89f}w64 => Service stopped successfully. {38fc16c9-a7b4-4377-b565-cc5a76f2c89f}w64 => Service deleted successfully. {3c9eada7-386c-4a04-ab1e-4eb122397ced}w64 => Service stopped successfully. {3c9eada7-386c-4a04-ab1e-4eb122397ced}w64 => Service deleted successfully. {44b76908-31ad-4fdd-90ce-abbdbb78f175}w64 => Service stopped successfully. {44b76908-31ad-4fdd-90ce-abbdbb78f175}w64 => Service deleted successfully. {57f143ae-1ecd-493d-9ddb-32c45a3cecd5}w64 => Service stopped successfully. {57f143ae-1ecd-493d-9ddb-32c45a3cecd5}w64 => Service deleted successfully. {6191cc23-5db4-4079-aaac-546c45b08af1}w64 => Service stopped successfully. {6191cc23-5db4-4079-aaac-546c45b08af1}w64 => Service deleted successfully. {6fcd6092-9615-4f7f-8898-8df53980e5d2}w64 => Service stopped successfully. {6fcd6092-9615-4f7f-8898-8df53980e5d2}w64 => Service deleted successfully. {6fd9ae77-e80c-4df0-b53d-23fcb52b001a}w64 => Service stopped successfully. {6fd9ae77-e80c-4df0-b53d-23fcb52b001a}w64 => Service deleted successfully. {75d07d19-b619-45eb-aba7-fd8d77feb6b6}w64 => Service stopped successfully. {75d07d19-b619-45eb-aba7-fd8d77feb6b6}w64 => Service deleted successfully. {9cdb10b4-16db-41f0-b75d-2e3cfff0fbde}w64 => Service stopped successfully. {9cdb10b4-16db-41f0-b75d-2e3cfff0fbde}w64 => Service deleted successfully. {a00759f4-8f6e-4f04-880d-18a7306588c3}w64 => Service stopped successfully. {a00759f4-8f6e-4f04-880d-18a7306588c3}w64 => Service deleted successfully. {cfbbf934-a234-4282-8ef3-310abb84c3e4}w64 => Service stopped successfully. {cfbbf934-a234-4282-8ef3-310abb84c3e4}w64 => Service deleted successfully. {d025c1f1-c366-4b43-8131-ad1c8300487b}w64 => Service stopped successfully. {d025c1f1-c366-4b43-8131-ad1c8300487b}w64 => Service deleted successfully. {df8d93ab-56ab-414d-b711-87b0e2749bbd}w64 => Service stopped successfully. {df8d93ab-56ab-414d-b711-87b0e2749bbd}w64 => Service deleted successfully. {f0f5249d-53cc-459a-8755-4cd64b179fb4}w64 => Service stopped successfully. {f0f5249d-53cc-459a-8755-4cd64b179fb4}w64 => Service deleted successfully. {f916f162-d4e9-413b-95d2-589769dc98ff}w64 => Service stopped successfully. {f916f162-d4e9-413b-95d2-589769dc98ff}w64 => Service deleted successfully. {fe0c5df8-6353-4020-a876-2550aa3760cf}w64 => Service stopped successfully. {fe0c5df8-6353-4020-a876-2550aa3760cf}w64 => Service deleted successfully. ewusbmbb => Service deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{938B6109-6153-4382-B9FB-93C104E75815}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{938B6109-6153-4382-B9FB-93C104E75815}" => Key deleted successfully. C:\Windows\System32\Tasks\CPU Grid Computing => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CPU Grid Computing" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A1068DC6-A65E-4C71-9BE9-00FC07EFE2E9}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A1068DC6-A65E-4C71-9BE9-00FC07EFE2E9}" => Key deleted successfully. C:\Windows\System32\Tasks\EPUpdater => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EPUpdater" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B7A412C4-E867-491F-83D0-5C5CA54F7455}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7A412C4-E867-491F-83D0-5C5CA54F7455}" => Key deleted successfully. C:\Windows\System32\Tasks\Yahoo! Search => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Search" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C32D564C-4688-4BB0-B118-4321FBEA0C16}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C32D564C-4688-4BB0-B118-4321FBEA0C16}" => Key deleted successfully. C:\Windows\System32\Tasks\Yahoo! Search Updater => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Search Updater" => Key deleted successfully. HKU\S-1-5-21-742174934-4146700524-2055731102-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ChomikBox => value deleted successfully. HKU\S-1-5-21-742174934-4146700524-2055731102-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Yahoo! Search => value deleted successfully. "c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll" => Value Data removed successfully. "c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll" => Value Data removed successfully. "c:\progra~3\bitguard\271832~1.68\{c16c1~1\bitguard.dll" => Value Data removed successfully. C:\Windows\system32\GroupPolicy\Machine => Moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac => Moved successfully. C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd => Moved successfully. C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhnkainfgebjkhaoadlkjgjhhgpbohg => Moved successfully. "HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd" => Key deleted successfully. C:\Program Files\IB Updater\source.crx => Moved successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aipfmkinhleccnodemkoofnnofpbbpac" => Key deleted successfully. C:\Users\Tomek\AppData\Roaming\BabSolution\CR\searchgol.crx => Moved successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd" => Key deleted successfully. "C:\Program Files\IB Updater\source.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fgfdfcbeamjnjdejakdidpniblllnbpg" => Key deleted successfully. "C:\Windows\SysWOW64\jmdp\pnte.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj" => Key deleted successfully. C:\Windows\SysWOW64\mjcm\SweetNT.crx => Moved successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\bProtector Start Page => value deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\ToolbarSearchProviderProgress => value deleted successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key deleted successfully. "HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909}" => Key deleted successfully. "HKCR\CLSID\{483830EE-A4CD-4b71-B0A3-3D82E62A6909}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}" => Key deleted successfully. "HKCR\CLSID\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}" => Key deleted successfully. "HKCR\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ŰźĆîZ§’2ąŢpv¨IÍá*X(Ž2s(ŰÎŔJşÔÓµť± vË°!×—(äĽ48иpatm6ęo^Mp`Ëő÷_iŁwľ!„Áű†x˘8€ŮjŔ˙ţ ´Ń;áa´[¦†8 ş~ŹRŮxśňÜ8'Ł-)xä" => Key not found. "HKCR\CLSID\ŰźĆîZ§’2ąŢpv¨IÍá*X(Ž2s(ŰÎŔJşÔÓµť± vË°!×—(äĽ48иpatm6ęo^Mp`Ëő÷_iŁwľ!„Áű†x˘8€ŮjŔ˙ţ ´Ń;áa´[¦†8 ş~ŹRŮxśňÜ8'Ł-)xä" => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}" => Key deleted successfully. "HKCR\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{769a91da-209f-47fe-88b9-b0321b0982c8}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{769a91da-209f-47fe-88b9-b0321b0982c8}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8F547BDD-FCD4-48F8-A06F-573D6F404A3C}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{8F547BDD-FCD4-48F8-A06F-573D6F404A3C}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CAC42510-9B41-42c1-9DCD-7282A2D07C61}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{CAC42510-9B41-42c1-9DCD-7282A2D07C61}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{DFEFCDEE-CF1A-4FC8-88AD-18272BE37E29} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{DFEFCDEE-CF1A-4FC8-88AD-18272BE37E29}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{F9639E4A-801B-4843-AEE3-03D9DA199E77} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{82E1477C-B154-48D3-9891-33D83C26BCD3} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{00078E95-3A4A-4137-8DE7-2824908D1C17} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{00078E95-3A4A-4137-8DE7-2824908D1C17}" => Key deleted successfully. C:\Program Files (x86)\BitAccelerator => Moved successfully. C:\Program Files (x86)\Mozilla Firefox => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder => Moved successfully. C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Preferences => Moved successfully. C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences => Moved successfully. "C:\Users\Tomek\AppData\Local\Mozilla" => File/Directory not found. C:\Users\Tomek\AppData\Roaming\chrtmp => Moved successfully. C:\Users\Tomek\AppData\Roaming\Icy_Tower1.4.exe => Moved successfully. C:\Users\Tomek\AppData\Roaming\BabSolution => Moved successfully. C:\Users\Tomek\AppData\Roaming\Babylon => Moved successfully. C:\Users\Tomek\AppData\Roaming\File Scout => Moved successfully. "C:\Users\Tomek\AppData\Roaming\Mozilla" => File/Directory not found. C:\Users\Tomek\AppData\Roaming\Software Informer => Moved successfully. C:\Users\Tomek\AppData\Roaming\Temp => Moved successfully. C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk => Moved successfully. C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTRAX => Moved successfully. C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard => Moved successfully. C:\Windows\system32\dmwu.exe => Moved successfully. C:\Windows\System32\drivers\{0c6ad4fc-d56b-44cb-a06e-debba12bf68a}w64.sys => Moved successfully. C:\Windows\System32\drivers\{1f1a6417-232f-4d66-b329-9186268a4e91}w64.sys => Moved successfully. C:\Windows\System32\drivers\{3578bab3-f189-4578-b860-1ee0580e735d}w64.sys => Moved successfully. C:\Windows\System32\drivers\{38fc16c9-a7b4-4377-b565-cc5a76f2c89f}w64.sys => Moved successfully. C:\Windows\System32\drivers\{3c9eada7-386c-4a04-ab1e-4eb122397ced}w64.sys => Moved successfully. C:\Windows\System32\drivers\{44b76908-31ad-4fdd-90ce-abbdbb78f175}w64.sys => Moved successfully. C:\Windows\System32\drivers\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}w64.sys => Moved successfully. C:\Windows\System32\drivers\{6191cc23-5db4-4079-aaac-546c45b08af1}w64.sys => Moved successfully. C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}w64.sys => Moved successfully. C:\Windows\System32\drivers\{6fd9ae77-e80c-4df0-b53d-23fcb52b001a}w64.sys => Moved successfully. C:\Windows\System32\drivers\{75d07d19-b619-45eb-aba7-fd8d77feb6b6}w64.sys => Moved successfully. C:\Windows\System32\drivers\{9cdb10b4-16db-41f0-b75d-2e3cfff0fbde}w64.sys => Moved successfully. C:\Windows\System32\drivers\{a00759f4-8f6e-4f04-880d-18a7306588c3}w64.sys => Moved successfully. C:\Windows\System32\drivers\{cfbbf934-a234-4282-8ef3-310abb84c3e4}w64.sys => Moved successfully. C:\Windows\System32\drivers\{d025c1f1-c366-4b43-8131-ad1c8300487b}w64.sys => Moved successfully. C:\Windows\System32\drivers\{df8d93ab-56ab-414d-b711-87b0e2749bbd}w64.sys => Moved successfully. C:\Windows\System32\drivers\{f0f5249d-53cc-459a-8755-4cd64b179fb4}w64.sys => Moved successfully. C:\Windows\System32\drivers\{f916f162-d4e9-413b-95d2-589769dc98ff}w64.sys => Moved successfully. C:\Windows\System32\drivers\{fe0c5df8-6353-4020-a876-2550aa3760cf}w64.sys => Moved successfully. C:\Windows\System32\tprb => Moved successfully. C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Windows Internet Name Service => Moved successfully. C:\Windows\SysWOW64\dfrg => Moved successfully. C:\Windows\SysWOW64\jmdp => Moved successfully. C:\Windows\SysWOW64\mjcm => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====