Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 17-12-2014 Ran by PatrykG at 2014-12-19 13:53:22 Run:2 Running from J:\INSTALKI\Antywirusy etc\Farbar Recovery Scanner Tool (FRST) Loaded Profile: PatrykG (Available profiles: PatrykG & Administrator) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: R1 tStLibG; I:\WINDOWS\System32\drivers\tStLibG.sys [55224 2014-04-05] (StdLib) S3 SynasUSB; system32\drivers\SynasUSB.sys [X] Task: I:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-117609710-725345543-1003Core.job => I:\Documents and Settings\PatrykG\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe Task: I:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-117609710-725345543-1003UA.job => I:\Documents and Settings\PatrykG\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe HKU\S-1-5-21-1960408961-117609710-725345543-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-1960408961-117609710-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Toolbar: HKLM - Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - I:\Program Files\Orbitdownloader\GrabPro.dll No File Toolbar: HKU\S-1-5-21-1960408961-117609710-725345543-1003 -> Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - I:\Program Files\Orbitdownloader\GrabPro.dll No File FF Extension: Ashampoo PO - I:\Documents and Settings\PatrykG\Dane aplikacji\Mozilla\Firefox\Profiles\ydhbxs8t.default\Extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} [2014-11-11] FF Extension: عارض PDF - I:\Documents and Settings\PatrykG\Dane aplikacji\Mozilla\Firefox\Profiles\ydhbxs8t.default\Extensions\uriloader@pdf.js.xpi [2012-12-17] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - I:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension I:\Documents and Settings\Administrator\Dane aplikacji\ProgSense I:\Documents and Settings\All Users\Dane aplikacji\APN I:\Documents and Settings\All Users\Dane aplikacji\eLicenser I:\Documents and Settings\All Users\Dane aplikacji\Syncrosoft I:\Documents and Settings\All Users\Dane aplikacji\TEMP I:\Documents and Settings\PatrykG\Dane aplikacji\Arturia I:\Documents and Settings\PatrykG\Dane aplikacji\Cycling '74 I:\Documents and Settings\PatrykG\Dane aplikacji\GrabPro I:\Documents and Settings\PatrykG\Dane aplikacji\InterVideo I:\Documents and Settings\PatrykG\Dane aplikacji\lang I:\Documents and Settings\PatrykG\Dane aplikacji\log I:\Documents and Settings\PatrykG\Dane aplikacji\Logia I:\Documents and Settings\PatrykG\Dane aplikacji\Mipony I:\Documents and Settings\PatrykG\Dane aplikacji\PDF Labs I:\Documents and Settings\PatrykG\Dane aplikacji\ProgSense I:\Documents and Settings\PatrykG\Dane aplikacji\ProXmar Memo I:\Documents and Settings\PatrykG\Dane aplikacji\Thunderbird I:\Documents and Settings\PatrykG\Dane aplikacji\VitySoft I:\Documents and Settings\PatrykG\Dane aplikacji\Workrave I:\Documents and Settings\PatrykG\Pulpit\uporzadkiiiiiii\Continue Any Send Installation.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Bullzip PDF Printer.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\DVD Identifier.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\GetFLV.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Google Earth.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Groovedown*.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\InterVideo WinDVD 6.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\LOOPBACK.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\ProXmar MEMO.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Skrót do everest.exe.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Skype.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Spybot - Search & Destroy.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Wise Registry Cleaner.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\WM Converter.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\WM Recorder 14.lnk I:\Documents and Settings\PatrykG\Pulpit\Pulpit\WWWISIS Demo.lnk I:\Program Files\Mozilla Firefox\plugins I:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension I:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\{5D847D71-05EB-4855-B67E-9A1E6A4E0290}" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\I:^Documents and Settings^All Users^Menu Start^Programy^Autostart^InterVideo WinCinema Manager.lnk" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Update" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LiveSupport" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\lollipop" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ProXmar Memo" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SpybotSD TeaTimer" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\upfst_pl_66.exe" /f EmptyTemp: ***************** Processes closed successfully. tStLibG => Unable to stop service tStLibG => Service deleted successfully. SynasUSB => Service deleted successfully. I:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-117609710-725345543-1003Core.job => Moved successfully. I:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-117609710-725345543-1003UA.job => Moved successfully. "HKU\S-1-5-21-1960408961-117609710-725345543-1003\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully. HKU\S-1-5-21-1960408961-117609710-725345543-1003\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{C55BBCD6-41AD-48AD-9953-3609C48EACC7} => value deleted successfully. "HKCR\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}" => Key deleted successfully. HKU\S-1-5-21-1960408961-117609710-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C55BBCD6-41AD-48AD-9953-3609C48EACC7} => value deleted successfully. "HKCR\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}" => Key not found. I:\Documents and Settings\PatrykG\Dane aplikacji\Mozilla\Firefox\Profiles\ydhbxs8t.default\Extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\Mozilla\Firefox\Profiles\ydhbxs8t.default\Extensions\uriloader@pdf.js.xpi => Moved successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => value deleted successfully. I:\Documents and Settings\Administrator\Dane aplikacji\ProgSense => Moved successfully. I:\Documents and Settings\All Users\Dane aplikacji\APN => Moved successfully. I:\Documents and Settings\All Users\Dane aplikacji\eLicenser => Moved successfully. I:\Documents and Settings\All Users\Dane aplikacji\Syncrosoft => Moved successfully. I:\Documents and Settings\All Users\Dane aplikacji\TEMP => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\Arturia => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\Cycling '74 => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\GrabPro => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\InterVideo => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\lang => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\log => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\Logia => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\Mipony => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\PDF Labs => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\ProgSense => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\ProXmar Memo => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\Thunderbird => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\VitySoft => Moved successfully. I:\Documents and Settings\PatrykG\Dane aplikacji\Workrave => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\uporzadkiiiiiii\Continue Any Send Installation.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Bullzip PDF Printer.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\DVD Identifier.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\GetFLV.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Google Earth.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Groovedown*.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\InterVideo WinDVD 6.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\LOOPBACK.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\ProXmar MEMO.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Skrót do everest.exe.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Skype.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Spybot - Search & Destroy.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\Wise Registry Cleaner.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\WM Converter.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\WM Recorder 14.lnk => Moved successfully. I:\Documents and Settings\PatrykG\Pulpit\Pulpit\WWWISIS Demo.lnk => Moved successfully. I:\Program Files\Mozilla Firefox\plugins => Moved successfully. I:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully. I:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup => Moved successfully. ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\{5D847D71-05EB-4855-B67E-9A1E6A4E0290}" /f ========= Błąd: system nie może odnaleźć określonego klucza rejestru lub wartości. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\I:^Documents and Settings^All Users^Menu Start^Programy^Autostart^InterVideo WinCinema Manager.lnk" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Update" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LiveSupport" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\lollipop" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ProXmar Memo" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SpybotSD TeaTimer" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\upfst_pl_66.exe" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= EmptyTemp: => Removed 1.4 GB temporary data. The system needed a reboot. ==== End of Fixlog ====