Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-02-2015 Ran by Admin at 2015-02-02 15:01:40 Run:1 Running from D:\Inne\Logi OTL Loaded Profiles: Admin (Available profiles: Admin) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\windate.exe () HKLM\...\Run: [] => [X] Task: {1B8659C9-C5ED-441A-ADE4-C5DE4467921E} - System32\Tasks\MSIAfterburner => C:\Program Files\MSI Afterburner\MSIAfterburner.exe CMD: regsvr32 /u C:\Windows\comdlg32.ocx C:\Program Files\Temp C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asprate C:\Users\Admin\Desktop\Ip Changer.lnk C:\Windows\*.lang C:\Windows\ipchanger.exe C:\Windows\Ip Changer Updater.exe C:\Windows\Last.dat C:\Windows\Language.dat C:\Windows\Language C:\Windows\libcurl.dll C:\Windows\libeay32.dll C:\Windows\memlist.dat C:\Windows\os4.exe C:\Windows\ssleay32.dll C:\Windows\test.dat C:\Windows\windate.exe C:\Windows\zlib1.dll D:\Pobrane\Ip Changer 8.60 Folder: C:\Users\Admin\AppData\Roaming\WinRAR EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\windate.exe => Moved successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1B8659C9-C5ED-441A-ADE4-C5DE4467921E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B8659C9-C5ED-441A-ADE4-C5DE4467921E}" => Key deleted successfully. C:\Windows\System32\Tasks\MSIAfterburner => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MSIAfterburner" => Key deleted successfully. ========= regsvr32 /u C:\Windows\comdlg32.ocx ========= ========= End of CMD: ========= C:\Program Files\Temp => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asprate => Moved successfully. C:\Users\Admin\Desktop\Ip Changer.lnk => Moved successfully. C:\Windows\*.lang => Moved successfully. C:\Windows\ipchanger.exe => Moved successfully. C:\Windows\Ip Changer Updater.exe => Moved successfully. C:\Windows\Last.dat => Moved successfully. C:\Windows\Language.dat => Moved successfully. C:\Windows\Language => Moved successfully. C:\Windows\libcurl.dll => Moved successfully. C:\Windows\libeay32.dll => Moved successfully. C:\Windows\memlist.dat => Moved successfully. C:\Windows\os4.exe => Moved successfully. C:\Windows\ssleay32.dll => Moved successfully. C:\Windows\test.dat => Moved successfully. C:\Windows\windate.exe => Moved successfully. C:\Windows\zlib1.dll => Moved successfully. D:\Pobrane\Ip Changer 8.60 => Moved successfully. ========================= Folder: C:\Users\Admin\AppData\Roaming\WinRAR ======================== ====== End of Folder: ====== EmptyTemp: => Removed 1.4 GB temporary data. The system needed a reboot. ==== End of Fixlog 15:02:18 ====