Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 05-02-2015 Ran by irena at 2015-02-06 20:04:58 Run:1 Running from C:\Documents and Settings\irena\Pulpit Loaded Profiles: irena (Available profiles: irena) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: Task: C:\WINDOWS\Tasks\At1.job => C:\DOCUME~1\irena\DANEAP~1\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\WINDOWS\Tasks\cxoqoka.job => C:\DOCUME~1\irena\USTAWI~1\Temp\geydprm.exe HKLM\...\Run: [ConvertAd] => C:\Documents and Settings\irena\Ustawienia lokalne\Dane aplikacji\ConvertAd\ConvertAd.exe HKLM\...\Run: [mobilegeni daemon] => C:\Program Files\Mobogenie\DaemonProcess.exe C:\Documents and Settings\All Users\Menu Start\Programy\Avira\AntiVir Desktop\Display readme.lnk C:\Documents and Settings\All Users\Dane aplikacji\vkdvkyc.html C:\Documents and Settings\irena\Moje dokumenty\!Decrypt-All-Files-scqwxua.bmp C:\Documents and Settings\irena\Moje dokumenty\!Decrypt-All-Files-scqwxua.txt C:\Program Files\mozilla firefox\plugins Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ConvertAd /f EmptyTemp: ***************** Processes closed successfully. C:\WINDOWS\Tasks\At1.job => Moved successfully. C:\WINDOWS\Tasks\cxoqoka.job => Moved successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ConvertAd => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => value deleted successfully. C:\Documents and Settings\All Users\Menu Start\Programy\Avira\AntiVir Desktop\Display readme.lnk => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\vkdvkyc.html => Moved successfully. C:\Documents and Settings\irena\Moje dokumenty\!Decrypt-All-Files-scqwxua.bmp => Moved successfully. C:\Documents and Settings\irena\Moje dokumenty\!Decrypt-All-Files-scqwxua.txt => Moved successfully. C:\Program Files\mozilla firefox\plugins => Moved successfully. ========= reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ConvertAd /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= EmptyTemp: => Removed 802.7 MB temporary data. The system needed a reboot. ==== End of Fixlog 20:06:02 ====