Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-02-2015 Ran by Kuba at 2015-02-23 19:08:19 Run:4 Running from C:\Users\Kuba\Desktop\logi\nowe\nowe2 Loaded Profiles: Kuba (Available profiles: Kuba & Gość) Boot Mode: Safe Mode (minimal) ============================================== Content of fixlist: ***************** CloseProcesses: (Microsoft Corporation) C:\Windows\explorer.exe Task: {10B77EDF-C057-403D-A743-CAC4B85058EA} - System32\Tasks\wecutil => C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\IEUpdate\wecutil.exe HKU\S-1-5-21-3839221274-3043303846-3843884880-1000\...\Run: [wecutil] => "C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\IEUpdate\wecutil.exe" HKU\S-1-5-21-3839221274-3043303846-3843884880-1000\...\RunOnce: [K79gM] => C:\Users\Kuba\AppData\Roaming\K79gM.exe [801792 2015-02-22] (Cortado AG) HKU\S-1-5-21-3839221274-3043303846-3843884880-1000\...\Policies\Explorer: [Run] "C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\IEUpdate\wecutil.exe" HKU\S-1-5-21-3839221274-3043303846-3843884880-1000\...\Command Processor: "C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\IEUpdate\wecutil.exe" <===== ATTENTION! Startup: C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wecutil.lnk C:\Users\Kuba\AppData\Roaming\*.exe EmptyTemp: ***************** Processes closed successfully. [128] C:\Windows\explorer.exe => Process closed successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10B77EDF-C057-403D-A743-CAC4B85058EA} => Key not found. C:\Windows\System32\Tasks\wecutil not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\wecutil => Key not found. HKU\S-1-5-21-3839221274-3043303846-3843884880-1000\Software\Microsoft\Windows\CurrentVersion\Run\\wecutil => Value not found. HKU\S-1-5-21-3839221274-3043303846-3843884880-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\K79gM => Value not found. HKU\S-1-5-21-3839221274-3043303846-3843884880-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\Run => Value not found. HKU\S-1-5-21-3839221274-3043303846-3843884880-1000\Software\Microsoft\Command Processor\\AutoRun => Value not found. C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wecutil.lnk not found. C:\Users\Kuba\AppData\Roaming\*.exe => Moved successfully. EmptyTemp: => Removed 117.1 MB temporary data. The system needed a reboot. ==== End of Fixlog 19:08:23 ====