Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-02-2015 Ran by wojtek at 2015-02-25 17:27:18 Run:1 Running from C:\Users\wojtek\Desktop\pcfix\FRST64 Loaded Profiles: wojtek (Available profiles: wojtek & mama & tata) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: HKU\S-1-5-21-2192512233-2440722427-3420272389-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://easy-google-search.blogspot.com FF Keyword.URL: hxxp://www.google.com/cse?cx=partner-pub-5528014799800033:cevktqnfrvl&ie=ISO-8859-1&q= Task: {89B7CFCE-4A40-4D23-8794-96F8149E7A71} - System32\Tasks\{4C3F38B6-B4B2-49FA-B4A7-20BB647A1DA3} => Firefox.exe http://ui.skype.com/ui/0/5.10.0.116/pl/go/help.faq.installer?LastError=1618 Task: {BE9F9ED2-A7EC-440B-BA42-F4B24D944AB3} - System32\Tasks\{C0F969F2-D58B-49A1-864D-2B2CE11A4776} => pcalua.exe -a E:\ISO\Might.and.Magic.X.Legacy-RELOADED\Might.and.Magic.X.Legacy.Update.1-RELOADED\Update\setup.exe -d E:\ISO\Might.and.Magic.X.Legacy-RELOADED\Might.and.Magic.X.Legacy.Update.1-RELOADED\Update Task: {D3BB7FD4-360A-4D0C-AA0F-3F80C0AB3C2E} - System32\Tasks\{07366C4D-B6D3-4638-A14E-B1E62938418A} => E:\ISO\Might.and.Magic.X.Legacy-RELOADED\Might.and.Magic.X.Legacy.Update.1-RELOADED\Update\setup.exe Task: {E86BC747-0FED-4692-9FBC-74997B796CDA} - System32\Tasks\{5F240D26-5E8B-44B8-B059-319BDC5C0747} => Iexplore.exe http://ui.skype.com/ui/0/6.14.0.104/en/abandoninstall?page=tsProgressBar CMD: ipconfig /flushdns EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. HKU\S-1-5-21-2192512233-2440722427-3420272389-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. Firefox Keyword.URL deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{89B7CFCE-4A40-4D23-8794-96F8149E7A71}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89B7CFCE-4A40-4D23-8794-96F8149E7A71}" => Key deleted successfully. C:\Windows\System32\Tasks\{4C3F38B6-B4B2-49FA-B4A7-20BB647A1DA3} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4C3F38B6-B4B2-49FA-B4A7-20BB647A1DA3}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BE9F9ED2-A7EC-440B-BA42-F4B24D944AB3}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE9F9ED2-A7EC-440B-BA42-F4B24D944AB3}" => Key deleted successfully. C:\Windows\System32\Tasks\{C0F969F2-D58B-49A1-864D-2B2CE11A4776} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C0F969F2-D58B-49A1-864D-2B2CE11A4776}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D3BB7FD4-360A-4D0C-AA0F-3F80C0AB3C2E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3BB7FD4-360A-4D0C-AA0F-3F80C0AB3C2E}" => Key deleted successfully. C:\Windows\System32\Tasks\{07366C4D-B6D3-4638-A14E-B1E62938418A} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{07366C4D-B6D3-4638-A14E-B1E62938418A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E86BC747-0FED-4692-9FBC-74997B796CDA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E86BC747-0FED-4692-9FBC-74997B796CDA}" => Key deleted successfully. C:\Windows\System32\Tasks\{5F240D26-5E8B-44B8-B059-319BDC5C0747} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5F240D26-5E8B-44B8-B059-319BDC5C0747}" => Key deleted successfully. ========= ipconfig /flushdns ========= Konfiguracja IP systemu Windows Pomy˜lnie opr¢¾niono pami©† podr©czn¥ programu rozpoznawania nazw DNS. ========= End of CMD: ========= EmptyTemp: => Removed 1.6 GB temporary data. The system needed a reboot. ==== End of Fixlog 17:29:37 ====