Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 23-02-2015 01 Ran by Dawid at 2015-02-26 14:03:39 Run:2 Running from C:\Documents and Settings\Dawid\Moje dokumenty\Downloads Loaded Profiles: Dawid (Available profiles: Dawid & Administrator) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: R1 {507a9b68-2b48-4a22-b662-e674fb6a16f7}t; C:\WINDOWS\System32\drivers\{507a9b68-2b48-4a22-b662-e674fb6a16f7}t.sys [55816 2014-12-02] (StdLib) R1 {5178f938-0bd5-47c1-8242-71f6e3e72925}t; C:\WINDOWS\System32\drivers\{5178f938-0bd5-47c1-8242-71f6e3e72925}t.sys [55232 2014-07-09] (StdLib) R1 {55dce8ba-9dec-4013-937e-adbf9317d990}t; C:\WINDOWS\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}t.sys [55232 2014-07-17] (StdLib) R1 {9652c7a7-7363-4f0e-bf03-3b32b55ea241}Gt; C:\WINDOWS\System32\drivers\{9652c7a7-7363-4f0e-bf03-3b32b55ea241}Gt.sys [55832 2015-02-20] (StdLib) R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt; C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys [55224 2014-04-28] (StdLib) R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}t; C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}t.sys [55224 2014-04-28] (StdLib) R1 {df47b99d-26f5-45f4-85c5-97b4da365f21}t; C:\WINDOWS\System32\drivers\{df47b99d-26f5-45f4-85c5-97b4da365f21}t.sys [55816 2014-12-01] (StdLib) R1 {e6ca9971-30ed-444a-9489-82fca50b2062}t; C:\WINDOWS\System32\drivers\{e6ca9971-30ed-444a-9489-82fca50b2062}t.sys [55048 2014-09-02] (StdLib) R1 {e85a0e97-fa40-4dc4-a79e-e1c1cabe72eb}t; C:\WINDOWS\System32\drivers\{e85a0e97-fa40-4dc4-a79e-e1c1cabe72eb}t.sys [55872 2015-02-20] (StdLib) R2 ChromeEnhancer; C:\Program Files\ChromeEnhancer\ChromeEnhancer.exe [47104 2015-01-30] () [File not signed] <==== ATTENTION S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2015-02-20] (globalUpdate) [File not signed] S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2015-02-20] (globalUpdate) [File not signed] R2 IePluginServices; C:\Documents and Settings\All Users\Dane aplikacji\IePluginServices\PluginService.exe [715656 2014-09-02] (Cherished Technololgy LIMITED) R2 IHProtect Service; C:\Program Files\STab\ProtectService.exe [158864 2014-11-10] (TODO: ) S3 cpuz134; \??\C:\DOCUME~1\Dawid\USTAWI~1\Temp\cpuz134\cpuz134_x32.sys [X] S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X] S3 GGSAFERDriver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys [X] S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X] S3 SPBIUpdd; \??\C:\Program Files\Common Files\ShopperPro\spbiw.sys [X] S1 ttnfd; system32\drivers\ttnfd.sys [X] HKLM\...\Run: [gmsd_pl_53] => C:\Program Files\gmsd_pl_53\gmsd_pl_53.exe [3984040 2015-02-19] () HKLM\...\Run: [upgmsd_pl_53.exe] => C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\gmsd_pl_53\upgmsd_pl_53.exe [3355816 2015-02-19] () HKU\S-1-5-21-606747145-1592454029-1417001333-1003\...\Run: [NextLive] => C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\Dawid\Dane aplikacji\newnext.me\nengine.dll",EntryPoint -m l Startup: C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart\OPTISetup.lnk Startup: C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart\superpc_soft_partner.lnk Task: C:\WINDOWS\Tasks\3402a321-a57a-4603-89d0-0b6eba94e2c0-1.job => C:\Program Files\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\3402a321-a57a-4603-89d0-0b6eba94e2c0-4.job => C:\Program Files\ClickMovie1-Downloaderv10\3402a321-a57a-4603-89d0-0b6eba94e2c0-4.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\3402a321-a57a-4603-89d0-0b6eba94e2c0-5.job => C:\Program Files\ClickMovie1-Downloaderv10\3402a321-a57a-4603-89d0-0b6eba94e2c0-5.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-1.job => C:\Program Files\TheTorntv V10\TheTorntv V10-codedownloader.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-11.job => C:\Program Files\TheTorntv V10\40efd1ec-0f20-4c74-9133-c99f223e0388-11.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-2.job => C:\Program Files\TheTorntv V10\40efd1ec-0f20-4c74-9133-c99f223e0388-2.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-3.job => C:\Program Files\TheTorntv V10\40efd1ec-0f20-4c74-9133-c99f223e0388-3.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-4.job => C:\Program Files\TheTorntv V10\40efd1ec-0f20-4c74-9133-c99f223e0388-4.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-5.job => C:\Program Files\TheTorntv V10\40efd1ec-0f20-4c74-9133-c99f223e0388-5.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-6.job => C:\Program Files\TheTorntv V10\40efd1ec-0f20-4c74-9133-c99f223e0388-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-7.job => C:\Program Files\TheTorntv V10\40efd1ec-0f20-4c74-9133-c99f223e0388-7.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-1.job => C:\Program Files\GoHD\GoHD-codedownloader.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-11.job => C:\Program Files\GoHD\69037c5f-2c0a-49fe-be01-5222fdddafcf-11.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-2.job => C:\Program Files\GoHD\69037c5f-2c0a-49fe-be01-5222fdddafcf-2.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-4.job => C:\Program Files\GoHD\69037c5f-2c0a-49fe-be01-5222fdddafcf-4.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-5.job => C:\Program Files\GoHD\69037c5f-2c0a-49fe-be01-5222fdddafcf-5.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\7b27892f-9c0e-4d94-ab4b-524d430a59b1.job => C:\Program Files\TheTorntv V10\7b27892f-9c0e-4d94-ab4b-524d430a59b1.exe/agentregpath='TheTorntv V10' /appid=63311 /srcid='001823' /subid='0' /zdata='0' /bic=33CCE80B126E46378844B8A609F35A71IE /verifier=0657a018fc4853a0450dcef5eb9451d2 /installerversion=1_35_09_16 /installationtime=1410973725 /statsdomain=http://stats.newclientonlinestorage.com /errorsdomain=http://errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,184-0 /monetizationdomain=http://logs.newclientonlinestorage.com <==== ATTENTION Task: C:\WINDOWS\Tasks\9325da68-8615-4364-b2bd-8eb78d86a22e.job => C:\Program Files\TheTorntv V10\9325da68-8615-4364-b2bd-8eb78d86a22e.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-1-6.job => C:\Program Files\SavePass 1.1\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-1-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-1-7.job => C:\Program Files\SavePass 1.1\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-1-7.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-6.job => C:\Program Files\SavePass 1.1\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-6.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-7.job => C:\Program Files\SavePass 1.1\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-7.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\APSnotifierPP1.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\APSnotifierPP2.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\APSnotifierPP3.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\At1.job => C:\DOCUME~1\Dawid\DANEAP~1\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\WINDOWS\Tasks\DoctorPC_Popup.job => C:\Program Files\Doctor PC\Splash.exe Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\GPUP.job => C:\Program Files\GetPrivate\gpup.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\QUZOPZA.job => C:\Documents and Settings\Dawid\Dane aplikacji\QUZOPZA.exe Task: C:\WINDOWS\Tasks\ReimageUpdater.job => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\SMupdate1.job => C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== ATTENTION Task: C:\WINDOWS\Tasks\SMupdate2.job => C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== ATTENTION Task: C:\WINDOWS\Tasks\SMupdate3.job => C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== ATTENTION Task: C:\WINDOWS\Tasks\temp_69037c5f-2c0a-49fe-be01-5222fdddafcf-2.job => C:\Program Files\GoHD\69037c5f-2c0a-49fe-be01-5222fdddafcf-2.exe <==== ATTENTION GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620&q={searchTerms} HKU\S-1-5-21-606747145-1592454029-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 HKU\S-1-5-21-606747145-1592454029-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "http://www.only-search.com/?babsrc=NT_kms&affID=129300&tt=&mntrid=24A46C626D0EA94A&tsp=5386" <======= ATTENTION SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620&q={searchTerms} SearchScopes: HKLM -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchsunmy.info/?l=1&q={searchTerms}&pid=377&r=2013/12/24&hid=8686324548370343708&lg=EN&cc=PL&unqvl=45 SearchScopes: HKU\S-1-5-21-606747145-1592454029-1417001333-1003 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620&q={searchTerms} SearchScopes: HKU\S-1-5-21-606747145-1592454029-1417001333-1003 -> {017B1142-A96A-4461-B10F-2974A51DA370} URL = http://www.only-search.com/?babsrc=SP_kms&affID=129300&tt=&mntrid=24A46C626D0EA94A&tsp=5386&q={searchTerms} SearchScopes: HKU\S-1-5-21-606747145-1592454029-1417001333-1003 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.only-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=24A46C626D0EA94A&affID=129300&tsp=5386 SearchScopes: HKU\S-1-5-21-606747145-1592454029-1417001333-1003 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620&q={searchTerms} SearchScopes: HKU\S-1-5-21-606747145-1592454029-1417001333-1003 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchsunmy.info/?l=1&q={searchTerms}&pid=377&r=2013/12/24&hid=8686324548370343708&lg=EN&cc=PL&unqvl=45 BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited) ShortcutWithArgument: C:\Documents and Settings\Dawid\Menu Start\Programy\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) -> hxxp://isearch.omiga-plus.com/?type=sc&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 ShortcutWithArgument: C:\Documents and Settings\Dawid\Menu Start\Programy\Akcesoria\Narzędzia systemowe\Internet Explorer (bez dodatków).lnk -> C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) -> hxxp://isearch.omiga-plus.com/?type=sc&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 ShortcutWithArgument: C:\Documents and Settings\Dawid\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Uruchom przeglądarkę Internet Explorer.lnk -> C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) -> hxxp://isearch.omiga-plus.com/?type=sc&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com/?type=sc&ts=1387389562&from=cor&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe http://isearch.omiga-plus.com/?type=sc&ts=1422018086&from=face&uid=WDCXWD800JB-00JJC0_WD-WCAM9F78462084620 OPR Extension: (GoHD) - C:\Documents and Settings\Dawid\Dane aplikacji\Opera Software\Opera Stable\Extensions\bokijhalndhhhikpnaniimagniglonke [2014-09-05] OPR Extension: (No Name) - C:\Documents and Settings\Dawid\Dane aplikacji\Opera Software\Opera Stable\Extensions\gkookgoofbomddkomagahpnpdcnebnad [2014-09-30] CMD: del /q /s C:\HELP_DECRYPT.* C:\Documents and Settings\All Users\Dane aplikacji\{368b4672-9c59-d15d-368b-b46729c519ca} C:\Documents and Settings\All Users\Dane aplikacji\{d00e78e3-431d-94b0-d00e-e78e3431e38d} C:\Documents and Settings\All Users\Dane aplikacji\6e6d0694000012a9 C:\Documents and Settings\All Users\Dane aplikacji\e6ca635800005e96 C:\Documents and Settings\All Users\Dane aplikacji\IePluginServices C:\Documents and Settings\All Users\Dane aplikacji\InstallMate C:\Documents and Settings\All Users\Dane aplikacji\TEMP C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{3F1368BB-2CAB-437B-955B-0ABDD7D77663} C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{4681CF98-DA5F-485A-81FF-A001319C2A9C} C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{64FD8434-9478-42BA-853F-915FEDC87106} C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{9AB9BD24-02AB-4FFA-A50C-D6C925B25169} C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\SupportTasks C:\Documents and Settings\All Users\Menu Start\Programy\DangeSecond C:\Documents and Settings\All Users\Menu Start\Programy\GAMESDESKTOP C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome C:\Documents and Settings\All Users\Menu Start\Programy\KONAMI C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Games C:\Documents and Settings\All Users\Menu Start\Programy\PESEdit.com 2013 Patch C:\Documents and Settings\All Users\Menu Start\Programy\Ubisoft C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk C:\Documents and Settings\Dawid\TempWmicBatchFile.bat C:\Documents and Settings\Dawid\Dane aplikacji\.lockfile C:\Documents and Settings\Dawid\Dane aplikacji\aps.uninstall.scan.results C:\Documents and Settings\Dawid\Dane aplikacji\Explorer.EXE_log.txt C:\Documents and Settings\Dawid\Dane aplikacji\LiveSupport.exe_log.txt C:\Documents and Settings\Dawid\Dane aplikacji\NGSFIZU.exe C:\Documents and Settings\Dawid\Dane aplikacji\QUZOPZA C:\Documents and Settings\Dawid\Dane aplikacji\QUZOPZA.exe C:\Documents and Settings\Dawid\Dane aplikacji\regsvr32.exe_log.txt C:\Documents and Settings\Dawid\Dane aplikacji\AnyProtectEx C:\Documents and Settings\Dawid\Dane aplikacji\AVS4YOU C:\Documents and Settings\Dawid\Dane aplikacji\GG C:\Documents and Settings\Dawid\Dane aplikacji\Microsoft\Windows\GameExplorer\PlayTasks C:\Documents and Settings\Dawid\Dane aplikacji\Microsoft\Windows\GameExplorer\SupportTasks C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla C:\Documents and Settings\Dawid\Dane aplikacji\newnext.me C:\Documents and Settings\Dawid\Dane aplikacji\omiga-plus C:\Documents and Settings\Dawid\Dane aplikacji\onlysearch C:\Documents and Settings\Dawid\Dane aplikacji\OpenFM C:\Documents and Settings\Dawid\Dane aplikacji\OpenOffice.org2 C:\Documents and Settings\Dawid\Dane aplikacji\systweak C:\Documents and Settings\Dawid\Dane aplikacji\webssearches C:\Documents and Settings\Dawid\Menu Start\Programy\BitLord C:\Documents and Settings\Dawid\SendTo\Android (ALLPlayer Pilot).lnk C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\*.tmp C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\proxy.log C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Doctor_PC C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\FilesFrog Update Checker C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\gmsd_pl_53 C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Google C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Mobogenie C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Mozilla C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\PriceMeter C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\SmartWeb C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji\Sun C:\Documents and Settings\Dawid\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi C:\Program Files\7208fe53-6a12-4f5c-8449-0179fe1ab100 C:\Program Files\AdvanceElite C:\Program Files\AnyProtectEx C:\Program Files\Cyti Web C:\Program Files\ClickMovie1-Downloaderv10 C:\Program Files\ChromeEnhancer C:\Program Files\Doctor PC C:\Program Files\doctorpclab.com C:\Program Files\globalUpdate C:\Program Files\GetPrivate C:\Program Files\GoHD C:\Program Files\Google C:\Program Files\gmsd_pl_53 C:\Program Files\Mozilla Firefox C:\Program Files\Reimage C:\Program Files\SavePass 1.1 C:\Program Files\SupTab C:\Program Files\TheTorntv V10 C:\Program Files\Common Files\System\SysMenu.dll C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension C:\WINDOWS\pss\TornTvDownloader.lnkStartup C:\WINDOWS\system32\OptimizerMonitor.ini C:\WINDOWS\system32\OptimizerMonitorOff.ini C:\WINDOWS\System32\drivers\{507a9b68-2b48-4a22-b662-e674fb6a16f7}t.sys C:\WINDOWS\System32\drivers\{5178f938-0bd5-47c1-8242-71f6e3e72925}t.sys C:\WINDOWS\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}t.sys C:\WINDOWS\System32\drivers\{9652c7a7-7363-4f0e-bf03-3b32b55ea241}Gt.sys C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}t.sys C:\WINDOWS\System32\drivers\{df47b99d-26f5-45f4-85c5-97b4da365f21}t.sys C:\WINDOWS\System32\drivers\{e6ca9971-30ed-444a-9489-82fca50b2062}t.sys C:\WINDOWS\System32\drivers\{e85a0e97-fa40-4dc4-a79e-e1c1cabe72eb}t.sys Hosts: Reg: reg delete HKCU\Software\Google /f Reg: reg delete HKCU\Software\Mozilla /f Reg: reg delete HKCU\Software\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Google /f Reg: reg delete HKLM\SOFTWARE\Mozilla /f Reg: reg delete HKLM\SOFTWARE\mozilla.org /f Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^Dawid^Menu Start^Programy^Autostart^TornTvDownloader.lnk" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Advanced SystemCare 6" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Akamai NetSession Interface" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\fst_pl_185" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GarenaPlus" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GB_UPDATE" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GG" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LogMeIn Hamachi Ui" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Only-search" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PriceMeterW" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SDP" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TornTv Downloader" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\upfst_pl_185.exe" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f CMD: dir /a "C:\Documents and Settings\Administrator\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\All Users\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\All Users\Ustawienia lokalne\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\Dawid\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\Dawid\Ustawienia lokalne\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\LocalService\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\NetworkService\Dane aplikacji" CMD: dir /a "C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji" CMD: dir /a "C:\Program Files" EmptyTemp: ***************** Processes closed successfully. Error: (0) Failed to create a restore point. {507a9b68-2b48-4a22-b662-e674fb6a16f7}t => Unable to stop service {507a9b68-2b48-4a22-b662-e674fb6a16f7}t => Service deleted successfully. {5178f938-0bd5-47c1-8242-71f6e3e72925}t => Unable to stop service {5178f938-0bd5-47c1-8242-71f6e3e72925}t => Service deleted successfully. {55dce8ba-9dec-4013-937e-adbf9317d990}t => Unable to stop service {55dce8ba-9dec-4013-937e-adbf9317d990}t => Service deleted successfully. {9652c7a7-7363-4f0e-bf03-3b32b55ea241}Gt => Unable to stop service {9652c7a7-7363-4f0e-bf03-3b32b55ea241}Gt => Service deleted successfully. {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt => Unable to stop service {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt => Service deleted successfully. {9edd0ea8-2819-47c2-8320-b007d5996f8a}t => Unable to stop service {9edd0ea8-2819-47c2-8320-b007d5996f8a}t => Service deleted successfully. {df47b99d-26f5-45f4-85c5-97b4da365f21}t => Unable to stop service {df47b99d-26f5-45f4-85c5-97b4da365f21}t => Service deleted successfully. {e6ca9971-30ed-444a-9489-82fca50b2062}t => Unable to stop service {e6ca9971-30ed-444a-9489-82fca50b2062}t => Service deleted successfully. {e85a0e97-fa40-4dc4-a79e-e1c1cabe72eb}t => Unable to stop service {e85a0e97-fa40-4dc4-a79e-e1c1cabe72eb}t => Service deleted successfully. ChromeEnhancer => Service deleted successfully. globalUpdate => Service not found. globalUpdatem => Service not found. IePluginServices => Service deleted successfully. IHProtect Service => Service deleted successfully. cpuz134 => Service deleted successfully. EagleXNt => Service deleted successfully. GGSAFERDriver => Service deleted successfully. qrnfd_1_10_0_9 => Service deleted successfully. SPBIUpdd => Service deleted successfully. ttnfd => Service deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\gmsd_pl_53 => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\upgmsd_pl_53.exe => value deleted successfully. HKU\S-1-5-21-606747145-1592454029-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive => value deleted successfully. C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart\OPTISetup.lnk => Moved successfully. C:\Documents and Settings\Dawid\Menu Start\Programy\Autostart\superpc_soft_partner.lnk => Moved successfully. C:\WINDOWS\Tasks\3402a321-a57a-4603-89d0-0b6eba94e2c0-1.job => Moved successfully. C:\WINDOWS\Tasks\3402a321-a57a-4603-89d0-0b6eba94e2c0-4.job => Moved successfully. C:\WINDOWS\Tasks\3402a321-a57a-4603-89d0-0b6eba94e2c0-5.job => Moved successfully. C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-1.job => Moved successfully. C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-11.job => Moved successfully. C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-2.job => Moved successfully. C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-3.job => Moved successfully. C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-4.job => Moved successfully. C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-5.job => Moved successfully. C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-6.job => Moved successfully. C:\WINDOWS\Tasks\40efd1ec-0f20-4c74-9133-c99f223e0388-7.job => Moved successfully. C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-1.job => Moved successfully. C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-11.job => Moved successfully. C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-2.job => Moved successfully. C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-4.job => Moved successfully. C:\WINDOWS\Tasks\69037c5f-2c0a-49fe-be01-5222fdddafcf-5.job => Moved successfully. C:\WINDOWS\Tasks\7b27892f-9c0e-4d94-ab4b-524d430a59b1.job => Moved successfully. C:\WINDOWS\Tasks\9325da68-8615-4364-b2bd-8eb78d86a22e.job => Moved successfully. C:\WINDOWS\Tasks\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-1-6.job => Moved successfully. C:\WINDOWS\Tasks\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-1-7.job => Moved successfully. C:\WINDOWS\Tasks\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-6.job => Moved successfully. C:\WINDOWS\Tasks\a972f7c5-cd22-40e6-bf2e-f10faa9624f1-7.job => Moved successfully. C:\WINDOWS\Tasks\APSnotifierPP1.job => Moved successfully. C:\WINDOWS\Tasks\APSnotifierPP2.job => Moved successfully. C:\WINDOWS\Tasks\APSnotifierPP3.job => Moved successfully. C:\WINDOWS\Tasks\At1.job => Moved successfully. C:\WINDOWS\Tasks\DoctorPC_Popup.job => Moved successfully. C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job not found. C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job not found. C:\WINDOWS\Tasks\GPUP.job => Moved successfully. C:\WINDOWS\Tasks\QUZOPZA.job not found. C:\WINDOWS\Tasks\ReimageUpdater.job => Moved successfully. C:\WINDOWS\Tasks\SMupdate1.job => Moved successfully. C:\WINDOWS\Tasks\SMupdate2.job => Moved successfully. C:\WINDOWS\Tasks\SMupdate3.job => Moved successfully. C:\WINDOWS\Tasks\temp_69037c5f-2c0a-49fe-be01-5222fdddafcf-2.job => Moved successfully. C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully. C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKU\S-1-5-21-606747145-1592454029-1417001333-1003\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKU\S-1-5-21-606747145-1592454029-1417001333-1003\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}" => Key deleted successfully. HKCR\CLSID\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} => Key not found. HKU\S-1-5-21-606747145-1592454029-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-606747145-1592454029-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{017B1142-A96A-4461-B10F-2974A51DA370}" => Key deleted successfully. HKCR\CLSID\{017B1142-A96A-4461-B10F-2974A51DA370} => Key not found. "HKU\S-1-5-21-606747145-1592454029-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key deleted successfully. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. "HKU\S-1-5-21-606747145-1592454029-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. "HKU\S-1-5-21-606747145-1592454029-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}" => Key deleted successfully. HKCR\CLSID\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" => Key deleted successfully.