Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-03-2015 Ran by n at 2015-03-17 13:48:52 Run:5 Running from C:\Documents and Settings\n\Moje dokumenty\pobrane Loaded Profiles: n (Available profiles: n) Boot Mode: Normal ============================================== Content of fixlist: ***************** Closeprocesses: HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&ts=1426525285&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&ts=1426525285&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&ts=1426525285&type=default&q={searchTerms} FF DefaultSearchEngine: do-search FF SearchPlugin: C:\Documents and Settings\n\Dane aplikacji\Mozilla\Firefox\Profiles\e43pkovn.default-1426232573691\searchplugins\do-search.xml [2015-03-16] R2 WindowsMangerProtect; C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-16] (SysTool PasSame LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect EmptyTemp: ***************** Processes closed successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => Key not found. HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => Key not found. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => Key not found. HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => Key not found. Firefox DefaultSearchEngine deleted successfully. "C:\Documents and Settings\n\Dane aplikacji\Mozilla\Firefox\Profiles\e43pkovn.default-1426232573691\searchplugins\do-search.xml" => not found. WindowsMangerProtect => Service not found. "C:\Documents and Settings\All Users\Dane aplikacji\WindowsMangerProtect" => File/Directory not found. EmptyTemp: => Removed 28.6 MB temporary data. The system needed a reboot. ==== End of Fixlog 13:49:06 ====