Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015 Ran by Jkrasnodebski at 2015-03-18 11:56:49 Run:3 Running from C:\Users\Jkrasnodebski\Desktop Loaded Profiles: Jkrasnodebski (Available profiles: UpdatusUser & Jkrasnodebski) Boot Mode: Normal ============================================== Content of fixlist: ***************** BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\new_plugin\npjp2.dll No File S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] RemoveDirectory: C:\AdwCleaner RemoveDirectory: C:\FRST\Quarantine RemoveDirectory: C:\ProgramData\Malwarebytes RemoveDirectory: C:\ProgramData\RogueKiller CMD: del /q C:\Users\Jkrasnodebski\Desktop\oiv1d25w.exe CMD: del /q C:\Users\Jkrasnodebski\Downloads\AdwCleaner*.exe CMD: del /q C:\Users\Jkrasnodebski\Downloads\JRT*.exe CMD: del /q C:\Windows\SysWOW64\trz3785.tmp Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Reader Speed Launcher: /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Babylon Client" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\swg" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f CMD: netsh winsock reset EmptyTemp: ***************** "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin" => Key deleted successfully. MBAMSwissArmy => Service deleted successfully. "C:\AdwCleaner" => Removed successfully. "C:\FRST\Quarantine" => Removed successfully. "C:\ProgramData\Malwarebytes" => Removed successfully. "C:\ProgramData\RogueKiller" => Removed successfully. ========= del /q C:\Users\Jkrasnodebski\Desktop\oiv1d25w.exe ========= ========= End of CMD: ========= ========= del /q C:\Users\Jkrasnodebski\Downloads\AdwCleaner*.exe ========= ========= End of CMD: ========= ========= del /q C:\Users\Jkrasnodebski\Downloads\JRT*.exe ========= ========= End of CMD: ========= ========= del /q C:\Windows\SysWOW64\trz3785.tmp ========= ========= End of CMD: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Reader Speed Launcher: /f =========