Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-03-2015 Ran by n at 2015-03-18 18:08:04 Run:6 Running from C:\Documents and Settings\n\Moje dokumenty\pobrane Loaded Profiles: n (Available profiles: n) Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\...\MountPoints2: {13f17bbe-032e-11e3-ae14-0026185b1c8c} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Współczesne_uzbrojenie_WO_PL_ANG.avi HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} SearchScopes: HKLM -> DefaultScope value is missing. SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&ts=1426525285&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&ts=1426525285&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&q={searchTerms} SearchScopes: HKU\S-1-5-21-1661413818-2498473542-1586077186-1006 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C&ts=1426525285&type=default&q={searchTerms} FF Homepage: hxxp://do-search.com/?type=hppp&ts=1426525249&from=cor&uid=ST9160310AS_5SV8216CXXXX5SV8216C C:\Program Files\Opera C:\Documents and Settings\n\Ustawienia lokalne\Dane aplikacji\Opera Software C:\Documents and Settings\n\Dane aplikacji\Opera Software Reboot: ***************** "HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{13f17bbe-032e-11e3-ae14-0026185b1c8c}" => Key deleted successfully. HKCR\CLSID\{13f17bbe-032e-11e3-ae14-0026185b1c8c} => Key not found. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. "HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}" => Key deleted successfully. HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => Key not found. "HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. "HKU\S-1-5-21-1661413818-2498473542-1586077186-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}" => Key deleted successfully. HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => Key not found. Firefox homepage deleted successfully. C:\Program Files\Opera => Moved successfully. C:\Documents and Settings\n\Ustawienia lokalne\Dane aplikacji\Opera Software => Moved successfully. C:\Documents and Settings\n\Dane aplikacji\Opera Software => Moved successfully. The system needed a reboot. ==== End of Fixlog 18:08:05 ====