Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 15-04-2015 02 Ran by A at 2015-04-15 18:51:29 Run:2 Running from C:\Users\A\Desktop Loaded Profiles: A (Available profiles: A & Gość) Boot Mode: Normal ============================================== Content of fixlist: ***************** Reg: reg delete HKCR\*\shell\!sfa /f Reg: reg delete HKCR\*\shell\sfa_checksum /f Reg: reg delete HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I /f Reg: reg delete HKCU\Software\dobreprogramy /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart File Advisor_is1" /f Reg: reg query HKCR\Unknown /s DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed] C:\Windows\system32\Drivers\StarOpen.sys ***************** ========= reg delete HKCR\*\shell\!sfa /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete HKCR\*\shell\sfa_checksum /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete HKCU\Software\dobreprogramy /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart File Advisor_is1" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg query HKCR\Unknown /s ========= HKEY_CLASSES_ROOT\Unknown AlwaysShowExt REG_SZ QueryClassStore REG_SZ TypeOverlay REG_SZ HKEY_CLASSES_ROOT\Unknown\DefaultIcon (domy˜lny) REG_EXPAND_SZ %SystemRoot%\System32\shell32.dll,0 HKEY_CLASSES_ROOT\Unknown\shell (domy˜lny) REG_SZ openas HKEY_CLASSES_ROOT\Unknown\shell\openas MultiSelectModel REG_SZ Single HKEY_CLASSES_ROOT\Unknown\shell\openas\command (domy˜lny) REG_EXPAND_SZ "C:\Program Files\Smart File Advisor\sfa.exe" /unknown "%1" DelegateExecute REG_SZ {e44e9428-bdbc-4987-a099-40dc8fd255e7} sfa_backup REG_SZ %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 HKEY_CLASSES_ROOT\Unknown\shell\opendlg LegacyDisable REG_SZ MultiSelectModel REG_SZ Single HKEY_CLASSES_ROOT\Unknown\shell\opendlg\command (domy˜lny) REG_EXPAND_SZ "C:\Program Files\Smart File Advisor\sfa.exe" /unknown "%1" sfa_backup REG_SZ %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 ========= End of Reg: ========= "HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}" => Key deleted successfully. "HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}" => Key deleted successfully. "HKCR\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}" => Key deleted successfully. "HKCR\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}" => Key deleted successfully. "HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" => Key deleted successfully. "HKCR\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" => Key deleted successfully. StarOpen => Service stopped successfully. StarOpen => Service deleted successfully. C:\Windows\system32\Drivers\StarOpen.sys => Moved successfully. ==== End of Fixlog 18:51:31 ====