Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 19-04-2015 01 Ran by bb at 2015-04-21 10:05:41 Run:2 Running from C:\Documents and Settings\bb\Pulpit Loaded Profiles: bb (Available profiles: bb & UpdatusUser) Boot Mode: Safe Mode (minimal) ============================================== Content of fixlist: ***************** CloseProcesses: HKU\S-1-5-21-1547161642-1935655697-1801674531-1004\...\Run: [ZgN8ZyBhngoonJjN] => c:\documents and settings\bb\dane aplikacji\zgn8zybhngoonjjn\zgn8zybhngoonjjn.exe [812872 2015-04-13] (Google Inc.) HKU\S-1-5-21-1547161642-1935655697-1801674531-1004\...\Run: [x28L9mM7M0TJLKtY4TnMv] => c:\documents and settings\bb\dane aplikacji\x28l9mm7m0tjlkty4tnmv\x28l9mm7m0tjlkty4tnmv.exe [889976 2015-04-07] (Opera Software) HKU\S-1-5-21-1547161642-1935655697-1801674531-1004\...\Run: [BvIkyhS6eVotKhiDws] => c:\documents and settings\bb\dane aplikacji\bvikyhs6evotkhidws\bvikyhs6evotkhidws.exe [889976 2015-04-07] (Opera Software) C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software C:\Documents and Settings\bb\Dane aplikacji\BvIkyhS6eVotKhiDws C:\Documents and Settings\bb\Dane aplikacji\x28L9mM7M0TJLKtY4TnMv C:\Documents and Settings\bb\Dane aplikacji\ZgN8ZyBhngoonJjN EmptyTemp: ***************** Processes closed successfully. HKU\S-1-5-21-1547161642-1935655697-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\ZgN8ZyBhngoonJjN => value deleted successfully. HKU\S-1-5-21-1547161642-1935655697-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\x28L9mM7M0TJLKtY4TnMv => value deleted successfully. HKU\S-1-5-21-1547161642-1935655697-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\BvIkyhS6eVotKhiDws => value deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software => Moved successfully. C:\Documents and Settings\bb\Dane aplikacji\BvIkyhS6eVotKhiDws => Moved successfully. C:\Documents and Settings\bb\Dane aplikacji\x28L9mM7M0TJLKtY4TnMv => Moved successfully. C:\Documents and Settings\bb\Dane aplikacji\ZgN8ZyBhngoonJjN => Moved successfully. EmptyTemp: => Removed 2.8 GB temporary data. The system needed a reboot. ==== End of Fixlog 10:07:55 ====