Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-04-2015 Ran by Root at 2015-04-26 12:14:17 Run:2 Running from C:\Users\Root\Desktop Loaded Profiles: Root (Available profiles: Root & molsz_000) Boot Mode: Normal ============================================== Content of fixlist: ***************** Toolbar: HKLM - Yahoo Toolbar - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files (x86)\TNT2\2.0.0.1976\IEToolbar64.dll No File Toolbar: HKLM-x32 - Yahoo Toolbar - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files (x86)\TNT2\2.0.0.1976\ietoolbar.dll No File FF NewTab: hxxp://services.freshy.com/general/newhometab.php?hometab=tab&partner=11187&guid={76A20FFC-55AF-4A81-929F-717802341046}&i= FF DefaultSearchEngine: Yahoo: FF SelectedSearchEngine: Yahoo: FF Plugin HKU\S-1-5-21-1794835599-1053917579-465741465-1002: @tnt2npapi.com/Plugin -> C:\Users\Root\AppData\Local\TNT2\2.0.0.1976\npTNT2.dll No File FF SearchPlugin: C:\Users\Root\AppData\Roaming\Mozilla\Firefox\Profiles\jvwv15cu.default\searchplugins\yahoo-1.xml [2015-04-20] FF Extension: Yahoo Toolbar - C:\Users\Root\AppData\Roaming\Mozilla\Firefox\Profiles\jvwv15cu.default\Extensions\{cf15270e-cf08-4def-b4ea-6a5ac23f3bca}.xpi [2015-04-14] FF Extension: browse pulse - C:\Users\Root\AppData\Roaming\Mozilla\Firefox\Profiles\jvwv15cu.default\Extensions\{d50ee84a-0149-4b66-8189-96351513c9ee}.xpi [2015-04-23] HKU\S-1-5-21-1794835599-1053917579-465741465-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://services.fres...17802341046}&i= Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f C:\Windows\Minidump\042515-70890-01.dmp EmptyTemp: ***************** HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{00011268-E188-40DF-A514-835FCD78B1BF} => value deleted successfully. "HKCR\CLSID\{00011268-E188-40DF-A514-835FCD78B1BF}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{00011268-E188-40DF-A514-835FCD78B1BF} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{00011268-E188-40DF-A514-835FCD78B1BF}" => Key deleted successfully. Firefox newtab deleted successfully. Firefox DefaultSearchEngine deleted successfully. Firefox SelectedSearchEngine deleted successfully. "HKU\S-1-5-21-1794835599-1053917579-465741465-1002\Software\MozillaPlugins\@tnt2npapi.com/Plugin" => Key deleted successfully. C:\Users\Root\AppData\Local\TNT2\2.0.0.1976\npTNT2.dll not found. C:\Users\Root\AppData\Roaming\Mozilla\Firefox\Profiles\jvwv15cu.default\searchplugins\yahoo-1.xml => Moved successfully. C:\Users\Root\AppData\Roaming\Mozilla\Firefox\Profiles\jvwv15cu.default\Extensions\{cf15270e-cf08-4def-b4ea-6a5ac23f3bca}.xpi => Moved successfully. C:\Users\Root\AppData\Roaming\Mozilla\Firefox\Profiles\jvwv15cu.default\Extensions\{d50ee84a-0149-4b66-8189-96351513c9ee}.xpi => Moved successfully. HKU\S-1-5-21-1794835599-1053917579-465741465-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= C:\Windows\Minidump\042515-70890-01.dmp => Moved successfully. EmptyTemp: => Removed 102.4 MB temporary data. The system needed a reboot. ==== End of Fixlog 12:14:34 ====