Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 26-04-2015 Ran by AGROPOL at 2015-04-26 17:18:14 Run:1 Running from C:\Users\AGROPOL\Desktop\skany Loaded Profiles: AGROPOL (Available profiles: AGROPOL) Boot Mode: Normal ============================================== Content of fixlist: ***************** fF SearchPlugin: C:\Users\AGROPOL\AppData\Roaming\Mozilla\Firefox\Profiles\ix4210kl.default\searchplugins\do-search.xml [2015-04-26] FF Extension: Fast Start - C:\Users\AGROPOL\AppData\Roaming\Mozilla\Firefox\Profiles\ix4210kl.default\Extensions\quick_searchff@gmail.com [2015-04-24] FF HKLM\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\AGROPOL\AppData\Roaming\Mozilla\Firefox\Profiles\ix4210kl.default\extensions\quick_searchff@gmail.com FF Extension: No Name - C:\Users\AGROPOL\AppData\Roaming\Mozilla\Firefox\Profiles\ix4210kl.default\extensions\sweetsearch@gmail.com [Not Found] HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com...q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com...q={searchTerms} Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\AGROPOL.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\case mx 200.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Case.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Claas jaguar 850 2005r.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\DOMINATOR 96 CLASSIC.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\dominator 98 ds.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\egitto.ppt.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Emil.ppt.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Filtry HM400-1.xls.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Ogłoszenia.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\OLK6C.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\P1030162.JPG.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\P1030163.JPG.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\P1030164.JPG.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\pisma.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Pismo- korekta VAT UE -1.doc.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Pismo- korekta VAT UE .doc.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Pismo- korekta VAT7.doc.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\PRAWO ADMINISTRACYJNE-1.ppt.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\PRAWO ADMINISTRACYJNE.ppt.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\prezentacja.ppt.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\servisy VAT.xls.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\SKANOWANIE.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Spis maszyn.xls.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Stavostrojvv1500.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\szkolne.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\technischer_fragebogen (1).xls.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\technischer_fragebogen.xls.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Temp.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Termin składania VAT UE.xls.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Thumbs.db.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Umowa zlec.styczeń 12.xls.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\WYJAZD.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\zambosi.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Zapraszam na prezentacje.ppt.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\ZBRODNIA KTÓRA.ppt.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Ziemie polskie w I poÅ‚owie XIX wieku test Grupa A.doc.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Ziemie polskie w I poÅ‚owie XIX wieku test Grupa B.doc.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\ZUS.xls.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\ДОГОВІР ПЕРЕВЕЗЕННЯ ВАНТАЖІВ.doc.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Контракт з поляками (на польській мові)2.doc.LNK C:\Users\AGROPOL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk C:\Users\AGROPOL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Uruchom program Microsoft Office Outlook.lnk EmptyTemp: ***************** C:\Users\AGROPOL\AppData\Roaming\Mozilla\Firefox\Profiles\ix4210kl.default\searchplugins\do-search.xml => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Mozilla\Firefox\Profiles\ix4210kl.default\Extensions\quick_searchff@gmail.com => Moved successfully. HKLM\Software\Mozilla\Firefox\Extensions\\quick_searchff@gmail.com => value deleted successfully. C:\Users\AGROPOL\AppData\Roaming\Mozilla\Firefox\Profiles\ix4210kl.default\extensions\sweetsearch@gmail.com => not found. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\AGROPOL.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\case mx 200.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Case.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Claas jaguar 850 2005r.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\DOMINATOR 96 CLASSIC.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\dominator 98 ds.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\egitto.ppt.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Emil.ppt.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Filtry HM400-1.xls.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Ogłoszenia.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\OLK6C.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\P1030162.JPG.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\P1030163.JPG.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\P1030164.JPG.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\pisma.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Pismo- korekta VAT UE -1.doc.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Pismo- korekta VAT UE .doc.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Pismo- korekta VAT7.doc.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\PRAWO ADMINISTRACYJNE-1.ppt.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\PRAWO ADMINISTRACYJNE.ppt.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\prezentacja.ppt.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\servisy VAT.xls.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\SKANOWANIE.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Spis maszyn.xls.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Stavostrojvv1500.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\szkolne.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\technischer_fragebogen (1).xls.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\technischer_fragebogen.xls.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Temp.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Termin składania VAT UE.xls.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Thumbs.db.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Umowa zlec.styczeń 12.xls.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\WYJAZD.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\zambosi.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Zapraszam na prezentacje.ppt.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\ZBRODNIA KTÓRA.ppt.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Ziemie polskie w I poÅ‚owie XIX wieku test Grupa A.doc.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Ziemie polskie w I poÅ‚owie XIX wieku test Grupa B.doc.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\ZUS.xls.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\ДОГОВІР ПЕРЕВЕЗЕННЯ ВАНТАЖІВ.doc.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Office\Niedawny\Контракт з поляками (на польській мові)2.doc.LNK => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk => Moved successfully. C:\Users\AGROPOL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Uruchom program Microsoft Office Outlook.lnk => Moved successfully. EmptyTemp: => Removed 8.7 GB temporary data. The system needed a reboot. ==== End of Fixlog 17:20:27 ====