Fix result of Farbar Recovery Scan Tool (x86) Version: 21-06-2015 01 Ran by CL at 2015-06-23 17:22:20 Run:4 Running from C:\Documents and Settings\CL\Desktop Loaded Profiles: CL (Available Profiles: CL & Tomek & admin & Administrator & Guest) Boot Mode: Normal ============================================== fixlist content: ***************** C:\Documents and Settings\WOJTEK\My Documents\Opera(12614)-dp.exe StartMenuInternet: (HKLM) Opera.exe - C:\Program Files\Opera\Opera.exe http://www.qvo6.com/...X&ts=1377785095 CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f Task: C:\WINDOWS\Tasks\At1.job => C:\DOCUME~1\CL\APPLIC~1\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION SearchScopes: HKU\S-1-5-21-2154615204-4275496255-3731553294-1006 -> ${searchCLSID} URL = http://search.yahoo....q={searchTerms} HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\...\Run: [MSConfig] => C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE [169984 2008-04-14] (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> No Filepath CustomCLSID: HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> No Filepath CustomCLSID: HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> No Filepath CustomCLSID: HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> No Filepath CustomCLSID: HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> No Filepath EmptyTemp: ***************** C:\Documents and Settings\CL\My Documents\Opera(12614)-dp.exe => moved successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\Opera.exe\shell\open\command\\Default => value restored successfully HKLM\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk => key removed successfully. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= The operation completed successfully ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= The operation completed successfully ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= The operation completed successfully ========= End of Reg: ========= C:\WINDOWS\Tasks\At1.job => moved successfully. HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\${searchCLSID} => key removed successfully. HKCR\CLSID\${searchCLSID} => key not found. HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\MSConfig => value removed successfully. HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}=> key removed successfully. HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339} => key removed successfully. HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3} => key removed successfully. HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE} => key removed successfully. HKU\S-1-5-21-2154615204-4275496255-3731553294-1006_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0} => key removed successfully. EmptyTemp: => 422.9 MB temporary data Removed. The system needed a reboot. ==== End of Fixlog 17:23:42 ====