Fix result of Farbar Recovery Scan Tool (x86) Version: 05-07-2015 Ran by laptop at 2015-07-08 21:14:44 Run:2 Running from F:\programy\na viry Loaded Profiles: laptop (Available Profiles: laptop) Boot Mode: Normal ============================================== fixlist content: ***************** H:\.qf H:\FOUND.000 H:\qf H:\cfsdaacdfawd H:\*lnk CMD: attrib /d /s -s -h H:\* J:\cfsdaacdfawd J:\*lnk CMD: attrib /d /s -s -h J:\* L:\cfsdaacdfawd L:\*lnk CMD: attrib /d /s -s -h L:\* Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UserFaultCheck " /f HKLM\...\Run: [asodakaossd] => D:\WINDOWS\system32\cmd.exe /c start D:\Documents" "and" "Settings\laptop\Dane" "aplikacji\aiasfacoiaksf.vbs exit HKLM\...\RunOnce: [] => [X] HKU\S-1-5-21-1993962763-573735546-839522115-1003\...\Run: [asodakaossd] => D:\WINDOWS\system32\cmd.exe /c start D:\Documents" "and" "Settings\laptop\Dane" "aplikacji\aiasfacoiaksf.vbs exit Startup: D:\Documents and Settings\laptop\Menu Start\Programy\Autostart\asodakaossd.lnk [2015-07-01] ShortcutWithArgument: D:\Documents and Settings\laptop\Menu Start\Programy\Autostart\asodakaossd.lnk -> D:\WINDOWS\system32\cmd.exe (Microsoft Corporation) -> /c start D:\Documents" "and" "Settings\laptop\Dane" "aplikacji\aiasfacoiaksf.vbs exit ShortcutTarget: asodakaossd.lnk -> D:\WINDOWS\system32\cmd.exe (Microsoft Corporation) HKU\S-1-5-21-1993962763-573735546-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f FF HKLM\...\Firefox\Extensions: [avg@toolbar] - D:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search\FireFoxExt\17.3.0.49 S2 Update Mgr RollAround; "D:\Program Files\Common Files\2a617352-d396-46a3-a71b-5d89535356cf\updater.exe" [X] S4 s24trans; system32\DRIVERS\s24trans.sys [X] D:\Documents and Settings\laptop\Dane aplikacji\afweorgqweasf.exe D:\Documents and Settings\laptop\Dane aplikacji\afweoopeasf.exe D:\Documents and Settings\laptop\Dane aplikacji\aiasfacoiaksf.vbs EmptyTemp: ***************** H:\.qf => moved successfully. H:\FOUND.000 => moved successfully. H:\qf => moved successfully. H:\cfsdaacdfawd => moved successfully. H:\*lnk => moved successfully. ========= attrib /d /s -s -h H:\* ========= ========= End of CMD: ========= J:\cfsdaacdfawd => moved successfully. J:\*lnk => moved successfully. ========= attrib /d /s -s -h J:\* ========= ========= End of CMD: ========= L:\cfsdaacdfawd => moved successfully. L:\*lnk => moved successfully. ========= attrib /d /s -s -h L:\* ========= ========= End of CMD: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UserFaultCheck " /f ========= Błąd: system nie może odnaleźć określonego klucza rejestru lub wartości. ========= End of Reg: ========= HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\asodakaossd => value removed successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ => value not found. HKU\S-1-5-21-1993962763-573735546-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\asodakaossd => value removed successfully. D:\Documents and Settings\laptop\Menu Start\Programy\Autostart\asodakaossd.lnk => moved successfully. D:\Documents and Settings\laptop\Menu Start\Programy\Autostart\asodakaossd.lnk => File not found. D:\WINDOWS\system32\cmd.exe => moved successfully. "HKU\S-1-5-21-1993962763-573735546-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= ========= End of Reg: ========= HKLM\Software\Mozilla\Firefox\Extensions\\avg@toolbar => value removed successfully. Update Mgr RollAround => Service removed successfully. s24trans => Service removed successfully. D:\Documents and Settings\laptop\Dane aplikacji\afweorgqweasf.exe => moved successfully. D:\Documents and Settings\laptop\Dane aplikacji\afweoopeasf.exe => moved successfully. Could not move "D:\Documents and Settings\laptop\Dane aplikacji\aiasfacoiaksf.vbs" => Scheduled to move on reboot. EmptyTemp: => 2.7 MB temporary data Removed. Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-07-08 21:18:17)<= D:\Documents and Settings\laptop\Dane aplikacji\aiasfacoiaksf.vbs => is moved successfully ==== End of Fixlog 21:18:17 ====