Fix result of Farbar Recovery Scan Tool (x86) Version:08-08-2015 01 Ran by A (2015-08-08 18:16:33) Run:1 Running from E:\Documents and Settings\A\Pulpit\frst Loaded Profiles: A (Available Profiles: A) Boot Mode: Normal ============================================== fixlist content: ***************** StandardProfile\GloballyOpenPorts: [2900:TCP] => Enabled:ztdtqhnh E:\Documents and Settings\All Users\Dane aplikacji\6WinManPro6 E:\Program Files\MiuiTab HKLM\...\Winlogon: [Userinit] E:\WINDOWS\system32\userinit.exe,EXPLORER.EXE Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f BHO: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> E:\Program Files\MiuiTab\SupTab.dll [2015-08-04] (Good Co. Limited) Toolbar: HKU\S-1-5-21-1645522239-1659004503-725345543-1004 -> Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsur...H4PXXXX5LZ8DH4P HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsur...q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsur...H4PXXXX5LZ8DH4P HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsur...q={searchTerms} HKU\S-1-5-21-1645522239-1659004503-725345543-1004\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsur...H4PXXXX5LZ8DH4P HKU\S-1-5-21-1645522239-1659004503-725345543-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsur...H4PXXXX5LZ8DH4P SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsur...q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsur...q={searchTerms} SearchScopes: HKU\S-1-5-21-1645522239-1659004503-725345543-1004 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsur...q={searchTerms} SearchScopes: HKU\S-1-5-21-1645522239-1659004503-725345543-1004 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsur...q={searchTerms} SearchScopes: HKU\S-1-5-21-1645522239-1659004503-725345543-1004 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsur...q={searchTerms} SearchScopes: HKU\S-1-5-21-1645522239-1659004503-725345543-1004 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsur...q={searchTerms} SearchScopes: HKU\S-1-5-21-1645522239-1659004503-725345543-1004 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.istartsur...q={searchTerms} FF Homepage: hxxp://www.istartsurf.com/?type=hppp&ts=1439036453&z=7d94f16b19b00e9ddd29621g3zfc4t9efccq9cdq4q&from=cor&uid=ST9120822AS_5LZ8DH4PXXXX5LZ8DH4P FF Extension: No Name - E:\Documents and Settings\A\Dane aplikacji\IDM\idmmzcc5 [not found] FF Extension: No Name - E:\Documents and Settings\A\Dane aplikacji\Mozilla\Firefox\Profiles\a1yj8rz1.default\extensions\deskCutv2@gmail.com [not found] FF Extension: No Name - E:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found] R2 IHProtect Service; E:\Program Files\MiuiTab\ProtectService.exe [125112 2015-08-04] (XTab system) R2 WindowsMangerProtect; E:\Documents and Settings\All Users\Dane aplikacji\6WinManPro6\ProtectWindowsManager.exe [708264 2015-08-08] (DTools LIMITED) <==== ATTENTION S2 fyzmyr; E:\WINDOWS\system32\yyllqvv.dll [X] S3 AR5211; system32\DRIVERS\ar5211.sys [X] S4 asc; no ImagePath S4 asc3350p; no ImagePath S4 asc3550; no ImagePath S3 ASNDIS5; \??\E:\PROGRA~1\ATKHOT~1\ASNDIS5.SYS [X] S4 Atdisk; no ImagePath S4 cd20xrnt; no ImagePath S1 Changer; no ImagePath S4 CmdIde; no ImagePath S4 Cpqarray; no ImagePath U4 dac2w2k; no ImagePath S4 dac960nt; no ImagePath S4 dpti2o; no ImagePath S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X] S4 hpn; no ImagePath S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] E:\Documents and Settings\All Users\Dane aplikacji\IHProtectUpDate EmptyTemp: ***************** HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2900:TCP => value removed successfully. E:\Documents and Settings\All Users\Dane aplikacji\6WinManPro6 => moved successfully. "E:\Program Files\MiuiTab" => File/Folder not found. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => value restored successfully ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => key not found. HKCR\CLSID\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => key not found. HKU\S-1-5-21-1645522239-1659004503-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => value not found. HKCR\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => key not found. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-1645522239-1659004503-725345543-1004\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKU\S-1-5-21-1645522239-1659004503-725345543-1004\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKU\S-1-5-21-1645522239-1659004503-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully. "HKU\S-1-5-21-1645522239-1659004503-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => key removed successfully. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found. HKU\S-1-5-21-1645522239-1659004503-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => key not found. HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => key not found. HKU\S-1-5-21-1645522239-1659004503-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKU\S-1-5-21-1645522239-1659004503-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => key not found. HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => key not found. Firefox homepage removed successfully. E:\Documents and Settings\A\Dane aplikacji\IDM\idmmzcc5 => not found. E:\Documents and Settings\A\Dane aplikacji\Mozilla\Firefox\Profiles\a1yj8rz1.default\extensions\deskCutv2@gmail.com => not found. E:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} => not found. IHProtect Service => service not found. WindowsMangerProtect => service not found. fyzmyr => service removed successfully. AR5211 => service removed successfully. asc => service removed successfully. asc3350p => service removed successfully. asc3550 => service removed successfully. ASNDIS5 => service removed successfully. Atdisk => service removed successfully. cd20xrnt => service removed successfully. Changer => service removed successfully. CmdIde => service removed successfully. Cpqarray => service removed successfully. dac2w2k => service removed successfully. dac960nt => service removed successfully. dpti2o => service removed successfully. ewusbnet => service removed successfully. ew_hwusbdev => service removed successfully. ew_usbenumfilter => service removed successfully. hpn => service removed successfully. huawei_enumerator => service removed successfully. hwdatacard => service removed successfully. "E:\Documents and Settings\All Users\Dane aplikacji\IHProtectUpDate" => File/Folder not found. EmptyTemp: => 305.7 MB temporary data Removed. The system needed a reboot. ==== End of Fixlog 18:17:02 ====