Fix result of Farbar Recovery Scan Tool (FRST written by farbar) Version: 22-04-2012 Ran by SYSTEM at 2012-04-24 21:58:15 R:1 Running from G:\ ============================================== HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Session Manager\SubSystems\\Windows Value was restored. C:\Windows\System32\consrv.dll not found. C:\Windows\System32\dds_trash_log.cmd moved successfully. C:\Windows\assembly\tmp\U not found. C:\Windows\assembly\tmp\loader.tlb not found. C:\Windows\assembly\tmp\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6} not found. C:\Windows\assembly\GAC_64\desktop.ini moved successfully. C:\Windows\assembly\GAC_32\desktop.ini moved successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs unlockerdriver5 Deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs trufos Deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs SE27mgmt Deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs ovt519 Deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs mcsysmon Deleted successfully. ========= reg delete HKLM\SYSTEM\ControlSet001\Services\unlockerdriver5 /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SYSTEM\ControlSet001\Services\trufos /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SYSTEM\ControlSet001\Services\SE27mgmt /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SYSTEM\ControlSet001\Services\ovt519 /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SYSTEM\ControlSet001\Services\mcsysmon /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\mozilla\Firefox\Extensions /v {6E19037A-12E3-4295-8915-ED48BC341614} /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= C:\Windows\system32\fsutil.exe reparsepoint delete C:\Windows\system64 ========= ========= End of CMD: ========= ========= attrib -r -s -h C:\Windows\system32\drivers\etc\hosts ========= Access denied - C:\Windows\system32\drivers\etc\hosts ========= End of CMD: ========= ========= del /q C:\Windows\tasks\At*.job ========= ========= End of CMD: ========= ========= del /q C:\Users\Jacek\AppData\Local\Temp*.html ========= ========= End of CMD: ========= C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml moved successfully. C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml moved successfully. C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml moved successfully. C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\eu5bfebk.default\searchplugins\Search_Results.xml moved successfully. ==== End of Fixlog ====