Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-07-2013 Ran by Alex at 2013-07-02 14:56:42 Run:2 Running from C:\Users\Alex\Desktop\usb fake Boot Mode: Normal ============================================== HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\ => Value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\59796 => Value not found. HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Error setting value. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ALLUpdate => Value not found. C:\PROGRA~3\LOCALS~1\Temp\ccvkga.exe => Moved successfully. Could not move C:\Users\Alex\LOCALS~1\Temp\ccbkyui.com. => Scheduled to move on reboot. C:\Windows\DeleteOnReboot.bat => File/Directory not found. C:\Users\Alex\Documents\APNSetup1.exe => File/Directory not found. C:\MSI => File/Directory not found. Could not move F:\autorun.inf. => Scheduled to move on reboot. F:\4#BKMHXAELUTLKRO.ini => File/Directory not found. F:\desktop.ini => Moved successfully. F:\Thumbs.db => Moved successfully. F:\USB DISK (4GB).lnk => Moved successfully. G:\autorun.inf => File/Directory not found. G:\4#YEEGFHYX.ini => File/Directory not found. G:\desktop.ini => File/Directory not found. G:\Thumbs.db => File/Directory not found. G:\TOSHIBA 8GB (8GB).lnk => File/Directory not found. ========= attrib /d /s -s -h F:\* ========= ========= End of CMD: ========= ========= attrib /d /s -s -h G:\* ========= Nie mona odnale cieki - G:\. ========= End of CMD: ========= ========= reg add "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" /v "Default Scope" /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukoczona pomylnie. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v "Default Scope" /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukoczona pomylnie. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v "Default Scope" /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukoczona pomylnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= BD: System nie znalaz w rejestrze okrelonego klucza albo wartoci. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= BD: System nie znalaz w rejestrze okrelonego klucza albo wartoci. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= BD: System nie znalaz w rejestrze okrelonego klucza albo wartoci. ========= End of Reg: ========= HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1100182F-6956-4598-BB2D-5CC50155C194} => Key not found. C:\Windows\System32\Tasks\{81FB999B-6968-49E8-8C52-0BE2AF335D2B} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{81FB999B-6968-49E8-8C52-0BE2AF335D2B} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{561B61D4-F93A-414B-893D-810884567BEF} => Key not found. C:\Windows\System32\Tasks\{CEA9E291-502F-49BD-AFE0-F12EE721AB48} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CEA9E291-502F-49BD-AFE0-F12EE721AB48} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{75F96ED6-B6A3-4DC9-BF56-6E66D745EB9D} => Key not found. C:\Windows\System32\Tasks\{DC1CA97C-2224-4C6D-AE9C-BF6A3DD21516} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DC1CA97C-2224-4C6D-AE9C-BF6A3DD21516} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{87674AC3-B446-428E-B924-BC2E94B726DD} => Key not found. C:\Windows\System32\Tasks\{A54AD1E6-8BCA-4170-B969-20D028B208E6} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A54AD1E6-8BCA-4170-B969-20D028B208E6} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{935FE923-AE40-4915-8CE6-D918143A957A} => Key not found. C:\Windows\System32\Tasks\{5E607AEF-ACD4-4D00-B9F4-BA6C2BB7B15F} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5E607AEF-ACD4-4D00-B9F4-BA6C2BB7B15F} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4061C4B-6764-4CC7-8C13-8BDB9B2C2A6F} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\RVLKL\RVLKL => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C704AFA1-2044-4B1E-A9B1-C890B1CF486B} => Key not found. C:\Windows\System32\Tasks\{1F98F5EF-CD6C-481B-A1B6-1D98F43D39FF} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{1F98F5EF-CD6C-481B-A1B6-1D98F43D39FF} => Key not found. =========== Result of Scheduled Files to move =========== C:\Users\Alex\LOCALS~1\Temp\ccbkyui.com => Moved successfully. F:\autorun.inf => Moved successfully. ==== End of Fixlog ====