Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-08-2013 01 Ran by marcin at 2013-08-27 11:20:58 Run:1 Running from C:\Users\marcin\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** [noparse]AppInit_DLLs-x32: [0 ] () Task: {C0964A88-FF45-4A01-B5AD-E7BEFB66CCB8} - System32\Tasks\GoforFilesUpdate => C:\Users\marcin\Desktop\GoforFiles\GFFUpdater.exe No File FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\Web Assistant\Firefox FF Plugin-x32: @hanbiton.com/HbsMozillaLauncher - D:\Mythos\hanbitsoft\nphlauncher.dll No File FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File S3 TBPanel; No ImagePath S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [x] C:\Users\marcin\AppData\Roaming\EZDownloader C:\Users\marcin\AppData\Roaming\GoforFiles C:\Users\marcin\AppData\Roaming\Systweak C:\ProgramData\Spybot - Search & Destroy Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f[/noparse] ***************** HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C0964A88-FF45-4A01-B5AD-E7BEFB66CCB8} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0964A88-FF45-4A01-B5AD-E7BEFB66CCB8} => Key deleted successfully. C:\Windows\System32\Tasks\GoforFilesUpdate => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoforFilesUpdate => Key deleted successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087} => Value deleted successfully. HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @hanbiton.com/HbsMozillaLauncher - D:\Mythos\hanbitsoft\nphlauncher.dll No File => Key not found. FF Plugin-x32: @hanbiton.com/HbsMozillaLauncher - D:\Mythos\hanbitsoft\nphlauncher.dll No File not found. HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin => Key deleted successfully. C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll not found. TBPanel => Service deleted successfully. X6va009 => Service deleted successfully. C:\Users\marcin\AppData\Roaming\EZDownloader => Moved successfully. C:\Users\marcin\AppData\Roaming\GoforFiles => Moved successfully. C:\Users\marcin\AppData\Roaming\Systweak => Moved successfully. C:\ProgramData\Spybot - Search & Destroy => Moved successfully. ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f[/noparse] ========= Bť¤D: Nieprawidˆowa skˆadania. Aby pozna† spos˘b uľycia, wpisz "REG DELETE /?". ========= End of Reg: ========= ==== End of Fixlog ====