Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-09-2013 Ran by admin at 2013-09-02 19:07:03 Run:1 Running from C:\Documents and Settings\admin\Pulpit Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\...\Run: [Hoolapp Android] - "C:\DOCUME~1\admin\DANEAP~1\HOOLAP~1\Hoolapp.exe" /Minimized [x] HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=121845&tt=gc_&babsrc=HP_ss_gin2g&mntrId=F42390F652E7725E HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=6&barid={0194C1AE-063B-4CD7-97B1-E3B501FA4052} SearchScopes: HKLM - DefaultScope {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CICwrbWAiLMCFSTLtAodeB4ABA&ptb=DED01C81-4BC3-4521-8E76-59ACC45519C7&ind=2013042607&n=77fc97af&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKLM - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CICwrbWAiLMCFSTLtAodeB4ABA&ptb=DED01C81-4BC3-4521-8E76-59ACC45519C7&ind=2013042607&n=77fc97af&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={0194C1AE-063B-4CD7-97B1-E3B501FA4052} SearchScopes: HKCU - DefaultScope {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CICwrbWAiLMCFSTLtAodeB4ABA&ptb=DED01C81-4BC3-4521-8E76-59ACC45519C7&ind=2013042607&n=77fc97af&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F42390F652E7725E&affID=119357&tsp=4992 SearchScopes: HKCU - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CICwrbWAiLMCFSTLtAodeB4ABA&ptb=DED01C81-4BC3-4521-8E76-59ACC45519C7&ind=2013042607&n=77fc97af&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={0194C1AE-063B-4CD7-97B1-E3B501FA4052} BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll No File BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com) Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll No File Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com) Toolbar: HKCU -No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml S3 PCAMPR5; \??\C:\WINDOWS\system32\PCAMPR5.SYS [x] C:\WINDOWS\tasks\EPUpdater.job C:\Documents and Settings\admin\Dane aplikacji\BabSolution C:\Documents and Settings\admin\Dane aplikacji\Babylon C:\Documents and Settings\admin\Dane aplikacji\File Scout C:\Documents and Settings\admin\Dane aplikacji\PerformerSoft C:\Documents and Settings\All Users\Dane aplikacji\Ask C:\Documents and Settings\All Users\Dane aplikacji\Babylon C:\Documents and Settings\All Users\Dane aplikacji\Common Files C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search" /f ***************** HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Hoolapp Android => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key deleted successfully. HKCR\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} => Key deleted successfully. HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} => Value deleted successfully. HKCR\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{82E1477C-B154-48D3-9891-33D83C26BCD3} => Value deleted successfully. HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} => Value deleted successfully. HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847} => Key not found. HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin => Key deleted successfully. C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll not found. HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin => Key deleted successfully. C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll not found. C:\Program Files\mozilla firefox\searchplugins\babylon.xml => Moved successfully. PCAMPR5 => Service deleted successfully. C:\WINDOWS\tasks\EPUpdater.job => Moved successfully. C:\Documents and Settings\admin\Dane aplikacji\BabSolution => Moved successfully. C:\Documents and Settings\admin\Dane aplikacji\Babylon => Moved successfully. C:\Documents and Settings\admin\Dane aplikacji\File Scout => Moved successfully. C:\Documents and Settings\admin\Dane aplikacji\PerformerSoft => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Ask => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Babylon => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Common Files => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService => Moved successfully. ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ==== End of Fixlog ====