Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 05-09-2013 Ran by AS-BUD at 2013-09-06 08:03:27 Run:1 Running from C:\Users\AS-BUD\Desktop\Nowy folder Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {10FA7D97-A6C3-4274-B1A3-2CE463916831} - System32\Tasks\zxgc => C:\Windows\system32\mstscaxy.dll [2013-09-05] () Task: C:\Windows\Tasks\zxgc.job => C:\Windows\system32\mstscaxy.dll C:\Windows\system32\mstscaxy.dll C:\Users\AS-BUD\AppData\Roaming\hellomoto HKCU\...\Run: [] - [x] HKCU\...\Run: [ABBYY Screenshot Reader Retail] - [x] HKCU\...\Run: [AdobeBridge] - [x] Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X] SearchScopes: HKLM - DefaultScope value is missing. FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\qvo6.xml S3 BOCDRIVE; \??\C:\Program Files\Comodo\CBOClean\BOCDRIVE.sys [x] S3 massfilter; system32\drivers\massfilter.sys [x] S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [x] S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [x] S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x] CMD: netsh advfirewall reset Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{10FA7D97-A6C3-4274-B1A3-2CE463916831} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10FA7D97-A6C3-4274-B1A3-2CE463916831} => Key deleted successfully. C:\Windows\System32\Tasks\zxgc => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\zxgc => Key deleted successfully. C:\Windows\Tasks\zxgc.job => Moved successfully. C:\Windows\system32\mstscaxy.dll => Moved successfully. C:\Users\AS-BUD\AppData\Roaming\hellomoto => Moved successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ABBYY Screenshot Reader Retail => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value deleted successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. C:\Program Files\mozilla firefox\browser\searchplugins\qvo6.xml => Moved successfully. BOCDRIVE => Service deleted successfully. massfilter => Service deleted successfully. MREMPR5 => Service deleted successfully. MRENDIS5 => Service deleted successfully. ZTEusbmdm6k => Service deleted successfully. ZTEusbnmea => Service deleted successfully. ZTEusbser6k => Service deleted successfully. ========= netsh advfirewall reset ========= Ok. ========= End of CMD: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====