Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 16-09-2013 03 Ran by jan at 2013-09-19 17:07:07 Run:2 Running from F:\do laptopa Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?SearchSource=10&ctid=CT2417076 URLSearchHook: gry Toolbar - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) BHO: gry Toolbar - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) Toolbar: HKLM - gry Toolbar - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) Toolbar: HKCU -gry Toolbar - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) C:\Documents and Settings\jan\Dane aplikacji\Hzlklr.exe C:\*.exe C:\gry.ico C:\gry.url E:\autorun.inf E:\hckboa.exe CMD: rd /s /q C:\RECYCLER CMD: rd /s /q E:\RECYCLER CMD: attrib /d /s -s -h E:\* Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Hzlklr /f ***************** HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} => Value not found. HKCR\CLSID\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} => Key not found. HKCR\CLSID\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} => Value not found. HKCR\CLSID\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{8532A8B7-C06A-41BB-936A-8CE73E4711ED} => Value not found. HKCR\CLSID\{8532A8B7-C06A-41BB-936A-8CE73E4711ED} => Key not found. Could not move "C:\Documents and Settings\jan\Dane aplikacji\Hzlklr.exe" => Scheduled to move on reboot. C:\*.exe => Moved successfully. C:\gry.ico => Moved successfully. C:\gry.url => Moved successfully. E:\autorun.inf => Moved successfully. "E:\hckboa.exe" => File/Directory not found. ========= rd /s /q C:\RECYCLER ========= ========= End of CMD: ========= ========= rd /s /q E:\RECYCLER ========= ========= End of CMD: ========= ========= attrib /d /s -s -h E:\* ========= ========= End of CMD: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Hzlklr /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= =========== Result of Scheduled Files to move =========== C:\Documents and Settings\jan\Dane aplikacji\Hzlklr.exe => Moved successfully. ==== End of Fixlog ====