Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-09-2013 Ran by Sławek at 2013-09-23 12:09:09 Run:1 Running from C:\Users\Sławek\Desktop\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379786357 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379786357 URLSearchHook: (No Name) - {3bbd3c14-4c16-4989-8366-95bc9179779d} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379768435 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379768435&type=default&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379768435&type=default&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379768435&type=default&q={searchTerms} SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379768435&type=default&q={searchTerms} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=D6CAF655F9B73B43&affID=120695&tsp=5004 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379786306&type=default&q={searchTerms} Toolbar: HKLM - FireShot - {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Sławek\AppData\Roaming\Mozilla\Firefox\Profiles\63u36efb.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\library\fsaddin64-0.98.38.dll No File Toolbar: HKLM-x32 - FireShot - {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Sławek\AppData\Roaming\Mozilla\Firefox\Profiles\63u36efb.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\library\fsaddin-0.98.38.dll No File FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qvo6.xml FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST9750423AS_5WS0TT0KXXXX5WS0TT0K&ts=1379768448 S3 AthBTPort; system32\DRIVERS\btath_flt.sys [x] S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [x] S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [x] S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [x] S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [x] S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [x] S3 BtFilter; system32\DRIVERS\btfilter.sys [x] C:\Users\Sławek\AppData\Local\Google C:\Users\Sławek\AppData\Roaming\DesktopIconGoodgame C:\ProgramData\Babylon C:\ProgramData\DSearchLink C:\ProgramData\eSafe C:\User Data ***************** HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\\{3bbd3c14-4c16-4989-8366-95bc9179779d} => Value deleted successfully. HKCR\CLSID\{3bbd3c14-4c16-4989-8366-95bc9179779d} => Key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Sławek\AppData\Roaming\Mozilla\Firefox\Profiles\63u36efb.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} => Value not found. HKCR\CLSID\{6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Sławek\AppData\Roaming\Mozilla\Firefox\Profiles\63u36efb.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Sławek\AppData\Roaming\Mozilla\Firefox\Profiles\63u36efb.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} => Value not found. HKCR\Wow6432Node\CLSID\{6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Sławek\AppData\Roaming\Mozilla\Firefox\Profiles\63u36efb.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} => Key not found. C:\Program Files (x86)\mozilla firefox\searchplugins\qvo6.xml => Moved successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92} => Value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Value was restored successfully. AthBTPort => Service deleted successfully. BTATH_A2DP => Service deleted successfully. BTATH_BUS => Service deleted successfully. BTATH_HCRP => Service deleted successfully. BTATH_LWFLT => Service deleted successfully. BTATH_RCP => Service deleted successfully. BtFilter => Service deleted successfully. C:\Users\Sławek\AppData\Local\Google => Moved successfully. C:\Users\Sławek\AppData\Roaming\DesktopIconGoodgame => Moved successfully. C:\ProgramData\Babylon => Moved successfully. C:\ProgramData\DSearchLink => Moved successfully. C:\ProgramData\eSafe => Moved successfully. C:\User Data => Moved successfully. ==== End of Fixlog ====