Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 24-09-2013 Ran by Michał at 2013-09-24 18:25:23 Run:2 Running from I:\ Boot Mode: Safe Mode (minimal) ============================================== Content of fixlist: ***************** HKCU\...\Winlogon: [Shell] explorer.exe,C:\Documents and Settings\Michal\Dane aplikacji\cache.dat [135168 2002-09-20] () <==== ATTENTION C:\Documents and Settings\Michal\Dane aplikacji\cache.dat C:\Documents and Settings\Michal\Dane aplikacji\cache.ini HKLM\...\Winlogon: [System] lsass.exe No File Winlogon\Notify\crypt: crypts.dll [X] HKCU\...\Policies\Explorer: [NoBandCustomize] 0 HKCU\...\Policies\Explorer: [NoMovingBands] 0 HKCU\...\Policies\Explorer: [NoCloseDragDropBands] 0 HKCU\...\Policies\Explorer: [NoSetTaskbar] 0 HKCU\...\Policies\Explorer: [NoToolbarsOnTaskbar] 0 HKCU\...\Policies\Explorer: [NoSaveSettings] 0 HKCU\...\Policies\Explorer: [ClassicShell] 0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.v9.com/?utm_source=b&utm_medium=vlt HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.v9.com/?utm_source=b&utm_medium=vlt HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.v9.com/?utm_source=b&utm_medium=vlt HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.v9.com/?utm_source=b&utm_medium=vlt FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\v9.xml FF Extension: OneClickDownloader - C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\9sfnxklx.default\Extensions\OneClickDownload@OneClickDownload.com DPF: {5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} http://mks.com.pl/skaner/SkanerOnline.cab DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /f ***************** HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully. "C:\Documents and Settings\Michal\Dane aplikacji\cache.dat" => File/Directory not found. "C:\Documents and Settings\Michal\Dane aplikacji\cache.ini" => File/Directory not found. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\System => Value deleted successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt => Key deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoBandCustomize => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoMovingBands => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoCloseDragDropBands => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoSetTaskbar => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoToolbarsOnTaskbar => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoSaveSettings => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ClassicShell => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Search Bar => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\ICQ Search => Value deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. C:\Program Files\mozilla firefox\searchplugins\v9.xml => Moved successfully. C:\Documents and Settings\Michal\Dane aplikacji\Mozilla\Firefox\Profiles\9sfnxklx.default\Extensions\OneClickDownload@OneClickDownload.com => not found. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} => Key deleted successfully. HKCR\CLSID\{5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{68282C51-9459-467B-95BF-3C0E89627E55} => Key deleted successfully. HKCR\CLSID\{68282C51-9459-467B-95BF-3C0E89627E55} => Key deleted successfully. ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ==== End of Fixlog ====