Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 27-09-2013 01 Ran by Agata at 2013-10-02 11:49:51 Run:1 Running from C:\Users\Agata\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** R2 WsysSvc; C:\ProgramData\eSafe\eGdpSvc.exe [825920 2013-09-16] (Wsys Co., Ltd.) C:\ProgramData\eSafe C:\Users\Agata\AppData\Roaming\eDownload C:\Users\Agata\Desktop\Downloads.lnk HKCU\...\Policies\Explorer: [] HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=hp&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380223105 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=hp&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380223105 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=hp&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380223105 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=sc&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380223105 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=ds&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380223107&type=default&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=ds&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380223107&type=default&q={searchTerms} SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=ds&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380223107&type=default&q={searchTerms} SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=ds&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380223107&type=default&q={searchTerms} CHR StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=sc&from=newgdp&uid=ST9250315AS_5VC3CALLXXXX5VC3CALL&ts=1380449604 ***************** WsysSvc => Service deleted successfully. C:\ProgramData\eSafe => Moved successfully. C:\Users\Agata\AppData\Roaming\eDownload => Moved successfully. C:\Users\Agata\Desktop\Downloads.lnk => Moved successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HKCU\...\Policies\Explorer: [] => Value not found. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\Default => Value was restored successfully. The system needs a manual reboot. ==== End of Fixlog ====