Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-10-2013 Ran by Marcin at 2013-10-23 17:28:03 Run:1 Running from C:\Users\Marcin\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {1E9F26DE-F8E9-499A-9D23-0A6366D5BA8B} - \a2zLyrics-1-codedownloader No Task File Task: {4E22A3EE-DC63-4481-9E58-C62B8F7D39D4} - System32\Tasks\a2zLyrics-1-firefoxinstaller => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-firefoxinstaller.exe Task: {50965D33-F651-424A-81C0-160C19860725} - \a2zLyrics-1-chromeinstaller No Task File Task: {9F9B61A0-25E7-4B93-94B5-68B5847ECF7E} - \a2zLyrics-1-updater No Task File Task: {F2EAFC16-8055-4C30-84AD-889ADCD1E764} - \a2zLyrics-1-enabler No Task File CHR HKLM-x32\...\Chrome\Extension: [dlmdlmoekcipeicfbnohedgkglmbhcla] - C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx FF Extension: No Name - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\a6wuznt8.default\Extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com C:\Users\Marcin\AppData\Local\avgchrome C:\Users\Marcin\AppData\Roaming\iSafe C:\Users\Marcin\AppData\Roaming\eCyber C:\Users\Marcin\Downloads\iSafedl.exe C:\Users\Marcin\Desktop\Search.lnk C:\Windows\SysWOW64\searchplugins C:\Windows\SysWOW64\Extensions C:\Program Files\Enigma Software Group Reg: reg export "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" C:\Users\Marcin\Desktop\searchscopes.reg ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1E9F26DE-F8E9-499A-9D23-0A6366D5BA8B} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1E9F26DE-F8E9-499A-9D23-0A6366D5BA8B} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a2zLyrics-1-codedownloader => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4E22A3EE-DC63-4481-9E58-C62B8F7D39D4} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E22A3EE-DC63-4481-9E58-C62B8F7D39D4} => Key deleted successfully. C:\Windows\System32\Tasks\a2zLyrics-1-firefoxinstaller => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a2zLyrics-1-firefoxinstaller => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{50965D33-F651-424A-81C0-160C19860725} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{50965D33-F651-424A-81C0-160C19860725} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a2zLyrics-1-chromeinstaller => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9F9B61A0-25E7-4B93-94B5-68B5847ECF7E} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F9B61A0-25E7-4B93-94B5-68B5847ECF7E} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a2zLyrics-1-updater => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F2EAFC16-8055-4C30-84AD-889ADCD1E764} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2EAFC16-8055-4C30-84AD-889ADCD1E764} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a2zLyrics-1-enabler => Key not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlmdlmoekcipeicfbnohedgkglmbhcla => Key deleted successfully. "C:\Program Files (x86)\Whilokii\dlmdlmoekcipeicfbnohedgkglmbhcla.crx" => File/Directory not found. C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\a6wuznt8.default\Extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com => Moved successfully. C:\Users\Marcin\AppData\Local\avgchrome => Moved successfully. C:\Users\Marcin\AppData\Roaming\iSafe => Moved successfully. C:\Users\Marcin\AppData\Roaming\eCyber => Moved successfully. C:\Users\Marcin\Downloads\iSafedl.exe => Moved successfully. "C:\Users\Marcin\Desktop\Search.lnk" => File/Directory not found. C:\Windows\SysWOW64\searchplugins => Moved successfully. C:\Windows\SysWOW64\Extensions => Moved successfully. C:\Program Files\Enigma Software Group => Moved successfully. ========= reg export "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" C:\Users\Marcin\Desktop\searchscopes.reg ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====