Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-10-2013 Ran by Janek at 2013-11-01 15:24:48 Run:1 Running from C:\Users\Janek\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {5BED8212-FF09-4F98-99E4-935597C89C72} - System32\Tasks\BitGuard => Sc.exe start BitGuard Task: {DCBA9BBA-6245-48F6-9E3D-306FB6C2CA96} - System32\Tasks\RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\Common Files\AVG Secure Search HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2404376 2013-10-01] ( HKU\UpdatusUser\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] - C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe [1266712 2013-06-03] (AVG Secure Search) AppInit_DLLs-x32: c:\PROGRA~3\BitGuard\271769~1.27\{C16C1~1\BitGuard.dll [2735584 2013-10-22] () HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.22find.co...2&ts=1362419811 SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-se...119357&tsp=5012 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.22find...2&ts=1362419813 SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={1335E23F-D9BB-4A3B-B42F-EB56FE046309}&mid=0028c198fa91415d9ad7f5511f902596-7013a3bda34ea410c23a47e6af72c9f18f827ae6&lang=pl&ds=ik011&pr=&d=2012-12-23 18:47:31&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms} SearchScopes: HKCU - ŰźĆîZ§’2ąŢpv¨IÍá*X(Ž2s(ŰÎŔJşÔÓµť± vË°!×—(äĽ48иpatm6ęo^Mp`Ëő÷_iŁwľ!„Áű†x˘8€ŮjŔ˙ţ ´Ń;áa´[¦†8 ş~ŹRŮxśňÜ8'Ł-)x­ä­ URL = BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll (AVG Secure Search) Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll (AVG Secure Search) Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll (AVG Secure Search) CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\17.0.1.12\avg.crx R2 vToolbarUpdater17.0.12; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [1734680 2013-10-01] (AVG Secure Search) R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-10-01] (AVG Technologies) 2013-10-30 08:23 - 2013-10-30 14:15 - 00003420 _____ C:\Windows\System32\Tasks\BitGuard 2013-10-29 23:41 - 2013-10-29 23:41 - 00000000 ____D C:\Users\Janek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-10-29 16:23 - 2013-10-29 22:43 - 00000000 ____D C:\Program Files (x86)\Dowwnnload keeeper 2013-10-29 16:18 - 2013-10-29 16:18 - 00000000 ____D C:\ProgramData\WinterSoft 2013-10-29 11:54 - 2013-10-30 00:36 - 00000000 ____D C:\Program Files (x86)\SearchNewTab 2013-10-29 11:53 - 2013-10-29 22:46 - 00000000 ____D C:\Program Files (x86)\WebSearch 2013-10-29 11:53 - 2013-10-29 22:46 - 00000000 ____D C:\Program Files (x86)\Ss.Helper 2013-10-29 11:52 - 2013-10-30 00:36 - 00000000 ____D C:\Program Files (x86)\Download keepeer 2013-10-29 11:51 - 2013-10-29 16:28 - 00000000 ____D C:\ProgramData\InstallMate C:\Users\Janek\AppData\Local\Temp\56295uninstall.exe C:\Users\Janek\AppData\Local\Temp\Sqlite3.dll ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5BED8212-FF09-4F98-99E4-935597C89C72} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BED8212-FF09-4F98-99E4-935597C89C72} => Key deleted successfully. C:\Windows\System32\Tasks\BitGuard not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BitGuard => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DCBA9BBA-6245-48F6-9E3D-306FB6C2CA96} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DCBA9BBA-6245-48F6-9E3D-306FB6C2CA96} => Key deleted successfully. C:\Windows\System32\Tasks\RunAsStdUser => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RunAsStdUser => Key deleted successfully. "C:\Program Files (x86)\AVG Secure Search\vprot.exe" => File/Directory not found. "C:\Program Files (x86)\Common Files\AVG Secure Search" => File/Directory not found. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\vProt => Value not found. HKU\UpdatusUser\Software\Microsoft\Windows\CurrentVersion\Run\\AVG-Secure-Search-Update_JUNE2013_TB => Value deleted successfully. HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key not found. HKCR\CLSID\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found. HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ŰźĆîZ§’2ąŢpv¨IÍá*X(Ž2s(ŰÎŔJşÔÓµť± vË°!×—(äĽ48иpatm6ęo^Mp`Ëő÷_iŁwľ!„Áű†x˘8€ŮjŔ˙ţ ´Ń;áa´[¦†8 ş~ŹRŮxśňÜ8'Ł-)x­ä­ => Key not found. HKCR\CLSID\ŰźĆîZ§’2ąŢpv¨IÍá*X(Ž2s(ŰÎŔJşÔÓµť± vË°!×—(äĽ48иpatm6ęo^Mp`Ëő÷_iŁwľ!„Áű†x˘8€ŮjŔ˙ţ ´Ń;áa´[¦†8 ş~ŹRŮxśňÜ8'Ł-)x­ä­ => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found. HKCR\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{95B7759C-8C7F-4BF1-B163-73684A933233} => Value not found. HKCR\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found. HKCR\Wow6432Node\PROTOCOLS\Handler\viprotocol => Key not found. HKCR\Wow6432Node\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} => Key not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof => Key not found. "C:\ProgramData\AVG Secure Search\ChromeExt\17.0.1.12\avg.crx" => File/Directory not found. vToolbarUpdater17.0.12 => Service not found. avgtp => Service not found. "C:\Windows\System32\Tasks\BitGuard" => File/Directory not found. "C:\Users\Janek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard" => File/Directory not found. C:\Program Files (x86)\Dowwnnload keeeper => Moved successfully. C:\ProgramData\WinterSoft => Moved successfully. C:\Program Files (x86)\SearchNewTab => Moved successfully. "C:\Program Files (x86)\WebSearch" => File/Directory not found. C:\Program Files (x86)\Ss.Helper => Moved successfully. C:\Program Files (x86)\Download keepeer => Moved successfully. C:\ProgramData\InstallMate => Moved successfully. C:\Users\Janek\AppData\Local\Temp\56295uninstall.exe => Moved successfully. C:\Users\Janek\AppData\Local\Temp\Sqlite3.dll => Moved successfully. ==== End of Fixlog ====