Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-12-2013 02 Ran by Paul at 2013-12-16 09:57:58 Run:1 Running from H:\WindowsUpdate -rozwiazywanie problemow Boot Mode: Normal ============================================== Content of fixlist: ***************** AppInit_DLLs-x32: [ ] () BootExecute: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = URLSearchHook: HKCU - (No Name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - No File BHO-x32: tanzuki - {ba3b897d-8fbc-4320-87a3-74f0ffd6d965} - No File ShellExecuteHooks-x32: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - No File [ ] S2 PanService; S2 Update tanzuki; C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\ayt7ogjn.default\extensions\firefox@tanzuki.net.xpi C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\Firefox\extensions\firefox@tanzuki.net.xpi C:\Users\Paul\AppData\Local\470b60k28dxqgx6d2tsa2p C:\ProgramData\470b60k28dxqgx6d2tsa2p C:\ProgramData\R49LW C:\Users\Paul\10080942.pub C:\Windows\SysWow64\drivers\fsbts.sys Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search" /f Reg: reg add "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0191A6B0-1154-4C22-9182-23A95BBE92D9} /f Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0191A6B0-1154-4C22-9182-23A95BBE92D9} /f Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0191A6B0-1154-4C22-9182-23A95BBE92D9} /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ***************** HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Local Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{472734EA-242A-422b-ADF8-83D1E48CC825} => Value deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba3b897d-8fbc-4320-87a3-74f0ffd6d965} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{ba3b897d-8fbc-4320-87a3-74f0ffd6d965} => Key deleted successfully. HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} => Key deleted successfully. PanService => Service deleted successfully. Update tanzuki => Service deleted successfully. C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\ayt7ogjn.default\extensions\firefox@tanzuki.net.xpi => Moved successfully. C:\Users\Paul\AppData\Roaming\mozilla\firefox\profiles\Firefox\extensions\firefox@tanzuki.net.xpi => Moved successfully. C:\Users\Paul\AppData\Local\470b60k28dxqgx6d2tsa2p => Moved successfully. C:\ProgramData\470b60k28dxqgx6d2tsa2p => Moved successfully. C:\ProgramData\R49LW => Moved successfully. C:\Users\Paul\10080942.pub => Moved successfully. C:\Windows\SysWow64\drivers\fsbts.sys => Moved successfully. ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg add "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0191A6B0-1154-4C22-9182-23A95BBE92D9} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0191A6B0-1154-4C22-9182-23A95BBE92D9} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0191A6B0-1154-4C22-9182-23A95BBE92D9} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====