Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 18-12-2013 05 Ran by 333 at 2013-12-19 12:05:42 Run:1 Running from C:\Documents and Settings\333\Moje dokumenty\Pobieranie Boot Mode: Normal ============================================== Content of fixlist: ***************** {\rtf1\ansi\ansicpg1250\deff0\deflang1045{\fonttbl{\f0\fswiss\fcharset238{\*\fname Arial;}Arial CE;}} {\*\generator Msftedit 5.41.15.1515;}\viewkind4\uc1\pard\f0\fs20 (BonanzaDeals) C:\\Program Files\\BonanzaDealsLive\\Update\\BonanzaDealsLive.exe\par S2 bonanzadealslive; C:\\Program Files\\BonanzaDealsLive\\Update\\BonanzaDealsLive.exe [148976 2013-10-28] (BonanzaDeals)\par S3 bonanzadealslivem; C:\\Program Files\\BonanzaDealsLive\\Update\\BonanzaDealsLive.exe [148976 2013-10-28] (BonanzaDeals)\par S2 WebCake Desktop Updater; C:\\Documents and Settings\\333\\Dane aplikacji\\WebCake\\WebCakeDesktop.exe [47896 2013-05-24] (WebCake LLC)\par S2 eSafeSvc; C:\\Documents and Settings\\All Users\\Dane aplikacji\\eSafe\\eSafeSvc.exe [x]\par Task: C:\\WINDOWS\\Tasks\\At1.job => C:\\DOCUME~1\\333\\DANEAP~1\\FoxTab\\UPDATE~1\\UPDATE~1.EXE <==== ATTENTION\par Task: C:\\WINDOWS\\Tasks\\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\\Program Files\\BonanzaDealsLive\\Update\\BonanzaDealsLive.exe <==== ATTENTION\par Task: C:\\WINDOWS\\Tasks\\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\\Program Files\\BonanzaDealsLive\\Update\\BonanzaDealsLive.exe <==== ATTENTION\par Task: C:\\WINDOWS\\Tasks\\EPUpdater.job => C:\\DOCUME~1\\333\\DANEAP~1\\BABSOL~1\\Shared\\BabMaint.exe <==== ATTENTION\par AppInit_DLLs: c:\\docume~1\\alluse~1\\daneap~1\\browse~1\\261562~1.220\\\{c16c1~1\\browse~1.dll [ ] ()\par HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://www2.delta-search.com/?babsrc=HP_ss&mntrId=10327A7919B168B9&affID=121565&tsp=4993\par HKCU\\Software\\Microsoft\\Internet Explorer\\Main,bProtector Start Page = http://www2.delta-search.com/?babsrc=HP_ss&mntrId=10327A7919B168B9&affID=121565&tsp=4993\par HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&from=newgdp&uid=SAMSUNGXHM321HI_S2HZJ9FB307092&ts=1373014102\par SearchScopes: HKCU - \{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9\} URL = http://www1.delta-search.com/?q=\{searchTerms\}&babsrc=SP_ss&mntrId=10327A7919B168B9&affID=119357&tsp=4986\par BHO: WebCake - \{2A5A2A90-3B30-4E6E-A955-2F232C6EF517\} - C:\\Program Files\\WebCake\\WebCakeIEClient.dll (WebCake LLC)\par BHO: No Name - \{95B7759C-8C7F-4BF1-B163-73684A933233\} - No File\par BHO: delta Helper Object - \{C1AF5FA5-852C-4C90-812E-A7F75E011D87\} - C:\\Program Files\\Delta\\delta\\1.8.24.6\\bh\\delta.dll (Delta-search.com)\par BHO: BonanzaDeals - \{fe063412-bea4-4d76-8ed3-183be6220d17\} - C:\\Program Files\\BonanzaDeals\\BonanzaDealsIE.dll (BonanzaDeals)\par Toolbar: HKLM - No Name - \{95B7759C-8C7F-4BF1-B163-73684A933233\} - No File\par Toolbar: HKLM - Delta Toolbar - \{82E1477C-B154-48D3-9891-33D83C26BCD3\} - C:\\Program Files\\Delta\\delta\\1.8.24.6\\deltaTlbr.dll (Delta-search.com)\par FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\\Documents and Settings\\333\\Pulpit\\jj\\Picasa3\\npPicasa3.dll No File\par FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\\Program Files\\BonanzaDealsLive\\Update\\1.3.23.0\\npGoogleUpdate3.dll (BonanzaDeals)\par FF Plugin: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\\Program Files\\BonanzaDealsLive\\Update\\1.3.23.0\\npGoogleUpdate3.dll (BonanzaDeals)\par C:\\Documents and Settings\\333\\Ustawienia lokalne\\Temp\\*.exe\par C:\\Documents and Settings\\333\\Dane aplikacji\\BabSolution\par C:\\Documents and Settings\\333\\Dane aplikacji\\Babylon\par C:\\Documents and Settings\\333\\Dane aplikacji\\Desk 365\par C:\\Documents and Settings\\333\\Dane aplikacji\\OpenCandy\par C:\\Documents and Settings\\333\\Dane aplikacji\\SimilarSites\par C:\\Documents and Settings\\333\\Dane aplikacji\\Systweak\par C:\\Documents and Settings\\All Users\\Dane aplikacji\\Babylon\par C:\\Documents and Settings\\All Users\\Dane aplikacji\\eSafe\par D:\\*.lnk\par D:\\bu8.exe\par CMD: rd /s /q C:\\RECYCLER\par CMD: rd /s /q D:\\$RECYCLE.BIN\par CMD: rd /s /q D:\\RECYCLED\par CMD: rd /s /q D:\\RECYCLER\par CMD: rd /s /q F:\\RECYCLER\par CMD: attrib /d /s -s -h D:\\*\par CMD: netsh firewall reset\par Reg: reg delete "HKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Search" /f\par } ***************** bonanzadealslive => Service deleted successfully. bonanzadealslivem => Service deleted successfully. WebCake Desktop Updater => Service deleted successfully. eSafeSvc => Service deleted successfully. C:\\WINDOWS\\Tasks\\At1.job => Moved successfully. C:\\WINDOWS\\Tasks\\BonanzaDealsLiveUpdateTaskMachineCore.job => Moved successfully. C:\\WINDOWS\\Tasks\\BonanzaDealsLiveUpdateTaskMachineUA.job => Moved successfully. C:\\WINDOWS\\Tasks\\EPUpdater.job => Moved successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9\} => Key not found. HKCR\Wow6432Node\CLSID\\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9\} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517\} => Key not found. HKCR\CLSID\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517\} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233\} => Key not found. HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233\} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87\} => Key not found. HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87\} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fe063412-bea4-4d76-8ed3-183be6220d17\} => Key not found. HKCR\CLSID\{fe063412-bea4-4d76-8ed3-183be6220d17\} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\Toolbar: HKLM - No Name - \{95B7759C-8C7F-4BF1-B163-73684A933233\} - No File\par => Value not found. HKCR\CLSID\Toolbar: HKLM - No Name - \{95B7759C-8C7F-4BF1-B163-73684A933233\} - No File\par => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\Toolbar: HKLM - Delta Toolbar - \{82E1477C-B154-48D3-9891-33D83C26BCD3\} - C:\\Program Files\\Delta\\delta\\1.8.24.6\\deltaTlbr.dll (Delta-search.com)\par => Value not found. HKCR\CLSID\Toolbar: HKLM - Delta Toolbar - \{82E1477C-B154-48D3-9891-33D83C26BCD3\} - C:\\Program Files\\Delta\\delta\\1.8.24.6\\deltaTlbr.dll (Delta-search.com)\par => Key not found. HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0 => Key deleted successfully. C:\\Documents and Settings\\333\\Pulpit\\jj\\Picasa3\\npPicasa3.dll not found. HKLM\Software\MozillaPlugins\@tools.bdupdater.com/BonanzaDealsLive Update;version=3 => Key deleted successfully. C:\\Program Files\\BonanzaDealsLive\\Update\\1.3.23.0\\npGoogleUpdate3.dll => Moved successfully. HKLM\Software\MozillaPlugins\@tools.bdupdater.com/BonanzaDealsLive Update;version=9 => Key deleted successfully. C:\\Program Files\\BonanzaDealsLive\\Update\\1.3.23.0\\npGoogleUpdate3.dll not found. "C:\\Documents and Settings\\333\\Ustawienia lokalne\\Temp\\*.exe\par" => File/Directory not found. "C:\\Documents and Settings\\333\\Dane aplikacji\\BabSolution\par" => File/Directory not found. "C:\\Documents and Settings\\333\\Dane aplikacji\\Babylon\par" => File/Directory not found. "C:\\Documents and Settings\\333\\Dane aplikacji\\Desk 365\par" => File/Directory not found. "C:\\Documents and Settings\\333\\Dane aplikacji\\OpenCandy\par" => File/Directory not found. "C:\\Documents and Settings\\333\\Dane aplikacji\\SimilarSites\par" => File/Directory not found. "C:\\Documents and Settings\\333\\Dane aplikacji\\Systweak\par" => File/Directory not found. "C:\\Documents and Settings\\All Users\\Dane aplikacji\\Babylon\par" => File/Directory not found. "C:\\Documents and Settings\\All Users\\Dane aplikacji\\eSafe\par" => File/Directory not found. "D:\\*.lnk\par" => File/Directory not found. "D:\\bu8.exe\par" => File/Directory not found. ========= rd /s /q C:\\RECYCLER\par ========= Nie mo¾na odnale«† okre˜lonego pliku. ========= End of CMD: ========= ========= rd /s /q D:\\$RECYCLE.BIN\par ========= Nie mo¾na odnale«† okre˜lonego pliku. ========= End of CMD: ========= ========= rd /s /q D:\\RECYCLED\par ========= Nie mo¾na odnale«† okre˜lonego pliku. ========= End of CMD: ========= ========= rd /s /q D:\\RECYCLER\par ========= Nie mo¾na odnale«† okre˜lonego pliku. ========= End of CMD: ========= ========= rd /s /q F:\\RECYCLER\par ========= Nie mo¾na odnale«† okre˜lonego pliku. ========= End of CMD: ========= ========= attrib /d /s -s -h D:\\*\par ========= Nie mo¾na odnale«† ˜cie¾ki - D:\*. ========= End of CMD: ========= ========= netsh firewall reset\par ========= Nie znaleziono nast©puj¥cego polecenia: firewall reset\par. ========= End of CMD: ========= ========= reg delete "HKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Search" /f\par ========= BÅ‚Ä…d: nieprawidÅ‚owe parametry wiersza polecenia ========= End of Reg: ========= ==== End of Fixlog ====