Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 25-12-2013 Ran by Grześ at 2013-12-26 15:45:44 Run:1 Running from D:\Programy Boot Mode: Normal ============================================== Content of fixlist: ***************** Reg: reg query HKLM\SOFTWARE\Classes\Excel.Sheet.8\shell\Open /s Reg: reg query HKLM\SOFTWARE\Classes\Excel.Sheet.12\shell\Open /s Reg: reg query HKLM\SOFTWARE\Classes\Word.Document.8\shell\Open /s Reg: reg query HKLM\SOFTWARE\Classes\Word.Document.12\shell\Open /s ***************** ========= reg query HKLM\SOFTWARE\Classes\Excel.Sheet.8\shell\Open /s ========= HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.8\shell\Open (domy˜lny) REG_SZ &Otw˘rz HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.8\shell\Open\command (domy˜lny) REG_SZ "C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e command REG_MULTI_SZ vUpAVX!!!!!!!!!MKKSkEXCELFiles>tW{~$4Q]c@II=l2xaTO5 /e HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.8\shell\Open\ddeexec (domy˜lny) REG_SZ [open("%1")] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.8\shell\Open\ddeexec\application (domy˜lny) REG_SZ Excel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.8\shell\Open\ddeexec\topic (domy˜lny) REG_SZ system ========= End of Reg: ========= ========= reg query HKLM\SOFTWARE\Classes\Excel.Sheet.12\shell\Open /s ========= HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.12\shell\Open (domy˜lny) REG_SZ &Otw˘rz HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.12\shell\Open\command (domy˜lny) REG_SZ "C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e command REG_MULTI_SZ vUpAVX!!!!!!!!!MKKSkEXCELFiles>tW{~$4Q]c@II=l2xaTO5 /e HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.12\shell\Open\ddeexec (domy˜lny) REG_SZ [open("%1")] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.12\shell\Open\ddeexec\application (domy˜lny) REG_SZ Excel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.12\shell\Open\ddeexec\topic (domy˜lny) REG_SZ system ========= End of Reg: ========= ========= reg query HKLM\SOFTWARE\Classes\Word.Document.8\shell\Open /s ========= HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.8\shell\Open (domy˜lny) REG_SZ &Otw˘rz HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.8\shell\Open\command (domy˜lny) REG_SZ "C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde command REG_MULTI_SZ vUpAVX!!!!!!!!!MKKSkWORDFiles>tW{~$4Q]c@5d1`,xaTO5 /n /dde HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.8\shell\Open\ddeexec (domy˜lny) REG_SZ [REM _DDE_Direct][FileOpen("%1")] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.8\shell\Open\ddeexec\Application (domy˜lny) REG_SZ WinWord HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.8\shell\Open\ddeexec\Topic (domy˜lny) REG_SZ System ========= End of Reg: ========= ========= reg query HKLM\SOFTWARE\Classes\Word.Document.12\shell\Open /s ========= HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.12\shell\Open (domy˜lny) REG_SZ &Otw˘rz HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.12\shell\Open\command (domy˜lny) REG_SZ "C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde command REG_MULTI_SZ vUpAVX!!!!!!!!!MKKSkWORDFiles>tW{~$4Q]c@5d1`,xaTO5 /n /dde HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.12\shell\Open\ddeexec (domy˜lny) REG_SZ [REM _DDE_Direct][FileOpen("%1")] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.12\shell\Open\ddeexec\Application (domy˜lny) REG_SZ WinWord HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.12\shell\Open\ddeexec\Topic (domy˜lny) REG_SZ System ========= End of Reg: ========= ==== End of Fixlog ====