Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 04-01-2014 Ran by Janusz at 2014-01-04 14:51:13 Run:1 Running from C:\Users\Janusz\Downloads\4 styczen 2013\FORUM FIX IT DOKONCZENIE Boot Mode: Normal ============================================== Content of fixlist: ***************** URLSearchHook: HKCU - (No Name) - {e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - No File SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2976575 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION S4 DUMeterDrv; \??\C:\Program Files\DU Meter\DUMETR32.SYS [x] AlternateDataStreams: C:\Users\Janusz\AppData\Local\desktop.ini:722b2b1c349a06abf0e866180e5a7e63 C:\ProgramData\733f8c9f-9d91-457d-9a41-5f0fed1cb019_dir_temp.bin C:\ProgramData\5581fc67-5d9e-4a8b-aac2-ea0d2f1c65bf_dir_temp.bin C:\Users\Janusz\AppData\Local\Temp*.html C:\Users\Janusz\AppData\Local\Google\Chrome C:\Users\Janusz\AppData\Roaming\4shared Desktop C:\Users\Janusz\AppData\Roaming\Apmefu C:\Users\Janusz\AppData\Roaming\Kive C:\Users\Janusz\AppData\Roaming\Synyf C:\Users\Janusz\AppData\Roaming\mozilla\firefox\profiles\736bxalx.default2\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi C:\Users\Janusz\AppData\Roaming\mozilla\firefox\profiles\736bxalx.default2\searchplugins\sweetim.xml C:\Users\Janusz\AppData\Roaming\mozilla\firefox\profiles\vzw05s1g.erodate2onplock\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi Reg: reg delete HKLM\SOFTWARE\Google\Chrome /f ***************** HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{e5a1e26f-0d1d-4307-868f-fbd9a374ab54} => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully. HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found. HKLM\SOFTWARE\Policies\Google => Key deleted successfully. DUMeterDrv => Service deleted successfully. C:\Users\Janusz\AppData\Local\desktop.ini => ":722b2b1c349a06abf0e866180e5a7e63" ADS removed successfully. C:\ProgramData\733f8c9f-9d91-457d-9a41-5f0fed1cb019_dir_temp.bin => Moved successfully. C:\ProgramData\5581fc67-5d9e-4a8b-aac2-ea0d2f1c65bf_dir_temp.bin => Moved successfully. C:\Users\Janusz\AppData\Local\Temp*.html => Moved successfully. C:\Users\Janusz\AppData\Local\Google\Chrome => Moved successfully. C:\Users\Janusz\AppData\Roaming\4shared Desktop => Moved successfully. C:\Users\Janusz\AppData\Roaming\Apmefu => Moved successfully. C:\Users\Janusz\AppData\Roaming\Kive => Moved successfully. C:\Users\Janusz\AppData\Roaming\Synyf => Moved successfully. C:\Users\Janusz\AppData\Roaming\mozilla\firefox\profiles\736bxalx.default2\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi => Moved successfully. C:\Users\Janusz\AppData\Roaming\mozilla\firefox\profiles\736bxalx.default2\searchplugins\sweetim.xml => Moved successfully. C:\Users\Janusz\AppData\Roaming\mozilla\firefox\profiles\vzw05s1g.erodate2onplock\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi => Moved successfully. ========= reg delete HKLM\SOFTWARE\Google\Chrome /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====