Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 05-01-2014 Ran by dom at 2014-01-06 00:14:56 Run:2 Running from D:\Install Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\...\Run: [Advanced SystemCare 6] - "G:\ASC_Portable\ASCTray.exe" /AutoStart HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - "C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe" SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm073^YY^pl&si=pconverter&ptb=78C8D794-2D4E-4FBF-B228-34C6D1445BEA&ind=2013052712&n=77fcbf28&psa=&st=sb&searchfor={searchTerms} BHO: No Name - {3049C3E9-B461-4BC5-8870-4C09146192CA} - No File Toolbar: HKCU - No Name - {C4069E3A-68F1-403E-B40E-20066696354B} - No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File FF Plugin: @real.com/nprjplug;version=15.0.6.14 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab FF Plugin: @google.com/npPicasa2,version=2.0.0 - C:\Program Files\Picasa2\npPicasa2.dll No File R2 JavaQuickStarterService; "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" S3 NMIndexingService; "C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe" [x] S3 WDTBEA; C:\DOCUME~1\dom\USTAWI~1\Temp\WDTBEA.exe [x] S3 nmwcd; system32\drivers\ccdcmb.sys [x] S3 nmwcdc; system32\drivers\ccdcmbo.sys [x] S3 upperdev; system32\DRIVERS\usbser_lowerflt.sys [x] S3 UsbserFilt; system32\DRIVERS\usbser_lowerfltj.sys [x] Task: C:\WINDOWS\Tasks\ASC6_PerformanceMonitor.job => G:\ASC_Portable\Monitor.exe Task: C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe Task: C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe Task: C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RMAutoUpdate.job => C:\Program Files\PC Tools Registry Mechanic\SULauncher.exe Task: C:\WINDOWS\Tasks\RMSchedule.job => C:\Program Files\PC Tools Registry Mechanic\RegMech.exe C:\Program Files\Common Files\Ahead C:\Program Files\Real C:\Program Files\RegCleaner C:\Documents and Settings\All Users\Dane aplikacji\Symantec C:\Documents and Settings\dom\Dane aplikacji\RealNetworks Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ***************** HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 6 => Value deleted successfully. HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\NeroHomeFirstStart => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA} => Key deleted successfully. HKCR\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} => Value deleted successfully. HKCR\CLSID\{C4069E3A-68F1-403E-B40E-20066696354B} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Value deleted successfully. HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found. HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14 => Key deleted successfully. c:\program files\real\realplayer\Netscape6\nprjplug.dll => Moved successfully. HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14 => Key deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll not found. HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14 => Key deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll not found. HKLM\Software\Mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758} => Value deleted successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F} => Value deleted successfully. HKLM\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk => Key deleted successfully. "C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx" => File/Directory not found. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{68282C51-9459-467B-95BF-3C0E89627E55} => Key deleted successfully. HKCR\CLSID\{68282C51-9459-467B-95BF-3C0E89627E55} => Key deleted successfully. HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0 => Key deleted successfully. C:\Program Files\Picasa2\npPicasa2.dll not found. JavaQuickStarterService => Service deleted successfully. NMIndexingService => Service deleted successfully. WDTBEA => Service deleted successfully. nmwcd => Service deleted successfully. nmwcdc => Service deleted successfully. upperdev => Service deleted successfully. UsbserFilt => Service deleted successfully. C:\WINDOWS\Tasks\ASC6_PerformanceMonitor.job => Moved successfully. C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job => Moved successfully. C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job => Moved successfully. C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job => Moved successfully. C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job => Moved successfully. C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job => Moved successfully. C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-776561741-1592454029-725345543-1004.job => Moved successfully. C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-776561741-1592454029-725345543-1004.job => Moved successfully. C:\WINDOWS\Tasks\RMAutoUpdate.job => Moved successfully. C:\WINDOWS\Tasks\RMSchedule.job => Moved successfully. C:\Program Files\Common Files\Ahead => Moved successfully. C:\Program Files\Real => Moved successfully. C:\Program Files\RegCleaner => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Symantec => Moved successfully. C:\Documents and Settings\dom\Dane aplikacji\RealNetworks => Moved successfully. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= The system needs a manual reboot. ==== End of Fixlog ====