Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 07-02-2014 Ran by Dominik at 2014-02-07 12:01:07 Run:1 Running from C:\Documents and Settings\Dominik\My Documents\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** () C:\Documents and Settings\Dominik\Application Data\System32\svchost.exe () C:\Program Files\fst_pl_46\fst_pl_46.exe () C:\Documents and Settings\Dominik\Local Settings\Application Data\fst_pl_46\upfst_pl_46.exe HKLM\...\Run: [] - [x] HKLM\...\Run: [KernelFaultCheck] - %systemroot%\system32\dumprep 0 -k HKLM\...\Run: [fst_pl_46] - C:\Program Files\fst_pl_46\fst_pl_46.exe [3997680 2014-01-30] () HKLM\...\Run: [upfst_pl_46.exe] - C:\Documents and Settings\Dominik\Local Settings\Application Data\fst_pl_46\upfst_pl_46.exe [3153904 2014-01-30] () HKCU\...\Run: [System Network Service] - C:\Documents and Settings\Dominik\Application Data\System32\svchost.exe [951808 2014-01-23] () HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=150 S3 UIUSys; system32\drivers\UIUSys.sys [x] C:\Documents and Settings\Dominik\Application Data\System32 C:\Documents and Settings\Dominik\Desktop\Continue AnyProtect Installation.lnk ***************** [1536] C:\Documents and Settings\Dominik\Application Data\System32\svchost.exe => Process closed successfully. C:\Program Files\fst_pl_46\fst_pl_46.exe => No running process found C:\Documents and Settings\Dominik\Local Settings\Application Data\fst_pl_46\upfst_pl_46.exe => No running process found HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck => Value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\fst_pl_46 => Value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\upfst_pl_46.exe => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\System Network Service => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. UIUSys => Service deleted successfully. C:\Documents and Settings\Dominik\Application Data\System32 => Moved successfully. "C:\Documents and Settings\Dominik\Desktop\Continue AnyProtect Installation.lnk" => File/Directory not found. ==== End of Fixlog ====