Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 09-02-2014 02 Ran by dd at 2014-02-10 12:01:19 Run:1 Running from C:\Documents and Settings\dd\Pulpit Boot Mode: Safe Mode (minimal) ============================================== Content of fixlist: ***************** C:\Documents and Settings\dd\Dane aplikacji\{13994f74-0a97-191d-f75e-92e913994f74} C:\Documents and Settings\dd\Menu Start\Programy\Autostart\{13994f74-0a97-191d-f75e-92e913994f74}.exe HKLM\...\Run: [] - [X] HKLM\...\Run: [CheckRun22find_uninstaller] - C:\Documents and Settings\dd\Dane aplikacji\CheckRun22find.exe [102912 2013-01-17] () HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.22find.com/newtab?utm_source=b&utm_medium=prs&from=prs&uid=ST9160314AS_5VC63NTSXXXX5VC63NTS&ts=1361194257 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.22find.com/newtab?utm_source=b&utm_medium=prs&from=prs&uid=ST9160314AS_5VC63NTSXXXX5VC63NTS&ts=1361194257 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.22find.com/newtab?utm_source=b&utm_medium=prs&from=prs&uid=ST9160314AS_5VC63NTSXXXX5VC63NTS&ts=1361194257 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.22find.com/?utm_source=b&utm_medium=prs&from=prs&uid=ST9160314AS_5VC63NTSXXXX5VC63NTS&ts=1361194254 FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.22find.com/?utm_source=b&utm_medium=prs&from=prs&uid=ST9160314AS_5VC63NTSXXXX5VC63NTS&ts=1361194254 CHR StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.22find.com/?utm_source=b&utm_medium=prs&from=prs&uid=ST9160314AS_5VC63NTSXXXX5VC63NTS&ts=1361194254 CHR HKLM\...\Chrome\Extension: [ijblflkdjdopkpdgllkmlbgcffjbnfda] - C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-02-18] CHR HKLM\...\Chrome\Extension: [oopdmcnionefjjnmchkiimificckpkif] - C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\CRE\oopdmcnionefjjnmchkiimificckpkif.crx [2013-12-20] CHR HKCU\...\Chrome\Extension: [oopdmcnionefjjnmchkiimificckpkif] - C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\CRE\oopdmcnionefjjnmchkiimificckpkif.crx [2013-12-20] S3 btaudio; system32\drivers\btaudio.sys [X] S3 BTDriver; system32\DRIVERS\btport.sys [X] S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X] S3 btwhid; system32\DRIVERS\btwhid.sys [X] S3 BTWUSB; System32\Drivers\btwusb.sys [X] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] C:\Documents and Settings\dd\Dane aplikacji\CheckRun22find.exe C:\Documents and Settings\dd\Dane aplikacji\Desk 365 C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\CRE Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{d9288080-1baa-4bc4-9cf8-a92d743db949}" /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{d9288080-1baa-4bc4-9cf8-a92d743db949}" /f ***************** C:\Documents and Settings\dd\Dane aplikacji\{13994f74-0a97-191d-f75e-92e913994f74} => Moved successfully. C:\Documents and Settings\dd\Menu Start\Programy\Autostart\{13994f74-0a97-191d-f75e-92e913994f74}.exe => Moved successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\CheckRun22find_uninstaller => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Google\Chrome\Extensions\ijblflkdjdopkpdgllkmlbgcffjbnfda => Key deleted successfully. C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\newtab.crx => Moved successfully. HKLM\SOFTWARE\Google\Chrome\Extensions\oopdmcnionefjjnmchkiimificckpkif => Key deleted successfully. C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\CRE\oopdmcnionefjjnmchkiimificckpkif.crx => Moved successfully. HKCU\SOFTWARE\Google\Chrome\Extensions\oopdmcnionefjjnmchkiimificckpkif => Key deleted successfully. "C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\CRE\oopdmcnionefjjnmchkiimificckpkif.crx" => File/Directory not found. btaudio => Service deleted successfully. BTDriver => Service deleted successfully. BTWDNDIS => Service deleted successfully. btwhid => Service deleted successfully. BTWUSB => Service deleted successfully. VBoxNetFlt => Service deleted successfully. C:\Documents and Settings\dd\Dane aplikacji\CheckRun22find.exe => Moved successfully. C:\Documents and Settings\dd\Dane aplikacji\Desk 365 => Moved successfully. C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\CRE => Moved successfully. ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{d9288080-1baa-4bc4-9cf8-a92d743db949}" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{d9288080-1baa-4bc4-9cf8-a92d743db949}" /f ========= Błąd: system nie może odnaleźć określonego klucza rejestru lub wartości. ========= End of Reg: ========= ==== End of Fixlog ====