Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-02-2014 Ran by Karas1 at 2014-02-10 18:54:38 Run:1 Running from E:\Clubbers\styczen 2k14 Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-2855948867-3410098508-4095136188-1002\...\CurrentVersion\Windows: [Load] C:\ProgramData\{$1284-9213-2940-1289$}\comhost.exe <===== ATTENTION SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear C:\Users\Karas1\AppData\Roaming\system.ini () C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe CMD: sc config "PLAY ONLINE. RunOuc" start= demand Reg: reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Gadu-Gadu 10 (GG 10.5) Packages" /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\Search" /f Reg: reg add HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad /v WebCheck /t REG_SZ /d {E6FB5E20-DE35-11CF-9C87-00AA005127ED} /f ***************** HKU\S-1-5-21-2855948867-3410098508-4095136188-1002\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found. C:\Users\Karas1\AppData\Roaming\system.ini => Moved successfully. [2476] C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe => Process closed successfully. ========= sc config "PLAY ONLINE. RunOuc" start= demand ========= [SC] ChangeServiceConfig SUKCES ========= End of CMD: ========= ========= reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Gadu-Gadu 10 (GG 10.5) Packages" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\Search" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg add HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad /v WebCheck /t REG_SZ /d {E6FB5E20-DE35-11CF-9C87-00AA005127ED} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====