Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-02-2014 01 Ran by Pawel at 2014-02-11 23:56:47 Run:2 Running from C:\Users\Pawel\Desktop\fixit Boot Mode: Normal ============================================== Content of fixlist: ***************** () C:\ProgramData\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe S2 vToolbarUpdater17.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [X] Task: {03DFA1A7-477B-4E89-AC2B-1A6F5ED822C7} - System32\Tasks\AVG_SYS_TASK_DELETE => C:\ProgramData\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe [2014-01-28] () Task: {557D6F65-D09C-4FEF-9F1F-69A89B21692C} - \QtraxPlayer No Task File Task: {DFCD1B2D-552B-466D-9182-BF6BC76B1509} - System32\Tasks\AVG_SYS_TASK => C:\ProgramData\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe [2014-01-28] () Task: C:\Windows\Tasks\AVG_SYS_TASK.job => C:\ProgramData\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe Task: C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job => C:\ProgramData\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe HKLM-x32\...\Run: [fst_pl_30] - [X] StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = C:\Program Files (x86)\Cling Clang C:\Program Files (x86)\predm C:\ProgramData\AVG 0214c Campaign C:\Users\Pawel\AppData\Local\fst_pl_30 C:\Users\Pawel\AppData\Roaming\newnext.me Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Search" /f Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ***************** [4952] C:\ProgramData\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe => Process closed successfully. vToolbarUpdater17.3.0 => Service deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{03DFA1A7-477B-4E89-AC2B-1A6F5ED822C7} => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{03DFA1A7-477B-4E89-AC2B-1A6F5ED822C7} => Error deleting key C:\Windows\System32\Tasks\AVG_SYS_TASK_DELETE => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG_SYS_TASK_DELETE => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{557D6F65-D09C-4FEF-9F1F-69A89B21692C} => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{557D6F65-D09C-4FEF-9F1F-69A89B21692C} => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\QtraxPlayer => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DFCD1B2D-552B-466D-9182-BF6BC76B1509} => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DFCD1B2D-552B-466D-9182-BF6BC76B1509} => Error deleting key C:\Windows\System32\Tasks\AVG_SYS_TASK => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG_SYS_TASK => Error deleting key C:\Windows\Tasks\AVG_SYS_TASK.job => Moved successfully. C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job => Moved successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\fst_pl_30 => Value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "C:\Program Files (x86)\Cling Clang" => File/Directory not found. C:\Program Files (x86)\predm => Moved successfully. C:\ProgramData\AVG 0214c Campaign => Moved successfully. C:\Users\Pawel\AppData\Local\fst_pl_30 => Moved successfully. C:\Users\Pawel\AppData\Roaming\newnext.me => Moved successfully. ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Search" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====