Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-02-2014 01 Ran by Mafia at 2014-02-13 18:34:02 Run:2 Running from C:\Documents and Settings\Mafia\Pulpit\Narzędzia Taty Boot Mode: Normal ============================================== Content of fixlist: ***************** SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {FC46E8B9-4BC0-4539-AEC0-4E9D4918DBAB} URL = Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File CHR HKLM\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Documents and Settings\Mafia\Ustawienia lokalne\Dane aplikacji\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-10-02] CHR HKCU\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Documents and Settings\Mafia\Ustawienia lokalne\Dane aplikacji\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-10-02] C:\Documents and Settings\Mafia\Ustawienia lokalne\Dane aplikacji\CRE S2 vToolbarUpdater17.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe [X] S3 catchme; \??\C:\DOCUME~1\Mafia\USTAWI~1\Temp\catchme.sys [X] S3 EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [X] S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X] S3 GenericMount; system32\DRIVERS\GenericMount.sys [X] S3 ldiskl; \??\C:\DOCUME~1\Mafia\USTAWI~1\Temp\ldiskl.sys [X] S3 NLNdisMP; system32\DRIVERS\nlndis.sys [X] S3 NLNdisPT; system32\DRIVERS\nlndis.sys [X] S3 PciCon; \??\H:\PciCon.sys [X] S3 RT73; system32\DRIVERS\rt73.sys [X] S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\WNt500x86\Sandra.sys [X] S0 sptd; \SystemRoot\System32\Drivers\sptd.sys [X] S3 usbbus; system32\DRIVERS\lgusbbus.sys [X] S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [X] S3 USBModem; system32\DRIVERS\lgusbmodem.sys [X] U2 V2iMount; C:\Documents and Settings\Mafia\Dane aplikacji\PriceGong(2) Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f Unlock: C:\ComboFix Unlock: C:\Qoobox CMD: del /q C:\ComboFix.txt CMD: rd /s /q C:\ComboFix CMD: rd /s /q C:\Qoobox CMD: rd /s /q C:\found.001 ***************** HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found. HKCR\Wow6432Node\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FC46E8B9-4BC0-4539-AEC0-4E9D4918DBAB} => Key not found. HKCR\Wow6432Node\CLSID\{FC46E8B9-4BC0-4539-AEC0-4E9D4918DBAB} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Unable to delete value HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found. HKLM\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc => Key not found. "C:\Documents and Settings\Mafia\Ustawienia lokalne\Dane aplikacji\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx" => File/Directory not found. HKCU\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc => Key not found. "C:\Documents and Settings\Mafia\Ustawienia lokalne\Dane aplikacji\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx" => File/Directory not found. "C:\Documents and Settings\Mafia\Ustawienia lokalne\Dane aplikacji\CRE" => File/Directory not found. vToolbarUpdater17.2.0 => Service not found. catchme => Service not found. EagleNT => Service not found. EagleXNt => Service not found. GenericMount => Service not found. ldiskl => Service not found. NLNdisMP => Service not found. NLNdisPT => Service not found. PciCon => Service not found. RT73 => Service not found. SANDRA => Service not found. sptd => Service deleted successfully. usbbus => Service deleted successfully. UsbDiag => Service deleted successfully. USBModem => Service deleted successfully. V2iMount => Service deleted successfully. C:\Documents and Settings\Mafia\Dane aplikacji\PriceGong(2) => Moved successfully. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= "C:\ComboFix" => File/Directory unlocked successfully. "C:\Qoobox" => File/Directory unlocked successfully. ========= del /q C:\ComboFix.txt ========= ========= End of CMD: ========= ========= rd /s /q C:\ComboFix ========= ========= End of CMD: ========= ========= rd /s /q C:\Qoobox ========= ========= End of CMD: ========= ========= rd /s /q C:\found.001 ========= ========= End of CMD: ========= ==== End of Fixlog ====