Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-02-2014 01 Ran by PC at 2014-02-15 11:23:32 Run:1 Running from C:\Users\PC\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {7125183B-A72B-4986-843F-2AFC62715B3D} - System32\Tasks\bench-sys => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION Task: {8C3CADFE-A4C3-49D5-9805-3499C1EEDF4C} - System32\Tasks\bench-S-1-5-21-3095105249-3572350851-1959410620-1000 => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [fst_pl_46] - [X] GroupPolicy: Group Policy on Chrome detected <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.awesomehp.com/web/?type=ds&ts=1391936305&from=tt4u&uid=HitachiXHTS547575A9E384_J2190054D34UYDD34UYDX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.awesomehp.com/web/?type=ds&ts=1391936305&from=tt4u&uid=HitachiXHTS547575A9E384_J2190054D34UYDD34UYDX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.awesomehp.com/web/?type=ds&ts=1391936305&from=tt4u&uid=HitachiXHTS547575A9E384_J2190054D34UYDD34UYDX&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.awesomehp.com/web/?type=ds&ts=1391936305&from=tt4u&uid=HitachiXHTS547575A9E384_J2190054D34UYDD34UYDX&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.awesomehp.com/web/?type=ds&ts=1391936305&from=tt4u&uid=HitachiXHTS547575A9E384_J2190054D34UYDD34UYDX&q={searchTerms} HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\44980106.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\62772973.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\44980106.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\62772973.sys => ""="Driver" C:\Program Files (x86)\Bench C:\Program Files (x86)\predm C:\ProgramData\WPM C:\Users\PC\AppData\Roaming\systweak C:\Users\PC\Downloads\Niepotwierdzony 739467.crdownload C:\Users\PC\Downloads\SpyHunter-Installer.exe C:\Windows\system32\roboot64.exe ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7125183B-A72B-4986-843F-2AFC62715B3D} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7125183B-A72B-4986-843F-2AFC62715B3D} => Key deleted successfully. C:\Windows\System32\Tasks\bench-sys => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\bench-sys => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C3CADFE-A4C3-49D5-9805-3499C1EEDF4C} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C3CADFE-A4C3-49D5-9805-3499C1EEDF4C} => Key deleted successfully. C:\Windows\System32\Tasks\bench-S-1-5-21-3095105249-3572350851-1959410620-1000 => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\bench-S-1-5-21-3095105249-3572350851-1959410620-1000 => Key deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\fst_pl_46 => Value deleted successfully. C:\Windows\system32\GroupPolicy\Machine => Moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\44980106.sys => Key deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\62772973.sys => Key deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\44980106.sys => Key deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\62772973.sys => Key deleted successfully. C:\Program Files (x86)\Bench => Moved successfully. C:\Program Files (x86)\predm => Moved successfully. C:\ProgramData\WPM => Moved successfully. C:\Users\PC\AppData\Roaming\systweak => Moved successfully. C:\Users\PC\Downloads\Niepotwierdzony 739467.crdownload => Moved successfully. C:\Users\PC\Downloads\SpyHunter-Installer.exe => Moved successfully. C:\Windows\system32\roboot64.exe => Moved successfully. The system needs a manual reboot. ==== End of Fixlog ====