Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-02-2014 01 Ran by Dorota at 2014-02-16 07:55:05 Run:1 Running from C:\Users\Dorota\Desktop\fixit\frstl Boot Mode: Normal ============================================== Content of fixlist: ***************** (Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe Task: {0C08A50D-176D-4A3F-924A-D64E2668220C} - System32\Tasks\At1 => shutdown Task: {C4D2C6D2-6F38-4CE0-8E41-F67504571DF0} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-04-25] () <==== ATTENTION Task: C:\windows\Tasks\At1.job => ? HKLM-x32\...\Run: [NPSStartup] - [X] HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1648264 2013-04-25] (Ask) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {E0B8FE1C-694D-4149-BE30-E8C816A07F1E} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=EE739697-F68C-48EA-BDF8-58EAF0A4CCDE&apn_sauid=3E5D7CEE-65BF-4C80-A543-7D2C1AD9D774 BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File FF SearchEngineOrder.1: Ask.com FF SearchPlugin: C:\Users\Dorota\AppData\Roaming\Mozilla\Firefox\Profiles\w3zp2hva.default\searchplugins\askcom.xml FF HKLM-x32\...\Firefox\Extensions: [crossriderapp435@crossrider.com] - C:\ProgramData\CodecCheck\firefox C:\ProgramData\CodecCheck Unlock: HKLM\SYSTEM\CurrentControlSet\Services\sptd S4 sptd; System32\Drivers\sptd.sys [X] ***************** [2108] C:\Program Files (x86)\Ask.com\Updater\Updater.exe => Process closed successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0C08A50D-176D-4A3F-924A-D64E2668220C} => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C08A50D-176D-4A3F-924A-D64E2668220C} => Error deleting key C:\Windows\System32\Tasks\At1 => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\At1 => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C4D2C6D2-6F38-4CE0-8E41-F67504571DF0} => Error deleting key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4D2C6D2-6F38-4CE0-8E41-F67504571DF0} => Error deleting key C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar => Error deleting key C:\windows\Tasks\At1.job => Moved successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NPSStartup => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ApnUpdater => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} => Key deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key deleted successfully. HKCR\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E0B8FE1C-694D-4149-BE30-E8C816A07F1E} => Key deleted successfully. HKCR\CLSID\{E0B8FE1C-694D-4149-BE30-E8C816A07F1E} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully. HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found. Firefox SearchEngineOrder.1 deleted successfully. C:\Users\Dorota\AppData\Roaming\Mozilla\Firefox\Profiles\w3zp2hva.default\searchplugins\askcom.xml => Moved successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\crossriderapp435@crossrider.com => Value deleted successfully. C:\ProgramData\CodecCheck => Moved successfully. "HKLM\SYSTEM\CurrentControlSet\Services\sptd" => Error unlocking key. sptd => Service not found. ==== End of Fixlog ====