Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 23-02-2014 02 Ran by Greg at 2014-02-24 17:09:22 Run:1 Running from D:\Narzedzia\FRST Boot Mode: Normal ============================================== Content of fixlist: ***************** S4 Guard.Mail.ru; C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe [X] HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mail.ru/cnt/9134 URLSearchHook: HKCU - (No Name) - {09900DE8-1DCA-443F-9243-26FF581438AF} - No File SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {679356D6-F9A6-420C-9FD5-8829ECAD92B0} URL = http://www.idg.pl?q={searchTerms} SearchScopes: HKCU - {BE160BDE-6222-4602-9663-9B949D4FA329} URL = http://www.idg.pl?q={searchTerms} SearchScopes: HKCU - {E88E0043-C9D4-4e33-8555-FEE4F5B63060} URL = http://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb BHO: No Name - {8984B388-A5BB-4DF7-B274-77B879E179DB} - No File Toolbar: HKLM - No Name - {09900DE8-1DCA-443F-9243-26FF581438AF} - No File Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - No File Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - No File Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - No File Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - No File Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - No File Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - No File Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - No File C:\Documents and Settings\All Users\Dane aplikacji\TEMP C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\FileOpen C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Installations C:\Documents and Settings\Greg.GS\Dane aplikacji\aartemis C:\Documents and Settings\Greg.GS\Dane aplikacji\DRPSu C:\Documents and Settings\Greg.GS\Dane aplikacji\FileOpen C:\Documents and Settings\Greg.GS\Dane aplikacji\systweak C:\Documents and Settings\LocalService.ZARZĄDZANIE NT\Dane aplikacji\{DCD48218-E972-4d0c-9E5F-43462BC13E3B} C:\Documents and Settings\NetworkService.ZARZĄDZANIE NT\Dane aplikacji\Opera C:\Documents and Settings\NetworkService.ZARZĄDZANIE NT\Dane aplikacji\{DCD48218-E972-4d0c-9E5F-43462BC13E3B} Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ***************** Guard.Mail.ru => Service deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{09900DE8-1DCA-443F-9243-26FF581438AF} => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{679356D6-F9A6-420C-9FD5-8829ECAD92B0} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{679356D6-F9A6-420C-9FD5-8829ECAD92B0} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BE160BDE-6222-4602-9663-9B949D4FA329} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{BE160BDE-6222-4602-9663-9B949D4FA329} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{E88E0043-C9D4-4e33-8555-FEE4F5B63060} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8984B388-A5BB-4DF7-B274-77B879E179DB} => Key deleted successfully. HKCR\CLSID\{8984B388-A5BB-4DF7-B274-77B879E179DB} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{09900DE8-1DCA-443F-9243-26FF581438AF} => Value deleted successfully. HKCR\CLSID\{09900DE8-1DCA-443F-9243-26FF581438AF} => Key not found. HKCR\PROTOCOLS\Handler\http\0x00000001 => Key deleted successfully. HKCR\CLSID\{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} => Key not found. HKCR\PROTOCOLS\Handler\http\oledb => Key deleted successfully. HKCR\CLSID\{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} => Key not found. HKCR\PROTOCOLS\Handler\https\0x00000001 => Key deleted successfully. HKCR\CLSID\{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} => Key not found. HKCR\PROTOCOLS\Handler\https\oledb => Key deleted successfully. HKCR\CLSID\{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} => Key not found. HKCR\PROTOCOLS\Handler\ipp\0x00000001 => Key deleted successfully. HKCR\CLSID\{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} => Key not found. HKCR\PROTOCOLS\Handler\msdaipp\0x00000001 => Key deleted successfully. HKCR\CLSID\{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} => Key not found. HKCR\PROTOCOLS\Handler\msdaipp\oledb => Key deleted successfully. HKCR\CLSID\{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} => Key not found. C:\Documents and Settings\All Users\Dane aplikacji\TEMP => Moved successfully. C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\FileOpen => Moved successfully. C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Installations => Moved successfully. C:\Documents and Settings\Greg.GS\Dane aplikacji\aartemis => Moved successfully. C:\Documents and Settings\Greg.GS\Dane aplikacji\DRPSu => Moved successfully. C:\Documents and Settings\Greg.GS\Dane aplikacji\FileOpen => Moved successfully. C:\Documents and Settings\Greg.GS\Dane aplikacji\systweak => Moved successfully. C:\Documents and Settings\LocalService.ZARZĄDZANIE NT\Dane aplikacji\{DCD48218-E972-4d0c-9E5F-43462BC13E3B} => Moved successfully. C:\Documents and Settings\NetworkService.ZARZĄDZANIE NT\Dane aplikacji\Opera => Moved successfully. C:\Documents and Settings\NetworkService.ZARZĄDZANIE NT\Dane aplikacji\{DCD48218-E972-4d0c-9E5F-43462BC13E3B} => Moved successfully. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Błąd: system nie może odnaleźć określonego klucza rejestru lub wartości. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ==== End of Fixlog ====