Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-02-2014 01 Ran by Piotr at 2014-02-26 21:37:50 Run:2 Running from C:\Users\Piotr\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** Zadanie: {8FF89A91-6ADC-4C59-8843-BBECA7E06134} - System32 \ Tasks \ Funmoods => C: \ Users \ Piotr \ AppData \ Roaming \ Funmoods \ UPDATE ~ 1 \ UPDATE ~ 1.EXE HKLM-x32 \ ... \ Run: [mobilegeni demon] - C: \ Program Files (x86) \ Mobogenie \ DaemonProcess.exe URLSearchHook: HKLM - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C: \ Program Files (x86) \ Ask.com \ GenericAskToolbar.dll Brak pliku StartMenuInternet: IEXPLORE.EXE - C: \ Program Files \ Internet Explorer \ iexplore.exe http://pl.v9.com/?utm_source=b&utm_medium=fft SearchScopes: HKLM - {EEE6C360- 6118-11DC-9C72-001320C79847} URL = HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = HKLM-x32 - {45E02632-7555-55FD-CA7A-0D67DED0A0E5} URL = HKLM-x32 - {665436C9-CC92-45F4-85DF-7F4D28088136} URL = http://search.bearshare.com/web?src=ieb&systemid=2&q = {searchTerms} SearchScopes: HKLM-x32 - {BB04F513-9855-44A1 -B3BA-11A69C6CBDB9} URL = HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.v9.com/web/?q = {searchTerms } SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = HKCU - {45E02632-7555-55FD-CA7A-0D67DED0A0E5} URL = http://search.v9.com/web/?q = {searchTerms} SearchScopes: HKCU - {665436C9-CC92-45F4-85DF-7F4D28088136} URL = http://search.bearshare.com/web?src=ieb&systemid=2&q = {searchTerms} SearchScopes: HKLM - {7A13D0D5-E32B-41a9-A754-F9ADE29BBE1C} URL = HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} URL = HKCU - {AD22EBAF-0D18-4fc7-90cc-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q = {searchTerms} SearchScopes: HKCU - {BB04F513-9855-44A1-B3BA-11A69C6CBDB9} URL = HKCU - {D9E526C2-4238-443D-A612-1B5FA9944DD4} URL = HKCU - {E7D4CA97-7311-A429-4e3a-F9166BBDE97F} URL = http://uk.search.yahoo.com/search?p = {searchTerms} & fr = CHR-DeviceVM & type = PROTOSV SearchScopes: HKLM - {EEE6C360-6118- 11DC-9C72-001320C79847} URL = IE5BarLauncherBHO Class - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C: Program Files \ (x86) \ vShare.tv plugin \ BarLcher.dll (VShare Inc) BHO-x32: Ask Toolbar - {D4027C7F-154A-4066 -A1AD-4243D8127440} - C: \ Program Files (x86) \ Ask.com \ GenericAskToolbar.dll Brak pliku Toolbar: HKLM - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - Nie Plik Toolbar: HKLM-x32 - No Name - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - Nie Plik Toolbar: HKLM-x32 - VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C: \ Program Files (x86) \ vShare.tv plugin \ BarLcher.dll (VShare Inc) Pasek narzędzi: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C: \ Program Files (x86) \ Ask.com \ GenericAskToolbar.dll Brak pliku Toolbar : HKLM - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - Nie Plik Toolbar: HKLM - No Name - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - Nie Plik Toolbar: HKLM - No Name - {D4027C7F -154A-4066-A1AD-4243D8127440} - Nie Plik CHR HKLM-x32 \ ... \ Chrome \ Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C: \ Users \ Piotr \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Zewnętrzne Rozszerzenia \ {EEE6C373-6118-11DC-9C72-001320C79847} \ SweetFB.crx [2012-05-10] CHR HKLM-x32 \ ... \ Chrome \ Extension: [jplinpmadfkdgipabgcdchbdikologlh] - C: \ Program Files (x86) \ 1ClickDownload \ 1click12.crx [2012-05-10] CHR HKLM-x32 \ ... \ Chrome \ Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C: \ Program Files (x86) \ vShare.tv plugin \ vshareplg.crx [2011-08 -31] CHR HKLM-x32 \ ... \ Chrome \ Extension: [pbiamblgmkgbcgbcgejjgebalncpmhnp] - C: Program Files \ (x86) \ StartSearch plugin \ vshareplg.crx [2011-08-31] C: \ Program Files (x86) \ 1ClickDownload C: \ Program Files (x86) \ Mozilla Firefox C: \ Program Files (x86) \ StartSearch wtyczki C: \ Program Files (x86) \ vShare.tv plugin C: \ Users \ Piotr \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Zewnętrzna reg delete HKLM \ Software \ Mozilla / f Reg: reg delete HKCU \ Software \ MozillaPlugins / f Reg: reg delete HKLM \ Software \ MozillaPlugins / f Reg: reg delete HKLM \ SOFTWARE \ Wow6432Node \ Mozilla / f Reg: reg delete HKLM \ SOFTWARE \ Wow6432Node \ mozilla.org / f Reg: reg delete HKLM \ SOFTWARE \ Wow6432Node \ MozillaPlugins / f Reg: reg delete "HKLM \ SOFTWARE \ Microsoft \ Shared Tools \ MSConfig \ startupfolder" / f Reg: reg delete "HKLM \ Software \ Microsoft \ Shared Tools \ MSConfig \ startupreg "/ f Reg: reg delete "HKCU \ Software \ Microsoft \ Internet Explorer \ MenuExt \ Ściągaj z Mipony" / f Reg: reg delete "HKLM \ SOFTWARE \ Microsoft \ Wow6432Node \ Internet Explorer \ MenuExt \ Ściągaj z Mipony "/ f CMD: netsh advfirewall resetowania ***************** HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} => Value not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360- 6118-11DC-9C72-001320C79847} => Key not found. HKCR\CLSID\{EEE6C360- 6118-11DC-9C72-001320C79847} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BB04F513-9855-44A1 -B3BA-11A69C6CBDB9} => Key not found. HKCR\Wow6432Node\CLSID\{BB04F513-9855-44A1 -B3BA-11A69C6CBDB9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{665436C9-CC92-45F4-85DF-7F4D28088136} => Key not found. HKCR\CLSID\{665436C9-CC92-45F4-85DF-7F4D28088136} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7A13D0D5-E32B-41a9-A754-F9ADE29BBE1C} => Key not found. HKCR\CLSID\{7A13D0D5-E32B-41a9-A754-F9ADE29BBE1C} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB04F513-9855-44A1-B3BA-11A69C6CBDB9} => Key not found. HKCR\CLSID\{BB04F513-9855-44A1-B3BA-11A69C6CBDB9} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118- 11DC-9C72-001320C79847} => Key not found. HKCR\CLSID\{EEE6C360-6118- 11DC-9C72-001320C79847} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066 -A1AD-4243D8127440} => Key not found. HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066 -A1AD-4243D8127440} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} => Unable to delete value HKCR\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} => Unable to delete value HKCR\Wow6432Node\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => Unable to delete value HKCR\Wow6432Node\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => Unable to delete value HKCR\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{D4027C7F -154A-4066-A1AD-4243D8127440} => Unable to delete value HKCR\CLSID\{D4027C7F -154A-4066-A1AD-4243D8127440} => Key not found. ========= C: \ Users \ Piotr \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Zewnętrzna reg delete HKLM \ Software \ Mozilla / f reg delete HKCU \ Software \ MozillaPlugins / f Reg: reg delete HKLM \ Software \ MozillaPlugins / f Reg: reg delete HKLM \ SOFTWARE \ Wow6432Node \ Mozilla / f Reg: reg delete HKLM \ SOFTWARE \ Wow6432Node \ mozilla.org / f Reg: reg delete HKLM \ SOFTWARE \ Wow6432Node \ MozillaPlugins / f Reg: reg delete "HKLM \ SOFTWARE \ Microsoft \ Shared Tools \ MSConfig \ startupfolder" / f Reg: reg delete "HKLM \ Software \ Microsoft \ Shared Tools \ MSConfig \ startupreg "/ f Reg: reg delete "HKCU \ Software \ Microsoft \ Internet Explorer \ MenuExt \ Ściągaj z Mipony" / f Reg: reg delete "HKLM \ SOFTWARE \ Microsoft \ Wow6432Node \ Internet Explorer \ MenuExt \ Ściągaj z Mipony "/ f CMD: netsh advfirewall resetowania ========= Nazwa 'C:' nie jest rozpoznawana jako polecenie wewn©trzne lub zewn©trzne, program wykonywalny lub plik wsadowy. ========= End of Reg: ========= ==== End of Fixlog ====