Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014 Ran by Daniel at 2014-03-17 15:17:23 Run:1 Running from D:\Nowy folder (2) Boot Mode: Normal ============================================== Content of fixlist: ***************** () C:\Users\Daniel\AppData\Local\PirritSuggestor\PirritService.exe () C:\Program Files (x86)\Pirrit\AutoUpdater.exe () C:\Program Files (x86)\WinRST\WinRST.exe () C:\Users\Daniel\AppData\Local\PirritSuggestor\PirritDesktop.exe U2 PirritDesktop; C:\Users\Daniel\AppData\Local\PirritSuggestor\PirritService.exe [52568 2014-02-14] () R2 PirritUpdater; C:\Program Files (x86)\Pirrit\AutoUpdater.exe [59904 2014-02-14] () R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] () ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: http=http://127.0.0.1:9880 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NIS&pvid=20.4.0.40 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NIS&pvid=20.4.0.40 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://start.qone8.com/?type=sc&ts=1382637420&from=cor&uid=ST3500418AS_6VMBDWA7XXXX6VMBDWA7 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382637421&from=cor&uid=ST3500418AS_6VMBDWA7XXXX6VMBDWA7&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382637421&from=cor&uid=ST3500418AS_6VMBDWA7XXXX6VMBDWA7&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382637421&from=cor&uid=ST3500418AS_6VMBDWA7XXXX6VMBDWA7&q={searchTerms} SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382637421&from=cor&uid=ST3500418AS_6VMBDWA7XXXX6VMBDWA7&q={searchTerms} BHO-x32: IEExtension.Extension - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File HKU\S-1-5-21-4082538352-418087234-2285664037-1000\...\Run: [ASRockXTU] - [X] S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X] S3 X6va016; \??\C:\Windows\SysWOW64\Drivers\X6va016 [X] C:\Program Files (x86)\Pirrit C:\Program Files (x86)\WinRST C:\Users\Daniel\AppData\Local\PirritSuggestor C:\Users\Daniel\AppData\Local\WinRST C:\Users\Daniel\AppData\Roaming\Pirrit C:\Users\Daniel\AppData\Roaming\Mozilla Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cekcjpgehmohobmdiikfnopibipmgnml /f Reboot: ***************** [2396] C:\Users\Daniel\AppData\Local\PirritSuggestor\PirritService.exe => Process closed successfully. [2660] C:\Program Files (x86)\Pirrit\AutoUpdater.exe => Process closed successfully. [2896] C:\Program Files (x86)\WinRST\WinRST.exe => Process closed successfully. [3604] C:\Users\Daniel\AppData\Local\PirritSuggestor\PirritDesktop.exe => Process closed successfully. PirritDesktop => Service deleted successfully. PirritUpdater => Service deleted successfully. WinRST => Service stopped successfully. WinRST => Service deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d40c654d-7c51-4eb3-95b2-1e23905c2a2d} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{d40c654d-7c51-4eb3-95b2-1e23905c2a2d} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully. HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found. HKU\S-1-5-21-4082538352-418087234-2285664037-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ASRockXTU => Value deleted successfully. X6va015 => Service deleted successfully. X6va016 => Service deleted successfully. C:\Program Files (x86)\Pirrit => Moved successfully. C:\Program Files (x86)\WinRST => Moved successfully. C:\Users\Daniel\AppData\Local\PirritSuggestor => Moved successfully. C:\Users\Daniel\AppData\Local\WinRST => Moved successfully. C:\Users\Daniel\AppData\Roaming\Pirrit => Moved successfully. C:\Users\Daniel\AppData\Roaming\Mozilla => Moved successfully. ========= reg delete HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cekcjpgehmohobmdiikfnopibipmgnml /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====