Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014 Ran by RC at 2014-04-03 18:34:44 Run:1 Running from C:\Users\RC\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {5CC46D66-40FA-4EAA-B20E-5E1B40629A8A} - System32\Tasks\SilverlightUpdater20110920 => c:/silverlight.exe [2013-02-06] () Task: {759D7E77-347D-4FC8-8A68-CC973AC194C6} - \Scheduled Update for Ask Toolbar No Task File R2 Winstep Xtreme Service; C:\Program Files (x86)\Winstep\WsxService [X] S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X] StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=ASRK SearchScopes: HKCU - {33243483-97DE-4d71-AC09-4DC3C7CFA81C} URL = http://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5480255188&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=pl&q={searchTerms} CHR Extension: (No Name) - C:\Users\RC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml [2014-01-23] FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File C:\Program Files (x86)\mozilla firefox\browser\searchplugins\sweet-page.xml C:\Program Files (x86)\mozilla firefox\plugins C:\Program Files (x86)\Mozilla Firefox\extensions C:\Users\RC\AppData\Local\CrashDumps Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla\Thunderbird /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f CMD: rd /s /q "C:\Users\RC\Desktop\Stare dane programu Firefox" ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5CC46D66-40FA-4EAA-B20E-5E1B40629A8A} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CC46D66-40FA-4EAA-B20E-5E1B40629A8A} => Key deleted successfully. C:\Windows\System32\Tasks\SilverlightUpdater20110920 => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SilverlightUpdater20110920 => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{759D7E77-347D-4FC8-8A68-CC973AC194C6} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{759D7E77-347D-4FC8-8A68-CC973AC194C6} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar => Key deleted successfully. Winstep Xtreme Service => Service stopped successfully. Winstep Xtreme Service => Service deleted successfully. AsrCDDrv => Service deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33243483-97DE-4d71-AC09-4DC3C7CFA81C} => Key deleted successfully. HKCR\CLSID\{33243483-97DE-4d71-AC09-4DC3C7CFA81C} => Key not found. C:\Users\RC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml => Moved successfully. HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer => Key deleted successfully. C:\Windows\system32\Adobe\Director\np32dsw.dll not found. C:\Program Files (x86)\mozilla firefox\browser\searchplugins\sweet-page.xml => Moved successfully. C:\Program Files (x86)\Mozilla Firefox\plugins => Moved successfully. C:\Program Files (x86)\Mozilla Firefox\extensions => Moved successfully. C:\Users\RC\AppData\Local\CrashDumps => Moved successfully. ========= reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla\Thunderbird /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= rd /s /q "C:\Users\RC\Desktop\Stare dane programu Firefox" ========= Nie mo¾na odnale«† okre˜lonego pliku. ========= End of CMD: ========= ==== End of Fixlog ====