Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014 Ran by H&M at 2014-04-08 19:49:45 Run:1 Running from C:\Users\H&M\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** S2 Winmgmt; C:\Users\H&M\AppData\Local\Temp\Low\lg31zw.faa [X] HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms} SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms} SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms} Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File FF SearchPlugin: C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\searchplugins\Web Search.xml C:\Users\H&M\AppData\Local\CrashDumps AlternateDataStreams: C:\ProgramData:3f80b7866a646e AlternateDataStreams: C:\ProgramData:fe93a19e34e9a AlternateDataStreams: C:\Users\All Users:3f80b7866a646e AlternateDataStreams: C:\Users\All Users:fe93a19e34e9a AlternateDataStreams: C:\Users\H&M:25a61455b6cb19 AlternateDataStreams: C:\ProgramData\Application Data:3f80b7866a646e AlternateDataStreams: C:\ProgramData\Application Data:fe93a19e34e9a AlternateDataStreams: C:\Users\H&M\Dane aplikacji:b2b4c1332 AlternateDataStreams: C:\Users\H&M\Ustawienia lokalne:c26a0be0f9d4cff AlternateDataStreams: C:\Users\H&M\AppData\Local:c26a0be0f9d4cff AlternateDataStreams: C:\Users\H&M\AppData\Roaming:b2b4c1332 AlternateDataStreams: C:\Users\H&M\AppData\Local\Dane aplikacji:c26a0be0f9d4cff AlternateDataStreams: C:\Users\H&M\AppData\Local\Historia:fb31c387d27 AlternateDataStreams: C:\Users\H&M\AppData\Local\Temp:f99bbbab2bcd Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\AboutURLs" /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\Search" /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchURI" /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchUrl" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchURI" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl" /f Reg: reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\AboutURLs" /f Reg: reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search" /f Reg: reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI" /f Reg: reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl" /f Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search" /f Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchURI" /f Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl" /f Reboot: ***************** Winmgmt => Service restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Search Bar => Value deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key deleted successfully. HKCR\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully. HKCR\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully. HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found. C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\searchplugins\askcom.xml => Moved successfully. C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\searchplugins\Web Search.xml => Moved successfully. C:\Users\H&M\AppData\Local\CrashDumps => Moved successfully. C:\ProgramData => ":3f80b7866a646e" ADS removed successfully. C:\ProgramData => ":fe93a19e34e9a" ADS removed successfully. "C:\Users\All Users" => ":3f80b7866a646e" ADS not found. "C:\Users\All Users" => ":fe93a19e34e9a" ADS not found. C:\Users\H&M => ":25a61455b6cb19" ADS removed successfully. "C:\ProgramData\Application Data" => ":3f80b7866a646e" ADS not found. "C:\ProgramData\Application Data" => ":fe93a19e34e9a" ADS not found. "C:\Users\H&M\Dane aplikacji" => ":b2b4c1332" ADS not found. "C:\Users\H&M\Ustawienia lokalne" => ":c26a0be0f9d4cff" ADS not found. C:\Users\H&M\AppData\Local => ":c26a0be0f9d4cff" ADS removed successfully. C:\Users\H&M\AppData\Roaming => ":b2b4c1332" ADS removed successfully. "C:\Users\H&M\AppData\Local\Dane aplikacji" => ":c26a0be0f9d4cff" ADS not found. "C:\Users\H&M\AppData\Local\Historia" => ":fb31c387d27" ADS not found. C:\Users\H&M\AppData\Local\Temp => ":f99bbbab2bcd" ADS removed successfully. ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\AboutURLs" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\Search" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchURI" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchUrl" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchURI" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\AboutURLs" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchURI" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====