Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:05-05-2014 02 Ran by user at 2014-05-05 21:42:18 Run:1 Running from C:\Documents and Settings\user\Pulpit\LOGI Boot Mode: Normal ============================================== Content of fixlist: ***************** () C:\Program Files\WiseEnhance\updateWiseEnhance.exe () C:\Program Files\WiseEnhance\bin\utilWiseEnhance.exe R2 Update WiseEnhance; C:\Program Files\WiseEnhance\updateWiseEnhance.exe [316704 2014-05-04] () R2 Util WiseEnhance; C:\Program Files\WiseEnhance\bin\utilWiseEnhance.exe [316704 2014-05-04] () R1 {2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gt; C:\WINDOWS\System32\drivers\{2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gt.sys [55232 2014-04-24] (StdLib) C:\WINDOWS\system32\Drivers\{2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gt.sys S3 CnxEtP; system32\DRIVERS\CnxEtP.sys [X] S3 CnxEtU; system32\DRIVERS\CnxEtU.sys [X] S3 CnxTgNW; system32\DRIVERS\CnxTgNW.sys [X] S3 e4usbaw; system32\DRIVERS\e4usbaw.sys [X] S0 hobgjgic; No ImagePath S2 IKANLOADER2; System32\Drivers\e4ldr.sys [X] S0 izgmjg; No ImagePath S0 motbgwoz; No ImagePath SearchScopes: HKCU - DefaultScope {42168F92-DA71-42E6-BC7F-132EAC1F1899} URL = http://www.google.com/cse?cx=partner-pub-5462406484424654%3A8q0sn8-w2ss&ie=ISO-8859-1&q={searchTerms}&sa=Search&siteurl=qooqlle.com%2F <===== ATTENTION SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {42168F92-DA71-42E6-BC7F-132EAC1F1899} URL = http://www.google.com/cse?cx=partner-pub-5462406484424654%3A8q0sn8-w2ss&ie=ISO-8859-1&q={searchTerms}&sa=Search&siteurl=qooqlle.com%2F <===== ATTENTION SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear BHO: WiseEnhance - {bc8c4384-d19c-474b-a298-c90b7e5c5204} - C:\Program Files\WiseEnhance\WiseEnhancebho.dll (WiseEnhance) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ C:\Program Files\Mozilla Firefox\extensions C:\Program Files\mozilla firefox\plugins C:\Documents and Settings\LocalService\Dane aplikacji\McAfee C:\Documents and Settings\user\Dane aplikacji\cacaoweb C:\Documents and Settings\user\Dane aplikacji\maxup C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension C:\Documents and Settings\user\Pulpit\Adobe-Reader(12627).exe Reboot: ***************** C:\Program Files\WiseEnhance\updateWiseEnhance.exe => No running process found C:\Program Files\WiseEnhance\bin\utilWiseEnhance.exe => No running process found Update WiseEnhance => Unable to stop service Update WiseEnhance => Service deleted successfully. Util WiseEnhance => Unable to stop service Util WiseEnhance => Service deleted successfully. {2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gt => Unable to stop service {2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gt => Service deleted successfully. C:\WINDOWS\system32\Drivers\{2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gt.sys => Moved successfully. CnxEtP => Service deleted successfully. CnxEtU => Service deleted successfully. CnxTgNW => Service deleted successfully. e4usbaw => Service deleted successfully. hobgjgic => Service deleted successfully. IKANLOADER2 => Service deleted successfully. izgmjg => Service deleted successfully. motbgwoz => Service deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{42168F92-DA71-42E6-BC7F-132EAC1F1899} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bc8c4384-d19c-474b-a298-c90b7e5c5204} => Key deleted successfully. HKCR\CLSID\{bc8c4384-d19c-474b-a298-c90b7e5c5204} => Key deleted successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => Value deleted successfully. C:\Program Files\Mozilla Firefox\extensions => Moved successfully. C:\Program Files\mozilla firefox\plugins => Moved successfully. C:\Documents and Settings\LocalService\Dane aplikacji\McAfee => Moved successfully. C:\Documents and Settings\user\Dane aplikacji\cacaoweb => Moved successfully. C:\Documents and Settings\user\Dane aplikacji\maxup => Moved successfully. C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully. C:\Documents and Settings\user\Pulpit\Adobe-Reader(12627).exe => Moved successfully. The system needed a reboot. ==== End of Fixlog ====