Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-05-2014 Ran by Dawid at 2014-05-07 14:58:05 Run:1 Running from C:\Users\Dawid\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {DFB032D2-7495-43C1-B5F2-CD2910114376} URL = http://www.idg.pl?q={searchTerms} S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X] S3 GGSAFERDriver; \??\D:\Programy\Garena Plus\Room\safedrv.sys [X] S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X] S3 XFDriver64; \??\C:\Program Files (x86)\Xfire2\XFDriver64.sys [X] AlternateDataStreams: C:\ProgramData:NT AlternateDataStreams: C:\Users\All Users:NT AlternateDataStreams: C:\ProgramData\Application Data:NT AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT AlternateDataStreams: C:\ProgramData\TEMP:6BE50C2B AlternateDataStreams: C:\Users\Dawid\Dane aplikacji:NT AlternateDataStreams: C:\Users\Dawid\AppData\Roaming:NT C:\Program Files (x86)\UTuubieuNNoAds C:\ProgramData\a3da1d4abc854efc C:\ProgramData\UTuubieuNNoAds Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f Reboot: ***************** C:\Windows\system32\GroupPolicy\Machine => Moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully. HKLM\SOFTWARE\Policies\Google => Key deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DFB032D2-7495-43C1-B5F2-CD2910114376} => Key deleted successfully. HKCR\CLSID\{DFB032D2-7495-43C1-B5F2-CD2910114376} => Key not found. FairplayKD => Service deleted successfully. GGSAFERDriver => Service deleted successfully. nvvad_WaveExtensible => Service deleted successfully. XFDriver64 => Service deleted successfully. C:\ProgramData => ":NT" ADS removed successfully. "C:\Users\All Users" => ":NT" ADS not found. "C:\ProgramData\Application Data" => ":NT" ADS not found. "C:\ProgramData\Dane aplikacji" => ":NT" ADS not found. C:\ProgramData\MTA San Andreas All => ":NT" ADS removed successfully. C:\ProgramData\TEMP => ":6BE50C2B" ADS removed successfully. "C:\Users\Dawid\Dane aplikacji" => ":NT" ADS not found. C:\Users\Dawid\AppData\Roaming => ":NT" ADS removed successfully. C:\Program Files (x86)\UTuubieuNNoAds => Moved successfully. C:\ProgramData\a3da1d4abc854efc => Moved successfully. C:\ProgramData\UTuubieuNNoAds => Moved successfully. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====