Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-05-2014 Ran by Dusiek at 2014-05-07 20:28:21 Run:1 Running from C:\Users\Dusiek\Desktop\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe Task: {0B0AE895-C0C8-4471-821F-92EB8004494C} - System32\Tasks\YourFile Update => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATTENTION Task: {20561217-7D1C-4AEE-B41B-45DFFD973636} - System32\Tasks\Go for FilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION Task: {35346115-050F-42CD-B692-33BFAE333E27} - System32\Tasks\{D8F89288-2E34-4DB6-A959-621816085E24} => C:\Program Files (x86)\ToonCar\ToonCar.exe [2001-10-23] () Task: {7542A388-5208-4309-8E72-48EB3BA74039} - System32\Tasks\CodecUpdaterUpdaterRefreshTask => C:\ProgramData\CodecUpdate\ix_updater.exe [2012-07-18] () Task: {C871A238-9A8C-4805-8BC7-8664798A2442} - System32\Tasks\CodecUpdaterUpdaterLogonTask => C:\ProgramData\CodecUpdate\ix_updater.exe [2012-07-18] () Task: C:\Windows\Tasks\CodecUpdaterUpdaterLogonTask.job => C:\ProgramData\CodecUpdate\ix_updater.exe Task: C:\Windows\Tasks\CodecUpdaterUpdaterRefreshTask.job => C:\ProgramData\CodecUpdate\ix_updater.exe R2 svcgdp; C:\Program Files (x86)\Software Plate\svcgdp.exe [224416 2012-07-02] (Beijing ELEX Technology Co., Ltd.) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 zlportio; \??\C:\Program Files (x86)\UltraStar\zlportio.sys [X] HKLM-x32\...\Run: [SweetIM] => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [Sweetpacks Communicator] => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [295728 2012-02-26] (SweetIM Technologies Ltd.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.dogpile.com/ URLSearchHook: HKLM-x32 - free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) URLSearchHook: HKLM-x32 - Ashampoo PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) URLSearchHook: HKCU - free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) URLSearchHook: HKCU - Ashampoo PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033 SearchScopes: HKLM-x32 - {CF4F24C0-2D6C-4337-8C25-716F297656AB} URL = ${SEARCH_URL}{searchTerms} SearchScopes: HKCU - DefaultScope {CF4F24C0-2D6C-4337-8C25-716F297656AB} URL = http://www.dogpile.com/search/web?fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=112555&tt=4212_1&babsrc=SP_ss&mntrId=be448af1000000000000c44619b30120 SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={E8878FF2-9021-43B6-906F-4B73067F3666}&mid=8e44297dae4547d08fa2150f5f57e8d3-916e3f00c35bb49f3aabeb0b7b6ab4987a0a4a36&lang=pl&ds=gm011&pr=sa&d=2012-03-27 20:55:13&v=10.2.0.3&sap=dsp&q={searchTerms} SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033 SearchScopes: HKCU - {CF4F24C0-2D6C-4337-8C25-716F297656AB} URL = http://www.dogpile.com/search/web?fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms} SearchScopes: HKCU - {FAFEBB96-F248-4BD6-A55C-FA6A33248A5E} URL = http://search.ividi.org/?q={searchTerms}&src=tbsp&id=be448af1000000000000c44619b30120&affilt=3&r=320 BHO-x32: hosts - {11111111-1111-1111-1111-110311531182} - C:\Program Files (x86)\hosts\hosts-bho.dll No File BHO-x32: ividi Helper Object - {8B8B2E80-1444-451D-AC8E-EB9A847F3887} - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\bh\ividi.dll (Unitech LLC) BHO-x32: Ashampoo PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) BHO-x32: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM-x32 - free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM-x32 - Ashampoo PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No File Toolbar: HKCU - No Name - {ECDEE021-0D17-467F-A1FF-C7A115230949} - No File Toolbar: HKCU - No Name - {D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - No File CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\Dusiek\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx [2011-12-19] CHR HKLM-x32\...\Chrome\Extension: [giacfgjdclhnmkacnfbaljbmpnelflol] - C:\Program Files (x86)\iVIDI.org plugin\ividiplg.crx [2012-11-05] CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Dusiek\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-08-07] CHR HKLM-x32\...\Chrome\Extension: [kpdhgpkkloealnjnmepfhanpcleldbef] - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\ividi.crx [2013-07-25] CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.crx [2013-07-25] C:\Program Files (x86)\Mozilla Firefox\extensions C:\Program Files (x86)\mozilla firefox\plugins C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraStar C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Uninstall Google Chrome.lnk C:\Users\Dusiek\AppData\Local\Google\Chrome\User Data\Default\External Extensions C:\Users\Dusiek\AppData\Roaming\Babylon C:\Users\Dusiek\AppData\Roaming\DigitalSites C:\Users\Dusiek\AppData\Roaming\GoforFiles C:\Users\Dusiek\AppData\Roaming\NCdownloader C:\Users\Dusiek\AppData\Roaming\OpenCandy C:\Users\Dusiek\AppData\Roaming\YourFileDownloader C:\Users\Dusiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DownTango C:\Users\Dusiek\Desktop\Programy\ALL Media Server.lnk C:\Users\Dusiek\Desktop\Programy\ALL YouTube Downloader.lnk C:\Users\Dusiek\Desktop\Programy\ALLPlayer.lnk C:\Users\Dusiek\Desktop\Programy\Avira AntiVir Control Center.lnk C:\Users\Dusiek\Desktop\Programy\Optimizer Pro.lnk C:\Users\Dusiek\Desktop\Programy\UltraStar.lnk C:\Users\Dusiek\Desktop\Muzyczka\Skrót do Beethoven- Symphony no. 5.lnk C:\Windows\SysWOW64\sho*.tmp C:\*.log C:\END C:\msvcp100.dll C:\msvcr100.dll C:\user.js CMD: attrib /d /s -s -h G:\* CMD: sc config "PLAY ONLINE. RunOuc" start= demand Reboot: ***************** [5872] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe => Process closed successfully. [5960] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe => Process closed successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0B0AE895-C0C8-4471-821F-92EB8004494C} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B0AE895-C0C8-4471-821F-92EB8004494C} => Key deleted successfully. C:\Windows\System32\Tasks\YourFile Update => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YourFile Update => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{20561217-7D1C-4AEE-B41B-45DFFD973636} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20561217-7D1C-4AEE-B41B-45DFFD973636} => Key deleted successfully. C:\Windows\System32\Tasks\Go for FilesUpdate => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Go for FilesUpdate => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{35346115-050F-42CD-B692-33BFAE333E27} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35346115-050F-42CD-B692-33BFAE333E27} => Key deleted successfully. C:\Windows\System32\Tasks\{D8F89288-2E34-4DB6-A959-621816085E24} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D8F89288-2E34-4DB6-A959-621816085E24} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7542A388-5208-4309-8E72-48EB3BA74039} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7542A388-5208-4309-8E72-48EB3BA74039} => Key deleted successfully. C:\Windows\System32\Tasks\CodecUpdaterUpdaterRefreshTask => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CodecUpdaterUpdaterRefreshTask => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C871A238-9A8C-4805-8BC7-8664798A2442} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C871A238-9A8C-4805-8BC7-8664798A2442} => Key deleted successfully. C:\Windows\System32\Tasks\CodecUpdaterUpdaterLogonTask => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CodecUpdaterUpdaterLogonTask => Key deleted successfully. C:\Windows\Tasks\CodecUpdaterUpdaterLogonTask.job => Moved successfully. C:\Windows\Tasks\CodecUpdaterUpdaterRefreshTask.job => Moved successfully. svcgdp => Service stopped successfully. svcgdp => Service deleted successfully. catchme => Service deleted successfully. ewusbnet => Service deleted successfully. zlportio => Service deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SweetIM => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Sweetpacks Communicator => Value deleted successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{ecdee021-0d17-467f-a1ff-c7a115230949} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{ecdee021-0d17-467f-a1ff-c7a115230949} => Key deleted successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{ecdee021-0d17-467f-a1ff-c7a115230949} => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} => Value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{CF4F24C0-2D6C-4337-8C25-716F297656AB} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{CF4F24C0-2D6C-4337-8C25-716F297656AB} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\bProtectorDefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key deleted successfully. HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully. HKCR\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CF4F24C0-2D6C-4337-8C25-716F297656AB} => Key deleted successfully. HKCR\CLSID\{CF4F24C0-2D6C-4337-8C25-716F297656AB} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FAFEBB96-F248-4BD6-A55C-FA6A33248A5E} => Key deleted successfully. HKCR\CLSID\{FAFEBB96-F248-4BD6-A55C-FA6A33248A5E} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531182} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311531182} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8B8B2E80-1444-451D-AC8E-EB9A847F3887} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{8B8B2E80-1444-451D-AC8E-EB9A847F3887} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{ecdee021-0d17-467f-a1ff-c7a115230949} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{ecdee021-0d17-467f-a1ff-c7a115230949} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{ecdee021-0d17-467f-a1ff-c7a115230949} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{EEE6C35B-6118-11DC-9C72-001320C79847} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1017A80C-6F09-4548-A84D-EDD6AC9525F0} => Value deleted successfully. HKCR\CLSID\{1017A80C-6F09-4548-A84D-EDD6AC9525F0} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{ECDEE021-0D17-467F-A1FF-C7A115230949} => Value deleted successfully. HKCR\CLSID\{ECDEE021-0D17-467F-A1FF-C7A115230949} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D43723AE-1AE1-4A25-A6A4-BF0929273CAB} => Value deleted successfully. HKCR\CLSID\{D43723AE-1AE1-4A25-A6A4-BF0929273CAB} => Key not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb => Key deleted successfully. "C:\Users\Dusiek\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\giacfgjdclhnmkacnfbaljbmpnelflol => Key deleted successfully. C:\Program Files (x86)\iVIDI.org plugin\ividiplg.crx => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn => Key deleted successfully. C:\Users\Dusiek\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kpdhgpkkloealnjnmepfhanpcleldbef => Key deleted successfully. C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\ividi.crx => Moved successfully. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph => Key deleted successfully. "C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.crx" => File/Directory not found. C:\Program Files (x86)\Mozilla Firefox\extensions => Moved successfully. C:\Program Files (x86)\mozilla firefox\plugins => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraStar => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Uninstall Google Chrome.lnk => Moved successfully. C:\Users\Dusiek\AppData\Local\Google\Chrome\User Data\Default\External Extensions => Moved successfully. C:\Users\Dusiek\AppData\Roaming\Babylon => Moved successfully. C:\Users\Dusiek\AppData\Roaming\DigitalSites => Moved successfully. C:\Users\Dusiek\AppData\Roaming\GoforFiles => Moved successfully. C:\Users\Dusiek\AppData\Roaming\NCdownloader => Moved successfully. C:\Users\Dusiek\AppData\Roaming\OpenCandy => Moved successfully. C:\Users\Dusiek\AppData\Roaming\YourFileDownloader => Moved successfully. C:\Users\Dusiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DownTango => Moved successfully. C:\Users\Dusiek\Desktop\Programy\ALL Media Server.lnk => Moved successfully. C:\Users\Dusiek\Desktop\Programy\ALL YouTube Downloader.lnk => Moved successfully. C:\Users\Dusiek\Desktop\Programy\ALLPlayer.lnk => Moved successfully. C:\Users\Dusiek\Desktop\Programy\Avira AntiVir Control Center.lnk => Moved successfully. C:\Users\Dusiek\Desktop\Programy\Optimizer Pro.lnk => Moved successfully. C:\Users\Dusiek\Desktop\Programy\UltraStar.lnk => Moved successfully. C:\Users\Dusiek\Desktop\Muzyczka\Skrót do Beethoven- Symphony no. 5.lnk => Moved successfully. C:\Windows\SysWOW64\sho*.tmp => Moved successfully. C:\*.log => Moved successfully. C:\END => Moved successfully. C:\msvcp100.dll => Moved successfully. C:\msvcr100.dll => Moved successfully. C:\user.js => Moved successfully. ========= attrib /d /s -s -h G:\* ========= ========= End of CMD: ========= ========= sc config "PLAY ONLINE. RunOuc" start= demand ========= [SC] ChangeServiceConfig SUKCES ========= End of CMD: ========= The system needed a reboot. ==== End of Fixlog ====