Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-06-2014 Ran by Basia at 2014-06-04 15:37:49 Run:5 Running from C:\Users\Basia\Desktop\_logi Boot Mode: Normal ============================================== Content of fixlist: ***************** (AutoIt Team) C:\Users\Basia\bjpky\DpdPfatgZ.exe HKU\S-1-5-21-2568246086-2447926606-4193830083-1002\...\RunOnce: [bjpky] - C:\Users\Basia\bjpky\14122.vbs [184 2014-02-06] () Startup: C:\Users\Basia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\start.lnk StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {51BCC7B1-3642-4753-9589-1AB5C0C58671} URL = SearchScopes: HKCU - {51BCC7B1-3642-4753-9589-1AB5C0C58671} URL = FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon BHO-x32: WebConnect - {a860a8fe-ae61-4d7a-8836-4b748a5faff6} - C:\Program Files (x86)\WebConnect\WebConnectBHO.dll No File S2 Util WebConnect; "C:\Program Files (x86)\WebConnect\bin\utilWebConnect.exe" [X] S3 SBIOSIO; \??\C:\windiag\SBIOSIO64.SYS [X] C:\Users\Basia\bjpky C:\Users\Basia\AppData\Roaming\*.exe C:\Users\Basia\AppData\Roaming\*.tmp C:\Users\Basia\AppData\Roaming\dclogs C:\Users\Basia\AppData\Roaming\Ispida Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {51BCC7B1-3642-4753-9589-1AB5C0C58671} /f Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {51BCC7B1-3642-4753-9589-1AB5C0C58671} /f Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f Reboot: ***************** C:\Users\Basia\bjpky\DpdPfatgZ.exe => No running process found HKU\S-1-5-21-2568246086-2447926606-4193830083-1002\Software\Microsoft\Windows\CurrentVersion\RunOnce\\bjpky => Value not found. C:\Users\Basia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\start.lnk not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{51BCC7B1-3642-4753-9589-1AB5C0C58671} => Key not found. HKCR\CLSID\{51BCC7B1-3642-4753-9589-1AB5C0C58671} => Key not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com => Value not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a860a8fe-ae61-4d7a-8836-4b748a5faff6} => Key not found. HKCR\Wow6432Node\CLSID\{a860a8fe-ae61-4d7a-8836-4b748a5faff6} => Key not found. Util WebConnect => Service not found. SBIOSIO => Service not found. C:\Users\Basia\bjpky => Moved successfully. C:\Users\Basia\AppData\Roaming\*.exe => Moved successfully. C:\Users\Basia\AppData\Roaming\*.tmp => Moved successfully. C:\Users\Basia\AppData\Roaming\dclogs => Moved successfully. C:\Users\Basia\AppData\Roaming\Ispida => Moved successfully. ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {51BCC7B1-3642-4753-9589-1AB5C0C58671} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {51BCC7B1-3642-4753-9589-1AB5C0C58671} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====