Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-06-2014 Ran by Kuba at 2014-06-10 23:42:57 Run:1 Running from C:\Users\Kuba\Desktop\akcja\Akcja 2 Boot Mode: Normal ============================================== Content of fixlist: ***************** R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys [61016 2014-06-06] (StdLib) HKU\S-1-5-21-2266823112-1243492419-4063113931-1001\...\Run: [soundmng] => C:\Users\Kuba\AppData\Roaming\soundmng\soundmng.exe [66769920 2014-06-09] () HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKLM\...\Policies\Explorer: [NoControlPanel] 0 SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = C:\Users\Kuba\AppData\Roaming\soundmng C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys Reg: reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved /s Reg: reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved /s Reboot: ***************** {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64 => Unable to stop service {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64 => Service deleted successfully. HKU\S-1-5-21-2266823112-1243492419-4063113931-1001\Software\Microsoft\Windows\CurrentVersion\Run\\soundmng => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFolderOptions => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully. 'HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}' => Key deleted successfully. 'HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'=> Key not found. 'HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}' => Key deleted successfully. 'HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'=> Key not found. C:\Users\Kuba\AppData\Roaming\soundmng => Moved successfully. C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys => Moved successfully. ========= reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved /s ========= HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run DAEMON Tools Lite REG_BINARY 020000000000000000000000 DellSystemDetect REG_BINARY 020000000000000000000000 FreeAC REG_BINARY 020000000000000000000000 Google Update REG_BINARY 020000000000000000000000 soundmng REG_BINARY 030000009AFF77FCB584CF01 Spotify Web Helper REG_BINARY 020000000000000000000000 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder ========= End of Reg: ========= ========= reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved /s ========= HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run RTHDVCPL REG_BINARY 060000000000000000000000 RtHDVBg REG_BINARY 060000000000000000000000 RtHDVBg_PushButton REG_BINARY 060000000000000000000000 IAStorIcon REG_BINARY 020000000000000000000000 HotKeysCmds REG_BINARY 020000000000000000000000 IgfxTray REG_BINARY 020000000000000000000000 Persistence REG_BINARY 020000000000000000000000 QuickSet REG_BINARY 020000000000000000000000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 StartCCC REG_BINARY 020000000000000000000000 SunJavaUpdateSched REG_BINARY 020000000000000000000000 mcpltui_exe REG_BINARY 020000000000000000000000 Adobe ARM REG_BINARY 020000000000000000000000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder Bluetooth.lnk REG_BINARY 020000000000000000000000 ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====