Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:31-08-2014 02 Ran by MICHAŁ at 2014-09-01 22:11:06 Run:2 Running from J:\heal Boot Mode: Normal ============================================== Content of fixlist: ***************** S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X] S3 MREMP50; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [X] S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X] S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X] S3 MRESP50; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [X] Winlogon\Notify\WgaLogon: WgaLogon.dll [X] HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-117609710-115176313-1801674531-1003\...\Run: [ares] => "H:\Program Files\Ares\Ares.exe" -h SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=19946&mntrId=44767c630000000000006c626dd8a9c8 SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=19946&mntrId=44767c630000000000006c626dd8a9c8 SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear CHR HomePage: Default -> hxxp://pl.v9.com/opc/opc_1328454034_060346 CHR HKLM\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx [] CHR HKLM\...\Chrome\Extension: [jbpkiefagocgkmemidfngdkamloieekf] - C:\Program Files\TornTV.com\torn11.crx [] CHR HKCU\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx [] C:\Documents and Settings\All Users\Dane aplikacji\Babylon C:\Documents and Settings\MICHAŁ\Dane aplikacji\Babylon C:\Documents and Settings\MICHAŁ\Dane aplikacji\Mozilla C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation Reg: reg delete HKCU\Software\Mozilla /f Reg: reg delete HKLM\SOFTWARE\Mozilla /f Reg: reg delete HKLM\SOFTWARE\mozilla.org /f Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f EmptyTemp: ***************** MBAMSwissArmy => Service not found. MREMP50 => Service not found. MREMPR5 => Service not found. MRENDIS5 => Service not found. MRESP50 => Service not found. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon" => Key not found. HKU\S-1-5-21-117609710-115176313-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value not found. HKU\S-1-5-21-117609710-115176313-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Run\\ares => Value not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key not found. "HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully. "HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key not found. Chrome HomePage deleted successfully. "HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje" => Key deleted successfully. "C:\Program Files\DealPly\DealPly.crx" => File/Directory not found. "HKLM\SOFTWARE\Google\Chrome\Extensions\jbpkiefagocgkmemidfngdkamloieekf" => Key deleted successfully. "C:\Program Files\TornTV.com\torn11.crx" => File/Directory not found. "HKCU\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje" => Key deleted successfully. "C:\Program Files\DealPly\DealPly.crx" => File/Directory not found. C:\Documents and Settings\All Users\Dane aplikacji\Babylon => Moved successfully. C:\Documents and Settings\MICHAŁ\Dane aplikacji\Babylon => Moved successfully. C:\Documents and Settings\MICHAŁ\Dane aplikacji\Mozilla => Moved successfully. C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation => Moved successfully. ========= reg delete HKCU\Software\Mozilla /f ========= Błąd: system nie może odnaleźć określonego klucza rejestru lub wartości. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Mozilla /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\mozilla.org /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\MozillaPlugins /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= EmptyTemp: => Removed 5.5 GB temporary data. The system needed a reboot. ==== End of Fixlog ====