Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-09-2014 02 Ran by Patryk at 2014-09-06 09:59:54 Run:1 Running from C:\Users\Patryk\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll => "C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll" File Not Found SearchScopes: HKCU - {A6CE014A-EAD6-437A-8842-E90BE15015DB} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=8965826C-2D4B-40E4-BA33-D4225BF7DC50&apn_sauid=138E17D3-F839-4685-AC67-EA0915C91699 Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll No File FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 gdrv; \??\C:\Windows\gdrv.sys [X] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] U3 ffdoipob; \??\C:\Users\Patryk\AppData\Local\Temp\ffdoipob.sys [X] C:\$AVG C:\Program Files\Enigma Software Group C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} C:\ProgramData\AVG C:\ProgramData\AVG2014 C:\ProgramData\MFAData C:\Users\Patryk\AppData\Local\AVG C:\Users\Patryk\AppData\Local\Avg2014 C:\Users\Patryk\AppData\Local\MFAData C:\Users\Patryk\AppData\Roaming\AVG C:\Users\Patryk\AppData\Roaming\AVG2014 C:\Users\Patryk\AppData\Roaming\TuneUp Software C:\Users\Patryk\Downloads\chromeinstall-*.exe C:\Users\Patryk\Downloads\Free-Sound-Recorder(13331)-dp.exe C:\Users\Patryk\Downloads\SpyHunter-Installer.exe C:\Users\Patryk\Downloads\XoftSpy_AV_Setup.exe C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP EmptyTemp: ***************** "C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL" => Value Data removed successfully. "C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll" => Value Data removed successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A6CE014A-EAD6-437A-8842-E90BE15015DB}" => Key deleted successfully. "HKCR\CLSID\{A6CE014A-EAD6-437A-8842-E90BE15015DB}" => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully. "HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully. "HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully. "HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => Key not found. "HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.4" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.3.0" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => Key deleted successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\fmdownloader@gmail.com => value deleted successfully. EagleX64 => Service deleted successfully. esgiguard => Service deleted successfully. gdrv => Service deleted successfully. MBAMSwissArmy => Service deleted successfully. ffdoipob => Service deleted successfully. C:\$AVG => Moved successfully. C:\Program Files\Enigma Software Group => Moved successfully. C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} => Moved successfully. C:\ProgramData\AVG => Moved successfully. C:\ProgramData\AVG2014 => Moved successfully. C:\ProgramData\MFAData => Moved successfully. C:\Users\Patryk\AppData\Local\AVG => Moved successfully. C:\Users\Patryk\AppData\Local\Avg2014 => Moved successfully. C:\Users\Patryk\AppData\Local\MFAData => Moved successfully. C:\Users\Patryk\AppData\Roaming\AVG => Moved successfully. C:\Users\Patryk\AppData\Roaming\AVG2014 => Moved successfully. C:\Users\Patryk\AppData\Roaming\TuneUp Software => Moved successfully. C:\Users\Patryk\Downloads\chromeinstall-*.exe => Moved successfully. C:\Users\Patryk\Downloads\Free-Sound-Recorder(13331)-dp.exe => Moved successfully. C:\Users\Patryk\Downloads\SpyHunter-Installer.exe => Moved successfully. C:\Users\Patryk\Downloads\XoftSpy_AV_Setup.exe => Moved successfully. C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP => Moved successfully. EmptyTemp: => Removed 529 MB temporary data. The system needed a reboot. ==== End of Fixlog ====