Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 04-10-2014 01 Ran by Wiola at 2014-10-07 19:57:05 Run:1 Running from C:\_Downloads Loaded Profile: Wiola (Available profiles: Daniel & Wiola & Dzieci & Administrator) Boot Mode: Safe Mode (minimal) ============================================== Content of fixlist: ***************** CloseProcesses: S4 sptd; System32\Drivers\sptd.sys [X] S3 WinRing0_1_2_0; \??\D:\Daniel\RealTemp\WinRing0.sys [X] HKLM\...\Run: [LaunchAp] => U HKLM\...\Run: [Wbutton] => ŮŮŮŮq HKU\S-1-5-21-1078081533-1604221776-1417001333-1004\...\Run: [] => [X] SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear FF user.js: detected! => C:\Documents and Settings\Wiola\Dane aplikacji\Mozilla\Firefox\Profiles\njvkh7z0.default\user.js FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-08-04] FF Extension: Google Toolbar for Firefox - C:\Documents and Settings\Wiola\Dane aplikacji\Mozilla\Firefox\Profiles\njvkh7z0.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2011-06-10] FF Extension: Shine Bright Skin Aero - C:\Documents and Settings\Wiola\Dane aplikacji\Mozilla\Firefox\Profiles\njvkh7z0.default\Extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi [2011-04-13] C:\Documents and Settings\All Users\Dane aplikacji\TEMP C:\Documents and Settings\All Users\Dane aplikacji\tmp Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f EmptyTemp: ***************** Processes closed successfully. sptd => Service deleted successfully. WinRing0_1_2_0 => Service deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\LaunchAp => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Wbutton => value deleted successfully. HKU\S-1-5-21-1078081533-1604221776-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully. "HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key not found. C:\Documents and Settings\Wiola\Dane aplikacji\Mozilla\Firefox\Profiles\njvkh7z0.default\user.js => Moved successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => value deleted successfully. C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully. C:\Documents and Settings\Wiola\Dane aplikacji\Mozilla\Firefox\Profiles\njvkh7z0.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} => Moved successfully. C:\Documents and Settings\Wiola\Dane aplikacji\Mozilla\Firefox\Profiles\njvkh7z0.default\Extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\TEMP => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\tmp => Moved successfully. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Błąd: system nie może odnaleźć określonego klucza rejestru lub wartości. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= EmptyTemp: => Removed 349 MB temporary data. The system needed a reboot. ==== End of Fixlog ====