Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-10-2014 01 Ran by User at 2014-10-13 17:00:55 Run:1 Running from C:\Documents and Settings\User\Moje dokumenty\Pobrane Loaded Profile: User (Available profiles: User & Administrator) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: HKLM Group Policy restriction on software: C:\Program Files\ESET <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\Malwarebytes' Anti-Malware <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\Alwil Software <====== ATTENTION HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <====== ATTENTION HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%*.exe <====== ATTENTION HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%System32\*.exe <====== ATTENTION HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <====== ATTENTION FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension R3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 gdrv; \??\C:\WINDOWS\gdrv.sys [X] U3 mbr; \??\C:\DOCUME~1\User\USTAWI~1\Temp\mbr.sys [X] C:\Documents and Settings\All Users\Dane aplikacji\EecejFugto C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy C:\Documents and Settings\User\Dane aplikacji\DSite C:\Program Files\Mozilla Firefox\plugins C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension CMD: netsh firewall reset EmptyTemp: ***************** Processes closed successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => value deleted successfully. catchme => Service stopped successfully. catchme => Service deleted successfully. gdrv => Service deleted successfully. mbr => Service deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\EecejFugto => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy => Moved successfully. C:\Documents and Settings\User\Dane aplikacji\DSite => Moved successfully. C:\Program Files\Mozilla Firefox\plugins => Moved successfully. C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully. ========= netsh firewall reset ========= Ok. ========= End of CMD: ========= EmptyTemp: => Removed 97.6 MB temporary data. The system needed a reboot. ==== End of Fixlog ====