Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-10-2014 Ran by Vincent at 2014-10-17 08:51:18 Run:1 Running from C:\Users\Vincent\Desktop\FRST Loaded Profile: Vincent (Available profiles: Vincent) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: HKLM-x32\...\Run: [NCUpdateHelper] => C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-923326011-3395030656-3799992855-1001\...\Run: [AdobeBridge] => [X] SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File U3 JavaQuickStarterService; No ImagePath DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 DeleteKey: HKLM\SOFTWARE\Wow6432Node\Google DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} C:\ProgramData\Temp C:\ProgramData\DYA_GLRWNJPTKECSRVMPL C:\Users\Vincent\AppData\Local\4010 C:\Users\Vincent\AppData\Local\Google C:\Users\Vincent\AppData\Roaming\sp_data.sys C:\Users\Vincent\AppData\Roaming\DYA_GLRWNJPTKECSRVMPL C:\Users\Vincent\AppData\Roaming\Mozilla G:\*.lnk RemoveDirectory: G:\$RECYCLE.BIN RemoveDirectory: G:\RECYCLER CMD: attrib /d /s -s -h G:\* CMD: sc config "PLAY ONLINE. RunOuc" start= demand EmptyTemp: ***************** Processes closed successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NCUpdateHelper => value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. HKU\S-1-5-21-923326011-3395030656-3799992855-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully. "HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully. "HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully. "HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => Key not found. "HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer" => Key deleted successfully. JavaQuickStarterService => Service deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 => Failed to delete key at first attempt (Error: C0000121), see next line. HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 => Key Deleted Successfully. HKLM\SOFTWARE\Wow6432Node\Google => Failed to delete key at first attempt (Error: C0000121), see next line. HKLM\SOFTWARE\Wow6432Node\Google => Key Deleted Successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} => Key Deleted successfully. C:\ProgramData\Temp => Moved successfully. C:\ProgramData\DYA_GLRWNJPTKECSRVMPL => Moved successfully. C:\Users\Vincent\AppData\Local\4010 => Moved successfully. C:\Users\Vincent\AppData\Local\Google => Moved successfully. C:\Users\Vincent\AppData\Roaming\sp_data.sys => Moved successfully. C:\Users\Vincent\AppData\Roaming\DYA_GLRWNJPTKECSRVMPL => Moved successfully. C:\Users\Vincent\AppData\Roaming\Mozilla => Moved successfully. G:\*.lnk => Moved successfully. "G:\$RECYCLE.BIN" => removed successfully. "G:\RECYCLER" => removed successfully. ========= attrib /d /s -s -h G:\* ========= Odmowa dost©pu - G:\System Volume Information ========= End of CMD: ========= ========= sc config "PLAY ONLINE. RunOuc" start= demand ========= [SC] ChangeServiceConfig SUKCES ========= End of CMD: ========= EmptyTemp: => Removed 2.7 GB temporary data. The system needed a reboot. ==== End of Fixlog ====