Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-11-2014 Ran by Michał at 2014-11-13 16:21:51 Run:1 Running from C:\Users\Michał\Desktop Loaded Profile: Michał (Available profiles: Michał) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X] S3 X6va025; \??\C:\Windows\SysWOW64\Drivers\X6va025 [X] Task: {C1152FA0-C07A-4D2F-94B7-F2F29823DE42} - System32\Tasks\Trigger KMS Activation => I:\office\AKtywator\TriggerKMS.exe C:\Users\Michał\AppData\Roaming\Mozilla\Firefox\Profiles\d8u797hc.default\Extensions\jid1-RYwhP9dQdGfXkQ@jetpack C:\Users\Michał\AppData\Roaming\Imminent C:\Users\Michał\AppData\Roaming\System32 C:\Users\Michał\AppData\Roaming\Thinstall Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IDMan" /f EmptyTemp: ***************** Processes closed successfully. atillk64 => Service deleted successfully. EagleX64 => Service deleted successfully. FairplayKD => Service deleted successfully. X6va025 => Service deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C1152FA0-C07A-4D2F-94B7-F2F29823DE42}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C1152FA0-C07A-4D2F-94B7-F2F29823DE42}" => Key deleted successfully. C:\Windows\System32\Tasks\Trigger KMS Activation => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Trigger KMS Activation" => Key deleted successfully. C:\Users\Michał\AppData\Roaming\Mozilla\Firefox\Profiles\d8u797hc.default\Extensions\jid1-RYwhP9dQdGfXkQ@jetpack => Moved successfully. C:\Users\Michał\AppData\Roaming\Imminent => Moved successfully. C:\Users\Michał\AppData\Roaming\System32 => Moved successfully. C:\Users\Michał\AppData\Roaming\Thinstall => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IDMan" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 1.1 GB temporary data. The system needed a reboot. ==== End of Fixlog ====