Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-11-2014 Ran by samsung at 2014-11-16 01:58:03 Run:1 Running from C:\Users\samsung\Desktop Loaded Profile: samsung (Available profiles: samsung & UpdatusUser) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION S2 Update SunriseBrowse; "C:\Program FILES (x86)\SunriseBrowse\updateSunriseBrowse.exe" [X] CustomCLSID: HKU\S-1-5-21-1270606213-4017362319-1625700523-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\samsung\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1270606213-4017362319-1625700523-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\samsung\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=156 SearchScopes: HKCU - {szukaj.gazeta.pl} URL = http://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: FiineDDealSofT -> {96CE041C-471F-3B0E-B58A-10FF14DCCC6C} -> C:\ProgramData\FiineDDealSofT\FUaYvdXTm_.x64.dll No File AlternateDataStreams: C:\Windows\system32\msln.exe:263f0f18e2fbc2d6f34198c26bb57ba9 C:\Program Files (x86)\Google C:\Program Files (x86)\Mozilla Firefox C:\Program Files (x86)\Passware C:\ProgramData\DealsFactor C:\ProgramData\Microsoft\Windows\Start Menu\PROGRAMS\Passware C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video DOWNLOADER C:\Users\samsung\AppData\Local\Google C:\Users\samsung\AppData\Roaming\appdataFr2.bin C:\Users\samsung\AppData\Roaming\DVDVideoSoft C:\Users\samsung\AppData\Roaming\ESET C:\Users\samsung\AppData\Roaming\Mozilla C:\Users\samsung\AppData\Roaming\Thinstall C:\Users\UpdatusUser\AppData\Local\Google Reg: reg delete HKCU\Software\Mozilla /f Reg: reg delete HKCU\Software\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search" /f Reg: reg delete HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run /f Reg: reg delete HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly /f Reg: reg delete "HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome" /f Reg: reg delete "HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f EmptyTemp: ***************** Processes closed successfully. C:\Windows\system32\GroupPolicy\Machine => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. Update SunriseBrowse => Service deleted successfully. "HKU\S-1-5-21-1270606213-4017362319-1625700523-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}" => Key deleted successfully. "HKU\S-1-5-21-1270606213-4017362319-1625700523-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}" => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{szukaj.gazeta.pl}" => Key deleted successfully. "HKCR\CLSID\{szukaj.gazeta.pl}" => Key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96CE041C-471F-3B0E-B58A-10FF14DCCC6C}" => Key deleted successfully. "HKCR\CLSID\{96CE041C-471F-3B0E-B58A-10FF14DCCC6C}" => Key deleted successfully. C:\Windows\system32\msln.exe => ":263f0f18e2fbc2d6f34198c26bb57ba9" ADS removed successfully. "C:\Program Files (x86)\Google" => File/Directory not found. C:\Program Files (x86)\Mozilla Firefox => Moved successfully. C:\Program Files (x86)\Passware => Moved successfully. C:\ProgramData\DealsFactor => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\PROGRAMS\Passware => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video DOWNLOADER => Moved successfully. C:\Users\samsung\AppData\Local\Google => Moved successfully. C:\Users\samsung\AppData\Roaming\appdataFr2.bin => Moved successfully. C:\Users\samsung\AppData\Roaming\DVDVideoSoft => Moved successfully. C:\Users\samsung\AppData\Roaming\ESET => Moved successfully. C:\Users\samsung\AppData\Roaming\Mozilla => Moved successfully. C:\Users\samsung\AppData\Roaming\Thinstall => Moved successfully. "C:\Users\UpdatusUser\AppData\Local\Google" => File/Directory not found. ========= reg delete HKCU\Software\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKU\S-1-5-21-1270606213-4017362319-1625700523-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-21-1270606213-4017362319-1625700523-1001\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 103.9 MB temporary data. The system needed a reboot. ==== End of Fixlog ====