Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-11-2014 03 Ran by Justyna at 2014-11-17 21:03:43 Run:2 Running from C:\Users\Justyna\Desktop Loaded Profile: Justyna (Available profiles: justyna i darek & Justyna) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={6CA96120-03AA-4CD4-B5EC-3A3A3BBB3C01}&mid=734426b7a65547d08159d16e55ca7cac-5e9ec83d3ac33e27890d98fe7f860460128f9bd7&lang=pl&ds=xn011&pr=sa&d=2012-09-30 09:32:43&v=17.0.1.12&pid=avg&sg=0&sap=dsp&q={searchTerms} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={6CA96120-03AA-4CD4-B5EC-3A3A3BBB3C01}&mid=734426b7a65547d08159d16e55ca7cac-5e9ec83d3ac33e27890d98fe7f860460128f9bd7&lang=pl&ds=xn011&pr=sa&d=2012-09-30 09:32:43&v=17.0.1.12&pid=avg&sg=0&sap=dsp&q={searchTerms} HKU\S-1-5-21-2497160206-2615029055-3091190810-1001\...\Policies\system: [WallpaperStyle] 2 S4 sptd; System32\Drivers\sptd.sys [X] C:\Program Files\JAVA C:\Program Files (x86)\Ahead C:\Program Files (x86)\AVG C:\Program Files (x86)\Media Player Classic C:\Program Files (x86)\PhotoFiltre 7 C:\ProgramData\{*}.log C:\ProgramData\AVG10 C:\ProgramData\Avg_Update_0814tb C:\ProgramData\DAEMON Tools Lite C:\ProgramData\FarmFrenzy-PizzaParty C:\ProgramData\Gadu-Gadu 10 C:\ProgramData\MFAData C:\ProgramData\Nero C:\ProgramData\NortonInstaller C:\ProgramData\OpenFM C:\ProgramData\Sun C:\ProgramData\Symantec C:\ProgramData\Temp C:\ProgramData\YTD Video Downloader C:\Users\Justyna\AppData\Local\Google\Chrome C:\Users\justyna i darek\AppData\Local\*.txt C:\Users\justyna i darek\AppData\Local\tmpDSC05363.JPG C:\Users\justyna i darek\AppData\Local\cache C:\Users\justyna i darek\AppData\Local\Mozilla C:\Users\justyna i darek\AppData\Local\Symantec C:\Users\justyna i darek\AppData\Roaming\*.dll C:\Users\justyna i darek\AppData\Roaming\*.exe C:\Users\justyna i darek\AppData\Roaming\DAEMON Tools Lite C:\Users\justyna i darek\AppData\Roaming\Dati C:\Users\justyna i darek\AppData\Roaming\Eddu C:\Users\justyna i darek\AppData\Roaming\Edwebi C:\Users\justyna i darek\AppData\Roaming\ErrorLogs C:\Users\justyna i darek\AppData\Roaming\Gadu-Gadu 10 C:\Users\justyna i darek\AppData\Roaming\Goodgame C:\Users\justyna i darek\AppData\Roaming\install C:\Users\justyna i darek\AppData\Roaming\InstallDir C:\Users\justyna i darek\AppData\Roaming\instant C:\Users\justyna i darek\AppData\Roaming\Java C:\Users\justyna i darek\AppData\Roaming\justyna i dareklog.dat C:\Users\justyna i darek\AppData\Roaming\justyna i darekv1.23.0remote C:\Users\justyna i darek\AppData\Roaming\Nero C:\Users\justyna i darek\AppData\Roaming\ntsokrn.txt C:\Users\justyna i darek\AppData\Roaming\OpenFM C:\Users\justyna i darek\AppData\Roaming\PhotoFiltre 7 C:\Users\justyna i darek\AppData\Roaming\System C:\Users\justyna i darek\AppData\Roaming\x0liai0k C:\Users\justyna i darek\AppData\Roaming\Microsoft\kjdfhjiozeuj CMD: dir /a C:\Users\justyna\AppData\Local CMD: dir /a C:\Users\justyna\AppData\LocalLow CMD: dir /a C:\Users\justyna\AppData\Roaming CMD: dir /a C:\Users\justyna\AppData\Roaming\Microsoft ***************** Processes closed successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully. "HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key deleted successfully. "HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key not found. HKU\S-1-5-21-2497160206-2615029055-3091190810-1001\Software\Microsoft\Windows\CurrentVersion\Policies\system\\WallpaperStyle => value deleted successfully. sptd => Service deleted successfully. C:\Program Files\JAVA => Moved successfully. C:\Program Files (x86)\Ahead => Moved successfully. C:\Program Files (x86)\AVG => Moved successfully. C:\Program Files (x86)\Media Player Classic => Moved successfully. C:\Program Files (x86)\PhotoFiltre 7 => Moved successfully. C:\ProgramData\{*}.log => Moved successfully. C:\ProgramData\AVG10 => Moved successfully. C:\ProgramData\Avg_Update_0814tb => Moved successfully. C:\ProgramData\DAEMON Tools Lite => Moved successfully. C:\ProgramData\FarmFrenzy-PizzaParty => Moved successfully. C:\ProgramData\Gadu-Gadu 10 => Moved successfully. C:\ProgramData\MFAData => Moved successfully. C:\ProgramData\Nero => Moved successfully. C:\ProgramData\NortonInstaller => Moved successfully. C:\ProgramData\OpenFM => Moved successfully. C:\ProgramData\Sun => Moved successfully. C:\ProgramData\Symantec => Moved successfully. C:\ProgramData\Temp => Moved successfully. C:\ProgramData\YTD Video Downloader => Moved successfully. C:\Users\Justyna\AppData\Local\Google\Chrome => Moved successfully. C:\Users\justyna i darek\AppData\Local\*.txt => Moved successfully. C:\Users\justyna i darek\AppData\Local\tmpDSC05363.JPG => Moved successfully. C:\Users\justyna i darek\AppData\Local\cache => Moved successfully. C:\Users\justyna i darek\AppData\Local\Mozilla => Moved successfully. C:\Users\justyna i darek\AppData\Local\Symantec => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\*.dll => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\*.exe => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\DAEMON Tools Lite => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\Dati => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\Eddu => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\Edwebi => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\ErrorLogs => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\Gadu-Gadu 10 => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\Goodgame => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\install => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\InstallDir => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\instant => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\Java => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\justyna i dareklog.dat => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\justyna i darekv1.23.0remote => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\Nero => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\ntsokrn.txt => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\OpenFM => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\PhotoFiltre 7 => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\System => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\x0liai0k => Moved successfully. C:\Users\justyna i darek\AppData\Roaming\Microsoft\kjdfhjiozeuj => Moved successfully. ========= dir /a C:\Users\justyna\AppData\Local ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: 2AF5-CC4F Katalog: C:\Users\justyna\AppData\Local 2014-11-16 22:02 . 2014-11-16 22:02 .. 2012-07-24 19:23 Adobe 2012-03-17 17:02 ATI 2012-03-17 17:02 0 AtStart.txt 2012-03-17 17:02 Broadcom 2012-06-25 10:20 CyberLink 2012-03-17 17:01 Dane aplikacji [C:\Users\Justyna\AppData\Local] 2013-05-20 20:01 Diagnostics 2012-03-17 17:02 DigitalPersona 2012-03-17 17:02 0 DSwitch.txt 2014-11-16 22:02 EmieBrowserModeList 2014-11-16 22:02 EmieSiteList 2014-11-16 22:02 EmieUserList 2013-02-07 17:10 116ÿ760 GDIPFONTCACHEV1.DAT 2014-11-17 21:04 Google 2012-06-17 10:40 Hewlett-Packard 2012-03-17 17:01 Historia [C:\Users\Justyna\AppData\Local\Microsoft\Windows\History] 2012-07-12 21:12 HP 2014-11-17 10:27 1ÿ565ÿ280 IconCache.db 2014-01-05 10:30 Microsoft 2012-03-17 17:03 Microsoft Games 2010-06-09 22:13 Microsoft Help 2012-03-17 17:28 Opera 2012-06-25 10:20 PowerCinema 2012-03-17 17:02 0 QSwitch.txt 2012-03-17 17:02 RST 2014-11-17 21:04 Temp 2012-03-17 17:01 Temporary Internet Files [C:\Users\Justyna\AppData\Local\Microsoft\Windows\Temporary Internet Files] 2012-03-17 17:01 VirtualStore 5 plik(¢w) 1ÿ682ÿ040 bajt¢w 25 katalog(¢w) 314ÿ669ÿ682ÿ688 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\justyna\AppData\LocalLow ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: 2AF5-CC4F Katalog: C:\Users\justyna\AppData\LocalLow 2014-11-16 22:02 . 2014-11-16 22:02 .. 2014-11-16 22:02 EmieBrowserModeList 2014-11-16 22:02 EmieSiteList 2014-11-16 22:02 EmieUserList 2014-11-16 22:02 HPAppData 2014-11-16 22:01 Microsoft 0 plik(¢w) 0 bajt¢w 7 katalog(¢w) 314ÿ669ÿ670ÿ400 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\justyna\AppData\Roaming ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: 2AF5-CC4F Katalog: C:\Users\justyna\AppData\Roaming 2014-11-14 19:14 . 2014-11-14 19:14 .. 2012-07-24 19:22 Adobe 2012-03-17 17:02 ATI 2012-06-25 10:21 CyberLink 2012-03-17 17:02 DigitalPersona 2014-11-08 12:37 Hewlett-Packard 2012-07-12 21:13 HP 2012-06-17 10:40 HP Support Assistant 2014-01-05 11:12 HpUpdate 2012-03-17 17:01 Identities 2012-11-09 22:01 InstallShield 2012-03-17 17:29 Macromedia 2012-03-17 17:03 Macrovision 2009-08-25 10:28 Media Center Programs 2012-11-09 21:33 Microsoft 2012-03-17 17:28 Opera 2012-05-29 20:42 PhotoFiltre 7 2012-05-17 15:13 Skype 2012-10-28 10:33 WinRAR 0 plik(¢w) 0 bajt¢w 20 katalog(¢w) 314ÿ669ÿ670ÿ400 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\justyna\AppData\Roaming\Microsoft ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: 2AF5-CC4F Katalog: C:\Users\justyna\AppData\Roaming\Microsoft 2012-11-09 21:33 . 2012-11-09 21:33 .. 2012-04-04 14:42 CLR Security Config 2012-03-17 17:01 Credentials 2012-03-17 17:02 Crypto 2012-04-04 18:27 Document Building Blocks 2012-04-04 18:27 Dodatki 2012-03-17 17:01 Internet Explorer 2012-11-09 21:33 MMC 2012-03-17 17:02 Network 2012-04-04 18:30 Office 2012-03-17 17:01 Protect 2012-04-04 18:28 Sprawdzanie 2012-03-17 17:02 SystemCertificates 2012-10-15 18:57 Szablony 2012-04-04 18:28 UProof 2014-01-05 10:30 Windows 2012-04-04 18:27 Word 0 plik(¢w) 0 bajt¢w 18 katalog(¢w) 314ÿ669ÿ670ÿ400 bajt¢w wolnych ========= End of CMD: ========= The system needed a reboot. ==== End of Fixlog ====