Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-11-2014 01 Ran by Icek at 2014-11-26 01:01:40 Run:2 Running from C:\Users\Icek\Downloads Loaded Profile: Icek (Available profiles: Icek) Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {095A39C8-E389-4FA0-ADE3-A9E53B61E12B} - System32\Tasks\Plus-HD-7.6-updater => C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-updater.exe <==== ATTENTION Task: {3E063C76-411D-4168-BB57-BEB8F716AB13} - System32\Tasks\Plus-HD-7.6-enabler => C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-enabler.exe <==== ATTENTION Task: {6BCC8CAB-A4EC-45D8-B83C-609F9C8FD479} - System32\Tasks\Plus-HD-7.6-codedownloader => C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-codedownloader.exe <==== ATTENTION Task: {89697537-6341-4473-8D45-72663C1C872A} - System32\Tasks\Plus-HD-7.6-firefoxinstaller => C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-firefoxinstaller.exe <==== ATTENTION Task: C:\Windows\Tasks\Plus-HD-7.6-codedownloader.job => C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-codedownloader.exe <==== ATTENTION Task: C:\Windows\Tasks\Plus-HD-7.6-enabler.job => C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-enabler.exe <==== ATTENTION Task: C:\Windows\Tasks\Plus-HD-7.6-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-firefoxinstaller.exe <==== ATTENTION Task: C:\Windows\Tasks\Plus-HD-7.6-updater.job => C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-updater.exe <==== ATTENTION BHO: Plus-HD-7.6 -> {11111111-1111-1111-1111-110511071178} -> C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-bho64.dll No File BHO-x32: Plus-HD-7.6 -> {11111111-1111-1111-1111-110511071178} -> C:\Program Files (x86)\Plus-HD-7.6\Plus-HD-7.6-bho.dll No File CHR HomePage: Default -> hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=52C35442495E4045&affID=128012&tsp=5169 CHR StartupUrls: Default -> "hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=52C35442495E4045&affID=128012&tsp=5169", "hxxp://www.doko-search.com/?babsrc=HP_ss&mntrId=52C35442495E4045&affID=125839&tsp=5037" CHR HKLM-x32\...\Chrome\Extension: [acfoobbgoakpihljnfedbcfaipcdlfhk] - C:\Users\Icek\AppData\Roaming\BabSolution\CR\bueno.crx [] CHR HKLM-x32\...\Chrome\Extension: [edcikfknpchdehdlmjpbofgkoaonaijg] - C:\Users\Icek\AppData\Roaming\BabSolution\CR\Doko.crx [] C:\ProgramData\Babylon C:\ProgramData\BitGuard C:\ProgramData\McAfee C:\Users\Icek\AppData\Local\avgchrome C:\Users\Icek\AppData\Local\Lollipop C:\Users\Icek\AppData\LocalLow\buenosearch LTD C:\Users\Icek\AppData\LocalLow\Delta Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-7.6 /f ***************** "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{095A39C8-E389-4FA0-ADE3-A9E53B61E12B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{095A39C8-E389-4FA0-ADE3-A9E53B61E12B}" => Key deleted successfully. C:\Windows\System32\Tasks\Plus-HD-7.6-updater => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-7.6-updater" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3E063C76-411D-4168-BB57-BEB8F716AB13}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3E063C76-411D-4168-BB57-BEB8F716AB13}" => Key deleted successfully. C:\Windows\System32\Tasks\Plus-HD-7.6-enabler => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-7.6-enabler" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6BCC8CAB-A4EC-45D8-B83C-609F9C8FD479}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6BCC8CAB-A4EC-45D8-B83C-609F9C8FD479}" => Key deleted successfully. C:\Windows\System32\Tasks\Plus-HD-7.6-codedownloader => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-7.6-codedownloader" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{89697537-6341-4473-8D45-72663C1C872A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89697537-6341-4473-8D45-72663C1C872A}" => Key deleted successfully. C:\Windows\System32\Tasks\Plus-HD-7.6-firefoxinstaller => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-7.6-firefoxinstaller" => Key deleted successfully. C:\Windows\Tasks\Plus-HD-7.6-codedownloader.job => Moved successfully. C:\Windows\Tasks\Plus-HD-7.6-enabler.job => Moved successfully. C:\Windows\Tasks\Plus-HD-7.6-firefoxinstaller.job => Moved successfully. C:\Windows\Tasks\Plus-HD-7.6-updater.job => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511071178}" => Key deleted successfully. "HKCR\CLSID\{11111111-1111-1111-1111-110511071178}" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511071178}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110511071178}" => Key deleted successfully. Chrome HomePage deleted successfully. Chrome StartupUrls deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk" => Key deleted successfully. "C:\Users\Icek\AppData\Roaming\BabSolution\CR\bueno.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\edcikfknpchdehdlmjpbofgkoaonaijg" => Key deleted successfully. "C:\Users\Icek\AppData\Roaming\BabSolution\CR\Doko.crx" => File/Directory not found. C:\ProgramData\Babylon => Moved successfully. C:\ProgramData\BitGuard => Moved successfully. C:\ProgramData\McAfee => Moved successfully. C:\Users\Icek\AppData\Local\avgchrome => Moved successfully. C:\Users\Icek\AppData\Local\Lollipop => Moved successfully. C:\Users\Icek\AppData\LocalLow\buenosearch LTD => Moved successfully. C:\Users\Icek\AppData\LocalLow\Delta => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-7.6 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog ====