Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-11-2014 01 Ran by User at 2014-11-28 20:19:49 Run:1 Running from C:\Users\User\Desktop\KONSERWACJA Loaded Profile: User (Available profiles: User) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: Reg: reg delete HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\gopher /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IAAnotif" /f Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Foxy Secure" /f Reg: reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Search Protection" /f CMD: type C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pt5exhs9.default\user.js StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\S-1-5-21-360347071-2745981148-392569559-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=foxysecurity SearchScopes: HKU\S-1-5-21-360347071-2745981148-392569559-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=foxysecurity SearchScopes: HKU\S-1-5-21-360347071-2745981148-392569559-1000 -> {22128D7B-B49C-49EE-90CB-C8EF5636E836} URL = https://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=201117&p={searchTerms} FF Keyword.URL: https://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=201117&p= FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pt5exhs9.default\searchplugins\yahoo_ff.xml EmptyTemp: ***************** Processes closed successfully. ========= reg delete HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\gopher /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IAAnotif" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Foxy Secure" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Search Protection" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= type C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pt5exhs9.default\user.js ========= user_pref("extensions.blocklist.enabled", false); user_pref("app.update.auto", false); user_pref("security.mixed_content.block_active_content", false); user_pref("security.mixed_content.block_display_content", false); user_pref("app.update.staging.enabled", true); user_pref("app.update.interval", 31536000); user_pref("app.update.idletime", 31536000); user_pref("browser.search.update", false); user_pref("browser.search.update.interval", 31536000); user_pref("app.update.channel", "default"); user_pref("extensions.getAddons.cache.enabled", false); user_pref("app.update.download.backgroundInterval", 31536000); user_pref("browser.safebrowsing.appRepURL", ); ========= End of CMD: ========= HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKU\S-1-5-21-360347071-2745981148-392569559-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-360347071-2745981148-392569559-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully. "HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found. "HKU\S-1-5-21-360347071-2745981148-392569559-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{22128D7B-B49C-49EE-90CB-C8EF5636E836}" => Key deleted successfully. "HKCR\CLSID\{22128D7B-B49C-49EE-90CB-C8EF5636E836}" => Key not found. Firefox Keyword.URL deleted successfully. C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pt5exhs9.default\searchplugins\yahoo_ff.xml => Moved successfully. EmptyTemp: => Removed 256.2 MB temporary data. The system needed a reboot. ==== End of Fixlog ====