Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-12-2014 01 Ran by mariusz at 2014-12-08 11:18:13 Run:1 Running from C:\Users\mariusz\Downloads\Log Loaded Profiles: mariusz & Matura (Available profiles: mariusz & Matura) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: DisableService: BBUpdate DisableService: BBSvc R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-06-02] (AVG Technologies) R2 vToolbarUpdater18.1.7; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe [1808408 2014-06-02] (AVG Secure Search) S4 Autodesk Content Service; "C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe" [X] S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X] S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X] S3 X6va006; \??\C:\Users\mariusz\AppData\Local\Temp\006898B.tmp [X] HKU\S-1-5-21-2992926045-3456513150-244244987-1000\...\Run: [Akamai NetSession Interface] => C:\Users\mariusz\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-2992926045-3456513150-244244987-1000\...\Policies\Explorer: [] ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF SearchScopes: HKU\S-1-5-21-2992926045-3456513150-244244987-1000 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF SearchScopes: HKU\S-1-5-21-2992926045-3456513150-244244987-1000 -> {5ECA38EE-8D54-4D05-9BC5-CA458B2D2808} URL = http://start.funmoods.com/results.php?f=4&a=kno&q={searchTerms} SearchScopes: HKU\S-1-5-21-2992926045-3456513150-244244987-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://mysearch.avg.com/search?cid={810A5234-685A-49C5-98CB-97BCB14888E3}&mid=b18f6a8acfc947d381706d3e713ad797-6b36e4854bb48b6bd417e259fbb07a426a2bb1fb&lang=en&ds=co011&coid=avgtbdisco&cmpid=&pr=sa&d=2014-02-05 16:21:19&v=18.0.5.292&pid=safeguard&sg=0&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-2992926045-3456513150-244244987-1000 -> {C3BB87A5-663B-4E2A-9AE3-C6790E9B6EF9} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=796488B1-E30D-4B10-B34F-D3604AAFD3EB&apn_sauid=CDD02F75-5B8F-468C-A1C2-4D813B709F81 BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File BHO-x32: No Name -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> No File BHO-x32: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File BHO-x32: No Name -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> No File BHO-x32: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File BHO-x32: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File BHO-x32: No Name -> {F156768E-81EF-470C-9057-481BA8380DBA} -> No File BHO-x32: No Name -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> No File CHR HKLM-x32\...\Chrome\Extension: [fdloijijlkoblmigdofommgnheckmaki] - No Path CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - No Path FF Homepage: hxxp://mysearch.avg.com?cid={810A5234-685A-49C5-98CB-97BCB14888E3}&mid=b18f6a8acfc947d381706d3e713ad797-6b36e4854bb48b6bd417e259fbb07a426a2bb1fb&lang=en&ds=co011&coid=avgtbdisco&cmpid=&pr=sa&d=2014-02-05 16:21:19&v=18.0.5.292&pid=safeguard&sg=0&sap=hp FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.7\\npsitesafety.dll No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.7.598 FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF HKU\S-1-5-21-2992926045-3456513150-244244987-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Task: {1AD70D56-A282-4534-9FE8-0EAF39A875D3} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007Core => C:\Users\GuteX\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: {30BD1FD1-A9A6-447E-A0B9-17A2CFF39484} - System32\Tasks\{0AF97304-3FD9-4874-A3DC-024C590A1296} => C:\Program Files (x86)\HammerMT2\HammerMT2.exe Task: {4C9D3781-DA73-4CBE-AE54-05233D4CDC78} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\SymErr.exe Task: {4CA4F2EA-F88D-4F18-8963-2EE69460CFD5} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe Task: {5A3DB4D6-60F1-4859-9E4C-1B93B08717A3} - System32\Tasks\{D3F9FBAB-1C3B-4B79-8919-F868787CC03E} => Chrome.exe http://ui.skype.com/ui/0/5.1.0.104.161/pl/go/help.faq.installer?LastError=1603 Task: {5F62948E-2604-488F-BFC8-201617251CEF} - System32\Tasks\{FDF807DB-3711-4DCF-89C4-9C1EA280A39C} => Firefox.exe http://ui.skype.com/ui/0/5.1.0.104.161/pl/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {66454CEE-1DF5-4764-AB8A-5DACA8B5058F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007UA => C:\Users\GuteX\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: {715EC2F7-B237-468E-891C-386CEACF5889} - System32\Tasks\{122DF300-4DBB-4E85-B85A-E990DC32BDE7} => C:\Program Files (x86)\Empire Interactive\Starsky & Hutch\StarskyPC.exe Task: {79AB60B4-2D7A-4928-BA44-9E86816EF66B} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\WSCStub.exe Task: {8D8A45E0-CC13-4379-9695-F97F42909E01} - System32\Tasks\{D9079714-1C6D-4FA5-BF23-98D48515AB22} => C:\Program Files (x86)\HammerMT2\HammerMT2.exe Task: {9945AD62-F43D-41C3-9737-9230A49D28D4} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\SymErr.exe Task: {ADFDCE39-0421-4076-B85D-740EFDF45BFC} - System32\Tasks\{7FC882C0-013F-4970-AA4F-73FB38B5916C} => C:\Program Files (x86)\Empire Interactive\Starsky & Hutch\StarskyPC.exe Task: {F47D810F-0847-4375-BF23-42BB17F5ECC3} - System32\Tasks\{94002BBF-2E0D-46B2-A91C-D2680C78204F} => Firefox.exe http://ui.skype.com/ui/0/5.5.0.124/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {F8FDCF7D-38B9-4A11-8F21-6470CF1BC465} - System32\Tasks\{CA8C9E33-6492-478F-96C6-93050D24E6EA} => Firefox.exe http://ui.skype.com/ui/0/5.1.0.104.161/pl/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {FC504035-8204-4BCF-8473-A1BEA708B69A} - System32\Tasks\{28CFA330-6D79-4324-843F-7DDF271E9205} => Firefox.exe http://ui.skype.com/ui/0/5.1.0.104.161/pl/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007Core.job => C:\Users\GuteX\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007UA.job => C:\Users\GuteX\AppData\Local\Facebook\Update\FacebookUpdate.exe C:\32788R22FWJFW C:\Program Files (x86)\mozilla firefox\plugins C:\Program Files (x86)\Common Files\AVG Secure Search C:\ProgramData\AVAST Software C:\Users\mariusz\AppData\Roaming\BESTplayer C:\Users\mariusz\AppData\Roaming\Blender Foundation C:\Users\mariusz\AppData\Roaming\ChomikBox C:\Users\mariusz\AppData\Roaming\Dropbox C:\Users\mariusz\AppData\Roaming\DropboxMaster C:\Users\mariusz\AppData\Roaming\FileZilla C:\Users\mariusz\AppData\Roaming\iolo C:\Users\mariusz\AppData\Roaming\ipla C:\Users\mariusz\AppData\Roaming\IrfanView C:\Users\mariusz\AppData\Roaming\OpenCandy C:\Users\mariusz\AppData\Roaming\ProcessLasso C:\Users\mariusz\AppData\Roaming\raidcall C:\Users\mariusz\AppData\Roaming\Sage C:\Users\mariusz\AppData\Roaming\SibCode C:\Users\mariusz\AppData\Roaming\SmileysWeLove C:\Users\mariusz\AppData\Roaming\Steam C:\Users\mariusz\AppData\Roaming\Tunngle C:\Users\mariusz\AppData\Roaming\YoWindow C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP C:\Windows\msdownld.tmp C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup C:\Windows\system32\drivers\avgtpx64.sys C:\Windows\system32\drivers\SET*.tmp C:\Windows\system32\Tasks\Norton Internet Security Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\CardDetectorZTEMF636" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\DAUpdaterSvc" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\ERA_SEPANG ModemListener" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\Modem Device Helper" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\Razer Game Scanner Service" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\RzKLService" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\OverwolfUpdater" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\Steam Client Service" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\TunngleService" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Akamai NetSession Interface" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sage Komunikator" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UpdateChecker" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\vProt" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\WinampAgent" /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} /f EmptyTemp: ***************** Processes closed successfully. BBUpdate service was disabled BBSvc service was disabled avgtp => Service stopped successfully. avgtp => Service deleted successfully. vToolbarUpdater18.1.7 => Service deleted successfully. Autodesk Content Service => Service deleted successfully. dgderdrv => Service deleted successfully. EagleX64 => Service deleted successfully. FairplayKD => Service deleted successfully. pccsmcfd => Service deleted successfully. X6va006 => Service deleted successfully. HKU\S-1-5-21-2992926045-3456513150-244244987-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => value deleted successfully. HKU\S-1-5-21-2992926045-3456513150-244244987-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => value deleted successfully. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully. "HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}" => Key not found. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}" => Key deleted successfully. "HKCR\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}" => Key not found. "HKU\S-1-5-21-2992926045-3456513150-244244987-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}" => Key deleted successfully. "HKCR\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}" => Key not found. "HKU\S-1-5-21-2992926045-3456513150-244244987-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5ECA38EE-8D54-4D05-9BC5-CA458B2D2808}" => Key deleted successfully. "HKCR\CLSID\{5ECA38EE-8D54-4D05-9BC5-CA458B2D2808}" => Key not found. "HKU\S-1-5-21-2992926045-3456513150-244244987-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key deleted successfully. "HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key not found. "HKU\S-1-5-21-2992926045-3456513150-244244987-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C3BB87A5-663B-4E2A-9AE3-C6790E9B6EF9}" => Key deleted successfully. "HKCR\CLSID\{C3BB87A5-663B-4E2A-9AE3-C6790E9B6EF9}" => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{F156768E-81EF-470C-9057-481BA8380DBA}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk" => Key deleted successfully. Firefox homepage deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0" => Key deleted successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\smartwebprinting@hp.com => value deleted successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\avg@toolbar => value deleted successfully. HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => value deleted successfully. HKU\S-1-5-21-2992926045-3456513150-244244987-1000\Software\Mozilla\Firefox\Extensions\\smartwebprinting@hp.com => value deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1AD70D56-A282-4534-9FE8-0EAF39A875D3}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1AD70D56-A282-4534-9FE8-0EAF39A875D3}" => Key deleted successfully. C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007Core => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007Core" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{30BD1FD1-A9A6-447E-A0B9-17A2CFF39484}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30BD1FD1-A9A6-447E-A0B9-17A2CFF39484}" => Key deleted successfully. C:\Windows\System32\Tasks\{0AF97304-3FD9-4874-A3DC-024C590A1296} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{0AF97304-3FD9-4874-A3DC-024C590A1296}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4C9D3781-DA73-4CBE-AE54-05233D4CDC78}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C9D3781-DA73-4CBE-AE54-05233D4CDC78}" => Key deleted successfully. C:\Windows\System32\Tasks\Norton Internet Security\Norton Error Analyzer => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Internet Security\Norton Error Analyzer" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4CA4F2EA-F88D-4F18-8963-2EE69460CFD5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4CA4F2EA-F88D-4F18-8963-2EE69460CFD5}" => Key deleted successfully. C:\Windows\System32\Tasks\Overwolf Updater Task => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Overwolf Updater Task" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5A3DB4D6-60F1-4859-9E4C-1B93B08717A3}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A3DB4D6-60F1-4859-9E4C-1B93B08717A3}" => Key deleted successfully. C:\Windows\System32\Tasks\{D3F9FBAB-1C3B-4B79-8919-F868787CC03E} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D3F9FBAB-1C3B-4B79-8919-F868787CC03E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5F62948E-2604-488F-BFC8-201617251CEF}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5F62948E-2604-488F-BFC8-201617251CEF}" => Key deleted successfully. C:\Windows\System32\Tasks\{FDF807DB-3711-4DCF-89C4-9C1EA280A39C} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{FDF807DB-3711-4DCF-89C4-9C1EA280A39C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{66454CEE-1DF5-4764-AB8A-5DACA8B5058F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66454CEE-1DF5-4764-AB8A-5DACA8B5058F}" => Key deleted successfully. C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007UA => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007UA" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{715EC2F7-B237-468E-891C-386CEACF5889}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{715EC2F7-B237-468E-891C-386CEACF5889}" => Key deleted successfully. C:\Windows\System32\Tasks\{122DF300-4DBB-4E85-B85A-E990DC32BDE7} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{122DF300-4DBB-4E85-B85A-E990DC32BDE7}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{79AB60B4-2D7A-4928-BA44-9E86816EF66B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79AB60B4-2D7A-4928-BA44-9E86816EF66B}" => Key deleted successfully. C:\Windows\System32\Tasks\Norton WSC Integration => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton WSC Integration" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8D8A45E0-CC13-4379-9695-F97F42909E01}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D8A45E0-CC13-4379-9695-F97F42909E01}" => Key deleted successfully. C:\Windows\System32\Tasks\{D9079714-1C6D-4FA5-BF23-98D48515AB22} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D9079714-1C6D-4FA5-BF23-98D48515AB22}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9945AD62-F43D-41C3-9737-9230A49D28D4}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9945AD62-F43D-41C3-9737-9230A49D28D4}" => Key deleted successfully. C:\Windows\System32\Tasks\Norton Internet Security\Norton Error Processor => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Internet Security\Norton Error Processor" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ADFDCE39-0421-4076-B85D-740EFDF45BFC}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ADFDCE39-0421-4076-B85D-740EFDF45BFC}" => Key deleted successfully. C:\Windows\System32\Tasks\{7FC882C0-013F-4970-AA4F-73FB38B5916C} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7FC882C0-013F-4970-AA4F-73FB38B5916C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F47D810F-0847-4375-BF23-42BB17F5ECC3}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F47D810F-0847-4375-BF23-42BB17F5ECC3}" => Key deleted successfully. C:\Windows\System32\Tasks\{94002BBF-2E0D-46B2-A91C-D2680C78204F} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{94002BBF-2E0D-46B2-A91C-D2680C78204F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F8FDCF7D-38B9-4A11-8F21-6470CF1BC465}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F8FDCF7D-38B9-4A11-8F21-6470CF1BC465}" => Key deleted successfully. C:\Windows\System32\Tasks\{CA8C9E33-6492-478F-96C6-93050D24E6EA} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CA8C9E33-6492-478F-96C6-93050D24E6EA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FC504035-8204-4BCF-8473-A1BEA708B69A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FC504035-8204-4BCF-8473-A1BEA708B69A}" => Key deleted successfully. C:\Windows\System32\Tasks\{28CFA330-6D79-4324-843F-7DDF271E9205} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{28CFA330-6D79-4324-843F-7DDF271E9205}" => Key deleted successfully. C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007Core.job => Moved successfully. C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2992926045-3456513150-244244987-1007UA.job => Moved successfully. C:\32788R22FWJFW => Moved successfully. C:\Program Files (x86)\mozilla firefox\plugins => Moved successfully. C:\Program Files (x86)\Common Files\AVG Secure Search => Moved successfully. C:\ProgramData\AVAST Software => Moved successfully. C:\Users\mariusz\AppData\Roaming\BESTplayer => Moved successfully. C:\Users\mariusz\AppData\Roaming\Blender Foundation => Moved successfully. C:\Users\mariusz\AppData\Roaming\ChomikBox => Moved successfully. C:\Users\mariusz\AppData\Roaming\Dropbox => Moved successfully. C:\Users\mariusz\AppData\Roaming\DropboxMaster => Moved successfully. C:\Users\mariusz\AppData\Roaming\FileZilla => Moved successfully. C:\Users\mariusz\AppData\Roaming\iolo => Moved successfully. C:\Users\mariusz\AppData\Roaming\ipla => Moved successfully. C:\Users\mariusz\AppData\Roaming\IrfanView => Moved successfully. C:\Users\mariusz\AppData\Roaming\OpenCandy => Moved successfully. C:\Users\mariusz\AppData\Roaming\ProcessLasso => Moved successfully. C:\Users\mariusz\AppData\Roaming\raidcall => Moved successfully. C:\Users\mariusz\AppData\Roaming\Sage => Moved successfully. C:\Users\mariusz\AppData\Roaming\SibCode => Moved successfully. C:\Users\mariusz\AppData\Roaming\SmileysWeLove => Moved successfully. C:\Users\mariusz\AppData\Roaming\Steam => Moved successfully. C:\Users\mariusz\AppData\Roaming\Tunngle => Moved successfully. C:\Users\mariusz\AppData\Roaming\YoWindow => Moved successfully. C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP => Moved successfully. C:\Windows\msdownld.tmp => Moved successfully. C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup => Moved successfully. C:\Windows\system32\drivers\avgtpx64.sys => Moved successfully. C:\Windows\system32\drivers\SET*.tmp => Moved successfully. C:\Windows\system32\Tasks\Norton Internet Security => Moved successfully. ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\CardDetectorZTEMF636" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\DAUpdaterSvc" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\ERA_SEPANG ModemListener" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\Modem Device Helper" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\Razer Game Scanner Service" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\RzKLService" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\OverwolfUpdater" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\Steam Client Service" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\TunngleService" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Akamai NetSession Interface" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sage Komunikator" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UpdateChecker" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\vProt" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\WinampAgent" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 2.5 GB temporary data. The system needed a reboot. ==== End of Fixlog ====