Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 06-12-2014 02 Ran by marek at 2014-12-10 11:00:54 Run:3 Running from C:\Users\marek\Downloads Loaded Profile: marek (Available profiles: marek & LogMeInRemoteUser) Boot Mode: Safe Mode (minimal) ============================================== Content of fixlist: ***************** CloseProcesses: HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\ESET <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Lavasoft <====== ATTENTION HKU\S-1-5-21-300751917-3985659210-3560172915-1003\...\Run: [EucubEpivn] => regsvr32.exe "C:\ProgramData\EucubEpivn\EucubEpivn.dat" FF Homepage: hxxp://www.gazeta.pl/0,0.html C:\ProgramData\EucubEpivn C:\Program Files\Java C:\Program Files\Windows Live Toolbar Reg: reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run File: C:\Program Files\ThinkPad\Utilities\BTVLOGEX.DLL Folder: C:\Program Files\Common Files\Nokia\MPlatform EmptyTemp: ***************** Processes closed successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKU\S-1-5-21-300751917-3985659210-3560172915-1003\Software\Microsoft\Windows\CurrentVersion\Run\\EucubEpivn => value deleted successfully. Firefox homepage deleted successfully. C:\ProgramData\EucubEpivn => Moved successfully. C:\Program Files\Java => Moved successfully. C:\Program Files\Windows Live Toolbar => Moved successfully. ========= reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ========= HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Windows Mobile Device Center REG_SZ %windir%\WindowsMobile\wmdc.exe Windows Defender REG_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide TVT Scheduler Proxy REG_SZ C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe TpShocks REG_SZ TpShocks.exe TPHOTKEY REG_SZ C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe TPFNF7 REG_SZ C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe /r SynTPEnh REG_SZ C:\Program Files\Synaptics\SynTP\SynTPEnh.exe snp2uvc REG_SZ C:\Windows\vsnp2uvc.exe RIMBBLaunchAgent.exe REG_SZ C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe RemoteControl REG_SZ "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" PWMTRV REG_SZ rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor NvMediaCenter REG_SZ RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit NvCplDaemon REG_SZ RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup NokiaMServer REG_SZ C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup Message Center Plus REG_SZ C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe /start LPManager REG_SZ C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe LPMailChecker REG_SZ C:\PROGRA~1\Lenovo\LENOVO~2\LPMLCHK.exe LogMeIn GUI REG_SZ "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe" EZEJMNAP REG_SZ C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe cssauth REG_SZ "C:\Program Files\Lenovo\Client Security Solution\cssauth.exe" silent CameraApplicationLauncher REG_SZ C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchpadLauncher.exe BLOG REG_SZ rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BTVLogEx.DLL,StartBattLog Adobe ARM REG_SZ "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" ACWlIcon REG_SZ C:\Program Files\ThinkPad\ConnectUtilities\ACWlIcon.exe ACTray REG_SZ C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe CDAServer REG_SZ C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents ========= End of Reg: ========= ========================= File: C:\Program Files\ThinkPad\Utilities\BTVLOGEX.DLL ======================== MD5: 1AD2D87782D1D02D74311C9F7F1174C1 Creation and modification date: 2008-11-05 10:48 - 2006-11-20 12:33 Size: 0214576 Attributes: ----N Company Name: Internal Name: Original Name: Product Name: Description: File Version: Product Version: Copyright: ====== End Of File: ====== ========================= Folder: C:\Program Files\Common Files\Nokia\MPlatform ======================== 2010-07-20 11:01 - 2010-07-20 11:01 - 0000480 _____ () C:\Program Files\Common Files\Nokia\MPlatform\LoggingDebug.reg 2010-07-20 11:01 - 2010-07-20 11:01 - 0000480 _____ () C:\Program Files\Common Files\Nokia\MPlatform\LoggingNormal.reg 2010-07-20 11:48 - 2010-07-20 11:48 - 2056192 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MAtom.dll 2010-07-20 11:41 - 2010-07-20 11:41 - 4280320 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MDataStore.dll 2010-07-20 11:40 - 2010-07-20 11:40 - 0741376 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MDatastorePH.dll 2010-07-20 11:40 - 2010-07-20 11:40 - 0618496 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MEvent.dll 2010-07-20 11:44 - 2010-07-20 11:44 - 1466368 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MFileSystemTransfer.dll 2010-07-20 11:41 - 2010-07-20 11:41 - 2985984 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MItemPlugins.dll 2010-07-20 11:40 - 2010-07-20 11:40 - 1060864 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MItems.dll 2010-07-20 11:43 - 2010-07-20 11:43 - 1847296 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MMTPTransfer.dll 2010-07-20 11:44 - 2010-07-20 11:44 - 1228800 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MRemoteDataStore.dll 2010-07-20 11:01 - 2010-07-20 11:01 - 0000254 _____ () C:\Program Files\Common Files\Nokia\MPlatform\MSync.reg 2010-07-20 11:44 - 2010-07-20 11:44 - 1773568 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MSynchronizationService.dll 2010-07-20 11:42 - 2010-07-20 11:42 - 0958464 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MSyncMLDL.dll 2010-07-20 11:43 - 2010-07-20 11:43 - 3035136 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MSyncMLTransfer.dll 2010-07-20 11:44 - 2010-07-20 11:44 - 1945600 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MThumbnailService.dll 2010-07-20 11:43 - 2010-07-20 11:43 - 1511424 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MTranscoder.dll 2010-07-20 11:41 - 2010-07-20 11:41 - 0978944 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MTransfer.dll 2010-07-20 11:48 - 2010-07-20 11:48 - 0430080 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\MVersion.dll 2010-07-20 11:45 - 2010-07-20 11:45 - 1531904 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe 2010-07-20 11:43 - 2010-07-20 11:43 - 1421312 _____ (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\NokiaMTranscodeServer.exe 2010-07-20 11:01 - 2010-07-20 11:01 - 0000333 _____ () C:\Program Files\Common Files\Nokia\MPlatform\readme.txt 2010-07-20 11:09 - 2010-07-20 11:09 - 0109056 _____ (Nokia.) C:\Program Files\Common Files\Nokia\MPlatform\sml.dll 2010-07-20 11:31 - 2010-07-20 11:31 - 0362029 _____ () C:\Program Files\Common Files\Nokia\MPlatform\sqlite3.dll ====== End of Folder: ====== EmptyTemp: => Removed 95.2 MB temporary data. The system needed a reboot. ==== End of Fixlog ====