Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-12-2014 Ran by Jakub at 2014-12-10 13:07:44 Run:2 Running from C:\Users\Jakub\logi Loaded Profile: Jakub (Available profiles: Jakub) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe U4 BthAvrcpTg; No ImagePath U4 BthHFEnum; No ImagePath U4 bthhfhid; No ImagePath C:\Users\Administrator C:\Users\Gość C:\Program Files\004 C:\Program Files\coupon downloader C:\Program Files\CouponDownloader C:\Program Files\Quiknowledge C:\Program Files (x86)\Atlantis C:\Program Files (x86)\PLAY ONLINE C:\Program Files (x86)\Spybot - Search & Destroy 2 C:\Program Files (x86)\Spyware Terminator C:\Program Files (x86)\Steam C:\Program Files (x86)\Tor C:\Program Files (x86)\Zero G Registry C:\ProgramData\ad8b0607b925e898 C:\ProgramData\Doctor Web C:\ProgramData\install_clap C:\ProgramData\Internet w Cyfrowym Polsacie C:\ProgramData\McAfee C:\ProgramData\neglfglbmccpmphoegndhmlcnbfnjfkn C:\ProgramData\Orbit C:\ProgramData\Spybot - Search & Destroy C:\ProgramData\Steam C:\ProgramData\Temp C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Poker MIRA C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ParisVegasCasino C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlotsMagic C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unibet Poker C:\Users\Jakub\AppData\Local\360Amigo C:\Users\Jakub\AppData\Local\AuxClient C:\Users\Jakub\AppData\Local\avgchrome C:\Users\Jakub\AppData\Local\BetOnSoft C:\Users\Jakub\AppData\Local\bluesoleil C:\Users\Jakub\AppData\Local\cache C:\Users\Jakub\AppData\Local\CarbonPoker C:\Users\Jakub\AppData\Local\Chromium C:\Users\Jakub\AppData\Local\Comodo C:\Users\Jakub\AppData\Local\CPN C:\Users\Jakub\AppData\Local\eclipse C:\Users\Jakub\AppData\Local\ESET C:\Users\Jakub\AppData\Local\FullTiltPoker C:\Users\Jakub\AppData\Local\FullTiltPoker.eu C:\Users\Jakub\AppData\Local\TB C:\Users\Jakub\AppData\Local\Torch C:\Users\Jakub\AppData\LocalLow\Sun C:\Users\Jakub\AppData\LocalLow\TB C:\Users\Jakub\AppData\Roaming\Ascarial C:\Users\Jakub\AppData\Roaming\BESTplayer C:\Users\Jakub\AppData\Roaming\betonline C:\Users\Jakub\AppData\Roaming\com.relax-gaming.skywalker C:\Users\Jakub\AppData\Roaming\fullflush C:\Users\Jakub\AppData\Roaming\GrandMacao C:\Users\Jakub\AppData\Roaming\Might & Magic Heroes VI C:\Users\Jakub\AppData\Roaming\PLAY ONLINE C:\Users\Jakub\AppData\Roaming\Steam C:\Users\Jakub\AppData\Roaming\WebApp C:\Users\Jakub\AppData\Roaming\WorldofTanks Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{4d349a54} /f EmptyTemp: ***************** Processes closed successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SpywareTerminatorShield => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SpywareTerminatorUpdater => value deleted successfully. BthAvrcpTg => Service deleted successfully. BthHFEnum => Service deleted successfully. bthhfhid => Service deleted successfully. C:\Users\Administrator => Moved successfully. C:\Users\Gość => Moved successfully. C:\Program Files\004 => Moved successfully. C:\Program Files\coupon downloader => Moved successfully. C:\Program Files\CouponDownloader => Moved successfully. C:\Program Files\Quiknowledge => Moved successfully. C:\Program Files (x86)\Atlantis => Moved successfully. C:\Program Files (x86)\PLAY ONLINE => Moved successfully. C:\Program Files (x86)\Spybot - Search & Destroy 2 => Moved successfully. C:\Program Files (x86)\Spyware Terminator => Moved successfully. C:\Program Files (x86)\Steam => Moved successfully. C:\Program Files (x86)\Tor => Moved successfully. C:\Program Files (x86)\Zero G Registry => Moved successfully. C:\ProgramData\ad8b0607b925e898 => Moved successfully. C:\ProgramData\Doctor Web => Moved successfully. C:\ProgramData\install_clap => Moved successfully. C:\ProgramData\Internet w Cyfrowym Polsacie => Moved successfully. C:\ProgramData\McAfee => Moved successfully. C:\ProgramData\neglfglbmccpmphoegndhmlcnbfnjfkn => Moved successfully. C:\ProgramData\Orbit => Moved successfully. C:\ProgramData\Spybot - Search & Destroy => Moved successfully. C:\ProgramData\Steam => Moved successfully. C:\ProgramData\Temp => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Poker MIRA => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ParisVegasCasino => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlotsMagic => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unibet Poker => Moved successfully. C:\Users\Jakub\AppData\Local\360Amigo => Moved successfully. C:\Users\Jakub\AppData\Local\AuxClient => Moved successfully. C:\Users\Jakub\AppData\Local\avgchrome => Moved successfully. C:\Users\Jakub\AppData\Local\BetOnSoft => Moved successfully. C:\Users\Jakub\AppData\Local\bluesoleil => Moved successfully. C:\Users\Jakub\AppData\Local\cache => Moved successfully. C:\Users\Jakub\AppData\Local\CarbonPoker => Moved successfully. C:\Users\Jakub\AppData\Local\Chromium => Moved successfully. C:\Users\Jakub\AppData\Local\Comodo => Moved successfully. C:\Users\Jakub\AppData\Local\CPN => Moved successfully. C:\Users\Jakub\AppData\Local\eclipse => Moved successfully. C:\Users\Jakub\AppData\Local\ESET => Moved successfully. C:\Users\Jakub\AppData\Local\FullTiltPoker => Moved successfully. C:\Users\Jakub\AppData\Local\FullTiltPoker.eu => Moved successfully. C:\Users\Jakub\AppData\Local\TB => Moved successfully. C:\Users\Jakub\AppData\Local\Torch => Moved successfully. C:\Users\Jakub\AppData\LocalLow\Sun => Moved successfully. C:\Users\Jakub\AppData\LocalLow\TB => Moved successfully. C:\Users\Jakub\AppData\Roaming\Ascarial => Moved successfully. C:\Users\Jakub\AppData\Roaming\BESTplayer => Moved successfully. C:\Users\Jakub\AppData\Roaming\betonline => Moved successfully. C:\Users\Jakub\AppData\Roaming\com.relax-gaming.skywalker => Moved successfully. C:\Users\Jakub\AppData\Roaming\fullflush => Moved successfully. C:\Users\Jakub\AppData\Roaming\GrandMacao => Moved successfully. C:\Users\Jakub\AppData\Roaming\Might & Magic Heroes VI => Moved successfully. C:\Users\Jakub\AppData\Roaming\PLAY ONLINE => Moved successfully. C:\Users\Jakub\AppData\Roaming\Steam => Moved successfully. C:\Users\Jakub\AppData\Roaming\WebApp => Moved successfully. C:\Users\Jakub\AppData\Roaming\WorldofTanks => Moved successfully. ========= reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{4d349a54} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 22.3 MB temporary data. The system needed a reboot. ==== End of Fixlog ====