Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-12-2014 Ran by Rafal at 2014-12-15 21:27:07 Run:2 Running from C:\Users\Rafal\Downloads\NarzÄ™dzia Loaded Profile: Rafal (Available profiles: Rafal) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.) HKU\S-1-5-21-3998210539-3065520669-1277161271-1000\...\RunOnce: [Adobe Speed Launcher] => 1418569094 Toolbar: HKU\S-1-5-21-3998210539-3065520669-1277161271-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File C:\Program Files (x86)\FlashGet Network C:\Program Files (x86)\Temp C:\Program Files (x86)\UnRar for Windows C:\Program Files\Common Files\Bitdefender C:\ProgramData\ApPure C:\ProgramData\BDLogging C:\ProgramData\Bitdefender C:\ProgramData\DAEMON Tools Lite C:\ProgramData\DAEMON Tools Pro C:\ProgramData\Google C:\ProgramData\InstallMate C:\ProgramData\Logs C:\ProgramData\Make A Voozie C:\ProgramData\McQcModifier-5c47-a7b0 C:\ProgramData\PS.log C:\ProgramData\SiteAdvisor C:\ProgramData\Skype Extras C:\ProgramData\VS Revo Group C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} C:\Users\wangzhisong C:\Windows\System32\DRIVERS\avgdiska.sys Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs /v /Tabs /f CMD: dir /a C:\Users\Rafal\AppData\Local CMD: dir /a C:\Users\Rafal\AppData\LocalLow CMD: dir /a C:\Users\Rafal\AppData\Roaming EmptyTemp: ***************** Processes closed successfully. Avgdiska => Unable to stop service Avgdiska => Service deleted successfully. HKU\S-1-5-21-3998210539-3065520669-1277161271-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Adobe Speed Launcher => value deleted successfully. HKU\S-1-5-21-3998210539-3065520669-1277161271-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully. "HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => Key not found. C:\Program Files (x86)\FlashGet Network => Moved successfully. C:\Program Files (x86)\Temp => Moved successfully. C:\Program Files (x86)\UnRar for Windows => Moved successfully. C:\Program Files\Common Files\Bitdefender => Moved successfully. C:\ProgramData\ApPure => Moved successfully. C:\ProgramData\BDLogging => Moved successfully. C:\ProgramData\Bitdefender => Moved successfully. C:\ProgramData\DAEMON Tools Lite => Moved successfully. C:\ProgramData\DAEMON Tools Pro => Moved successfully. C:\ProgramData\Google => Moved successfully. C:\ProgramData\InstallMate => Moved successfully. C:\ProgramData\Logs => Moved successfully. C:\ProgramData\Make A Voozie => Moved successfully. C:\ProgramData\McQcModifier-5c47-a7b0 => Moved successfully. C:\ProgramData\PS.log => Moved successfully. C:\ProgramData\SiteAdvisor => Moved successfully. C:\ProgramData\Skype Extras => Moved successfully. C:\ProgramData\VS Revo Group => Moved successfully. C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} => Moved successfully. C:\Users\wangzhisong => Moved successfully. C:\Windows\System32\DRIVERS\avgdiska.sys => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs /v /Tabs /f ========= Bť¤D: Nieprawidˆowa skˆadania. Aby pozna† spos˘b uľycia, wpisz "REG DELETE /?". ========= End of Reg: ========= ========= dir /a C:\Users\Rafal\AppData\Local ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B839-EB7C Katalog: C:\Users\Rafal\AppData\Local 2014-12-15 21:12 . 2014-12-15 21:12 .. 2014-12-12 13:50 Adobe 2013-10-03 09:55 Apps 2014-02-17 12:02 cache 2011-12-26 22:31 1ÿ665 chicken.invaders.5.torrent 2014-07-13 15:38 com 2010-01-06 11:59 CyberLink 2009-12-31 18:49 Dane aplikacji [C:\Users\Rafal\AppData\Local] 2013-08-08 21:28 10ÿ752 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-07-06 22:46 Deployment 2014-12-14 01:24 Diagnostics 2014-07-11 11:25 Downloaded Installations 2009-12-31 18:54 EgisTec 2011-03-13 16:54 Electronic Arts 2014-12-07 17:25 ElevatedDiagnostics 2014-11-19 21:12 EmieBrowserModeList 2014-04-11 12:18 EmieSiteList 2014-04-11 12:18 EmieUserList 2013-12-26 16:09 EMU 2014-12-13 16:24 113ÿ512 GDIPFONTCACHEV1.DAT 2009-12-31 18:49 Historia [C:\Users\Rafal\AppData\Local\Microsoft\Windows\History] 2014-12-15 21:12 2ÿ533ÿ579 IconCache.db 2011-10-05 18:46 LogitechR Webcam Software 2014-08-22 20:29 lptmp1219580059 2014-08-14 22:27 lptmp695454848 2011-12-30 00:05 Lucasarts 2012-06-11 08:52 Macromedia 2014-08-28 23:34 Microsoft 2010-06-22 21:34 Microsoft Games 2014-07-11 11:25 Microsoft Help 2013-09-30 21:45 Mozilla 2014-12-15 18:28 12ÿ192 MyWinLockerInstaller.txt-20141215.log 2011-09-19 13:49 Nokia 2011-09-28 20:53 NokiaAccount 2014-11-26 14:36 NVIDIA 2014-11-26 14:35 NVIDIA Corporation 2010-02-14 23:47 Oberon Games 2010-01-06 11:59 PlayMovie 2012-11-10 17:10 Programs 2011-03-13 23:08 PunkBuster 2011-03-22 10:52 17 resmon.resmoncfg 2012-10-29 21:42 Samsung 2014-06-29 10:04 screenSHU 2014-02-19 11:54 Skype 2013-02-22 09:49 SONY Drivers Update Utility 2010-10-10 10:52 Speedchecker 2014-12-15 21:27 Temp 2009-12-31 18:49 Temporary Internet Files [C:\Users\Rafal\AppData\Local\Microsoft\Windows\Temporary Internet Files] 2010-12-31 15:16 Unity 2012-12-15 20:10 VirtualStore 2014-04-16 13:06 VS Revo Group 2012-01-07 20:39 17ÿ408 WebpageIcons.db 2011-11-02 18:15 Western Digital 2014-11-20 12:21 Windows Live 2014-11-21 09:42 Windows Live Writer 2014-12-15 18:10 {896A7B57-E8EF-477D-922C-CC56D9E3FC67} 7 plik(¢w) 2ÿ689ÿ125 bajt¢w 50 katalog(¢w) 17ÿ268ÿ330ÿ496 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\Rafal\AppData\LocalLow ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B839-EB7C Katalog: C:\Users\Rafal\AppData\LocalLow 2014-11-30 18:39 . 2014-11-30 18:39 .. 2014-12-15 18:34 360WD 2014-02-12 15:15 Adobe 2014-11-30 18:39 EmieBrowserModeList 2014-04-11 12:18 EmieSiteList 2014-04-11 12:18 EmieUserList 2010-02-08 20:17 Google 2013-04-02 08:55 Microsoft 2012-06-12 20:26 Oracle 2010-10-01 23:43 PlayReady [C:\ProgramData\Microsoft\PlayReady] 2012-10-14 20:28 Rovio 2010-01-01 19:56 Sun 2011-01-01 14:21 Unity 0 plik(¢w) 0 bajt¢w 14 katalog(¢w) 17ÿ268ÿ330ÿ496 bajt¢w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\Rafal\AppData\Roaming ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B839-EB7C Katalog: C:\Users\Rafal\AppData\Roaming 2014-12-14 15:55 . 2014-12-14 15:55 .. 2010-02-15 12:23 .# 2014-12-14 22:42 360safe 2014-08-22 20:33 360SD 2011-04-01 12:14 Adobe 2009-12-31 20:15 Brother 2010-01-15 20:13 com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 2010-01-06 11:59 CyberLink 2014-05-29 10:50 DVDVideoSoft 2010-01-01 20:08 GameConsole 2014-06-11 16:55 0 gdfw.log 2014-06-11 16:55 779 gdscan.log 2009-12-31 18:53 Identities 2014-10-31 21:59 InstallShield 2011-03-13 19:48 IrfanView 2013-11-02 23:34 LucasArts 2009-12-31 18:54 Macromedia 2009-07-14 08:44 Media Center Programs 2014-11-20 22:32 Microsoft 2012-10-10 19:56 MoorHunt 2010-04-10 14:39 Mozilla 2014-11-25 18:24 MPC-HC 2014-01-17 12:07 14 mswinaplic.dll 2013-08-30 10:44 NapiProjekt 2014-08-03 20:21 Nokia 2011-09-19 14:00 PC Suite 2010-02-15 00:02 PlayFirst 2011-05-08 20:33 RDRM 2014-08-05 10:22 Samsung 2014-12-08 23:17 Skype 2011-05-29 17:16 skypePM 2012-06-12 17:54 Unity 2013-12-26 16:08 Warner Bros. Interactive Entertainment 2014-07-19 09:53 89 WB.CFG 2010-10-25 22:28 Windows Live Writer 2009-12-31 22:22 WinRAR 4 plik(¢w) 882 bajt¢w 33 katalog(¢w) 17ÿ268ÿ326ÿ400 bajt¢w wolnych ========= End of CMD: ========= EmptyTemp: => Removed 388.1 MB temporary data. The system needed a reboot. ==== End of Fixlog ====