Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-01-2015 01 Ran by Karolina at 2015-01-25 14:20:21 Run:1 Running from C:\Users\Karolina\Downloads Loaded Profiles: Karolina (Available profiles: Karolina) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP_ss&mntrId=B6054C0F6E10A720&affID=119357&tt=080913_ctrl&tsp=5000 HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5736z&r=27361110f235l0424z155v47524269 HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms} HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/search?q={searchTerms} HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie SearchScopes: HKLM-x32 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={12113390-2E4B-4415-89D1-74DB9DE622BF} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} URL = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} SearchScopes: HKLM-x32 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={12113390-2E4B-4415-89D1-74DB9DE622BF} SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={FB4215A1-B731-4501-A2D6-AD1838594A26}&mid=8bd0cd6fdd0d47d0af0f59e75b65a113-bc3ae82cd2758b5f87515caab2e724511db09901&lang=pl&ds=gm011&coid=avgtbdisgm&cmpid=&pr=sa&d=2014-02-16 19:20:35&v=18.1.9.799&pid=safeguard&sg=&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://www.bing.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=2&src=sp&cf=050f35f6-dd55-11e1-88a8-88ae1d8148e0&q={searchTerms} SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.golsearch.com/?q={searchTerms}&babsrc=SP_ss_Btisdt6&mntrId=B6054C0F6E10A720&affID=119357&tt=080913_ctrl&tsp=5000 SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> {6FC41EDD-4B02-4442-AA2B-B635C036EFAA} URL = http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={FB4215A1-B731-4501-A2D6-AD1838594A26}&mid=8bd0cd6fdd0d47d0af0f59e75b65a113-bc3ae82cd2758b5f87515caab2e724511db09901&lang=pl&ds=gm011&coid=avgtbdisgm&cmpid=&pr=sa&d=2014-02-16 19:20:35&v=18.1.9.799&pid=safeguard&sg=&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} URL = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> {AE0883A7-7BCD-4BCE-A0D4-F06B92B62D40} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=EA2EB7E7-163D-474D-89C6-80D2D89736C0&apn_sauid=9CBB111D-F6A6-49BA-8435-F866CD561E14 SearchScopes: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&st=17&q={searchTerms}&barid={12113390-2E4B-4415-89D1-74DB9DE622BF} BHO-x32: MediaBar -> {0974BA1E-64EC-11DE-B2A5-E43756D89593} -> C:\PROGRA~2\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll No File BHO-x32: RewardsArcade -> {597A9974-8CB0-4f41-B61F-ED065738A397} -> C:\Program Files (x86)\RewardsArcade\RewardsArcade.dll (215 Apps) BHO-x32: IE5BarLauncherBHO Class -> {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} -> C:\Program Files (x86)\StartSearch plugin\ssBarLcher.dll No File BHO-x32: SweetPacks Browser Helper -> {EEE6C35C-6118-11DC-9C72-001320C79847} -> C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM-x32 - MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\PROGRA~2\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll No File Toolbar: HKLM-x32 - StartSearchToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\StartSearch plugin\ssBarLcher.dll No File Toolbar: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> No Name - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No File Toolbar: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File Toolbar: HKU\S-1-5-21-905848300-39378253-2338670776-1000 -> No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml FF HKLM-x32\...\Firefox\Extensions: [crossriderapp498@crossrider.com] - C:\Users\Karolina\AppData\Local\RewardsArcade\498\Firefox FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.9.799 CHR HKLM\...\Chrome\Extension: [khongjfjjmklggionajlpjcpmnppdace] - C:\Users\Karolina\AppData\Local\BargainJoy.crx [2013-09-12] CHR HKU\S-1-5-21-905848300-39378253-2338670776-1000\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [Not Found] CHR HKU\S-1-5-21-905848300-39378253-2338670776-1000\...\Chrome\Extension: [khongjfjjmklggionajlpjcpmnppdace] - C:\Users\Karolina\AppData\Local\BargainJoy.crx [2013-09-12] CHR HKLM-x32\...\Chrome\Extension: [dcmagccbogebndpoodhhhafmofelpffh] - C:\Users\Karolina\AppData\Local\RewardsArcade\498\Chrome\rewardsarcade.crx [2011-11-04] CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Karolina\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-06-14] CHR HKLM-x32\...\Chrome\Extension: [khongjfjjmklggionajlpjcpmnppdace] - C:\Users\Karolina\AppData\Local\BargainJoy.crx [2013-09-12] CHR HKLM-x32\...\Chrome\Extension: [pbiamblgmkgbcgbcgejjgebalncpmhnp] - C:\Program Files (x86)\StartSearch plugin\vshareplg.crx [2011-10-27] Task: {0CCA079F-1668-41BB-B8C9-30E9B395400F} - System32\Tasks\{46797E31-69B5-4EEE-8AB7-E7A250FCA824} => C:\Users\Karolina\Downloads\Photoshop_CS2_tryout\Photoshop CS2\Setup.exe Task: {3F04A133-AB9C-4D28-BF12-A244AE1C3626} - System32\Tasks\{B18BF057-A4BC-4512-97A2-CB3306BAE6AB} => C:\Users\Karolina\Downloads\Photoshop_CS2_tryout\Photoshop CS2\Setup.exe Task: {44123C41-5CE7-4687-91D2-6A0942312E47} - System32\Tasks\DealPly => C:\Users\Karolina\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {8FE1B1C3-5297-424C-9BDD-29E0A74A7DA1} - System32\Tasks\{2BB855C5-D278-4C41-A04D-5A794105E36A} => pcalua.exe -a "C:\Users\Karolina\Desktop\z kompa\upc_webstar_2000_series_usb_drvrs_v.3.2.3222\UNDPX2K.EXE" -d "C:\Users\Karolina\Desktop\z kompa\upc_webstar_2000_series_usb_drvrs_v.3.2.3222" Task: {C59DBBD7-9AA4-4271-B186-B3804E0CE99F} - System32\Tasks\DSite => C:\Users\Karolina\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {F84ABE94-6118-480C-8C2C-A6E84BE4EEF7} - \DealPlyUpdate No Task File <==== ATTENTION Task: C:\Windows\Tasks\DSite.job => C:\Users\Karolina\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION S3 UNDPR3K; \??\C:\Windows\system32\drivers\UNDPR3K.SYS [X] S3 UNDPX2A; \??\C:\Windows\system32\drivers\UNDPX2A.SYS [X] S3 UNDPX2K; \??\C:\Windows\system32\drivers\UNDPX2K.SYS [X] C:\Program Files (x86)\Mozilla Firefox\extensions C:\Program Files (x86)\Mozilla Firefox\plugins C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml C:\Program Files (x86)\RewardsArcade C:\Program Files (x86)\StartSearch plugin C:\ProgramData\whlb32g.dll C:\ProgramData\Temp C:\Users\Karolina\AppData\Local\{*} C:\Users\Karolina\AppData\Local\Google\Chrome\User Data\Default\Preferences C:\Users\Karolina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\*localstorage* C:\Users\Karolina\AppData\Local\RewardsArcade C:\Users\Karolina\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z C:\Users\Karolina\AppData\Roaming\AVG C:\Users\Karolina\AppData\Roaming\Babylon C:\Users\Karolina\AppData\Roaming\DealPly C:\Users\Karolina\AppData\Roaming\DigitalSites C:\Users\Karolina\AppData\Roaming\DSite C:\Users\Karolina\AppData\Roaming\Gadu-Gadu 10 C:\Users\Karolina\AppData\Roaming\OpenCandy C:\Users\Karolina\AppData\Roaming\OpenFM C:\Users\Karolina\AppData\Roaming\PerformerSoft C:\Users\Karolina\AppData\Roaming\Tlen.pl Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\Search" /f Reg: reg delete HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly /f CMD: netsh advfirewall reset CMD: dir /a "C:\Program Files" CMD: dir /a "C:\Program Files (x86)" CMD: dir /a "C:\Program Files\Common Files" CMD: dir /a "C:\Program Files (x86)\Common Files" CMD: dir /a C:\ProgramData CMD: dir /a C:\Users\Karolina\AppData\Local CMD: dir /a C:\Users\Karolina\AppData\LocalLow CMD: dir /a C:\Users\Karolina\AppData\Roaming EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully. HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Key not found. HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main\\Search Bar => value deleted successfully. HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}" => Key deleted successfully. HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}" => Key deleted successfully. HKCR\Wow6432Node\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found. HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}" => Key deleted successfully. HKCR\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key not found. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key deleted successfully. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6FC41EDD-4B02-4442-AA2B-B635C036EFAA}" => Key deleted successfully. HKCR\CLSID\{6FC41EDD-4B02-4442-AA2B-B635C036EFAA} => Key not found. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key deleted successfully. HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}" => Key deleted successfully. HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} => Key not found. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AE0883A7-7BCD-4BCE-A0D4-F06B92B62D40}" => Key deleted successfully. HKCR\CLSID\{AE0883A7-7BCD-4BCE-A0D4-F06B92B62D40} => Key not found. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}" => Key deleted successfully. HKCR\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{597A9974-8CB0-4f41-B61F-ED065738A397} => Key not found. HKCR\Wow6432Node\CLSID\{597A9974-8CB0-4f41-B61F-ED065738A397} => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847} => Key not found. HKCR\Wow6432Node\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847} => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully. "HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{0974BA1E-64EC-11DE-B2A5-E43756D89593} => value deleted successfully. HKCR\Wow6432Node\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}" => Key deleted successfully. HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => value deleted successfully. HKCR\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => Key not found. HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => value deleted successfully. HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Key not found. HKU\S-1-5-21-905848300-39378253-2338670776-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} => value deleted successfully. HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847} => Key not found. C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml => Moved successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\crossriderapp498@crossrider.com => Value not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\avg@toolbar => Value not found. "HKLM\SOFTWARE\Google\Chrome\Extensions\khongjfjjmklggionajlpjcpmnppdace" => Key deleted successfully. C:\Users\Karolina\AppData\Local\BargainJoy.crx => Moved successfully. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje" => Key deleted successfully. "HKU\S-1-5-21-905848300-39378253-2338670776-1000\SOFTWARE\Google\Chrome\Extensions\khongjfjjmklggionajlpjcpmnppdace" => Key deleted successfully. "C:\Users\Karolina\AppData\Local\BargainJoy.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dcmagccbogebndpoodhhhafmofelpffh => Key not found. "C:\Users\Karolina\AppData\Local\RewardsArcade\498\Chrome\rewardsarcade.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje" => Key deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn" => Key deleted successfully. C:\Users\Karolina\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx => Moved successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\khongjfjjmklggionajlpjcpmnppdace" => Key deleted successfully. "C:\Users\Karolina\AppData\Local\BargainJoy.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp" => Key deleted successfully. "C:\Program Files (x86)\StartSearch plugin\vshareplg.crx" => File/Directory not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0CCA079F-1668-41BB-B8C9-30E9B395400F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0CCA079F-1668-41BB-B8C9-30E9B395400F}" => Key deleted successfully. C:\Windows\System32\Tasks\{46797E31-69B5-4EEE-8AB7-E7A250FCA824} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{46797E31-69B5-4EEE-8AB7-E7A250FCA824}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3F04A133-AB9C-4D28-BF12-A244AE1C3626}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F04A133-AB9C-4D28-BF12-A244AE1C3626}" => Key deleted successfully. C:\Windows\System32\Tasks\{B18BF057-A4BC-4512-97A2-CB3306BAE6AB} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B18BF057-A4BC-4512-97A2-CB3306BAE6AB}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44123C41-5CE7-4687-91D2-6A0942312E47}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44123C41-5CE7-4687-91D2-6A0942312E47}" => Key deleted successfully. C:\Windows\System32\Tasks\DealPly => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPly" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8FE1B1C3-5297-424C-9BDD-29E0A74A7DA1}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FE1B1C3-5297-424C-9BDD-29E0A74A7DA1}" => Key deleted successfully. C:\Windows\System32\Tasks\{2BB855C5-D278-4C41-A04D-5A794105E36A} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2BB855C5-D278-4C41-A04D-5A794105E36A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C59DBBD7-9AA4-4271-B186-B3804E0CE99F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C59DBBD7-9AA4-4271-B186-B3804E0CE99F}" => Key deleted successfully. C:\Windows\System32\Tasks\DSite => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DSite" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F84ABE94-6118-480C-8C2C-A6E84BE4EEF7}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F84ABE94-6118-480C-8C2C-A6E84BE4EEF7}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyUpdate" => Key deleted successfully. C:\Windows\Tasks\DSite.job => Moved successfully. UNDPR3K => Service deleted successfully. UNDPX2A => Service deleted successfully. UNDPX2K => Service deleted successfully. C:\Program Files (x86)\Mozilla Firefox\extensions => Moved successfully. C:\Program Files (x86)\Mozilla Firefox\plugins => Moved successfully. C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml => Moved successfully. "C:\Program Files (x86)\RewardsArcade" => File/Directory not found. C:\Program Files (x86)\StartSearch plugin => Moved successfully. C:\ProgramData\whlb32g.dll => Moved successfully. C:\ProgramData\Temp => Moved successfully. "C:\Users\Karolina\AppData\Local\{*}" directory move: Could not move "C:\Users\Karolina\AppData\Local\{*}" directory. => Scheduled to move on reboot. C:\Users\Karolina\AppData\Local\Google\Chrome\User Data\Default\Preferences => Moved successfully. C:\Users\Karolina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\*localstorage* => Moved successfully. "C:\Users\Karolina\AppData\Local\RewardsArcade" => File/Directory not found. C:\Users\Karolina\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z => Moved successfully. C:\Users\Karolina\AppData\Roaming\AVG => Moved successfully. C:\Users\Karolina\AppData\Roaming\Babylon => Moved successfully. C:\Users\Karolina\AppData\Roaming\DealPly => Moved successfully. C:\Users\Karolina\AppData\Roaming\DigitalSites => Moved successfully. C:\Users\Karolina\AppData\Roaming\DSite => Moved successfully. C:\Users\Karolina\AppData\Roaming\Gadu-Gadu 10 => Moved successfully. C:\Users\Karolina\AppData\Roaming\OpenCandy => Moved successfully. C:\Users\Karolina\AppData\Roaming\OpenFM => Moved successfully. C:\Users\Karolina\AppData\Roaming\PerformerSoft => Moved successfully. C:\Users\Karolina\AppData\Roaming\Tlen.pl => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\Search" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= netsh advfirewall reset ========= Ok. ========= End of CMD: ========= ========= dir /a "C:\Program Files" ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B605-9584 Katalog: C:\Program Files 2014-08-06 19:39 . 2014-08-06 19:39 .. 2015-01-25 14:15 Acer 2011-01-14 20:05 Common Files 2009-07-14 05:54 174 desktop.ini 2011-07-31 20:07 DVD Maker 2012-09-13 18:02 Google 2014-12-17 19:40 Internet Explorer 2009-07-14 08:45 Microsoft Games 2010-11-28 22:07 Microsoft Office 2014-07-24 08:53 Microsoft Silverlight 2013-09-07 14:38 Microsoft SQL Server Compact Edition 2013-09-07 14:38 Microsoft Synchronization Services 2009-07-14 06:32 MSBuild 2015-01-25 13:53 PDFCreator 2010-07-16 10:24 Preload 2010-07-16 10:15 Realtek 2009-07-14 06:32 Reference Assemblies 2014-07-23 18:09 Rossmann 2010-08-26 10:14 Synaptics 2009-07-14 06:09 Uninstall Information 2013-07-17 07:22 Windows Defender 2014-07-12 06:10 Windows Journal 2011-01-14 19:19 Windows Live 2011-07-31 20:07 Windows Mail 2014-10-28 20:09 Windows Media Player 2009-07-14 06:32 Windows NT 2011-07-31 20:07 Windows Photo Viewer 2011-07-31 20:07 Windows Portable Devices 2011-07-31 20:07 Windows Sidebar 2010-11-28 22:02 WinRAR 1 plik(�w) 174 bajt�w 30 katalog(�w) 185�614�893�056 bajt�w wolnych ========= End of CMD: ========= ========= dir /a "C:\Program Files (x86)" ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B605-9584 Katalog: C:\Program Files (x86) 2015-01-25 14:21 . 2015-01-25 14:21 .. 2015-01-25 14:16 Acer 2015-01-25 14:05 Acer GameZone 2015-01-25 13:17 Adobe 2010-11-28 22:02 ALLPlayer 2015-01-14 19:46 AVG 2015-01-25 13:53 AVG SafeGuard toolbar 2014-08-27 19:22 AVG Security Toolbar 2014-04-06 11:00 BearShare Applications 2013-10-20 07:09 CDBurnerXP 2015-01-25 13:53 Common Files 2009-07-14 05:54 174 desktop.ini 2012-04-24 19:21 e-Deklaracje 2010-07-16 10:30 EgisTec IPS 2010-07-16 10:29 EgisTec MyWinLocker 2010-07-16 10:28 EgisTec MyWinLockerSuite 2010-07-16 10:30 EgisTec Shredder 2010-07-16 10:17 eSobi 2012-04-17 19:29 FoxTabFLVPlayer 2014-09-03 17:33 FoxTabMusicConverter 2012-09-13 18:02 Google 2013-09-09 19:47 GPLGS 2013-07-27 10:23 GRETECH 2014-03-30 19:41 GUM8C38.tmp 2013-07-17 04:51 GUMFE12.tmp 2014-03-30 19:40 6�000�640 GUT8C39.tmp 2013-07-12 11:51 4�188�160 GUTFE13.tmp 2014-01-01 12:40 Handset WinDriver 2015-01-25 14:15 InstallShield Installation Information 2010-07-16 10:13 Intel 2014-12-17 19:40 Internet Explorer 2013-01-04 20:12 ipla 2014-03-09 18:51 IrfanView 2015-01-25 13:45 Java 2013-01-04 20:13 K-Lite Codec Pack 2010-07-16 10:13 Launch Manager 2011-01-14 20:05 McAfee 2014-03-19 03:08 Mega Browse 2013-09-29 18:41 Microsoft 2011-07-31 19:28 Microsoft Office 2014-07-24 08:52 Microsoft Silverlight 2013-09-07 14:38 Microsoft SQL Server Compact Edition 2013-09-07 14:38 Microsoft Synchronization Services 2010-11-28 22:09 Microsoft Visual Studio 2010-11-28 22:07 Microsoft Visual Studio 8 2011-01-02 22:32 Microsoft Works 2011-02-24 21:42 Microsoft.NET 2015-01-25 14:21 Mozilla Firefox 2014-10-28 20:21 Mozilla Firefox.bak 2014-10-29 17:14 Mozilla Maintenance Service 2010-11-28 22:10 MSBuild 2010-11-28 22:02 NAPI-PROJEKT 2010-07-16 10:34 NewTech Infosystems 2010-07-16 10:31 NTI 2011-01-27 20:43 PhotoScape 2014-03-15 17:47 PITy 2011-03-09 21:10 PlayReady 2012-04-25 19:44 Podatnik.info 2012-08-17 17:37 QuickTime 2010-12-03 20:22 Real Alternative 2010-07-16 10:15 Realtek 2009-07-14 06:32 Reference Assemblies 2014-01-24 21:03 RightSurf 2011-05-29 13:27 SAGEM 2014-01-24 20:53 SecurityXploded 2014-03-05 19:33 Skype 2012-09-11 21:10 SopCast 2012-11-14 20:01 SweetPacks 2010-07-16 10:33 Symantec 2010-07-16 10:15 Temp 2013-01-02 17:51 Testy na prawo jazdy 2013-09-09 19:57 Testy na prawo jazdy 2013 kat. B 2014-10-29 18:01 Testy na prawo jazdy 2014 kat. B 2009-07-14 05:57 Uninstall Information 2014-01-01 19:59 WebConnect 2014-03-09 17:02 weBsave 2013-07-17 07:22 Windows Defender 2011-03-30 20:20 Windows Live 2011-07-31 20:07 Windows Mail 2014-10-28 20:09 Windows Media Player 2009-07-14 06:32 Windows NT 2011-07-31 20:07 Windows Photo Viewer 2011-07-31 20:07 Windows Portable Devices 2011-07-31 20:07 Windows Sidebar 2012-08-20 19:36 Youtube Downloader HD 2014-03-09 17:03 YoutubeAdblocker 3 plik(�w) 10�188�974 bajt�w 84 katalog(�w) 185�614�888�960 bajt�w wolnych ========= End of CMD: ========= ========= dir /a "C:\Program Files\Common Files" ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B605-9584 Katalog: C:\Program Files\Common Files 2011-01-14 20:05 . 2011-01-14 20:05 .. 2014-08-15 04:27 Microsoft Shared 2009-07-14 04:20 Services 2009-07-14 04:20 SpeechEngines 2011-11-10 07:18 System 0 plik(�w) 0 bajt�w 6 katalog(�w) 185�614�888�960 bajt�w wolnych ========= End of CMD: ========= ========= dir /a "C:\Program Files (x86)\Common Files" ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B605-9584 Katalog: C:\Program Files (x86)\Common Files 2015-01-25 13:53 . 2015-01-25 13:53 .. 2014-05-18 18:35 Adobe 2010-08-26 10:18 CyberLink 2014-05-14 19:45 DESIGNER 2013-07-27 10:23 Gretech Corporation 2010-07-16 10:15 InstallShield 2010-07-16 10:31 Macrovision Shared 2014-08-15 04:27 microsoft shared 2010-07-16 10:19 Oberon Media 2009-07-14 04:20 Services 2014-03-05 19:33 Skype 2009-07-14 04:20 SpeechEngines 2011-11-10 07:18 System 2010-11-28 22:46 Windows Live 0 plik(�w) 0 bajt�w 15 katalog(�w) 185�614�888�960 bajt�w wolnych ========= End of CMD: ========= ========= dir /a C:\ProgramData ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B605-9584 Katalog: C:\ProgramData 2015-01-25 14:21 . 2015-01-25 14:21 .. 2012-09-27 18:26 10166 2015-01-25 14:15 Acer 2012-11-18 10:24 Adobe 2011-02-02 20:29 AirportMania 2010-11-28 22:02 ALLPlayer 2011-01-14 20:13 Alwil Software 2012-08-17 17:35 Apple 2012-08-17 17:37 Apple Computer 2009-07-14 06:08 Application Data [C:\ProgramData] 2012-10-10 18:23 Ask 2014-08-06 19:39 AVAST Software 2015-01-14 19:55 AVG2014 2015-01-14 19:45 AVG2015 2014-08-27 19:21 Avg_Update_0814tb 2014-12-14 18:28 Avg_Update_1214tb 2011-11-29 18:14 Babylon 2010-07-16 10:34 BackupManager 2012-10-20 13:11 Canneverbe Limited 2012-08-20 19:39 Common Files 2015-01-25 14:15 CyberLink 2009-07-14 06:08 Desktop [C:\Users\Public\Desktop] 2009-07-14 06:08 Documents [C:\Users\Public\Documents] 2013-09-09 19:47 DSearchLink 2010-08-26 10:11 EgisTec IPS 2013-09-27 17:57 EPSON 2011-09-17 15:26 eSobi 2014-03-09 17:03 f5c5bc419f8d1d48 2009-07-14 06:08 Favorites [C:\Users\Public\Favorites] 2010-07-16 10:31 FLEXnet 2010-03-02 23:59 131�984 FullRemove.exe 2010-11-28 21:53 Gadu-Gadu 10 2013-06-12 19:12 GG 2012-09-13 17:59 Google 2013-07-27 10:23 GRETECH 2014-07-23 18:30 hps 2013-09-29 18:17 IBUpdaterService 2014-03-09 17:04 InstallMate 2013-01-04 20:12 ipla 2011-03-02 17:49 McAfee 2015-01-25 12:49 MFAData 2014-02-27 21:12 Microsoft 2014-12-14 19:52 Microsoft Help 2012-07-03 20:27 Mozilla 2010-07-16 10:32 NTI Launcher 2010-11-28 22:40 oem 2010-11-29 18:53 OpenFM 2014-11-17 13:44 Oracle 2011-01-03 19:10 Partner 2012-04-24 19:08 PITy 2013-01-04 20:13 RDRM 2014-03-05 19:33 Skype 2009-07-14 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 2010-12-13 21:19 Sun 2010-07-16 10:33 Symantec 2009-07-14 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 2012-02-24 21:22 Tlen.pl 2014-07-23 18:27 tmp 2012-08-20 19:40 TuneUp Software 2014-09-03 17:39 weBsave 2014-09-03 17:39 YoutubeAdblocker 2012-08-20 19:39 {32364CEA-7855-4A3C-B674-53D8E9B97936} 1 plik(�w) 131�984 bajt�w 62 katalog(�w) 185�614�884�864 bajt�w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\Karolina\AppData\Local ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B605-9584 Katalog: C:\Users\Karolina\AppData\Local 2015-01-25 14:20 . 2015-01-25 14:20 .. 2012-11-08 20:12 Adobe 2012-08-17 17:35 Apple 2013-09-07 14:35 Apps 2015-01-14 20:13 Avg2015 2013-09-13 19:16 avgchrome 2012-05-07 19:01 BearShare 2014-03-09 17:02 Comodo 2011-09-17 15:21 Cyberlink 2010-11-28 22:35 Dane aplikacji [C:\Users\Karolina\AppData\Local] 2011-01-16 18:44 3�584 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-09-07 14:54 Deployment 2014-03-26 18:20 Diagnostics 2010-11-28 22:40 EgisTec IPS 2015-01-25 13:56 EmieSiteList 2012-11-18 10:20 109�296 GDIPFONTCACHEV1.DAT 2014-12-17 20:02 GG 2014-03-09 17:02 Google 2010-11-28 22:35 Historia [C:\Users\Karolina\AppData\Local\Microsoft\Windows\History] 2015-01-22 19:17 6�446�568 IconCache.db 2012-04-24 19:05 Infonetax 2012-06-29 20:11 Macromedia 2014-08-06 20:05 MFAData 2013-12-04 21:42 Microsoft 2011-02-22 19:31 Microsoft Games 2011-11-22 20:41 Microsoft Help 2013-10-01 19:22 Mozilla 2010-12-01 20:14 PackageAware 2012-11-14 20:04 Programs 2015-01-25 14:21 Temp 2010-11-28 22:35 Temporary Internet Files [C:\Users\Karolina\AppData\Local\Microsoft\Windows\Temporary Internet Files] 2012-06-14 19:51 Torch 2011-09-17 15:57 VirtualStore 2013-07-17 07:34 Windows Live 2012-12-02 20:28 Windows Live Writer 2013-07-17 07:35 {29A0CAAD-1D04-4B0F-8E26-CB976CC7B143} 2012-12-02 20:28 {42227F34-1DB0-44F2-A71E-44D40671B8D4} 2012-06-14 19:18 {53A66855-948B-435A-9610-89E3BA219F49} 2012-11-14 19:59 {A2A02E60-30BF-4D1B-AD6B-2AF737A1E792} 2014-11-17 11:40 0 {A608761E-4E7B-4A49-A5B2-5908951116F6} 2012-06-14 19:14 {BB3E6E87-0D75-4F18-BA86-1C1C2245277B} 4 plik(�w) 6�559�448 bajt�w 38 katalog(�w) 185�614�880�768 bajt�w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\Karolina\AppData\LocalLow ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B605-9584 Katalog: C:\Users\Karolina\AppData\LocalLow 2015-01-25 13:56 . 2015-01-25 13:56 .. 2012-11-10 19:53 Adobe 2012-08-17 17:35 Apple Computer 2014-09-03 17:08 EmieSiteList 2010-11-28 21:49 Google 2013-04-11 19:46 Microsoft 2010-12-13 21:17 Sun 0 plik(�w) 0 bajt�w 8 katalog(�w) 185�614�880�768 bajt�w wolnych ========= End of CMD: ========= ========= dir /a C:\Users\Karolina\AppData\Roaming ========= Wolumin w stacji C to Acer Numer seryjny woluminu: B605-9584 Katalog: C:\Users\Karolina\AppData\Roaming 2015-01-25 14:21 . 2015-01-25 14:21 .. 2013-09-29 18:16 98�534 7go.ico 2012-11-10 19:53 Adobe 2012-11-14 19:48 AnvSoft 2014-02-22 14:58 Apetito.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 2012-08-18 20:22 Apple Computer 2015-01-14 19:46 AVG2015 2010-11-28 22:00 BESTplayer 2014-08-06 19:46 BitTorrent 2012-10-20 13:11 Canneverbe Limited 2011-08-31 16:44 CyberLink 2014-07-23 18:17 Dropbox 2014-07-23 18:17 DropboxMaster 2012-04-24 19:22 e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 2011-09-17 15:26 eSobi 2015-01-17 16:01 GG 2010-11-29 02:18 Google 2013-08-04 20:22 GRETECH 2010-11-28 22:39 Identities 2011-05-29 13:27 InstallShield 2010-11-28 22:40 Intel Corporation 2014-02-18 23:31 ipla 2014-03-19 03:08 IrfanView 2014-10-29 18:01 KTW 2010-11-28 22:40 Macromedia 2009-07-14 08:44 Media Center Programs 2010-12-03 20:22 Media Player Classic 2012-09-13 18:11 Microsoft 2010-12-01 20:16 Mozilla 2014-01-12 19:42 PhotoScape 2012-04-25 19:53 Podatnik.info 2011-03-08 21:13 RDRM 2013-12-25 15:51 Skype 2013-09-29 18:16 30�894 speedanalysis.ico 2012-04-17 19:10 Torreador 2012-04-19 16:15 Torrius 2012-08-20 19:39 TuneUp Software 2014-09-24 18:46 91 WB.CFG 2014-01-02 10:46 5 WBPU-Q5-TTL.DAT 2014-01-26 11:46 5 WBPU-TTL.DAT 2012-12-02 20:28 Windows Live Writer 2010-12-09 20:50 WinRAR 2012-08-20 19:49 Youtube Downloader HD 5 plik(�w) 129�529 bajt�w 39 katalog(�w) 185�614�876�672 bajt�w wolnych ========= End of CMD: ========= EmptyTemp: => Removed 1.3 GB temporary data. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-01-25 14:27:54)<= ==> ATTENTION: System is not rebooted. "C:\Users\Karolina\AppData\Local\{*}" => Directory could not move. ==== End of Fixlog 14:27:56 ====