Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-02-2015 Ran by Fabian at 2015-03-03 09:58:04 Run:2 Running from C:\Users\Fabian\Desktop Loaded Profiles: Fabian (Available profiles: Fabian & Jarosław) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-02-27] (globalUpdate) [File not signed] S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-02-27] (globalUpdate) [File not signed] R2 hebeceku; C:\Users\Fabian\AppData\Roaming\4C4C4544-1425040579-5010-8053-C7C04F503032\jnsc2839.tmp [175104 2015-02-27] () [File not signed] R2 wyrigeqi; C:\Users\Fabian\AppData\Roaming\4C4C4544-1425040579-5010-8053-C7C04F503032\nsfFB86.tmpfs [X] S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X] HKLM-x32\...\Run: [gmsd_pl_58] => [X] HKU\S-1-5-21-4113954769-2473987496-1411739572-1001\...\Run: [Mobile Partner] => C:\Program Files (x86)\MobileWiFi\MobileWiFi Task: {1D4FBAAD-8A64-4CD0-B916-EF7FB4FDFE03} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: {37FBDD6F-D687-4DA2-8445-CA401E66340E} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-02-27] (globalUpdate) <==== ATTENTION Task: {4F052835-6C30-41B9-8B20-6CC953BD45B2} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-4113954769-2473987496-1411739572-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe Task: {593876E1-80F2-414C-809E-F40D6CA2F563} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: {7E25837D-0B5D-4BFE-B85B-DD0DDE78F7D0} - System32\Tasks\MTVFGYSJ => C:\Users\Fabian\AppData\Roaming\MTVFGYSJ.exe [2015-02-27] (HQ CinemaV27.02) <==== ATTENTION Task: {C8A561F8-2ED1-4A62-ACE8-6AC20AB05DB8} - System32\Tasks\{82075278-5D85-4ED1-A424-639032E88963} => pcalua.exe -a C:\Users\Fabian\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi Task: {D60CB752-68A3-4A05-83BD-FA29A44218EB} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-02-27] (globalUpdate) <==== ATTENTION Task: {DAE54074-2B1F-401D-944C-45CFE6F97141} - System32\Tasks\{2CB5ECCD-3AF4-43E8-80CE-4C973C616AD0} => pcalua.exe -a C:\Users\Fabian\Downloads\PDA-Net.exe -d C:\Users\Fabian\Downloads Task: {E3A921ED-759B-477A-BE00-CCE0E49F5787} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: {EE077D51-B098-48F4-BEB6-5AAB1DED665F} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\Fabian\AppData\Local\SmartWeb\SmartWebHelper.exe <==== ATTENTION Task: {F19918E6-C1B5-46FB-9216-818FB0079218} - System32\Tasks\Norton Security Scan for Fabian => C:\Program Files (x86)\Norton Security Scan\Engine\4.1.0.28\Nss.exe [2014-01-27] (Symantec Corporation) Task: {F4831012-3C6D-432F-AC90-86987BA3D745} - System32\Tasks\MQCGS => C:\Users\Fabian\AppData\Roaming\MQCGS.exe [2015-02-27] (HQ CinemaV27.02) <==== ATTENTION Task: C:\WINDOWS\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\MQCGS.job => C:\Users\Fabian\AppData\Roaming\MQCGS.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\MTVFGYSJ.job => C:\Users\Fabian\AppData\Roaming\MTVFGYSJ.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\Norton Security Scan for Fabian.job => C:\PROGRA~2\NORTON~2\Engine\410~1.28\Nss.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iexplore.exe — skrót.lnk Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1425041227&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1425041227&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1425041227&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1425041227&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1425041227&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1425041227&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&q={searchTerms} SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-4113954769-2473987496-1411739572-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&ts=1425041305&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-4113954769-2473987496-1411739572-1001 -> {1A95DC8F-4A6D-4938-B715-50B59B516306} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&ts=1425041305&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-4113954769-2473987496-1411739572-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&ts=1425041305&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-4113954769-2473987496-1411739572-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dspp&ts=1425041286&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&q={searchTerms} SearchScopes: HKU\S-1-5-21-4113954769-2473987496-1411739572-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&ts=1425041305&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-4113954769-2473987496-1411739572-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537&ts=1425041305&type=default&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=1425037189&from=obw&uid=WDCXWD10EZEX-75M2NA0_WD-WCC3F286953769537 FF DefaultSearchEngine: mystartsearch FF SelectedSearchEngine: mystartsearch FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF SearchPlugin: C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\searchplugins\bing-avast.xml FF SearchPlugin: C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\searchplugins\mystartsearch.xml FF SearchPlugin: C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\searchplugins\yahoo-avast.xml FF Extension: FF Toolbar - C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\Extensions\fftoolbar2014@etech.com [2015-02-27] FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\extensions\searchengine@gmail.com FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\extensions\faststartff@gmail.com FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\extensions\fftoolbar2014@etech.com C:\Program Files (x86)\globalUpdate C:\Program Files (x86)\predm C:\Program Files (x86)\XTab C:\ProgramData\IHProtectUpDate C:\ProgramData\WindowsMangerProtect C:\Users\Fabian\AppData\Local\nsh5F45.tmp C:\Users\Fabian\AppData\Local\nsk8217.tmp C:\Users\Fabian\AppData\Local\nsy9618.tmp C:\Users\Fabian\AppData\Local\4C4C4544-1425040623-5010-8053-C7C04F503032 C:\Users\Fabian\AppData\Local\globalUpdate C:\Users\Fabian\AppData\Local\SmartWeb C:\Users\Fabian\AppData\Roaming\MQCGS C:\Users\Fabian\AppData\Roaming\MQCGS.exe C:\Users\Fabian\AppData\Roaming\MTVFGYSJ C:\Users\Fabian\AppData\Roaming\MTVFGYSJ.exe C:\Users\Fabian\AppData\Roaming\4C4C4544-1425040579-5010-8053-C7C04F503032 C:\Users\Fabian\AppData\Roaming\AnyProtectEx C:\Users\Fabian\AppData\Roaming\omniboxes C:\Users\Fabian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup C:\WINDOWS\patsearch.bin C:\WINDOWS\system32\Drivers\Msft_Kernel_webTinstMK_01009.Wdf C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. globalUpdate => Service not found. globalUpdatem => Service not found. hebeceku => Service not found. wyrigeqi => Service not found. qrnfd_1_10_0_9 => Service not found. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_pl_58 => Value not found. HKU\S-1-5-21-4113954769-2473987496-1411739572-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Mobile Partner => Value not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D4FBAAD-8A64-4CD0-B916-EF7FB4FDFE03} => Key not found. C:\Windows\System32\Tasks\APSnotifierPP3 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP3 => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37FBDD6F-D687-4DA2-8445-CA401E66340E} => Key not found. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F052835-6C30-41B9-8B20-6CC953BD45B2} => Key not found. C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-4113954769-2473987496-1411739572-1001 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft OneDrive Auto Update Task-S-1-5-21-4113954769-2473987496-1411739572-1001 => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{593876E1-80F2-414C-809E-F40D6CA2F563} => Key not found. C:\Windows\System32\Tasks\APSnotifierPP2 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP2 => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7E25837D-0B5D-4BFE-B85B-DD0DDE78F7D0} => Key not found. C:\Windows\System32\Tasks\MTVFGYSJ not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MTVFGYSJ => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C8A561F8-2ED1-4A62-ACE8-6AC20AB05DB8} => Key not found. C:\Windows\System32\Tasks\{82075278-5D85-4ED1-A424-639032E88963} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{82075278-5D85-4ED1-A424-639032E88963} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D60CB752-68A3-4A05-83BD-FA29A44218EB} => Key not found. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DAE54074-2B1F-401D-944C-45CFE6F97141} => Key not found. C:\Windows\System32\Tasks\{2CB5ECCD-3AF4-43E8-80CE-4C973C616AD0} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2CB5ECCD-3AF4-43E8-80CE-4C973C616AD0} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3A921ED-759B-477A-BE00-CCE0E49F5787} => Key not found. C:\Windows\System32\Tasks\APSnotifierPP1 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP1 => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EE077D51-B098-48F4-BEB6-5AAB1DED665F} => Key not found. C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartWeb Upgrade Trigger Task => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F19918E6-C1B5-46FB-9216-818FB0079218} => Key not found. C:\Windows\System32\Tasks\Norton Security Scan for Fabian not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Security Scan for Fabian => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F4831012-3C6D-432F-AC90-86987BA3D745} => Key not found. C:\Windows\System32\Tasks\MQCGS not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MQCGS => Key not found. C:\WINDOWS\Tasks\APSnotifierPP1.job not found. C:\WINDOWS\Tasks\APSnotifierPP2.job not found. C:\WINDOWS\Tasks\APSnotifierPP3.job not found. C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job not found. C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job not found. C:\WINDOWS\Tasks\MQCGS.job not found. C:\WINDOWS\Tasks\MTVFGYSJ.job not found. C:\WINDOWS\Tasks\Norton Security Scan for Fabian.job not found. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iexplore.exe — skrót.lnk not found. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk not found. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key not found. HKCR\Wow6432Node\CLSID\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key not found. HKU\S-1-5-21-4113954769-2473987496-1411739572-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKU\S-1-5-21-4113954769-2473987496-1411739572-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1A95DC8F-4A6D-4938-B715-50B59B516306} => Key not found. HKCR\CLSID\{1A95DC8F-4A6D-4938-B715-50B59B516306} => Key not found. HKU\S-1-5-21-4113954769-2473987496-1411739572-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => Key not found. HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => Key not found. HKU\S-1-5-21-4113954769-2473987496-1411739572-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKU\S-1-5-21-4113954769-2473987496-1411739572-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key not found. HKCR\CLSID\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key not found. HKU\S-1-5-21-4113954769-2473987496-1411739572-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => Key not found. HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => Key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. Firefox DefaultSearchEngine deleted successfully. Firefox SelectedSearchEngine deleted successfully. HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10 => Key not found. C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll not found. HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4 => Key not found. C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll not found. "C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\searchplugins\bing-avast.xml" => not found. "C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\searchplugins\mystartsearch.xml" => not found. "C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\searchplugins\yahoo-avast.xml" => not found. C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\6odyhuug.default\Extensions\fftoolbar2014@etech.com not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\searchengine@gmail.com => Value not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\faststartff@gmail.com => Value not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\fftoolbar2014@etech.com => Value not found. "C:\Program Files (x86)\globalUpdate" => File/Directory not found. "C:\Program Files (x86)\predm" => File/Directory not found. "C:\Program Files (x86)\XTab" => File/Directory not found. "C:\ProgramData\IHProtectUpDate" => File/Directory not found. "C:\ProgramData\WindowsMangerProtect" => File/Directory not found. "C:\Users\Fabian\AppData\Local\nsh5F45.tmp" => File/Directory not found. "C:\Users\Fabian\AppData\Local\nsk8217.tmp" => File/Directory not found. "C:\Users\Fabian\AppData\Local\nsy9618.tmp" => File/Directory not found. "C:\Users\Fabian\AppData\Local\4C4C4544-1425040623-5010-8053-C7C04F503032" => File/Directory not found. "C:\Users\Fabian\AppData\Local\globalUpdate" => File/Directory not found. "C:\Users\Fabian\AppData\Local\SmartWeb" => File/Directory not found. "C:\Users\Fabian\AppData\Roaming\MQCGS" => File/Directory not found. "C:\Users\Fabian\AppData\Roaming\MQCGS.exe" => File/Directory not found. "C:\Users\Fabian\AppData\Roaming\MTVFGYSJ" => File/Directory not found. "C:\Users\Fabian\AppData\Roaming\MTVFGYSJ.exe" => File/Directory not found. "C:\Users\Fabian\AppData\Roaming\4C4C4544-1425040579-5010-8053-C7C04F503032" => File/Directory not found. "C:\Users\Fabian\AppData\Roaming\AnyProtectEx" => File/Directory not found. "C:\Users\Fabian\AppData\Roaming\omniboxes" => File/Directory not found. "C:\Users\Fabian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup" => File/Directory not found. "C:\WINDOWS\patsearch.bin" => File/Directory not found. "C:\WINDOWS\system32\Drivers\Msft_Kernel_webTinstMK_01009.Wdf" => File/Directory not found. "C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7" => File/Directory not found. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 1.4 GB temporary data. The system needed a reboot. ==== End of Fixlog 09:58:48 ====