Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 02-03-2015 Ran by Administrator at 2015-03-03 17:39:26 Run:3 Running from C:\Documents and Settings\Administrator\Pulpit Loaded Profiles: Administrator (Available profiles: UpdatusUser & Administrator) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: Winsock: Missing Catalog5 entry, broken internet access. <===== ATTENTION. R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx86.sys [42784 2014-08-30] (AVG Technologies) HKU\S-1-5-21-1177238915-1972579041-2147093213-500\...\Run: [AvgUpdater] => C:\Documents and Settings\All Users\Dane aplikacji\Avg_Update_0414b\0414b_AVG-Secure-Search-Update.exe [2707480 2014-04-09] () DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab C:\Documents and Settings\Administrator\Dane aplikacji\QuickScan C:\Documents and Settings\Administrator\Menu Start\Programy\WapSter C:\Documents and Settings\Administrator\Pulpit\Muzyka\Pasjonaci - Pasjonaci 2 (2012) [Maciek1981].lnk C:\Documents and Settings\Administrator\Pulpit\Programy - inne\AccurateBurn MP3 Audio CD Maker.lnk C:\Documents and Settings\Administrator\Pulpit\Programy - inne\dBpoweramp Music Converter.lnk C:\Documents and Settings\Administrator\Pulpit\Programy - inne\FastStone Image Viewer.lnk C:\Documents and Settings\Administrator\Pulpit\Programy - inne\LogMeIn Hamachi.lnk C:\Documents and Settings\Administrator\Pulpit\Programy - inne\Opera.lnk C:\Documents and Settings\Administrator\Pulpit\Programy - inne\Your Uninstaller!.lnk C:\Documents and Settings\Administrator\Pulpit\Zdjęcia\Zdjęcie0290.jpg.lnk C:\Documents and Settings\All Users\Dane aplikacji\1425386007.bdinstall.bin C:\Documents and Settings\All Users\Dane aplikacji\Avg_Update_0414b C:\Documents and Settings\All Users\Dane aplikacji\bdch C:\Documents and Settings\All Users\Dane aplikacji\BDLogging C:\Documents and Settings\All Users\Dane aplikacji\MFAData C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{899CF70A-A52B-4CB5-B4F1-EFCD5A325B1F} C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{8C7E6248-C1D1-492D-83A0-DCB42039B276} C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{B9B63F5C-AC06-4342-86F3-F684535F6703} C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{C32DE581-07FB-420E-B09D-C6A8009F3B46} C:\Documents and Settings\All Users\Dane aplikacji\TEMP C:\Documents and Settings\All Users\Menu Start\Programy\Empire Interactive C:\Documents and Settings\Default User\Menu Start\eBay.lnk C:\Documents and Settings\LocalService\Dane aplikacji\QuickScan C:\Documents and Settings\UpdatusUser\Dane aplikacji\QuickScan C:\Documents and Settings\UpdatusUser\Ustawienia lokalne\Dane aplikacji\bdch C:\Program Files\GUT5E.tmp C:\Program Files\Bitdefender C:\Program Files\Common Files\Bitdefender C:\Program Files\Google\Desktop C:\Program Files\Mozilla Firefox\extensions C:\Program Files\Mozilla Firefox\plugins C:\Program Files\Bonjour C:\WINDOWS\system32\bdsandboxuiskin.dll C:\WINDOWS\system32\bdsandboxuh.dll C:\WINDOWS\system32\drivers\avgtpx86.sys C:\WINDOWS\system32\drivers\ZeroAccess.sys C:\WINDOWS\system32\drivers\Msft_Kernel_avchv_01009.Wdf Hosts: Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AQQ" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AVG_UI" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ChomikBox" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Expressivo" /f Reg: reg delete HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /f Reg: reg delete HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /f Reg: reg delete HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent /f Reg: reg delete HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f EmptyTemp: ***************** Processes closed successfully. Winsock: Missing Catalog5 entry, broken internet access. <===== ATTENTION. => Winsock will be renumbered. avgtp => Service stopped successfully. avgtp => Service deleted successfully. HKU\S-1-5-21-1177238915-1972579041-2147093213-500\Software\Microsoft\Windows\CurrentVersion\Run\\AvgUpdater => value deleted successfully. "HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}" => Key deleted successfully. "HKCR\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}" => Key deleted successfully. "HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}" => Key deleted successfully. C:\Documents and Settings\Administrator\Dane aplikacji\QuickScan => Moved successfully. C:\Documents and Settings\Administrator\Menu Start\Programy\WapSter => Moved successfully. C:\Documents and Settings\Administrator\Pulpit\Muzyka\Pasjonaci - Pasjonaci 2 (2012) [Maciek1981].lnk => Moved successfully. C:\Documents and Settings\Administrator\Pulpit\Programy - inne\AccurateBurn MP3 Audio CD Maker.lnk => Moved successfully. C:\Documents and Settings\Administrator\Pulpit\Programy - inne\dBpoweramp Music Converter.lnk => Moved successfully. C:\Documents and Settings\Administrator\Pulpit\Programy - inne\FastStone Image Viewer.lnk => Moved successfully. C:\Documents and Settings\Administrator\Pulpit\Programy - inne\LogMeIn Hamachi.lnk => Moved successfully. C:\Documents and Settings\Administrator\Pulpit\Programy - inne\Opera.lnk => Moved successfully. C:\Documents and Settings\Administrator\Pulpit\Programy - inne\Your Uninstaller!.lnk => Moved successfully. C:\Documents and Settings\Administrator\Pulpit\Zdjęcia\Zdjęcie0290.jpg.lnk => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\1425386007.bdinstall.bin => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Avg_Update_0414b => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\bdch => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\BDLogging => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{899CF70A-A52B-4CB5-B4F1-EFCD5A325B1F} => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{8C7E6248-C1D1-492D-83A0-DCB42039B276} => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{B9B63F5C-AC06-4342-86F3-F684535F6703} => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows\GameExplorer\{C32DE581-07FB-420E-B09D-C6A8009F3B46} => Moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\TEMP => Moved successfully. C:\Documents and Settings\All Users\Menu Start\Programy\Empire Interactive => Moved successfully. C:\Documents and Settings\Default User\Menu Start\eBay.lnk => Moved successfully. C:\Documents and Settings\LocalService\Dane aplikacji\QuickScan => Moved successfully. C:\Documents and Settings\UpdatusUser\Dane aplikacji\QuickScan => Moved successfully. C:\Documents and Settings\UpdatusUser\Ustawienia lokalne\Dane aplikacji\bdch => Moved successfully. C:\Program Files\GUT5E.tmp => Moved successfully. C:\Program Files\Bitdefender => Moved successfully. C:\Program Files\Common Files\Bitdefender => Moved successfully. C:\Program Files\Google\Desktop => Moved successfully. C:\Program Files\Mozilla Firefox\extensions => Moved successfully. C:\Program Files\Mozilla Firefox\plugins => Moved successfully. C:\Program Files\Bonjour => Moved successfully. C:\WINDOWS\system32\bdsandboxuiskin.dll => Moved successfully. C:\WINDOWS\system32\bdsandboxuh.dll => Moved successfully. C:\WINDOWS\system32\drivers\avgtpx86.sys => Moved successfully. C:\WINDOWS\system32\drivers\ZeroAccess.sys => Moved successfully. C:\WINDOWS\system32\drivers\Msft_Kernel_avchv_01009.Wdf => Moved successfully. C:\Windows\System32\Drivers\etc\hosts => Moved successfully. Hosts was reset successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AQQ" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AVG_UI" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ChomikBox" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Expressivo" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main" /f ========= Błąd: system nie może odnaleźć określonego klucza rejestru lub wartości. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Błąd: system nie może odnaleźć określonego klucza rejestru lub wartości. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= EmptyTemp: => Removed 1.2 GB temporary data. The system needed a reboot. ==== End of Fixlog 17:39:55 ====