Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 02-03-2015 Ran by Administrator at 2015-03-04 16:34:15 Run:4 Running from C:\Documents and Settings\Administrator\Pulpit Loaded Profiles: UpdatusUser & Administrator (Available profiles: UpdatusUser & Administrator) Boot Mode: Normal ============================================== Content of fixlist: ***************** S2 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [X] Reg: reg delete HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /f Reg: reg delete HKU\S-1-5-21-1177238915-1972579041-2147093213-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /f Reg: reg delete "HKU\S-1-5-21-1177238915-1972579041-2147093213-1002\Software\Microsoft\Internet Explorer\Main" /f RemoveDirectory: C:\AdwCleaner RemoveDirectory: C:\Documents and Settings\Administrator\Doctor Web RemoveDirectory: C:\Documents and Settings\Administrator\Pulpit\Stare dane programu Firefox RemoveDirectory: C:\Documents and Settings\All Users\Pulpit\CC Support RemoveDirectory: C:\FRST\Quarantine RemoveDirectory: C:\Program Files\AVG Web TuneUp CMD: del /q "C:\Documents and Settings\Administrator\Pulpit\o7vrfm37.exe" CMD: sc stop nvUpdatusService CMD: sc config nvUpdatusService start= disabled ***************** Bonjour Service => Service not found. ========= reg delete HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete HKU\S-1-5-21-1177238915-1972579041-2147093213-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-21-1177238915-1972579041-2147093213-1002\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukończona pomyślnie ========= End of Reg: ========= "C:\AdwCleaner" => removed successfully. "C:\Documents and Settings\Administrator\Doctor Web" => removed successfully. "C:\Documents and Settings\Administrator\Pulpit\Stare dane programu Firefox" => removed successfully. "C:\Documents and Settings\All Users\Pulpit\CC Support" => removed successfully. Could not remove "C:\FRST\Quarantine" => Scheduled to remove on reboot. "C:\Program Files\AVG Web TuneUp" => removed successfully. ========= del /q "C:\Documents and Settings\Administrator\Pulpit\o7vrfm37.exe" ========= ========= End of CMD: ========= ========= sc stop nvUpdatusService ========= SERVICE_NAME: nvUpdatusService TYPE : 10 WIN32_OWN_PROCESS STATE : 3 STOP_PENDING (STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN) WIN32_EXIT_CODE : 0 (0x0) SERVICE_EXIT_CODE : 0 (0x0) CHECKPOINT : 0x2 WAIT_HINT : 0x0 ========= End of CMD: ========= ========= sc config nvUpdatusService start= disabled ========= [SC] ChangeServiceConfig SUCCESS ========= End of CMD: ========= => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-03-04 16:36:02)<= "C:\FRST\Quarantine" => Could not remove directory. ==== End of Fixlog 16:36:03 ====