Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-03-2015 01 Ran by Daroo at 2015-03-05 19:21:16 Run:1 Running from C:\Users\Daroo\Downloads Loaded Profiles: Daroo (Available profiles: Daroo) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: S3 MSICDSetup; \??\E:\CDriver64.sys [X] S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X] Task: {5FF2A2F8-64E9-4C0D-8489-0433B43CD4F2} - System32\Tasks\{8C65CB29-1A35-4626-9C7A-E858F28B3828} => pcalua.exe -a E:\ASIO_Driver\Setup.exe -d E:\ASIO_Driver Task: {FE8F2418-A7A2-4C6B-BAF7-75F295E8C23B} - System32\Tasks\{EA01BA79-A412-4F92-A219-6143E309F9DB} => pcalua.exe -a "D:\Riot Games\League of Legends\lol.launcher.exe" -d "D:\Riot Games\League of Legends\" HKU\S-1-5-21-2558993376-1286645175-2082976433-1001\...\Run: [DAEMON Tools Lite] => "d:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun HKU\S-1-5-21-2558993376-1286645175-2082976433-1001\...\MountPoints2: {36983537-376b-11e4-be76-448a5b9eb4c8} - "F:\Autorun.exe" FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v "DAEMON Tools Lite" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. MSICDSetup => Service deleted successfully. NTIOLib_1_0_C => Service deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5FF2A2F8-64E9-4C0D-8489-0433B43CD4F2}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5FF2A2F8-64E9-4C0D-8489-0433B43CD4F2}" => Key deleted successfully. C:\Windows\System32\Tasks\{8C65CB29-1A35-4626-9C7A-E858F28B3828} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8C65CB29-1A35-4626-9C7A-E858F28B3828}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FE8F2418-A7A2-4C6B-BAF7-75F295E8C23B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FE8F2418-A7A2-4C6B-BAF7-75F295E8C23B}" => Key deleted successfully. C:\Windows\System32\Tasks\{EA01BA79-A412-4F92-A219-6143E309F9DB} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{EA01BA79-A412-4F92-A219-6143E309F9DB}" => Key deleted successfully. HKU\S-1-5-21-2558993376-1286645175-2082976433-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully. "HKU\S-1-5-21-2558993376-1286645175-2082976433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{36983537-376b-11e4-be76-448a5b9eb4c8}" => Key deleted successfully. HKCR\CLSID\{36983537-376b-11e4-be76-448a5b9eb4c8} => Key not found. "HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => Key deleted successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v "DAEMON Tools Lite" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 8.6 GB temporary data. The system needed a reboot. ==== End of Fixlog 19:21:58 ====