Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-04-2015 04 Ran by Adrian at 2015-04-15 21:12:56 Run:2 Running from C:\Users\Adrian\Downloads Loaded Profiles: Adrian (Available profiles: Adrian & UpdatusUser) Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-511461997-2466024275-2353699939-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\Adrian\AppData\Local\Akamai\netsession_win.exe" HKU\S-1-5-21-511461997-2466024275-2353699939-1000\...\Run: [Facebook Update] => C:\Users\Adrian\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.) Task: {528447B5-ADB9-442A-AAED-93D65E8E3A18} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000Core => C:\Users\Adrian\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.) Task: {52E15BC4-A270-4A0F-A388-EA3EAD5117FB} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000UA => C:\Users\Adrian\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.) Task: {A8DD4626-7700-4416-BCAC-1AA83F86D427} - System32\Tasks\{2EEE7391-6628-4EB8-9116-4B20D7B8A8FA} => pcalua.exe -a C:\PROGRA~2\INCRED~2\UNWISE.EXE -c /U C:\PROGRA~2\INCRED~2\INSTALL.LOG Task: {C640B76F-6410-4B19-A545-8EC90FC9AA51} - System32\Tasks\{D3A2E4D1-6BF6-4E77-BC4B-007001C90113} => pcalua.exe -a C:\Users\Adrian\Downloads\WDM_A406.exe -d C:\Users\Adrian\Downloads Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000Core.job => C:\Users\Adrian\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000UA.job => C:\Users\Adrian\AppData\Local\Facebook\Update\FacebookUpdate.exe RemoveDirectory: C:\Program Files (x86)\Asprate RemoveDirectory: C:\Program Files (x86)\IncrediMail_MediaBar_2 RemoveDirectory: C:\Users\Adrian\AppData\Local\Facebook RemoveDirectory: C:\Users\Adrian\Downloads\FRST-OlderVersion RemoveDirectory: C:\Users\Ilona RemoveDirectory: C:\Users\TomeczeK Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IncrediMail_MediaBar_2 Toolbar" /f ***************** HKU\S-1-5-21-511461997-2466024275-2353699939-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => value deleted successfully. HKU\S-1-5-21-511461997-2466024275-2353699939-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => Value not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{528447B5-ADB9-442A-AAED-93D65E8E3A18} => Key not found. C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000Core not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000Core => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52E15BC4-A270-4A0F-A388-EA3EAD5117FB} => Key not found. C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000UA not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000UA => Key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A8DD4626-7700-4416-BCAC-1AA83F86D427}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A8DD4626-7700-4416-BCAC-1AA83F86D427}" => Key deleted successfully. C:\Windows\System32\Tasks\{2EEE7391-6628-4EB8-9116-4B20D7B8A8FA} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2EEE7391-6628-4EB8-9116-4B20D7B8A8FA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C640B76F-6410-4B19-A545-8EC90FC9AA51}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C640B76F-6410-4B19-A545-8EC90FC9AA51}" => Key deleted successfully. C:\Windows\System32\Tasks\{D3A2E4D1-6BF6-4E77-BC4B-007001C90113} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D3A2E4D1-6BF6-4E77-BC4B-007001C90113}" => Key deleted successfully. C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000Core.job not found. C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-511461997-2466024275-2353699939-1000UA.job not found. "C:\Program Files (x86)\Asprate" => Removed successfully. "C:\Program Files (x86)\IncrediMail_MediaBar_2" => Removed successfully. "C:\Users\Adrian\AppData\Local\Facebook" => Removed successfully. "C:\Users\Adrian\Downloads\FRST-OlderVersion" => Removed successfully. "C:\Users\Ilona" => Removed successfully. "C:\Users\TomeczeK" => Removed successfully. ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IncrediMail_MediaBar_2 Toolbar" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog 21:13:01 ====