Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-11-2014 Ran by Seba at 2014-11-22 21:45:20 Run:1 Running from C:\Users\Seba\Desktop\Nowy folder (2) Loaded Profiles: Seba & UpdatusUser (Available profiles: Seba & UpdatusUser) Boot Mode: Normal ============================================== Content of fixlist: ***************** CustomCLSID: HKU\S-1-5-21-1085045882-233685549-2986048768-1000_Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}\localserver32 -> C:\Users\Seba\AppData\Local\Temp\75aaDF40a0.exe No File Task: {9FF4EB85-843B-44F1-BEFC-083241CAEF1B} - System32\Tasks\GS_Booster-S-576482620 => c:\programdata\trusted publisher\gs_booster\GS_Booster.exe <==== ATTENTION Task: {D6AC4023-3552-4400-93F3-BDEE03813A20} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1085045882-233685549-2986048768-1000 Task: {E0FF2582-F874-46E0-A2FF-0003594D5D39} - System32\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805} => C:\ProgramData\cis8E6F.exe <==== ATTENTION Task: C:\Windows\Tasks\GS_Booster-S-576482620.job => c:\programdata\trusted publisher\gs_booster\GS_Booster.exe <==== ATTENTION c:\programdata\trusted publisher C:\Program Files\Klip Pal\bin\KlipPal.PurBrowse.exe C:\Program Files\Klip Pal\updateKlipPal.exe C:\Program Files\Klip Pal Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION BHO: No Name -> {a13d85a3-d31a-4f34-b4cd-fce576dc079e} -> No File FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\omiga-plus.xml R2 Update Klip Pal; C:\Program Files\Klip Pal\updateKlipPal.exe R2 Util Klip Pal; C:\Program Files\Klip Pal\bin\utilKlipPal.exe R1 {e0f11ce0-b988-4edf-90cb-37fdcbf046be}Gw; C:\Windows\System32\drivers\{e0f11ce0-b988-4edf-90cb-37fdcbf046be}Gw.sys C:\Windows\System32\drivers\{e0f11ce0-b988-4edf-90cb-37fdcbf046be}Gw.sys EmptyTemp: ***************** "HKU\S-1-5-21-1085045882-233685549-2986048768-1000_Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9FF4EB85-843B-44F1-BEFC-083241CAEF1B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9FF4EB85-843B-44F1-BEFC-083241CAEF1B}" => Key deleted successfully. C:\Windows\System32\Tasks\GS_Booster-S-576482620 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GS_Booster-S-576482620" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D6AC4023-3552-4400-93F3-BDEE03813A20}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D6AC4023-3552-4400-93F3-BDEE03813A20}" => Key deleted successfully. C:\Windows\System32\Tasks\Games\UpdateCheck_S-1-5-21-1085045882-233685549-2986048768-1000 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Games\UpdateCheck_S-1-5-21-1085045882-233685549-2986048768-1000" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E0FF2582-F874-46E0-A2FF-0003594D5D39}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0FF2582-F874-46E0-A2FF-0003594D5D39}" => Key deleted successfully. C:\Windows\System32\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805}" => Key deleted successfully. C:\Windows\Tasks\GS_Booster-S-576482620.job => Moved successfully. "c:\programdata\trusted publisher" => File/Directory not found. C:\Program Files\Klip Pal\bin\KlipPal.PurBrowse.exe => Moved successfully. C:\Program Files\Klip Pal\updateKlipPal.exe => Moved successfully. "C:\Program Files\Klip Pal" directory move: C:\Program Files\Klip Pal\cfcacpgcecgcgfileglmaoakegmojlnj.crx => Moved successfully. C:\Program Files\Klip Pal\bin\7za.exe => Moved successfully. C:\Program Files\Klip Pal\bin\BrowserAdapter.7z => Moved successfully. C:\Program Files\Klip Pal\bin\e0f11ce0b9884edf90cb.dll => Moved successfully. C:\Program Files\Klip Pal\bin\e0f11ce0b9884edf90cb64.dll => Moved successfully. C:\Program Files\Klip Pal\bin\f54d9c50821046e0a0e8.dll => Moved successfully. C:\Program Files\Klip Pal\bin\f54d9c50821046e0a0e864.dll => Moved successfully. C:\Program Files\Klip Pal\bin\KlipPal.BrowserAdapter64.exe => Moved successfully. C:\Program Files\Klip Pal\bin\KlipPal.PurBrowseG.zip => Moved successfully. C:\Program Files\Klip Pal\bin\sqlite3.dll => Moved successfully. C:\Program Files\Klip Pal\bin\tmpEF6D.tmp => Moved successfully. C:\Program Files\Klip Pal\bin\utilKlipPal.exe => Moved successfully. C:\Program Files\Klip Pal\bin\{e0f11ce0-b988-4edf-90cb-37fdcbf046be}.dll => Moved successfully. C:\Program Files\Klip Pal\bin\{e0f11ce0-b988-4edf-90cb-37fdcbf046be}64.dll => Moved successfully. C:\Program Files\Klip Pal\bin\{f54d9c50-8210-46e0-a0e8-d9ea665b4ee8}.dll => Moved successfully. C:\Program Files\Klip Pal\bin\{f54d9c50-8210-46e0-a0e8-d9ea665b4ee8}64.dll => Moved successfully. C:\Program Files\Klip Pal\bin\plugins\KlipPal.Bromon.dll => Moved successfully. C:\Program Files\Klip Pal\bin\plugins\KlipPal.BroStats.dll => Moved successfully. C:\Program Files\Klip Pal\bin\plugins\KlipPal.BrowserAdapter.dll => Moved successfully. C:\Program Files\Klip Pal\bin\plugins\KlipPal.CompatibilityChecker.dll => Moved successfully. C:\Program Files\Klip Pal\bin\plugins\KlipPal.FFUpdate.dll => Moved successfully. C:\Program Files\Klip Pal\bin\plugins\KlipPal.GCUpdate.dll => Moved successfully. C:\Program Files\Klip Pal\bin\plugins\KlipPal.IEUpdate.dll => Moved successfully. C:\Program Files\Klip Pal\bin\plugins\KlipPal.PurBrowseG.dll => Moved successfully. Could not move "C:\Program Files\Klip Pal" directory. => Scheduled to move on reboot. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= End of Reg: ========= C:\Windows\system32\GroupPolicy\Machine => Moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a13d85a3-d31a-4f34-b4cd-fce576dc079e}" => Key deleted successfully. "HKCR\CLSID\{a13d85a3-d31a-4f34-b4cd-fce576dc079e}" => Key not found. C:\Program Files\mozilla firefox\browser\searchplugins\omiga-plus.xml => Moved successfully. Update Klip Pal => Unable to stop service Update Klip Pal => Service deleted successfully. Util Klip Pal => Unable to stop service Util Klip Pal => Service deleted successfully. {e0f11ce0-b988-4edf-90cb-37fdcbf046be}Gw => Unable to stop service {e0f11ce0-b988-4edf-90cb-37fdcbf046be}Gw => Service deleted successfully. C:\Windows\System32\drivers\{e0f11ce0-b988-4edf-90cb-37fdcbf046be}Gw.sys => Moved successfully. EmptyTemp: => Removed 796.1 MB temporary data. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-11-22 21:47:58)<= C:\Program Files\Klip Pal => Is moved successfully. ==== End of Fixlog ====