Farbar Recovery Scan Tool (x64) Version: 08-05-2017 Ran by fundowic (13-05-2017 18:24:20) Running from C:\Users\fundowic\Desktop\FRST Boot Mode: Normal ================== Search Registry: "bagsarah;firefox" =========== ===================== Search result for "bagsarah" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\Capabilities] "ApplicationIcon"="C:\Program Files (x86)\Bagsarah\Application\chrome.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\DefaultIcon] ""="C:\Program Files (x86)\Bagsarah\Application\chrome.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\InstallInfo] "ReinstallCommand"=""C:\Program Files (x86)\Bagsarah\Application\chrome.exe" "-ReinstallCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\InstallInfo] "HideIconsCommand"=""C:\Program Files (x86)\Bagsarah\Application\chrome.exe" "-HideIconsCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\InstallInfo] "ShowIconsCommand"=""C:\Program Files (x86)\Bagsarah\Application\chrome.exe" "-ShowIconsCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Bagsarah] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Bagsarah] "path"="C:\Program Files (x86)\Bagsarah\" [HKEY_USERS\S-1-5-21-202387345-4201324245-3709672714-20981\Software\Bagsarah] [HKEY_USERS\S-1-5-21-202387345-4201324245-3709672714-20981\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\4fd88af7_0] ""="{0.0.0.00000000}.{b317ddde-6e0e-4b8e-aa82-500f68a8effc} \Device\HarddiskVolume2\Program Files (x86)\Bagsarah\Application\chrome.exe%b{00000000-0000-0000-0000-000000000000}" [HKEY_USERS\S-1-5-21-202387345-4201324245-3709672714-20981\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files (x86)\Bagsarah\Application\chrome.exe"="Google Chrome" ===================== Search result for "firefox" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BDEADEF0-C265-11D0-BCED-00A0C90AB50F}\1.0] ""="Microsoft SharePoint Plug-in for Firefox" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files (x86)\Mozilla Firefox\plugins\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files (x86)\Mozilla Firefox\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Firefox] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Firefox] "path"="C:\Program Files (x86)\Firefox\" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox] [HKEY_USERS\S-1-5-21-202387345-4201324245-3709672714-20981\Software\Firefox] [HKEY_USERS\S-1-5-21-202387345-4201324245-3709672714-20981\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\7909d0b6_0] ""="{0.0.0.00000000}.{b317ddde-6e0e-4b8e-aa82-500f68a8effc} \Device\HarddiskVolume2\Program Files (x86)\Firefox\Firefox.exe%b{00000000-0000-0000-0000-000000000000}" ====== End of Search ======