Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 26-08-2013 Ran by Soesje at 2013-08-31 18:38:35 Run:2 Running from C:\Users\Soesje\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {702319BF-B855-4F0B-8BA3-93D66D31C34A} - System32\Tasks\Funmoods => C:\Users\Soesje\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE No File Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {1E1793A8-47C1-B221-B11A-2F1FFBE60176} /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1E1793A8-47C1-B221-B11A-2F1FFBE60176}" /f Reg: reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{94657570-2012-4164-B9BA-9FB0BABDEFB1}" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{702319BF-B855-4F0B-8BA3-93D66D31C34A} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{702319BF-B855-4F0B-8BA3-93D66D31C34A} => Key deleted successfully. Could not move "C:\Windows\System32\Tasks\Funmoods" => Scheduled to move on reboot. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Funmoods => Key not found. ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {1E1793A8-47C1-B221-B11A-2F1FFBE60176} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1E1793A8-47C1-B221-B11A-2F1FFBE60176}" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{94657570-2012-4164-B9BA-9FB0BABDEFB1}" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= =========== Result of Scheduled Files to move =========== "C:\Windows\System32\Tasks\Funmoods" => File could not move. ==== End of Fixlog ====