Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-10-2013 Ran by Adam at 2013-11-04 19:33:28 Run:2 Running from C:\Users\Adam\Desktop\skanery Boot Mode: Normal ============================================== Content of fixlist: ***************** S2 Update WebConnect; C:\Program Files (x86)\WebConnect\updateWebConnect.exe [206632 2013-08-30] (WebConnect) Task: {34421D8A-73DC-4029-92CA-F731D8AE8B6B} - System32\Tasks\{8E4A4EDD-8841-457E-8931-F6516D109634} => C:\Program Files (x86)\Master\EasyClicker\EasyClicker Pro 1.3v.exe Task: {0462D0DA-7840-44D9-B065-EFC0574B9EF3} - System32\Tasks\DSite => C:\Users\Adam\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE Task: {FAE4364D-BF71-4A87-BC55-5EFA282F1CB3} - System32\Tasks\EPUpdater => C:\Users\Adam\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] () Task: C:\Windows\Tasks\DSite.job => C:\Users\Adam\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=082DB6DBC94C28EC&affID=119357&tsp=5001 BHO-x32: WebConnect - {2316c625-b487-4410-a1a5-ff040b65245f} - C:\Program Files (x86)\WebConnect\WebConnectbho.dll (Web Connect) CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx CHR HKLM-x32\...\Chrome\Extension: [ieakfmpjhljbpbfpldjkddkjmmgjmgon] - C:\Program Files (x86)\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx CHR HKLM-x32\...\Chrome\Extension: [obilhkhfmlggcoildcnoeknaghkiiclj] - C:\Users\Adam\AppData\Local\CRE\obilhkhfmlggcoildcnoeknaghkiiclj.crx CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION R3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] 2013-09-15 17:58 - 2013-09-15 17:58 - 00000000 _____ C:\Windows\SysWOW64\sho70D1.tmp 2013-09-10 13:02 - 2013-09-10 13:02 - 00000000 ____D C:\Users\Adam\AppData\Local\avgchrome 2013-09-10 12:56 - 2013-09-10 12:56 - 00000000 ____D C:\Users\Adam\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z 2013-09-10 12:55 - 2013-09-23 21:40 - 00000000 ____D C:\Users\Adam\AppData\Roaming\BabSolution 2013-09-10 12:55 - 2013-09-10 12:55 - 00000000 ____D C:\Users\Adam\AppData\Roaming\Babylon 2013-09-10 12:55 - 2013-09-10 12:55 - 00000000 ____D C:\ProgramData\Babylon 2013-09-10 12:53 - 2013-09-10 12:53 - 00000000 ____D C:\Users\Adam\AppData\Roaming\DSite 2013-08-28 19:23 - 2013-09-24 16:27 - 00000127 _____ C:\Users\Adam\AppData\Roaming\sp_data.sys ***************** Update WebConnect => Service not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34421D8A-73DC-4029-92CA-F731D8AE8B6B} => Key not found. C:\Windows\System32\Tasks\{8E4A4EDD-8841-457E-8931-F6516D109634} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8E4A4EDD-8841-457E-8931-F6516D109634} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0462D0DA-7840-44D9-B065-EFC0574B9EF3} => Key not found. C:\Windows\System32\Tasks\DSite not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DSite => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FAE4364D-BF71-4A87-BC55-5EFA282F1CB3} => Key not found. C:\Windows\System32\Tasks\EPUpdater not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EPUpdater => Key not found. C:\Windows\Tasks\DSite.job not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316c625-b487-4410-a1a5-ff040b65245f} => Key not found. HKCR\Wow6432Node\CLSID\{2316c625-b487-4410-a1a5-ff040b65245f} => Key not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj => Key not found. "C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj => Key not found. "C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon => Key not found. "C:\Program Files (x86)\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk => Key not found. "C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\obilhkhfmlggcoildcnoeknaghkiiclj => Key not found. "C:\Users\Adam\AppData\Local\CRE\obilhkhfmlggcoildcnoeknaghkiiclj.crx" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp => Key not found. "C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx" => File/Directory not found. HKCU\SOFTWARE\Policies\Google => Key not found. EagleX64 => Service deleted successfully. "C:\Windows\SysWOW64\sho70D1.tmp" => File/Directory not found. "C:\Users\Adam\AppData\Local\avgchrome" => File/Directory not found. "C:\Users\Adam\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z" => File/Directory not found. "C:\Users\Adam\AppData\Roaming\BabSolution" => File/Directory not found. "C:\Users\Adam\AppData\Roaming\Babylon" => File/Directory not found. "C:\ProgramData\Babylon" => File/Directory not found. "C:\Users\Adam\AppData\Roaming\DSite" directory move: Could not move "C:\Users\Adam\AppData\Roaming\DSite" directory. => Scheduled to move on reboot. C:\Users\Adam\AppData\Roaming\sp_data.sys => Moved successfully. =========== Result of Scheduled Files to move =========== "C:\Users\Adam\AppData\Roaming\DSite" => Directory could not move. ==== End of Fixlog ====