Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-12-2013 02 Ran by Joanna at 2013-12-22 12:06:26 Run:2 Running from C:\Users\Joanna\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\...\Run: [NextLive] - C:\windows\SysWOW64\rundll32.exe "C:\Users\Joanna\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [761024 2013-12-13] () StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://start.qone8.com/?type=sc&ts=1382798333&from=cor&uid=ST500LT012-9WS142_W0V8DJ4BXXXXW0V8DJ4B SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382798335&from=cor&uid=ST500LT012-9WS142_W0V8DJ4BXXXXW0V8DJ4B&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382798335&from=cor&uid=ST500LT012-9WS142_W0V8DJ4BXXXXW0V8DJ4B&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382798335&from=cor&uid=ST500LT012-9WS142_W0V8DJ4BXXXXW0V8DJ4B&q={searchTerms} SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1382798335&from=cor&uid=ST500LT012-9WS142_W0V8DJ4BXXXXW0V8DJ4B&q={searchTerms} S2 WsysSvc; C:\ProgramData\eSafe\eGdpSvc.exe [x] S3 SBIOSIO; \??\C:\Windows\Temp\SBIOSIO64.SYS [x] S3 TVICPORT; \??\C:\windows\system32\DRIVERS\TVICPORT.SYS [x] 2013-12-21 18:39 - 2013-12-22 10:45 - 00000000 ____D C:\Users\Joanna\AppData\Roaming\newnext.me 2013-12-21 18:39 - 2013-12-21 18:40 - 00000000 ____D C:\Users\Joanna\AppData\Local\Mobogenie 2013-12-21 18:39 - 2013-12-21 18:39 - 00000000 ____D C:\Users\Joanna\Documents\Mobogenie 2013-12-21 18:39 - 2013-12-21 18:39 - 00000000 ____D C:\Users\Joanna\AppData\Local\genienext 2013-12-21 18:39 - 2013-12-21 18:39 - 00000000 ____D C:\Users\Joanna\AppData\Local\cache 2013-12-21 18:39 - 2013-12-21 18:39 - 00000000 _____ C:\Users\Joanna\daemonprocess.txt 2013-12-21 18:38 - 2013-12-21 18:40 - 00000000 ____D C:\Program Files (x86)\Mobogenie 2013-12-14 19:53 - 2013-12-14 19:53 - 00000000 ____D C:\Users\Joanna\.android ***************** HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => Value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. WsysSvc => Service not found. SBIOSIO => Service not found. TVICPORT => Service not found. "C:\Users\Joanna\AppData\Roaming\newnext.me" directory move: C:\Users\Joanna\AppData\Roaming\newnext.me\nengine.cookie => Moved successfully. C:\Users\Joanna\AppData\Roaming\newnext.me\nengine.dll => Moved successfully. C:\Users\Joanna\AppData\Roaming\newnext.me\cache\spark.bin => Moved successfully. Could not move "C:\Users\Joanna\AppData\Roaming\newnext.me" directory. => Scheduled to move on reboot. C:\Users\Joanna\AppData\Local\Mobogenie => Moved successfully. C:\Users\Joanna\Documents\Mobogenie => Moved successfully. C:\Users\Joanna\AppData\Local\genienext => Moved successfully. C:\Users\Joanna\AppData\Local\cache => Moved successfully. C:\Users\Joanna\daemonprocess.txt => Moved successfully. C:\Program Files (x86)\Mobogenie => Moved successfully. C:\Users\Joanna\.android => Moved successfully. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2013-12-22 12:08:19)<= C:\Users\Joanna\AppData\Roaming\newnext.me => Moved successfully. ==== End of Fixlog ====