Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014 Ran by Aoeseo at 2014-04-04 20:52:49 Run:1 Running from C:\Users\Aoeseo\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR StartMenuInternet: Google Chrome - Chrome.exe StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: FunDeoals - {C2BC6BE3-4F64-AEFB-BBF6-292FBAB2CA9D} - C:\ProgramData\FunDeoals\JP.x64.dll No File S4 ProtectMonitor; C:\Program Files (x86)\PCData\StartHelp.exe [90681 2014-03-03] () S2 Util PacFunction; "C:\Program Files (x86)\PacFunction\bin\utilPacFunction.exe" [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] C:\Program Files\Enigma Software Group C:\Program Files (x86)\PCData C:\Program Files (x86)\safeWeub C:\Program Files (x86)\SW-Booster C:\ProgramData\c0b52d9e8a6bcb00 C:\ProgramData\Bsoft C:\ProgramData\InstallMate C:\ProgramData\safeWeub C:\Users\Aoeseo\AppData\Local\Comodo C:\Users\Administrator C:\Users\HomeGroupUser$ C:\Users\Guest ***************** HKLM\SOFTWARE\Policies\Google => Key deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2BC6BE3-4F64-AEFB-BBF6-292FBAB2CA9D} => Key deleted successfully. HKCR\CLSID\{C2BC6BE3-4F64-AEFB-BBF6-292FBAB2CA9D} => Key deleted successfully. ProtectMonitor => Service not found. Util PacFunction => Service deleted successfully. EagleX64 => Service deleted successfully. esgiguard => Service deleted successfully. C:\Program Files\Enigma Software Group => Moved successfully. C:\Program Files (x86)\PCData => Moved successfully. C:\Program Files (x86)\safeWeub => Moved successfully. C:\Program Files (x86)\SW-Booster => Moved successfully. C:\ProgramData\c0b52d9e8a6bcb00 => Moved successfully. C:\ProgramData\Bsoft => Moved successfully. C:\ProgramData\InstallMate => Moved successfully. C:\ProgramData\safeWeub => Moved successfully. C:\Users\Aoeseo\AppData\Local\Comodo => Moved successfully. C:\Users\Administrator => Moved successfully. C:\Users\HomeGroupUser$ => Moved successfully. C:\Users\Guest => Moved successfully. ==== End of Fixlog ====