Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-07-2014 01 Ran by Daglezja at 2014-07-09 20:03:28 Run:1 Running from C:\Users\Daglezja\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** Winlogon\Notify\ScCertProp-x32: wlnotify.dll [X] SearchScopes: HKCU - {17798397-8BEC-446A-AF71-B64572BF18C3} URL = http://startsear.ch/?aff=2&src=sp&cf=912d90bc-2ce4-11e1-a407-70f39546d9b6&q={searchTerms} SearchScopes: HKCU - {29851396-DCF3-488C-959F-B12C4F8CBA65} URL = http://search.babylon.com/?q={searchTerms}&affID=110809&tt=bandext_3312_8&babsrc=SP_ss&mntrId=0c1247290000000000000027105c40c4 FF SearchEngineOrder.1: Search the web (Babylon) FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", ""); C:\Users\Daglezja\AppData\Roaming\Mozilla\Firefox\Profiles\3ygcxs1d.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca} S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X] S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X] S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X] S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X] S3 PCDSRVC{127174DC-C366ED8B-06020000}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [X] Task: {255C7F70-78F2-4631-8076-6AFB46F81024} - System32\Tasks\FoxTab => C:\Users\Daglezja\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {C098FAA6-C230-4C7A-8D3A-D25053FC57BD} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\pcdrcui.exe [2010-06-08] (PC-Doctor, Inc.) Task: {D1CD0DF0-92E3-46F7-9935-2FDB5AED016D} - \BonanzaDealsUpdate No Task File <==== ATTENTION Task: C:\Windows\Tasks\FoxTab.job => C:\Users\Daglezja\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION ***************** 'HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp' => Key deleted successfully. 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{17798397-8BEC-446A-AF71-B64572BF18C3}' => Key deleted successfully. 'HKCR\CLSID\{17798397-8BEC-446A-AF71-B64572BF18C3}'=> Key not found. 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{29851396-DCF3-488C-959F-B12C4F8CBA65}' => Key deleted successfully. 'HKCR\CLSID\{29851396-DCF3-488C-959F-B12C4F8CBA65}'=> Key not found. Firefox SearchEngineOrder.1 deleted successfully. Firefox SelectedSearchEngine deleted successfully. C:\Users\Daglezja\AppData\Roaming\Mozilla\Firefox\Profiles\3ygcxs1d.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca} => Moved successfully. MREMP50a64 => Service deleted successfully. MREMPR5 => Service deleted successfully. MRENDIS5 => Service deleted successfully. MRESP50a64 => Service deleted successfully. PCDSRVC{127174DC-C366ED8B-06020000}_0 => Service deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{255C7F70-78F2-4631-8076-6AFB46F81024}' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{255C7F70-78F2-4631-8076-6AFB46F81024}' => Key deleted successfully. C:\Windows\System32\Tasks\FoxTab => Moved successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FoxTab' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C098FAA6-C230-4C7A-8D3A-D25053FC57BD}' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C098FAA6-C230-4C7A-8D3A-D25053FC57BD}' => Key deleted successfully. C:\Windows\System32\Tasks\SystemToolsDailyTest => Moved successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SystemToolsDailyTest' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D1CD0DF0-92E3-46F7-9935-2FDB5AED016D}' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1CD0DF0-92E3-46F7-9935-2FDB5AED016D}' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BonanzaDealsUpdate' => Key deleted successfully. C:\Windows\Tasks\FoxTab.job => Moved successfully. ==== End of Fixlog ====