Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 07-12-2014 01 Ran by Agnese at 2014-12-08 09:15:23 Run:2 Running from C:\Users\Agnese\Downloads\FRST Loaded Profile: Agnese (Available profiles: Agnese) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED) S2 ServUpdater; C:\Users\Agnese\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd) [File not signed] S2 SoftwareUpd; C:\Users\Agnese\AppData\Local\SoftwareUpdater\SoftwareUpdService.exe [161280 2012-04-23] (SoftwareUpdService) [File not signed] R2 WindowsProtectManger; C:\ProgramData\WindowsProtectManger\wprotectmanager.exe [591776 2014-06-11] (Fuyu LIMITED) <==== ATTENTION S2 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [X] U4 eabfiltr; No ImagePath S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X] S3 XDva389; \??\C:\Windows\system32\XDva389.sys [X] S3 XDva390; \??\C:\Windows\system32\XDva390.sys [X] S3 XDva391; \??\C:\Windows\system32\XDva391.sys [X] S3 XDva392; \??\C:\Windows\system32\XDva392.sys [X] S3 XDva393; \??\C:\Windows\system32\XDva393.sys [X] S3 XDva396; \??\C:\Windows\system32\XDva396.sys [X] S3 XDva397; \??\C:\Windows\system32\XDva397.sys [X] S3 XDva398; \??\C:\Windows\system32\XDva398.sys [X] S3 XDva399; \??\C:\Windows\system32\XDva399.sys [X] HKLM\...\Run: [Raildcall] => C:\Program Files\raidcall\raidcall.exe HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [PoService] => [X] HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\MountPoints2: {98589ab1-4daf-11e2-8615-00218600ddd9} - E:\Install.exe AppInit_DLLs: c:\progra~1\suptab\search~1.dll => c:\progra~1\suptab\search~1.dll File Not Found AppInit_DLLs: c:\progra~2\fastan~1\fastan~1.dll => c:\progra~2\fastan~1\fastan~1.dll File Not Found IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\dprotectsvc.exe: [Debugger] tasklist.exe IFEO\jumpflip: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\searchinstaller.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\searchprotector.exe: [Debugger] tasklist.exe IFEO\searchsettings.exe: [Debugger] tasklist.exe IFEO\searchsettings64.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\umbrella.exe: [Debugger] tasklist.exe IFEO\utiljumpflip.exe: [Debugger] tasklist.exe IFEO\volaro: [Debugger] tasklist.exe IFEO\vonteera: [Debugger] tasklist.exe IFEO\websteroids.exe: [Debugger] tasklist.exe IFEO\websteroidsservice.exe: [Debugger] tasklist.exe Startup: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VDownloader.lnk HKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\systemk\x64\sysapcrt.dll CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ShortcutWithArgument: C:\Users\Agnese\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 ShortcutWithArgument: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 ShortcutWithArgument: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 ShortcutWithArgument: C:\Users\Agnese\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 ShortcutWithArgument: C:\Users\Agnese\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 ProxyServer: [S-1-5-21-3345188048-2503292345-2761132505-1000] => 127.0.0.1:3128 HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&q={searchTerms} URLSearchHook: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 - (No Name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-page.com/?type=sc&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187 SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms} SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} URL = http://dts.search-results.com/sr?src=ieb&appid=0&systemid=2&sr=0&q={searchTerms} SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=169&itype=n&ver=12791&tm=366&src=ds&p={searchTerms} SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} URL = http://search.imesh.com/web?src=ieb&systemid=1&q={searchTerms} SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2304157 SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> URL http://www.trovigo.com/Results.aspx?gd=&ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP00BD660C-9943-41C6-B501-F505211C4974&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms} SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&AF=119998&babsrc=SP_ss&mntrId=14c6f9300000000000000021001d7d94 SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://isearch.avg.com/search?cid={02A8832A-EE1C-410D-81BA-5FDAD58BC8E2}&mid=e2592f55c8cd47d08a0dd168c0e4342a-966b0eeb361f725dfd5dac6960d91786b40c212e&lang=en&ds=pp011&pr=sa&d=2012-07-26 02:13:58&v=12.1.0.21&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} URL = SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} URL = SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = BHO: Wincore Mediabar -> {28387537-e3f9-4ed7-860c-11e69af4a8a0} -> C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll No File BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll No File BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File BHO: Wincore Mediabar -> {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} -> C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll () BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File Toolbar: HKLM - Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll No File Toolbar: HKLM - Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll () FF Plugin: @java.com/DTPlugin,version=10.5.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKU\S-1-5-21-3345188048-2503292345-2761132505-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\default-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\delta-homes.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\whitesmoke.xml CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\GoogleUpdate.exe" No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.135\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.99\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.57\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.69\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe" No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe" No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.79\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.23.9\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe" No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Chrome\Application\35.0.1916.153\delegate_execute.exe" No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.145\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.123\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.149\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.65\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe" No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.22.5\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.111\psuser.dll No File CustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.7\psuser.dll No File Task: {6202BF14-964F-4964-886C-5337E64CC556} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe Task: {87C18EC2-0150-4CC7-B6FD-7BA2920D095B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe C:\found.007 C:\Program Files\AppPitooU C:\Program Files\BearShare Applications C:\Program Files\Google\Chrome C:\Program Files\siaver Box C:\Program Files\SupTab C:\ProgramData\752a75c16f1088e3 C:\ProgramData\AppPitooU C:\ProgramData\IePluginServices C:\ProgramData\siaver Box C:\ProgramData\WindowsProtectManger C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RaidCall C:\Users\Agnese\AppData\Local\CRE C:\Users\Agnese\AppData\Local\Google\Chrome C:\Users\Agnese\AppData\Local\PosService C:\Users\Agnese\AppData\Local\ServUpdater C:\Users\Agnese\AppData\Local\SoftwareUpdater C:\Users\Agnese\AppData\Roaming\337Games C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\SendTo\Xfire Amico.lnk C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\RaidCall6.0_beta.lnk C:\Users\Agnese\Documents\Youcam C:\Users\Agnese\Downloads\Setup*.exe C:\Users\Agnese\Desktop\Desktop\337 GAMES.lnk C:\Users\Agnese\Desktop\Desktop\Google Chrome.lnk C:\Users\Agnese\Desktop\Desktop\Video Player.lnk C:\Users\Agnese\Desktop\Desktop\wakacje1\dondddddddddd.lnk C:\Users\Agnese\Desktop\Desktop\wakacje1\Guida Alice.lnk C:\Users\Agnese\Desktop\Desktop\wakacje1\Bit Che C:\Users\Agnese\Desktop\Desktop\idalia compleanno\ida comp Reg: reg delete HKCU\Software\Google /f Reg: reg delete HKLM\SOFTWARE\Google /f Reg: reg delete HKLM\SOFTWARE\Mozilla\Firefox\Extensions /f Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{64af91bf} /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Search" /f Reg: reg delete "HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main" /f CMD: for /d %f in (C:\Users\Agnese\AppData\Local\{*}) do rd /s /q "%f" CMD: dir /a "C:\Program Files" CMD: dir /a C:\ProgramData CMD: dir /a C:\Users\Agnese\AppData\Local CMD: dir /a C:\Users\Agnese\AppData\LocalLow CMD: dir /a C:\Users\Agnese\AppData\Roaming EmptyTemp: ***************** Processes closed successfully. IePluginServices => Service deleted successfully. ServUpdater => Service deleted successfully. SoftwareUpd => Service deleted successfully. WindowsProtectManger => Service deleted successfully. Web Assistant Updater => Service deleted successfully. eabfiltr => Service deleted successfully. EagleXNt => Service deleted successfully. XDva389 => Service deleted successfully. XDva390 => Service deleted successfully. XDva391 => Service deleted successfully. XDva392 => Service deleted successfully. XDva393 => Service deleted successfully. XDva396 => Service deleted successfully. XDva397 => Service deleted successfully. XDva398 => Service deleted successfully. XDva399 => Service deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Raildcall => value deleted successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Windows\CurrentVersion\Run\\PoService => value deleted successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{98589ab1-4daf-11e2-8615-00218600ddd9}" => Key deleted successfully. "HKCR\CLSID\{98589ab1-4daf-11e2-8615-00218600ddd9}" => Key not found. "c:\progra~1\suptab\search~1.dll" => Value Data removed successfully. "c:\progra~2\fastan~1\fastan~1.dll" => Value Data removed successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bitguard.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bprotect.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bpsvc.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserdefender.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserprotect.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsersafeguard.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\dprotectsvc.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\jumpflip" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\protectedsearch.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchinstaller.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotection.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotector.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchsettings.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchsettings64.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\snapdo.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\stinst32.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\stinst64.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\umbrella.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\utiljumpflip.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\volaro" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\vonteera" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\websteroids.exe" => Key deleted successfully. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\websteroidsservice.exe" => Key deleted successfully. C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VDownloader.lnk => Moved successfully. HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls\\x64 => value deleted successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. C:\Users\Agnese\Desktop\Mozilla Firefox.lnk => Shortcut argument was removed successfully. C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk => Shortcut argument was removed successfully. C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk => Shortcut argument was restored successfully. C:\Users\Agnese\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => Shortcut argument was removed successfully. C:\Users\Agnese\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk => Shortcut argument was removed successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk => Shortcut argument was removed successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} => value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. "HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key not found. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}" => Key deleted successfully. "HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}" => Key not found. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}" => Key deleted successfully. "HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}" => Key not found. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}" => Key deleted successfully. "HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}" => Key not found. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key deleted successfully. "HKCR\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key not found. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\ToolbarSearchProviderProgress => value deleted successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\URL => value deleted successfully. HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SuggestionsURL_JSON => value deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key deleted successfully. "HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key not found. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. "HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key not found. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key deleted successfully. "HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key not found. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}" => Key deleted successfully. "HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}" => Key not found. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}" => Key deleted successfully. "HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}" => Key not found. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}" => Key deleted successfully. "HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}" => Key not found. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key deleted successfully. "HKCR\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-e3f9-4ed7-860c-11e69af4a8a0}" => Key deleted successfully. "HKCR\CLSID\{28387537-e3f9-4ed7-860c-11e69af4a8a0}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" => Key deleted successfully. "HKCR\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" => Key deleted successfully. "HKCR\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}" => Key deleted successfully. "HKCR\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{28387537-e3f9-4ed7-860c-11e69af4a8a0} => value deleted successfully. "HKCR\CLSID\{28387537-e3f9-4ed7-860c-11e69af4a8a0}" => Key not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} => value deleted successfully. "HKCR\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}" => Key not found. "HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1" => Key deleted successfully. C:\Windows\system32\npDeployJava1.dll => Moved successfully. "HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3" => Key deleted successfully. C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll => Moved successfully. "HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9" => Key deleted successfully. C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll not found. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\MozillaPlugins\@tools.google.com/Google Update;version=3" => Key deleted successfully. C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll not found. "C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml" => not found. "C:\Program Files\mozilla firefox\searchplugins\default-search.xml" => not found. "C:\Program Files\mozilla firefox\searchplugins\delta-homes.xml" => not found. "C:\Program Files\mozilla firefox\searchplugins\whitesmoke.xml" => not found. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}" => Key deleted successfully. "HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6202BF14-964F-4964-886C-5337E64CC556}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6202BF14-964F-4964-886C-5337E64CC556}" => Key deleted successfully. C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{87C18EC2-0150-4CC7-B6FD-7BA2920D095B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{87C18EC2-0150-4CC7-B6FD-7BA2920D095B}" => Key deleted successfully. C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => Key deleted successfully. C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully. C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully. C:\found.007 => Moved successfully. C:\Program Files\AppPitooU => Moved successfully. C:\Program Files\BearShare Applications => Moved successfully. "C:\Program Files\Google\Chrome" => File/Directory not found. C:\Program Files\siaver Box => Moved successfully. C:\Program Files\SupTab => Moved successfully. C:\ProgramData\752a75c16f1088e3 => Moved successfully. C:\ProgramData\AppPitooU => Moved successfully. C:\ProgramData\IePluginServices => Moved successfully. C:\ProgramData\siaver Box => Moved successfully. C:\ProgramData\WindowsProtectManger => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RaidCall => Moved successfully. C:\Users\Agnese\AppData\Local\CRE => Moved successfully. "C:\Users\Agnese\AppData\Local\Google\Chrome" => File/Directory not found. C:\Users\Agnese\AppData\Local\PosService => Moved successfully. C:\Users\Agnese\AppData\Local\ServUpdater => Moved successfully. C:\Users\Agnese\AppData\Local\SoftwareUpdater => Moved successfully. C:\Users\Agnese\AppData\Roaming\337Games => Moved successfully. C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\SendTo\Xfire Amico.lnk => Moved successfully. C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\RaidCall6.0_beta.lnk => Moved successfully. C:\Users\Agnese\Documents\Youcam => Moved successfully. C:\Users\Agnese\Downloads\Setup*.exe => Moved successfully. C:\Users\Agnese\Desktop\Desktop\337 GAMES.lnk => Moved successfully. C:\Users\Agnese\Desktop\Desktop\Google Chrome.lnk => Moved successfully. C:\Users\Agnese\Desktop\Desktop\Video Player.lnk => Moved successfully. C:\Users\Agnese\Desktop\Desktop\wakacje1\dondddddddddd.lnk => Moved successfully. C:\Users\Agnese\Desktop\Desktop\wakacje1\Guida Alice.lnk => Moved successfully. C:\Users\Agnese\Desktop\Desktop\wakacje1\Bit Che => Moved successfully. C:\Users\Agnese\Desktop\Desktop\idalia compleanno\ida comp => Moved successfully. ========= reg delete HKCU\Software\Google /f ========= Operazione completata. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Google /f ========= Operazione completata. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Mozilla\Firefox\Extensions /f ========= Operazione completata. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{64af91bf} /f ========= Operazione completata. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Search" /f ========= Operazione completata. ========= End of Reg: ========= ========= reg delete "HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main" /f ========= Operazione completata. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main" /f ========= Operazione completata. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main" /f ========= Operazione completata. ========= End of Reg: ========= ========= for /d %f in (C:\Users\Agnese\AppData\Local\{*}) do rd /s /q "%f" ========= ========= End of CMD: ========= ========= dir /a "C:\Program Files" ========= Il volume nell'unit… C non ha etichetta. Numero di serie del volume: 14C6-F930 Directory di C:\Program Files 08/12/2014 09:21 . 08/12/2014 09:21 .. 06/12/2014 10:33 Adobe 17/08/2011 12:59 alaplaya 10/08/2012 00:23 Bohemia Interactive 06/12/2014 10:56 Common Files 23/05/2012 11:29 Conduit 14/07/2009 05:41 174 desktop.ini 14/07/2009 09:59 DVD Maker 07/07/2011 11:04 File comuni [C:\Program Files\Common Files] 08/07/2011 09:09 Gadu-Gadu 10 27/05/2012 17:10 GamersFirst 10/04/2012 09:54 Google 12/10/2013 22:07 Gore Special Edition 10/12/2013 19:15 Hewlett-Packard 16/10/2011 12:54 HP 07/07/2011 11:45 HP DVB-T TV Tuner 04/04/2012 16:25 HyperCam 2 29/05/2012 09:43 iMesh Applications 02/06/2014 11:26 InstallShield Installation Information 07/07/2011 11:46 Intel 26/07/2012 01:42 Internet Explorer 21/02/2013 14:04 iPod 21/02/2013 14:05 iTunes 25/08/2014 09:49 K-Lite Codec Pack 18/08/2012 16:56 KBot 23/11/2014 16:45 Malwarebytes' Anti-Malware 19/10/2012 19:07 Microsoft Chart Controls 14/07/2009 09:59 Microsoft Games 07/07/2011 12:08 Microsoft Office 24/07/2014 15:06 Microsoft Silverlight 01/11/2011 15:49 Microsoft SQL Server Compact Edition 07/07/2011 12:08 Microsoft Visual Studio 07/07/2011 12:07 Microsoft Visual Studio 8 07/07/2011 16:09 Microsoft Works 15/07/2011 08:13 Microsoft.NET 07/12/2014 20:27 Mozilla Firefox 07/12/2014 20:27 Mozilla Maintenance Service 07/07/2011 12:08 MSBuild 09/07/2011 07:10 MSXML 4.0 07/07/2011 14:14 Nero 23/05/2012 11:57 NVIDIA Corporation 28/10/2012 19:17 Opera 22/05/2012 17:57 Pando Networks 21/07/2011 23:44 PhotoScape 12/10/2013 22:08 Point Blank Italia 12/10/2013 22:12 Profibot 04/04/2013 17:27 RaidCall 04/04/2013 17:28 raidcall6.0_beta 20/03/2012 18:56 Real 14/07/2009 05:52 Reference Assemblies 02/06/2014 11:26 Samsung 17/06/2012 12:24 SDA 18/09/2014 15:36 Skype 14/08/2011 15:21 SmartSound Software 23/08/2012 16:51 Sony 12/10/2013 22:12 TeamSpeak 3 Client 07/07/2011 11:14 TrueSuite 14/07/2009 05:53 Uninstall Information 02/06/2012 19:16 Video Codec 07/07/2011 12:12 VideoLAN 02/09/2011 00:48 WhiteSmoke 14/07/2009 09:21 Windows Defender 14/07/2009 09:59 Windows Journal 02/08/2012 14:36 Windows Live 07/07/2011 13:26 Windows Mail 07/07/2011 13:26 Windows Media Player 07/07/2011 11:04 Windows NT 14/07/2009 09:21 Windows Photo Viewer 14/07/2009 05:52 Windows Portable Devices 14/07/2009 09:21 Windows Sidebar 16/06/2012 12:02 WinRAR 07/07/2011 12:13 WinZip 02/06/2012 19:16 Xvid 1 File 174 byte 73 Directory 79.644.327.936 byte disponibili ========= End of CMD: ========= ========= dir /a C:\ProgramData ========= Il volume nell'unit… C non ha etichetta. Numero di serie del volume: 14C6-F930 Directory di C:\ProgramData 08/12/2014 09:21 . 08/12/2014 09:21 .. 21/02/2013 14:05 188F1432-103A-4ffb-80F1-36B633C5C9E1 26/05/2012 16:47 211C5 06/12/2014 10:33 Adobe 07/07/2011 14:15 Ahead 21/02/2013 14:02 Apple 21/02/2013 14:04 Apple Computer 14/07/2009 05:53 Application Data [C:\ProgramData] 21/03/2014 12:33 AVG 20/03/2012 18:41 Babylon 23/04/2012 14:20 Blizzard Entertainment 09/04/2012 09:16 boost_interprocess 26/07/2012 01:13 Common Files 14/08/2011 15:22 CyberLink 07/07/2011 11:04 Dati applicazioni [C:\ProgramData] 14/07/2009 05:53 Desktop [C:\Users\Public\Desktop] 08/11/2012 20:38 DivX 07/07/2011 11:04 Documenti [C:\Users\Public\Documents] 14/07/2009 05:53 Documents [C:\Users\Public\Documents] 07/07/2011 11:14 Downloaded Installations 14/08/2011 15:21 eSellerate 18/07/2014 07:52 Fast And Safe 14/07/2009 05:53 Favorites [C:\Users\Public\Favorites] 08/07/2011 09:09 Gadu-Gadu 10 20/03/2012 18:58 Google 16/10/2011 12:52 HP 16/10/2011 12:56 358 hpzinstall.log 23/11/2014 16:45 Malwarebytes 27/10/2012 18:25 McAfee 07/07/2011 11:04 Menu Avvio [C:\ProgramData\Microsoft\Windows\Start Menu] 09/05/2012 14:00 Microsoft 13/11/2014 03:04 Microsoft Help 07/07/2011 11:04 Modelli [C:\ProgramData\Microsoft\Windows\Templates] 08/07/2012 16:10 Mozilla 07/07/2011 14:14 Nero 07/07/2011 11:40 NVIDIA 19/12/2011 19:23 OpenFM 18/11/2014 10:05 PMB Files 07/07/2011 11:04 Preferiti [C:\Users\Public\Favorites] 18/11/2014 10:04 Real 04/08/2013 12:02 regid.1986-12.com.adobe 08/08/2014 18:56 Samsung 25/08/2012 20:12 Screaming Bee 18/09/2014 15:36 Skype 14/08/2011 15:21 SmartSound Software Inc 23/08/2012 16:51 Sony 14/07/2009 05:53 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 05/05/2012 12:54 Sun 14/08/2011 15:21 Temp 14/07/2009 05:53 Templates [C:\ProgramData\Microsoft\Windows\Templates] 07/07/2011 11:14 TrueSuite 07/04/2012 21:01 WinZip 21/03/2014 12:32 {01BD4FC9-2F86-4706-A62E-774BB7E9D308} 1 File 358 byte 53 Directory 79.643.279.360 byte disponibili ========= End of CMD: ========= ========= dir /a C:\Users\Agnese\AppData\Local ========= Il volume nell'unit… C non ha etichetta. Numero di serie del volume: 14C6-F930 Directory di C:\Users\Agnese\AppData\Local 08/12/2014 09:21 . 08/12/2014 09:21 .. 08/12/2014 02:00 Adobe 04/09/2011 09:06 Ahead 14/08/2011 15:20 Apple 21/02/2013 14:06 Apple Computer 08/11/2012 20:38 ApplicationHistory 07/07/2011 13:52 Apps 10/12/2013 18:44 0 AtStart.txt 20/03/2012 18:41 Babylon 27/05/2012 17:07 Conduit 07/07/2011 11:04 Cronologia [C:\Users\Agnese\AppData\Local\Microsoft\Windows\History] 07/07/2011 11:04 Dati applicazioni [C:\Users\Agnese\AppData\Local] 02/09/2012 13:27 14.336 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 07/07/2011 13:53 Deployment 03/12/2014 19:04 Diagnostics 02/06/2014 11:34 Downloaded Installations 10/12/2013 18:44 0 DSwitch.txt 07/12/2014 20:32 ElevatedDiagnostics 08/11/2012 22:22 Facebook 26/07/2012 01:45 94 fusioncache.dat 08/11/2012 20:46 GameSpy 04/08/2013 12:07 114.184 GDIPFONTCACHEV1.DAT 06/12/2014 11:03 Google 07/12/2014 20:02 787.138 IconCache.db 21/03/2014 19:54 JDownloader 0.9 16/08/2012 19:38 Macromedia 13/08/2013 17:09 Microsoft 31/05/2012 14:05 Microsoft Games 07/07/2011 12:06 Microsoft Help 03/12/2014 13:06 Mozilla 27/10/2012 18:31 Opera 12/10/2013 22:13 Overwolf 18/07/2011 23:33 PackageAware 07/12/2014 20:33 PMB Files 15/07/2012 00:56 PointBlank 02/06/2014 09:00 Programs 23/05/2012 12:43 PunkBuster 10/12/2013 18:44 0 QSwitch.txt 19/10/2012 21:39 SKIDROW 21/04/2014 07:28 Skype 23/08/2012 16:59 Sony 01/11/2012 16:31 TeamSpeak 3 Client 08/12/2014 09:21 Temp 07/07/2011 11:04 Temporary Internet Files [C:\Users\Agnese\AppData\Local\Microsoft\Windows\Temporary Internet Files] 16/07/2011 23:20 Unity 26/07/2012 08:43 VirtualStore 05/11/2014 10:08 Windows Live 29/02/2012 20:06 WinZip 7 File 915.752 byte 42 Directory 79.643.275.264 byte disponibili ========= End of CMD: ========= ========= dir /a C:\Users\Agnese\AppData\LocalLow ========= Il volume nell'unit… C non ha etichetta. Numero di serie del volume: 14C6-F930 Directory di C:\Users\Agnese\AppData\LocalLow 08/07/2014 11:27 . 08/07/2014 11:27 .. 12/10/2011 07:08 Adobe 14/08/2011 15:14 Apple Computer 20/03/2012 19:08 BabylonToolbar 23/05/2012 11:29 Conduit 31/07/2011 23:49 imeshbandmltbpi 23/06/2012 15:23 Incredibar.com 07/04/2012 07:28 mediabarbs 12/10/2011 07:08 Microsoft 01/07/2012 13:30 Oracle 29/04/2012 10:31 raidcall 19/11/2014 10:47 18.688 SkwConfig.bin 05/05/2012 12:52 Sun 23/05/2012 11:28 Temp 06/12/2014 10:43 Toolbar4 16/07/2011 23:20 Unity 02/09/2011 00:48 WhiteSmokeToolbar 07/04/2012 07:28 wincorebsband 11/04/2012 16:12 wincoreimband 28/01/2013 10:29 WINZIP_P4887 08/07/2014 11:27 {286D8163-AD91-FE69-0708-40FE6924F251} 23/06/2014 08:24 {943B4541-3FCE-0927-8470-323D42E914D8} 1 File 18.688 byte 22 Directory 79.643.271.168 byte disponibili ========= End of CMD: ========= ========= dir /a C:\Users\Agnese\AppData\Roaming ========= Il volume nell'unit… C non ha etichetta. Numero di serie del volume: 14C6-F930 Directory di C:\Users\Agnese\AppData\Roaming 08/12/2014 09:21 . 08/12/2014 09:21 .. 04/04/2013 22:53 .minecraft 29/07/2013 16:14 .techniclauncher 04/08/2013 12:07 Adobe 11/10/2011 08:59 Ahead 21/02/2013 14:47 Apple Computer 21/03/2014 12:32 AVG 20/03/2012 18:41 Babylon 08/07/2011 08:48 CoSoSys 14/08/2011 15:22 Cyberlink 07/07/2011 15:55 DivX 29/05/2012 10:06 DVDVideoSoft 08/07/2011 09:10 Gadu-Gadu 10 06/12/2014 11:45 Google 10/12/2013 19:14 hpqLog 07/07/2011 11:04 Identities 07/07/2011 11:46 InstallShield 03/11/2012 20:48 LolClient 07/07/2011 13:56 Macromedia 23/11/2014 16:45 Malwarebytes 14/07/2009 09:58 Media Center Programs 25/08/2012 19:48 Microsoft 08/07/2012 16:10 Mozilla 14/11/2014 18:22 MPC-HC 06/04/2012 21:07 MusicNet 02/06/2014 09:00 OpenCandy 08/07/2011 09:20 OpenFM 27/10/2012 18:31 Opera 21/07/2011 23:54 PhotoScape 23/05/2012 11:58 138.904 PnkBstrK.sys 23/08/2012 17:02 Publish Providers 12/06/2012 17:03 Real 21/03/2014 12:21 rmi 02/06/2014 11:26 Samsung 25/08/2012 20:12 Screaming Bee 08/12/2014 09:08 Skype 10/11/2012 18:54 skyz 18/10/2012 20:22 Soldat 25/08/2012 10:16 Sony 31/01/2014 08:13 TS3Client 24/11/2012 14:48 ts3overlay 17/07/2011 00:35 Unity 04/04/2013 17:24 uTorrent 06/09/2013 11:39 vlc 02/09/2011 00:47 WhiteSmoke 04/10/2011 07:20 WinRAR 1 File 138.904 byte 46 Directory 79.643.271.168 byte disponibili ========= End of CMD: ========= EmptyTemp: => Removed 18.4 GB temporary data. The system needed a reboot. ==== End of Fixlog ====