Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 19-01-2015 Ran by User at 2015-01-23 14:54:18 Run:1 Running from C:\Users\User\Downloads Loaded Profiles: User (Available profiles: User & Administrator) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: R2 Verifies and fixes application compatibility issues; C:\Users\User\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe [87208 2014-12-31] () HKLM-x32\...\Run: [mbot_gb_145] => [X] HKU\S-1-5-21-2861025251-1746614414-2761470792-1001\...\RunOnce: [Adobe Speed Launcher] => 1421339581 HKU\S-1-5-21-2861025251-1746614414-2761470792-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:56892;https=127.0.0.1:56892 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com Toolbar: HKU\S-1-5-21-2861025251-1746614414-2761470792-1001 -> No Name - {4B4D5056-372D-5350-00A7-7A786E7484D7} - No File C:\Program Files\C76D26E8-6482-46EB-9CFD-364D4E20F8C1 C:\ProgramData\Informer Technologies, Inc C:\Users\User\AppData\Local\CrashDumps C:\Users\User\AppData\Local\Google C:\Users\User\AppData\Roaming\Compatibility Verifier C:\Users\User\Desktop\Continue installation .lnk C:\Users\User\Downloads\*(*)-dp*.exe C:\Users\User\Downloads\Setup*.exe C:\Users\User\Downloads\siinst.exe Reg: reg delete HKCU\Software\Google /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Google /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. Verifies and fixes application compatibility issues => Service deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mbot_gb_145 => value deleted successfully. HKU\S-1-5-21-2861025251-1746614414-2761470792-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Adobe Speed Launcher => value deleted successfully. "HKU\S-1-5-21-2861025251-1746614414-2761470792-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKU\S-1-5-21-2861025251-1746614414-2761470792-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B4D5056-372D-5350-00A7-7A786E7484D7} => value deleted successfully. HKCR\CLSID\{4B4D5056-372D-5350-00A7-7A786E7484D7} => Key not found. C:\Program Files\C76D26E8-6482-46EB-9CFD-364D4E20F8C1 => Moved successfully. C:\ProgramData\Informer Technologies, Inc => Moved successfully. C:\Users\User\AppData\Local\CrashDumps => Moved successfully. C:\Users\User\AppData\Local\Google => Moved successfully. C:\Users\User\AppData\Roaming\Compatibility Verifier => Moved successfully. C:\Users\User\Desktop\Continue installation .lnk => Moved successfully. C:\Users\User\Downloads\*(*)-dp*.exe => Moved successfully. "C:\Users\User\Downloads\Setup*.exe" => File/Directory not found. C:\Users\User\Downloads\siinst.exe => Moved successfully. ========= reg delete HKCU\Software\Google /f ========= Operacja ukonczona pomyslnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukonczona pomyslnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Google /f ========= Operacja ukonczona pomyslnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukonczona pomyslnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukonczona pomyslnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukonczona pomyslnie. ========= End of Reg: ========= EmptyTemp: => Removed 94.8 MB temporary data. The system needed a reboot. ==== End of Fixlog 15:02:27 ====