Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-05-2015 Ran by Admin at 2015-05-03 20:46:23 Run:1 Running from C:\Users\Admin\Downloads Loaded Profiles: UpdatusUser & Admin (Available profiles: UpdatusUser & Admin) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=kingstonxsv300s37a120g_50026b7234073fd8 HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=kingstonxsv300s37a120g_50026b7234073fd8 HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=kingstonxsv300s37a120g_50026b7234073fd8 HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=kingstonxsv300s37a120g_50026b7234073fd8 HKU\S-1-5-21-3349880804-1389414201-389946525-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=kingstonxsv300s37a120g_50026b7234073fd8 HKU\S-1-5-21-3349880804-1389414201-389946525-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=kingstonxsv300s37a120g_50026b7234073fd8 HKU\S-1-5-21-3349880804-1389414201-389946525-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT 4-1389414201-389946525-1000 -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = http://search.yac.mx/web/?q={searchTerms}&type=ds&from=yac&uid=kingstonxsv300s37a120g_50026b7234073fd8&ts=1417649375 SearchScopes: HKU\S-1-5-21-3349880804-1389414201-389946525-1000 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = http://search.yac.mx/web/?q={searchTerms}&type=ds&from=yac&uid=kingstonxsv300s37a120g_50026b7234073fd8&ts=1417649375 BHO: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File BHO: No Name -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> No File Toolbar: HKU\S-1-5-21-3349880804-1389414201-389946525-1001 -> No Name - {EF55CB9F-2729-4BFF-AFE5-EE59593B16E8} - No File Toolbar: HKU\S-1-5-21-3349880804-1389414201-389946525-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File FF SelectedSearchEngineuser_pref("browser.search.selectedEngine","Yahoo! Search");: user_pref("browser.search.selectedEngine","Yahoo! Search"); FF DefaultSearchEngineuser_pref("browser.search.defaultenginename","Yahoo! Search");: user_pref("browser.search.defaultenginename","Yahoo! Search"); S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X] S2 Update Greener Web; "C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe" [X] S2 Util Greener Web; "C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.exe" [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] C:\Users\Admin\AppData\Local\{728942AB-FF11-4EF1-9968-E7A686C47301} C:\ProgramData\Norton Task: {69C63B1E-CA94-4934-80DA-8DF5C50096DE} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\SymErr.exe Task: {87ECA4F5-EEFE-454E-9E1A-F683B294FAF0} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\SymErr.exe EmptyTemp: ***************** Processes closed successfully. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully. HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Key not found. C:\Windows\system32\GroupPolicy\Machine => Moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully. C:\Windows\SysWOW64\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page => value deleted successfully. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value deleted successfully. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page => value deleted successfully. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value deleted successfully. HKU\S-1-5-21-3349880804-1389414201-389946525-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Error setting value. HKU\S-1-5-21-3349880804-1389414201-389946525-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Error setting value. HKU\S-1-5-21-3349880804-1389414201-389946525-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}" => Key deleted successfully. HKCR\Wow6432Node\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key not found. 4-1389414201-389946525-1000 -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = http://search.yac.mx/web/?q={searchTerms}&type=ds&from=yac&uid=kingstonxsv300s37a120g_50026b7234073fd8&ts=1417649375 => Error: No automatic fix found for this entry. HKU\S-1-5-21-3349880804-1389414201-389946525-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF} => Key not found. HKCR\CLSID\{425ED333-6083-428a-92C9-0CFC28B9D1BF} => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}" => Key deleted successfully. HKCR\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6} => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}" => Key deleted successfully. HKCR\CLSID\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} => Key not found. HKU\S-1-5-21-3349880804-1389414201-389946525-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF55CB9F-2729-4BFF-AFE5-EE59593B16E8} => value deleted successfully. HKCR\CLSID\{EF55CB9F-2729-4BFF-AFE5-EE59593B16E8} => Key not found. HKU\S-1-5-21-3349880804-1389414201-389946525-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully. "HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" => Key deleted successfully. Firefox SelectedSearchEngineuser_pref("browser.search.selectedEngine","Yahoo! Search"); deleted successfully. Firefox DefaultSearchEngineuser_pref("browser.search.defaultenginename","Yahoo! Search"); deleted successfully. MozillaMaintenance => Service deleted successfully. Update Greener Web => Service deleted successfully. Util Greener Web => Service deleted successfully. ew_hwusbdev => Service deleted successfully. huawei_cdcacm => Service deleted successfully. huawei_enumerator => Service deleted successfully. C:\Users\Admin\AppData\Local\{728942AB-FF11-4EF1-9968-E7A686C47301} => Moved successfully. C:\ProgramData\Norton => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{69C63B1E-CA94-4934-80DA-8DF5C50096DE}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{69C63B1E-CA94-4934-80DA-8DF5C50096DE}" => Key deleted successfully. C:\Windows\System32\Tasks\Norton Identity Safe\Norton Error Processor => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Identity Safe\Norton Error Processor" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{87ECA4F5-EEFE-454E-9E1A-F683B294FAF0}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{87ECA4F5-EEFE-454E-9E1A-F683B294FAF0}" => Key deleted successfully. C:\Windows\System32\Tasks\Norton Identity Safe\Norton Error Analyzer => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Identity Safe\Norton Error Analyzer" => Key deleted successfully. EmptyTemp: => Removed 1.2 GB temporary data. The system needed a reboot. ==== End of Fixlog 20:47:06 ====