Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-10-2013 Ran by Daniel at 2013-11-04 21:51:33 Run:1 Running from E:\1 Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Users\Daniel\AppData\Local\Temp\invoice_988895.pdf.exe C:\Users\Daniel\AppData\Local\Temp\gdirector.exe C:\Users\Daniel\AppData\Local\Temp\NOSEventMessages.dll S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x] CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File CHR RestoreOnStartup: "hxxp://www.google.com/", "hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP", "hxxp://www1.delta-search.com/?affID=121845&tt=gc_&babsrc=HP_ss&mntrId=5A3FB888E3E69E01" FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll No File FF SearchPlugin: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\yvglvi6j.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\yvglvi6j.default\searchplugins\delta.xml FF Homepage: hxxp://search.myheritage.com/ SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-se...A3FB888E3E69E01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-se...A3FB888E3E69E01 HKCU\...\Run: [] - [x] ***************** Could not move "C:\Users\Daniel\AppData\Local\Temp\invoice_988895.pdf.exe" => Scheduled to move on reboot. "C:\Users\Daniel\AppData\Local\Temp\gdirector.exe" => File/Directory not found. C:\Users\Daniel\AppData\Local\Temp\NOSEventMessages.dll => Moved successfully. VBoxNetFlt => Service deleted successfully. c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll not found. CHR RestoreOnStartup: "hxxp://www.google.com/", "hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP", "hxxp://www1.delta-search.com/?affID=121845&tt=gc_&babsrc=HP_ss&mntrId=5A3FB888E3E69E01" ==> The Chrome "Settings" can be used to fix the entry. HKCU\Software\MozillaPlugins\intel.com/AppUp => Key deleted successfully. C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll not found. "C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\yvglvi6j.default\searchplugins\babylon.xml" => not found. "C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\yvglvi6j.default\searchplugins\delta.xml" => not found. Firefox homepage deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. =========== Result of Scheduled Files to move =========== C:\Users\Daniel\AppData\Local\Temp\invoice_988895.pdf.exe => Moved successfully. ==== End of Fixlog ====