Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-04-2014 Ran by user at 2014-04-20 16:07:56 Run:1 Running from C:\Users\user\Desktop\frst Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\...\Run: [LiveSupport] - "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log SearchScopes: HKCU - {6CF40D91-D467-44DA-BB2B-9BAE7C617CF4} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=38C73C35-E7CB-4758-8C4C-0CF75E5E672E&apn_sauid=542B8474-BDAE-4375-A341-0DD9AA3D342F BHO: IMageCoonvereter - {9DB85E3A-AA48-05B4-44B2-2D380AEE9231} - C:\ProgramData\IMageCoonvereter\WpccU8YgFg.x64.dll () BHO: tpErfectcoupoon - {A364D93D-96D3-3200-FE8C-E28C3831EB32} - C:\ProgramData\tpErfectcoupoon\Y44qrt6.x64.dll () BHO-x32: IMageCoonvereter - {9DB85E3A-AA48-05B4-44B2-2D380AEE9231} - C:\ProgramData\IMageCoonvereter\WpccU8YgFg.dll () BHO-x32: tpErfectcoupoon - {A364D93D-96D3-3200-FE8C-E28C3831EB32} - C:\ProgramData\tpErfectcoupoon\Y44qrt6.dll () Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon CMD: sc config "Internet Manager. RunOuc" start= demand ***************** HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\Software\Microsoft\Windows\CurrentVersion\Run\\LiveSupport => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6CF40D91-D467-44DA-BB2B-9BAE7C617CF4} => Key deleted successfully. HKCR\CLSID\{6CF40D91-D467-44DA-BB2B-9BAE7C617CF4} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9DB85E3A-AA48-05B4-44B2-2D380AEE9231} => Key deleted successfully. HKCR\CLSID\{9DB85E3A-AA48-05B4-44B2-2D380AEE9231} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A364D93D-96D3-3200-FE8C-E28C3831EB32} => Key deleted successfully. HKCR\CLSID\{A364D93D-96D3-3200-FE8C-E28C3831EB32} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9DB85E3A-AA48-05B4-44B2-2D380AEE9231} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{9DB85E3A-AA48-05B4-44B2-2D380AEE9231} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A364D93D-96D3-3200-FE8C-E28C3831EB32} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{A364D93D-96D3-3200-FE8C-E28C3831EB32} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully. HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully. HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully. C:\windows\system32\GroupPolicy\Machine => Moved successfully. C:\windows\system32\GroupPolicy\GPT.ini => Moved successfully. HKLM\SOFTWARE\Policies\Google => Key deleted successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com => Value deleted successfully. ========= sc config "Internet Manager. RunOuc" start= demand ========= [SC] ChangeServiceConfig SUKCES ========= End of CMD: ========= The system needed a reboot. ==== End of Fixlog ====