Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:28-06-2014 02 Ran by User at 2014-06-28 21:38:19 Run:1 Running from C:\Users\User\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {0B0444A2-D132-4D76-A1A6-80FBC1151DDD} - System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-6 => C:\Program Files\Plus-HD-V1.4\Plus-HD-V1.4-novainstaller.exe <==== ATTENTION Task: {750665D6-1A2D-486B-BD8E-063B3F5BF252} - System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-4 => C:\Program Files\Plus-HD-V1.4\96431e5d-5723-4d78-ae7b-7096d51b336b-4.exe <==== ATTENTION Task: {89E22D4E-D5DD-4F61-9F24-30CE6DD4A502} - System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-11 => C:\Program Files\Plus-HD-V1.4\96431e5d-5723-4d78-ae7b-7096d51b336b-11.exe <==== ATTENTION Task: {9D6F2B2B-D6D6-464C-849D-9D15F3556F65} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-06-19] (globalUpdate) <==== ATTENTION Task: {A6ED7CC5-8259-4A0D-8966-65F95EECE72F} - System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-3 => C:\Program Files\Plus-HD-V1.4\96431e5d-5723-4d78-ae7b-7096d51b336b-3.exe <==== ATTENTION Task: {A7764CAA-F090-4086-83B4-411DCADAC9C5} - System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-7 => C:\Program Files\Plus-HD-V1.4\Plus-HD-V1.4-nova.exe [2014-06-19] (Plus HD) <==== ATTENTION Task: {D81A45A5-A7F4-460A-A707-7D01523AD9B7} - System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-1 => C:\Program Files\Plus-HD-V1.4\Plus-HD-V1.4-codedownloader.exe <==== ATTENTION Task: {E2F1F438-4E2A-4B53-96BA-852247A3E678} - System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-5 => C:\Program Files\Plus-HD-V1.4\96431e5d-5723-4d78-ae7b-7096d51b336b-5.exe <==== ATTENTION Task: C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-1.job => C:\Program Files\Plus-HD-V1.4\Plus-HD-V1.4-codedownloader.exe <==== ATTENTION Task: C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-11.job => C:\Program Files\Plus-HD-V1.4\96431e5d-5723-4d78-ae7b-7096d51b336b-11.exe <==== ATTENTION Task: C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-3.job => C:\Program Files\Plus-HD-V1.4\96431e5d-5723-4d78-ae7b-7096d51b336b-3.exe <==== ATTENTION Task: C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-4.job => C:\Program Files\Plus-HD-V1.4\96431e5d-5723-4d78-ae7b-7096d51b336b-4.exe <==== ATTENTION Task: C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-5.job => C:\Program Files\Plus-HD-V1.4\96431e5d-5723-4d78-ae7b-7096d51b336b-5.exe <==== ATTENTION Task: C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-6.job => C:\Program Files\Plus-HD-V1.4\Plus-HD-V1.4-novainstaller.exe <==== ATTENTION Task: C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-7.job => C:\Program Files\Plus-HD-V1.4\Plus-HD-V1.4-nova.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe C:\Program Files\Plus-HD-V1.4\Plus-HD-V1.4-nova.dll HKLM\...\RunOnce: [CleanSetup] - cmd /C rmdir /S /Q "C:\Users\User\AppData\Local\Temp\nro.tmp\" [0 2014-06-28] () IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\dprotectsvc.exe: [Debugger] tasklist.exe IFEO\jumpflip: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\searchinstaller.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\searchprotector.exe: [Debugger] tasklist.exe IFEO\searchsettings.exe: [Debugger] tasklist.exe IFEO\searchsettings64.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\umbrella.exe: [Debugger] tasklist.exe IFEO\utiljumpflip.exe: [Debugger] tasklist.exe IFEO\volaro: [Debugger] tasklist.exe IFEO\vonteera: [Debugger] tasklist.exe IFEO\websteroids.exe: [Debugger] tasklist.exe IFEO\websteroidsservice.exe: [Debugger] tasklist.exe HKLM\...\AppCertDlls: [x64] -> systemk\x64\sysapcrt.dll c:\program files\settings manager\ CHR Plugin: (globalUpdate Update) - C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) CHR Extension: (Plus-HD-V1.4) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2014-06-22] S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-19] (globalUpdate) [File not signed] S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-19] (globalUpdate) [File not signed] C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-5.job C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-7.job C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-11.job C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-4.job C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-3.job C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-6.job C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-1.job C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job C:\Users\User\AppData\Local\globalUpdate C:\Program Files\globalUpdate C:\Program Files\Plus-HD-V1.4 Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f Reboot: ***************** 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B0444A2-D132-4D76-A1A6-80FBC1151DDD}'=> Key not found. C:\Windows\System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-6 not found. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\96431e5d-5723-4d78-ae7b-7096d51b336b-6' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{750665D6-1A2D-486B-BD8E-063B3F5BF252}'=> Key not found. C:\Windows\System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-4 not found. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\96431e5d-5723-4d78-ae7b-7096d51b336b-4' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89E22D4E-D5DD-4F61-9F24-30CE6DD4A502}'=> Key not found. C:\Windows\System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-11 not found. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\96431e5d-5723-4d78-ae7b-7096d51b336b-11' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D6F2B2B-D6D6-464C-849D-9D15F3556F65}'=> Key not found. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore not found. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A6ED7CC5-8259-4A0D-8966-65F95EECE72F}'=> Key not found. C:\Windows\System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-3 not found. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\96431e5d-5723-4d78-ae7b-7096d51b336b-3' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7764CAA-F090-4086-83B4-411DCADAC9C5}'=> Key not found. C:\Windows\System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-7 not found. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\96431e5d-5723-4d78-ae7b-7096d51b336b-7' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D81A45A5-A7F4-460A-A707-7D01523AD9B7}'=> Key not found. C:\Windows\System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-1 not found. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\96431e5d-5723-4d78-ae7b-7096d51b336b-1' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E2F1F438-4E2A-4B53-96BA-852247A3E678}'=> Key not found. C:\Windows\System32\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-5 not found. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\96431e5d-5723-4d78-ae7b-7096d51b336b-5' => Key deleted successfully. C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-1.job not found. C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-11.job not found. C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-3.job not found. C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-4.job not found. C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-5.job not found. C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-6.job not found. C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-7.job not found. C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job not found. C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job not found. "C:\Program Files\Plus-HD-V1.4\Plus-HD-V1.4-nova.dll" => File/Directory not found. HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\CleanSetup => Value not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bitguard.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bprotect.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bpsvc.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserdefender.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserprotect.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsersafeguard.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\dprotectsvc.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\jumpflip'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\protectedsearch.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchinstaller.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotection.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotector.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchsettings.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchsettings64.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\snapdo.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\stinst32.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\stinst64.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\umbrella.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\utiljumpflip.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\volaro'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\vonteera'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\websteroids.exe'=> Key not found. 'HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\websteroidsservice.exe'=> Key not found. HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls\\x64 => Value not found. "c:\program files\settings manager" => File/Directory not found. C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll not found. C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced => Moved successfully. globalUpdate => Service not found. globalUpdatem => Service not found. "C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-5.job" => File/Directory not found. "C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-7.job" => File/Directory not found. "C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-11.job" => File/Directory not found. "C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-4.job" => File/Directory not found. "C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-3.job" => File/Directory not found. "C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-6.job" => File/Directory not found. "C:\Windows\Tasks\96431e5d-5723-4d78-ae7b-7096d51b336b-1.job" => File/Directory not found. "C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job" => File/Directory not found. "C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job" => File/Directory not found. "C:\Users\User\AppData\Local\globalUpdate" => File/Directory not found. "C:\Program Files\globalUpdate" => File/Directory not found. "C:\Program Files\Plus-HD-V1.4" => File/Directory not found. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= The system needed a reboot. ==== End of Fixlog ====