Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-09-2014 02 Ran by KoneQ at 2014-09-05 14:39:14 Run:1 Running from C:\Users\KoneQ\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2282272 2014-08-19] (IObit) HKU\S-1-5-21-129265271-3525497852-1072832283-1001\...\Run: [Browser Extensions] => "C:\Users\KoneQ\AppData\Roaming\Browser Extensions\CouponsHelper.exe" StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {4122525B-53C6-4273-9E14-585991AE13D9} URL = https://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms} BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File C:\Program Files (x86)\IObit C:\ProgramData\IObit C:\ProgramData\Norton C:\Users\KoneQ\AppData\Roaming\IObit C:\Windows\Tasks\ImCleanDisabled CMD: sc config MpsSvc start= auto Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f EmptyTemp: ***************** LiveUpdateSvc => Service deleted successfully. HKU\S-1-5-21-129265271-3525497852-1072832283-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Browser Extensions => value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4122525B-53C6-4273-9E14-585991AE13D9}" => Key deleted successfully. "HKCR\CLSID\{4122525B-53C6-4273-9E14-585991AE13D9}" => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}" => Key deleted successfully. "HKCR\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}" => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully. "HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" => Key not found. C:\Program Files (x86)\IObit => Moved successfully. C:\ProgramData\IObit => Moved successfully. C:\ProgramData\Norton => Moved successfully. C:\Users\KoneQ\AppData\Roaming\IObit => Moved successfully. C:\Windows\Tasks\ImCleanDisabled => Moved successfully. ========= sc config MpsSvc start= auto ========= [SC] ChangeServiceConfig SUKCES ========= End of CMD: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 372.4 MB temporary data. The system needed a reboot. ==== End of Fixlog ====