Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-11-2014 Ran by Maciej at 2014-11-02 13:22:54 Run:1 Running from C:\Users\Maciej\Downloads Loaded Profile: Maciej (Available profiles: Maciej) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: S3 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-10-21] (globalUpdate) [File not signed] S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-10-21] (globalUpdate) [File not signed] Task: {10BB80B3-A877-475A-9655-B8A45DFC6AFF} - System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-7 => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-7.exe <==== ATTENTION Task: {192B786B-8D6C-4B2F-AE6F-4F9AE3204417} - System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-5_user => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-5.exe <==== ATTENTION Task: {4E1A9397-07F1-4DB8-9CBF-CF701EDD4966} - System32\Tasks\Driver Booster SkipUAC (Maciej) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe Task: {659296DA-B9BF-464B-AFD7-2F525F122DE0} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe Task: {6F9AAF76-A5FC-479D-9B33-273B81FE5679} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe Task: {906EEE0A-D41D-409D-842B-1D312036DC1A} - System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-5 => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-5.exe <==== ATTENTION Task: {92865B50-0725-4D00-AF0E-33AC75FCF1BE} - System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-11 => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-11.exe <==== ATTENTION Task: {BB7D4E2A-034A-4040-8938-3CF3DEB3C8E5} - System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-6 => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-6.exe <==== ATTENTION Task: {BDD33E08-9BAD-419F-BF04-E538B1A7BDB0} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-10-21] (globalUpdate) <==== ATTENTION Task: {C0137A32-B184-409E-9841-B084182CC2A1} - System32\Tasks\6101c87c-669b-4932-912b-9afbbf3bb7f3-6 => C:\Program Files (x86)\TheHDvid-Codec V10\6101c87c-669b-4932-912b-9afbbf3bb7f3-6.exe <==== ATTENTION Task: {C6B24364-86B5-4CD3-A7A0-4E2337197252} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-10-21] (globalUpdate) <==== ATTENTION Task: {E1DF252E-6E92-474E-8566-6F8661AE304D} - System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-4 => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-4.exe <==== ATTENTION Task: {E2DB448D-6F49-44E9-B321-8FDC1865D2F4} - System32\Tasks\Installer_yta => C:\Users\Maciej\AppData\Local\Installer\Installyta_18071\DCytaiesmt.exe [2014-10-21] () <==== ATTENTION Task: {F1BAEEDD-321B-4C16-BACE-2D87808E423B} - System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-1 => C:\Program Files (x86)\Apps Hat\Apps Hat-codedownloader.exe <==== ATTENTION Task: C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-1.job => C:\Program Files (x86)\Apps Hat\Apps Hat-codedownloader.exe <==== ATTENTION Task: C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-11.job => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-11.exe <==== ATTENTION Task: C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-4.job => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-4.exe <==== ATTENTION Task: C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-5.job => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-5.exe <==== ATTENTION Task: C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-5_user.job => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-5.exe <==== ATTENTION Task: C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-6.job => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-6.exe <==== ATTENTION Task: C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-7.job => C:\Program Files (x86)\Apps Hat\07050b38-1064-4757-a89c-fb7383a998f7-7.exe <==== ATTENTION Task: C:\Windows\Tasks\6101c87c-669b-4932-912b-9afbbf3bb7f3-6.job => C:\Program Files (x86)\TheHDvid-Codec V10\6101c87c-669b-4932-912b-9afbbf3bb7f3-6.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe S3 MWAC; \??\C:\Windows\system32\drivers\ [0 ] () [File not signed] S3 MWAC; \??\C:\Windows\SysWOW64\drivers\ [0 ] () [File not signed] S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [X] R4 ausbmon; \??\C:\Windows\system32\drivers\ausbmon.sys [X] ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.istartsurf.com/?type=sc&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 ShortcutWithArgument: C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.istartsurf.com/?type=sc&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 ShortcutWithArgument: C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.istartsurf.com/?type=sc&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 ShortcutWithArgument: C:\Users\Maciej\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.istartsurf.com/?type=sc&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 ShortcutWithArgument: C:\Users\Maciej\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.istartsurf.com/?type=sc&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 ShortcutWithArgument: C:\Users\Maciej\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.istartsurf.com/?type=sc&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.istartsurf.com/?type=sc&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231&q={searchTerms} BHO: TheHDvid-Codec V10 -> {11111111-1111-1111-1111-110611331115} -> C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-bho64.dll (home) CHR HomePage: Default -> hxxp://www.istartsurf.com/?type=hp&ts=1410103289&from=ild&uid=ST320LM001XHN-M320MBB_S2URJ9AC732231 CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-09-07] FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) C:\Program Files (x86)\Apps Hat C:\Program Files (x86)\globalUpdate C:\Program Files (x86)\TheHDvid-Codec V10 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppsHat C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 3.4 C:\Users\Maciej\AppData\Local\CrashRpt C:\Users\Maciej\AppData\Local\Installer C:\Users\Maciej\AppData\Local\WebPlayer C:\Users\Maciej\AppData\Roaming\3909 C:\Users\Maciej\AppData\Roaming\IObit C:\Users\Maciej\AppData\Roaming\Opera Software C:\Users\Maciej\AppData\Roaming\RegistryCleanMaster EmptyTemp: ***************** Processes closed successfully. globalUpdate => Service deleted successfully. globalUpdatem => Service deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{10BB80B3-A877-475A-9655-B8A45DFC6AFF}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10BB80B3-A877-475A-9655-B8A45DFC6AFF}" => Key deleted successfully. C:\Windows\System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-7 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\07050b38-1064-4757-a89c-fb7383a998f7-7" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{192B786B-8D6C-4B2F-AE6F-4F9AE3204417}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{192B786B-8D6C-4B2F-AE6F-4F9AE3204417}" => Key deleted successfully. C:\Windows\System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-5_user => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\07050b38-1064-4757-a89c-fb7383a998f7-5_user" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4E1A9397-07F1-4DB8-9CBF-CF701EDD4966}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E1A9397-07F1-4DB8-9CBF-CF701EDD4966}" => Key deleted successfully. C:\Windows\System32\Tasks\Driver Booster SkipUAC (Maciej) => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (Maciej)" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{659296DA-B9BF-464B-AFD7-2F525F122DE0}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{659296DA-B9BF-464B-AFD7-2F525F122DE0}" => Key deleted successfully. C:\Windows\System32\Tasks\Driver Booster Scan => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scan" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6F9AAF76-A5FC-479D-9B33-273B81FE5679}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F9AAF76-A5FC-479D-9B33-273B81FE5679}" => Key deleted successfully. C:\Windows\System32\Tasks\Driver Booster Update => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Update" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{906EEE0A-D41D-409D-842B-1D312036DC1A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{906EEE0A-D41D-409D-842B-1D312036DC1A}" => Key deleted successfully. C:\Windows\System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-5 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\07050b38-1064-4757-a89c-fb7383a998f7-5" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{92865B50-0725-4D00-AF0E-33AC75FCF1BE}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{92865B50-0725-4D00-AF0E-33AC75FCF1BE}" => Key deleted successfully. C:\Windows\System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-11 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\07050b38-1064-4757-a89c-fb7383a998f7-11" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BB7D4E2A-034A-4040-8938-3CF3DEB3C8E5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BB7D4E2A-034A-4040-8938-3CF3DEB3C8E5}" => Key deleted successfully. C:\Windows\System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-6 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\07050b38-1064-4757-a89c-fb7383a998f7-6" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BDD33E08-9BAD-419F-BF04-E538B1A7BDB0}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BDD33E08-9BAD-419F-BF04-E538B1A7BDB0}" => Key deleted successfully. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C0137A32-B184-409E-9841-B084182CC2A1}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0137A32-B184-409E-9841-B084182CC2A1}" => Key deleted successfully. C:\Windows\System32\Tasks\6101c87c-669b-4932-912b-9afbbf3bb7f3-6 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\6101c87c-669b-4932-912b-9afbbf3bb7f3-6" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C6B24364-86B5-4CD3-A7A0-4E2337197252}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6B24364-86B5-4CD3-A7A0-4E2337197252}" => Key deleted successfully. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E1DF252E-6E92-474E-8566-6F8661AE304D}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E1DF252E-6E92-474E-8566-6F8661AE304D}" => Key deleted successfully. C:\Windows\System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-4 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\07050b38-1064-4757-a89c-fb7383a998f7-4" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E2DB448D-6F49-44E9-B321-8FDC1865D2F4}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E2DB448D-6F49-44E9-B321-8FDC1865D2F4}" => Key deleted successfully. C:\Windows\System32\Tasks\Installer_yta => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Installer_yta" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F1BAEEDD-321B-4C16-BACE-2D87808E423B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F1BAEEDD-321B-4C16-BACE-2D87808E423B}" => Key deleted successfully. C:\Windows\System32\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-1 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\07050b38-1064-4757-a89c-fb7383a998f7-1" => Key deleted successfully. C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-1.job => Moved successfully. C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-11.job => Moved successfully. C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-4.job => Moved successfully. C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-5.job => Moved successfully. C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-5_user.job => Moved successfully. C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-6.job => Moved successfully. C:\Windows\Tasks\07050b38-1064-4757-a89c-fb7383a998f7-7.job => Moved successfully. C:\Windows\Tasks\6101c87c-669b-4932-912b-9afbbf3bb7f3-6.job => Moved successfully. C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Moved successfully. C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Moved successfully. MWAC => Service deleted successfully. MWAC => Service not found. atillk64 => Service deleted successfully. ausbmon => Service not found. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk => Shortcut argument was removed successfully. C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk => Shortcut argument was removed successfully. C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk => Shortcut argument was restored successfully. C:\Users\Maciej\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Shortcut argument was removed successfully. C:\Users\Maciej\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => Shortcut argument was removed successfully. C:\Users\Maciej\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk => Shortcut argument was removed successfully. C:\Users\Public\Desktop\Google Chrome.lnk => Shortcut argument was removed successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. "HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. "HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611331115}" => Key deleted successfully. "HKCR\CLSID\{11111111-1111-1111-1111-110611331115}" => Key deleted successfully. Chrome HomePage deleted successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma" => Key deleted successfully. C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx => Moved successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10" => Key deleted successfully. C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll => Moved successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4" => Key deleted successfully. C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll not found. "C:\Program Files (x86)\Apps Hat" => File/Directory not found. C:\Program Files (x86)\globalUpdate => Moved successfully. C:\Program Files (x86)\TheHDvid-Codec V10 => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppsHat => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 3.4 => Moved successfully. C:\Users\Maciej\AppData\Local\CrashRpt => Moved successfully. C:\Users\Maciej\AppData\Local\Installer => Moved successfully. C:\Users\Maciej\AppData\Local\WebPlayer => Moved successfully. C:\Users\Maciej\AppData\Roaming\3909 => Moved successfully. C:\Users\Maciej\AppData\Roaming\IObit => Moved successfully. C:\Users\Maciej\AppData\Roaming\Opera Software => Moved successfully. C:\Users\Maciej\AppData\Roaming\RegistryCleanMaster => Moved successfully. EmptyTemp: => Removed 181.9 MB temporary data. The system needed a reboot. ==== End of Fixlog ====