Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-11-2014 Ran by pc at 2014-11-13 17:16:45 Run:4 Running from C:\Users\pc\Downloads Loaded Profile: pc (Available profiles: pc) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default Task: {C11F0B9C-B0CB-4002-BAFA-9D3F2625E209} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe HKU\S-1-5-21-846750890-3381048881-3130427261-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000 C:\Program Files (x86)\Mozilla Firefox C:\Program Files (x86)\Opera C:\Program Files (x86)\Optimizer Pro C:\ProgramData\26a8f481a0ac6502 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 C:\Users\pc\AppData\Local\{*} C:\Users\pc\AppData\Local\Google C:\Users\pc\AppData\Roaming\Mozilla C:\Users\pc\AppData\Roaming\Optimizer Pro C:\Users\pc\Documents\Optimizer Pro C:\windows\system32\SET*.tmp Reg:reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKCU\Software\Mozilla /f Reg: reg delete HKCU\Software\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f EmptyTemp: ***************** Processes closed successfully. C:\windows\system32\GroupPolicy\Machine => Moved successfully. C:\windows\system32\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C11F0B9C-B0CB-4002-BAFA-9D3F2625E209}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C11F0B9C-B0CB-4002-BAFA-9D3F2625E209}" => Key deleted successfully. C:\Windows\System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\Office 15 Subscription Heartbeat" => Key deleted successfully. HKU\S-1-5-21-846750890-3381048881-3130427261-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoDriveTypeAutoRun => value deleted successfully. C:\Program Files (x86)\Mozilla Firefox => Moved successfully. C:\Program Files (x86)\Opera => Moved successfully. "C:\Program Files (x86)\Optimizer Pro" => File/Directory not found. C:\ProgramData\26a8f481a0ac6502 => Moved successfully. "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2" => File/Directory not found. C:\Users\pc\AppData\Local\{*} => Moved successfully. C:\Users\pc\AppData\Local\Google => Moved successfully. C:\Users\pc\AppData\Roaming\Mozilla => Moved successfully. "C:\Users\pc\AppData\Roaming\Optimizer Pro" => File/Directory not found. C:\Users\pc\Documents\Optimizer Pro => Moved successfully. C:\windows\system32\SET*.tmp => Moved successfully. ========= Reg:reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= The filename, directory name or volume label syntax is incorrect. ========= End of Reg: ========= ========= reg delete HKCU\Software\Mozilla /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKCU\Software\MozillaPlugins /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\MozillaPlugins /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f ========= The operation completed successfully. ========= End of Reg: ========= EmptyTemp: => Removed 403.6 MB temporary data. The system needed a reboot. ==== End of Fixlog ====