Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-11-2014 01 Ran by Filip at 2014-11-30 14:42:17 Run:2 Running from C:\Users\Filip\Desktop Loaded Profile: Filip (Available profiles: Filip) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: HKU\S-1-5-21-2868711597-264946777-3682003278-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trovi.com/?gd=&ctid=CT3321459&octid=EB_ORIGINAL_CTID&ISID=M25BB64EB-7F01-44D8-A0BE-782BE4DE1A8F&SearchSource=55&CUI=&UM=6&UP=SPF57C8540-833E-4D13-8C99-E145079A25A9&SSPV= SearchScopes: HKU\S-1-5-21-2868711597-264946777-3682003278-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com/Results.aspx?gd=&ctid=CT3321459&octid=EB_ORIGINAL_CTID&ISID=M25BB64EB-7F01-44D8-A0BE-782BE4DE1A8F&SearchSource=58&CUI=&UM=6&UP=SPF57C8540-833E-4D13-8C99-E145079A25A9&q={searchTerms}&SSPV= HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2868711597-264946777-3682003278-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION RestoreQuarantine: C:\FRST\Quarantine\C\Windows\System32\regsvr32.exe.xBAD C:\ProgramData\boost_interprocess Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /f EmptyTemp: ***************** Processes closed successfully. HKU\S-1-5-21-2868711597-264946777-3682003278-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. "HKU\S-1-5-21-2868711597-264946777-3682003278-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" => Key deleted successfully. "HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" => Key not found. "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully. "HKU\S-1-5-21-2868711597-264946777-3682003278-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully. "C:\FRST\Quarantine\C\Windows\System32\regsvr32.exe.xBAD"=> The path was not found. C:\ProgramData\boost_interprocess => Moved successfully. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 466.4 MB temporary data. The system needed a reboot. ==== End of Fixlog ====