Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-12-2014 01 Ran by Marek at 2014-12-07 17:06:04 Run:3 Running from C:\Users\Marek\Downloads Loaded Profile: Marek (Available profiles: Marek & Karla) Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-431021187-217253523-1019275998-1000\...\Run: [HDSoft] => "C:\Program Files (x86)\iFree Skype Recorder\irecorder.exe" HKU\S-1-5-21-431021187-217253523-1019275998-1000\...\Run: [ALLUpdate] => "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep" SearchScopes: HKU\S-1-5-21-431021187-217253523-1019275998-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main" /v Default_Page_URL /t REG_SZ /d "http://go.microsoft.com/fwlink/?LinkId=69157" /f Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d "http://go.microsoft.com/fwlink/?LinkId=69157" /f Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main" /v Default_Page_URL /t REG_SZ /d "http://go.microsoft.com/fwlink/?LinkId=69157" /f Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Search Page" /t REG_SZ /d "http://go.microsoft.com/fwlink/?LinkId=54896" /f Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Search Bar" /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f DeleteQuarantine: ***************** HKU\S-1-5-21-431021187-217253523-1019275998-1000\Software\Microsoft\Windows\CurrentVersion\Run\\HDSoft => value deleted successfully. HKU\S-1-5-21-431021187-217253523-1019275998-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ALLUpdate => value deleted successfully. HKU\S-1-5-21-431021187-217253523-1019275998-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main" /v Default_Page_URL /t REG_SZ /d "http://go.microsoft.com/fwlink/?LinkId=69157" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d "http://go.microsoft.com/fwlink/?LinkId=69157" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main" /v Default_Page_URL /t REG_SZ /d "http://go.microsoft.com/fwlink/?LinkId=69157" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Search Page" /t REG_SZ /d "http://go.microsoft.com/fwlink/?LinkId=54896" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main" /v "Search Bar" /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= The operation completed successfully. ========= End of Reg: ========= "C:\FRST\Quarantine" => Removed successfully. ==== End of Fixlog ====