Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 07-12-2014 01 Ran by Agnese at 2014-12-07 20:01:57 Run:1 Running from C:\Users\Agnese\Downloads\FRST Loaded Profile: Agnese (Available profiles: Agnese) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses:R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED)S2 ServUpdater; C:\Users\Agnese\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd) [File not signed]S2 SoftwareUpd; C:\Users\Agnese\AppData\Local\SoftwareUpdater\SoftwareUpdService.exe [161280 2012-04-23] (SoftwareUpdService) [File not signed]R2 WindowsProtectManger; C:\ProgramData\WindowsProtectManger\wprotectmanager.exe [591776 2014-06-11] (Fuyu LIMITED) <==== ATTENTIONS2 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [X]U4 eabfiltr; No ImagePathS3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]S3 XDva389; \??\C:\Windows\system32\XDva389.sys [X]S3 XDva390; \??\C:\Windows\system32\XDva390.sys [X]S3 XDva391; \??\C:\Windows\system32\XDva391.sys [X]S3 XDva392; \??\C:\Windows\system32\XDva392.sys [X]S3 XDva393; \??\C:\Windows\system32\XDva393.sys [X]S3 XDva396; \??\C:\Windows\system32\XDva396.sys [X]S3 XDva397; \??\C:\Windows\system32\XDva397.sys [X]S3 XDva398; \??\C:\Windows\system32\XDva398.sys [X]S3 XDva399; \??\C:\Windows\system32\XDva399.sys [X]HKLM\...\Run: [Raildcall] => C:\Program Files\raidcall\raidcall.exeHKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [PoService] => [X]HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\Run: [AdobeBridge] => [X]HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\...\MountPoints2: {98589ab1-4daf-11e2-8615-00218600ddd9} - E:\Install.exeAppInit_DLLs: c:\progra~1\suptab\search~1.dll => c:\progra~1\suptab\search~1.dll File Not FoundAppInit_DLLs: c:\progra~2\fastan~1\fastan~1.dll => c:\progra~2\fastan~1\fastan~1.dll File Not FoundIFEO\bitguard.exe: [Debugger] tasklist.exeIFEO\bprotect.exe: [Debugger] tasklist.exeIFEO\bpsvc.exe: [Debugger] tasklist.exeIFEO\browserdefender.exe: [Debugger] tasklist.exeIFEO\browserprotect.exe: [Debugger] tasklist.exeIFEO\browsersafeguard.exe: [Debugger] tasklist.exeIFEO\dprotectsvc.exe: [Debugger] tasklist.exeIFEO\jumpflip: [Debugger] tasklist.exeIFEO\protectedsearch.exe: [Debugger] tasklist.exeIFEO\searchinstaller.exe: [Debugger] tasklist.exeIFEO\searchprotection.exe: [Debugger] tasklist.exeIFEO\searchprotector.exe: [Debugger] tasklist.exeIFEO\searchsettings.exe: [Debugger] tasklist.exeIFEO\searchsettings64.exe: [Debugger] tasklist.exeIFEO\snapdo.exe: [Debugger] tasklist.exeIFEO\stinst32.exe: [Debugger] tasklist.exeIFEO\stinst64.exe: [Debugger] tasklist.exeIFEO\umbrella.exe: [Debugger] tasklist.exeIFEO\utiljumpflip.exe: [Debugger] tasklist.exeIFEO\volaro: [Debugger] tasklist.exeIFEO\vonteera: [Debugger] tasklist.exeIFEO\websteroids.exe: [Debugger] tasklist.exeIFEO\websteroidsservice.exe: [Debugger] tasklist.exeStartup: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VDownloader.lnkHKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\systemk\x64\sysapcrt.dllCHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTIONShortcutWithArgument: C:\Users\Agnese\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247ShortcutWithArgument: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247ShortcutWithArgument: C:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247ShortcutWithArgument: C:\Users\Agnese\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247ShortcutWithArgument: C:\Users\Agnese\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=sc&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247ProxyServer: [S-1-5-21-3345188048-2503292345-2761132505-1000] => 127.0.0.1:3128HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247HKU\S-1-5-21-3345188048-2503292345-2761132505-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=hp&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&q={searchTerms}URLSearchHook: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 - (No Name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No FileStartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-page.com/?type=sc&ts=1401695965&from=sof&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms}SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms}SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} URL = http://dts.search-results.com/sr?src=ieb&appid=0&systemid=2&sr=0&q={searchTerms}SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=169&itype=n&ver=12791&tm=366&src=ds&p={searchTerms}SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} URL = http://search.imesh.com/web?src=ieb&systemid=1&q={searchTerms}SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2304157SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms}SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> URL http://www.trovigo.com/Results.aspx?gd=&ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP00BD660C-9943-41C6-B501-F505211C4974&q={searchTerms}&SSPV=SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&AF=119998&babsrc=SP_ss&mntrId=14c6f9300000000000000021001d7d94SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0613&utm_campaign=installer&utm_content=ds&from=wpm0613&uid=WDCXWD2500BEVS-22UST0_WD-WXCZ0733818738187&ts=1402603247&type=default&q={searchTerms}SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://isearch.avg.com/search?cid={02A8832A-EE1C-410D-81BA-5FDAD58BC8E2}&mid=e2592f55c8cd47d08a0dd168c0e4342a-966b0eeb361f725dfd5dac6960d91786b40c212e&lang=en&ds=pp011&pr=sa&d=2012-07-26 02:13:58&v=12.1.0.21&sap=dsp&q={searchTerms}SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} URL =SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL =SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} URL =SearchScopes: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: Wincore Mediabar -> {28387537-e3f9-4ed7-860c-11e69af4a8a0} -> C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll No FileBHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll No FileBHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No FileBHO: Wincore Mediabar -> {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} -> C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No FileToolbar: HKLM - Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll No FileToolbar: HKLM - Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()FF Plugin: @java.com/DTPlugin,version=10.5.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)FF Plugin HKU\S-1-5-21-3345188048-2503292345-2761132505-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No FileFF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xmlFF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\default-search.xmlFF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\delta-homes.xmlFF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\whitesmoke.xmlCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\GoogleUpdate.exe" No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.135\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.99\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.57\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.69\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe" No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe" No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.79\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.23.9\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe" No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Chrome\Application\35.0.1916.153\delegate_execute.exe" No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.145\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.123\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.153\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.149\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.22.3\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.165\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.115\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.65\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> "C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe" No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.15\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.22.5\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.21.111\psuser.dll No FileCustomCLSID: HKU\S-1-5-21-3345188048-2503292345-2761132505-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Agnese\AppData\Local\Google\Update\1.3.24.7\psuser.dll No FileTask: {6202BF14-964F-4964-886C-5337E64CC556} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exeTask: {87C18EC2-0150-4CC7-B6FD-7BA2920D095B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exeC:\found.007C:\Program Files\AppPitooUC:\Program Files\BearShare ApplicationsC:\Program Files\Google\ChromeC:\Program Files\siaver BoxC:\Program Files\SupTabC:\ProgramData\752a75c16f1088e3C:\ProgramData\AppPitooUC:\ProgramData\IePluginServicesC:\ProgramData\siaver BoxC:\ProgramData\WindowsProtectMangerC:\ProgramData\Microsoft\Windows\Start Menu\Programs\RaidCallC:\Users\Agnese\AppData\Local\CREC:\Users\Agnese\AppData\Local\Google\ChromeC:\Users\Agnese\AppData\Local\PosServiceC:\Users\Agnese\AppData\Local\ServUpdaterC:\Users\Agnese\AppData\Local\SoftwareUpdaterC:\Users\Agnese\AppData\Roaming\337GamesC:\Users\Agnese\AppData\Roaming\Microsoft\Windows\SendTo\Xfire Amico.lnkC:\Users\Agnese\AppData\Roaming\Microsoft\Windows\Start Menu\RaidCall6.0_beta.lnkC:\Users\Agnese\Documents\YoucamC:\Users\Agnese\Downloads\Setup*.exeC:\Users\Agnese\Desktop\Desktop\337 GAMES.lnkC:\Users\Agnese\Desktop\Desktop\Google Chrome.lnkC:\Users\Agnese\Desktop\Desktop\Video Player.lnkC:\Users\Agnese\Desktop\Desktop\wakacje1\dondddddddddd.lnkC:\Users\Agnese\Desktop\Desktop\wakacje1\Guida Alice.lnkC:\Users\Agnese\Desktop\Desktop\wakacje1\Bit CheC:\Users\Agnese\Desktop\Desktop\idalia compleanno\ida compReg: reg delete HKCU\Software\Google /fReg: reg delete HKLM\SOFTWARE\Google /fReg: reg delete HKLM\SOFTWARE\Mozilla\Firefox\Extensions /fReg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{64af91bf} /fReg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Search" /fReg: reg delete "HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main" /fReg: reg delete "HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main" /fReg: reg delete "HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main" /fCMD: for /d %f in (C:\Users\Agnese\AppData\Local\{*}) do rd /s /q "%f"CMD: dir /a "C:\Program Files"CMD: dir /a C:\ProgramDataCMD: dir /a C:\Users\Agnese\AppData\LocalCMD: dir /a C:\Users\Agnese\AppData\LocalLowCMD: dir /a C:\Users\Agnese\AppData\RoamingEmptyTemp: ***************** Processes closed successfully. The system needed a reboot. ==== End of Fixlog ====