Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-02-2015 01 Ran by User at 2015-02-26 23:11:24 Run:1 Running from C:\Users\User\Desktop Loaded Profiles: User (Available profiles: User) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-26] (AVG Technologies) HKU\S-1-5-21-155114027-604867907-1247271619-1001\...\Run: [AVG-Secure-Search-Update_0214c] => C:\Users\User\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=3250adef902847d29f39d16f640efbf2-3346178eb27f82f138d823ed14bf97d88af1305e /CMPID=0214c HKU\S-1-5-21-155114027-604867907-1247271619-1001\...\MountPoints2: {e2a10e0e-3820-11e4-bbad-e936d8a2b748} - G:\Startme.exe HKUHKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com URLSearchHook: HKLM-x32 - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D} S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] C:\Windows\system32\drivers\avgtpx64.sys Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. avgtp => Unable to stop service avgtp => Service deleted successfully. HKU\S-1-5-21-155114027-604867907-1247271619-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AVG-Secure-Search-Update_0214c => value deleted successfully. "HKU\S-1-5-21-155114027-604867907-1247271619-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e2a10e0e-3820-11e4-bbad-e936d8a2b748}" => Key deleted successfully. HKCR\CLSID\{e2a10e0e-3820-11e4-bbad-e936d8a2b748} => Key not found. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\ => value deleted successfully. RtsUIR => Service deleted successfully. USBCCID => Service deleted successfully. C:\Windows\system32\drivers\avgtpx64.sys => Moved successfully. ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => Removed 3.2 GB temporary data. The system needed a reboot. ==== End of Fixlog 23:14:18 ====