Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-04-2015 01 Ran by Sebastian at 2015-05-01 13:21:08 Run:1 Running from C:\Users\Sebastian\Downloads Loaded Profiles: Sebastian (Available profiles: Sebastian & UpdatusUser) Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {9A68C9BC-A00A-483F-B054-FAA200F33215} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe <==== ATTENTION C:\Users\Sebastian\AppData\Local\Akamai\netsession_win.exe HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [ApnUpdater] => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" HKU\S-1-5-21-637789347-3411735977-3138111424-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-637789347-3411735977-3138111424-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Sebastian\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.) HKU\S-1-5-21-637789347-3411735977-3138111424-1000\...\CurrentVersion\Windows: [Load] C:\ProgramData\msqfjiv.exe <===== ATTENTION C:\ProgramData\msqfjiv.exe SearchScopes: HKU\S-1-5-21-637789347-3411735977-3138111424-1000 -> {C8128FA0-256D-424E-8BE4-FA57E16B2F46} URL = http://websearch.ask...4E-D7D0B9C604F5 BHO-x32: Ask Toolbar -> {D4027C7F-154A-4066-A1AD-4243D8127440} -> C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File Toolbar: HKU\S-1-5-21-637789347-3411735977-3138111424-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Toolbar: HKU\S-1-5-21-637789347-3411735977-3138111424-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File FF SearchEngineOrder.1: Ask.com FF Keyword.URL: hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=017EE723-031B-4C48-8B2A-2DF4B05DF50E&apn_ptnrs=U3&apn_sauid=7509D55D-B9E7-49C2-934E-D7D0B9C604F5&apn_dtid=OSJ000YYPL&&q= FF SearchPlugin: C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\qc8hs5n7.default\searchplugins\askcom.xml [2013-01-16] FF Extension: Ask Toolbar - C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\qc8hs5n7.default\Extensions\toolbar@ask.com [2013-01-16] CHR Extension: (Ask Toolbar) - C:\Users\Sebastian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo [2013-03-05] EmptyTemp: ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A68C9BC-A00A-483F-B054-FAA200F33215} => Key not found. C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar => Key not found. "C:\Users\Sebastian\AppData\Local\Akamai\netsession_win.exe" => File/Directory not found. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value not found. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ApnUpdater => Value not found. HKU\S-1-5-21-637789347-3411735977-3138111424-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully. HKU\S-1-5-21-637789347-3411735977-3138111424-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => value deleted successfully. HKU\S-1-5-21-637789347-3411735977-3138111424-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully. Could not move "C:\ProgramData\msqfjiv.exe" => Scheduled to move on reboot. "HKU\S-1-5-21-637789347-3411735977-3138111424-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C8128FA0-256D-424E-8BE4-FA57E16B2F46}" => Key deleted successfully. HKCR\CLSID\{C8128FA0-256D-424E-8BE4-FA57E16B2F46} => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}" => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} => value deleted successfully. HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found. HKU\S-1-5-21-637789347-3411735977-3138111424-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value deleted successfully. HKCR\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => Key not found. HKU\S-1-5-21-637789347-3411735977-3138111424-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => value deleted successfully. HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found. Firefox SearchEngineOrder.1 deleted successfully. Firefox Keyword.URL deleted successfully. C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\qc8hs5n7.default\searchplugins\askcom.xml => Moved successfully. C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\qc8hs5n7.default\Extensions\toolbar@ask.com not found. C:\Users\Sebastian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo => Moved successfully. EmptyTemp: => Removed 1.8 GB temporary data. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-05-01 13:23:57)<= C:\ProgramData\msqfjiv.exe => Is moved successfully. ==== End of Fixlog 13:23:57 ====