Fix result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015 Ran by Użytkownik at 2015-06-04 11:23:36 Run:1 Running from C:\Users\Użytkownik\Desktop Loaded Profiles: Użytkownik (Available Profiles: Użytkownik) Boot Mode: Normal ============================================== fixlist content: ***************** CreateRestorePoint: CloseProcesses: HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\MountPoints2: {0e793c9c-55af-11e2-b430-bcaec54cf903} - K:\Startme.exe HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\MountPoints2: {221860a3-b4f4-11e4-9070-bcaec54cf903} - L:\AutoRun.exe HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\MountPoints2: {836eab7b-a8f2-11e2-8038-bcaec54cf903} - K:\iLinker.exe HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\MountPoints2: {f1cb6da0-b153-11e4-8fbf-bcaec54cf903} - K:\AutoRun.exe HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts=1432736239&z=1b2fff27370853c373676a1g2z7c6o3m8c7q3odcew&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts=1432736239&z=1b2fff27370853c373676a1g2z7c6o3m8c7q3odcew&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-3529014019-469410967-791373992-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080 HKU\S-1-5-21-3529014019-469410967-791373992-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080 URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080&q={searchTerms} SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1432671581&z=97b0e6b54f76478069f22f7gdz7cbodq5mcg6wcm5w&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080 FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File C:\Program Files (x86)\globalUpdate FF Plugin HKU\S-1-5-21-3529014019-469410967-791373992-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Użytkownik\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll No File FF Plugin HKU\S-1-5-21-3529014019-469410967-791373992-1000: @talk.google.com/O1DPlugin -> C:\Users\Użytkownik\AppData\Roaming\Mozilla\plugins\npo1d.dll No File S2 YouTubeAcceleratorService; C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService.exe -start -scm [X] C:\PROGRA~2\YOUTUB~1 U3 axxk7eby; C:\Windows\System32\Drivers\axxk7eby.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder) 2015-05-27 16:23 - 2015-05-27 16:23 - 00002776 _____ () C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-5_user.job 2015-05-27 16:23 - 2015-05-27 16:23 - 00002770 _____ () C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-5_user.job 2015-05-27 16:21 - 2015-05-27 16:21 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro 2015-05-27 16:20 - 2015-05-27 16:20 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO 2015-05-27 15:56 - 2015-05-30 15:46 - 00001360 _____ () C:\Windows\SysWOW64\SetupComponents.exe 2015-05-26 22:36 - 2015-05-26 22:36 - 00000000 ____D () C:\Windows\SysWOW64\Flash 2015-05-26 22:35 - 2015-05-26 22:35 - 00002456 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-5_user.job 2015-05-26 22:35 - 2015-05-26 22:35 - 00001020 _____ () C:\Windows\Tasks\clcs6qWQW9KWBy.job 2015-05-26 22:35 - 2015-05-26 22:35 - 00000000 __SHD () C:\Users\Użytkownik\AppData\Roaming\AnyProtectEx 2015-05-26 22:34 - 2015-05-26 22:34 - 00002122 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-10_user.job 2015-05-26 22:23 - 2015-05-26 22:23 - 00002422 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-5_user.job 2015-05-26 22:22 - 2015-05-26 22:22 - 00002088 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-10_user.job 2015-05-26 22:21 - 2015-05-27 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro 2015-05-26 22:21 - 2015-02-19 13:09 - 00020248 _____ () C:\Windows\system32\roboot64.exe InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader\Web site.url -> hxxp://www.ytddownloader.com/ Task: {CEB0640C-CE48-4867-90BA-BD589B928B2E} - System32\Tasks\{03301BC1-47E2-4404-8988-3F04B3CDE7BE} => C:\Program Files (x86)\GreenTree Applications\YTD Video Downloader\ytd.exe [2014-09-12] (GreenTree Applications SRL) C:\Program Files (x86)\GreenTree Applications Task: C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-10_user.job => C:\Program Files (x86)\GoHD\0433f2c7-2c8d-4753-9ad7-cf457723abaa-10.exe <==== ATTENTION C:\Program Files (x86)\GoHD Task: C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-5_user.job => C:\Program Files (x86)\GoHD\0433f2c7-2c8d-4753-9ad7-cf457723abaa-5.exe <==== ATTENTION Task: C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-5_user.job => C:\Program Files (x86)\iWebar\58cb26fc-88fc-4b84-8509-df3bde2bf29f-5.exe <==== ATTENTION C:\Program Files (x86)\iWebar Task: C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV26.05\5c370db1-28ed-417f-affb-b64adc56545d-10.exe <==== ATTENTION C:\Program Files (x86)\CinemaPlus-3.2cV26.05 Task: C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV26.05\5c370db1-28ed-417f-affb-b64adc56545d-5.exe <==== ATTENTION Task: C:\Windows\Tasks\clcs6qWQW9KWBy.job => C:\Users\Uý˙ytkownik\AppData\Roaming\clcs6qWQW9KWBy.exe <==== ATTENTION C:\Users\Uý˙ytkownik\AppData\Roaming\clcs6qWQW9KWBy.exe Task: C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-5_user.job => C:\Program Files (x86)\SensePlus\e35df7b0-d0c6-4490-9e34-4abcdddce94d-5.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3529014019-469410967-791373992-1000Core.job => C:\Users\U|ytkownik\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3529014019-469410967-791373992-1000UA.job => C:\Users\U|ytkownik\AppData\Local\Google\Update\GoogleUpdate.exe AlternateDataStreams: C:\ProgramData\TEMP:56E2E879 AlternateDataStreams: C:\ProgramData\TEMP:8CE646EE CMD: bitsadmin /reset /allusers Hosts: RemoveProxy: EmptyTemp: Reboot: ***************** Restore point was successfully created. Processes closed successfully. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0e793c9c-55af-11e2-b430-bcaec54cf903}" => key Removed successfully HKCR\CLSID\{0e793c9c-55af-11e2-b430-bcaec54cf903} => key not found. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{221860a3-b4f4-11e4-9070-bcaec54cf903}" => key Removed successfully HKCR\CLSID\{221860a3-b4f4-11e4-9070-bcaec54cf903} => key not found. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{836eab7b-a8f2-11e2-8038-bcaec54cf903}" => key Removed successfully HKCR\CLSID\{836eab7b-a8f2-11e2-8038-bcaec54cf903} => key not found. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f1cb6da0-b153-11e4-8fbf-bcaec54cf903}" => key Removed successfully HKCR\CLSID\{f1cb6da0-b153-11e4-8fbf-bcaec54cf903} => key not found. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-3529014019-469410967-791373992-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKU\S-1-5-21-3529014019-469410967-791373992-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\ => value Removed successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => key Removed successfully HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully "HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => key Removed successfully HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}" => key Removed successfully HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => key not found. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => key Removed successfully HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}" => key Removed successfully HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => value restored successfully "HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => key Removed successfully "HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10" => key Removed successfully "HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4" => key Removed successfully "C:\Program Files (x86)\globalUpdate" => File/Folder not found. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin" => key Removed successfully C:\Users\Użytkownik\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll not found. "HKU\S-1-5-21-3529014019-469410967-791373992-1000\Software\MozillaPlugins\@talk.google.com/O1DPlugin" => key Removed successfully C:\Users\Użytkownik\AppData\Roaming\Mozilla\plugins\npo1d.dll not found. YouTubeAcceleratorService => Service Removed successfully "C:\PROGRA~2\YOUTUB~1" => File/Folder not found. axxk7eby => Service not found. C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-5_user.job => Moved successfully. C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-5_user.job => Moved successfully. C:\Users\Public\Documents\ShopperPro => Moved successfully. C:\Users\Public\Documents\GOOBZO => Moved successfully. C:\Windows\SysWOW64\SetupComponents.exe => Moved successfully. C:\Windows\SysWOW64\Flash => Moved successfully. C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-5_user.job => Moved successfully. C:\Windows\Tasks\clcs6qWQW9KWBy.job => Moved successfully. C:\Users\Użytkownik\AppData\Roaming\AnyProtectEx => Moved successfully. C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-10_user.job => Moved successfully. C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-5_user.job => Moved successfully. C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-10_user.job => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro => Moved successfully. C:\Windows\system32\roboot64.exe => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader\Web site.url not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CEB0640C-CE48-4867-90BA-BD589B928B2E}" => key Removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEB0640C-CE48-4867-90BA-BD589B928B2E}" => key Removed successfully C:\Windows\System32\Tasks\{03301BC1-47E2-4404-8988-3F04B3CDE7BE} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{03301BC1-47E2-4404-8988-3F04B3CDE7BE}" => key Removed successfully C:\Program Files (x86)\GreenTree Applications => Moved successfully. C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-10_user.job not found. "C:\Program Files (x86)\GoHD" => File/Folder not found. C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-5_user.job not found. C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-5_user.job not found. "C:\Program Files (x86)\iWebar" => File/Folder not found. C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-10_user.job not found. "C:\Program Files (x86)\CinemaPlus-3.2cV26.05" => File/Folder not found. C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-5_user.job not found. C:\Windows\Tasks\clcs6qWQW9KWBy.job not found. "C:\Users\Uý˙ytkownik\AppData\Roaming\clcs6qWQW9KWBy.exe" => File/Folder not found. C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-5_user.job not found. C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3529014019-469410967-791373992-1000Core.job => Moved successfully. C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3529014019-469410967-791373992-1000UA.job => Moved successfully. C:\ProgramData\TEMP => ":56E2E879" ADS Removed successfully. C:\ProgramData\TEMP => ":8CE646EE" ADS Removed successfully. ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 [ 7.5.7600 ] BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. {DBC2118A-A509-4410-ADD7-4015EEA71FAF} canceled. {A58DD0A2-E84F-408A-AB29-E0F1F33CD93E} canceled. 2 out of 2 jobs canceled. ========= End of CMD: ========= C:\Windows\System32\Drivers\etc\hosts => Moved successfully. Hosts restored successfully. ========= RemoveProxy: ========= HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value Removed successfully HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value Removed successfully HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value Removed successfully HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value Removed successfully ========= End of RemoveProxy: ========= EmptyTemp: => Removed 605.3 MB temporary data. The system needed a reboot. ==== End of Fixlog 11:24:22 ====