Fix result of Farbar Recovery Scan Tool (x64) Version:13-06-2015 Ran by cfirek at 2015-06-15 15:55:44 Run:1 Running from D:\download\frst Loaded Profiles: cfirek (Available Profiles: cfirek) Boot Mode: Normal ============================================== fixlist content: ***************** Task: {90AF88A9-7499-4423-9164-E285BC8008E3} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION C:\Program Files (x86)\MyPC Backup C:\Program Files (x86)\XTab HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-pag...q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-pag...q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom..._S246J9KB517054 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom..._S246J9KB517054 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-pag...q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-pag...q={searchTerms} HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-...q={searchTerms} HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-hom..._S246J9KB517054 HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-hom..._S246J9KB517054 HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-...q={searchTerms} SearchScopes: HKU\S-1-5-21-2600933460-2923366163-2236149894-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms} SearchScopes: HKU\S-1-5-21-2600933460-2923366163-2236149894-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-...q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-pag..._S246J9KB517054 FF NewTab: chrome://quick_start/content/index.html FF SelectedSearchEngine: delta-homes FF Homepage: chrome://speeddial/content/speeddial.xul FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\delta-homes.xml [2014-12-19] FF Extension: Search Enginer - C:\Users\cfirek\AppData\Roaming\Mozilla\Firefox\Profiles\edgsez7u.default\Extensions\sweetsearch@gmail.com [2015-05-06] FF HKLM-x32\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\cfirek\AppData\Roaming\Mozilla\Firefox\Profiles\edgsez7u.default\extensions\quick_searchff@gmail.com FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\cfirek\AppData\Roaming\Mozilla\Firefox\Profiles\edgsez7u.default\extensions\sweetsearch@gmail.com R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-04-30] () [File not signed] EmptyTemp: ***************** "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{90AF88A9-7499-4423-9164-E285BC8008E3}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90AF88A9-7499-4423-9164-E285BC8008E3}" => key removed successfully C:\Windows\System32\Tasks\LaunchSignup => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LaunchSignup" => key removed successfully "C:\Program Files (x86)\MyPC Backup" => File/Folder not found. C:\Program Files (x86)\XTab => moved successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully "HKU\S-1-5-21-2600933460-2923366163-2236149894-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => key removed successfully HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => value restored successfully Firefox newtab removed successfully Firefox SelectedSearchEngine removed successfully Firefox homepage removed successfully C:\Program Files (x86)\mozilla firefox\browser\searchplugins\delta-homes.xml => moved successfully. C:\Users\cfirek\AppData\Roaming\Mozilla\Firefox\Profiles\edgsez7u.default\Extensions\sweetsearch@gmail.com => moved successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\quick_searchff@gmail.com => value removed successfully HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\sweetsearch@gmail.com => value removed successfully IHProtect Service => Service stopped successfully. IHProtect Service => Service removed successfully EmptyTemp: => 1008.6 MB temporary data Removed. The system needed a reboot.. ==== End of Fixlog 15:56:31 ====