Fix result of Farbar Recovery Scan Tool (x64) Version:12-07-2015 Ran by Forma at 2015-07-13 20:19:43 Run:2 Running from C:\Users\Forma\Desktop Loaded Profiles: Forma (Available Profiles: Forma) Boot Mode: Normal ============================================== fixlist content: ***************** HKU\S-1-5-21-871434758-139634626-509111008-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.hotsearches.info/?pid=24437&r=2015/07/13&hid=5357072140474448722&lg=EN&cc=PL&unqvl=90 SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.hotsearches.info/?l=1&q={searchTerms}&pid=24437&r=2015/07/13&hid=5357072140474448722&lg=EN&cc=PL&unqvl=90 SearchScopes: HKLM-x32 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.hotsearches.info/?l=1&q={searchTerms}&pid=24437&r=2015/07/13&hid=5357072140474448722&lg=EN&cc=PL&unqvl=90 SearchScopes: HKU\S-1-5-21-871434758-139634626-509111008-1000 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.hotsearches.info/?l=1&q={searchTerms}&pid=24437&r=2015/07/13&hid=5357072140474448722&lg=EN&cc=PL&unqvl=90 DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC} C:\Users\Forma\AppData\Local??????????????????? C:\Users\Forma\AppData\Local\Opera Software C:\Users\Forma\AppData\Roaming\Opera Software C:\Users\Forma\AppData\Roaming\Microsoft\Reversed ***************** HKU\S-1-5-21-871434758-139634626-509111008-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}" => key removed successfully HKCR\Wow6432Node\CLSID\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE} => key not found. "HKU\S-1-5-21-871434758-139634626-509111008-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}" => key removed successfully HKCR\CLSID\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE} => key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC} => key removed successfully "C:\Users\Forma\AppData\Local???????????????????" folder move: Could not move "C:\Users\Forma\AppData\Local???????????????????" folder => Scheduled to move on reboot. C:\Users\Forma\AppData\Local\Opera Software => moved successfully. C:\Users\Forma\AppData\Roaming\Opera Software => moved successfully. C:\Users\Forma\AppData\Roaming\Microsoft\Reversed => moved successfully. Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-07-13 20:25:54)<= "C:\Users\Forma\AppData\Local???????????????????" => Could not move ==== End of Fixlog 20:25:54 ====