Fix result of Farbar Recovery Scan Tool (x64) Version:20-07-2015 Ran by Administrator at 2015-07-23 23:02:04 Run:1 Running from C:\Users\Administrator\Desktop Loaded Profiles: Administrator (Available Profiles: GhostPL & Administrator) Boot Mode: Normal ============================================== fixlist content: ***************** HKLM-x32\...\Run: [gmsd_pl_005010002] => [X] HKU\S-1-5-21-624697613-4269924856-1014094728-500\...\Run: [jfsshycgik] => cmd /c start http://rfusa.ru/?utm...06a2c5bec47b7c2 HKU\S-1-5-21-624697613-4269924856-1014094728-500\...\Run: [Akamai NetSession Interface] => "C:\Users\Administrator\AppData\Local\Akamai\netsession_win.exe" GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll No File C:\Program Files (x86)\MiuiTab S3 VGPU; System32\drivers\rdvgkmd.sys [X] C:\Users\Administrator\AppData\Local\nsh7921.tmp C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amigo.lnk C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Conflict\ Star Conflict Forum.lnk C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Conflict\ Star Conflict Launcher.lnk C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Conflict\ Star Conflict Website.lnk C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Conflict\ Uninstall game.lnk Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f EmptyTemp: ***************** HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_pl_005010002 => value not found. HKU\S-1-5-21-624697613-4269924856-1014094728-500\Software\Microsoft\Windows\CurrentVersion\Run\\jfsshycgik => value removed successfully HKU\S-1-5-21-624697613-4269924856-1014094728-500\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => value removed successfully C:\Windows\system32\GroupPolicy\Machine => moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully. "HKLM\SOFTWARE\Policies\Google" => key removed successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => key not found. HKCR\Wow6432Node\CLSID\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => key not found. "C:\Program Files (x86)\MiuiTab" => File/Folder not found. VGPU => Service removed successfully "C:\Users\Administrator\AppData\Local\nsh7921.tmp" => File/Folder not found. C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amigo.lnk => moved successfully. C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Conflict\ Star Conflict Forum.lnk => moved successfully. C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Conflict\ Star Conflict Launcher.lnk => moved successfully. C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Conflict\ Star Conflict Website.lnk => moved successfully. C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Conflict\ Uninstall game.lnk => moved successfully. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= EmptyTemp: => 1.3 GB temporary data Removed. The system needed a reboot.. ==== End of Fixlog 23:02:56 ====