Fix result of Farbar Recovery Scan Tool (x64) Version:20-07-2015 Ran by Agnieszkazin at 2015-07-24 23:09:05 Run:1 Running from C:\Users\Agnieszkazin\Downloads Loaded Profiles: Agnieszkazin (Available Profiles: Agnieszkazin) Boot Mode: Normal ============================================== fixlist content: ***************** Task: {1691D78A-4B8F-4F8D-84E9-B18B91003531} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2015-07-08] (Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group C:\Users\Agnieszkazin\Desktop\SpyHunter.lnk C:\Users\Agnieszkazin\AppData\Roaming\Enigma Software Group C:\sh4ldr Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyHunterl" /f HKLM-x32\...\Run: [] => [X] GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe C:\Users\Agnieszkazin\Downloads\sh-remover.exe EmptyTemp: ***************** "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1691D78A-4B8F-4F8D-84E9-B18B91003531}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1691D78A-4B8F-4F8D-84E9-B18B91003531}" => key removed successfully C:\Windows\System32\Tasks\SpyHunter4Startup => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup" => key removed successfully "C:\Program Files\Enigma Software Group" folder move: Could not move "C:\Program Files\Enigma Software Group" folder => Scheduled to move on reboot. C:\Users\Agnieszkazin\Desktop\SpyHunter.lnk => moved successfully. C:\Users\Agnieszkazin\AppData\Roaming\Enigma Software Group => moved successfully. C:\sh4ldr => moved successfully. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyHunterl" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully C:\Windows\system32\GroupPolicy\Machine => moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully. "HKLM\SOFTWARE\Policies\Google" => key removed successfully SpyHunter 4 Service => Unable to stop service. SpyHunter 4 Service => Service removed successfully C:\Users\Agnieszkazin\Downloads\sh-remover.exe => moved successfully. EmptyTemp: => 4.7 GB temporary data Removed. Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-07-24 23:35:18)<= C:\Program Files\Enigma Software Group => Is moved successfully ==== End of Fixlog 23:35:18 ====