Fix result of Farbar Recovery Scan Tool (x64) Version:28-07-2015 Ran by Figo2 (2015-07-30 20:14:54) Run:1 Running from C:\Fix\FRST Loaded Profiles: Figo2 (Available Profiles: Figo2 & Administrator & DefaultAppPool) Boot Mode: Normal ============================================== fixlist content: ***************** Task: {0063E258-2276-4EAC-8462-088BE4D79233} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d No Task File <==== ATTENTION Task: {078E29BA-7A4A-4639-BC28-8C4472591377} - System32\Tasks\WINshell Event Logging => C:\Users\Figo\AppData\Local\Temp\Dscp1.exe <==== ATTENTION Task: {08EDA4D1-DA72-458A-8542-FD3DD3F0E833} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d No Task File <==== ATTENTION TTask: {2C15334C-B4A2-4022-9995-B896AE6B94F4} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync No Task File <==== ATTENTION Task: {4CABC4F8-B5E8-48EA-BA05-622E618A11FD} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd No Task File <==== ATTENTION Task: {52279677-8374-4A9C-B7A2-32D5DA41F1A7} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d No Task File <==== ATTENTION Task: {6C6BD1F8-89DB-4FF1-821A-5086F6AE6914} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B No Task File <==== ATTENTION Task: {6F6985AD-E55C-46C9-BB08-C3D688A39256} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig No Task File <==== ATTENTION Task: {A514892A-42F6-4BCB-827C-98FE95667D8B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent No Task File <==== ATTENTION Task: {B649D2B9-E07B-498B-9942-92E4C83A81C0} - \Microsoft\Windows\Setup\gwx\launchtrayprocess No Task File <==== ATTENTION Task: {BF8EB137-4656-4C6B-AF10-D0DD0776B728} - System32\Tasks\WINshell Event Notification => C:\Users\Figo\AppData\Local\Temp\SBCint2.exe <==== ATTENTION Task: {C19FDC78-75A7-4EE7-A21D-602F11229DE2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d No Task File <==== ATTENTION Task: {DEDDDCD5-3959-4624-85E6-6D3876FC7E19} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d No Task File <==== ATTENTION Task: {F21E9182-51EB-47F6-AD7E-0D2DE2E90EEE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent No Task File <==== ATTENTION Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f C:\Program Files (x86)\MiuiTab HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oursurfin...ASY304032240322 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfin...q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfin...ASY304032240322 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfin...q={searchTerms} HKU\S-1-5-21-2705386953-3286083312-722412902-1050\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-...q={searchTerms} HKU\S-1-5-21-2705386953-3286083312-722412902-1050\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfin...ASY304032240322 HKU\S-1-5-21-2705386953-3286083312-722412902-1050\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-...q={searchTerms} SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfin...q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfin...q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfin...q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfin...q={searchTerms} SearchScopes: HKU\S-1-5-21-2705386953-3286083312-722412902-1050 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com...q={searchTerms} SearchScopes: HKU\S-1-5-21-2705386953-3286083312-722412902-1050 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com...q={searchTerms} SearchScopes: HKU\S-1-5-21-2705386953-3286083312-722412902-1050 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com...q={searchTerms} SearchScopes: HKU\S-1-5-21-2705386953-3286083312-722412902-1050 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com...q={searchTerms} SearchScopes: HKU\S-1-5-21-2705386953-3286083312-722412902-1050 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com...q={searchTerms} BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-15] (Thinkgood Co. Limited) BHO-x32: Swift Record 1.0.0.7 -> {2247a894-1cf2-41be-b39a-beaba7cadcdc} -> C:\Program Files (x86)\Swift Record\SwiftRecordbho.dll [2015-06-05] (Swift Record) BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-15] (Thinkgood Co. Limited) C:\Program Files (x86)\Swift Record FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: delta-homes FF SelectedSearchEngine: delta-homes FF SearchPlugin: C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\searchplugins\delta-homes.xml [2015-07-30] FF SearchPlugin: C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\searchplugins\oursurfing.xml [2015-07-16] FF Extension: Default NewTab - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\default_newtabff@gmail.com [2015-07-16] FF Extension: Default SearchProtected - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\defsearchp@gmail.com [2015-07-16] FF Extension: QuickSearch - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\searchffv2@gmail.com [2015-06-05] FF Extension: Search Enginer - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\sweetsearch@gmail.com [2015-06-05] FF Extension: Swift Record 1.0.1 - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\firefox@theswiftrecord.com.xpi [2015-06-05] FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Figo\AppData\Roaming\Mozilla\Firefox\Profiles\s02jb548.default\extensions\searchengine@gmail.com FF HKLM-x32\...\Firefox\Extensions: [searchffv2@gmail.com] - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\extensions\searchffv2@gmail.com FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\extensions\sweetsearch@gmail.com FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\extensions\default_newtabff@gmail.com FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\extensions\defsearchp@gmail.com R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-07-15] (XTab system) S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] C:\ProgramData\boost_interprocess EmptyTemp: ***************** "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0063E258-2276-4EAC-8462-088BE4D79233}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0063E258-2276-4EAC-8462-088BE4D79233}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{078E29BA-7A4A-4639-BC28-8C4472591377}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{078E29BA-7A4A-4639-BC28-8C4472591377}" => key removed successfully C:\Windows\System32\Tasks\WINshell Event Logging => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WINshell Event Logging" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{08EDA4D1-DA72-458A-8542-FD3DD3F0E833}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08EDA4D1-DA72-458A-8542-FD3DD3F0E833}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\T{2C15334C-B4A2-4022-9995-B896AE6B94F4} => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\TreeT\Microsoft\Windows\File Classification Infrastructure\Property Definition Sync => key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4CABC4F8-B5E8-48EA-BA05-622E618A11FD}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4CABC4F8-B5E8-48EA-BA05-622E618A11FD}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52279677-8374-4A9C-B7A2-32D5DA41F1A7}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52279677-8374-4A9C-B7A2-32D5DA41F1A7}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6C6BD1F8-89DB-4FF1-821A-5086F6AE6914}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C6BD1F8-89DB-4FF1-821A-5086F6AE6914}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6F6985AD-E55C-46C9-BB08-C3D688A39256}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F6985AD-E55C-46C9-BB08-C3D688A39256}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A514892A-42F6-4BCB-827C-98FE95667D8B}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A514892A-42F6-4BCB-827C-98FE95667D8B}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B649D2B9-E07B-498B-9942-92E4C83A81C0}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B649D2B9-E07B-498B-9942-92E4C83A81C0}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF8EB137-4656-4C6B-AF10-D0DD0776B728}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF8EB137-4656-4C6B-AF10-D0DD0776B728}" => key removed successfully C:\Windows\System32\Tasks\WINshell Event Notification => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WINshell Event Notification" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C19FDC78-75A7-4EE7-A21D-602F11229DE2}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C19FDC78-75A7-4EE7-A21D-602F11229DE2}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DEDDDCD5-3959-4624-85E6-6D3876FC7E19}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DEDDDCD5-3959-4624-85E6-6D3876FC7E19}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F21E9182-51EB-47F6-AD7E-0D2DE2E90EEE}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F21E9182-51EB-47F6-AD7E-0D2DE2E90EEE}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => key removed successfully ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= "C:\Program Files (x86)\MiuiTab" => File/Folder not found. "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-2705386953-3286083312-722412902-1050\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKU\S-1-5-21-2705386953-3286083312-722412902-1050\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKU\S-1-5-21-2705386953-3286083312-722412902-1050\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKU\S-1-5-21-2705386953-3286083312-722412902-1050\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully "HKU\S-1-5-21-2705386953-3286083312-722412902-1050\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => key removed successfully HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found. HKU\S-1-5-21-2705386953-3286083312-722412902-1050\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => key not found. HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => key not found. HKU\S-1-5-21-2705386953-3286083312-722412902-1050\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKU\S-1-5-21-2705386953-3286083312-722412902-1050\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => key not found. HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => key not found. HKCR\Wow6432Node\CLSID\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2247a894-1cf2-41be-b39a-beaba7cadcdc} => key not found. HKCR\Wow6432Node\CLSID\{2247a894-1cf2-41be-b39a-beaba7cadcdc} => key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} => key not found. HKCR\Wow6432Node\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} => key not found. "C:\Program Files (x86)\Swift Record" => File/Folder not found. Firefox newtab removed successfully Firefox DefaultSearchEngine removed successfully Firefox SelectedSearchEngine removed successfully "C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\searchplugins\delta-homes.xml" => not found. "C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\searchplugins\oursurfing.xml" => not found. C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\default_newtabff@gmail.com not found. C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\defsearchp@gmail.com not found. C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\searchffv2@gmail.com not found. C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\sweetsearch@gmail.com not found. C:\Users\Figo2\AppData\Roaming\Mozilla\Firefox\Profiles\swg4647o.default\Extensions\firefox@theswiftrecord.com.xpi not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\searchengine@gmail.com => value not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\searchffv2@gmail.com => value not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\sweetsearch@gmail.com => value not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\default_newtabff@gmail.com => value not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\defsearchp@gmail.com => value not found. IHProtect Service => service not found. VBoxNetFlt => service removed successfully wfpcapture => service removed successfully C:\ProgramData\boost_interprocess => moved successfully. EmptyTemp: => 280.8 MB temporary data Removed. The system needed a reboot.. ==== End of Fixlog 20:15:03 ====