Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-09-2014 Ran by susannah at 2014-09-16 11:01:45 Run:1 Running from C:\Users\susannah\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** start () C:\Program Files (x86)\grillaprice\grillaprice.exe (Installer Technology Co.) C:\Program Files (x86)\OpenSoftwareUpdater\OpenSoftwareUpdater.exe (Caphyon LTD) C:\Users\susannah\AppData\Local\Temp\761a6463dc85da45c90f2056d7ee0dc7\StageUpdater.exe HKLM-x32\...\Run: [OpenSoftwareUpdater] => C:\Program Files (x86)\OpenSoftwareUpdater\OpenSoftwareUpdater.exe [3733504 2014-04-08] (Installer Technology Co.) HKU\S-1-5-21-3700250420-1079645339-1157384645-1001\...\MountPoints2: {f1d9602d-7582-11e3-b677-bc773760321c} - E:\iLinker.exe ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: http=127.0.0.1:13081; HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406876400000.000000&ver=6.7&guid=64843-25496-1406922382712-E70B85027D62714D3F76EB8C0D75DE75 StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406876400000.000000&ver=6.7&guid=64843-25496-1406922382712-E70B85027D62714D3F76EB8C0D75DE75&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms} SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406876400000.000000&ver=6.7&guid=64843-25496-1406922382712-E70B85027D62714D3F76EB8C0D75DE75&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms} SearchScopes: HKCU - {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION Locked "GrillaPrice" service was unlocked successfully. <===== ATTENTION R2 GrillaPrice; C:\Program Files (x86)\grillaprice\grillaprice.exe [415744 2014-08-06] () [File not signed] S2 0265691360958439mcinstcleanup; C:\Users\susannah\AppData\Local\Temp\026569~1.EXE -cleanup -nolog [X] C:\Users\susannah\jobq.dat Task: {A439A1CA-C927-4489-952D-7A13F8D55E4C} - \PastaQuotes No Task File <==== ATTENTION Task: {D3739137-DF16-405B-873D-073A3224B227} - System32\Tasks\LaunchApp => C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe <==== ATTENTION C:\Program Files (x86)\MyPC Backup C:\Program Files (x86)\grillaprice emptytemp: end ***************** [2120] C:\Program Files (x86)\grillaprice\grillaprice.exe => Process closed successfully. [3220] C:\Program Files (x86)\OpenSoftwareUpdater\OpenSoftwareUpdater.exe => Process closed successfully. [5924] C:\Users\susannah\AppData\Local\Temp\761a6463dc85da45c90f2056d7ee0dc7\StageUpdater.exe => Process closed successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\OpenSoftwareUpdater => value deleted successfully. "HKU\S-1-5-21-3700250420-1079645339-1157384645-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f1d9602d-7582-11e3-b677-bc773760321c}" => Key deleted successfully. "HKCR\CLSID\{f1d9602d-7582-11e3-b677-bc773760321c}" => Key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt1" => Key deleted successfully. "HKCR\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" => Key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt2" => Key deleted successfully. "HKCR\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" => Key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt3" => Key deleted successfully. "HKCR\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" => Key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt4" => Key deleted successfully. "HKCR\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" => Key not found. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Default_Page_URL => value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key not found. "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}" => Key deleted successfully. "HKCR\CLSID\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}" => Key not found. "HKCR\PROTOCOLS\Handler\skype-ie-addon-data" => Key deleted successfully. "HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key not found. Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION => Error: No automatic fix found for this entry. Locked "GrillaPrice" service was unlocked successfully. <===== ATTENTION => Error: No automatic fix found for this entry. GrillaPrice => Unable to stop service GrillaPrice => Service deleted successfully. 0265691360958439mcinstcleanup => Service deleted successfully. C:\Users\susannah\jobq.dat => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A439A1CA-C927-4489-952D-7A13F8D55E4C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A439A1CA-C927-4489-952D-7A13F8D55E4C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PastaQuotes" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D3739137-DF16-405B-873D-073A3224B227}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3739137-DF16-405B-873D-073A3224B227}" => Key deleted successfully. C:\Windows\System32\Tasks\LaunchApp => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LaunchApp" => Key deleted successfully. "C:\Program Files (x86)\MyPC Backup" => File/Directory not found. "C:\Program Files (x86)\grillaprice" directory move: Could not move "C:\Program Files (x86)\grillaprice\grillaprice.exe" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\grillaprice" directory. => Scheduled to move on reboot. EmptyTemp: => Removed 548.2 MB temporary data. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-09-16 11:05:31)<= C:\Program Files (x86)\grillaprice\grillaprice.exe => Is moved successfully. C:\Program Files (x86)\grillaprice => Is moved successfully. ==== End of Fixlog ====