Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-04-2015 04 Ran by michael at 2015-04-16 11:45:10 Run:1 Running from C:\Users\michael\Downloads Loaded Profiles: michael (Available profiles: michael) Boot Mode: Normal ============================================== Content of fixlist: ***************** CreateRestorePoint: HKU\S-1-5-21-3084480920-560358504-3113808803-1001\...\Run: [Itibiti.exe] => C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe C:\Program Files (x86)\Itibiti Soft Phone 2015-04-10 01:05 - 2015-04-10 01:05 - 00000000 ____D () C:\Users\michael\AppData\Roaming\OpenCandy 2015-03-14 04:15 - 2015-03-14 07:45 - 00000000 ____D () C:\ProgramData\{28ce3d12-50b6-cd01-28ce-e3d1250bf449} 2015-03-14 07:29 - 2015-02-15 12:59 - 00000000 ____D () C:\ProgramData\{fa0f4b7a-f4fa-2c83-fa0f-f4b7af4f2deb} 2015-01-09 00:22 - 2015-01-09 00:22 - 0000064 _____ () C:\Users\michael\AppData\Local\ce922288d238a240c7067ea813b74bb3 Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers ***************** Restore point was successfully created. HKU\S-1-5-21-3084480920-560358504-3113808803-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Itibiti.exe => value deleted successfully. "C:\Program Files (x86)\Itibiti Soft Phone" => File/Directory not found. C:\Users\michael\AppData\Roaming\OpenCandy => Moved successfully. C:\ProgramData\{28ce3d12-50b6-cd01-28ce-e3d1250bf449} => Moved successfully. C:\ProgramData\{fa0f4b7a-f4fa-2c83-fa0f-f4b7af4f2deb} => Moved successfully. C:\Users\michael\AppData\Local\ce922288d238a240c7067ea813b74bb3 => Moved successfully. ========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f ========= The operation completed successfully. ========= End of Reg: ========= ========= RemoveProxy: ========= HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully. HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully. HKU\S-1-5-21-3084480920-560358504-3113808803-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully. HKU\S-1-5-21-3084480920-560358504-3113808803-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully. ========= End of RemoveProxy: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 [ 7.7.9600 ] BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. {BD411979-8024-430D-9A35-702BA67592CE} canceled. 1 out of 1 jobs canceled. ========= End of CMD: ========= EmptyTemp: => Removed 5 GB temporary data. The system needed a reboot. ==== End of Fixlog 11:48:40 ====