Fix result of Farbar Recovery Scan Tool (x64) Version:05-07-2015 Ran by Stan at 2015-07-08 12:11:19 Run:1 Running from C:\Users\Stan\Desktop Loaded Profiles: Stan (Available Profiles: Barbara & Stan & barb & BarBara_2 & Guest) Boot Mode: Normal ============================================== fixlist content: ***************** CreateRestorePoint: CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION FF user.js: detected! => C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\user.js [2015-04-07] FF Extension: couponcheapchea - C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\orleycwpltgfawnabh@gkeyczqoykonqge.net [2015-07-01] FF Extension: cheap4alll - C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\rEt9l@7Y2.net [2015-07-01] CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.googl...jjmlmojhbllhbho CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.googl...jjmlmojhbllhbho 2015-07-06 14:59 - 2015-07-06 14:59 - 00000000 ____D C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44} 2015-06-28 13:53 - 2015-06-28 13:53 - 00000000 ____D C:\ProgramData\16125460926744368631 2015-06-17 22:06 - 2015-06-17 22:06 - 00000079 _____ C:\Program Files (x86)\prefs.js 2015-07-05 20:27 - 2015-04-09 00:16 - 00000000 __SHD C:\Users\barb\AppData\Local\EmieUserList 2015-07-05 20:27 - 2015-04-09 00:16 - 00000000 __SHD C:\Users\barb\AppData\Local\EmieSiteList 2015-07-05 20:27 - 2015-04-09 00:16 - 00000000 __SHD C:\Users\barb\AppData\Local\EmieBrowserModeList 2015-07-03 22:28 - 2015-03-24 21:52 - 00000000 __SHD C:\Users\Stan\AppData\Local\EmieUserList 2015-07-03 22:28 - 2015-03-24 21:52 - 00000000 __SHD C:\Users\Stan\AppData\Local\EmieSiteList 2015-07-03 22:28 - 2015-03-24 21:52 - 00000000 __SHD C:\Users\Stan\AppData\Local\EmieBrowserModeList 2015-07-01 19:45 - 2015-03-18 20:06 - 00000000 __SHD C:\Users\Barbara\AppData\Local\EmieUserList 2015-07-01 19:45 - 2015-03-18 20:06 - 00000000 __SHD C:\Users\Barbara\AppData\Local\EmieSiteList 2015-07-01 19:45 - 2015-03-18 20:06 - 00000000 __SHD C:\Users\Barbara\AppData\Local\EmieBrowserModeList 2015-06-17 12:31 - 2015-04-07 23:43 - 00000000 ____D C:\ProgramData\75b73cb40000367a C:\Users\Public\VOIP.dat RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers ***************** Restore point was successfully created. "HKLM\SOFTWARE\Policies\Google" => key removed successfully C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\user.js => moved successfully. C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\orleycwpltgfawnabh@gkeyczqoykonqge.net => moved successfully. C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\rEt9l@7Y2.net => moved successfully. "HKLM\SOFTWARE\Google\Chrome\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho" => key removed successfully "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho" => key removed successfully C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44} => moved successfully. C:\ProgramData\16125460926744368631 => moved successfully. C:\Program Files (x86)\prefs.js => moved successfully. C:\Users\barb\AppData\Local\EmieUserList => moved successfully. C:\Users\barb\AppData\Local\EmieSiteList => moved successfully. C:\Users\barb\AppData\Local\EmieBrowserModeList => moved successfully. C:\Users\Stan\AppData\Local\EmieUserList => moved successfully. C:\Users\Stan\AppData\Local\EmieSiteList => moved successfully. C:\Users\Stan\AppData\Local\EmieBrowserModeList => moved successfully. C:\Users\Barbara\AppData\Local\EmieUserList => moved successfully. C:\Users\Barbara\AppData\Local\EmieSiteList => moved successfully. C:\Users\Barbara\AppData\Local\EmieBrowserModeList => moved successfully. C:\ProgramData\75b73cb40000367a => moved successfully. C:\Users\Public\VOIP.dat => moved successfully. ========= RemoveProxy: ========= HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully HKU\S-1-5-21-1652165426-3740713580-4145899124-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\S-1-5-21-1652165426-3740713580-4145899124-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully ========= End of RemoveProxy: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 [ 7.7.9600 ] BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. 0 out of 0 jobs canceled. ========= End of CMD: ========= EmptyTemp: => 1.3 GB temporary data Removed. The system needed a reboot.. ==== End of Fixlog 12:11:45 ====