Thanks, I tried looking for Geekbuddy on the Revo Uninstaller, but I couldn't find it.
I went through the Fixlist.txt steps and restarted. Here is the log it produced.
Fix result of Farbar Recovery Scan Tool (x64) Version:06-08-2015
Ran by Andy (2015-08-06 20:25:02) Run:1
Running from C:\Users\Andy\Desktop
Loaded Profiles: Andy (Available Profiles: Andy & Guest)
Boot Mode: Normal
==============================================
fixlist content:
*****************
start
CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-18\...\Run: [] => [X]
C:\Program Files\Earth Networks\WeatherBug
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2277838659-3731106266-1447913230-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2015-05-21] (Comodo Security Solutions, Inc.)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70848 2015-06-01] (Comodo Security Solutions, Inc.)
S1 kybvchuj; \??\C:\Windows\system32\drivers\kybvchuj.sys [X]
2015-07-18 17:41 - 2015-07-18 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2015-07-18 17:41 - 2015-07-18 17:41 - 00000000 ____D C:\ProgramData\COMODO
2015-07-18 17:41 - 2015-07-18 17:41 - 00000000 ____D C:\Program Files\COMODO
2015-07-18 17:40 - 2015-07-18 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WeatherBug®
2015-07-18 17:40 - 2015-07-18 17:40 - 02659114 _____ (Media Freeware) C:\Users\Andy\Documents\epubreader_setup [1].exe
2015-07-18 17:40 - 2015-07-18 17:40 - 00000000 ____D C:\Program Files\Earth Networks
Task: {286D729A-7D20-4C57-810A-C00643ED818C} - \AutoKMS No Task File <==== ATTENTION
C:\Users\Andy\AppData\Local\Chromium
Task: {868C91D2-BAA0-48C1-94FC-C2AE65102824} - System32\Tasks\UpdateTask => C:\Users\Andy\AppData\Local\Chromium\APPLIC~1\450244~1.0\INSTAL~1\UNINST~1.EXE
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset catalog
CMD: ipconfig /flushdns
RemoveProxy:
hosts:
Emptytemp:
*****************
Processes closed successfully.
Restore point was successfully created.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
C:\Program Files\Earth Networks\WeatherBug => moved successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
GeekBuddyRSP => Service stopped successfully.
GeekBuddyRSP => service removed successfully
CLPSLauncher => service removed successfully
kybvchuj => service removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO => moved successfully.
C:\ProgramData\COMODO => moved successfully.
C:\Program Files\COMODO => moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WeatherBug® => moved successfully.
C:\Users\Andy\Documents\epubreader_setup [1].exe => moved successfully.
C:\Program Files\Earth Networks => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{286D729A-7D20-4C57-810A-C00643ED818C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{286D729A-7D20-4C57-810A-C00643ED818C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => key removed successfully
"C:\Users\Andy\AppData\Local\Chromium" => File/Folder not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{868C91D2-BAA0-48C1-94FC-C2AE65102824}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{868C91D2-BAA0-48C1-94FC-C2AE65102824}" => key removed successfully
C:\Windows\System32\Tasks\UpdateTask => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UpdateTask" => key removed successfully
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
{E710E447-C952-4802-8A70-5F2A28A31861} canceled.
1 out of 1 jobs canceled.
========= End of CMD: =========
========= netsh winsock reset catalog =========
Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.
========= End of CMD: =========
========= ipconfig /flushdns =========
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========= End of CMD: =========
========= RemoveProxy: =========
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
========= End of RemoveProxy: =========
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 529.6 MB temporary data Removed.
The system needed a reboot..
==== End of Fixlog 20:25:33 ====