Farbar Recovery Scan Tool (x64) Version:28-06-2015 01 Ran by [removed] at 2015-07-01 13:25:22 Running from C:\Users\[removed]\Desktop Boot Mode: Normal ================== Search Registry: "Fun4IM;Bandoo;Searchnu;Searchqu;iLivid;whitesmoke;datamngr;kelkoopartners;trolltech;babylon;conduit;trovi;clientconnect;InternetEnhancer;Irrational Number Applications;hJsHWJnfOTx;WgYeNTMO" =========== ===================== Search result for "Searchqu" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b9f41624-2083-45cd-ac36-af8119a22a41}] ""="CLocationSearchQuery" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{69563521-C154-4B45-B884-035872E3F96A}] ""="ISearchQueryCondition" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{46A1205B-69C9-4745-B72F-A8A4FC8F24AE}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetails" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{46A1205B-69C9-4745-B72F-A8A4FC8F24AE}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetails" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" [HKEY_USERS\S-1-5-21-515130059-2430807289-3433730637-1001\Software\Classes\ActivatableClasses\CLSID\{B4D3E147-E963-562E-B1CB-6D689103948E}] "ActivatableClassId"="AppEx.Sports.Services.TypeDefs.Request.AppSearchQuery" [HKEY_USERS\S-1-5-21-515130059-2430807289-3433730637-1001_Classes\ActivatableClasses\CLSID\{B4D3E147-E963-562E-B1CB-6D689103948E}] "ActivatableClassId"="AppEx.Sports.Services.TypeDefs.Request.AppSearchQuery" ===================== Search result for "babylon" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}] "DllName"="BabylonToolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}] "DllName"="BabylonToolbarTlbr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}] "DllName"="BabylonToolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}] "DllName"="BabylonToolbarTlbr.dll" ===================== Search result for "conduit" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966] "09699DDB14539164D9A2C3DD3B1EF5E9"="C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll" ===================== Search result for "clientconnect" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" ===================== Search result for "InternetEnhancer" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\InternetEnhancer_RASAPI32] ===================== Search result for "WgYeNTMO" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\WgYeNTMO_RASAPI32] ====== End of Search ======