Farbar Recovery Scan Tool (x64) Version:20-12-2015 Ran by [removed] (2015-12-27 20:51:50) Running from C:\Users\[removed]\Downloads Boot Mode: Normal ================== Search Registry: "Fun4IM;Bandoo;Searchnu;Searchqu;iLivid;whitesmoke;datamngr;kelkoopartners;trolltech;babylon;conduit;trovi;clientconnect;yahoo" =========== ===================== Search result for "Searchqu" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1B217815-E578-4C96-8A2D-1B30392F0F91}] ""="ISearchQueryHelperPriv" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{69563521-C154-4B45-B884-035872E3F96A}] ""="ISearchQueryCondition" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B217815-E578-4C96-8A2D-1B30392F0F91}] ""="ISearchQueryHelperPriv" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{69563521-C154-4B45-B884-035872E3F96A}] ""="ISearchQueryCondition" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\WindowsRuntime\CLSID\{d6519d77-1cdf-30a5-812e-d88fb4798a29}] "ActivatableClassId"="Windows.ApplicationModel.Search.SearchQueryLinguisticDetails" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{1B217815-E578-4C96-8A2D-1B30392F0F91}] ""="ISearchQueryHelperPriv" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{69563521-C154-4B45-B884-035872E3F96A}] ""="ISearchQueryCondition" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1B217815-E578-4C96-8A2D-1B30392F0F91}] ""="ISearchQueryHelperPriv" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{69563521-C154-4B45-B884-035872E3F96A}] ""="ISearchQueryCondition" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B217815-E578-4C96-8A2D-1B30392F0F91}] ""="ISearchQueryHelperPriv" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{69563521-C154-4B45-B884-035872E3F96A}] ""="ISearchQueryCondition" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\WindowsRuntime\CLSID\{d6519d77-1cdf-30a5-812e-d88fb4798a29}] "ActivatableClassId"="Windows.ApplicationModel.Search.SearchQueryLinguisticDetails" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{1B217815-E578-4C96-8A2D-1B30392F0F91}] ""="ISearchQueryHelperPriv" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{69563521-C154-4B45-B884-035872E3F96A}] ""="ISearchQueryCondition" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}] ""="ISearchQueryHelper" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}] ""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory" ===================== Search result for "babylon" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}] "DllName"="BabylonToolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}] "DllName"="BabylonToolbarTlbr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}] "DllName"="BabylonToolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}] "DllName"="BabylonToolbarTlbr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}] "DllName"="BabylonToolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}] "DllName"="BabylonToolbarTlbr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}] "DllName"="BabylonToolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}] "DllName"="BabylonToolbarTlbr.dll" ===================== Search result for "clientconnect" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}] ""="INapEnforcementClientConnectionPrivate" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{BD244906-70DD-4690-BEEA-648653393500}] ""="INapEnforcementClientConnection2" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}] ""="INapEnforcementClientConnection" ===================== Search result for "yahoo" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityStore\LogonCache\D7F9888F-E3FC-49b0-9EA6-A85B5F392A4F\Name2Sid\042cacdf2300b099d8be154be7635172aedb10e99caf79c0c9bde03c2410a5ad] "IdentityName"="[removed]" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK] "YahooMusicEngine.exe"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK] "YahooMusicEngine.exe"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Razer\Synapse\Analytics] "CurrentUser"="[removed]" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityStore\LogonCache\D7F9888F-E3FC-49b0-9EA6-A85B5F392A4F\Name2Sid\042cacdf2300b099d8be154be7635172aedb10e99caf79c0c9bde03c2410a5ad] "IdentityName"="[removed]" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK] "YahooMusicEngine.exe"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK] "YahooMusicEngine.exe"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Razer\Synapse\Analytics] "CurrentUser"="[removed]" [HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities\[removed]] [HKEY_USERS\S-1-5-21-3789599527-899915616-2387813075-1000\SOFTWARE\Microsoft\ActiveSync\Partners\{0C4038CC-5C89-4CCF-8C70-C87FBA04C20C}] "Email"="[removed]" [HKEY_USERS\S-1-5-21-3789599527-899915616-2387813075-1000\SOFTWARE\Microsoft\IdentityCRL\UserExtendedProperties\[removed]] [HKEY_USERS\S-1-5-21-3789599527-899915616-2387813075-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\yahoo.com] [HKEY_USERS\S-1-5-21-3789599527-899915616-2387813075-1000\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TypedURLs] "url35"="http://yahoo.com/" [HKEY_USERS\S-1-5-18\Software\Microsoft\IdentityCRL\StoredIdentities\[removed]] ====== End of Search ======