Fix result of Farbar Recovery Scan Tool (x64) Version:23-12-2015 Ran by [removed] (2015-12-28 16:59:18) Run:3 Running from C:\Users\[removed]\Desktop [removed] Boot Mode: Normal ============================================== fixlist content: ***************** [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Freecorder\toolbar] [-HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\AppDataLow\Software\Freecorder\toolbar] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA91D994-CBC7-4C07-A5C3-A57665DC6E22}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{43AFEAC3-6385-4DFE-9870-C65B5A555412}\InprocServer32] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA91D994-CBC7-4C07-A5C3-A57665DC6E22}] Reg: Reg delete "HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted" /v "C:\Users\Rick\AppData\Local\Temp\IncrediMail_MediaBar_2.exe" /f [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ProtectorExe.EXE] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}\ProgID] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2212951C-1623-4095-906B-AC50B8F91016}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2212951C-1623-4095-906B-AC50B8F91016}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\AppID\ProtectorExe.EXE] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{B6FFEC3A-07F7-42D0-8829-B722F46DB533}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{2212951C-1623-4095-906B-AC50B8F91016}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\ProtectorExe.EXE] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}] [-HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\AppDataLow\Software\Freecorder\toolbar\Settings\FeatureProtector] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.Protector] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.Protector.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib\CurVer] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}] ***************** HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Freecorder\toolbar => key not found. HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\AppDataLow\Software\Freecorder\toolbar => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA91D994-CBC7-4C07-A5C3-A57665DC6E22} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{43AFEAC3-6385-4DFE-9870-C65B5A555412}\InprocServer32 => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA91D994-CBC7-4C07-A5C3-A57665DC6E22} => key not found. ========= Reg delete "HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted" /v "C:\Users\Rick\AppData\Local\Temp\IncrediMail_MediaBar_2.exe" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ProtectorExe.EXE => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}\ProgID => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2212951C-1623-4095-906B-AC50B8F91016} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2212951C-1623-4095-906B-AC50B8F91016} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\AppID\ProtectorExe.EXE => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7} => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7} => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{B6FFEC3A-07F7-42D0-8829-B722F46DB533} => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{B6FFEC3A-07F7-42D0-8829-B722F46DB533} => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD} => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD} => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{2212951C-1623-4095-906B-AC50B8F91016} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\ProtectorExe.EXE => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40} => key not found. HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\AppDataLow\Software\Freecorder\toolbar\Settings\FeatureProtector => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost.1 => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost.1 => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.Protector => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.Protector => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.Protector.1 => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.Protector.1 => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib\CurVer => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib.1 => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib.1 => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7} => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD} => key not found. ==== End of Fixlog 17:12:01 ====