Farbar Recovery Scan Tool (x64) Version:31-12-2015
Ran by [removed] (2016-01-03 14:25:52)
Running from C:\Users\[removed]\Desktop
Boot Mode: Normal

================== Search Registry: "Fun4IM;Bandoo;Searchnu;Searchqu;iLivid;whitesmoke;datamngr;kelkoopartners;trolltech;babylon;conduit;trovi;clientconnect;DNS Unlocker" ===========


===================== Search result for "Searchqu" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b9f41624-2083-45cd-ac36-af8119a22a41}]
""="CLocationSearchQuery"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{69563521-C154-4B45-B884-035872E3F96A}]
""="ISearchQueryCondition"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}]
""="ISearchQueryHelper"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{46A1205B-69C9-4745-B72F-A8A4FC8F24AE}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetails"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}]
""="ISearchQueryHelper"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{46A1205B-69C9-4745-B72F-A8A4FC8F24AE}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetails"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}]
""="ISearchQueryHelper"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Classes\ActivatableClasses\CLSID\{28A69AB6-7DAD-5362-97BE-03E9BE72E3D6}]
"ActivatableClassId"="AppEx.Sports.Services.TypeDefs.Request.AppSearchQuery"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\ActivatableClasses\CLSID\{28A69AB6-7DAD-5362-97BE-03E9BE72E3D6}]
"ActivatableClassId"="AppEx.Sports.Services.TypeDefs.Request.AppSearchQuery"


===================== Search result for "datamngr" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\DataMngr]

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\DataMngr]


===================== Search result for "trolltech" ==========

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Trolltech]

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:]


===================== Search result for "babylon" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Babylon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1339.144]
"chrome homepages"="http://search.babylon.com/?affID=119776&babsrc=HP_ss_sps&mntrId=52B5083E8E22A2F8
http://www.google.com/
http://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=52B5083E8E22A2F8"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1519.190]
"chrome homepages"="http://search.babylon.com/?affID=119776&babsrc=HP_ss_sps&mntrId=52B5083E8E22A2F8
http://www.google.com/
http://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=52B5083E8E22A2F8"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1673.238]
"chrome homepages"="http://search.babylon.com/?affID=119776&babsrc=HP_ss_sps&mntrId=52B5083E8E22A2F8
http://www.google.com/
http://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=52B5083E8E22A2F8"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1694.246]
"chrome homepages"="http://search.babylon.com/?affID=119776&babsrc=HP_ss_sps&mntrId=52B5083E8E22A2F8
http://www.google.com/
http://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=52B5083E8E22A2F8"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.7.1769.27]
"chrome homepages"="http://search.babylon.com/?affID=119776&babsrc=HP_ss_sps&mntrId=52B5083E8E22A2F8
http://www.google.com/
http://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=52B5083E8E22A2F8"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.7.1832.68]
"chrome homepages"="http://search.babylon.com/?affID=119776&babsrc=HP_ss_sps&mntrId=52B5083E8E22A2F8
http://www.google.com/
http://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=52B5083E8E22A2F8"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\BabylonToolbar]

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com]

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Users\Steven\Downloads\Thievery_Corporation_The_Richest_Man_In_Babylon_320k.exe"="0x5341435001000000000000000700000028000000F84B0300AFB70300010000000000000000000106000100002EF6C8A3A56ACD010000000000000000050000001000000000000000000000000000000000000000020000002800000000000000000000400010000000000000000000000000000093480000000000000100000001000000"


===================== Search result for "conduit" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966]
"045F27F206F16624596059B2126D46D0"="C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll"

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Conduit]


===================== Search result for "clientconnect" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}]
""="INapEnforcementClientConnectionPrivate"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BD244906-70DD-4690-BEEA-648653393500}]
""="INapEnforcementClientConnection2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}]
""="INapEnforcementClientConnection"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}]
""="INapEnforcementClientConnectionPrivate"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BD244906-70DD-4690-BEEA-648653393500}]
""="INapEnforcementClientConnection2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}]
""="INapEnforcementClientConnection"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{8DD5142F-7E23-4c44-9DD7-98B9C7032535}]
""="INapEnforcementClientConnectionPrivate"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{BD244906-70DD-4690-BEEA-648653393500}]
""="INapEnforcementClientConnection2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{FB3A3505-DDB1-468A-B307-F328A57419D8}]
""="INapEnforcementClientConnection"


===================== Search result for "DNS Unlocker" ==========

[HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files (x86)\DNS Unlocker\unins000.exe"="0x5341435001000000000000000700000028000000A1FA0A000000000003000000000000000000030600210000975FD891C99ECE0100000000000000000200000028000000000000000000000000000000000000000000000000000000EAD40200000000000400000004000000"

====== End of Search ======