Farbar Recovery Scan Tool (x64) Version: 13-05-2020 01
Ran by [removed] (19-05-2020 19:03:52)
Running from C:\Users\[removed]\Desktop
Boot Mode: Normal

================== Search Registry: "babylon;Bandoo;CleverSearch;conduit;datamngr;Fun4IM;iLivid;Istartsurf;kelkoopartners;Luckysearches;QuickSurf;Searchnu;Searchqu;SharkManCoupon;sushileads;SweetIM;SweetPacks;TidyNetwork;trolltech;whitesmoke;Wordinator;WordSurfer;OneUpdater;PlazyPCAP;SSOption" ===========


===================== Search result for "babylon" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"


===================== Search result for "Bandoo" ==========


===================== Search result for "CleverSearch" ==========


===================== Search result for "conduit" ==========


===================== Search result for "datamngr" ==========


===================== Search result for "Fun4IM" ==========


===================== Search result for "iLivid" ==========


===================== Search result for "Istartsurf" ==========


===================== Search result for "kelkoopartners" ==========


===================== Search result for "Luckysearches" ==========


===================== Search result for "QuickSurf" ==========


===================== Search result for "Searchnu" ==========


===================== Search result for "Searchqu" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1B217815-E578-4C96-8A2D-1B30392F0F91}]
""="ISearchQueryHelperPriv"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46A1205B-69C9-4745-B72F-A8A4FC8F24AE}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetails"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{69563521-C154-4B45-B884-035872E3F96A}]
""="ISearchQueryCondition"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}]
""="ISearchQueryHelper"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B217815-E578-4C96-8A2D-1B30392F0F91}]
""="ISearchQueryHelperPriv"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46A1205B-69C9-4745-B72F-A8A4FC8F24AE}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetails"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{69563521-C154-4B45-B884-035872E3F96A}]
""="ISearchQueryCondition"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}]
""="ISearchQueryHelper"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{CAC6C3B8-3C64-4DFD-AD9F-479E4D4065A4}]
""="__x_Windows_CApplicationModel_CSearch_CISearchQueryLinguisticDetailsFactory"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails]

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Search.SearchQueryLinguisticDetails]


===================== Search result for "SharkManCoupon" ==========


===================== Search result for "sushileads" ==========


===================== Search result for "SweetIM" ==========


===================== Search result for "SweetPacks" ==========


===================== Search result for "TidyNetwork" ==========


===================== Search result for "trolltech" ==========


===================== Search result for "whitesmoke" ==========


===================== Search result for "Wordinator" ==========


===================== Search result for "WordSurfer" ==========


===================== Search result for "OneUpdater" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\PhoneUpdateRestrictions]

[HKEY_USERS\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\OneDrive]
"StandaloneUpdaterSafeMode"="0"

[HKEY_USERS\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Users\adamv\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"="0x5341435001000000000000000700000028000000281DB601F1DEB60101000000000000000000000A00210000DB80FDAC2839D3010000000100000000"


===================== Search result for "PlazyPCAP" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"PlazyPCAP.exe"="9999"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\PlazyPCAP]

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\PlazyPCAP]
""="C:\Program Files (x86)\PlazyPCAP"

[HKEY_USERS\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"PlazyPCAP.exe"="9999"

[HKEY_USERS\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files (x86)\PlazyPCAP\uninstall.exe"="0x5341435001000000000000000700000028000000EAFE0400E6D9970101000000000000000000010600010000631F6E6F0EDED401000000000000000002000000280000000000000000000040000000000000000000000000000000004DB40000000000000100000001000000"


===================== Search result for "SSOption" ==========

[HKEY_LOCAL_MACHINE\DRIVERS\DriverDatabase\DriverPackages\rt640x64.inf_amd64_099459f60f2e1617\Configurations\RTL8168GU.ndi.NT\Driver]
"DisklessOption"="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1CCA72A7-3BD6-4826-8261-6C8189505D89}]
""="__x_Windows_CWeb_CUI_CInterop_CIWebViewControlProcessOptions"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1CCA72A7-3BD6-4826-8261-6C8189505D89}]
""="__x_Windows_CWeb_CUI_CInterop_CIWebViewControlProcessOptions"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Web.UI.Interop.WebViewControlProcessOptions]

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Web.UI.Interop.WebViewControlProcessOptions]

====== End of Search ======