Fix result of Farbar Recovery Scan Tool (x64) Version:18-04-2016 Ran by USER (2016-04-19 18:34:00) Run:2 Running from C:\Users\USER\Desktop Loaded Profiles: USER (Available Profiles: USER) Boot Mode: Normal ============================================== fixlist content: ***************** start CloseProcesses: CreateRestorePoint: HKU\S-1-5-21-2429467849-1766266843-749531403-1001\...\Run: [IDMan] => C:\Users\USER\AppData\Local\Temp\IDMan .exe [3911248 2015-10-21] (Tonec Inc.) <===== ATTENTION HKU\S-1-5-21-2429467849-1766266843-749531403-1001\...\MountPoints2: E - "E:\setup.exe" FF HKU\S-1-5-21-2429467849-1766266843-749531403-1001\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Users\USER\AppData\Local\Temp\idmmzcc2.xpi => not found CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Users\USER\AppData\Local\Temp\IDMGCExt.crx CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Users\USER\AppData\Local\Temp\IDMGCExt.crx 2016-04-18 12:13 - 2015-11-02 22:31 - 00000000 ____D C:\Users\USER\AppData\Roaming\IDM C:\Users\USER\AppData\Local\Temp\IDMan .exe CustomCLSID: HKU\S-1-5-21-2429467849-1766266843-749531403-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\USER\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => No File Task: {17712F98-03D1-498E-9EAC-B9C75E2F24A2} - \KMS Server Daily Activate -> No File <==== ATTENTION Task: {376BD59C-62F1-4FAD-9814-636C5D2FC231} - \KMS Server OnLogon Activate -> No File <==== ATTENTION Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2429467849-1766266843-749531403-1001Core.job => C:\Users\USER\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2429467849-1766266843-749531403-1001UA.job => C:\Users\USER\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2429467849-1766266843-749531403-1001Core.job => C:\Users\USER\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2429467849-1766266843-749531403-1001UA.job => C:\Users\USER\AppData\Local\Google\Update\GoogleUpdate.exe EmptyTemp: Reboot: end ***************** Processes closed successfully. Restore point was successfully created. HKU\S-1-5-21-2429467849-1766266843-749531403-1001\Software\Microsoft\Windows\CurrentVersion\Run\\IDMan => value not found. "HKU\S-1-5-21-2429467849-1766266843-749531403-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E" => key removed successfully HKU\S-1-5-21-2429467849-1766266843-749531403-1001\Software\Mozilla\Firefox\Extensions\\mozilla_cc2@internetdownloadmanager.com => value not found. HKLM\SOFTWARE\Google\Chrome\Extensions\ngpampappnmepgilojfohadhhmbhlaek => key not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ngpampappnmepgilojfohadhhmbhlaek => key not found. "C:\Users\USER\AppData\Roaming\IDM" => not found. "C:\Users\USER\AppData\Local\Temp\IDMan .exe" => not found. HKU\S-1-5-21-2429467849-1766266843-749531403-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF} => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{17712F98-03D1-498E-9EAC-B9C75E2F24A2} => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KMS Server Daily Activate => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{376BD59C-62F1-4FAD-9814-636C5D2FC231} => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KMS Server OnLogon Activate => key not found. C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2429467849-1766266843-749531403-1001Core.job => not found. C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2429467849-1766266843-749531403-1001UA.job => not found. C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2429467849-1766266843-749531403-1001Core.job => not found. C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2429467849-1766266843-749531403-1001UA.job => not found. EmptyTemp: => 301.3 MB temporary data Removed. The system needed a reboot. ==== End of Fixlog 18:34:29 ====