Fix result of Farbar Recovery Scan Tool (x64) Version: 12.02.2018 Ran by jacqu (14-02-2018 19:58:46) Run:1 Running from C:\Users\jacqu\Downloads Loaded Profiles: jacqu (Available Profiles: jacqu) Boot Mode: Normal ============================================== fixlist content: ***************** CreateRestorePoint: CloseProcesses: EmptyTemp: Hosts: DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|firefox DeleteValue: HKU\S-1-5-21-938863385-1185760835-2225922164-1001\Software\Microsoft\Windows\CurrentVersion\Run|firefox DeleteKey: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui DeleteKey: HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} <== Reinstall Software igfxcui NO SCRIPT FOR G0 - GCSP: Preferences [User Data\Default][HomePage] http://d.joinhoney.com NO SCRIPT FOR G0 - GCSP: Preferences [User Data\Default][HomePage] http://login.live.com NO SCRIPT FOR G0 - GCSP: Preferences [User Data\Default][HomePage] http://s.joinhoney.com DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{275D7901-D257-45BD-92CA-3ECE61997491}C:\program files (x86)\lonelyscreen\lonelyscreen.exe DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{70AFC9A7-58AC-40AF-ACDE-CFC5E27E4737}C:\program files (x86)\lonelyscreen\lonelyscreen.exe C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\000 C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\001 C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\002 C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\003 C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\004 C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\005 C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\006 C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\poghlonenmjdkfghdpfomojhhfggildk DeleteKey: HKLM\SOFTWARE\Mozilla DeleteKey: HKLM\SOFTWARE\MozillaPlugins DeleteKey: HKLM\SOFTWARE\WOW6432Node\Mozilla DeleteKey: HKLM\SOFTWARE\WOW6432Node\MozillaPlugins C:\Users\jacqu\AppData\Roaming\AMozilla C:\Users\jacqu\AppData\Roaming\Mozilla C:\Users\jacqu\AppData\Local\AMozilla DeleteKey: HKCU\SOFTWARE\Malwarebytes C:\Program Files (x86)\Spybot - Search & Destroy 2 C:\ProgramData\Spybot - Search & Destroy ***************** Restore point was successfully created. Processes closed successfully. C:\Windows\System32\Drivers\etc\hosts => moved successfully Hosts restored successfully. "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\firefox" => removed successfully "HKU\S-1-5-21-938863385-1185760835-2225922164-1001\Software\Microsoft\Windows\CurrentVersion\Run\\firefox" => not found "HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => removed successfully HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} <== Reinstall Software igfxcui => key not found NO SCRIPT FOR G0 - GCSP: Preferences [User Data\Default][HomePage] http://d.joinhoney.com => Error: No automatic fix found for this entry. NO SCRIPT FOR G0 - GCSP: Preferences [User Data\Default][HomePage] http://login.live.com => Error: No automatic fix found for this entry. NO SCRIPT FOR G0 - GCSP: Preferences [User Data\Default][HomePage] http://s.joinhoney.com => Error: No automatic fix found for this entry. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{275D7901-D257-45BD-92CA-3ECE61997491}C:\program files (x86)\lonelyscreen\lonelyscreen.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{70AFC9A7-58AC-40AF-ACDE-CFC5E27E4737}C:\program files (x86)\lonelyscreen\lonelyscreen.exe" => removed successfully C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\000 => moved successfully C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\001 => moved successfully C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\002 => moved successfully C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\003 => moved successfully C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\004 => moved successfully C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\005 => moved successfully C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\File System\006 => moved successfully "C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\poghlonenmjdkfghdpfomojhhfggildk" => not found HKLM\SOFTWARE\Mozilla => key not found "HKLM\SOFTWARE\MozillaPlugins" => removed successfully "HKLM\SOFTWARE\WOW6432Node\Mozilla" => removed successfully "HKLM\SOFTWARE\WOW6432Node\MozillaPlugins" => removed successfully C:\Users\jacqu\AppData\Roaming\AMozilla => moved successfully C:\Users\jacqu\AppData\Roaming\Mozilla => moved successfully C:\Users\jacqu\AppData\Local\AMozilla => moved successfully "HKCU\SOFTWARE\Malwarebytes" => removed successfully C:\Program Files (x86)\Spybot - Search & Destroy 2 => moved successfully C:\ProgramData\Spybot - Search & Destroy => moved successfully =========== EmptyTemp: ========== BITS transfer queue => 7888896 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 69356572 B Java, Flash, Steam htmlcache => 173528959 B Windows/system/drivers => 1446059 B Edge => 6896689 B Chrome => 738648312 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 27092 B NetworkService => 7252 B jacqu => 101371592 B RecycleBin => 390947525 B EmptyTemp: => 1.4 GB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 19:59:13 ====