Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-05-2015 Ran by Dell Latitude E5540 at 2015-05-12 20:57:21 Run:1 Running from C:\Users\Dell Latitude E5540\Desktop Loaded Profiles: Dell Latitude E5540 (Available profiles: Dell Latitude E5540) Boot Mode: Normal ============================================== Content of fixlist: ***************** Reg: reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyHunter4_is1" /f C:\Windows\Minidump\051215-5421-01.dmp C:\Users\Dell Latitude E5540\Downloads\SpyHunter-Installer.exe C:\Users\Dell Latitude E5540\Downloads\SpyHunter-Installer (1).exe C:\Users\Dell Latitude E5540\Downloads\SpyHunter 4.18.9.4384 Full Zarejestrowany 32-64 Bit.7z C:\Users\Dell Latitude E5540\Desktop\SpyHunter 4.18.9.4384 [Full już zarejestrowany by Hirania].exe C:\Windows\system32\Drivers\EsgScanner.sys C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpyHunter4 C:\Users\Dell Latitude E5540\Desktop\SpyHunter4.lnk C:\Windows\Minidump\051215-11890-01.dmp S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [16432 2015-01-30] (Enigma Software Group USA, LLC.) S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2015-01-30] () R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [770944 2015-01-30] (Enigma Software Group USA, LLC.) HKLM-x32\...\Run: [] => [X] HKLM\...\Run: [] => [X] EmptyTemp: ***************** ========= reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} ========= ========= End of Reg: ========= ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpyHunter4_is1" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= C:\Windows\Minidump\051215-5421-01.dmp => Moved successfully. C:\Users\Dell Latitude E5540\Downloads\SpyHunter-Installer.exe => Moved successfully. C:\Users\Dell Latitude E5540\Downloads\SpyHunter-Installer (1).exe => Moved successfully. C:\Users\Dell Latitude E5540\Downloads\SpyHunter 4.18.9.4384 Full Zarejestrowany 32-64 Bit.7z => Moved successfully. "C:\Users\Dell Latitude E5540\Desktop\SpyHunter 4.18.9.4384 [Full już zarejestrowany by Hirania].exe" => File/Directory not found. C:\Windows\system32\Drivers\EsgScanner.sys => Moved successfully. "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpyHunter4" => File/Directory not found. "C:\Users\Dell Latitude E5540\Desktop\SpyHunter4.lnk" => File/Directory not found. C:\Windows\Minidump\051215-11890-01.dmp => Moved successfully. esgiguard => Service deleted successfully. EsgScanner => Service deleted successfully. SpyHunter 4 Service => Service deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. EmptyTemp: => Removed 6.3 GB temporary data. The system needed a reboot. ==== End of Fixlog 20:58:14 ====