Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-02-2014
Ran by Arthur at 2014-02-08 10:17:42 Run:2
Running from C:\Users\Arthur\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
start
() C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe
C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe
(BitTorrent Inc.) D:\uTorrent.exe
D:\uTorrent.exe
() C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe
C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe
C:\ProgramData\BetterSoft
HKLM-x32\...\Run: [BrowserPlugInHelper] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe [1962896 2013-12-19] ()
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1743648 2013-06-13] (Wondershare)
HKU\S-1-5-21-1567553520-2598224956-3562314209-1001\...\Run: [uTorrent] - D:\uTorrent.exe [802136 2013-05-02] (BitTorrent Inc.)
AppInit_DLLs-x32: c:\progra~2\contin~1\sprote~1.dll => C:\Program Files (x86)\ContinueToSave\sprotector.dll [1057280 2013-01-24] ()
C:\Program Files (x86)\ContinueToSave\sprotector.dll
C:\Program Files (x86)\ContinueToSave
AppInit_DLLs-x32: c:\progra~2\simple~1\sprote~1.dll => C:\Program Files (x86)\SimpleSpeedy\sprotector.dll [1032704 2013-01-24] ()
C:\Program Files (x86)\SimpleSpeedy\sprotector.dll
C:\Program Files (x86)\SimpleSpeedy
URLSearchHook: HKLM-x32 - BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll No File
URLSearchHook: HKCU - (No Name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No File
URLSearchHook: HKCU - BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll No File
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL =
www.searchqu.com/web?src=ieb&appid=0&systemid=421&sr=0&q={searchTerms}SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL =
www.searchqu.com/web?src=ieb&appid=0&systemid=421&sr=0&q={searchTerms}SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL =
www.searchqu.com/web?src=ieb&appid=0&systemid=421&sr=0&q={searchTerms}SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL =
www.searchqu.com/web?src=ieb&appid=0&systemid=421&sr=0&q={searchTerms}SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = websearch.simplespeedy.info/?l=1&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL =
www.searchqu.com/web?src=ieb&appid=0&systemid=421&sr=0&q={searchTerms}SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = websearch.simplespeedy.info/?l=1&q={searchTerms}
BHO-x32: continuetosave - {5B1D5685-C658-464D-33CF-1AE03D034289} - C:\ProgramData\continuetosave\5102c7e7f2dec.dll ()
BHO-x32: Wondershare Video Converter Ultimate - {65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRIEPlugin.dll (Wondershare Software Co., Ltd.)
BHO-x32: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll No File
BHO-x32: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll No File
Toolbar: HKLM-x32 - BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll No File
Toolbar: HKLM-x32 - Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll No File
BHO-x32: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Arthur\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)
Toolbar: HKCU - No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
Toolbar: HKCU - No Name - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\SearchResults.xml
CHR HKLM-x32\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Arthur\AppData\Local\Temp\ccex.crx [2012-03-07]
CHR HKLM-x32\...\Chrome\Extension: [mhfdcmehmjcclgopdodkjdicohagipid] - C:\Users\Arthur\AppData\Local\Temp\ccex.crx [2012-03-07]
2014-02-05 17:23 - 2014-02-05 17:23 - 02080256 _____ (Farbar) C:\Users\Arthur\Downloads\FRST64.exe
2014-02-03 20:13 - 2014-02-03 20:13 - 00921000 _____ (Oracle Corporation) C:\Users\Arthur\Downloads\jxpiinstall(5).exe
2014-02-03 20:09 - 2014-02-03 20:09 - 00921000 _____ (Oracle Corporation) C:\Users\Arthur\Downloads\jxpiinstall(4).exe
2014-02-03 17:57 - 2014-02-03 17:57 - 03053496 ____N (Symantec Corporation) C:\Users\Arthur\Downloads\NPE.exe
C:\Users\Ann-Helen\AppData\Local\Temp\install_flashplayer11x32au_mssa_aih_1.exe
C:\Users\Ann-Helen\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\AskSLib.dll
C:\Users\Arthur\AppData\Local\Temp\GUninstaller.exe
C:\Users\Arthur\AppData\Local\Temp\i4jdel0.exe
C:\Users\Arthur\AppData\Local\Temp\installhelper.dll
C:\Users\Arthur\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Arthur\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\Arthur\AppData\Local\Temp\n5y8l2rx.dll
C:\Users\Arthur\AppData\Local\Temp\SetupDataMngr_Searchqu.exe
C:\Users\Arthur\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Arthur\AppData\Local\Temp\softonic_chr_1-8-16-10.exe
C:\Users\Arthur\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Arthur\AppData\Local\Temp\SpotifyUpgrader.exe
C:\Users\Arthur\AppData\Local\Temp\SRAssetsHelper.dll
C:\Users\Arthur\AppData\Local\Temp\tbuTor.dll
C:\Users\Arthur\AppData\Local\Temp\uninst1.exe
C:\Users\Arthur\AppData\Local\Temp\utt49BC.tmp.exe
C:\Users\Arthur\AppData\Local\Temp\video-converter-ultimate_full975.exe
C:\Users\Arthur\AppData\Local\Temp\vlc-2.0.2-win32.exe
C:\Users\Arthur\AppData\Local\Temp\vlc-2.0.4-win32.exe
C:\Users\Arthur\AppData\Local\Temp\_is3138.exe
C:\Users\Arthur\AppData\Local\Temp\_is3E7.exe
C:\Users\Arthur\AppData\Local\Temp\_is56AC.exe
C:\Users\Arthur\AppData\Local\Temp\_is61DF.exe
C:\Users\Arthur\AppData\Local\Temp\_is7ABA.exe
C:\Users\Arthur\AppData\Local\Temp\_isA72D.exe
C:\Users\Arthur\AppData\Local\Temp\_isD5BC.exe
C:\Users\Arthur\AppData\Local\Temp\~SpUnin~.exe
Task: {57F80B5B-4183-4718-9EE2-5DC07C0BF971} - System32\Tasks\schedule!1143840799 => C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe [2013-01-23] () <==== ATTENTION
Task: C:\windows\Tasks\schedule!1143840799.job => C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe <==== ATTENTION
2013-01-24 12:32 - 2013-01-24 12:32 - 01057280 _____ () C:\Program Files (x86)\ContinueToSave\sprotector.dll
2013-01-24 12:20 - 2013-01-24 12:20 - 01032704 _____ () C:\Program Files (x86)\SimpleSpeedy\sprotector.dll
2013-01-25 18:35 - 2013-01-25 18:59 - 00120832 _____ () C:\ProgramData\continuetosave\5102c7e7f2dec.dll
AlternateDataStreams: C:\ProgramData\Temp:7631EA83
end
*****************
C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe => No running process found
"C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe" => File/Directory not found.
D:\uTorrent.exe => No running process found
"D:\uTorrent.exe" => File/Directory not found.
C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe => No running process found
"C:\ProgramData\BetterSoft\ContinueToSave\ContinueToSave.exe" => File/Directory not found.
"C:\ProgramData\BetterSoft" => File/Directory not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\BrowserPlugInHelper => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Wondershare Helper Compact.exe => Value deleted successfully.
HKU\S-1-5-21-1567553520-2598224956-3562314209-1001\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent => Value deleted successfully.
"c:\\progra~2\\contin~1\\sprote~1.dll" => Value Data not found.
"C:\Program Files (x86)\ContinueToSave\sprotector.dll" => File/Directory not found.
C:\Program Files (x86)\ContinueToSave => Moved successfully.
"c:\\progra~2\\simple~1\\sprote~1.dll" => Value Data not found.
"C:\Program Files (x86)\SimpleSpeedy\sprotector.dll" => File/Directory not found.
C:\Program Files (x86)\SimpleSpeedy => Moved successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} => Key deleted successfully.
HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} => Key deleted successfully.
HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} => Key deleted successfully.
HKCR\CLSID\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5B1D5685-C658-464D-33CF-1AE03D034289} => Key not found.
HKCR\Wow6432Node\CLSID\{5B1D5685-C658-464D-33CF-1AE03D034289} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{99079a25-328f-4bd4-be04-00955acaa0a7} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} => Value deleted successfully.
HKCR\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} => Value deleted successfully.
HKCR\CLSID\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} => Key not found.
"C:\Program Files (x86)\mozilla firefox\searchplugins\SearchResults.xml" => not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj => Key deleted successfully.
C:\Users\Arthur\AppData\Local\Temp\ccex.crx => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mhfdcmehmjcclgopdodkjdicohagipid => Key deleted successfully.
"C:\Users\Arthur\AppData\Local\Temp\ccex.crx" => File/Directory not found.
C:\Users\Arthur\Downloads\FRST64.exe => Moved successfully.
C:\Users\Arthur\Downloads\jxpiinstall(5).exe => Moved successfully.
C:\Users\Arthur\Downloads\jxpiinstall(4).exe => Moved successfully.
C:\Users\Arthur\Downloads\NPE.exe => Moved successfully.
C:\Users\Ann-Helen\AppData\Local\Temp\install_flashplayer11x32au_mssa_aih_1.exe => Moved successfully.
C:\Users\Ann-Helen\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\AskSLib.dll => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\GUninstaller.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\i4jdel0.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\installhelper.dll => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\n5y8l2rx.dll => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\SetupDataMngr_Searchqu.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\softonic_chr_1-8-16-10.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\SpotifyUninstall.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\SpotifyUpgrader.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\SRAssetsHelper.dll => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\tbuTor.dll => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\uninst1.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\utt49BC.tmp.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\video-converter-ultimate_full975.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\vlc-2.0.2-win32.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\vlc-2.0.4-win32.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\_is3138.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\_is3E7.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\_is56AC.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\_is61DF.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\_is7ABA.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\_isA72D.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\_isD5BC.exe => Moved successfully.
C:\Users\Arthur\AppData\Local\Temp\~SpUnin~.exe => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57F80B5B-4183-4718-9EE2-5DC07C0BF971} => Key not found.
C:\Windows\System32\Tasks\schedule!1143840799 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\schedule!1143840799 => Key not found.
C:\windows\Tasks\schedule!1143840799.job not found.
"C:\Program Files (x86)\ContinueToSave\sprotector.dll" => File/Directory not found.
"C:\Program Files (x86)\SimpleSpeedy\sprotector.dll" => File/Directory not found.
C:\ProgramData\continuetosave\5102c7e7f2dec.dll => Moved successfully.
C:\ProgramData\Temp => ":7631EA83" ADS removed successfully.
==== End of Fixlog ====