Fix result of Farbar Recovery Scan Tool (x64) Version: 08-01-2017
Ran by Lagish (10-01-2017 22:48:30) Run:1
Running from C:\Users\Lagish\Desktop
Loaded Profiles: Lagish (Available Profiles: Lagish)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
GroupPolicy: Restriction - Chrome <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-762396966-2797984103-2471781104-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mail.ru/cnt/10445?gp=818411
SearchScopes: HKU\S-1-5-21-762396966-2797984103-2471781104-1001 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7B34B29FD5-955C-4C07-92A6-7F137A0DD1BB%7D&gp=811041
SearchScopes: HKU\S-1-5-21-762396966-2797984103-2471781104-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7B34B29FD5-955C-4C07-92A6-7F137A0DD1BB%7D&gp=811041
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\ohgmn8vg.default -> ?????@Mail.Ru
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\ohgmn8vg.default -> Bing 
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\ohgmn8vg.default -> ?????@Mail.Ru
FF Homepage: Mozilla\Firefox\Profiles\ohgmn8vg.default -> hxxp://mail.ru/cnt/10445?gp=818411
FF Keyword.URL: Mozilla\Firefox\Profiles\ohgmn8vg.default -> hxxp://go.mail.ru/distib/ep/?product_id ... &gp=811041
FF Extension: (No Name) - C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\flvto@hotger.com.xpi [not found]
FF Extension: (No Name) - C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\ascsurfingprotection@iobit.com [not found]
FF Extension: (No Name) - C:\Program Files (x86)\IObit Apps Toolbar\FF [not found]
FF Extension: (No Name) - C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com [not found]
FF Extension: (No Name) - C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\45633fba7e7d40fea9c29@9dc18447eea04021a325caf3.com [not found]
FF Extension: (No Name) - C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\ae44639e-43f2-4cd1-aa80-39d5d2e18fa9@gmail.com [not found]
FF Extension: (No Name) - C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\iobitascsurfingprotection@iobit.com [not found]
CHR DefaultSearchURL: Default -> hxxp://go.mail.ru/distib/ep/?q={searchTerms}&product_id=%7B6507A139-7F80-4952-97F9-FBCB2BE87359%7D&gp=811041
CHR DefaultSearchKeyword: Default -> go.mail.ru
CHR DefaultSuggestURL: Default -> hxxp://suggests.go.mail.ru/ff3?q={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
S3 GGSAFERDriver; no ImagePath
U0 Partizan; system32\drivers\Partizan.sys [X]
C:\Users\Lagish\AppData\Local\Temp

EmptyTemp:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\Windows\system32\GroupPolicy\User => moved successfully
HKLM\SOFTWARE\Policies\Google => key removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKU\S-1-5-21-762396966-2797984103-2471781104-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-762396966-2797984103-2471781104-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-21-762396966-2797984103-2471781104-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} => key removed successfully
HKCR\CLSID\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} => key not found. 
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value removed successfully
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => key not found. 
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found. 
Firefox DefaultSearchEngine removed successfully
Firefox SearchEngineOrder.3 removed successfully
Firefox SelectedSearchEngine removed successfully
Firefox "homepage" removed successfully
Firefox "Keyword.URL" removed successfully
C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\flvto@hotger.com.xpi => path removed successfully
C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\ascsurfingprotection@iobit.com => path removed successfully
C:\Program Files (x86)\IObit Apps Toolbar\FF => path removed successfully
C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com => path removed successfully
C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\45633fba7e7d40fea9c29@9dc18447eea04021a325caf3.com => path removed successfully
C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\ae44639e-43f2-4cd1-aa80-39d5d2e18fa9@gmail.com => path removed successfully
C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\extensions\iobitascsurfingprotection@iobit.com => path removed successfully
Chrome DefaultSearchURL => removed successfully
Chrome DefaultSearchKeyword => removed successfully
Chrome DefaultSuggestURL => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki => key removed successfully
HKLM\System\CurrentControlSet\Services\GGSAFERDriver => key removed successfully
GGSAFERDriver => service removed successfully
HKLM\System\CurrentControlSet\Services\Partizan => key removed successfully
Partizan => service removed successfully

"C:\Users\Lagish\AppData\Local\Temp" folder move:

Could not move "C:\Users\Lagish\AppData\Local\Temp" => Scheduled to move on reboot.


=========== EmptyTemp: ==========

BITS transfer queue => 50331648 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 5509977 B
Java, Flash, Steam htmlcache => 394722653 B
Windows/system/drivers => 1805674 B
Edge => 0 B
Chrome => 719785 B
Firefox => 3524092 B
Opera => 455905312 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile32 => 438 B
LocalService => 19253454 B
NetworkService => 0 B
Lagish => 116221328 B
UpdatusUser => 0 B
UpdatusUser => 0 B

RecycleBin => 0 B
EmptyTemp: => 999.4 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 10-01-2017 22:51:43)

C:\Users\Lagish\AppData\Local\Temp => moved successfully

Result of scheduled keys to remove after reboot:


==== End of Fixlog 22:51:46 ====