Here is the result from Zoek after reboot. The results from Farbar are attached.
Zoek.exe v5.0.0.0 Updated 07-September-2014
Tool run by Cozmo on Sun 09/07/2014 at 13:11:18.13.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Cozmo\Desktop\zoek\zoek.exe [Scan all users] [Script inserted]
==== Older Logs ======================
C:\zoek-results2014-09-07-191119.log 30434 bytes
==== System Restore Info ======================
9/7/2014 1:13:26 PM Zoek.exe System Restore Point Created Succesfully.
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1003251924-3372622575-1720501779-1001\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} deleted successfully
HKEY_USERS\S-1-5-21-1003251924-3372622575-1720501779-1001\Software\Microsoft\Internet Explorer\SearchScopes\{180780f0-b348-4b44-8210-94a8f3ee15b2} deleted successfully
HKEY_USERS\S-1-5-21-1003251924-3372622575-1720501779-1001\Software\Microsoft\Internet Explorer\SearchScopes\{36E5BBC3-79F4-4BC9-B11C-8BD35CE8768C} deleted successfully
HKEY_USERS\S-1-5-21-1003251924-3372622575-1720501779-1001\Software\Microsoft\Internet Explorer\SearchScopes\{714A2B13-2F84-43E9-A01F-4CA59F5CC105} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\APNMCP deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\APNMCP deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\f1f78e38 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\f1f78e38 deleted successfully
==== FireFox Fix ======================
ProfilePath: C:\Users\Cozmo\AppData\Roaming\Mozilla\Firefox\Profiles\slc6r13v.default
---- Lines spigot removed from prefs.js ----
user_pref("browser.startup.homepage", "
https://search.yahoo.com/?type=282369&fr=spigot-yhp-ff");
---- Lines valueApps removed from prefs.js ----
user_pref("valueApps.autoDisableScopes", -1);
---- Lines mybrowserbar modified from prefs.js ----
user_pref("extensions.installCache", "[{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program
---- Lines extensions.2jdv removed from prefs.js ----
user_pref("extensions.2jdv.epoch", "1408687190");
user_pref("extensions.2jdv.url", "
http://downloadnicesuperguru.in/syn...U0llrMCMlNhd9Fqda5rjUErda7qdCMBzqUojw9rdYGrja
---- FireFox user.js and prefs.js backups ----
user_20140907_0144_.backup
prefs_20140907_0144_.backup
==== Batch Command(s) Run By Tool======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\ea631fc7fc313a2f deleted
C:\PROGRA~2\Application Updater deleted
C:\Program Files\Conduit deleted
C:\PROGRA~2\Uninstaller deleted
C:\PROGRA~2\globalUpdate deleted
C:\PROGRA~2\Conduit deleted
C:\PROGRA~2\COMMON~1\Spigot deleted
C:\Users\Cozmo\AppData\Roaming\Search Protection deleted
C:\PROGRA~3\AskPartnerNetwork deleted
C:\PROGRA~3\APN deleted
C:\PROGRA~3\SaverPrro deleted
C:\Users\Cozmo\AppData\Local\globalUpdate deleted
C:\Users\Cozmo\AppData\Local\AskPartnerNetwork deleted
C:\Users\Cozmo\AppData\Local\Conduit deleted
C:\Users\Cozmo\AppData\LocalLow\Search Settings deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Application Updater deleted
C:\windows\SysNative\tasks\Optimizer Pro Schedule deleted
C:\END deleted
C:\Windows\AppPatch\AppPatch64\SPVCLdr64.dll deleted
C:\windows\SysNative\drivers\{2635ac50-5488-40bf-9bfd-accb158f8f3f}w64.sys deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\Syswow64\lMMLDeleteUserData42107612FX.tmp deleted
C:\Windows\Syswow64\SearchProtect deleted
C:\Windows\SysWow64\AI_RecycleBin deleted
C:\Users\Cozmo\Documents\Optimizer Pro deleted
C:\Users\Cozmo\AppData\Roaming\Mozilla\Firefox\Profiles\slc6r13v.default\extensions\staged deleted
C:\Users\Cozmo\AppData\Roaming\Mozilla\Firefox\Profiles\slc6r13v.default\extensions\
3pykh@pdeug.edu deleted
"C:\Users\Cozmo\AppData\Roaming\Mozilla\Firefox\Profiles\slc6r13v.default\extensions\
vuze@mybrowserbar.com" deleted
"C:\PROGRA~2\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" deleted
"C:\PROGRA~3\WinSpeed" deleted
"C:\PROGRA~2\AskPartnerNetwork" deleted
"C:\PROGRA~2\AskPartnerNetwork\Toolbar" deleted
"C:\PROGRA~2\AskPartnerNetwork\Toolbar\Updater" deleted
==== Firefox Extensions ======================
ProfilePath: C:\Users\Cozmo\AppData\Roaming\Mozilla\Firefox\Profiles\slc6r13v.default
- Address Bar Search - %ProfilePath%\extensions\{badea1ae-72ed-4f6a-8c37-4db9a4ac7bc9}
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi
==== Firefox Plugins ======================
Profilepath: C:\Users\Cozmo\AppData\Roaming\Mozilla\Firefox\Profiles\slc6r13v.default
FB5621842FDABF9F8359775573498FBC - C:\Users\Cozmo\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update
5CB01CF141E021DAAE96991A5BA57944 - C:\Users\Cozmo\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
DD31F0C436E4F5E6FA9783FF8A80ADC1 - C:\Users\Cozmo\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
aaaaaiabcopkplhgaedhbloeejhhankf - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx[]
hemjgdpngmhbimofcicjfhibkdbigdmb - C:\ProgramData\comcastModemRelease\shortcuts\chrome\xfinity.crx[02/08/2013 08:46 AM]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[07/14/2014 06:22 PM]
Google Voice Search Hotword (Beta) - Cozmo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn
Simple Dictation - Cozmo\AppData\Local\Google\Chrome\User Data\Default\Extensions\diondlbenfmpcapnbegmodfdgmnnpgln
Xfinity - Cozmo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemjgdpngmhbimofcicjfhibkdbigdmb
SaverPro - Cozmo\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf
==== Chromium Startpages ======================
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "
http://www.search.ask.com/?gct=hp",
"homepage": "
http://www.google.com/",
"startup_urls": [ "
http://www.trovi.com/?gd=&ctid=CT33...=SP39F6C83E-92AA-4FE1-8A5D-30B84E9BEA1B&SSPV=" ],
==== Chrome Fix ======================
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_
www.superfish.com_0.localstorage deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_
www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_
www.superfish.com_0.localstorage deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_
www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_planetsave.com_0.localstorage deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_planetsave.com_0.localstorage-journal deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Extensions\diondlbenfmpcapnbegmodfdgmnnpgln deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_diondlbenfmpcapnbegmodfdgmnnpgln_0.localstorage deleted successfully
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_diondlbenfmpcapnbegmodfdgmnnpgln_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="
http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="
http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="
http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="
http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{f1f78e38} deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UninstallHelper deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Cozmo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Cozmo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N92MV9B9 will be deleted at reboot
==== Empty FireFox Cache ======================
C:\Users\Cozmo\AppData\Local\Mozilla\Firefox\Profiles\slc6r13v.default\Cache emptied successfully
==== Empty Chrome Cache ======================
C:\Users\Cozmo\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=124 folders=85 26469297 bytes)
==== Empty Temp Folders ======================
C:\Users\Cozmo\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Cozmo\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Cozmo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N92MV9B9" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted
==== EOF on Sun 09/07/2014 at 13:50:10.47 ======================