1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
(Microsoft Corporation) C:\Windows\System32\wscript.exe
HKCU\...\Run: [SysDrivers] - C:\Users\stefanos\AppData\Roaming\SysDrivers.vbs [64221 2013-11-18] ()
C:\Users\stefanos\AppData\Roaming\SysDrivers.vbs
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\stefanos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SysDrivers.vbs ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\Users\stefanos\AppData\Local\Temp\BackupSetup.exe
C:\Users\stefanos\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\stefanos\AppData\Local\Temp\GenericUninstall.exe
C:\Users\stefanos\AppData\Local\Temp\haspdinst_x64.exe
C:\Users\stefanos\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\stefanos\AppData\Local\Temp\lvid_lvid.exe
C:\Users\stefanos\AppData\Local\Temp\mdi064.dll
C:\Users\stefanos\AppData\Local\Temp\NEventMessages.dll
C:\Users\stefanos\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\stefanos\AppData\Local\Temp\ose00000.exe
C:\Users\stefanos\AppData\Local\Temp\ose00001.exe
C:\Users\stefanos\AppData\Local\Temp\qc_a402013b_7656_4f6f_b57f_5a8ef69f5fc4_32.exe
C:\Users\stefanos\AppData\Local\Temp\Quarantine.exe
C:\Users\stefanos\AppData\Local\Temp\Setup.exe
C:\Users\stefanos\AppData\Local\Temp\sfamcc00001.dll
C:\Users\stefanos\AppData\Local\Temp\sfextra.dll
C:\Users\stefanos\AppData\Local\Temp\SkypeSetup.exe
C:\Users\stefanos\AppData\Local\Temp\uninstaller.exe
C:\Users\stefanos\AppData\Local\Temp\wget.exe
C:\Users\stefanos\AppData\Local\Temp\WSSetup.exe
C:\Users\stefanos\AppData\Local\Temp\_is6299.exe
cmd: ipconfig /flushdns
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
Then…
Re-run FRST and attach fresh report.