Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-07-2014 Ran by xyz at 2014-07-05 02:19:50 Run:1 Running from C:\Users\xyz\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1403711020&from=amt&uid=ST500DM002-1BD142_Z3TQBZYGXXXXZ3TQBZYG&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1403711020&from=amt&uid=ST500DM002-1BD142_Z3TQBZYGXXXXZ3TQBZYG&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - iexplore.exe FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird S2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe -service [X] S3 MSICDSetup; \??\D:\CDriver64.sys [X] S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X] C:\Users\xyz\AppData\Local\freeSOFTtoday C:\Users\xyz\AppData\Roaming\SupTab ***************** HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => value deleted successfully. IePluginServices => Service deleted successfully. MSICDSetup => Service deleted successfully. NTIOLib_1_0_C => Service deleted successfully. C:\Users\xyz\AppData\Local\freeSOFTtoday => Moved successfully. C:\Users\xyz\AppData\Roaming\SupTab => Moved successfully. ==== End of Fixlog ====