Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-11-2014 01 Ran by Oogamasennin at 2014-11-25 09:49:20 Run:1 Running from C:\Users\Oogamasennin\Desktop\FRST Loaded Profile: Oogamasennin (Available profiles: Oogamasennin) Boot Mode: Normal ============================================== Content of fixlist: ***************** CMD: winmgmt /salvagerepository S0 sptd; C:\Windows\System32\Drivers\sptd.sys [867064 2014-10-03] (Duplex Secure Ltd.) HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1413621208&from=cor&uid=ST1000LM024XHN-M101MBB_S2WZJA0D411731411731&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1413621208&from=cor&uid=ST1000LM024XHN-M101MBB_S2WZJA0D411731411731&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1413621208&from=cor&uid=ST1000LM024XHN-M101MBB_S2WZJA0D411731411731&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1413621208&from=cor&uid=ST1000LM024XHN-M101MBB_S2WZJA0D411731411731&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-page.com/?type=sc&ts=1413621208&from=cor&uid=ST1000LM024XHN-M101MBB_S2WZJA0D411731411731 FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF user.js: detected! => C:\Users\Oogamasennin\AppData\Roaming\Mozilla\Firefox\Profiles\ft4almei.default-1409728214410\user.js C:\Program Files (x86)\mozilla firefox\plugins S3 ewusbmbb; \SystemRoot\system32\DRIVERS\ewusbwwan.sys [X] S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X] S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X] S3 hwdatacard; \SystemRoot\system32\DRIVERS\ewusbmdm.sys [X] C:\Program Files (x86)\SupTab C:\ProgramData\IePluginServices C:\Users\Oogamasennin\Desktop\*(*)-dp*.exe C:\Windows\System32\Drivers\sptd.sys EmptyTemp: ***************** ========= winmgmt /salvagerepository ========= WMI repository verification failed Error code: 0x80041002 Facility: WMI Description: Not found ========= End of CMD: ========= sptd => Service deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\msktbird@mcafee.com => value deleted successfully. C:\Users\Oogamasennin\AppData\Roaming\Mozilla\Firefox\Profiles\ft4almei.default-1409728214410\user.js => Moved successfully. C:\Program Files (x86)\mozilla firefox\plugins => Moved successfully. ewusbmbb => Service deleted successfully. ew_usbenumfilter => Service deleted successfully. huawei_enumerator => Service deleted successfully. hwdatacard => Service deleted successfully. C:\Program Files (x86)\SupTab => Moved successfully. C:\ProgramData\IePluginServices => Moved successfully. C:\Users\Oogamasennin\Desktop\*(*)-dp*.exe => Moved successfully. C:\Windows\System32\Drivers\sptd.sys => Moved successfully. EmptyTemp: => Removed 1.3 GB temporary data. The system needed a reboot. ==== End of Fixlog ====