Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-03-2015 Ran by Mężczyzna at 2015-03-19 22:59:38 Run:1 Running from C:\Users\Mężczyzna\Downloads Loaded Profiles: Mężczyzna (Available profiles: Mężczyzna) Boot Mode: Normal ============================================== Content of fixlist: ***************** CloseProcesses: CreateRestorePoint: HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=dspp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=dspp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&q={searchTerms} HKU\S-1-5-21-2321440703-4263156153-367547396-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=dspp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&q={searchTerms} HKU\S-1-5-21-2321440703-4263156153-367547396-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193 HKU\S-1-5-21-2321440703-4263156153-367547396-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193 HKU\S-1-5-21-2321440703-4263156153-367547396-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=dspp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&q={searchTerms} SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1426434272&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&q={searchTerms} SearchScopes: HKU\S-1-5-21-2321440703-4263156153-367547396-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&ts=1426434299&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2321440703-4263156153-367547396-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&ts=1426434299&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2321440703-4263156153-367547396-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&ts=1426434299&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2321440703-4263156153-367547396-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&ts=1426434299&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2321440703-4263156153-367547396-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193&ts=1426434299&type=default&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1426434200&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE808S5019350193 FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\istartsurf.xml [2015-03-16] C:\Program Files\XTab C:\ProgramData\IHProtectUpDate C:\Users\Mężczyzna\Downloads\*(*)-dp*.exe C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKU\S-1-5-21-2321440703-4263156153-367547396-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKU\S-1-5-21-2321440703-4263156153-367547396-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKU\S-1-5-21-2321440703-4263156153-367547396-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKU\S-1-5-21-2321440703-4263156153-367547396-1000\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKU\S-1-5-21-2321440703-4263156153-367547396-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-2321440703-4263156153-367547396-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. "HKU\S-1-5-21-2321440703-4263156153-367547396-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}" => Key deleted successfully. HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => Key not found. "HKU\S-1-5-21-2321440703-4263156153-367547396-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. "HKU\S-1-5-21-2321440703-4263156153-367547396-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}" => Key deleted successfully. HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => Key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\Software\Mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} => value deleted successfully. C:\Program Files\mozilla firefox\browser\searchplugins\istartsurf.xml => Moved successfully. "C:\Program Files\XTab" => File/Directory not found. C:\ProgramData\IHProtectUpDate => Moved successfully. C:\Users\Mężczyzna\Downloads\*(*)-dp*.exe => Moved successfully. C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully. EmptyTemp: => Removed 1.4 GB temporary data. The system needed a reboot. ==== End of Fixlog 23:00:41 ====