Fix result of Farbar Recovery Scan Tool (x64) Version:13-07-2015 Ran by dellParsley at 2015-07-16 21:19:40 Run:1 Running from C:\Users\dellParsley\Desktop\AntyVir Loaded Profiles: dellParsley (Available Profiles: dellParsley) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: CreateRestorePoint: R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-06-24] (XTab system) S1 wafd_vt_1_10_0_20; system32\drivers\wafd_vt_1_10_0_20.sys [X] HKU\S-1-5-21-3558422558-433605425-3847010577-1000\...\Run: [Unified Remote v2] => C:\Program Files (x86)\Unified Remote\RemoteServer.exe HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1436692916&z=de6332c23574daf7dbb257dg5zfc4q1q6tao7tfe2w&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1436692916&z=de6332c23574daf7dbb257dg5zfc4q1q6tao7tfe2w&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1436692916&z=de6332c23574daf7dbb257dg5zfc4q1q6tao7tfe2w&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1436692916&z=de6332c23574daf7dbb257dg5zfc4q1q6tao7tfe2w&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&q={searchTerms} HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=dspp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&q={searchTerms} HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699 HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699 HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=dspp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&q={searchTerms} SearchScopes: HKU\S-1-5-21-3558422558-433605425-3847010577-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&q={searchTerms} SearchScopes: HKU\S-1-5-21-3558422558-433605425-3847010577-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&ts=1436692965&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3558422558-433605425-3847010577-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&ts=1436692965&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3558422558-433605425-3847010577-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1436692951&z=798186261d437a1ac7e535egez8c9q9q1t6oct1cct&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&q={searchTerms} SearchScopes: HKU\S-1-5-21-3558422558-433605425-3847010577-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXSSDXPM800XTMX64GB_S0DJNEAZ401699401699&ts=1436692965&type=default&q={searchTerms} BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-06-24] (Thinknice Co. Limited) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\istartsurf.xml [2015-07-12] C:\Program Files (x86)\MiuiTab C:\ProgramData\IHProtectUpDate C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Talk CMD: netsh advfirewall reset EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. IHProtect Service => Service not found. wafd_vt_1_10_0_20 => Service removed successfully HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Unified Remote v2 => value removed successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKU\S-1-5-21-3558422558-433605425-3847010577-1000\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-3558422558-433605425-3847010577-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully HKU\S-1-5-21-3558422558-433605425-3847010577-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found. "HKU\S-1-5-21-3558422558-433605425-3847010577-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}" => key removed successfully HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => key not found. HKU\S-1-5-21-3558422558-433605425-3847010577-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. "HKU\S-1-5-21-3558422558-433605425-3847010577-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}" => key removed successfully HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}" => key removed successfully HKCR\Wow6432Node\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} => key not found. "C:\Program Files (x86)\mozilla firefox\browser\searchplugins\istartsurf.xml" => not found. "C:\Program Files (x86)\MiuiTab" => File/Folder not found. "C:\ProgramData\IHProtectUpDate" => File/Folder not found. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Talk => moved successfully. ========= netsh advfirewall reset ========= Ok. ========= End of CMD: ========= EmptyTemp: => 4.7 GB temporary data Removed. The system needed a reboot.. ==== End of Fixlog 21:21:06 ====