Fix result of Farbar Recovery Scan Tool (x64) Version:16-08-2015 Ran by Michal (2015-08-16 20:56:01) Run:3 Running from C:\Users\Michal\Downloads Loaded Profiles: UpdatusUser & Michal (Available Profiles: UpdatusUser & Michal) Boot Mode: Normal ============================================== fixlist content: ***************** C:\ProgramData\31f7a620-acbd-4f84-82db-5e231b8ad5de C:\Program Files (x86)\Common Files\31f7a620-acbd-4f84-82db-5e231b8ad5de C:\ProgramData\aWinManProa Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f C:\Program Files (x86)\MiuiTab HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&q={searchTerms} HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&q={searchTerms} SearchScopes: HKU\S-1-5-21-1951255329-4283516015-3182968858-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&ts=1439390284&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1951255329-4283516015-3182968858-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&ts=1439390284&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1951255329-4283516015-3182968858-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&ts=1439390284&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1951255329-4283516015-3182968858-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&ts=1439390284&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1951255329-4283516015-3182968858-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS&ts=1439390284&type=default&q={searchTerms} BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-08-07] (Good Co. Limited) BHO-x32: Jungle Net -> {dcfb5bfe-1f58-4b1d-96a7-3c7bbae51b36} -> C:\Program Files (x86)\Jungle Net\Extensions\dcfb5bfe-1f58-4b1d-96a7-3c7bbae51b36.dll [2015-08-12] () FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: istartsurf FF SelectedSearchEngine: istartsurf FF Homepage: hxxp://www.istartsurf.com/?type=hp&ts=1439390240&z=2e6e032342eea06685f0588g6z6cft1c5t0e2gawdb&from=cor&uid=TOSHIBAXMQ01ABD075_82C4S02HSXX82C4S02HS C:\Program Files (x86)\Jungle Net FF SearchPlugin: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\searchplugins\istartsurf.xml [2015-08-12] FF Extension: Default SearchProtected - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\Extensions\defsearchp@gmail.com [2015-08-12] FF Extension: deskCut - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\Extensions\deskCutv2@gmail.com [2015-08-12] FF Extension: Jungle Net - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\Extensions\{16a9d1d5-7c36-4224-8574-0add20588a52}.xpi [2015-08-12] FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\extensions\defsearchp@gmail.com FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\extensions\deskCutv2@gmail.com R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-08-07] (XTab system) R2 Service Mgr JungleNet; C:\ProgramData\31f7a620-acbd-4f84-82db-5e231b8ad5de\plugincontainer.exe [1151240 2015-08-12] () R2 Update Mgr JungleNet; C:\Program Files (x86)\Common Files\31f7a620-acbd-4f84-82db-5e231b8ad5de\updater.exe [1076488 2015-08-12] () R2 WindowsMangerProtect; C:\ProgramData\aWinManProa\ProtectWindowsManager.exe [708264 2015-08-12] (DTools LIMITED) <==== ATTENTION S2 tcsvc_1.10.0.21; "C:\Program Files (x86)\TermCoach_1.10.0.21\Service\tcsvc.exe" [X] C:\Program Files (x86)\TermCoach_1.10.0.21 C:\Users\Michal\AppData\Roaming\istartsurf EmptyTemp: ***************** C:\ProgramData\31f7a620-acbd-4f84-82db-5e231b8ad5de => moved successfully. C:\Program Files (x86)\Common Files\31f7a620-acbd-4f84-82db-5e231b8ad5de => moved successfully. C:\ProgramData\aWinManProa => moved successfully. ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= "C:\Program Files (x86)\MiuiTab" => File/Folder not found. HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully "HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => key removed successfully HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found. HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => key not found. HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => key not found. HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found. HKU\S-1-5-21-1951255329-4283516015-3182968858-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => key not found. HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => key not found. HKCR\Wow6432Node\CLSID\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dcfb5bfe-1f58-4b1d-96a7-3c7bbae51b36} => key not found. HKCR\Wow6432Node\CLSID\{dcfb5bfe-1f58-4b1d-96a7-3c7bbae51b36} => key not found. Firefox "newtab" removed successfully Firefox DefaultSearchEngine removed successfully Firefox SelectedSearchEngine removed successfully Firefox "homepage" removed successfully "C:\Program Files (x86)\Jungle Net" => File/Folder not found. "C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\searchplugins\istartsurf.xml" => not found. C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\Extensions\defsearchp@gmail.com not found. C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\Extensions\deskCutv2@gmail.com not found. C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\sc0l9298.default\Extensions\{16a9d1d5-7c36-4224-8574-0add20588a52}.xpi => moved successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\defsearchp@gmail.com => value not found. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\deskCutv2@gmail.com => value not found. IHProtect Service => service not found. Service Mgr JungleNet => service not found. Update Mgr JungleNet => service not found. WindowsMangerProtect => service not found. tcsvc_1.10.0.21 => service removed successfully "C:\Program Files (x86)\TermCoach_1.10.0.21" => File/Folder not found. "C:\Users\Michal\AppData\Roaming\istartsurf" => File/Folder not found. EmptyTemp: => 398.8 MB temporary data Removed. The system needed a reboot.. ==== End of Fixlog 20:59:19 ====