Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-02-2014 Ran by Damingo at 2014-02-13 19:26:02 Run:1 Running from C:\Documents and Settings\Damingo\Bureau Boot Mode: Normal ============================================== Content of fixlist: ***************** start HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1390051215&from=air&uid=WDCXWD5000AADS-00S9B0_WD-WCAV9876961569615&q={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1390051215&from=air&uid=WDCXWD5000AADS-00S9B0_WD-WCAV9876961569615&q={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.01net.com/telecharger/ http://www.01men.com/ FF NewTab: hxxp://www.nationzoom.com/newtab/?type=nt&ts=1390051215&from=air&uid=WDCXWD5000AADS-00S9B0_WD-WCAV9876961569615 FF SelectedSearchEngine: nationzoom FF Homepage: hxxp://www.nationzoom.com/?type=hp&ts=1390051215&from=air&uid=WDCXWD5000AADS-00S9B0_WD-WCAV9876961569615 FF Keyword.URL: user_pref("keyword.URL", ""); FF DefaultSearchEngine: nationzoom FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\nationzoom.xml CHR HomePage: hxxp://www.nationzoom.com/?type=hp&ts=1390051215&from=air&uid=WDCXWD5000AADS-00S9B0_WD-WCAV9876961569615 CHR DefaultSearchKeyword: nationzoom CHR DefaultSearchProvider: nationzoom CHR DefaultSearchURL: http://www.nationzoom.com/web/?type=ds&ts=1390051215&from=air&uid=WDCXWD5000AADS-00S9B0_WD-WCAV9876961569615&q={searchTerms} C:\Documents and Settings\Damingo\Local Settings\Temp\ntdll_dump.dll C:\Documents and Settings\Damingo\Local Settings\Temp\Quarantine.exe send ***************** HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL => Value deleted successfully. Firefox newtab deleted successfully. Firefox SelectedSearchEngine deleted successfully. Firefox homepage deleted successfully. Firefox Keyword.URL deleted successfully. Firefox DefaultSearchEngine deleted successfully. C:\Program Files\mozilla firefox\searchplugins\nationzoom.xml => Moved successfully. CHR HomePage: hxxp://www.nationzoom.com/?type=hp&ts=1390051215&from=air&uid=WDCXWD5000AADS-00S9B0_WD-WCAV9876961569615 ==> The Chrome "Settings" can be used to fix the entry. CHR DefaultSearchKeyword: nationzoom ==> The Chrome "Settings" can be used to fix the entry. CHR DefaultSearchProvider: nationzoom ==> The Chrome "Settings" can be used to fix the entry. CHR DefaultSearchURL: http://www.nationzoom.com/web/?type=ds&ts=1390051215&from=air&uid=WDCXWD5000AADS-00S9B0_WD-WCAV9876961569615&q={searchTerms} ==> The Chrome "Settings" can be used to fix the entry. C:\Documents and Settings\Damingo\Local Settings\Temp\ntdll_dump.dll => Moved successfully. C:\Documents and Settings\Damingo\Local Settings\Temp\Quarantine.exe => Moved successfully. ==== End of Fixlog ====