Fix result of Farbar Recovery Scan Tool (x64) Version: 08-01-2017 Ran by Felipe (10-01-2017 10:46:17) Run:3 Running from D:\User2016\Desktop Loaded Profiles: Felipe (Available Profiles: Felipe) Boot Mode: Normal ============================================== fixlist content: ***************** Start CreateRestorePoint: CloseProcesses: HKU\S-1-5-21-3052470422-392353544-3589946678-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://login.centamnetworks.com/ HKU\S-1-5-21-3052470422-392353544-3589946678-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://login.centamnetworks.com/ FF user.js: detected! => C:\Users\Felipe\AppData\Roaming\Mozilla\Firefox\Profiles\793f1rku.default\user.js [2017-01-09] S2 MBAMChameleon; \SystemRoot\system32\drivers\MBAMChameleon.sys [X] Task: {0AAF7B7C-9470-4709-BC24-8C7670897B1F} - System32\Tasks\{C498CAA8-102A-4A43-BA37-517D9D364A79} => D:\User2016\Desktop\FRST64.exe [2017-01-09] (Farbar) C:\system32\drivers\MBAMChameleon.sys Emptytemp: End ***************** Restore point was successfully created. Processes closed successfully. HKU\S-1-5-21-3052470422-392353544-3589946678-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKU\S-1-5-21-3052470422-392353544-3589946678-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully C:\Users\Felipe\AppData\Roaming\Mozilla\Firefox\Profiles\793f1rku.default\user.js => moved successfully C:\Users\Felipe\AppData\Roaming\Mozilla\Firefox\Profiles\793f1rku.default\user.js => not found. HKLM\System\CurrentControlSet\Services\MBAMChameleon => key removed successfully MBAMChameleon => service removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0AAF7B7C-9470-4709-BC24-8C7670897B1F} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0AAF7B7C-9470-4709-BC24-8C7670897B1F} => key removed successfully C:\Windows\System32\Tasks\{C498CAA8-102A-4A43-BA37-517D9D364A79} => moved successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C498CAA8-102A-4A43-BA37-517D9D364A79} => key removed successfully "C:\system32\drivers\MBAMChameleon.sys" => not found. =========== EmptyTemp: ========== BITS transfer queue => 8388608 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 5445661 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 0 B Edge => 0 B Chrome => 30710628 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Users => 0 B Default => 0 B Public => 0 B ProgramData => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 66228 B NetworkService => 0 B Felipe => 3318600 B RecycleBin => 0 B EmptyTemp: => 45.7 MB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 10:46:27 ====