Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Fix result of Farbar Recovery Scan Tool (x64) Version:17-01-2015
- Ran by Jack (2016-01-18 10:28:40) Run:1
- Running from C:\Users\Jack\Desktop
- Loaded Profiles: Jack (Available Profiles: Jack)
- Boot Mode: Normal
- ==============================================
- fixlist content:
- *****************
- CreateRestorePoint:
- CloseProcesses:
- Task: {F12CBD61-BEF6-4613-874D-E172D1BCAF67} - \DropboxUpdateTaskMachineCore -> No File <==== ATTENTION
- Task: {F8D385BA-05F9-41B3-A7E4-A8C152C8B982} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
- Task: {F9D87DFA-FF49-436D-8FC5-4E2D218291B6} - System32\Tasks\56504825 => C:\Program Files (x86)\cent\class.exe [2016-01-16] () <==== ATTENTION
- Task: {FAC68BCD-C8A9-48DC-A15A-E0CAEFB385F4} - \Driver Booster Scan -> No File <==== ATTENTION
- Task: {C38C2227-5CE7-40EF-AA1D-CEEE7CE5D9A8} - \DropboxUpdateTaskMachineUA -> No File <==== ATTENTION
- Task: {DD3736DB-984C-477D-ADEE-EA5954970A42} - \GyazoUpdateTaskMachineDaily -> No File <==== ATTENTION
- Task: {A99D729E-7849-455F-BEFE-A37025D030C8} - \Telerik Control Panel Notifier WIN-HBBVHMEMD8B_Jack -> No File <==== ATTENTION
- Task: {8A92819F-7E4A-457C-8141-304CA005C76B} - System32\Tasks\281847184 => C:\Program Files (x86)\nutritious\raspy.exe [2016-01-16] (likeable) <==== ATTENTION
- Task: {941B9E6E-F9E3-4261-B11B-A4FD12566AAA} - System32\Tasks\181847184 => C:\Program Files (x86)\nutritious\raspy.exe [2016-01-16] (likeable) <==== ATTENTION
- Task: {97F1D027-DD57-475C-A908-757BB413ECC3} - System32\Tasks\667475153059593546 => C:\Program Files (x86)\teeth\zonked.exe [2016-01-16] (windows 99) <==== ATTENTION
- Task: {712462BD-E97E-483A-9504-499B73BD65CA} - \[email protected] -> No File <==== ATTENTION
- Task: {47B3A8DB-F5ED-4652-85C7-11ECCE1C07FD} - \Uninstaller_SkipUac_Jack -> No File <==== ATTENTION
- Task: {6279A869-733B-41A9-ABE0-2D70F562EE03} - \{4C8A06ED-6224-4DA4-8310-1D67EF029021} -> No File <==== ATTENTION
- Task: {627BBDBB-92AD-4699-A62A-9253D8DB93C8} - System32\Tasks\3146774314677431467743146774 => C:\Program Files (x86)\teeth\zonked.exe [2016-01-16] (windows 99) <==== ATTENTION
- Task: {6DE30D67-5787-4466-96E0-719A62762E19} - \Driver Booster SkipUAC (Jack) -> No File <==== ATTENTION
- Task: {1BF6104B-9A2F-4C75-AC2E-9A5DE3BE6727} - \Driver Booster Update -> No File <==== ATTENTION
- Task: {0B89EC13-6CC0-43D1-8387-3500A9B59C90} - \GyazoUpdateTaskMachine -> No File <==== ATTENTION
- Task: {18850801-F66F-477D-8097-23F5525B0334} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
- HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
- HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 1 <======= ATTENTION (Restriction - ProxySettings)
- ProxyEnable: [HKLM] => Proxy is enabled.
- ProxyEnable: [HKLM-x32] => Proxy is enabled.
- ProxyServer: [HKLM] => http=127.0.0.1:8877;https=127.0.0.1:8877
- ProxyServer: [HKLM-x32] => http=127.0.0.1:8877;https=127.0.0.1:8877
- AutoConfigURL: [HKLM] => http=127.0.0.1:8877;https=127.0.0.1:8877
- ProxyEnable: [S-1-5-21-4270532649-2185237214-901248356-1001] => Proxy is enabled.
- ProxyServer: [S-1-5-21-4270532649-2185237214-901248356-1001] => http=127.0.0.1:8877;https=127.0.0.1:8877
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\MountPoints2: {d9693272-207f-11e5-b690-806e6f6e6963} - "E:\launch.bat"
- HKLM\...\Run: [cutoauto] => C:\Program Files (x86)\teeth\industry.exe [42734 2016-01-16] ()
- HKLM\...\Run: [interpee] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
- HKLM\...\Run: [autoauto] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
- HKLM-x32\...\Run: [cutoauto] => C:\Program Files (x86)\teeth\industry.exe [42734 2016-01-16] ()
- HKLM-x32\...\Run: [interpee] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
- HKLM-x32\...\Run: [autoauto] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
- HKLM-x32\...\RunOnce: [usun.exe] => C:\Users\Jack\AppData\Local\SunnyDay5\usun.exe [3282096 2016-01-15] ()
- HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1
- HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\Run: [rutoauto] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\Run: [dutoauto] => C:\Program Files (x86)\teeth\industry.exe [42734 2016-01-16] ()
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\Run: [interpee] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
- EmptyTemp:
- *****************
- Restore point was successfully created.
- Processes closed successfully.
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F12CBD61-BEF6-4613-874D-E172D1BCAF67}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F12CBD61-BEF6-4613-874D-E172D1BCAF67}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DropboxUpdateTaskMachineCore" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F8D385BA-05F9-41B3-A7E4-A8C152C8B982}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F8D385BA-05F9-41B3-A7E4-A8C152C8B982}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F9D87DFA-FF49-436D-8FC5-4E2D218291B6}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9D87DFA-FF49-436D-8FC5-4E2D218291B6}" => key removed successfully
- C:\WINDOWS\System32\Tasks\56504825 => moved successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\56504825" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FAC68BCD-C8A9-48DC-A15A-E0CAEFB385F4}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FAC68BCD-C8A9-48DC-A15A-E0CAEFB385F4}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scan" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C38C2227-5CE7-40EF-AA1D-CEEE7CE5D9A8}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C38C2227-5CE7-40EF-AA1D-CEEE7CE5D9A8}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DropboxUpdateTaskMachineUA" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DD3736DB-984C-477D-ADEE-EA5954970A42}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD3736DB-984C-477D-ADEE-EA5954970A42}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GyazoUpdateTaskMachineDaily" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A99D729E-7849-455F-BEFE-A37025D030C8}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A99D729E-7849-455F-BEFE-A37025D030C8}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Telerik Control Panel Notifier WIN-HBBVHMEMD8B_Jack" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8A92819F-7E4A-457C-8141-304CA005C76B}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A92819F-7E4A-457C-8141-304CA005C76B}" => key removed successfully
- C:\WINDOWS\System32\Tasks\281847184 => moved successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\281847184" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{941B9E6E-F9E3-4261-B11B-A4FD12566AAA}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{941B9E6E-F9E3-4261-B11B-A4FD12566AAA}" => key removed successfully
- C:\WINDOWS\System32\Tasks\181847184 => moved successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\181847184" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{97F1D027-DD57-475C-A908-757BB413ECC3}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97F1D027-DD57-475C-A908-757BB413ECC3}" => key removed successfully
- C:\WINDOWS\System32\Tasks\667475153059593546 => moved successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\667475153059593546" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{712462BD-E97E-483A-9504-499B73BD65CA}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{712462BD-E97E-483A-9504-499B73BD65CA}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\[email protected]" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{47B3A8DB-F5ED-4652-85C7-11ECCE1C07FD}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{47B3A8DB-F5ED-4652-85C7-11ECCE1C07FD}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_Jack" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6279A869-733B-41A9-ABE0-2D70F562EE03}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6279A869-733B-41A9-ABE0-2D70F562EE03}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4C8A06ED-6224-4DA4-8310-1D67EF029021}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{627BBDBB-92AD-4699-A62A-9253D8DB93C8}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{627BBDBB-92AD-4699-A62A-9253D8DB93C8}" => key removed successfully
- C:\WINDOWS\System32\Tasks\3146774314677431467743146774 => moved successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3146774314677431467743146774" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6DE30D67-5787-4466-96E0-719A62762E19}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DE30D67-5787-4466-96E0-719A62762E19}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (Jack)" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1BF6104B-9A2F-4C75-AC2E-9A5DE3BE6727}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BF6104B-9A2F-4C75-AC2E-9A5DE3BE6727}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Update" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0B89EC13-6CC0-43D1-8387-3500A9B59C90}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B89EC13-6CC0-43D1-8387-3500A9B59C90}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GyazoUpdateTaskMachine" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{18850801-F66F-477D-8097-23F5525B0334}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18850801-F66F-477D-8097-23F5525B0334}" => key removed successfully
- "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => key removed successfully
- "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
- "HKU\S-1-5-21-4270532649-2185237214-901248356-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
- HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxySettingsPerUser => value removed successfully
- HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
- HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
- HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
- HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
- HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL => value not found.
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
- "HKU\S-1-5-21-4270532649-2185237214-901248356-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d9693272-207f-11e5-b690-806e6f6e6963}" => key removed successfully
- HKCR\CLSID\{d9693272-207f-11e5-b690-806e6f6e6963} => key not found.
- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\cutoauto => value removed successfully
- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\interpee => value removed successfully
- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\autoauto => value removed successfully
- HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\cutoauto => value removed successfully
- HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\interpee => value removed successfully
- HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\autoauto => value removed successfully
- HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\usun.exe => value removed successfully
- HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\AllowLegacyWebView => value removed successfully
- HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\AllowUnhashedWebView => value removed successfully
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Run\\rutoauto => value removed successfully
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Run\\dutoauto => value removed successfully
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Run\\interpee => value removed successfully
- EmptyTemp: => 4.4 GB temporary data Removed.
- The system needed a reboot.
- ==== End of Fixlog 10:31:22 ====
Advertisement
Add Comment
Please, Sign In to add comment