Guest User

fixlog.txt

a guest
Jan 18th, 2016
75
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.32 KB | None | 0 0
  1. Fix result of Farbar Recovery Scan Tool (x64) Version:17-01-2015
  2. Ran by Jack (2016-01-18 10:28:40) Run:1
  3. Running from C:\Users\Jack\Desktop
  4. Loaded Profiles: Jack (Available Profiles: Jack)
  5. Boot Mode: Normal
  6. ==============================================
  7.  
  8. fixlist content:
  9. *****************
  10. CreateRestorePoint:
  11. CloseProcesses:
  12. Task: {F12CBD61-BEF6-4613-874D-E172D1BCAF67} - \DropboxUpdateTaskMachineCore -> No File <==== ATTENTION
  13. Task: {F8D385BA-05F9-41B3-A7E4-A8C152C8B982} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
  14. Task: {F9D87DFA-FF49-436D-8FC5-4E2D218291B6} - System32\Tasks\56504825 => C:\Program Files (x86)\cent\class.exe [2016-01-16] () <==== ATTENTION
  15. Task: {FAC68BCD-C8A9-48DC-A15A-E0CAEFB385F4} - \Driver Booster Scan -> No File <==== ATTENTION
  16. Task: {C38C2227-5CE7-40EF-AA1D-CEEE7CE5D9A8} - \DropboxUpdateTaskMachineUA -> No File <==== ATTENTION
  17. Task: {DD3736DB-984C-477D-ADEE-EA5954970A42} - \GyazoUpdateTaskMachineDaily -> No File <==== ATTENTION
  18. Task: {A99D729E-7849-455F-BEFE-A37025D030C8} - \Telerik Control Panel Notifier WIN-HBBVHMEMD8B_Jack -> No File <==== ATTENTION
  19. Task: {8A92819F-7E4A-457C-8141-304CA005C76B} - System32\Tasks\281847184 => C:\Program Files (x86)\nutritious\raspy.exe [2016-01-16] (likeable) <==== ATTENTION
  20. Task: {941B9E6E-F9E3-4261-B11B-A4FD12566AAA} - System32\Tasks\181847184 => C:\Program Files (x86)\nutritious\raspy.exe [2016-01-16] (likeable) <==== ATTENTION
  21. Task: {97F1D027-DD57-475C-A908-757BB413ECC3} - System32\Tasks\667475153059593546 => C:\Program Files (x86)\teeth\zonked.exe [2016-01-16] (windows 99) <==== ATTENTION
  22. Task: {712462BD-E97E-483A-9504-499B73BD65CA} - \[email protected] -> No File <==== ATTENTION
  23. Task: {47B3A8DB-F5ED-4652-85C7-11ECCE1C07FD} - \Uninstaller_SkipUac_Jack -> No File <==== ATTENTION
  24. Task: {6279A869-733B-41A9-ABE0-2D70F562EE03} - \{4C8A06ED-6224-4DA4-8310-1D67EF029021} -> No File <==== ATTENTION
  25. Task: {627BBDBB-92AD-4699-A62A-9253D8DB93C8} - System32\Tasks\3146774314677431467743146774 => C:\Program Files (x86)\teeth\zonked.exe [2016-01-16] (windows 99) <==== ATTENTION
  26. Task: {6DE30D67-5787-4466-96E0-719A62762E19} - \Driver Booster SkipUAC (Jack) -> No File <==== ATTENTION
  27. Task: {1BF6104B-9A2F-4C75-AC2E-9A5DE3BE6727} - \Driver Booster Update -> No File <==== ATTENTION
  28. Task: {0B89EC13-6CC0-43D1-8387-3500A9B59C90} - \GyazoUpdateTaskMachine -> No File <==== ATTENTION
  29. Task: {18850801-F66F-477D-8097-23F5525B0334} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
  30. HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
  31. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
  32. HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 1 <======= ATTENTION (Restriction - ProxySettings)
  33. ProxyEnable: [HKLM] => Proxy is enabled.
  34. ProxyEnable: [HKLM-x32] => Proxy is enabled.
  35. ProxyServer: [HKLM] => http=127.0.0.1:8877;https=127.0.0.1:8877
  36. ProxyServer: [HKLM-x32] => http=127.0.0.1:8877;https=127.0.0.1:8877
  37. AutoConfigURL: [HKLM] => http=127.0.0.1:8877;https=127.0.0.1:8877
  38. ProxyEnable: [S-1-5-21-4270532649-2185237214-901248356-1001] => Proxy is enabled.
  39. ProxyServer: [S-1-5-21-4270532649-2185237214-901248356-1001] => http=127.0.0.1:8877;https=127.0.0.1:8877
  40. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\MountPoints2: {d9693272-207f-11e5-b690-806e6f6e6963} - "E:\launch.bat"
  41. HKLM\...\Run: [cutoauto] => C:\Program Files (x86)\teeth\industry.exe [42734 2016-01-16] ()
  42. HKLM\...\Run: [interpee] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
  43. HKLM\...\Run: [autoauto] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
  44. HKLM-x32\...\Run: [cutoauto] => C:\Program Files (x86)\teeth\industry.exe [42734 2016-01-16] ()
  45. HKLM-x32\...\Run: [interpee] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
  46. HKLM-x32\...\Run: [autoauto] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
  47. HKLM-x32\...\RunOnce: [usun.exe] => C:\Users\Jack\AppData\Local\SunnyDay5\usun.exe [3282096 2016-01-15] ()
  48. HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1
  49. HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1
  50. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\Run: [rutoauto] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
  51. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\Run: [dutoauto] => C:\Program Files (x86)\teeth\industry.exe [42734 2016-01-16] ()
  52. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\Run: [interpee] => C:\Program Files (x86)\teeth\zonked.exe [37888 2016-01-16] (windows 99)
  53. EmptyTemp:
  54. *****************
  55.  
  56. Restore point was successfully created.
  57. Processes closed successfully.
  58. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F12CBD61-BEF6-4613-874D-E172D1BCAF67}" => key removed successfully
  59. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F12CBD61-BEF6-4613-874D-E172D1BCAF67}" => key removed successfully
  60. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DropboxUpdateTaskMachineCore" => key removed successfully
  61. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F8D385BA-05F9-41B3-A7E4-A8C152C8B982}" => key removed successfully
  62. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F8D385BA-05F9-41B3-A7E4-A8C152C8B982}" => key removed successfully
  63. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => key removed successfully
  64. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F9D87DFA-FF49-436D-8FC5-4E2D218291B6}" => key removed successfully
  65. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9D87DFA-FF49-436D-8FC5-4E2D218291B6}" => key removed successfully
  66. C:\WINDOWS\System32\Tasks\56504825 => moved successfully
  67. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\56504825" => key removed successfully
  68. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FAC68BCD-C8A9-48DC-A15A-E0CAEFB385F4}" => key removed successfully
  69. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FAC68BCD-C8A9-48DC-A15A-E0CAEFB385F4}" => key removed successfully
  70. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scan" => key removed successfully
  71. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C38C2227-5CE7-40EF-AA1D-CEEE7CE5D9A8}" => key removed successfully
  72. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C38C2227-5CE7-40EF-AA1D-CEEE7CE5D9A8}" => key removed successfully
  73. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DropboxUpdateTaskMachineUA" => key removed successfully
  74. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DD3736DB-984C-477D-ADEE-EA5954970A42}" => key removed successfully
  75. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD3736DB-984C-477D-ADEE-EA5954970A42}" => key removed successfully
  76. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GyazoUpdateTaskMachineDaily" => key removed successfully
  77. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A99D729E-7849-455F-BEFE-A37025D030C8}" => key removed successfully
  78. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A99D729E-7849-455F-BEFE-A37025D030C8}" => key removed successfully
  79. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Telerik Control Panel Notifier WIN-HBBVHMEMD8B_Jack" => key removed successfully
  80. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8A92819F-7E4A-457C-8141-304CA005C76B}" => key removed successfully
  81. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A92819F-7E4A-457C-8141-304CA005C76B}" => key removed successfully
  82. C:\WINDOWS\System32\Tasks\281847184 => moved successfully
  83. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\281847184" => key removed successfully
  84. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{941B9E6E-F9E3-4261-B11B-A4FD12566AAA}" => key removed successfully
  85. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{941B9E6E-F9E3-4261-B11B-A4FD12566AAA}" => key removed successfully
  86. C:\WINDOWS\System32\Tasks\181847184 => moved successfully
  87. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\181847184" => key removed successfully
  88. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{97F1D027-DD57-475C-A908-757BB413ECC3}" => key removed successfully
  89. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97F1D027-DD57-475C-A908-757BB413ECC3}" => key removed successfully
  90. C:\WINDOWS\System32\Tasks\667475153059593546 => moved successfully
  91. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\667475153059593546" => key removed successfully
  92. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{712462BD-E97E-483A-9504-499B73BD65CA}" => key removed successfully
  93. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{712462BD-E97E-483A-9504-499B73BD65CA}" => key removed successfully
  94. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\[email protected]" => key removed successfully
  95. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{47B3A8DB-F5ED-4652-85C7-11ECCE1C07FD}" => key removed successfully
  96. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{47B3A8DB-F5ED-4652-85C7-11ECCE1C07FD}" => key removed successfully
  97. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_Jack" => key removed successfully
  98. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6279A869-733B-41A9-ABE0-2D70F562EE03}" => key removed successfully
  99. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6279A869-733B-41A9-ABE0-2D70F562EE03}" => key removed successfully
  100. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4C8A06ED-6224-4DA4-8310-1D67EF029021}" => key removed successfully
  101. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{627BBDBB-92AD-4699-A62A-9253D8DB93C8}" => key removed successfully
  102. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{627BBDBB-92AD-4699-A62A-9253D8DB93C8}" => key removed successfully
  103. C:\WINDOWS\System32\Tasks\3146774314677431467743146774 => moved successfully
  104. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3146774314677431467743146774" => key removed successfully
  105. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6DE30D67-5787-4466-96E0-719A62762E19}" => key removed successfully
  106. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DE30D67-5787-4466-96E0-719A62762E19}" => key removed successfully
  107. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (Jack)" => key removed successfully
  108. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1BF6104B-9A2F-4C75-AC2E-9A5DE3BE6727}" => key removed successfully
  109. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BF6104B-9A2F-4C75-AC2E-9A5DE3BE6727}" => key removed successfully
  110. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Update" => key removed successfully
  111. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0B89EC13-6CC0-43D1-8387-3500A9B59C90}" => key removed successfully
  112. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B89EC13-6CC0-43D1-8387-3500A9B59C90}" => key removed successfully
  113. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GyazoUpdateTaskMachine" => key removed successfully
  114. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{18850801-F66F-477D-8097-23F5525B0334}" => key removed successfully
  115. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18850801-F66F-477D-8097-23F5525B0334}" => key removed successfully
  116. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => key removed successfully
  117. "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
  118. "HKU\S-1-5-21-4270532649-2185237214-901248356-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
  119. HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxySettingsPerUser => value removed successfully
  120. HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
  121. HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
  122. HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
  123. HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
  124. HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL => value not found.
  125. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
  126. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
  127. "HKU\S-1-5-21-4270532649-2185237214-901248356-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d9693272-207f-11e5-b690-806e6f6e6963}" => key removed successfully
  128. HKCR\CLSID\{d9693272-207f-11e5-b690-806e6f6e6963} => key not found.
  129. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\cutoauto => value removed successfully
  130. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\interpee => value removed successfully
  131. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\autoauto => value removed successfully
  132. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\cutoauto => value removed successfully
  133. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\interpee => value removed successfully
  134. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\autoauto => value removed successfully
  135. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\usun.exe => value removed successfully
  136. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\AllowLegacyWebView => value removed successfully
  137. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\AllowUnhashedWebView => value removed successfully
  138. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Run\\rutoauto => value removed successfully
  139. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Run\\dutoauto => value removed successfully
  140. HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Software\Microsoft\Windows\CurrentVersion\Run\\interpee => value removed successfully
  141. EmptyTemp: => 4.4 GB temporary data Removed.
  142.  
  143.  
  144. The system needed a reboot.
  145.  
  146. ==== End of Fixlog 10:31:22 ====
Advertisement
Add Comment
Please, Sign In to add comment