Fix result of Farbar Recovery Scan Tool (x64) Version: 06-06-2020
Ran by John Doe (14-06-2020 19:00:07) Run:1
Running from C:\Users\John Doe\Desktop
Loaded Profiles: John Doe
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
File: C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll
File: C:\Program Files (x86)\Browny02\BrYNSvc.exe
File: C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
Folder: C:\Users\John Doe\AppData\LocalLow\IGDump
Folder: C:\WINDOWS\ehome
Folder: C:\Users\John Doe\cmdl32
File: C:\Users\John Doe\cmdl32\cmdl32.vbs
CMD: type "C:\Users\John Doe\cmdl32\cmdl32.vbs"

GroupPolicy: Restriction ? <==== ATTENTION
Task: {16AB90B5-E17D-4056-94B5-091549C2C6C2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {199BACAC-60A4-440C-B9E7-54AF225A49E4} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {19F4FCA3-2549-4077-8CCE-4E11DB8B3EE5} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2425CA00-6715-46CF-8A2A-4C1160A3DF04} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2E85FCC9-7AD6-4C0B-8759-104FDA75BACC} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {30F94D8B-8871-46B3-A362-1398B1AEDD0A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4980829B-7355-455D-A68F-CD54A48BCAC3} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5627C68B-9183-4880-B278-9B6D9A81EC39} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {56AACBE7-59BD-4DB9-B1DC-BF108E6EEAD4} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {71541D3D-BD91-472D-9EDF-FC7927379764} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {879617BB-EAE6-47BC-A4F5-6B56C2DD4D16} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8869D1B7-FF7B-4713-AF84-F7231FD751AB} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8964E93F-3D31-46A4-9FE5-83148E1CEA9F} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9253F892-83AE-4C62-9337-6AE5A37E64E3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A18008EA-5055-4D41-81B0-3BD03CDB2B07} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {B24E3587-D32B-40A7-9E0F-0F61198E7A3E} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CB849CA6-FEAB-4680-B3D7-8151E15BC132} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E34ABC27-986E-40B7-8088-36253728EC9B} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F33FF581-7661-437C-BB65-CBA76E065D46} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FD3E5E81-E284-42CE-9BED-C9522AF31F3A} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FDDAE3A1-38D6-4EE5-B3E7-215114819D4E} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=KMOH&bmod=KMOH","hxxp://search.gboxapp.com/"
U3 idsvc; no ImagePath

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Error: (0) Failed to create a restore point.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count    : 11
Average  : 
Sum      : 2808691
Maximum  : 
Minimum  : 
Property : Length




========= End of Powershell: =========


========================= File: C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe ========================

C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
File not signed
MD5: 7F42FFCD6FF7CA558C2D95DADCD5EFA9
Creation and modification date: 2018-07-25 13:58 - 2010-06-10 13:42
Size: 002621440
Attributes: ----R
Company Name: Brother Industries, Ltd.
Internal Name: BrStMonW
Original Name: BrStMonW.exe
Product: Brother Status Monitor Application
Description: Brother Status Monitor Application
File Version: 1, 0, 1, 3
Product Version: 1, 0, 1, 3
Copyright: Copyright (C) 2005 - 2010 Brother Industries, Ltd.
VirusTotal: https://www.virustotal.com/gui/file/cd9e71a718ad3ff465950a7d3937884154f021a296c301be2fecd0ae69f04713/detection/f-cd9e71a718ad3ff465950a7d3937884154f021a296c301be2fecd0ae69f04713-1591525727

====== End of File: ======


========================= File: C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll ========================

"C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll" => not found
====== End of File: ======


========================= File: C:\Program Files (x86)\Browny02\BrYNSvc.exe ========================

C:\Program Files (x86)\Browny02\BrYNSvc.exe
File not signed
MD5: EA7E57F87D6FEE5FD6C5F813C04E8CD2
Creation and modification date: 2018-07-25 13:58 - 2010-01-25 08:22
Size: 000245760
Attributes: ----N
Company Name: Brother Industries, Ltd.
Internal Name: BrYNSvc.exe
Original Name: BrYNSvc.exe
Product: BrYNCSvc
Description: BrYNCSvc
File Version: 1.0.0.10
Product Version: 1.0.0.10
Copyright: Copyright (C) 2009-2010 Brother Industries, Ltd.
VirusTotal: https://www.virustotal.com/gui/file/1eb84f4dee3034fafbea2a3f84eece036e803872da94d54e958e9f2f09519e88/detection/f-1eb84f4dee3034fafbea2a3f84eece036e803872da94d54e958e9f2f09519e88-1592136559

====== End of File: ======


========================= File: C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe ========================

C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
File not signed
MD5: 7F42FFCD6FF7CA558C2D95DADCD5EFA9
Creation and modification date: 2018-07-25 13:58 - 2010-06-10 13:42
Size: 002621440
Attributes: ----R
Company Name: Brother Industries, Ltd.
Internal Name: BrStMonW
Original Name: BrStMonW.exe
Product: Brother Status Monitor Application
Description: Brother Status Monitor Application
File Version: 1, 0, 1, 3
Product Version: 1, 0, 1, 3
Copyright: Copyright (C) 2005 - 2010 Brother Industries, Ltd.
VirusTotal: https://www.virustotal.com/gui/file/cd9e71a718ad3ff465950a7d3937884154f021a296c301be2fecd0ae69f04713/detection/f-cd9e71a718ad3ff465950a7d3937884154f021a296c301be2fecd0ae69f04713-1591525727

====== End of File: ======


========================= Folder: C:\Users\John Doe\AppData\LocalLow\IGDump ========================


====== End of Folder: ======


========================= Folder: C:\WINDOWS\ehome ========================

2010-11-21 09:16 - 2019-08-31 04:28 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc
2010-11-21 09:16 - 2018-11-26 22:50 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Components
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Components\tables
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Filters
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\SFXPlugins
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\SonicResources
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\style
2010-11-21 09:16 - 2018-11-26 22:50 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Styles
2010-11-21 09:16 - 2018-11-26 22:50 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Styles\NTSC
2010-11-21 09:16 - 2018-11-26 22:50 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Styles\NTSC\Symphony
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Styles\NTSC\Symphony\Symphony
2010-11-21 09:16 - 2018-11-26 22:50 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Styles\PAL
2010-11-21 09:16 - 2018-11-26 22:50 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Styles\PAL\Symphony
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\CreateDisc\Styles\PAL\Symphony\Symphony
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\en-US
2010-11-21 09:16 - 2019-08-31 04:28 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\MCX
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\MCX\X02
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\MediaRenderer
2010-11-21 09:16 - 2019-08-31 04:28 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\wow
2010-11-21 09:16 - 2010-11-21 09:16 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\ehome\wow\en-US

====== End of Folder: ======


========================= Folder: C:\Users\John Doe\cmdl32 ========================

2020-04-23 22:24 - 2020-04-23 22:24 - 000000132 ____A [87A3CA83EF661E73B3A6A58C7268AE24] () C:\Users\John Doe\cmdl32\cmdl32.vbs
2020-04-23 22:25 - 2020-04-23 22:25 - 1028808864 ____A [9C4DA0AB783488FF10038EFB4AAE690D] (TechSmith Corporation) C:\Users\John Doe\cmdl32\WinMgmt4k.exe

====== End of Folder: ======


========================= File: C:\Users\John Doe\cmdl32\cmdl32.vbs ========================

C:\Users\John Doe\cmdl32\cmdl32.vbs
File not signed
MD5: 87A3CA83EF661E73B3A6A58C7268AE24
Creation and modification date: 2020-04-23 22:24 - 2020-04-23 22:24
Size: 000000132
Attributes: ----A
Company Name: 
Internal Name: 
Original Name: 
Product: 
Description: 
File Version: 
Product Version: 
Copyright: 
VirusTotal: 0

====== End of File: ======


========= type "C:\Users\John Doe\cmdl32\cmdl32.vbs" =========

Set WshShell = WScript.CreateObject("WScript.Shell")
WScript.Sleep(6358)
WshShell.Run """C:\Users\John Doe\cmdl32\WinMgmt4k.exe"""
========= End of CMD: =========

C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{16AB90B5-E17D-4056-94B5-091549C2C6C2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16AB90B5-E17D-4056-94B5-091549C2C6C2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscovery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{199BACAC-60A4-440C-B9E7-54AF225A49E4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{199BACAC-60A4-440C-B9E7-54AF225A49E4}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ActivateWindowsSearch" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{19F4FCA3-2549-4077-8CCE-4E11DB8B3EE5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{19F4FCA3-2549-4077-8CCE-4E11DB8B3EE5}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\UpdateRecordPath" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2425CA00-6715-46CF-8A2A-4C1160A3DF04}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2425CA00-6715-46CF-8A2A-4C1160A3DF04}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\SqlLiteRecoveryTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2E85FCC9-7AD6-4C0B-8759-104FDA75BACC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E85FCC9-7AD6-4C0B-8759-104FDA75BACC}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PvrScheduleTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{30F94D8B-8871-46B3-A362-1398B1AEDD0A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30F94D8B-8871-46B3-A362-1398B1AEDD0A}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURDiscovery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4980829B-7355-455D-A68F-CD54A48BCAC3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4980829B-7355-455D-A68F-CD54A48BCAC3}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5627C68B-9183-4880-B278-9B6D9A81EC39}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5627C68B-9183-4880-B278-9B6D9A81EC39}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PeriodicScanRetry" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{56AACBE7-59BD-4DB9-B1DC-BF108E6EEAD4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56AACBE7-59BD-4DB9-B1DC-BF108E6EEAD4}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RecordingRestart" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{71541D3D-BD91-472D-9EDF-FC7927379764}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{71541D3D-BD91-472D-9EDF-FC7927379764}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscoveryW1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{879617BB-EAE6-47BC-A4F5-6B56C2DD4D16}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{879617BB-EAE6-47BC-A4F5-6B56C2DD4D16}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ehDRMInit" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8869D1B7-FF7B-4713-AF84-F7231FD751AB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8869D1B7-FF7B-4713-AF84-F7231FD751AB}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\InstallPlayReady" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8964E93F-3D31-46A4-9FE5-83148E1CEA9F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8964E93F-3D31-46A4-9FE5-83148E1CEA9F}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RegisterSearch" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9253F892-83AE-4C62-9337-6AE5A37E64E3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9253F892-83AE-4C62-9337-6AE5A37E64E3}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\DispatchRecoveryTasks" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A18008EA-5055-4D41-81B0-3BD03CDB2B07}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A18008EA-5055-4D41-81B0-3BD03CDB2B07}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\mcupdate => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\mcupdate" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B24E3587-D32B-40A7-9E0F-0F61198E7A3E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B24E3587-D32B-40A7-9E0F-0F61198E7A3E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURActivate" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CB849CA6-FEAB-4680-B3D7-8151E15BC132}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB849CA6-FEAB-4680-B3D7-8151E15BC132}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\MediaCenterRecoveryTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E34ABC27-986E-40B7-8088-36253728EC9B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E34ABC27-986E-40B7-8088-36253728EC9B}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ConfigureInternetTimeService" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F33FF581-7661-437C-BB65-CBA76E065D46}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F33FF581-7661-437C-BB65-CBA76E065D46}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscoveryW2" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FD3E5E81-E284-42CE-9BED-C9522AF31F3A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD3E5E81-E284-42CE-9BED-C9522AF31F3A}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ReindexSearchRoot" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FDDAE3A1-38D6-4EE5-B3E7-215114819D4E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDDAE3A1-38D6-4EE5-B3E7-215114819D4E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PvrRecoveryTask" => removed successfully
"Chrome StartupUrls" => removed successfully
HKLM\System\CurrentControlSet\Services\idsvc => removed successfully
idsvc => service removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 10248192 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 49739743 B
Java, Flash, Steam htmlcache => 307488157 B
Windows/system/drivers => 3674311 B
Edge => 1138748 B
Chrome => 864506463 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 23766 B
NetworkService => 806394 B
John Doe => 518060167 B

RecycleBin => 2978520020 B
EmptyTemp: => 4.4 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 19:01:19 ====