Fix result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by BlackAngel (11-04-2017 21:38:42) Run:1
Running from C:\Users\BlackAngel\Desktop
Loaded Profiles: BlackAngel (Available Profiles: BlackAngel)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
GroupPolicy: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2692502047-4175476859-819210668-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2692502047-4175476859-819210668-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04112017184316000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2692502047-4175476859-819210668-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04112017184403964\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> DefaultScope value is missing
FF HKLM\...\Thunderbird\Extensions: [
eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF HKLM-x32\...\Thunderbird\Extensions: [
eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird => not found
FF Plugin-x32: @esn/esnlaunch,version=1.132.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [No File]
FF Plugin HKU\S-1-5-21-2692502047-4175476859-819210668-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04112017184316000: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-2692502047-4175476859-819210668-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04112017184403964: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll [No File]
HR Extension: (State and invocation of verb commands exposed by CommandFolder) - C:\Users\BlackAngel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2017-04-11] [UpdateUrl: hxxps://clients2.google/service/lalaoio ... ajfpiamdgj] <==== ATTENTION
U3 idsvc; no ImagePath
U3 wpcsvc; no ImagePath
C:\WINDOWS\system32\ApnDatabase.xml
C:\Users\BlackAngel\eset1.bat
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0bf93e197337a.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0e4255d0928d6.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0f181feff659b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d13056d7ff00ce.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d15c0dc2434fe0.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0420ad36437db.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0931643c5c0a1.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0bf93e1c43793.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0e4255d275fa7.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0f181ff29aa8a.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d13056d8388836.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {60E455AA-9B0D-4F50-B6A9-553FC298C4DA} - System32\Tasks\eset mirror => D:\eset1.bat <==== ATTENTION
Task: {707E16DA-4EFC-491C-B705-C116F1757934} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
C:\Users\BlackAngel\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [116]
EmptyTemp:
End
*****************
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKU\S-1-5-21-2692502047-4175476859-819210668-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKU\S-1-5-21-2692502047-4175476859-819210668-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04112017184316000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION => Error: No automatic fix found for this entry.
HKU\S-1-5-21-2692502047-4175476859-819210668-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04112017184403964\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION => Error: No automatic fix found for this entry.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\Software\Mozilla\Thunderbird\Extensions\\
eplgTb@eset.com => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\
eplgTb@eset.com => value removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.132.0 => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.140.0 => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.4 => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.3.1 => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0 => key removed successfully
FF Plugin HKU\S-1-5-21-2692502047-4175476859-819210668-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04112017184316000: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll [No File] => Error: No automatic fix found for this entry.
FF Plugin HKU\S-1-5-21-2692502047-4175476859-819210668-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04112017184403964: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll [No File] => Error: No automatic fix found for this entry.
HR Extension: (State and invocation of verb commands exposed by CommandFolder) - C:\Users\BlackAngel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2017-04-11] [UpdateUrl: hxxps://clients2.google/service/lalaoio ... ajfpiamdgj] <==== ATTENTION => Error: No automatic fix found for this entry.
HKLM\System\CurrentControlSet\Services\idsvc => key removed successfully
idsvc => service removed successfully
HKLM\System\CurrentControlSet\Services\wpcsvc => key removed successfully
wpcsvc => service removed successfully
C:\WINDOWS\system32\ApnDatabase.xml => moved successfully
C:\Users\BlackAngel\eset1.bat => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0bf93e197337a.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0e4255d0928d6.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0f181feff659b.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d13056d7ff00ce.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d15c0dc2434fe0.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0420ad36437db.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0931643c5c0a1.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0bf93e1c43793.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0e4255d275fa7.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0f181ff29aa8a.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d13056d8388836.job => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{60E455AA-9B0D-4F50-B6A9-553FC298C4DA} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{60E455AA-9B0D-4F50-B6A9-553FC298C4DA} => key removed successfully
C:\WINDOWS\System32\Tasks\eset mirror => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\eset mirror => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{707E16DA-4EFC-491C-B705-C116F1757934} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{707E16DA-4EFC-491C-B705-C116F1757934} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask => key removed successfully
"C:\Users\BlackAngel\AppData\Local\Temp" folder move:
Could not move "C:\Users\BlackAngel\AppData\Local\Temp" => Scheduled to move on reboot.
C:\ProgramData\TEMP => ":A1EDB939" ADS removed successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 49507302 B
Java, Flash, Steam htmlcache => 25267529 B
Windows/system/drivers => 13072507 B
Edge => 504 B
Chrome => 116736 B
Firefox => 10303298 B
Opera => 483060683 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 1634 B
NetworkService => 125790488 B
BlackAngel => 89526790 B
RecycleBin => 0 B
EmptyTemp: => 759.7 MB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 11-04-2017 21:49:04)
"C:\Users\BlackAngel\AppData\Local\Temp" => Could not move
==== End of Fixlog 21:49:07 ====