Fix result of Farbar Recovery Scan Tool (x64) Version: 19-12-2024 01
Ran by Crit (28-12-2024 22:13:54) Run:1
Running from C:\Users\Crit\Downloads
Loaded Profiles: Crit
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\...\Run: [AdobeGCInvoker-1.0] => "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe" (No File)
HKU\S-1-5-21-3156892032-2825552179-3562152326-1001\...\Run: [RaiderIO] => "C:\Program Files\RaiderIO\RaiderIO.exe" (No File)
HKU\S-1-5-21-3156892032-2825552179-3562152326-1001\...\Run: [EPSDNMON] => "" (No File)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {0144fbfc-c5f5-42a9-9064-6d70eb7d722a} - no filepath. <==== ATTENTION
Task: {08be1002-9e88-4e38-b86b-4134ac9585ca} - no filepath. <==== ATTENTION
Task: {11169b1a-fc06-4e24-b93f-1ccc030dca9b} - no filepath. <==== ATTENTION
Task: {1bb0a8d4-7d36-4582-bf72-376ce27ab405} - no filepath. <==== ATTENTION
Task: {29ccbee6-26fd-46fb-8908-26c86dd8a13f} - no filepath. <==== ATTENTION
Task: {2da8e33b-2a66-4ee2-bb7d-779b947a6eeb} - no filepath. <==== ATTENTION
Task: {312aeae8-1261-4f69-8f73-995edcf5521f} - no filepath. <==== ATTENTION
Task: {387abf24-2472-41ea-9fe1-a664794a0a3a} - no filepath. <==== ATTENTION
Task: {3ccedb05-74a2-4762-9915-557183e1585e} - no filepath. <==== ATTENTION
Task: {434135a2-77c2-4b09-8f56-eeed1d3bb601} - no filepath. <==== ATTENTION
Task: {4705a641-fb87-41a7-b274-3cb3dd6a040f} - no filepath. <==== ATTENTION
Task: {491d7447-6dcf-40e3-bf57-2d008466a1ea} - no filepath. <==== ATTENTION
Task: {4f824aee-565d-46d2-b2b9-8c5681711c48} - no filepath. <==== ATTENTION
Task: {4f916763-e7fd-459b-be8c-84da0e14cb0c} - no filepath. <==== ATTENTION
Task: {5d32ec9a-8d6a-445e-ab04-06f8b8076151} - no filepath. <==== ATTENTION
Task: {6b0898a4-f481-45c3-904c-67ce7ef4dd72} - no filepath. <==== ATTENTION
Task: {728ee9db-df6c-4060-8720-91b6c42fb7cd} - no filepath. <==== ATTENTION
Task: {866006cb-1187-438c-b59d-1027d44cb621} - no filepath. <==== ATTENTION
Task: {902ccd6c-863e-44fd-b00f-318ac972f746} - no filepath. <==== ATTENTION
Task: {944378ef-d2c5-448e-91d1-79cbd9ab2480} - no filepath. <==== ATTENTION
Task: {9770bac4-764f-4bf7-9c76-edb773c44155} - no filepath. <==== ATTENTION
Task: {9c5840c8-4cc7-46f4-9f0e-67cff37631a3} - no filepath. <==== ATTENTION
Task: {9f9df568-d289-444a-ac42-866c92a29159} - no filepath. <==== ATTENTION
Task: {a14193f8-0273-44e7-aa81-9d7909c5014c} - no filepath. <==== ATTENTION
Task: {a1eb8803-fe0b-4495-8f1a-6d1e0cd2bc04} - no filepath. <==== ATTENTION
Task: {a4481487-a12f-4102-9107-0eda6d477f9e} - no filepath. <==== ATTENTION
Task: {afbee6c3-9a52-4925-ad8a-6079fa64c801} - no filepath. <==== ATTENTION
Task: {b54508d0-442b-42ba-bdb5-dc4ef868ac7c} - no filepath. <==== ATTENTION
Task: {b5cab1b9-c2ad-4339-87a1-ff8d1979e0df} - no filepath. <==== ATTENTION
Task: {b78b1fa6-504b-45e7-8838-98b97fc055ee} - no filepath. <==== ATTENTION
Task: {b80dc5ec-655f-4e5e-b873-b88f224e4810} - no filepath. <==== ATTENTION
Task: {b8e06a9f-b75c-4b70-ad94-dd9cbe1be5be} - no filepath. <==== ATTENTION
Task: {c216b9e5-ced2-4253-b5e6-c0061e52b5f4} - no filepath. <==== ATTENTION
Task: {cf31b53b-b183-4e2f-9b86-397e7061f2b2} - no filepath. <==== ATTENTION
Task: {d115813e-182a-4305-9d29-d7c4c989de88} - no filepath. <==== ATTENTION
Task: {daedaaf2-28d9-495f-a631-bfeb7453b7ec} - no filepath. <==== ATTENTION
Task: {e8b56088-ca78-447d-8be0-9594792d10b1} - no filepath. <==== ATTENTION
Task: {ea979aa1-6e22-409f-9c24-0226bcabca4e} - no filepath. <==== ATTENTION
Task: {ef320c4a-a796-4884-9ef1-bb46cc8e1af3} - no filepath. <==== ATTENTION
Task: {f76ccee6-0c84-4d66-bc83-f496fd65f459} - no filepath. <==== ATTENTION
Task: {fadd3674-a7d8-47d6-a49e-48132a4dd62e} - no filepath. <==== ATTENTION
Task: {27933ADD-3271-48E0-9535-DE6687330813} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (No File)
Task: {56CECD1B-8C01-47D4-A9CD-578F6463B5E8} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => %windir%\system32\EOSNotify.exe (No File)
R3 cpuz154; C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2024-12-24] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ATTENTION
S3 cpuz157; C:\WINDOWS\temp\cpuz157\cpuz157_x64.sys [43568 2023-10-10] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ATTENTION
S3 cpuz158; C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys [44592 2024-12-13] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ATTENTION
R3 cpuz159; C:\WINDOWS\temp\cpuz159\cpuz159_x64.sys [44680 2024-12-24] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ATTENTION
S1 EneTechIo; \??\C:\WINDOWS\system32\drivers\ene.sys [X]
AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [3442]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\ProgramData\rsEngine.config.backup:CF02139FF4 [3442]
AlternateDataStreams: C:\ProgramData\sguasgrp.vby:BC52636AE7 [3442]
AlternateDataStreams: C:\ProgramData\UpdateLock-8216C80C92C4E828:F09C4A4D5E [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk:A5A4BED038 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk:1069064143 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk:9185529B88 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2018.lnk:3A5A51F5D9 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk:7661CCE9BF [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2023.lnk:C1A7220736 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2018.lnk:A90E8BDDFA [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk:B026C77744 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk:980850BA8A [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infix PDF Editor.lnk:ACDAEF33A5 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk:C5D586BE93 [3442]
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
FirewallRules: [{1659EE58-2552-4344-B6DE-20099A0528E1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe => No File
FirewallRules: [{83C54ADC-D1AB-49D4-82D6-B6F8E0AFBD53}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe => No File
FirewallRules: [{AF528A31-CEF1-4409-88C7-7811B496C193}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe => No File
FirewallRules: [{F69FCE02-E857-4F41-85C5-F0BB7A73EC02}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe => No File
FirewallRules: [{85DDFB89-3B36-4699-AFD4-3182726FB46C}] => (Allow) E:\Riot Games\League of Legends\LeagueClient.exe => No File
FirewallRules: [{0F0DE5F5-4479-4A48-8EDF-B135FE76C3A6}] => (Allow) E:\Riot Games\League of Legends\LeagueClient.exe => No File
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeGCInvoker-1.0" => removed successfully
"HKU\S-1-5-21-3156892032-2825552179-3562152326-1001\Software\Microsoft\Windows\CurrentVersion\Run\\RaiderIO" => removed successfully
"HKU\S-1-5-21-3156892032-2825552179-3562152326-1001\Software\Microsoft\Windows\CurrentVersion\Run\\EPSDNMON" => removed successfully
"C:\WINDOWS\system32\GroupPolicy\Machine" Folder move:
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0144fbfc-c5f5-42a9-9064-6d70eb7d722a}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08be1002-9e88-4e38-b86b-4134ac9585ca}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11169b1a-fc06-4e24-b93f-1ccc030dca9b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1bb0a8d4-7d36-4582-bf72-376ce27ab405}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29ccbee6-26fd-46fb-8908-26c86dd8a13f}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2da8e33b-2a66-4ee2-bb7d-779b947a6eeb}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{312aeae8-1261-4f69-8f73-995edcf5521f}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{387abf24-2472-41ea-9fe1-a664794a0a3a}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3ccedb05-74a2-4762-9915-557183e1585e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{434135a2-77c2-4b09-8f56-eeed1d3bb601}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4705a641-fb87-41a7-b274-3cb3dd6a040f}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{491d7447-6dcf-40e3-bf57-2d008466a1ea}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4f824aee-565d-46d2-b2b9-8c5681711c48}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4f916763-e7fd-459b-be8c-84da0e14cb0c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5d32ec9a-8d6a-445e-ab04-06f8b8076151}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6b0898a4-f481-45c3-904c-67ce7ef4dd72}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{728ee9db-df6c-4060-8720-91b6c42fb7cd}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{866006cb-1187-438c-b59d-1027d44cb621}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{902ccd6c-863e-44fd-b00f-318ac972f746}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{944378ef-d2c5-448e-91d1-79cbd9ab2480}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9770bac4-764f-4bf7-9c76-edb773c44155}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9c5840c8-4cc7-46f4-9f0e-67cff37631a3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9f9df568-d289-444a-ac42-866c92a29159}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a14193f8-0273-44e7-aa81-9d7909c5014c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a1eb8803-fe0b-4495-8f1a-6d1e0cd2bc04}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a4481487-a12f-4102-9107-0eda6d477f9e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{afbee6c3-9a52-4925-ad8a-6079fa64c801}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b54508d0-442b-42ba-bdb5-dc4ef868ac7c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b5cab1b9-c2ad-4339-87a1-ff8d1979e0df}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b78b1fa6-504b-45e7-8838-98b97fc055ee}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b80dc5ec-655f-4e5e-b873-b88f224e4810}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b8e06a9f-b75c-4b70-ad94-dd9cbe1be5be}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{c216b9e5-ced2-4253-b5e6-c0061e52b5f4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{cf31b53b-b183-4e2f-9b86-397e7061f2b2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{d115813e-182a-4305-9d29-d7c4c989de88}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{daedaaf2-28d9-495f-a631-bfeb7453b7ec}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e8b56088-ca78-447d-8be0-9594792d10b1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ea979aa1-6e22-409f-9c24-0226bcabca4e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ef320c4a-a796-4884-9ef1-bb46cc8e1af3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f76ccee6-0c84-4d66-bc83-f496fd65f459}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{fadd3674-a7d8-47d6-a49e-48132a4dd62e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{27933ADD-3271-48E0-9535-DE6687330813}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{27933ADD-3271-48E0-9535-DE6687330813}" => removed successfully
C:\WINDOWS\System32\Tasks\ASUS\P508PowerAgent_sdk => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS\P508PowerAgent_sdk" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{56CECD1B-8C01-47D4-A9CD-578F6463B5E8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56CECD1B-8C01-47D4-A9CD-578F6463B5E8}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Setup\EOSNotify => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify" => removed successfully
cpuz154 => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\cpuz154 => removed successfully
cpuz154 => service removed successfully
HKLM\System\CurrentControlSet\Services\cpuz157 => removed successfully
cpuz157 => service removed successfully
HKLM\System\CurrentControlSet\Services\cpuz158 => removed successfully
cpuz158 => service removed successfully
cpuz159 => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\cpuz159 => removed successfully
cpuz159 => service removed successfully
HKLM\System\CurrentControlSet\Services\EneTechIo => removed successfully
EneTechIo => service removed successfully
C:\ProgramData\mntemp => ":8EAD8B3507" ADS removed successfully
C:\ProgramData\Reprise => ":wupeogjxlctlfudivq`qsp`20hfm" ADS removed successfully
C:\ProgramData\rsEngine.config.backup => ":CF02139FF4" ADS removed successfully
C:\ProgramData\sguasgrp.vby => ":BC52636AE7" ADS removed successfully
C:\ProgramData\UpdateLock-8216C80C92C4E828 => ":F09C4A4D5E" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk => ":A5A4BED038" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini => ":B1DA6C571C" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk => ":1069064143" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk => ":9185529B88" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2018.lnk => ":3A5A51F5D9" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk => ":7661CCE9BF" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2023.lnk => ":C1A7220736" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2018.lnk => ":A90E8BDDFA" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk => ":B026C77744" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini => ":41964AA945" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk => ":BE32D07BC5" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk => ":980850BA8A" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infix PDF Editor.lnk => ":ACDAEF33A5" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk => ":C5D586BE93" ADS removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Search Page"="
http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Search Page"="
http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="
http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="
http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="
http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="
http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Local Page"="C:\Windows\System32\blank.htm" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Local Page"="C:\Windows\SysWOW64\blank.htm" => value restored successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1659EE58-2552-4344-B6DE-20099A0528E1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{83C54ADC-D1AB-49D4-82D6-B6F8E0AFBD53}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AF528A31-CEF1-4409-88C7-7811B496C193}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F69FCE02-E857-4F41-85C5-F0BB7A73EC02}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{85DDFB89-3B36-4699-AFD4-3182726FB46C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0F0DE5F5-4479-4A48-8EDF-B135FE76C3A6}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 915047807 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 746275501 B
Windows/system/drivers => 37086571 B
Edge => 20350 B
Chrome => 2883109436 B
Firefox => 1235283176 B
Opera => 50851926 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 122939 B
LocalService => 139045 B
NetworkService => 1418993 B
Crit => 527150206 B
RecycleBin => 0 B
EmptyTemp: => 6 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 22:22:25 ====