dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on May 18, 2015 11:25:27 GMT -8
Open notepad by pressing the Windows Key + R key, typing notepad in the Run box and pressing Enter. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. Save it to your desktop as fixlist.txtNOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating systemStart FRST that is on the desktop by right clicking on file and selecting "Run as Administrator..." and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
|
|
moeko
New Helpee
Posts: 13
|
Post by moeko on May 29, 2015 21:58:10 GMT -8
Fix result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015 Ran by Marius at 2015-05-29 22:04:22 Run:4 Running from C:\Users\Marius\Desktop Loaded Profiles: Marius (Available Profiles: Marius) Boot Mode: Normal ============================================== fixlist content: ***************** Start CreateRestorePoint: CloseProcesses: C:\temp\InstallFilter64.msi C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2QI0L11R\CASrv[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2QI0L11R\SFSetup[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4XT20E21\pcmechanicpm-standalone-setup[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4XT20E21\sp-downloader[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4XT20E21\VOsrv[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B3IOSXBS\ProPCCleaner[2].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B3IOSXBS\Stub[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I6HMPVE4\runasu[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\ConvertAdSetup[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\MixVideoPlayerSetup[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\mystartTb_5.4.1.4_sambamedia[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\SU_Srv[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\ZoomWeb_Installer[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PIKOMH4V\SafeGuardSetup[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PIKOMH4V\Update_Notifier[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PIKOMH4V\WinCheckSetup[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q6FZM90L\JOSrv[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q6FZM90L\Setup[1].exe C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q6FZM90L\SuperOptimizer[1].exe C:\Users\Marius\AppData\Local\Temp\nsnB2C8.tmp C:\Users\Marius\AppData\Local\Temp\nsnF3FE.tmp C:\Users\Marius\AppData\Local\Temp\nss35AA.tmp C:\Users\Marius\AppData\Local\Temp\nsx9F07.tmp C:\Users\Marius\AppData\Local\Temp\nsy2D3F.tmp C:\Users\Marius\AppData\Local\Temp\sprFA58.tmp C:\Users\Marius\AppData\Local\Temp\e946af02-5e0f-4a76-82f1-3c832b613a4c\software\amsetup_activeris_default_010414_installer.exe C:\Users\Marius\AppData\Local\Temp\e946af02-5e0f-4a76-82f1-3c832b613a4c\software\speedupmypc.exe C:\Users\Marius\AppData\Local\Temp\Install_3073\ins_smk.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\380.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\385.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\392.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\420.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\InstallManager.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_AmNuvision_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_infonaut_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_mountainbike_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_optimizerpro_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_pcrossbrowser_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_priceless_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_priceless_p_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_psafeguard_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_SByoutube_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_secprotwhite_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_secureprotect_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_speeditup_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_superpct_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_superpc_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_zombie_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-2N4HA.tmp\382.exe C:\Users\Marius\AppData\Local\Temp\is-2N4HA.tmp\392.exe C:\Users\Marius\AppData\Local\Temp\is-2N4HA.tmp\package_pcrossbrowser_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-2N4HA.tmp\package_SByoutube_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-59VTR.tmp\pm-standalone-setup.exe C:\Users\Marius\AppData\Local\Temp\is-9VS3A.tmp\SpeedUpMyPC-standalone-setup.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\380.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\382.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\385.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\392.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\420.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\InstallManager.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\InstallManagerNS.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_AmNuvision_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_browsergood_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_infonaut_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_mountainbike_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_optimizerpro_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_pcrossbrowser_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_priceless_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_priceless_p_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_psafeguard_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_SByoutube_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_secprotwhite_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_secureprotect_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_speeditup_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_superpct_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_superpc_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_zombie_installer_multilang.exe C:\Users\Marius\AppData\Local\Temp\is45637729\4140097_stp\icc.dll C:\Users\Marius\AppData\Local\Temp\is45637729\427319_stp\icc.dll C:\Users\Marius\AppData\Local\Temp\nsjBF5A.tmp\nsPage_LoadOffer.dll C:\Users\Marius\AppData\Local\Temp\nsn1F66.tmp\nsPage_LoadOffer.dll C:\Users\Marius\AppData\Local\Temp\nswA796.tmp\setup.exe C:\Windows\Installer\MSI3CEA.tmp C:\Windows\Installer\MSI600F.tmp C:\Windows\Installer\MSI8546.tmp C:\Windows\Installer\MSIB899.tmp C:\Windows\Installer\MSIE1FE.tmp C:\Windows\Temp\oj51dj.exe Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f CMD: bitsadmin /reset /allusers EmptyTemp: Reboot: end ***************** Restore point was successfully created. Processes closed successfully. "C:\temp\InstallFilter64.msi" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2QI0L11R\CASrv[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2QI0L11R\SFSetup[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4XT20E21\pcmechanicpm-standalone-setup[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4XT20E21\sp-downloader[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4XT20E21\VOsrv[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B3IOSXBS\ProPCCleaner[2].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B3IOSXBS\Stub[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I6HMPVE4\runasu[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\ConvertAdSetup[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\MixVideoPlayerSetup[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\mystartTb_5.4.1.4_sambamedia[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\SU_Srv[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JOZVB6A0\ZoomWeb_Installer[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PIKOMH4V\SafeGuardSetup[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PIKOMH4V\Update_Notifier[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PIKOMH4V\WinCheckSetup[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q6FZM90L\JOSrv[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q6FZM90L\Setup[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q6FZM90L\SuperOptimizer[1].exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\nsnB2C8.tmp" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\nsnF3FE.tmp" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\nss35AA.tmp" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\nsx9F07.tmp" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\nsy2D3F.tmp" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\sprFA58.tmp" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\e946af02-5e0f-4a76-82f1-3c832b613a4c\software\amsetup_activeris_default_010414_installer.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\e946af02-5e0f-4a76-82f1-3c832b613a4c\software\speedupmypc.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\Install_3073\ins_smk.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\380.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\385.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\392.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\420.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\InstallManager.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_AmNuvision_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_infonaut_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_mountainbike_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_optimizerpro_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_pcrossbrowser_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_priceless_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_priceless_p_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_psafeguard_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_SByoutube_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_secprotwhite_installer_multilang.exe" => File/Folder not found. "C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_secureprotect_installer_multilang.exe" => File/Folder not found. C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_speeditup_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_superpct_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_superpc_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-07DBI.tmp\package_zombie_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-2N4HA.tmp\382.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-2N4HA.tmp\392.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-2N4HA.tmp\package_pcrossbrowser_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-2N4HA.tmp\package_SByoutube_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-59VTR.tmp\pm-standalone-setup.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-9VS3A.tmp\SpeedUpMyPC-standalone-setup.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\380.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\382.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\385.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\392.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\420.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\InstallManager.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\InstallManagerNS.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_AmNuvision_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_browsergood_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_infonaut_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_mountainbike_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_optimizerpro_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_pcrossbrowser_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_priceless_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_priceless_p_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_psafeguard_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_SByoutube_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_secprotwhite_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_secureprotect_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_speeditup_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_superpct_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_superpc_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is-DJTLH.tmp\package_zombie_installer_multilang.exe => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is45637729\4140097_stp\icc.dll => Moved successfully. C:\Users\Marius\AppData\Local\Temp\is45637729\427319_stp\icc.dll => Moved successfully. C:\Users\Marius\AppData\Local\Temp\nsjBF5A.tmp\nsPage_LoadOffer.dll => Moved successfully. C:\Users\Marius\AppData\Local\Temp\nsn1F66.tmp\nsPage_LoadOffer.dll => Moved successfully. C:\Users\Marius\AppData\Local\Temp\nswA796.tmp\setup.exe => Moved successfully. C:\Windows\Installer\MSI3CEA.tmp => Moved successfully. C:\Windows\Installer\MSI600F.tmp => Moved successfully. C:\Windows\Installer\MSI8546.tmp => Moved successfully. C:\Windows\Installer\MSIB899.tmp => Moved successfully. C:\Windows\Installer\MSIE1FE.tmp => Moved successfully. C:\Windows\Temp\oj51dj.exe => Moved successfully. ========= Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F ========= The operation completed successfully.
========= End of Reg: =========
========= Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F ========= The operation completed successfully.
========= End of Reg: =========
========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f ========= The operation completed successfully.
========= End of Reg: =========
========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f ========= The operation completed successfully.
========= End of Reg: =========
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ] BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. Unable to cancel {2A6C179F-83EE-44A3-A6E8-EBD72E576E1A}. Unable to cancel {AB9B98AF-3CCB-403E-8144-8A642C8199B7}. Unable to cancel {91FC64B3-6A4F-4958-81A5-E5D0F8FCDFFA}. Unable to cancel {D38D76D6-A272-444B-AD31-580068C95D3F}. {51759C26-3BA2-4244-A1D1-A6F2613F62AE} canceled. {BA74AF7A-891E-4168-84FF-BB3483ED5F4F} canceled. {5160F831-76E8-40B2-8423-8BDD42A101BF} canceled. {0A71B70E-7444-42B8-A3E4-19FADACB0520} canceled. {89F91AF7-5595-45B2-A0CD-4DA6B34822BE} canceled. {81CA53D1-F9DF-4365-808B-1B9B1450A489} canceled. {F653917C-B06C-4603-802E-8C08C091EDCD} canceled. {BACCF636-A54C-4C17-A35A-902E6078074C} canceled. {99167E70-A5EA-4593-BCC4-AAF75F30FF3B} canceled. 9 out of 13 jobs canceled. ========= End of CMD: ========= EmptyTemp: => Removed 2.7 GB temporary data.
The system needed a reboot. ==== End of Fixlog 22:25:51 ====
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on May 30, 2015 20:54:07 GMT -8
If you did not do so at the end of its scan, please uninstall ESET Online Scanner at this time. You can use the Control Panel 'Add / Remove Programs' or 'Programs and Features' utility to uninstall it. Next, we need to remove the tools we've used during cleaning your machine. [/a] Ensure the following is ticked: - Activate UAC
- Remove disinfection tools
- Create registry backup
- Purge system restore
- Reset system settings
[/ul] Then click Run. The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply. Once you have the log file saved, please reboot your system to complete the clean up process. Your system looks clean and your logs are fine. Unless you want something else done, you are done and free to go.Final word from me: Surf safely, and watch when installing or letting anything add itself to your system. Remember, the best security is not on your system but in the chair in front of it. Take care and thanks for sticking with us in this rushed time.
|
|
moeko
New Helpee
Posts: 13
|
Post by moeko on Jun 1, 2015 14:07:38 GMT -8
Thank you very much for your patience and of course for helping me out!! I will make sure to explain everything to my parents in detail this time, haha
# DelFix v1.010 - Logfile created 01/06/2015 at 15:46:05 # Updated 26/04/2015 by Xplode # Username : Marius - MARIUS-PC # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
~ Activating UAC ... OK
~ Removing disinfection tools ...
Deleted : C:\FRST Deleted : C:\AdwCleaner Deleted : C:\Users\Marius\Downloads\esetsmartinstaller_enu.exe Deleted : HKLM\SOFTWARE\AdwCleaner
~ Creating registry backup ... OK
~ Cleaning system restore ...
Deleted : RP #102 [Windows Update | 05/06/2015 03:47:30] Deleted : RP #104 [Restore Point Created by FRST | 05/08/2015 05:06:49] Deleted : RP #105 [Removed GeekBuddy. | 05/09/2015 02:40:22] Deleted : RP #107 [Windows Update | 05/12/2015 22:20:55] Deleted : RP #108 [Windows Update | 05/13/2015 02:16:36] Deleted : RP #109 [Windows Update | 05/16/2015 19:51:52] Deleted : RP #110 [Windows Backup | 05/18/2015 01:03:39] Deleted : RP #111 [Windows Update | 05/21/2015 04:15:31] Deleted : RP #113 [Removed Avira Browser Safety | 05/25/2015 23:39:37] Deleted : RP #114 [Removed GeekBuddy. | 05/30/2015 02:23:47] Deleted : RP #115 [Removed GeekBuddy. | 05/30/2015 03:24:47] Deleted : RP #117 [Restore Point Created by FRST | 05/30/2015 03:49:52] Deleted : RP #120 [Restore Point Created by FRST | 05/30/2015 04:05:23]
New restore point created !
~ Resetting system settings ... OK
########## - EOF - ##########
|
|