cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-04-2015 01
Ran by Luyen at 2015-04-23 18:50:35 Run:1
Running from C:\Users\Luyen\Desktop
Loaded Profiles: Luyen (Available profiles: Luyen)
Boot Mode: Safe Mode (with Networking)
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
SearchScopes: HKLM -> {FA689F14-7B60-4EA6-AA87-BC95C3C7395B} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {A8C561E3-F064-44CE-93B8-B376C6665324} URL = http://fr.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> {F50BD2F7-02F6-4073-A414-F74CA8B445C0} URL = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 -> {FA689F14-7B60-4EA6-AA87-BC95C3C7395B} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
DisableService: SpyHunter 4 Service
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
C:\Windows\System32\DRIVERS\EsgScanner.sys
C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
RemoveDirectory: C:\Program Files\Enigma Software Group
RemoveDirectory: C:\Users\Luyen\AppData\Roaming\Enigma Software Group
C:\Users\Luyen\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp604ql0.dll
C:\Users\Luyen\AppData\Local\Temp\Quarantine.exe
C:\Users\Luyen\AppData\Local\Temp\sqlite3.dll
end
*****************

Processes closed successfully.
C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe => No running process found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FA689F14-7B60-4EA6-AA87-BC95C3C7395B}" => Key deleted successfully.
HKCR\CLSID\{FA689F14-7B60-4EA6-AA87-BC95C3C7395B} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{A8C561E3-F064-44CE-93B8-B376C6665324}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{A8C561E3-F064-44CE-93B8-B376C6665324} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{F50BD2F7-02F6-4073-A414-F74CA8B445C0}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{F50BD2F7-02F6-4073-A414-F74CA8B445C0} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{FA689F14-7B60-4EA6-AA87-BC95C3C7395B}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{FA689F14-7B60-4EA6-AA87-BC95C3C7395B} => Key not found.
SpyHunter 4 Service service was disabled
SpyHunter 4 Service => Service deleted successfully.
EsgScanner => Service deleted successfully.
esgiguard => Service deleted successfully.
C:\Windows\System32\DRIVERS\EsgScanner.sys => Moved successfully.
"C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" => File/Directory not found.
"C:\Program Files\Enigma Software Group" => Removed successfully.
"C:\Users\Luyen\AppData\Roaming\Enigma Software Group" => Removed successfully.
C:\Users\Luyen\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp604ql0.dll => Moved successfully.
C:\Users\Luyen\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Luyen\AppData\Local\Temp\sqlite3.dll => Moved successfully.


The system needed a reboot.

==== End of Fixlog 18:50:36 ====

Publicité


Signaler le contenu de ce document

Publicité