cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Fix result of Farbar Recovery Scan Tool (x86) Version: 28-07-2015
Ran by Claudia (2015-07-30 13:46:42) Run:1
Running from C:\Users\Claudia\Downloads
Loaded Profiles: Claudia (Available Profiles: Claudia)
Boot Mode: Normal

==============================================

fixlist content:
*****************
start
CloseProcesses:
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2141431521-524041191-805285620-1000 -> DefaultScope Yahoo! URL = http://us.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=iobit-trans
SearchScopes: HKU\S-1-5-21-2141431521-524041191-805285620-1000 -> Yahoo! URL = http://us.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=iobit-trans
SearchScopes: HKU\S-1-5-21-2141431521-524041191-805285620-1000 -> {0A750FA2-90FF-4F6F-A868-7655B6B21D34} URL = http://www.bing.com/search?q={searchTerms}&FORM=DLCDF7&pc=MDDC&src=IE-SearchBox
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll File not found
CHR Extension: (Dr.Web Anti-Virus Link Checker) - C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleggpabliehgbeagmfhnodcijcmbonb [2014-04-04]
R2 yksvc; RUNDLL32.EXE ykx32coinst,serviceStartProc [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
2015-07-29 11:31 - 2015-07-29 11:31 - 00001694 _____ C:\Users\Claudia\Documents\JRT.txt
2015-07-29 11:30 - 2015-07-29 11:30 - 00001694 _____ C:\Users\Claudia\Desktop\JRT.txt
2015-07-29 11:21 - 2015-07-29 11:21 - 00000517 _____ C:\Users\Claudia\Desktop\JRT - Atalho.lnk
2015-07-29 11:18 - 2015-07-29 11:19 - 01798176 _____ (Malwarebytes Corporation) C:\Users\Claudia\Downloads\JRT.exe
2015-07-28 21:44 - 2015-07-28 21:44 - 00002460 _____ C:\Users\Claudia\Desktop\ZHPFixReport.txt
2015-07-28 21:40 - 2015-07-28 21:41 - 00000000 ____D C:\Program Files\ZHPFix
2015-07-28 21:40 - 2015-07-28 21:40 - 00001596 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2015-07-28 21:40 - 2015-07-28 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-07-28 21:35 - 2015-07-28 21:39 - 03522334 _____ (Nicolas Coolman ) C:\Users\Claudia\Downloads\ZHPFix.exe
2015-07-28 21:25 - 2015-07-28 21:25 - 00001013 _____ C:\Users\Claudia\Documents\script.txt
2015-07-28 11:52 - 2015-07-30 10:51 - 00000217 _____ C:\Windows\TWAIN.LOG
2015-07-27 15:05 - 2015-07-27 15:05 - 00091012 _____ C:\Users\Claudia\Desktop\ZHPDiag.txt
2015-07-27 15:01 - 2015-07-28 21:44 - 00000000 ____D C:\Users\Claudia\AppData\Roaming\ZHP
2015-07-27 15:01 - 2015-07-27 15:01 - 00000730 _____ C:\Users\Claudia\Desktop\ZHPDiag.lnk
2015-07-27 15:01 - 2015-07-27 15:01 - 00000548 _____ C:\Users\Claudia\Desktop\ZHPDiag3 - Atalho.lnk
2015-07-27 14:54 - 2015-07-27 14:55 - 01846272 _____ C:\Users\Claudia\Downloads\ZHPDiag3.exe
2015-07-23 16:32 - 2010-01-19 08:57 - 00006656 _____ C:\Users\Claudia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-16 15:38 - 2013-10-17 11:46 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2010-01-19 08:57 - 2015-07-23 16:32 - 0006656 _____ () C:\Users\Claudia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Task: {B9B4A462-D11C-41C6-AA9F-77077022C088} - \Launch BCM WLAN Tray No Task File <==== ATTENTION
Task: {C950ACDC-F688-44FC-B6D7-E698776065C8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd)
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
AlternateDataStreams: C:\ProgramData\TEMP:89EAFAFC
RemoveProxy:
emptytemp:
end
*****************

Processes closed successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-21-2141431521-524041191-805285620-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
"HKU\S-1-5-21-2141431521-524041191-805285620-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Yahoo!" => key removed successfully.
HKCR\CLSID\Yahoo! => key not found.
"HKU\S-1-5-21-2141431521-524041191-805285620-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0A750FA2-90FF-4F6F-A868-7655B6B21D34}" => key removed successfully.
HKCR\CLSID\{0A750FA2-90FF-4F6F-A868-7655B6B21D34} => key not found.
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000007" => key removed successfully.
C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleggpabliehgbeagmfhnodcijcmbonb => moved successfully.
yksvc => service removed successfully.
IpInIp => service removed successfully.
NwlnkFlt => service removed successfully.
NwlnkFwd => service removed successfully.
C:\Users\Claudia\Documents\JRT.txt => moved successfully.
C:\Users\Claudia\Desktop\JRT.txt => moved successfully.
C:\Users\Claudia\Desktop\JRT - Atalho.lnk => moved successfully.
C:\Users\Claudia\Downloads\JRT.exe => moved successfully.
C:\Users\Claudia\Desktop\ZHPFixReport.txt => moved successfully.
C:\Program Files\ZHPFix => moved successfully.
C:\Users\Public\Desktop\ZHPFix.lnk => moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP => moved successfully.
C:\Users\Claudia\Downloads\ZHPFix.exe => moved successfully.
C:\Users\Claudia\Documents\script.txt => moved successfully.
C:\Windows\TWAIN.LOG => moved successfully.
C:\Users\Claudia\Desktop\ZHPDiag.txt => moved successfully.
C:\Users\Claudia\AppData\Roaming\ZHP => moved successfully.
C:\Users\Claudia\Desktop\ZHPDiag.lnk => moved successfully.
C:\Users\Claudia\Desktop\ZHPDiag3 - Atalho.lnk => moved successfully.
C:\Users\Claudia\Downloads\ZHPDiag3.exe => moved successfully.
C:\Users\Claudia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully.
C:\Program Files\Common Files\Adobe AIR => moved successfully.
"C:\Users\Claudia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini" => File/Folder not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B9B4A462-D11C-41C6-AA9F-77077022C088}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9B4A462-D11C-41C6-AA9F-77077022C088}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Launch BCM WLAN Tray" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C950ACDC-F688-44FC-B6D7-E698776065C8}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C950ACDC-F688-44FC-B6D7-E698776065C8}" => key removed successfully.
C:\Windows\System32\Tasks\CCleanerSkipUAC => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC" => key removed successfully.
C:\ProgramData\TEMP => ":5C321E34" ADS removed successfully..
C:\ProgramData\TEMP => ":89EAFAFC" ADS removed successfully..

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully.
HKU\S-1-5-21-2141431521-524041191-805285620-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully.
HKU\S-1-5-21-2141431521-524041191-805285620-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully.


========= End of RemoveProxy: =========

EmptyTemp: => 398.6 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 13:49:27 ====

Publicité


Signaler le contenu de ce document

Publicité