Publicité
Publicité
Format du document : text/plain
Prévisualisation
Fix result of Farbar Recovery Scan Tool (x64) Version: 01-06-2019
Ran by SONY (02-06-2019 11:37:34) Run:1
Running from C:\Users\SONY\Desktop
Loaded Profiles: SONY (Available Profiles: SONY)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
(Lavasoft Limited -> Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
HKLM\...\RunOnce: [SWComponent] => "C:\WINDOWS\Temp\{8FA0177F-0B48-49FE-AA5A-8F386FEA9A7D}\.cr\Setup.exe" -s <==== ATTENTION
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\...\Run: [uTorrent] => "C:\Users\SONY\AppData\Local\Temp\7zS0A5940DA\Carrier.EXE" /MINIMIZED <==== ATTENTION
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [7509280 2019-04-07] (Lavasoft Limited -> Lavasoft)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {102B6921-1D95-4503-9660-C31754B78822} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {116837B3-528F-4C80-8DC2-A5637DE2E29F} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {1B5BA1F2-8F26-43CF-BEF8-623681773F77} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {3FF0BDAC-96E4-42BF-BE77-CD9A07566415} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {A573AC09-0D23-4636-B3DE-DA103F0D81DF} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {AA66DCAD-3025-4034-9400-F216047D715E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {B811A1D9-6B52-4973-9F5A-99183E5840E2} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {C7ABDCAE-E648-41DB-B58A-EAA49F771591} - \WPD\SqmUpload_S-1-5-21-1260391662-2689499523-3175383796-1001 -> No File <==== ATTENTION
Task: {CEC1A745-0247-4D79-B7AF-BF886463FF00} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E36A3628-5C3F-45EF-95F2-322DFE7922EE} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {E5467064-E93A-4D71-AD27-B550CDA2483C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {E6354705-AB61-4925-94DE-C285681C7F34} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {E9A6E867-8CC4-4F49-9B1F-B73556444A66} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {E9F8C17B-6D93-4832-94B9-07F193A8D024} - \wp_update -> No File <==== ATTENTION
Task: {ED9C76C7-F052-4234-A50D-5E385C8B244B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {F3BBAC6C-03FD-4355-98F1-5FD11D339CC0} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {F53E645F-0633-49BD-8496-BF9E20AAAFBF} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10454__190407
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1260391662-2689499523-3175383796-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1260391662-2689499523-3175383796-1001 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms}
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx
S3 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-02-18] (JDI BACKUP LIMITED -> Just Develop It) [File not signed] <==== ATTENTION
S2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [25888 2019-04-07] (Lavasoft Limited -> )
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]
R2 SampleCollector; "C:\Program Files\Sony\VAIO Care\VCPerfService.exe" "/service" "/sstates" "/sampleinterval=10000" "/procinterval=5" "/dllinterval=120" "/counter=\Processor(_Total)\% Processor Time:1" "/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1" "/counter=\Network Interface(*)\Bytes Total/sec:1" "/expandcounter=\Processor Information(*)\Processor Frequency:1" "" "/expandcounter=\Processor(*)\% Idle Time:1" "/expandcounter=\Processor(*)\% C1 Time:1" "/expandcounter=\Processor(*)\% C2 Time:1" "/expandcounter=\Processor(*)\%C3 Time:1" "/expandcounter=\Processor(*)\% Processor Time:1" "/directory=C:\ProgramData\Sony Corporation\VAIO Care\inteldata" <==== ATTENTION
Java 7 Update 80 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217080FF}) (Version: 7.0.800 - Oracle)
Mobogenie (HKLM-x32\...\Mobogenie) (Version: - Mobogenie.com) <==== ATTENTION
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
Web Companion (HKLM-x32\...\{459e05ff-c9d3-4fbe-bdfd-c08a62159c72}) (Version: 4.6.1974.3869 - Lavasoft)
WindowsMangerProtect20.0.0.502 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION
Kaspersky Now -> C:\Program Files\WindowsApps\KasperskyLab.KasperskyNow_1.0.0.43_neutral__8jx5e25qw3tdc [2014-06-09] (Kaspersky Lab)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> No File
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\...\webcompanion.com -> hxxp://webcompanion.com
FirewallRules: [{8A0AD63A-DCF4-4E11-B985-53FC3E36A97C}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe No File
FirewallRules: [{10C18212-231D-4271-B6CF-6865766EEC75}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe No File
FirewallRules: [{BA428468-C5E5-4660-9C36-373F6E10C5C4}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{AD780586-3479-4669-A410-E76136FBDCC6}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{9DFF2736-BC91-47D5-9FC8-4FB99ABCCBFA}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe No File
FirewallRules: [{D399CA3F-7A56-48A3-8F00-44FACD034EEB}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe No File
FirewallRules: [UDP Query User{20498A1B-228A-4548-BE23-94B8E354FC02}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe No File
FirewallRules: [TCP Query User{DB412D1D-F02F-40D3-A022-1479E987C30E}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe No File
FirewallRules: [UDP Query User{6E1ED419-4BA6-47CE-B09B-A04F44480743}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe No File
FirewallRules: [TCP Query User{D3F03FD1-2B95-4A35-9EC1-9DD659BB5514}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe No File
EmptyTemp:
Reboot:
*****************
Restore point was successfully created.
Processes closed successfully.
C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe => No running process found
"HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SWComponent" => not found
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
"HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent" => removed successfully
"HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Web Companion" => not found
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{102B6921-1D95-4503-9660-C31754B78822}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{102B6921-1D95-4503-9660-C31754B78822}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{116837B3-528F-4C80-8DC2-A5637DE2E29F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{116837B3-528F-4C80-8DC2-A5637DE2E29F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1B5BA1F2-8F26-43CF-BEF8-623681773F77}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B5BA1F2-8F26-43CF-BEF8-623681773F77}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3FF0BDAC-96E4-42BF-BE77-CD9A07566415}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3FF0BDAC-96E4-42BF-BE77-CD9A07566415}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A573AC09-0D23-4636-B3DE-DA103F0D81DF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A573AC09-0D23-4636-B3DE-DA103F0D81DF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AA66DCAD-3025-4034-9400-F216047D715E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA66DCAD-3025-4034-9400-F216047D715E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B811A1D9-6B52-4973-9F5A-99183E5840E2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B811A1D9-6B52-4973-9F5A-99183E5840E2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C7ABDCAE-E648-41DB-B58A-EAA49F771591}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7ABDCAE-E648-41DB-B58A-EAA49F771591}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1260391662-2689499523-3175383796-1001" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CEC1A745-0247-4D79-B7AF-BF886463FF00}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEC1A745-0247-4D79-B7AF-BF886463FF00}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E36A3628-5C3F-45EF-95F2-322DFE7922EE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E36A3628-5C3F-45EF-95F2-322DFE7922EE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E5467064-E93A-4D71-AD27-B550CDA2483C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5467064-E93A-4D71-AD27-B550CDA2483C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E6354705-AB61-4925-94DE-C285681C7F34}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6354705-AB61-4925-94DE-C285681C7F34}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E9A6E867-8CC4-4F49-9B1F-B73556444A66}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E9A6E867-8CC4-4F49-9B1F-B73556444A66}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E9F8C17B-6D93-4832-94B9-07F193A8D024}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E9F8C17B-6D93-4832-94B9-07F193A8D024}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\wp_update" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ED9C76C7-F052-4234-A50D-5E385C8B244B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ED9C76C7-F052-4234-A50D-5E385C8B244B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3BBAC6C-03FD-4355-98F1-5FD11D339CC0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3BBAC6C-03FD-4355-98F1-5FD11D339CC0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F53E645F-0633-49BD-8496-BF9E20AAAFBF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F53E645F-0633-49BD-8496-BF9E20AAAFBF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector" => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => removed successfully
HKLM\Software\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => not found
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => not found
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => removed successfully
HKLM\Software\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => not found
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{993F5746-4C15-42BC-99C1-064A1764271B} => removed successfully
HKLM\Software\Classes\CLSID\{993F5746-4C15-42BC-99C1-064A1764271B} => not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => removed successfully
HKLM\Software\Classes\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => not found
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nladljmabboanhihfkjacnnkgjhnokhj => removed successfully
HKLM\System\CurrentControlSet\Services\BackupStack => removed successfully
BackupStack => service removed successfully
WCAssistantService => service not found.
HKLM\System\CurrentControlSet\Services\avast => removed successfully
avast => service removed successfully
HKLM\System\CurrentControlSet\Services\avastm => removed successfully
avastm => service removed successfully
HKLM\System\CurrentControlSet\Services\SampleCollector => removed successfully
SampleCollector => service removed successfully
Java 7 Update 80 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217080FF}) (Version: 7.0.800 - Oracle) => Error: No automatic fix found for this entry.
Mobogenie (HKLM-x32\...\Mobogenie) (Version: - Mobogenie.com) <==== ATTENTION => Error: No automatic fix found for this entry.
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION => Error: No automatic fix found for this entry.
Web Companion (HKLM-x32\...\{459e05ff-c9d3-4fbe-bdfd-c08a62159c72}) (Version: 4.6.1974.3869 - Lavasoft) => Error: No automatic fix found for this entry.
WindowsMangerProtect20.0.0.502 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION => Error: No automatic fix found for this entry.
Kaspersky Now -> C:\Program Files\WindowsApps\KasperskyLab.KasperskyNow_1.0.0.43_neutral__8jx5e25qw3tdc [2014-06-09] (Kaspersky Lab) => Error: No automatic fix found for this entry.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => removed successfully
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com => removed successfully
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8A0AD63A-DCF4-4E11-B985-53FC3E36A97C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10C18212-231D-4271-B6CF-6865766EEC75}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BA428468-C5E5-4660-9C36-373F6E10C5C4}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AD780586-3479-4669-A410-E76136FBDCC6}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9DFF2736-BC91-47D5-9FC8-4FB99ABCCBFA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D399CA3F-7A56-48A3-8F00-44FACD034EEB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{20498A1B-228A-4548-BE23-94B8E354FC02}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DB412D1D-F02F-40D3-A022-1479E987C30E}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6E1ED419-4BA6-47CE-B09B-A04F44480743}C:\games\world_of_warplanes\wowplauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D3F03FD1-2B95-4A35-9EC1-9DD659BB5514}C:\games\world_of_warplanes\wowplauncher.exe" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 11296768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 23064618 B
Java, Flash, Steam htmlcache => 6691 B
Windows/system/drivers => 94539 B
Edge => 853930 B
Chrome => 95772588 B
Firefox => 0 B
Opera => 47945513 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 191500 B
LocalService => 0 B
NetworkService => 51578 B
NetworkService => 0 B
SONY => 77784408 B
RecycleBin => 4719867403 B
EmptyTemp: => 4.6 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 11:44:32 ====
Ran by SONY (02-06-2019 11:37:34) Run:1
Running from C:\Users\SONY\Desktop
Loaded Profiles: SONY (Available Profiles: SONY)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
(Lavasoft Limited -> Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
HKLM\...\RunOnce: [SWComponent] => "C:\WINDOWS\Temp\{8FA0177F-0B48-49FE-AA5A-8F386FEA9A7D}\.cr\Setup.exe" -s <==== ATTENTION
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\...\Run: [uTorrent] => "C:\Users\SONY\AppData\Local\Temp\7zS0A5940DA\Carrier.EXE" /MINIMIZED <==== ATTENTION
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [7509280 2019-04-07] (Lavasoft Limited -> Lavasoft)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {102B6921-1D95-4503-9660-C31754B78822} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {116837B3-528F-4C80-8DC2-A5637DE2E29F} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {1B5BA1F2-8F26-43CF-BEF8-623681773F77} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {3FF0BDAC-96E4-42BF-BE77-CD9A07566415} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {A573AC09-0D23-4636-B3DE-DA103F0D81DF} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {AA66DCAD-3025-4034-9400-F216047D715E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {B811A1D9-6B52-4973-9F5A-99183E5840E2} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {C7ABDCAE-E648-41DB-B58A-EAA49F771591} - \WPD\SqmUpload_S-1-5-21-1260391662-2689499523-3175383796-1001 -> No File <==== ATTENTION
Task: {CEC1A745-0247-4D79-B7AF-BF886463FF00} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E36A3628-5C3F-45EF-95F2-322DFE7922EE} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {E5467064-E93A-4D71-AD27-B550CDA2483C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {E6354705-AB61-4925-94DE-C285681C7F34} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {E9A6E867-8CC4-4F49-9B1F-B73556444A66} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {E9F8C17B-6D93-4832-94B9-07F193A8D024} - \wp_update -> No File <==== ATTENTION
Task: {ED9C76C7-F052-4234-A50D-5E385C8B244B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {F3BBAC6C-03FD-4355-98F1-5FD11D339CC0} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {F53E645F-0633-49BD-8496-BF9E20AAAFBF} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10454__190407
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1260391662-2689499523-3175383796-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1407975109&from=epom&uid=TOSHIBAXMQ01ABD050_Y2IBFJ0QSXXY2IBFJ0QS&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1260391662-2689499523-3175383796-1001 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms}
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx
S3 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-02-18] (JDI BACKUP LIMITED -> Just Develop It) [File not signed] <==== ATTENTION
S2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [25888 2019-04-07] (Lavasoft Limited -> )
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]
R2 SampleCollector; "C:\Program Files\Sony\VAIO Care\VCPerfService.exe" "/service" "/sstates" "/sampleinterval=10000" "/procinterval=5" "/dllinterval=120" "/counter=\Processor(_Total)\% Processor Time:1" "/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1" "/counter=\Network Interface(*)\Bytes Total/sec:1" "/expandcounter=\Processor Information(*)\Processor Frequency:1" "" "/expandcounter=\Processor(*)\% Idle Time:1" "/expandcounter=\Processor(*)\% C1 Time:1" "/expandcounter=\Processor(*)\% C2 Time:1" "/expandcounter=\Processor(*)\%C3 Time:1" "/expandcounter=\Processor(*)\% Processor Time:1" "/directory=C:\ProgramData\Sony Corporation\VAIO Care\inteldata" <==== ATTENTION
Java 7 Update 80 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217080FF}) (Version: 7.0.800 - Oracle)
Mobogenie (HKLM-x32\...\Mobogenie) (Version: - Mobogenie.com) <==== ATTENTION
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
Web Companion (HKLM-x32\...\{459e05ff-c9d3-4fbe-bdfd-c08a62159c72}) (Version: 4.6.1974.3869 - Lavasoft)
WindowsMangerProtect20.0.0.502 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION
Kaspersky Now -> C:\Program Files\WindowsApps\KasperskyLab.KasperskyNow_1.0.0.43_neutral__8jx5e25qw3tdc [2014-06-09] (Kaspersky Lab)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> No File
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\...\webcompanion.com -> hxxp://webcompanion.com
FirewallRules: [{8A0AD63A-DCF4-4E11-B985-53FC3E36A97C}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe No File
FirewallRules: [{10C18212-231D-4271-B6CF-6865766EEC75}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe No File
FirewallRules: [{BA428468-C5E5-4660-9C36-373F6E10C5C4}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{AD780586-3479-4669-A410-E76136FBDCC6}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe No File
FirewallRules: [{9DFF2736-BC91-47D5-9FC8-4FB99ABCCBFA}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe No File
FirewallRules: [{D399CA3F-7A56-48A3-8F00-44FACD034EEB}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe No File
FirewallRules: [UDP Query User{20498A1B-228A-4548-BE23-94B8E354FC02}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe No File
FirewallRules: [TCP Query User{DB412D1D-F02F-40D3-A022-1479E987C30E}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe No File
FirewallRules: [UDP Query User{6E1ED419-4BA6-47CE-B09B-A04F44480743}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe No File
FirewallRules: [TCP Query User{D3F03FD1-2B95-4A35-9EC1-9DD659BB5514}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe No File
EmptyTemp:
Reboot:
*****************
Restore point was successfully created.
Processes closed successfully.
C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe => No running process found
"HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SWComponent" => not found
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
"HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent" => removed successfully
"HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Web Companion" => not found
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{102B6921-1D95-4503-9660-C31754B78822}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{102B6921-1D95-4503-9660-C31754B78822}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{116837B3-528F-4C80-8DC2-A5637DE2E29F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{116837B3-528F-4C80-8DC2-A5637DE2E29F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1B5BA1F2-8F26-43CF-BEF8-623681773F77}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B5BA1F2-8F26-43CF-BEF8-623681773F77}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3FF0BDAC-96E4-42BF-BE77-CD9A07566415}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3FF0BDAC-96E4-42BF-BE77-CD9A07566415}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A573AC09-0D23-4636-B3DE-DA103F0D81DF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A573AC09-0D23-4636-B3DE-DA103F0D81DF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AA66DCAD-3025-4034-9400-F216047D715E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA66DCAD-3025-4034-9400-F216047D715E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B811A1D9-6B52-4973-9F5A-99183E5840E2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B811A1D9-6B52-4973-9F5A-99183E5840E2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C7ABDCAE-E648-41DB-B58A-EAA49F771591}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7ABDCAE-E648-41DB-B58A-EAA49F771591}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1260391662-2689499523-3175383796-1001" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CEC1A745-0247-4D79-B7AF-BF886463FF00}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEC1A745-0247-4D79-B7AF-BF886463FF00}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E36A3628-5C3F-45EF-95F2-322DFE7922EE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E36A3628-5C3F-45EF-95F2-322DFE7922EE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E5467064-E93A-4D71-AD27-B550CDA2483C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5467064-E93A-4D71-AD27-B550CDA2483C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E6354705-AB61-4925-94DE-C285681C7F34}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6354705-AB61-4925-94DE-C285681C7F34}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E9A6E867-8CC4-4F49-9B1F-B73556444A66}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E9A6E867-8CC4-4F49-9B1F-B73556444A66}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E9F8C17B-6D93-4832-94B9-07F193A8D024}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E9F8C17B-6D93-4832-94B9-07F193A8D024}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\wp_update" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ED9C76C7-F052-4234-A50D-5E385C8B244B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ED9C76C7-F052-4234-A50D-5E385C8B244B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3BBAC6C-03FD-4355-98F1-5FD11D339CC0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3BBAC6C-03FD-4355-98F1-5FD11D339CC0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F53E645F-0633-49BD-8496-BF9E20AAAFBF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F53E645F-0633-49BD-8496-BF9E20AAAFBF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector" => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => removed successfully
HKLM\Software\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => not found
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => not found
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => removed successfully
HKLM\Software\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => not found
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{993F5746-4C15-42BC-99C1-064A1764271B} => removed successfully
HKLM\Software\Classes\CLSID\{993F5746-4C15-42BC-99C1-064A1764271B} => not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => removed successfully
HKLM\Software\Classes\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => not found
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nladljmabboanhihfkjacnnkgjhnokhj => removed successfully
HKLM\System\CurrentControlSet\Services\BackupStack => removed successfully
BackupStack => service removed successfully
WCAssistantService => service not found.
HKLM\System\CurrentControlSet\Services\avast => removed successfully
avast => service removed successfully
HKLM\System\CurrentControlSet\Services\avastm => removed successfully
avastm => service removed successfully
HKLM\System\CurrentControlSet\Services\SampleCollector => removed successfully
SampleCollector => service removed successfully
Java 7 Update 80 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217080FF}) (Version: 7.0.800 - Oracle) => Error: No automatic fix found for this entry.
Mobogenie (HKLM-x32\...\Mobogenie) (Version: - Mobogenie.com) <==== ATTENTION => Error: No automatic fix found for this entry.
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION => Error: No automatic fix found for this entry.
Web Companion (HKLM-x32\...\{459e05ff-c9d3-4fbe-bdfd-c08a62159c72}) (Version: 4.6.1974.3869 - Lavasoft) => Error: No automatic fix found for this entry.
WindowsMangerProtect20.0.0.502 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION => Error: No automatic fix found for this entry.
Kaspersky Now -> C:\Program Files\WindowsApps\KasperskyLab.KasperskyNow_1.0.0.43_neutral__8jx5e25qw3tdc [2014-06-09] (Kaspersky Lab) => Error: No automatic fix found for this entry.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => removed successfully
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com => removed successfully
HKU\S-1-5-21-1260391662-2689499523-3175383796-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8A0AD63A-DCF4-4E11-B985-53FC3E36A97C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10C18212-231D-4271-B6CF-6865766EEC75}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BA428468-C5E5-4660-9C36-373F6E10C5C4}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AD780586-3479-4669-A410-E76136FBDCC6}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9DFF2736-BC91-47D5-9FC8-4FB99ABCCBFA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D399CA3F-7A56-48A3-8F00-44FACD034EEB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{20498A1B-228A-4548-BE23-94B8E354FC02}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DB412D1D-F02F-40D3-A022-1479E987C30E}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6E1ED419-4BA6-47CE-B09B-A04F44480743}C:\games\world_of_warplanes\wowplauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D3F03FD1-2B95-4A35-9EC1-9DD659BB5514}C:\games\world_of_warplanes\wowplauncher.exe" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 11296768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 23064618 B
Java, Flash, Steam htmlcache => 6691 B
Windows/system/drivers => 94539 B
Edge => 853930 B
Chrome => 95772588 B
Firefox => 0 B
Opera => 47945513 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 191500 B
LocalService => 0 B
NetworkService => 51578 B
NetworkService => 0 B
SONY => 77784408 B
RecycleBin => 4719867403 B
EmptyTemp: => 4.6 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 11:44:32 ====