Fix result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015 Ran by Jeremy at 2015-06-03 21:06:32 Run:2 Running from C:\Users\Jeremy\Desktop Loaded Profiles: Jeremy (Available Profiles: Jeremy) Boot Mode: Normal ============================================== fixlist content: ***************** start CloseProcesses: Hosts: RemoveProxy: EmptyTemp: CreateRestorePoint: HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.) HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] URLSearchHook: HKU\S-1-5-21-1130792261-3269985886-1281335525-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} S2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] S2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-04-29] S2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.) S3 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [225216 2011-01-28] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [603424 2014-09-04] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-08-20] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.) S2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.) S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.) S3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [445512 2014-08-20] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-08-20] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.) 2015-05-29 01:15 - 2015-06-02 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2015-06-01 11:48 - 2011-08-09 09:41 - 00000000 ____D () C:\Program Files\mcafee 2015-06-01 11:48 - 2011-08-09 09:41 - 00000000 ____D () C:\Program Files\Common Files\mcafee 2015-06-01 11:48 - 2011-08-09 09:41 - 00000000 ____D () C:\Program Files (x86)\McAfee 2015-06-01 02:28 - 2011-08-09 09:41 - 00000000 ____D () C:\ProgramData\McAfee 2015-05-29 01:15 - 2014-12-24 20:01 - 00001851 _____ () C:\Users\Public\Desktop\McAfee Internet Security.lnk FirewallRules: [{A4204EC2-84D6-4E3F-ABCE-7F559F82656D}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{D512B8CE-D46A-4758-9DC7-14EB7FDBD3C0}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{F3AC32D5-6608-4DC4-83A2-75CCD738B92A}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{C3CF346A-A39D-4B12-9171-48C53C1A5845}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{801CD829-85F3-4F71-8FF9-91292570613C}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{5563C5CA-0F8B-43C7-84A6-2DABEE832E4B}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" end ***************** Processes closed successfully. C:\Windows\System32\Drivers\etc\hosts => Moved successfully. Hosts restored successfully. ========= RemoveProxy: ========= HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value Removed successfully HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value Removed successfully HKU\S-1-5-21-1130792261-3269985886-1281335525-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value Removed successfully HKU\S-1-5-21-1130792261-3269985886-1281335525-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value Removed successfully ========= End of RemoveProxy: ========= Restore point was successfully created. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mcui_exe => value Removed successfully HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mcpltui_exe => value Removed successfully HKU\S-1-5-21-1130792261-3269985886-1281335525-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\URLSearchHook: HKU\S-1-5-21-1130792261-3269985886-1281335525-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} => value not found. HomeNetSvc => Service stopped successfully. HomeNetSvc => Service Removed successfully McAfee SiteAdvisor Service => Service could not remove McAPExe => Unable to stop service. McAPExe => Service Removed successfully McAWFwk => Service Removed successfully McMPFSvc => Unable to stop service. McMPFSvc => Service could not remove McNaiAnn => Service could not remove McODS => Service could not remove McOobeSv => Service Removed successfully mcpltsvc => Service stopped successfully. mcpltsvc => Service could not remove McProxy => Service stopped successfully. McProxy => Service could not remove mfecore => Unable to stop service. mfecore => Service could not remove mfefire => Unable to stop service. mfefire => Service could not remove mfevtp => Unable to stop service. mfevtp => Service could not remove MSK80Service => Service stopped successfully. MSK80Service => Service could not remove cfwids => Unable to stop service. cfwids => Service Removed successfully HipShieldK => Service Removed successfully mfeapfk => Unable to stop service. mfeapfk => Service could not remove mfeavfk => Unable to stop service. mfeavfk => Service could not remove mfefirek => Unable to stop service. mfefirek => Service could not remove mfehidk => Unable to stop service. mfehidk => Service could not remove mfencbdc => Unable to stop service. mfencbdc => Service could not remove mfencrk => Service could not remove mfewfpk => Unable to stop service. mfewfpk => Service could not remove C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee => Moved successfully. "C:\Program Files\mcafee" folder move: Could not move "C:\Program Files\mcafee" folder => Scheduled to move on reboot. "C:\Program Files\Common Files\mcafee" folder move: Could not move "C:\Program Files\Common Files\mcafee" folder => Scheduled to move on reboot. "C:\Program Files (x86)\McAfee" folder move: Could not move "C:\Program Files (x86)\McAfee" folder => Scheduled to move on reboot. "C:\ProgramData\McAfee" folder move: Could not move "C:\ProgramData\McAfee" folder => Scheduled to move on reboot. C:\Users\Public\Desktop\McAfee Internet Security.lnk => Moved successfully. HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A4204EC2-84D6-4E3F-ABCE-7F559F82656D} => value Removed successfully HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D512B8CE-D46A-4758-9DC7-14EB7FDBD3C0} => value Removed successfully HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F3AC32D5-6608-4DC4-83A2-75CCD738B92A} => value Removed successfully HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C3CF346A-A39D-4B12-9171-48C53C1A5845} => value Removed successfully HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{801CD829-85F3-4F71-8FF9-91292570613C} => value Removed successfully HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5563C5CA-0F8B-43C7-84A6-2DABEE832E4B} => value Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\MCODS" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\MCODS" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mfefire" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mfefirek" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mfehidk" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys" => key Removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mfevtp" => key Removed successfully EmptyTemp: => Removed 27.2 MB temporary data. Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-06-03 21:12:03)<= C:\Program Files\mcafee => Moved successfully "C:\Program Files\Common Files\mcafee" => Could not move "C:\Program Files (x86)\McAfee" => Could not move "C:\ProgramData\McAfee" => Could not move ==== End of Fixlog 21:12:16 ====