Fix result of Farbar Recovery Scan Tool (x64) Version:12-07-2015 Ran by Faty at 2015-07-13 19:12:06 Run:1 Running from C:\Users\Faty\Desktop Loaded Profiles: Faty (Available Profiles: Faty & Fake) Boot Mode: Normal ============================================== fixlist content: ***************** start CloseProcesses: CreateRestorePoint: S1 aidxesvq; \??\C:\windows\system32\drivers\aidxesvq.sys [X] 2011-07-23 00:00 - 2010-03-03 00:59 - 0131984 _____ () C:\ProgramData\FullRemove.exe C:\windows\pss\lollipop.lnk.Startup C:\Program Files (x86)\Optimizer Pro Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Faty^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^lollipop.lnk" /f Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Optimizer Pro" /f Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_somoto_14693_RASAPI32" /f Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_somoto_14693_RASMANCS" /f Cmd: for /d %f in (C:\Users\Faty\AppData\Local\{*}) do rd /s /q "%f" Cmd: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ZDB" /s Cmd: ipconfig /flushdns Cmd: netsh advfirewall reset Cmd: netsh advfirewall set allprofiles state on Cmd: bitsadmin /reset /allusers RemoveProxy: EmptyTemp: end ***************** Processes closed successfully. Restore point was successfully created. aidxesvq => Service removed successfully C:\ProgramData\FullRemove.exe => moved successfully. C:\windows\pss\lollipop.lnk.Startup => moved successfully. "C:\Program Files (x86)\Optimizer Pro" => File/Folder not found. ========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Faty^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^lollipop.lnk" /f ========= L'op‚ration a r‚ussi. ========= End of Reg: ========= ========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Optimizer Pro" /f ========= L'op‚ration a r‚ussi. ========= End of Reg: ========= ========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_somoto_14693_RASAPI32" /f ========= L'op‚ration a r‚ussi. ========= End of Reg: ========= ========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_somoto_14693_RASMANCS" /f ========= L'op‚ration a r‚ussi. ========= End of Reg: ========= ========= for /d %f in (C:\Users\Faty\AppData\Local\{*}) do rd /s /q "%f" ========= ========= End of CMD: ========= ========= reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ZDB" /s ========= HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ZDB TAC REG_SZ 1410171279810 ========= End of CMD: ========= ========= ipconfig /flushdns ========= Configuration IP de Windows Cache de r‚solution DNS vid‚. ========= End of CMD: ========= ========= netsh advfirewall reset ========= Ok. ========= End of CMD: ========= ========= netsh advfirewall set allprofiles state on ========= Ok. ========= End of CMD: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 [ 7.5.7601 ] BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. Unable to cancel {0EFB3340-4EE8-4E51-967A-CE8C3B2EA93C}. {EB81D96F-9A1E-4234-A21F-A61ADB2C595D} canceled. {DC2C674E-EA22-4B0D-8CCE-AC78A4A24DA1} canceled. 2 out of 3 jobs canceled. ========= End of CMD: ========= ========= RemoveProxy: ========= HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully HKU\S-1-5-21-2052609424-2081244842-1100094558-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\S-1-5-21-2052609424-2081244842-1100094558-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully ========= End of RemoveProxy: ========= EmptyTemp: => 225.1 MB temporary data Removed. The system needed a reboot.. ==== End of Fixlog 19:13:59 ====