Fix result of Farbar Recovery Scan Tool (x64) Version:07-02-2016 Ran by annec (2016-02-08 16:58:29) Run:1 Running from C:\Users\annec\Desktop Loaded Profiles: annec (Available Profiles: annec) Boot Mode: Normal ============================================== fixlist content: ***************** start CloseProcesses: (Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\QQPCRTP.exe FF Plugin-x32: @qq.com/npAndroidAssistant -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll [No File] FF Plugin-x32: @qq.com/QQPCMgr -> C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\npQMExtensionsMozilla.dll [2016-02-08] (Tencent Technology (Shenzhen) Company Limited) CHR HomePage: Default -> hxxp://www.searchnu.com/406 CHR StartupUrls: Default -> "hxxp://www.google.fr/","hxxp://www.searchnu.com/406?appid=390","hxxps://uk.yahoo.com?fr=hp-avast&type=avastbcl","hxxp://www.mystartsearch.com/?type=hppp&ts=1424186353&from=nsbuk&uid=3219913727_198313_687E4572" R2 QQPCRTP; C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\QQPCRTP.exe [301728 2016-02-08] (Tencent) R1 QMUdisk; C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\QMUdisk64.sys [79160 2016-02-08] (Tencent) R2 QQSysMonX64; C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\QQSysMonX64.sys [138552 2016-02-08] (电脑管家) R1 softaal; C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16923.222\softaal64.sys [35128 2016-02-08] (Tencent) S1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\TSDefenseBT64.sys [28984 2016-02-08] (Tencent) R2 tsnethlpx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\TsNetHlpX64.sys [48440 2016-01-14] () R1 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16923.222\TSSysKit64.sys [87352 2016-02-08] (电脑管家) 2016-02-08 12:33 - 2016-02-08 12:33 - 00000000 ____D C:\Users\annec\AppData\Roaming\Tencent 2016-02-08 01:00 - 2016-01-14 09:47 - 00128280 _____ (电脑管家) C:\WINDOWS\SysWOW64\Drivers\TsFltMgr.sys 2016-02-08 00:59 - 2016-02-08 00:57 - 00274232 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernel64.sys 2016-02-08 00:59 - 2016-02-08 00:57 - 00088632 _____ (Tencent) C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys 2016-02-08 00:58 - 2016-02-08 00:58 - 00000000 ____D C:\ProgramData\TXQMPC 2016-02-08 00:58 - 2016-02-08 00:58 - 00000000 ____D C:\Program Files\Common Files\Tencent 2016-02-08 00:58 - 2016-02-08 00:57 - 00087864 _____ (电脑管家) C:\WINDOWS\system32\Drivers\TFsFltX64.sys 2016-02-08 00:57 - 2016-02-08 12:11 - 00000000 ____D C:\ProgramData\Tencent 2016-02-08 00:57 - 2016-02-08 00:57 - 00000000 ____D C:\Program Files (x86)\Tencent 2015-10-16 09:24 - 2015-10-21 06:10 - 0000040 ___SH () C:\ProgramData\.zreglib 2015-10-27 16:22 - 2015-10-27 16:22 - 0000057 _____ () C:\ProgramData\Ament.ini 2015-12-21 05:26 - 2015-12-21 05:26 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-09-23 09:51 - 2015-09-23 09:51 - 0000121 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log 2015-09-23 09:47 - 2015-09-23 09:48 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log 2015-09-23 09:49 - 2015-09-23 09:50 - 0000108 _____ () C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log 2015-09-23 09:48 - 2015-09-23 09:49 - 0000113 _____ () C:\ProgramData\{E1646825-D391-42A0-93AA-27FA810DA093}.log AV: 电脑管家系统防护 (Enabled - Up to date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5} AS: 电脑管家系统防护 (Enabled - Up to date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48} 电脑管家11.3 (HKLM-x32\...\QQPCMgr) (Version: 11.3.17207.222 - 腾讯科技(深圳)有限公司) <==== ATTENTION 2016-02-08 02:52 - 2016-02-08 02:52 - 00108896 ____N () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\QMAntiInject.dll 2016-02-08 02:52 - 2016-02-08 02:52 - 00088416 ____N () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\zlib.dll 2016-02-08 02:52 - 2016-02-08 02:52 - 00481632 ____N () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\sqlite.dll 2016-02-08 02:52 - 2016-02-08 02:52 - 00100704 ____N () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\tinyxml.dll 2016-02-08 02:52 - 2016-02-08 02:52 - 00039776 ____N () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll 2016-02-08 02:52 - 2016-02-08 02:52 - 00063840 ____N () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll 2016-02-08 02:52 - 2016-02-08 02:52 - 00019296 ____N () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\oDayProtect.dll 2016-02-08 02:52 - 2016-02-08 02:52 - 00121184 ____N () c:\program files (x86)\tencent\qqpcmgr\11.3.17207.222\qmrtpcontroller.dll 2016-02-08 02:52 - 2016-02-08 02:52 - 00108896 ____N () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\TavPedc.dll EmptyTemp: Reboot: end ***************** Processes closed successfully. C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\QQPCRTP.exe => Could not close process "HKLM\Software\Wow6432Node\MozillaPlugins\@qq.com/npAndroidAssistant" => key removed successfully "HKLM\Software\Wow6432Node\MozillaPlugins\@qq.com/QQPCMgr" => key removed successfully Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\npQMExtensionsMozilla.dll" => Scheduled to move on reboot. Chrome HomePage => removed successfully Chrome StartupUrls => removed successfully QQPCRTP => Unable to stop service. QQPCRTP => service could not remove QMUdisk => Unable to stop service. QMUdisk => service removed successfully QQSysMonX64 => Unable to stop service. QQSysMonX64 => service could not remove softaal => Unable to stop service. softaal => service removed successfully TSDefenseBt => service could not remove tsnethlpx64 => Unable to stop service. tsnethlpx64 => service could not remove TSSysKit => Unable to stop service. TSSysKit => service removed successfully C:\Users\annec\AppData\Roaming\Tencent => moved successfully C:\WINDOWS\SysWOW64\Drivers\TsFltMgr.sys => moved successfully C:\WINDOWS\system32\Drivers\TAOKernel64.sys => moved successfully C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys => moved successfully C:\ProgramData\TXQMPC => moved successfully "C:\Program Files\Common Files\Tencent" folder move: Could not move "C:\Program Files\Common Files\Tencent" => Scheduled to move on reboot. Could not move "C:\WINDOWS\system32\Drivers\TFsFltX64.sys" => Scheduled to move on reboot. "C:\ProgramData\Tencent" folder move: Could not move "C:\ProgramData\Tencent" => Scheduled to move on reboot. "C:\Program Files (x86)\Tencent" folder move: Could not move "C:\Program Files (x86)\Tencent" => Scheduled to move on reboot. C:\ProgramData\.zreglib => moved successfully C:\ProgramData\Ament.ini => moved successfully C:\ProgramData\DP45977C.lfl => moved successfully C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log => moved successfully C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log => moved successfully C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log => moved successfully C:\ProgramData\{E1646825-D391-42A0-93AA-27FA810DA093}.log => moved successfully AV: 电脑管家系统防护 (Enabled - Up to date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5} => removed successfully AS: 电脑管家系统防护 (Enabled - Up to date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48} => removed successfully 电脑管家11.3 (HKLM-x32\...\QQPCMgr) (Version: 11.3.17207.222 - 腾讯科技(深圳)有限公司) <==== ATTENTION => Error: No automatic fix found for this entry. Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\QMAntiInject.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\zlib.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\sqlite.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\tinyxml.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\oDayProtect.dll" => Scheduled to move on reboot. Could not move "c:\program files (x86)\tencent\qqpcmgr\11.3.17207.222\qmrtpcontroller.dll" => Scheduled to move on reboot. Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\TavPedc.dll" => Scheduled to move on reboot. EmptyTemp: => 1.3 GB temporary data Removed. Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-02-08 17:04:03) "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\npQMExtensionsMozilla.dll" => Could not move "C:\Program Files\Common Files\Tencent" => Could not move "C:\WINDOWS\system32\Drivers\TFsFltX64.sys" => Could not move "C:\ProgramData\Tencent" => Could not move "C:\Program Files (x86)\Tencent" => Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\QMAntiInject.dll" => Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\zlib.dll" => Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\sqlite.dll" => Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\tinyxml.dll" => Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll" => Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll" => Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\oDayProtect.dll" => Could not move "c:\program files (x86)\tencent\qqpcmgr\11.3.17207.222\qmrtpcontroller.dll" => Could not move "C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17207.222\TavPedc.dll" => Could not move ==== End of Fixlog 17:04:25 ====