Fix result of Farbar Recovery Scan Tool (x64) Version: 28.02.2018 Ran by janek (02-03-2018 20:03:03) Run:1 Running from C:\Users\janek\Desktop Loaded Profiles: janek (Available Profiles: janek) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: CreateRestorePoint: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls V Skyrim\Uruchom program The Elder Scrolls V Skyrim.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\AFPL License.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\FairPlay License.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\GPL License.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion\Web Companion.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CTS Games\sZone-Online\Register.lnk C:\Users\janek\Desktop\NeverSink-Filter-3.301a\Uruchom program The Elder Scrolls V Skyrim.lnk Task: {E3068B71-8CBB-454E-B7B7-FF54AE4AC5E2} - System32\Tasks\UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337 => C:\Windows\TEMP\DeleteFolderTask.exe <==== ATTENTION HKU\S-1-5-21-1608297646-3217866677-88377970-1002\...\MountPoints2: {4fb681b4-1ab0-11e6-9bda-4cbb58f143b7} - "I:\Setup.exe" SearchScopes: HKU\S-1-5-21-1608297646-3217866677-88377970-1002 -> DefaultScope {3A23CA94-BD84-4AAE-ADBC-1CD741400ED2} URL = SearchScopes: HKU\S-1-5-21-1608297646-3217866677-88377970-1002 -> {3A23CA94-BD84-4AAE-ADBC-1CD741400ED2} URL = S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X] S3 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X] File: C:\Program Files (x86)\aaa.h4s EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls V Skyrim\Uruchom program The Elder Scrolls V Skyrim.lnk => moved successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\AFPL License.lnk => moved successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\FairPlay License.lnk => moved successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\GPL License.lnk => moved successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion\Web Companion.lnk => moved successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CTS Games\sZone-Online\Register.lnk => moved successfully C:\Users\janek\Desktop\NeverSink-Filter-3.301a\Uruchom program The Elder Scrolls V Skyrim.lnk => moved successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E3068B71-8CBB-454E-B7B7-FF54AE4AC5E2} => could not remove key. ErrorCode1: 0x00000002 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3068B71-8CBB-454E-B7B7-FF54AE4AC5E2} => could not remove key. ErrorCode1: 0x00000002 C:\WINDOWS\System32\Tasks\UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337 => moved successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337 => could not remove key. ErrorCode1: 0x00000002 "HKU\S-1-5-21-1608297646-3217866677-88377970-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4fb681b4-1ab0-11e6-9bda-4cbb58f143b7}" => removed successfully HKLM\Software\Classes\CLSID\{4fb681b4-1ab0-11e6-9bda-4cbb58f143b7} => key not found "HKU\S-1-5-21-1608297646-3217866677-88377970-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully "HKU\S-1-5-21-1608297646-3217866677-88377970-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3A23CA94-BD84-4AAE-ADBC-1CD741400ED2}" => removed successfully HKLM\Software\Classes\CLSID\{3A23CA94-BD84-4AAE-ADBC-1CD741400ED2} => key not found "HKLM\System\CurrentControlSet\Services\InstallerService" => removed successfully InstallerService => service removed successfully "HKLM\System\CurrentControlSet\Services\BstHdDrv" => removed successfully BstHdDrv => service removed successfully ========================= File: C:\Program Files (x86)\aaa.h4s ======================== C:\Program Files (x86)\aaa.h4s File not signed MD5: DCCEA3B9795C108A80B3C67374B0C06B Creation and modification date: 2018-02-16 21:00 - 2018-02-16 21:06 Size: 000135591 Attributes: ----A Company Name: Internal Name: Original Name: Product: Description: File Version: Product Version: Copyright: VirusTotal: 0 ====== End of File: ====== =========== EmptyTemp: ========== BITS transfer queue => 4701309 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 25424812 B Java, Flash, Steam htmlcache => 11049369 B Windows/system/drivers => 5954956 B Edge => 3741024 B Chrome => 0 B Firefox => 385668784 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile32 => 1119694 B LocalService => 3266 B NetworkService => 0 B janek => 41227678 B RecycleBin => 1044272 B EmptyTemp: => 457.7 MB temporary data Removed. ================================ Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 02-03-2018 20:12:13) Result of scheduled keys to remove after reboot: "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E3068B71-8CBB-454E-B7B7-FF54AE4AC5E2}" => removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3068B71-8CBB-454E-B7B7-FF54AE4AC5E2}" => removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337" => removed successfully ==== End of Fixlog 20:12:13 ====