Fix result of Farbar Recovery Scan Tool (x64) Version: 14-11-2021 Ran by 48607 (18-11-2021 20:09:14) Run:2 Running from C:\Users\48607\Desktop Loaded Profiles: 48607 Boot Mode: Normal ============================================== fixlist content: ***************** HKU\48607\...\Run: [qpyizhzm] => "C:\Users\48607\mrqoekti.exe" (No File) HKU\Default\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HpseuHostLauncher.exe (No File) C:\Users\48607\mrqoekti.exe HKU\48607\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HpseuHostLauncher.exe (No File) Task: {1B4B3D75-8C6A-4874-BAA5-3C20F34BC248} - System32\Tasks\Firefox Default Browser Agent 8609518ECBEF10C9 => C:\Users\48607\AppData\Roaming\gictead.exe (No File) <==== ATTENTION Task: {76AD6414-C1CA-4856-BD22-B0156D4B6172} - System32\Tasks\Opera scheduled Autoupdate 1631214923 => C:\Users\48607\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File) Task: {AD06763C-A366-4B35-A384-F3BB1B5A1F68} - System32\Tasks\Firefox Default Browser Agent 2377BC8CC93ED2E5 => C:\Users\48607\AppData\Roaming\ijctead.exe (No File) <==== ATTENTION Task: {E335A5FA-A106-4FA1-A278-E4F29D81B552} - System32\Tasks\Firefox Default Browser Agent 6EB9C032415C933F => C:\Users\48607\AppData\Roaming\arctead.exe (No File) <==== ATTENTION Task: {F3ADC431-8775-4990-A7D7-E28EB343B9B3} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1138517282-2312738049-3737462855-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (No File) S2 HPPrintScanDoctorService; "C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe" [X] S1 ncijozdb; \??\C:\WINDOWS\system32\drivers\ncijozdb.sys [X] C:\Windows\Minidump\111121-11781-01.dmp RemoveDirectory: C:\sh5ldr RemoveDirectory: C:\Program Files\EnigmaSoft RemoveDirectory: C:\ProgramData\KNI6N1OGDHHL4IUTOH153TPAK 2021-11-07 13:12 - 2021-11-07 13:13 - 000000000 ____D C:\Users\48607\AppData\LocalLow\hC6_zT4pC2 2021-11-07 13:12 - 2021-11-07 13:12 - 000000000 ____D C:\Users\48607\AppData\Roaming\mwanza 2021-11-07 13:12 - 2021-11-07 13:12 - 000000000 ____D C:\Users\48607\AppData\LocalLow\iT6tF6rB9 2021-11-07 13:10 - 2021-11-07 13:14 - 011343182 _____ C:\Users\48607\mrqoekti.exe.irfk 2021-11-07 13:10 - 2021-11-07 13:14 - 000413006 _____ C:\Users\48607\Documents\9E_HDyXn4fOaGxukEDwZib3e.exe.irfk 2021-11-07 13:10 - 2021-11-07 13:11 - 000000000 ____D C:\Users\48607\AppData\Roaming\warmded 2021-11-07 13:10 - 2021-11-07 13:10 - 000000000 ____D C:\ProgramData\DW12EXI4JWL9HNO9NSPL9KVG2 2021-11-07 13:10 - 2021-11-07 13:10 - 000000000 ____D C:\ProgramData\5Q1KZE2W5LBAFRCQDP6BJQOJ6 2021-11-07 13:09 - 2021-11-07 13:09 - 000046488 _____ C:\END 2021-11-07 13:09 - 2021-11-07 13:09 - 000000000 ____D C:\ProgramData\Y6OKL7UQNILX3ATNZKE9MWLX8 2021-11-07 13:09 - 2021-11-07 13:09 - 000000000 ____D C:\ProgramData\LYUW1LLM6B5FTFJDNI2WCDTP2 2021-11-07 13:09 - 2021-11-07 13:09 - 000000000 ____D C:\ProgramData\743LZ40W3KGMC8HQK1LUT2K3U 2021-11-07 13:09 - 2021-11-07 13:09 - 000000000 ____D C:\Program Files (x86)\Company 2021-11-07 13:14 - 2021-10-01 17:13 - 004319922 _____ C:\Users\48607\Documents\animations and stuff.rbxl.irfk 2021-11-07 13:14 - 2021-09-10 16:28 - 004624246 _____ C:\Users\48607\Documents\hKOYR7c_Fs0roY3BPyTQ9HvC.exe.irfk 2021-11-07 13:14 - 2021-09-10 16:28 - 001282017 _____ C:\Users\48607\Documents\98iuEMkvE8X7KWiPc3gBq1kk.exe.irfk 2021-11-07 13:14 - 2021-09-10 16:28 - 000389454 _____ C:\Users\48607\Documents\3q0NlQESK4zOi7u2F8MgPrNe.exe.irfk 2021-11-07 13:14 - 2021-09-10 16:28 - 000143694 _____ C:\Users\48607\Documents\9Iu2l_rZy7NUaPvPD3cYbeDO.exe.irfk 2021-11-07 13:14 - 2021-09-10 16:28 - 000101710 _____ C:\Users\48607\Documents\cDDedwaMAb90hEV4wW7a5vAB.exe.irfk 2021-11-07 13:14 - 2021-09-10 15:28 - 004624246 _____ C:\Users\48607\Documents\6eko4OZ8_BkX1443tATgnFCr.exe.irfk 2021-11-07 13:14 - 2021-09-10 15:28 - 001282017 _____ C:\Users\48607\Documents\YrWnNYTlbZXgSJu8TSYLXT4y.exe.irfk 2021-11-07 13:14 - 2021-09-10 15:28 - 000389454 _____ C:\Users\48607\Documents\4nxYl0aMaqwT6llcyvPjad2J.exe.irfk 2021-11-07 13:14 - 2021-09-10 15:28 - 000143694 _____ C:\Users\48607\Documents\4Ifnzenp2KMbSpnw_ar8Cy6S.exe.irfk 2021-11-07 13:14 - 2021-09-10 14:28 - 004624246 _____ C:\Users\48607\Documents\mgdXjYsp5sRJCFbGtOd3wATX.exe.irfk 2021-11-07 13:14 - 2021-09-10 14:28 - 001282017 _____ C:\Users\48607\Documents\Or4U__6bjkJIvTBQVDUE55s1.exe.irfk 2021-11-07 13:14 - 2021-09-10 14:28 - 000389454 _____ C:\Users\48607\Documents\KDM9Tuie6zvcLWewBuwTyR_5.exe.irfk 2021-11-07 13:14 - 2021-09-10 14:28 - 000143694 _____ C:\Users\48607\Documents\DhXsSkepWqsfyc3o9IvIKGds.exe.irfk 2021-11-07 13:14 - 2021-09-10 13:28 - 004624246 _____ C:\Users\48607\Documents\7NYxlOYE1tQA97Uvo9h1WQYy.exe.irfk 2021-11-07 13:14 - 2021-09-10 13:28 - 001282017 _____ C:\Users\48607\Documents\vmFniKuu3qd68m4NECB3HWay.exe.irfk 2021-11-07 13:14 - 2021-09-10 13:28 - 000389454 _____ C:\Users\48607\Documents\hdCnr2R3KeSi60pD43mx_wI3.exe.irfk 2021-11-07 13:14 - 2021-09-10 13:28 - 000143694 _____ C:\Users\48607\Documents\6Z1h8fe0fSt5N70aKTyz2Qkx.exe.irfk 2021-11-07 13:14 - 2021-09-10 12:28 - 004624246 _____ C:\Users\48607\Documents\4ik8w3NegJkp9vfyS0CqsU79.exe.irfk 2021-11-07 13:14 - 2021-09-10 12:28 - 001282017 _____ C:\Users\48607\Documents\U7Wl8GrlfBaYFerppo_kPPDV.exe.irfk 2021-11-07 13:14 - 2021-09-10 12:28 - 000389454 _____ C:\Users\48607\Documents\rOYcFEQetaGN9jdFrzXgfTZd.exe.irfk 2021-11-07 13:14 - 2021-09-10 12:28 - 000143694 _____ C:\Users\48607\Documents\fYNeGOCTOIpJETAFVuwEgXhT.exe.irfk 2021-11-07 13:14 - 2021-09-09 19:22 - 004624246 _____ C:\Users\48607\Documents\2YZ2olAggnVD91XwoKbVu0s1.exe.irfk 2021-11-07 13:14 - 2021-09-09 19:22 - 001282017 _____ C:\Users\48607\Documents\ZHCc1TvfmHPqoWQ3GRu4nb8F.exe.irfk 2021-11-07 13:14 - 2021-09-09 19:22 - 000389454 _____ C:\Users\48607\Documents\gQi_71oRM0NMyU8Nezjpbydd.exe.irfk 2021-11-07 13:14 - 2021-09-09 19:22 - 000161614 _____ C:\Users\48607\Documents\oLoxEEZHnqlhoiTnrbg0vQaj.exe.irfk 2021-11-07 13:14 - 2021-09-09 19:00 - 004624246 _____ C:\Users\48607\Documents\cqxUkUu506jaFePH9F5uJjKQ.exe.irfk 2021-11-07 13:14 - 2021-09-09 19:00 - 001282017 _____ C:\Users\48607\Documents\dWAxJ7Cb4JRTrqs6DtHVXlq_.exe.irfk 2021-11-07 13:14 - 2021-09-09 19:00 - 000389454 _____ C:\Users\48607\Documents\GGzfwcEWH7fChZKnlN7hj9nY.exe.irfk 2021-11-07 13:14 - 2021-09-09 19:00 - 000161614 _____ C:\Users\48607\Documents\zZRek_oWQ7mCTyiC8x3Avg0y.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 018212810 _____ C:\Users\48607\Documents\5pRFI1iJU7LNxaey6qSq_zQx.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 004624246 _____ C:\Users\48607\Documents\xPXI0Q0ch0pLVt8UJBRgs4OZ.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 003826774 _____ C:\Users\48607\Documents\uDHBuMyMCTftti598n93voau.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 002652758 _____ C:\Users\48607\Documents\a5A1efImA27XwXZlcy8HTjch.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 001633614 _____ C:\Users\48607\Documents\qT3dWYBP7ZsuOrwW4ZcUbjl6.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 001282017 _____ C:\Users\48607\Documents\D5h07l37kYqaIzizaXY0U5yo.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 000933710 _____ C:\Users\48607\Documents\BVBLHqBQH0SeQDgaotgcNOg5.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 000389454 _____ C:\Users\48607\Documents\R3sTXL24aXhOGwIl2k2gUAL0.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:53 - 000161614 _____ C:\Users\48607\Documents\TgKi_o8zbJVjhyZMhj5hAEHl.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 004624246 _____ C:\Users\48607\Documents\K7bMBOUJOBJPOJZY5r5X9IUq.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 002949206 _____ C:\Users\48607\Documents\RvcaGChbxbA7LVG98evYo0BY.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 001408334 _____ C:\Users\48607\Documents\7dbYr83sOnl33DP40W9GAtJt.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 001258504 _____ C:\Users\48607\Documents\KsWkiUhk3eFHnIs5od0q82Qe.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000445262 _____ C:\Users\48607\Documents\CiqkqAYpWm04eR4PdiCLcMCv.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000442702 _____ C:\Users\48607\Documents\atNQshrod5pAVfXUwZLGRpFI.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000412494 _____ C:\Users\48607\Documents\1v3p855kQzxbFpR5nbihTBzS.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000403790 _____ C:\Users\48607\Documents\pBZrzRw_j75g6J_lf6HnWaFW.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000325454 _____ C:\Users\48607\Documents\nV5chtbzMf_qkKo_rVEQJcfO.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000323918 _____ C:\Users\48607\Documents\fzDK7gywKUTXF52bO5kUixaf.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000299342 _____ C:\Users\48607\Documents\GlEoi7mMRJzyG7mrG2Ts9JNk.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000256334 _____ C:\Users\48607\Documents\3vTX3rWaYTISfBNrePsakGQT.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000158542 _____ C:\Users\48607\Documents\Ydq_sdYeUKkSuherc55Clfft.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000101710 _____ C:\Users\48607\Documents\wzv59SGUEPAvbQRJA8Klbw6S.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000000607 _____ C:\Users\48607\Documents\wgkf3QaM2sm3uxJcyVwwONNK.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:52 - 000000557 _____ C:\Users\48607\Documents\acqFcB2MEguqzvX5KFJkmQgl.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:46 - 002652758 _____ C:\Users\48607\Documents\MA1Y1ChuZ5FU2jq8bEoPDYa3.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:46 - 001258504 _____ C:\Users\48607\Documents\ugFoHfO3S19Hc1qV63VegYDS.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:46 - 000933710 _____ C:\Users\48607\Documents\NeWeM3QNbTvSCaiJrZBwuXIZ.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:46 - 000226671 _____ C:\Users\48607\AppData\LocalLow\u4fPNLfK0oZ.zip.irfk 2021-11-07 13:14 - 2021-09-09 18:46 - 000000557 _____ C:\Users\48607\Documents\nB0FdiwuR5Xm0Ol6_Q89fSHE.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:45 - 004624246 _____ C:\Users\48607\Documents\eJZ1xC3nBWAHmaq1wc7zO1bq.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:45 - 000403790 _____ C:\Users\48607\Documents\CNbU6aYEOYpFd47ANVaq_Xe0.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:45 - 000299342 _____ C:\Users\48607\Documents\RbNWkZEeUO_Eb1BlTotRFyRk.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:45 - 000101710 _____ C:\Users\48607\Documents\BLftkPOzhMuSiummnVob6NWy.exe.irfk 2021-11-07 13:14 - 2021-09-09 18:45 - 000000607 _____ C:\Users\48607\Documents\JlzCUbDcHhEsrVKksGlLvtVb.exe.irfk 2021-11-07 13:14 - 2021-09-04 11:56 - 001352252 _____ C:\Users\48607\Documents\project bbb.rbxl.irfk 2021-11-07 13:14 - 2021-08-21 19:18 - 004597146 _____ C:\Users\48607\Documents\AFK UNTIL SOMEONE DONATES ME SOMETHING.rbxl.irfk 2021-11-07 13:14 - 2021-08-19 12:16 - 003645594 _____ C:\Users\48607\Documents\untitled.blend.irfk 2021-11-07 13:14 - 2021-08-10 14:02 - 006079293 _____ C:\Users\48607\Documents\Untitled Game.rbxl.irfk 2021-11-07 13:14 - 2021-08-04 20:11 - 000579835 _____ C:\Users\48607\Documents\sadas.rbxl.irfk 2021-11-07 13:14 - 2021-08-01 12:39 - 000643918 _____ C:\Users\48607\Documents\7za.exe.irfk 2021-11-07 13:14 - 2021-07-28 11:38 - 005397325 _____ C:\Users\48607\Documents\Upcomming.rbxl.irfk 2021-11-07 13:14 - 2021-07-26 19:03 - 000676295 _____ C:\Users\48607\Documents\Testing.rbxl.irfk 2021-11-07 13:14 - 2021-07-21 13:02 - 003705179 _____ C:\Users\48607\Documents\d.rbxl.irfk 2021-11-07 13:14 - 2021-07-01 19:12 - 002210832 _____ C:\Users\48607\Documents\rayk.rbxl.irfk 2021-11-07 13:14 - 2021-07-01 07:12 - 003266300 _____ C:\Users\48607\Documents\j.rbxl.irfk 2021-11-07 13:14 - 2021-06-30 11:32 - 007135305 _____ C:\Users\48607\Documents\important fe gun kit edits.rbxl.irfk 2021-11-07 13:14 - 2021-06-27 19:28 - 000030196 _____ C:\Users\48607\Documents\adsasd.rbxl.irfk 2021-11-07 13:14 - 2021-06-26 21:10 - 006498188 _____ C:\Users\48607\Documents\t.rbxl.irfk 2021-11-07 13:14 - 2021-06-20 09:52 - 003389320 _____ C:\Users\48607\Documents\gqebt.rbxl.irfk 2021-11-07 13:14 - 2021-06-17 19:07 - 002364519 _____ C:\Users\48607\Documents\dsaewvqefwdwer adfs dfscxdgtrdgtrxdgtrxdgtrxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxgxddgtrxdgx.rbxl.irfk 2021-11-07 13:14 - 2021-05-21 12:37 - 004412161 _____ C:\Users\48607\Documents\boulevard.rbxl.irfk 2021-11-07 13:14 - 2021-05-19 16:32 - 007279988 _____ C:\Users\48607\Documents\adfvsafwsf.rbxl.irfk 2021-11-07 13:14 - 2021-05-01 10:23 - 007030032 _____ C:\Users\48607\Documents\cringility.rbxl.irfk 2021-11-07 13:14 - 2021-04-16 13:41 - 000194488 _____ C:\Users\48607\Documents\c.rbxl.irfk 2021-11-07 13:14 - 2021-04-10 12:25 - 000022836 _____ C:\Users\48607\Documents\music etc.rbxl.irfk 2021-11-07 13:14 - 2021-04-09 16:46 - 007129394 _____ C:\Users\48607\Documents\trash.rbxl.irfk 2021-11-07 13:14 - 2021-04-01 20:05 - 002145388 _____ C:\Users\48607\Documents\Zombie Nation remake.rbxl.irfk 2021-11-07 13:14 - 2021-03-31 17:03 - 001231361 _____ C:\Users\48607\Documents\public dev server.rbxl.irfk 2021-11-07 13:14 - 2021-03-29 14:54 - 010221017 _____ C:\Users\48607\Documents\fjdhgcjkjgkhjgd important.rbxl.irfk 2021-11-07 13:14 - 2021-03-20 14:17 - 000025376 _____ C:\Users\48607\Documents\making icons etc.rbxl.irfk 2021-11-07 13:14 - 2021-03-14 10:55 - 000000375 _____ C:\Users\48607\Documents\my notepad.txt.irfk 2021-11-07 13:14 - 2021-03-13 16:40 - 001181084 _____ C:\Users\48607\Documents\gdsfsad.rbxl.irfk 2021-11-07 13:14 - 2021-03-06 21:38 - 008828325 _____ C:\Users\48607\Documents\sasdads.rbxl.irfk 2021-11-07 13:14 - 2021-02-28 18:04 - 000000000 ___RD C:\Users\48607\Documents\Scanned Documents 2021-11-07 13:14 - 2021-02-27 10:26 - 000911619 _____ C:\Users\48607\Documents\gggg.rbxl.irfk 2021-11-07 13:14 - 2021-02-14 10:00 - 001051264 _____ C:\Users\48607\Documents\chris gfvffdf.rbxl.irfk 2021-11-07 13:14 - 2021-02-06 12:20 - 000022775 _____ C:\Users\48607\Documents\tests.rbxl.irfk 2021-11-07 13:14 - 2021-01-30 12:49 - 000021816 _____ C:\Users\48607\Documents\dssgffsfg.rbxl.irfk 2021-11-07 13:14 - 2021-01-27 17:52 - 000278451 _____ C:\Users\48607\Documents\FFDSGG.rbxl.irfk 2021-11-07 13:14 - 2021-01-24 20:23 - 000021821 _____ C:\Users\48607\Documents\Baseplate.rbxl.irfk 2021-11-07 13:14 - 2021-01-17 18:36 - 000735474 _____ C:\Users\48607\Documents\project buh.rbxl.irfk 2021-11-07 13:14 - 2021-01-04 19:53 - 000023337 _____ C:\Users\48607\Documents\models.rbxl.irfk 2021-11-07 13:14 - 2020-12-22 14:27 - 001920686 _____ C:\Users\48607\Documents\yes fre rake models go brrrr.rbxl.irfk 2021-11-07 13:14 - 2020-10-24 14:50 - 007574053 _____ C:\Users\48607\Documents\L4D2.rbxl.irfk 2021-11-07 13:14 - 2020-09-18 12:30 - 000000588 _____ C:\Users\48607\AppData\LocalLow\rbxcsettings.rbx.irfk Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"} EmptyTemp: ***************** "HKU\48607\Software\Microsoft\Windows\CurrentVersion\Run\\qpyizhzm" => not found "HKU\Default\Software\Microsoft\Windows\CurrentVersion\Run\\HPSEU_Host_Launcher" => not found "C:\Users\48607\mrqoekti.exe" => not found "HKU\48607\Software\Microsoft\Windows\CurrentVersion\Run\\HPSEU_Host_Launcher" => not found "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1B4B3D75-8C6A-4874-BAA5-3C20F34BC248}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B4B3D75-8C6A-4874-BAA5-3C20F34BC248}" => removed successfully C:\WINDOWS\System32\Tasks\Firefox Default Browser Agent 8609518ECBEF10C9 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Firefox Default Browser Agent 8609518ECBEF10C9" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{76AD6414-C1CA-4856-BD22-B0156D4B6172}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76AD6414-C1CA-4856-BD22-B0156D4B6172}" => removed successfully C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1631214923 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1631214923" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AD06763C-A366-4B35-A384-F3BB1B5A1F68}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AD06763C-A366-4B35-A384-F3BB1B5A1F68}" => removed successfully C:\WINDOWS\System32\Tasks\Firefox Default Browser Agent 2377BC8CC93ED2E5 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Firefox Default Browser Agent 2377BC8CC93ED2E5" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E335A5FA-A106-4FA1-A278-E4F29D81B552}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E335A5FA-A106-4FA1-A278-E4F29D81B552}" => removed successfully C:\WINDOWS\System32\Tasks\Firefox Default Browser Agent 6EB9C032415C933F => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Firefox Default Browser Agent 6EB9C032415C933F" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3ADC431-8775-4990-A7D7-E28EB343B9B3}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3ADC431-8775-4990-A7D7-E28EB343B9B3}" => removed successfully C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1138517282-2312738049-3737462855-1001 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Standalone Update Task-S-1-5-21-1138517282-2312738049-3737462855-1001" => removed successfully HKLM\System\CurrentControlSet\Services\HPPrintScanDoctorService => removed successfully HPPrintScanDoctorService => service removed successfully HKLM\System\CurrentControlSet\Services\ncijozdb => removed successfully ncijozdb => service removed successfully C:\Windows\Minidump\111121-11781-01.dmp => moved successfully "C:\sh5ldr" => removed successfully "C:\Program Files\EnigmaSoft" => removed successfully "C:\ProgramData\KNI6N1OGDHHL4IUTOH153TPAK" => removed successfully C:\Users\48607\AppData\LocalLow\hC6_zT4pC2 => moved successfully C:\Users\48607\AppData\Roaming\mwanza => moved successfully C:\Users\48607\AppData\LocalLow\iT6tF6rB9 => moved successfully C:\Users\48607\mrqoekti.exe.irfk => moved successfully C:\Users\48607\Documents\9E_HDyXn4fOaGxukEDwZib3e.exe.irfk => moved successfully C:\Users\48607\AppData\Roaming\warmded => moved successfully C:\ProgramData\DW12EXI4JWL9HNO9NSPL9KVG2 => moved successfully C:\ProgramData\5Q1KZE2W5LBAFRCQDP6BJQOJ6 => moved successfully C:\END => moved successfully C:\ProgramData\Y6OKL7UQNILX3ATNZKE9MWLX8 => moved successfully C:\ProgramData\LYUW1LLM6B5FTFJDNI2WCDTP2 => moved successfully C:\ProgramData\743LZ40W3KGMC8HQK1LUT2K3U => moved successfully C:\Program Files (x86)\Company => moved successfully C:\Users\48607\Documents\animations and stuff.rbxl.irfk => moved successfully C:\Users\48607\Documents\hKOYR7c_Fs0roY3BPyTQ9HvC.exe.irfk => moved successfully C:\Users\48607\Documents\98iuEMkvE8X7KWiPc3gBq1kk.exe.irfk => moved successfully C:\Users\48607\Documents\3q0NlQESK4zOi7u2F8MgPrNe.exe.irfk => moved successfully C:\Users\48607\Documents\9Iu2l_rZy7NUaPvPD3cYbeDO.exe.irfk => moved successfully C:\Users\48607\Documents\cDDedwaMAb90hEV4wW7a5vAB.exe.irfk => moved successfully C:\Users\48607\Documents\6eko4OZ8_BkX1443tATgnFCr.exe.irfk => moved successfully C:\Users\48607\Documents\YrWnNYTlbZXgSJu8TSYLXT4y.exe.irfk => moved successfully C:\Users\48607\Documents\4nxYl0aMaqwT6llcyvPjad2J.exe.irfk => moved successfully C:\Users\48607\Documents\4Ifnzenp2KMbSpnw_ar8Cy6S.exe.irfk => moved successfully C:\Users\48607\Documents\mgdXjYsp5sRJCFbGtOd3wATX.exe.irfk => moved successfully C:\Users\48607\Documents\Or4U__6bjkJIvTBQVDUE55s1.exe.irfk => moved successfully C:\Users\48607\Documents\KDM9Tuie6zvcLWewBuwTyR_5.exe.irfk => moved successfully C:\Users\48607\Documents\DhXsSkepWqsfyc3o9IvIKGds.exe.irfk => moved successfully C:\Users\48607\Documents\7NYxlOYE1tQA97Uvo9h1WQYy.exe.irfk => moved successfully C:\Users\48607\Documents\vmFniKuu3qd68m4NECB3HWay.exe.irfk => moved successfully C:\Users\48607\Documents\hdCnr2R3KeSi60pD43mx_wI3.exe.irfk => moved successfully C:\Users\48607\Documents\6Z1h8fe0fSt5N70aKTyz2Qkx.exe.irfk => moved successfully C:\Users\48607\Documents\4ik8w3NegJkp9vfyS0CqsU79.exe.irfk => moved successfully C:\Users\48607\Documents\U7Wl8GrlfBaYFerppo_kPPDV.exe.irfk => moved successfully C:\Users\48607\Documents\rOYcFEQetaGN9jdFrzXgfTZd.exe.irfk => moved successfully C:\Users\48607\Documents\fYNeGOCTOIpJETAFVuwEgXhT.exe.irfk => moved successfully C:\Users\48607\Documents\2YZ2olAggnVD91XwoKbVu0s1.exe.irfk => moved successfully C:\Users\48607\Documents\ZHCc1TvfmHPqoWQ3GRu4nb8F.exe.irfk => moved successfully C:\Users\48607\Documents\gQi_71oRM0NMyU8Nezjpbydd.exe.irfk => moved successfully C:\Users\48607\Documents\oLoxEEZHnqlhoiTnrbg0vQaj.exe.irfk => moved successfully C:\Users\48607\Documents\cqxUkUu506jaFePH9F5uJjKQ.exe.irfk => moved successfully C:\Users\48607\Documents\dWAxJ7Cb4JRTrqs6DtHVXlq_.exe.irfk => moved successfully C:\Users\48607\Documents\GGzfwcEWH7fChZKnlN7hj9nY.exe.irfk => moved successfully C:\Users\48607\Documents\zZRek_oWQ7mCTyiC8x3Avg0y.exe.irfk => moved successfully C:\Users\48607\Documents\5pRFI1iJU7LNxaey6qSq_zQx.exe.irfk => moved successfully C:\Users\48607\Documents\xPXI0Q0ch0pLVt8UJBRgs4OZ.exe.irfk => moved successfully C:\Users\48607\Documents\uDHBuMyMCTftti598n93voau.exe.irfk => moved successfully C:\Users\48607\Documents\a5A1efImA27XwXZlcy8HTjch.exe.irfk => moved successfully C:\Users\48607\Documents\qT3dWYBP7ZsuOrwW4ZcUbjl6.exe.irfk => moved successfully C:\Users\48607\Documents\D5h07l37kYqaIzizaXY0U5yo.exe.irfk => moved successfully C:\Users\48607\Documents\BVBLHqBQH0SeQDgaotgcNOg5.exe.irfk => moved successfully C:\Users\48607\Documents\R3sTXL24aXhOGwIl2k2gUAL0.exe.irfk => moved successfully C:\Users\48607\Documents\TgKi_o8zbJVjhyZMhj5hAEHl.exe.irfk => moved successfully C:\Users\48607\Documents\K7bMBOUJOBJPOJZY5r5X9IUq.exe.irfk => moved successfully C:\Users\48607\Documents\RvcaGChbxbA7LVG98evYo0BY.exe.irfk => moved successfully C:\Users\48607\Documents\7dbYr83sOnl33DP40W9GAtJt.exe.irfk => moved successfully C:\Users\48607\Documents\KsWkiUhk3eFHnIs5od0q82Qe.exe.irfk => moved successfully C:\Users\48607\Documents\CiqkqAYpWm04eR4PdiCLcMCv.exe.irfk => moved successfully C:\Users\48607\Documents\atNQshrod5pAVfXUwZLGRpFI.exe.irfk => moved successfully C:\Users\48607\Documents\1v3p855kQzxbFpR5nbihTBzS.exe.irfk => moved successfully C:\Users\48607\Documents\pBZrzRw_j75g6J_lf6HnWaFW.exe.irfk => moved successfully C:\Users\48607\Documents\nV5chtbzMf_qkKo_rVEQJcfO.exe.irfk => moved successfully C:\Users\48607\Documents\fzDK7gywKUTXF52bO5kUixaf.exe.irfk => moved successfully C:\Users\48607\Documents\GlEoi7mMRJzyG7mrG2Ts9JNk.exe.irfk => moved successfully C:\Users\48607\Documents\3vTX3rWaYTISfBNrePsakGQT.exe.irfk => moved successfully C:\Users\48607\Documents\Ydq_sdYeUKkSuherc55Clfft.exe.irfk => moved successfully C:\Users\48607\Documents\wzv59SGUEPAvbQRJA8Klbw6S.exe.irfk => moved successfully C:\Users\48607\Documents\wgkf3QaM2sm3uxJcyVwwONNK.exe.irfk => moved successfully C:\Users\48607\Documents\acqFcB2MEguqzvX5KFJkmQgl.exe.irfk => moved successfully C:\Users\48607\Documents\MA1Y1ChuZ5FU2jq8bEoPDYa3.exe.irfk => moved successfully C:\Users\48607\Documents\ugFoHfO3S19Hc1qV63VegYDS.exe.irfk => moved successfully C:\Users\48607\Documents\NeWeM3QNbTvSCaiJrZBwuXIZ.exe.irfk => moved successfully C:\Users\48607\AppData\LocalLow\u4fPNLfK0oZ.zip.irfk => moved successfully C:\Users\48607\Documents\nB0FdiwuR5Xm0Ol6_Q89fSHE.exe.irfk => moved successfully C:\Users\48607\Documents\eJZ1xC3nBWAHmaq1wc7zO1bq.exe.irfk => moved successfully C:\Users\48607\Documents\CNbU6aYEOYpFd47ANVaq_Xe0.exe.irfk => moved successfully C:\Users\48607\Documents\RbNWkZEeUO_Eb1BlTotRFyRk.exe.irfk => moved successfully C:\Users\48607\Documents\BLftkPOzhMuSiummnVob6NWy.exe.irfk => moved successfully C:\Users\48607\Documents\JlzCUbDcHhEsrVKksGlLvtVb.exe.irfk => moved successfully C:\Users\48607\Documents\project bbb.rbxl.irfk => moved successfully C:\Users\48607\Documents\AFK UNTIL SOMEONE DONATES ME SOMETHING.rbxl.irfk => moved successfully C:\Users\48607\Documents\untitled.blend.irfk => moved successfully C:\Users\48607\Documents\Untitled Game.rbxl.irfk => moved successfully C:\Users\48607\Documents\sadas.rbxl.irfk => moved successfully C:\Users\48607\Documents\7za.exe.irfk => moved successfully C:\Users\48607\Documents\Upcomming.rbxl.irfk => moved successfully C:\Users\48607\Documents\Testing.rbxl.irfk => moved successfully C:\Users\48607\Documents\d.rbxl.irfk => moved successfully C:\Users\48607\Documents\rayk.rbxl.irfk => moved successfully C:\Users\48607\Documents\j.rbxl.irfk => moved successfully C:\Users\48607\Documents\important fe gun kit edits.rbxl.irfk => moved successfully C:\Users\48607\Documents\adsasd.rbxl.irfk => moved successfully C:\Users\48607\Documents\t.rbxl.irfk => moved successfully C:\Users\48607\Documents\gqebt.rbxl.irfk => moved successfully C:\Users\48607\Documents\dsaewvqefwdwer adfs dfscxdgtrdgtrxdgtrxdgtrxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxgxddgtrxdgx.rbxl.irfk => moved successfully C:\Users\48607\Documents\boulevard.rbxl.irfk => moved successfully C:\Users\48607\Documents\adfvsafwsf.rbxl.irfk => moved successfully C:\Users\48607\Documents\cringility.rbxl.irfk => moved successfully C:\Users\48607\Documents\c.rbxl.irfk => moved successfully C:\Users\48607\Documents\music etc.rbxl.irfk => moved successfully C:\Users\48607\Documents\trash.rbxl.irfk => moved successfully C:\Users\48607\Documents\Zombie Nation remake.rbxl.irfk => moved successfully C:\Users\48607\Documents\public dev server.rbxl.irfk => moved successfully C:\Users\48607\Documents\fjdhgcjkjgkhjgd important.rbxl.irfk => moved successfully C:\Users\48607\Documents\making icons etc.rbxl.irfk => moved successfully C:\Users\48607\Documents\my notepad.txt.irfk => moved successfully C:\Users\48607\Documents\gdsfsad.rbxl.irfk => moved successfully C:\Users\48607\Documents\sasdads.rbxl.irfk => moved successfully C:\Users\48607\Documents\Scanned Documents => moved successfully C:\Users\48607\Documents\gggg.rbxl.irfk => moved successfully C:\Users\48607\Documents\chris gfvffdf.rbxl.irfk => moved successfully C:\Users\48607\Documents\tests.rbxl.irfk => moved successfully C:\Users\48607\Documents\dssgffsfg.rbxl.irfk => moved successfully C:\Users\48607\Documents\FFDSGG.rbxl.irfk => moved successfully C:\Users\48607\Documents\Baseplate.rbxl.irfk => moved successfully C:\Users\48607\Documents\project buh.rbxl.irfk => moved successfully C:\Users\48607\Documents\models.rbxl.irfk => moved successfully C:\Users\48607\Documents\yes fre rake models go brrrr.rbxl.irfk => moved successfully C:\Users\48607\Documents\L4D2.rbxl.irfk => moved successfully C:\Users\48607\AppData\LocalLow\rbxcsettings.rbx.irfk => moved successfully ========= wevtutil el | Foreach-Object {wevtutil cl "$_"} ========= wevtutil : Failed to clear log Microsoft-Windows-LiveId/Analytic. At C:\FRST\tmp.ps1:1 char:31 + wevtutil el | Foreach-Object {wevtutil cl "$_"} + ~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (Failed to clear...iveId/Analytic.:String) [], RemoteException + FullyQualifiedErrorId : NativeCommandError Access is denied. wevtutil : Failed to clear log Microsoft-Windows-LiveId/Operational. At C:\FRST\tmp.ps1:1 char:31 + wevtutil el | Foreach-Object {wevtutil cl "$_"} + ~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (Failed to clear...Id/Operational.:String) [], RemoteException + FullyQualifiedErrorId : NativeCommandError Access is denied. wevtutil : Failed to clear log Microsoft-Windows-USBVideo/Analytic. At C:\FRST\tmp.ps1:1 char:31 + wevtutil el | Foreach-Object {wevtutil cl "$_"} + ~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (Failed to clear...Video/Analytic.:String) [], RemoteException + FullyQualifiedErrorId : NativeCommandError The instance name passed was not recognized as valid by a WMI data provider. ========= End of Powershell: ========= =========== EmptyTemp: ========== BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 232722074 B Java, Flash, Steam htmlcache => 624736061 B Windows/system/drivers => 10800928 B Edge => 1158570 B Chrome => 909073511 B Firefox => 0 B Opera => 12459610 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 690904 B systemprofile32 => 690904 B LocalService => 1382394 B NetworkService => 9478064 B 48607 => 2046270009 B RecycleBin => 0 B EmptyTemp: => 3.6 GB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 20:12:00 ====