Fix result of Farbar Recovery Scan Tool (x86) Version: 27-01-2024 01 Ran by admin (01-02-2024 08:45:37) Run:1 Running from C:\ Loaded Profiles: admin Boot Mode: Normal ============================================== fixlist content: ***************** START:: CreateRestorePoint: HKLM\...\Winlogon: [Userinit] C:\WINDOWS\system32\userinit.exe,EXPLORER.EXE <==== ATTENTION HKLM\Software\Policies\...\system: [Allow-LogonScript-NetbiosDisabled] 1 HKU\S-1-5-21-1220945662-1659004503-839522115-1003\...\Run: [wsctf.exe] => wsctf.exe (No File) HKLM\...\batfile\DefaultIcon: %SystemRoot%\System32\shell32.dll,-153 <==== ATTENTION HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <==== ATTENTION SearchScopes: HKLM -> DefaultScope value is missing BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File HKLM\...\Windows NT x86\Print Processors\winprint: localspl.dll (No File) S3 cpuz154; C:\WINDOWS\temp\cpuz154\cpuz154_x32.sys [40848 2024-01-30] (CPUID) [File not signed] <==== ATTENTION S3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security S.L. -> Panda Security, S.L.) EmptyEventLogs: EmptyTemp: END:: ***************** Error: (0) Failed to create a restore point. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\"Userinit"="C:\WINDOWS\system32\userinit.exe," => value restored successfully "HKLM\Software\Policies\Microsoft\Windows\System\\Allow-LogonScript-NetbiosDisabled" => removed successfully. "HKU\S-1-5-21-1220945662-1659004503-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\wsctf.exe" => removed successfully. HKLM\Software\Classes\batfile\DefaultIcon\\"Default"="%SystemRoot%\System32\shell32.dll,-153" => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\"Tabs"="res://ieframe.dll/tabswelcome.htm" => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => value restored successfully HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} => removed successfully. HKLM\System\CurrentControlSet\Control\Print\Environments\Windows NT x86\Print Processors\winprint => removed successfully. HKLM\System\CurrentControlSet\Services\cpuz154 => removed successfully. cpuz154 => service removed successfully. HKLM\System\CurrentControlSet\Services\PSKMAD => removed successfully. PSKMAD => service removed successfully. =========== EmptyEventLogs: ========== 0 Event logs cleared. Nazwa 'wevtutil.exe' nie jest rozpoznawana jako polecenie wewnętrzne lub zewnętrzne, program wykonywalny lub plik wsadowy. ================================ =========== EmptyTemp: ========== FlushDNS => completed BITS transfer queue => 0 B DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache => 0 B Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B Windows/system/dllcache/drivers => 1359920 B Edge => 0 B Firefox => 6517884 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default User => 66164 B All Users => 66164 B systemprofile => 65593614 B LocalService => 65627010 B NetworkService => 65693174 B admin => 140270282 B Maestro => 313252490 B Administrator => 314203816 B RecycleBin => 0 B EmptyTemp: => 927.6 MB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 08:45:47 ====