Fix result of Farbar Recovery Scan Tool (x64) Version: 14-03-2017
Ran by SYSTEM (18-03-2017 17:03:27) Run:1
Running from E:\
Boot Mode: Recovery
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [DESKTOP-5691JFE] => C:\WINDOWS\TEMP\g7CDF.tmp.exe [249344 2017-03-14] () <===== ATTENTION
HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 0
HKLM\...\Policies\Explorer: [NoInstrumentation] 1
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig]  <===== ATTENTION
IFEO\SppExtComObj.exe: [Debugger] C:\WINDOWS\SECOH-QAD.exe
GroupPolicy: Restriction <======= ATTENTION
S2 QForlLgs0EYm Updater; C:\Program Files (x86)\QForlLgs0EYm Updater\QForlLgs0EYm Updater.exe [X]
C:\Program Files (x86)\QForlLgs0EYm Updater
S3 EverestDriver; \??\C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 [X]
S3 pccsmcfd; \SystemRoot\system32\DRIVERS\pccsmcfdx64.sys [X]
C:\WINDOWS\TEMP\g7CDF.tmp.exe
EmptyTemp:
*****************

CloseProcesses: => Error: This directive works only outside recovery mode.
Error: Restore point can only be created in normal mode.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\DESKTOP-5691JFE => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoRecentDocsNetHood => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoInstrumentation => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoChangeStartMenu => value removed successfully
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore => key removed successfully
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\SppExtComObj.exe => key removed successfully
C:\Windows\System32\GroupPolicy\Machine => moved successfully
C:\Windows\System32\GroupPolicy\GPT.ini => moved successfully
HKLM\System\ControlSet001\Services\QForlLgs0EYm Updater => key removed successfully
QForlLgs0EYm Updater => service removed successfully
"C:\Program Files (x86)\QForlLgs0EYm Updater" => not found.
HKLM\System\ControlSet001\Services\EverestDriver => key removed successfully
EverestDriver => service removed successfully
HKLM\System\ControlSet001\Services\pccsmcfd => key removed successfully
pccsmcfd => service removed successfully
C:\WINDOWS\TEMP\g7CDF.tmp.exe => moved successfully
EmptyTemp: => Error: This directive works only outside recovery mode.

==== End of Fixlog 17:05:16 ====