Vortex1337

sorry for the very late reply, been busy for days now haha, anyways here is the log: Fix result of Farbar Recovery Scan Tool (x64) Version: 02-06-2017 Ran by Nikko (04-06-2017 15:47:25) Run:3 Running from C:\Users\Nikko\Downloads\Programs Loaded Profiles: Nikko & (Available Profiles: defaultuser0 & Nikko & Administrator) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: AutoConfigURL: [S-1-5-21-643937350-3628140538-731372784-1001] => hxxp://127.0.0.1:25378/echo-pac?t=52203640 ***************** Processes closed successfully. HKU\S-1-5-21-643937350-3628140538-731372784-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL => value not found. The system needed a reboot. ==== End of Fixlog 15:47:26 ==== i guess my pc is clean now and doesnt randomly lags. i really appreciate all of your efforts, thank you very much for that.

Addition.txt FRST.txt

# AdwCleaner v6.047 - Logfile created 29/05/2017 at 21:03:13 # Updated on 19/05/2017 by Malwarebytes # Database : 2017-05-19.1 [Local] # Operating System : Windows 10 Home (X64) # Username : Nikko - DESKTOP-40H6GO1 # Running from : C:\Users\Nikko\Desktop\AdwCleaner.exe # Mode: Clean # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** ***** [ Folders ] ***** ***** [ Files ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** [-] Shortcut disinfected: C:\Users\Nikko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk ***** [ Scheduled Tasks ] ***** ***** [ Registry ] ***** [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4} [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546} [-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36} [-] Key deleted: [x64] HKLM\SOFTWARE\Reimage ***** [ Web browsers ] ***** [-] [C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: aol.com [-] [C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [1427 Bytes] - [29/05/2017 21:03:13] C:\AdwCleaner\AdwCleaner[S0].txt - [1989 Bytes] - [29/05/2017 21:02:29] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1573 Bytes] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.3 (04.10.2017) Operating System: Windows 10 Home x64 Ran by Nikko (Administrator) on Mon 05/29/2017 at 20:43:33.09 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 0 Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Mon 05/29/2017 at 20:47:39.97 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

what i meant is to download updates manually like outside malwarebytes

here: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 5/28/17 Scan Time: 1:20 PM Log File: Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.122 Update Package Version: 1.0.1976 License: Trial -System Information- OS: Windows 10 CPU: x64 File System: NTFS User: DESKTOP-40H6GO1\Nikko -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 397919 Threats Detected: 27 Threats Quarantined: 27 Time Elapsed: 5 min, 44 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 12 PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Quarantined, [1040], [332494],1.0.1976 PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Quarantined, [1040], [332494],1.0.1976 PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Quarantined, [1040], [332494],1.0.1976 PUP.Optional.Reimage, HKU\S-1-5-21-643937350-3628140538-731372784-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10ECCE17-29B5-4880-A8F5-EAD298611484}, Quarantined, [1040], [327205],1.0.1976 PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\REI_AxControl.DLL, Quarantined, [1040], [327193],1.0.1976 PUP.Optional.Reimage, HKU\S-1-5-21-643937350-3628140538-731372784-1001\SOFTWARE\reimage, Quarantined, [1040], [357494],1.0.1976 PUP.Optional.Reimage, HKU\S-1-5-21-643937350-3628140538-731372784-1001\SOFTWARE\LOCAL APPWIZARD-GENERATED APPLICATIONS\Reimage - Windows Problem Relief., Quarantined, [1040], [327203],1.0.1976 PUP.Optional.Reimage, HKU\S-1-5-21-643937350-3628140538-731372784-1001\SOFTWARE\REIMAGE\PC REPAIR, Quarantined, [1040], [327204],1.0.1976 PUP.Optional.Reimage, HKLM\SOFTWARE\REIMAGE\Reimage Repair, Quarantined, [1040], [336077],1.0.1976 PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\REI_AxControl.DLL, Quarantined, [1040], [327193],1.0.1976 PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\REI_AxControl.DLL, Quarantined, [1040], [327193],1.0.1976 Hijack.AutoConfigURL.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, Quarantined, [274], [-1],0.0.0 Registry Value: 9 PUP.Optional.Reimage, HKU\S-1-5-21-643937350-3628140538-731372784-1001\SOFTWARE\REIMAGE\PC REPAIR|QUITMESSAGE, Quarantined, [1040], [327204],1.0.1976 Hijack.AutoConfigURL.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IPHLPSVC\PARAMETERS\PROXYMGR\{90F18CA0-7B3C-43A2-ADFD-A60C9A3C5227}|AUTOCONFIGURL, Quarantined, [274], [377571],1.0.1976 Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarantined, [274], [-1],0.0.0 Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-20\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarantined, [274], [-1],0.0.0 Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-21-643937350-3628140538-731372784-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarantined, [274], [-1],0.0.0 Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-21-643937350-3628140538-731372784-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarantined, [274], [-1],0.0.0 Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-21-643937350-3628140538-731372784-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYOVERRIDE, Quarantined, [274], [-1],0.0.0 Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-21-643937350-3628140538-731372784-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYOVERRIDE, Quarantined, [274], [-1],0.0.0 Hijack.AutoConfigURL.PrxySvrRST, HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarantined, [274], [-1],0.0.0 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 6 Trojan.Wdfload.Generic, C:\USERS\NIKKO\DESKTOP\27.05.2017_18.40.18.ZIP, Quarantined, [7968], [384303],1.0.1976 PUP.Optional.Reimage, C:\USERS\NIKKO\DOWNLOADS\REIMAGEREPAIR.EXE, Quarantined, [1040], [331559],1.0.1976 PUP.Optional.SpeedItUp, C:\WINDOWS\REIMAGE.INI, Quarantined, [1136], [329423],1.0.1976 CrackTool.Agent, C:\USERS\NIKKO\DESKTOP\NEW FOLDER\CRACK\IDM UNIVERSAL WEB CRACK V3.EXE, Quarantined, [303], [354396],1.0.1976 PUP.Optional.InstallCore, C:\USERS\NIKKO\DESKTOP\NEW FOLDER\KMSPICO 10.2.0 FINAL\KMSPICO_SETUP-.EXE, Quarantined, [3], [380016],1.0.1976 PUP.Optional.FusionCore, C:\USERS\NIKKO\DESKTOP\SKINPACK\SKINPACK ASUS.EXE, Quarantined, [932], [344785],1.0.1976 Physical Sector: 0 (No malicious items detected) (end)

and how do i download updates manually?

it worked now, thank you very much for your efforts. btw, how do you disable auto updates? i dont want to waste my data ty

already sent the zip file

Fix result of Farbar Recovery Scan Tool (x64) Version: 24-05-2017 Ran by Nikko (27-05-2017 18:58:02) Run:2 Running from C:\Users\Nikko\Downloads\Programs Loaded Profiles: Nikko (Available Profiles: defaultuser0 & Nikko & Administrator) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: CreateRestorePoint: Zip: C:\ProgramData\10r99M5538B906;C:\ProgramData\54L8057a1316u509;C:\ProgramData\34L5152a7144u991;C:\ProgramData\74L9650g982X206 GroupPolicyScripts-x32: Restriction <======= ATTENTION S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-31] (@ByELDI) [File not signed] Task: {018D052C-940F-4DF4-9759-60575937D706} - System32\Tasks\microsoft-microsoftsolitairecollection_3 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {03511F69-C8F8-463B-A010-8007331D8DAC} - System32\Tasks\microsoft-zunemusic_3-6-19261-0_x64__8wekyb3d8bbwe\music => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {03774CE9-A6AC-48A7-A9BD-09E68B7D6ABD} - System32\Tasks\microsoft-getstarted_3 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {07EADF72-C7D6-4C98-8752-0C1033A0141E} - System32\Tasks\temp\27fdeb85-4448-42b1-be9c-2a2ac639c0c0\dismhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {0A1E50FD-17CD-44E3-972F-95925C10A125} - System32\Tasks\microsoft-getstarted_3-11-3 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {0DBAA18F-0852-45A3-A404-CF4ED629206C} - System32\Tasks\microsoft-zunemusic_3-6-19261 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {0F5C7CB7-1AD7-4BF6-A91A-ACD88051FFE1} - System32\Tasks\microsoft-zunemusic_3-6-19261-0_x64__8wekyb3d8bbwe\music-ui => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {16967985-476E-47CB-B6FD-35D72670E89B} - System32\Tasks\microsoft-windows => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {18195E87-240C-4D83-96AE-21A144EFE720} - System32\Tasks\microsoft-zunevideo_3-6-19281-0_x64__8wekyb3d8bbwe\video => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {1BB71526-7352-4539-951B-6DCEFD71C138} - System32\Tasks\microsoft-microsoftsolitairecollection_3-9-5100 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {221614D6-DBCF-4262-B078-2D3E1FB04946} - System32\Tasks\microsoft-windows-photos_16-511-8780-0_x64__8wekyb3d8bbwe\microsoft-photos => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {23896A7A-8F89-492F-9CD0-837F5462A80A} - System32\Tasks\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore-mobile-exe => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {25C48FAB-19C7-4BD4-A004-28565B1E917C} - System32\Tasks\microsoft-windowsstore_11606-1001 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {28EF88B8-3A8F-48CE-BF72-4EE26C28475A} - System32\Tasks\microsoft\onedrive\onedrivestandaloneupdater => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {29646EE0-CAC8-4017-93DE-4F4B12E0AA4F} - System32\Tasks\microsoft-windowsstore_11606-1001-39 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {2C8DB097-32C6-4238-B498-189C76DFDF15} - System32\Tasks\10r99M5538B906-dll => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {2CEE1BD3-C1D0-43A1-8D8D-7E9224F1F669} - System32\Tasks\temp\cc7342c8-62c6-4e9b-b77e-644b14ffb5ee\dismhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {3048E4EB-7FD8-43AF-9454-A1914859E9C2} - System32\Tasks\microsoft-zunevideo_3-6-19281 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {369A1211-6270-42EE-A326-66304C625741} - System32\Tasks\microsoft-zunemusic_3 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {39B86C56-8DA7-4350-AA68-4725505442D0} - System32\Tasks\temp\05d29617-a21f-4a17-85e9-2afa6c34c230\dismhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {3A68F28D-E536-4011-87E6-AD61AEA6CFD4} - System32\Tasks\temp\704ee166-fadc-4c19-b45d-ec12f1ae7f8d\dismhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {3CA420CD-D717-416F-8D32-08D1F6A819F2} - System32\Tasks\microsoft-windowsstore_11606 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {406BC69F-230C-4C73-A18A-1825A339C082} - System32\Tasks\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {4A46ACD4-E913-4D0F-B886-5CF188B78A93} - System32\Tasks\microsoft-getstarted_3-11 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {4F08A610-B7BA-4140-A963-A51A3221962B} - System32\Tasks\10r99M5538B906 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO <==== ATTENTION Task: {5496D40A-5566-41A8-A8DC-D3C1D136D877} - System32\Tasks\temp\b969624a-aad9-4e43-9776-1276e564d6fe\dismhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {57C01E6B-EFC9-4BB7-9352-64144947222F} - System32\Tasks\microsoft-skypeapp_11 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {59C8A723-9568-4BD9-98DB-6B0E6EE286B3} - System32\Tasks\microsoft-skypeapp_11-4-86-0_x64__kzf8qxf38zg5c\skypehost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {5A56CD99-40EA-447E-9AB3-6B43BE2238D7} - System32\Tasks\microsoft-zunevideo_3-6-19281-0_x64__8wekyb3d8bbwe\video-ui => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {5C7EA3CB-C81B-43CE-99E8-DF8DAE9B5864} - System32\Tasks\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\hubtaskhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {5CEE5D13-923A-40ED-947D-13E2C617F840} - System32\Tasks\microsoft-skypeapp_11-4-86 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {61C62616-BA9A-40C2-A54D-A62D9761F53E} - System32\Tasks\microsoft-skypeapp_11-4 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {639A2619-A7F1-4CCF-94B2-4003FC73D3D6} - System32\Tasks\microsoft\onedrive\onedrivestandaloneupdater-exe => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {6CD977DC-BBB8-43F6-B397-DE842A7B7CB5} - System32\Tasks\microsoft-zunemusic_3-6 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {6DD2B411-7F18-492C-A8D5-5CBF691C9782} - System32\Tasks\microsoft-microsoftsolitairecollection_3-9 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {74773C59-D4C7-4383-B9B5-ACDD94487F9B} - System32\Tasks\temp\fa038e11-592f-4690-8f25-283589f0ce02\dismhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {7F0C361B-50D2-424F-9635-A4E4A7E0613D} - System32\Tasks\microsoft-windowscommunicationsapps_17-6868 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {8088AF96-0605-4166-AAF4-ABD3060F0730} - System32\Tasks\microsoft-xboxidentityprovider_11-18 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {81840194-CFE2-4736-BD38-6EDBE971BCEA} - System32\Tasks\microsoft\onedrive\onedrive => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {81FE52D7-DBA1-4A2E-8636-1606A02434DA} - System32\Tasks\microsoft-windows-photos_16-511 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {85FDA849-5160-4D35-89AB-2ACB2D18DFC8} - System32\Tasks\microsoft-microsoftofficehub_17-6801-23751 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {8A46E983-1A76-4A32-A19F-21A2AA23207D} - System32\Tasks\microsoft-windows-photos_16-511-8780-0_x64__8wekyb3d8bbwe\microsoft => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {918FE38F-BD8C-42FF-9EAA-1DF843B6E50B} - System32\Tasks\microsoft-windowscommunicationsapps_17 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {952EB4E6-B134-42E2-B305-06CCEABAEBAD} - System32\Tasks\microsoft-windows-photos_16 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {9623E1BF-4EEB-48ED-9986-A834A34ED4E7} - System32\Tasks\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\ohub => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {ABD3FE53-3293-4FB7-9893-FC364BD0938C} - System32\Tasks\microsoft\onedrive\update\onedrivesetup => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO <==== ATTENTION Task: {B16871D2-18E6-467A-A230-951405500EA4} - System32\Tasks\54L8057a1316u509 => Rundll32.exe "C:\ProgramData\54L8057a1316u509\54L8057a1316u509.dll",LauxKxdMI <==== ATTENTION Task: {B597E75C-0E95-44A7-B79C-8EA9C46FF792} - System32\Tasks\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore-mobile => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {BB43AED6-9F6B-41BB-9ACD-F2522DDD3F46} - System32\Tasks\microsoft-getstarted_3-11-3-0_x64__8wekyb3d8bbwe\whatsnew-store => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {BC3581B1-116F-461B-ABBC-0A9D67761EF1} - System32\Tasks\microsoft-xboxidentityprovider_11-18-16009 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {BE591FF7-2896-4781-BEFC-2261E4A93B92} - System32\Tasks\temp\34b9f347-f515-475e-a994-ffbb5d059c44\dismhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {BEC27BA1-9E2F-4B68-B225-BD60377657B3} - System32\Tasks\microsoft-windows-photos_16-511-8780 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {C7139AB8-B4DA-4ABC-8A82-D9ED02287D49} - System32\Tasks\microsoft-getstarted_3-11-3-0_x64__8wekyb3d8bbwe\whatsnew => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {CCC73B57-1B34-4FBC-9D5E-551D50DCB616} - System32\Tasks\microsoft-xboxidentityprovider_11-18-16009-0_x64__8wekyb3d8bbwe\xboxidp => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {D0DDEC71-82B1-46CB-9183-85A05D88A001} - System32\Tasks\microsoft-zunevideo_3 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {D142F9FB-A5B2-485D-AA33-EBB5E5F5C11E} - System32\Tasks\microsoft-windowscommunicationsapps_17-6868-41201 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {D4D5FFC3-599E-4C56-9473-A8A26D41CA22} - System32\Tasks\34L5152a7144u991 => Rundll32.exe "C:\ProgramData\34L5152a7144u991\34L5152a7144u991.dll",LauxKxdMI <==== ATTENTION Task: {D826FF64-83CB-4DAB-80A8-492CB2274D78} - System32\Tasks\microsoft-microsoftsolitairecollection_3-9-5100-0_x64__8wekyb3d8bbwe\solitaire => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {D89192E9-70B5-4AC0-A8E4-A9302B16F054} - System32\Tasks\temp\05d29617-a21f-4a17-85e9-2afa6c34c230\dismhost-exe => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {DE0DCD12-6AA8-4839-9171-8FE655D4F5D4} - System32\Tasks\microsoft-windowscommunicationsapps_17-6868-41201-0_x64__8wekyb3d8bbwe\hxtsr => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {E918F101-5C97-48E4-B5FB-6D1744F54278} - System32\Tasks\temp\5f05f758-3d5e-49a2-baa7-e1dcee77c126\dismhost => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {EA55DF75-2864-4E1B-8637-6D1FFCFD8E70} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-08-31] (@ByELDI) Task: {F2D06F65-9A08-4FC1-8443-4C4AC87AE54A} - System32\Tasks\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\ohub-exe => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {F7F304A0-08DF-4611-A8A4-F31C0ACD791F} - System32\Tasks\microsoft-xboxidentityprovider_11 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {F9318CEF-99DF-4D2C-B9D4-9B99CDA9403A} - System32\Tasks\microsoft-microsoftofficehub_17-6801 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {FB3314F0-56DD-42BC-B14C-87B131070CB3} - System32\Tasks\74L9650g982X206 => Rundll32.exe "C:\ProgramData\74L9650g982X206\74L9650g982X206.dll",LgXvVXtmR <==== ATTENTION Task: {FB91EFC7-C4D9-412A-9480-8036991C4AF5} - System32\Tasks\microsoft-microsoftofficehub_17 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: {FDEC9F06-E078-4011-AE5C-F80D3FA9B5A3} - System32\Tasks\microsoft-zunevideo_3-6 => Rundll32.exe "C:\ProgramData\10r99M5538B906\10r99M5538B906.dll",rMBufqnO Task: C:\Windows\Tasks\microsoft.job => rundll32.exe C:\ProgramData\10r99M5538B906\10r99M5538B906.dll ShortcutWithArgument: C:\Users\Nikko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlKBKjdhx0cXu8Cgw%2B5KVkU8dqdlJMPQSYtsZg6G1w2rzAdaJnlkSFvKgRT97XtJSg%3D ShortcutWithArgument: C:\Users\Nikko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlKBKjdhx0cXu8Cgw%2B5KVkU8dqdlJMPQSYtsZg6G1w2rzAdaJnlkSFvKgRT97XtJSg%3D ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlKBKjdhx0cXu8Cgw%2B5KVkU8dqdlJMPQSYtsZg6G1w2rzAdaJnlkSFvKgRT97XtJSg%3D ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlKBKjdhx0cXu8Cgw%2B5KVkU8dqdlJMPQSYtsZg6G1w2rzAdaJnlkSFvKgRT97XtJSg%3D C:\46376880623e42cfcd55ea4f741e1e C:\Program Files\KMSpico C:\ProgramData\10r99M5538B906 C:\ProgramData\54L8057a1316u509 C:\ProgramData\34L5152a7144u991 C:\ProgramData\74L9650g982X206 C:\ProgramData\agent.1495205962.bdinstall.bin C:\Windows\unins000.exe C:\Windows\unins000.dat C:\Windows\Temp\g2E56.tmp.exe C:\Windows\Temp\gE730.tmp.exe EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. ================== Zip: =================== "C:\ProgramData\10r99M5538B906" -> not found "C:\ProgramData\54L8057a1316u509" -> not found "C:\ProgramData\34L5152a7144u991" -> not found "C:\ProgramData\74L9650g982X206" -> not found =========== Zip: End =========== "C:\Windows\SysWOW64\GroupPolicy\Machine" => not found. Service KMSELDI => service not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{018D052C-940F-4DF4-9759-60575937D706} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftsolitairecollection_3 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftsolitairecollection_3 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{03511F69-C8F8-463B-A010-8007331D8DAC} => key not found. C:\Windows\System32\Tasks\microsoft-zunemusic_3-6-19261-0_x64__8wekyb3d8bbwe\music => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunemusic_3-6-19261-0_x64__8wekyb3d8bbwe\music => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{03774CE9-A6AC-48A7-A9BD-09E68B7D6ABD} => key not found. C:\Windows\System32\Tasks\microsoft-getstarted_3 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-getstarted_3 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{07EADF72-C7D6-4C98-8752-0C1033A0141E} => key not found. C:\Windows\System32\Tasks\temp\27fdeb85-4448-42b1-be9c-2a2ac639c0c0\dismhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\27fdeb85-4448-42b1-be9c-2a2ac639c0c0\dismhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0A1E50FD-17CD-44E3-972F-95925C10A125} => key not found. C:\Windows\System32\Tasks\microsoft-getstarted_3-11-3 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-getstarted_3-11-3 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0DBAA18F-0852-45A3-A404-CF4ED629206C} => key not found. C:\Windows\System32\Tasks\microsoft-zunemusic_3-6-19261 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunemusic_3-6-19261 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F5C7CB7-1AD7-4BF6-A91A-ACD88051FFE1} => key not found. C:\Windows\System32\Tasks\microsoft-zunemusic_3-6-19261-0_x64__8wekyb3d8bbwe\music-ui => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunemusic_3-6-19261-0_x64__8wekyb3d8bbwe\music-ui => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16967985-476E-47CB-B6FD-35D72670E89B} => key not found. C:\Windows\System32\Tasks\microsoft-windows => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windows => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18195E87-240C-4D83-96AE-21A144EFE720} => key not found. C:\Windows\System32\Tasks\microsoft-zunevideo_3-6-19281-0_x64__8wekyb3d8bbwe\video => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunevideo_3-6-19281-0_x64__8wekyb3d8bbwe\video => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BB71526-7352-4539-951B-6DCEFD71C138} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftsolitairecollection_3-9-5100 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftsolitairecollection_3-9-5100 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{221614D6-DBCF-4262-B078-2D3E1FB04946} => key not found. C:\Windows\System32\Tasks\microsoft-windows-photos_16-511-8780-0_x64__8wekyb3d8bbwe\microsoft-photos => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windows-photos_16-511-8780-0_x64__8wekyb3d8bbwe\microsoft-photos => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{23896A7A-8F89-492F-9CD0-837F5462A80A} => key not found. C:\Windows\System32\Tasks\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore-mobile-exe => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore-mobile-exe => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{25C48FAB-19C7-4BD4-A004-28565B1E917C} => key not found. C:\Windows\System32\Tasks\microsoft-windowsstore_11606-1001 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowsstore_11606-1001 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28EF88B8-3A8F-48CE-BF72-4EE26C28475A} => key not found. C:\Windows\System32\Tasks\microsoft\onedrive\onedrivestandaloneupdater => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft\onedrive\onedrivestandaloneupdater => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29646EE0-CAC8-4017-93DE-4F4B12E0AA4F} => key not found. C:\Windows\System32\Tasks\microsoft-windowsstore_11606-1001-39 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowsstore_11606-1001-39 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C8DB097-32C6-4238-B498-189C76DFDF15} => key not found. C:\Windows\System32\Tasks\10r99M5538B906-dll => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\10r99M5538B906-dll => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CEE1BD3-C1D0-43A1-8D8D-7E9224F1F669} => key not found. C:\Windows\System32\Tasks\temp\cc7342c8-62c6-4e9b-b77e-644b14ffb5ee\dismhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\cc7342c8-62c6-4e9b-b77e-644b14ffb5ee\dismhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3048E4EB-7FD8-43AF-9454-A1914859E9C2} => key not found. C:\Windows\System32\Tasks\microsoft-zunevideo_3-6-19281 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunevideo_3-6-19281 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{369A1211-6270-42EE-A326-66304C625741} => key not found. C:\Windows\System32\Tasks\microsoft-zunemusic_3 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunemusic_3 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{39B86C56-8DA7-4350-AA68-4725505442D0} => key not found. C:\Windows\System32\Tasks\temp\05d29617-a21f-4a17-85e9-2afa6c34c230\dismhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\05d29617-a21f-4a17-85e9-2afa6c34c230\dismhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3A68F28D-E536-4011-87E6-AD61AEA6CFD4} => key not found. C:\Windows\System32\Tasks\temp\704ee166-fadc-4c19-b45d-ec12f1ae7f8d\dismhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\704ee166-fadc-4c19-b45d-ec12f1ae7f8d\dismhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3CA420CD-D717-416F-8D32-08D1F6A819F2} => key not found. C:\Windows\System32\Tasks\microsoft-windowsstore_11606 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowsstore_11606 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{406BC69F-230C-4C73-A18A-1825A339C082} => key not found. C:\Windows\System32\Tasks\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4A46ACD4-E913-4D0F-B886-5CF188B78A93} => key not found. C:\Windows\System32\Tasks\microsoft-getstarted_3-11 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-getstarted_3-11 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F08A610-B7BA-4140-A963-A51A3221962B} => key not found. C:\Windows\System32\Tasks\10r99M5538B906 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\10r99M5538B906 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5496D40A-5566-41A8-A8DC-D3C1D136D877} => key not found. C:\Windows\System32\Tasks\temp\b969624a-aad9-4e43-9776-1276e564d6fe\dismhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\b969624a-aad9-4e43-9776-1276e564d6fe\dismhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57C01E6B-EFC9-4BB7-9352-64144947222F} => key not found. C:\Windows\System32\Tasks\microsoft-skypeapp_11 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-skypeapp_11 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{59C8A723-9568-4BD9-98DB-6B0E6EE286B3} => key not found. C:\Windows\System32\Tasks\microsoft-skypeapp_11-4-86-0_x64__kzf8qxf38zg5c\skypehost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-skypeapp_11-4-86-0_x64__kzf8qxf38zg5c\skypehost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A56CD99-40EA-447E-9AB3-6B43BE2238D7} => key not found. C:\Windows\System32\Tasks\microsoft-zunevideo_3-6-19281-0_x64__8wekyb3d8bbwe\video-ui => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunevideo_3-6-19281-0_x64__8wekyb3d8bbwe\video-ui => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5C7EA3CB-C81B-43CE-99E8-DF8DAE9B5864} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\hubtaskhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\hubtaskhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CEE5D13-923A-40ED-947D-13E2C617F840} => key not found. C:\Windows\System32\Tasks\microsoft-skypeapp_11-4-86 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-skypeapp_11-4-86 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{61C62616-BA9A-40C2-A54D-A62D9761F53E} => key not found. C:\Windows\System32\Tasks\microsoft-skypeapp_11-4 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-skypeapp_11-4 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{639A2619-A7F1-4CCF-94B2-4003FC73D3D6} => key not found. C:\Windows\System32\Tasks\microsoft\onedrive\onedrivestandaloneupdater-exe => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft\onedrive\onedrivestandaloneupdater-exe => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CD977DC-BBB8-43F6-B397-DE842A7B7CB5} => key not found. C:\Windows\System32\Tasks\microsoft-zunemusic_3-6 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunemusic_3-6 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DD2B411-7F18-492C-A8D5-5CBF691C9782} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftsolitairecollection_3-9 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftsolitairecollection_3-9 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74773C59-D4C7-4383-B9B5-ACDD94487F9B} => key not found. C:\Windows\System32\Tasks\temp\fa038e11-592f-4690-8f25-283589f0ce02\dismhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\fa038e11-592f-4690-8f25-283589f0ce02\dismhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F0C361B-50D2-424F-9635-A4E4A7E0613D} => key not found. C:\Windows\System32\Tasks\microsoft-windowscommunicationsapps_17-6868 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowscommunicationsapps_17-6868 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8088AF96-0605-4166-AAF4-ABD3060F0730} => key not found. C:\Windows\System32\Tasks\microsoft-xboxidentityprovider_11-18 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-xboxidentityprovider_11-18 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{81840194-CFE2-4736-BD38-6EDBE971BCEA} => key not found. C:\Windows\System32\Tasks\microsoft\onedrive\onedrive => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft\onedrive\onedrive => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{81FE52D7-DBA1-4A2E-8636-1606A02434DA} => key not found. C:\Windows\System32\Tasks\microsoft-windows-photos_16-511 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windows-photos_16-511 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85FDA849-5160-4D35-89AB-2ACB2D18DFC8} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftofficehub_17-6801-23751 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftofficehub_17-6801-23751 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A46E983-1A76-4A32-A19F-21A2AA23207D} => key not found. C:\Windows\System32\Tasks\microsoft-windows-photos_16-511-8780-0_x64__8wekyb3d8bbwe\microsoft => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windows-photos_16-511-8780-0_x64__8wekyb3d8bbwe\microsoft => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{918FE38F-BD8C-42FF-9EAA-1DF843B6E50B} => key not found. C:\Windows\System32\Tasks\microsoft-windowscommunicationsapps_17 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowscommunicationsapps_17 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{952EB4E6-B134-42E2-B305-06CCEABAEBAD} => key not found. C:\Windows\System32\Tasks\microsoft-windows-photos_16 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windows-photos_16 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9623E1BF-4EEB-48ED-9986-A834A34ED4E7} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\ohub => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\ohub => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABD3FE53-3293-4FB7-9893-FC364BD0938C} => key not found. C:\Windows\System32\Tasks\microsoft\onedrive\update\onedrivesetup => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft\onedrive\update\onedrivesetup => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B16871D2-18E6-467A-A230-951405500EA4} => key not found. C:\Windows\System32\Tasks\54L8057a1316u509 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\54L8057a1316u509 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B597E75C-0E95-44A7-B79C-8EA9C46FF792} => key not found. C:\Windows\System32\Tasks\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore-mobile => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowsstore_11606-1001-39-0_x64__8wekyb3d8bbwe\winstore-mobile => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BB43AED6-9F6B-41BB-9ACD-F2522DDD3F46} => key not found. C:\Windows\System32\Tasks\microsoft-getstarted_3-11-3-0_x64__8wekyb3d8bbwe\whatsnew-store => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-getstarted_3-11-3-0_x64__8wekyb3d8bbwe\whatsnew-store => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BC3581B1-116F-461B-ABBC-0A9D67761EF1} => key not found. C:\Windows\System32\Tasks\microsoft-xboxidentityprovider_11-18-16009 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-xboxidentityprovider_11-18-16009 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE591FF7-2896-4781-BEFC-2261E4A93B92} => key not found. C:\Windows\System32\Tasks\temp\34b9f347-f515-475e-a994-ffbb5d059c44\dismhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\34b9f347-f515-475e-a994-ffbb5d059c44\dismhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEC27BA1-9E2F-4B68-B225-BD60377657B3} => key not found. C:\Windows\System32\Tasks\microsoft-windows-photos_16-511-8780 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windows-photos_16-511-8780 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7139AB8-B4DA-4ABC-8A82-D9ED02287D49} => key not found. C:\Windows\System32\Tasks\microsoft-getstarted_3-11-3-0_x64__8wekyb3d8bbwe\whatsnew => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-getstarted_3-11-3-0_x64__8wekyb3d8bbwe\whatsnew => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCC73B57-1B34-4FBC-9D5E-551D50DCB616} => key not found. C:\Windows\System32\Tasks\microsoft-xboxidentityprovider_11-18-16009-0_x64__8wekyb3d8bbwe\xboxidp => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-xboxidentityprovider_11-18-16009-0_x64__8wekyb3d8bbwe\xboxidp => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0DDEC71-82B1-46CB-9183-85A05D88A001} => key not found. C:\Windows\System32\Tasks\microsoft-zunevideo_3 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunevideo_3 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D142F9FB-A5B2-485D-AA33-EBB5E5F5C11E} => key not found. C:\Windows\System32\Tasks\microsoft-windowscommunicationsapps_17-6868-41201 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowscommunicationsapps_17-6868-41201 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D4D5FFC3-599E-4C56-9473-A8A26D41CA22} => key not found. C:\Windows\System32\Tasks\34L5152a7144u991 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\34L5152a7144u991 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D826FF64-83CB-4DAB-80A8-492CB2274D78} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftsolitairecollection_3-9-5100-0_x64__8wekyb3d8bbwe\solitaire => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftsolitairecollection_3-9-5100-0_x64__8wekyb3d8bbwe\solitaire => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D89192E9-70B5-4AC0-A8E4-A9302B16F054} => key not found. C:\Windows\System32\Tasks\temp\05d29617-a21f-4a17-85e9-2afa6c34c230\dismhost-exe => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\05d29617-a21f-4a17-85e9-2afa6c34c230\dismhost-exe => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE0DCD12-6AA8-4839-9171-8FE655D4F5D4} => key not found. C:\Windows\System32\Tasks\microsoft-windowscommunicationsapps_17-6868-41201-0_x64__8wekyb3d8bbwe\hxtsr => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-windowscommunicationsapps_17-6868-41201-0_x64__8wekyb3d8bbwe\hxtsr => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E918F101-5C97-48E4-B5FB-6D1744F54278} => key not found. C:\Windows\System32\Tasks\temp\5f05f758-3d5e-49a2-baa7-e1dcee77c126\dismhost => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp\5f05f758-3d5e-49a2-baa7-e1dcee77c126\dismhost => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA55DF75-2864-4E1B-8637-6D1FFCFD8E70} => key not found. C:\Windows\System32\Tasks\AutoPico Daily Restart => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2D06F65-9A08-4FC1-8443-4C4AC87AE54A} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\ohub-exe => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftofficehub_17-6801-23751-0_x64__8wekyb3d8bbwe\ohub-exe => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7F304A0-08DF-4611-A8A4-F31C0ACD791F} => key not found. C:\Windows\System32\Tasks\microsoft-xboxidentityprovider_11 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-xboxidentityprovider_11 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9318CEF-99DF-4D2C-B9D4-9B99CDA9403A} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftofficehub_17-6801 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftofficehub_17-6801 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FB3314F0-56DD-42BC-B14C-87B131070CB3} => key not found. C:\Windows\System32\Tasks\74L9650g982X206 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\74L9650g982X206 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FB91EFC7-C4D9-412A-9480-8036991C4AF5} => key not found. C:\Windows\System32\Tasks\microsoft-microsoftofficehub_17 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-microsoftofficehub_17 => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDEC9F06-E078-4011-AE5C-F80D3FA9B5A3} => key not found. C:\Windows\System32\Tasks\microsoft-zunevideo_3-6 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\microsoft-zunevideo_3-6 => key not found. C:\Windows\Tasks\microsoft.job => not found. C:\Users\Nikko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Shortcut argument removed successfully. C:\Users\Nikko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => Shortcut argument removed successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => Shortcut argument removed successfully. C:\Users\Public\Desktop\Google Chrome.lnk => Shortcut argument removed successfully. "C:\46376880623e42cfcd55ea4f741e1e" => not found. "C:\Program Files\KMSpico" => not found. "C:\ProgramData\10r99M5538B906" => not found. "C:\ProgramData\54L8057a1316u509" => not found. "C:\ProgramData\34L5152a7144u991" => not found. "C:\ProgramData\74L9650g982X206" => not found. "C:\ProgramData\agent.1495205962.bdinstall.bin" => not found. "C:\Windows\unins000.exe" => not found. "C:\Windows\unins000.dat" => not found. "C:\Windows\Temp\g2E56.tmp.exe" => not found. "C:\Windows\Temp\gE730.tmp.exe" => not found. =========== EmptyTemp: ========== BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10679523 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 7442552 B Edge => 0 B Chrome => 13405924 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 3810 B defaultuser0 => 0 B Nikko => 48459 B Administrator => 0 B RecycleBin => 0 B EmptyTemp: => 30.1 MB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 18:58:35 ====

yep the 2 malwarebytes cert

Still the same...

i've tried rebooting into safemode but still the same Setup Log 2017-05-23 #002.txt Setup Log 2017-05-23 #003.txt Setup Log 2017-05-23 #001.txt

anyone?