Fix result of Farbar Recovery Scan Tool (x64) Version: 17-09-2017 01
Ran by Tyger (18-09-2017 19:59:01) Run:1
Running from C:\Users\Tyger\Desktop
Loaded Profiles: Tyger & (Available Profiles: Tyger)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
IFEO\OSppSvc.exe: [Debugger] KMS-R@1nHook.exe
IFEO\SppExtComObj.exe: [Debugger] KMS-R@1nHook.exe
S4 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2016-10-25] () [File not signed]
Task: {4FA63A46-C87F-4184-AC1F-3C2519B4FE05} - System32\Tasks\R@1n-KMS\Windows64Professional => wmic [Argument = path SoftwareLicensingProduct where (ID="2de67392-b7a7-462a-b1ca-108dd189f588") call Activate]
AlternateDataStreams: C:\Users\Tyger\AppData\Local\4XlzwBThd1pkd5:3WOQs4FR1bvGfHXfK81fDTx [2300]
AlternateDataStreams: C:\Users\Tyger\AppData\Local\ROxg5IY2C3wRz:LCuu41Z0lwfqTV9WOy8rEU [2368]
MSCONFIG\Services: KMS-R@1n => 2
FirewallRules: [{9618DCB4-7D31-45CF-9A21-484E9C3ED3B2}] => (Allow) C:\Windows\KMS-R@1n.exe
FirewallRules: [{641C0ED3-E8BC-4A43-83F1-19A2A85ED60B}] => (Allow) C:\Windows\KMS-R@1n.exe
C:\ProgramData\462033
C:\ProgramData\462133
C:\ProgramData\402f589227669e58c0fcbd6e310f6c7ed68d95c7
C:\Users\Tyger\Downloads\ReimageRepair.exe
C:\WINDOWS\Reimage.ini
C:\Windows\KMS-R@1n.exe
C:\Windows\KMS-R@1nHook.exe
C:\Windows\KMS-R@1nHook.dll
EmptyTemp:
*****************
Processes closed successfully.
Error: (0) Failed to create a restore point.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\OSppSvc.exe => key removed successfully
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\SppExtComObj.exe => key removed successfully
HKLM\System\CurrentControlSet\Services\KMS-R@1n => key removed successfully
KMS-R@1n => service removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4FA63A46-C87F-4184-AC1F-3C2519B4FE05} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4FA63A46-C87F-4184-AC1F-3C2519B4FE05} => key removed successfully
C:\WINDOWS\System32\Tasks\R@1n-KMS\Windows64Professional => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\R@1n-KMS\Windows64Professional => key removed successfully
C:\Users\Tyger\AppData\Local\4XlzwBThd1pkd5 => ":3WOQs4FR1bvGfHXfK81fDTx" ADS removed successfully.
C:\Users\Tyger\AppData\Local\ROxg5IY2C3wRz => ":LCuu41Z0lwfqTV9WOy8rEU" ADS removed successfully.
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\KMS-R@1n => key removed successfully
HKLM\System\CurrentControlSet\Services\KMS-R@1n => key not found.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9618DCB4-7D31-45CF-9A21-484E9C3ED3B2} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{641C0ED3-E8BC-4A43-83F1-19A2A85ED60B} => value removed successfully
C:\ProgramData\462033 => moved successfully
C:\ProgramData\462133 => moved successfully
C:\ProgramData\402f589227669e58c0fcbd6e310f6c7ed68d95c7 => moved successfully
"C:\Users\Tyger\Downloads\ReimageRepair.exe" => not found.
C:\WINDOWS\Reimage.ini => moved successfully
C:\Windows\KMS-R@1n.exe => moved successfully
C:\Windows\KMS-R@1nHook.exe => moved successfully
"C:\Windows\KMS-R@1nHook.dll" => not found.
=========== EmptyTemp: ==========
BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 43878326 B
Java, Flash, Steam htmlcache => 420314960 B
Windows/system/drivers => 2238171 B
Edge => 5489674 B
Chrome => 175328616 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 46968 B
Tyger => 399804452 B
RecycleBin => 6869 B
EmptyTemp: => 1006.1 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 19:59:24 ====