Jump to content

Worrasaetl

Members
  • Content Count

    3
  • Joined

  • Last visited

About Worrasaetl

  • Rank
    New Member
  1. Sorry Aura for the late reply. Everything is good and ok now. Thank you for your help in fixing.
  2. Thank for the assistance Aura! This is the fix log. Fix result of Farbar Recovery Scan Tool (x64) Version: 02.01.2018 Ran by flame (02-01-2018 20:02:43) Run:1 Running from C:\Users\flame\Desktop Loaded Profiles: flame & (Available Profiles: flame) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: CreateRestorePoint: DeleteKey: HKLM\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce DeleteKey: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce IFEO\OSppSvc.exe: [Debugger] KMS-R@1nHook.exe IFEO\SppExtComObj.exe: [Debugger] KMS-R@1nHook.exe HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage HKU\S-1-5-21-646626082-829203541-2596788180-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms} CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms} S2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [X] Task: {0723F33F-9DC9-466C-A02C-7EFFA281EDBA} - System32\Tasks\R@1n-KMS\Office16ProPlus => wmic [Argument = path SoftwareLicensingProduct where (ID="d450596f-894d-49e0-966a-fd39ed4c4c64") call Activate] Task: {BCA64CE2-8246-4B9C-AA95-7449A20015C3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant printer driver installation => C:\Windows\TEMP\sp80918.exe <==== ATTENTION FirewallRules: [{D9C8DF77-CD11-42C7-BB49-F63D3B5C8432}] => (Allow) C:\Windows\KMS-R@1n.exe FirewallRules: [{0E70694D-5222-4CB3-9A43-E2B7D3F960A6}] => (Allow) C:\Windows\KMS-R@1n.exe C:\Windows\KMS-R@1n.exe EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. HKLM\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => key not found HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => key not found HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => key not found DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => Error: No automatic fix found for this entry. DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => Error: No automatic fix found for this entry. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\OSppSvc.exe" => removed successfully "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\SppExtComObj.exe" => removed successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKU\S-1-5-21-646626082-829203541-2596788180-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP => Error: No automatic fix found for this entry. HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP => Error: No automatic fix found for this entry. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKLM\Software\Wow6432Node\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found "HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f} => key not found HKLM\Software\Classes\CLSID\{2211d4a5-48d0-47f5-a7cd-81e861470f7f} => key not found SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} => Error: No automatic fix found for this entry. "Chrome DefaultSearchURL" => not found "Chrome DefaultSuggestURL" => not found "HKLM\System\CurrentControlSet\Services\KMS-R@1n" => removed successfully KMS-R@1n => service removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0723F33F-9DC9-466C-A02C-7EFFA281EDBA} => could not remove key. ErrorCode1: 0x00000002 "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0723F33F-9DC9-466C-A02C-7EFFA281EDBA}" => removed successfully C:\WINDOWS\System32\Tasks\R@1n-KMS\Office16ProPlus => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\R@1n-KMS\Office16ProPlus" => removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BCA64CE2-8246-4B9C-AA95-7449A20015C3}" => removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BCA64CE2-8246-4B9C-AA95-7449A20015C3}" => removed successfully C:\WINDOWS\System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant printer driver installation => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\HP Support Assistant printer driver installation" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D9C8DF77-CD11-42C7-BB49-F63D3B5C8432}" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0E70694D-5222-4CB3-9A43-E2B7D3F960A6}" => removed successfully "C:\Windows\KMS-R@1n.exe" => not found =========== EmptyTemp: ========== BITS transfer queue => 7888896 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10896456 B Java, Flash, Steam htmlcache => 372473845 B Windows/system/drivers => 6906308 B Edge => 47691358 B Chrome => 1065620687 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 6656 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 117832 B flame => 917770263 B RecycleBin => 83327423 B EmptyTemp: => 2.3 GB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 20:08:42 ====
  3. Hello everyone,I would like to buy a legit Microsoft office program and would like to remove the KMS-R@1N from my notebook to be able to register and license the program. I have attached the Addition and FRST.Thank for the assistance in advance! Threat Scan Log.txt FRST.txt Addition.txt
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.