Worrasaetl Posted January 2, 2018 ID:1195971 Share Posted January 2, 2018 Hello everyone,I would like to buy a legit Microsoft office program and would like to remove the KMS-R@1N from my notebook to be able to register and license the program. I have attached the Addition and FRST.Thank for the assistance in advance! Threat Scan Log.txt FRST.txt Addition.txt Link to post Share on other sites More sharing options...
Aura Posted January 2, 2018 ID:1195976 Share Posted January 2, 2018 Hi Worrasaetl, Follow the instructions below. Farbar Recovery Scan Tool (FRST) - Fix mode Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply. Download the attached fixlist.txt file, and save it on your Desktop (or wherever your FRST.exe/FRST64.exe executable is located) Right-click on the FRST executable and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users) Click on the Fix button On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad Copy and paste its content in your next reply fixlist.txt Link to post Share on other sites More sharing options...
Worrasaetl Posted January 3, 2018 Author ID:1196253 Share Posted January 3, 2018 Thank for the assistance Aura! This is the fix log. Fix result of Farbar Recovery Scan Tool (x64) Version: 02.01.2018 Ran by flame (02-01-2018 20:02:43) Run:1 Running from C:\Users\flame\Desktop Loaded Profiles: flame & (Available Profiles: flame) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: CreateRestorePoint: DeleteKey: HKLM\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce DeleteKey: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce IFEO\OSppSvc.exe: [Debugger] KMS-R@1nHook.exe IFEO\SppExtComObj.exe: [Debugger] KMS-R@1nHook.exe HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage HKU\S-1-5-21-646626082-829203541-2596788180-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms} CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms} S2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [X] Task: {0723F33F-9DC9-466C-A02C-7EFFA281EDBA} - System32\Tasks\R@1n-KMS\Office16ProPlus => wmic [Argument = path SoftwareLicensingProduct where (ID="d450596f-894d-49e0-966a-fd39ed4c4c64") call Activate] Task: {BCA64CE2-8246-4B9C-AA95-7449A20015C3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant printer driver installation => C:\Windows\TEMP\sp80918.exe <==== ATTENTION FirewallRules: [{D9C8DF77-CD11-42C7-BB49-F63D3B5C8432}] => (Allow) C:\Windows\KMS-R@1n.exe FirewallRules: [{0E70694D-5222-4CB3-9A43-E2B7D3F960A6}] => (Allow) C:\Windows\KMS-R@1n.exe C:\Windows\KMS-R@1n.exe EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. HKLM\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => key not found HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => key not found HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => key not found DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => Error: No automatic fix found for this entry. DeleteKey: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce => Error: No automatic fix found for this entry. "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\OSppSvc.exe" => removed successfully "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\SppExtComObj.exe" => removed successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKU\S-1-5-21-646626082-829203541-2596788180-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP => Error: No automatic fix found for this entry. HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP => Error: No automatic fix found for this entry. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKLM\Software\Wow6432Node\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found "HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found HKU\S-1-5-21-646626082-829203541-2596788180-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f} => key not found HKLM\Software\Classes\CLSID\{2211d4a5-48d0-47f5-a7cd-81e861470f7f} => key not found SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192011696 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 => Error: No automatic fix found for this entry. SearchScopes: HKU\S-1-5-21-646626082-829203541-2596788180-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01022018192015242 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyCtDtB0Bzy0EtAyB0BzzyBtDyB0F0EtN0D0Tzu0StCzyyCzytN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAyCzztDyBtBtAtGyC0B0EzztG0FtBtD0EtGtC0C0ByDtGzz0C0D0CyB0BtCyD0ByEyDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0E0FyByC0A0F0CtGyEyC0DyBtGyE0BtCtCtG0A0E0DzytGyB0AyBtCzz0C0BtAyD0BzztC2QtN0A0LzuyE%26cr%3D1593239990%26a%3Dwbf_ir_17_21%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms} => Error: No automatic fix found for this entry. "Chrome DefaultSearchURL" => not found "Chrome DefaultSuggestURL" => not found "HKLM\System\CurrentControlSet\Services\KMS-R@1n" => removed successfully KMS-R@1n => service removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0723F33F-9DC9-466C-A02C-7EFFA281EDBA} => could not remove key. ErrorCode1: 0x00000002 "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0723F33F-9DC9-466C-A02C-7EFFA281EDBA}" => removed successfully C:\WINDOWS\System32\Tasks\R@1n-KMS\Office16ProPlus => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\R@1n-KMS\Office16ProPlus" => removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BCA64CE2-8246-4B9C-AA95-7449A20015C3}" => removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BCA64CE2-8246-4B9C-AA95-7449A20015C3}" => removed successfully C:\WINDOWS\System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant printer driver installation => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\HP Support Assistant printer driver installation" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D9C8DF77-CD11-42C7-BB49-F63D3B5C8432}" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0E70694D-5222-4CB3-9A43-E2B7D3F960A6}" => removed successfully "C:\Windows\KMS-R@1n.exe" => not found =========== EmptyTemp: ========== BITS transfer queue => 7888896 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10896456 B Java, Flash, Steam htmlcache => 372473845 B Windows/system/drivers => 6906308 B Edge => 47691358 B Chrome => 1065620687 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 6656 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 117832 B flame => 917770263 B RecycleBin => 83327423 B EmptyTemp: => 2.3 GB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 20:08:42 ==== Link to post Share on other sites More sharing options...
Aura Posted January 3, 2018 ID:1196254 Share Posted January 3, 2018 Good. Was there anything else, or that was it? Link to post Share on other sites More sharing options...
Aura Posted January 6, 2018 ID:1197288 Share Posted January 6, 2018 Hi Worrasaetl, Are you still with me? Link to post Share on other sites More sharing options...
Worrasaetl Posted January 6, 2018 Author ID:1197290 Share Posted January 6, 2018 Sorry Aura for the late reply. Everything is good and ok now. Thank you for your help in fixing. Link to post Share on other sites More sharing options...
Aura Posted January 6, 2018 ID:1197291 Share Posted January 6, 2018 No problem, you're welcome! Stay safe Link to post Share on other sites More sharing options...
Aura Posted January 6, 2018 ID:1197292 Share Posted January 6, 2018 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts