Fix result of Farbar Recovery Scan Tool (x64) Version: 03-02-2023 Ran by nickj (05-02-2023 18:50:42) Run:2 Running from C:\Users\nickj\Downloads\log Loaded Profiles: nickj Boot Mode: Normal ============================================== fixlist content: ***************** Start:: CreateRestorePoint: CloseProcesses: Avast Update Helper MSCONFIG\Services: avast => 2 MSCONFIG\Services: avastm => 3 MSCONFIG\Services: AvastSecureBrowserElevationService => 3 HKU\S-1-5-21-3323940460-2476448031-453550397-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_CFAAD7198488C610079C0286AEB9E63F" (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Temp\ose00000.exe Task: {9A423570-A182-4C4D-B0E0-2785A875CB1C} - System32\Tasks\{2B3E483C-6661-4E04-8FF4-C7FCE7D864AE} => C:\Program Files (x86)\east-tec Eraser\etEraser.exe (No File) Task: {538D9A45-4551-42A7-8DB8-FA1CD3228A1A} - System32\Tasks\Firefox Default Browser Agent 255DA52F89B9D88E => C:\Users\nickj\AppData\Roaming\bcetrtf [65440 2022-10-14] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION KMSauto.net (HKLM-x32\...\{6A2B3E01-92B9-4E14-A6A4-59AD5F9479FF}) (Version: 1.0.0 - KMSauto.net) 2023-01-22 18:02 - 2023-01-22 18:02 - 000001622 _____ C:\Users\nickj\Desktop\Activation - Shortcut.lnk <-- deze zal hij zelf wel gemaakt hebben. 2023-01-22 17:51 - 2023-02-01 17:15 - 000000000 ____D C:\Users\nickj\AppData\Roaming\xzverbre 2023-01-22 17:51 - 2023-01-22 18:01 - 000000000 ____D C:\Users\nickj\AppData\Roaming\ytytyrbre 2023-01-22 17:51 - 2023-01-22 17:51 - 000003728 _____ C:\Windows\system32\Tasks\Firefox Default Browser Agent 255DA52F89B9D88E 2023-01-22 17:51 - 2023-01-22 17:51 - 000000000 ____D C:\Users\nickj\Documents\Custom Office Templates 2023-01-22 17:50 - 2023-02-01 17:15 - 000000000 ____D C:\Users\nickj\AppData\Roaming\Meow 2023-01-22 17:50 - 2023-01-22 19:26 - 000000000 ____D C:\Users\nickj\AppData\Roaming\Colors 2023-01-22 17:50 - 2023-01-22 17:50 - 000000000 ____D C:\Users\Public\Docs 2023-01-22 17:50 - 2023-01-22 17:50 - 000000000 ____D C:\Users\nickj\AppData\Local\Yandex 2023-01-22 17:49 - 2023-02-01 17:15 - 000000000 ____D C:\Users\nickj\AppData\Roaming\ViperFolder 2023-01-22 17:49 - 2023-01-22 18:01 - 000000000 ____D C:\Users\nickj\AppData\Roaming\Cached files 2023-01-22 17:49 - 2023-01-22 17:49 - 000002459 _____ C:\Users\nickj\Desktop\Word.lnk 2023-01-22 17:47 - 2023-01-22 18:01 - 000000000 ____D C:\Users\nickj\AppData\Roaming\License 2023-01-22 17:47 - 2023-01-22 17:47 - 000000000 ____D C:\Program Files (x86)\KMSauto.net EmptyTemp: Reboot: End:: ***************** Restore point was successfully created. Processes closed successfully. Avast Update Helper => Error: No automatic fix found for this entry. HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\avast => removed successfully HKLM\System\CurrentControlSet\Services\avast => not found HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\avastm => removed successfully HKLM\System\CurrentControlSet\Services\avastm => not found HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\AvastSecureBrowserElevationService => removed successfully HKLM\System\CurrentControlSet\Services\AvastSecureBrowserElevationService => not found "HKU\S-1-5-21-3323940460-2476448031-453550397-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\AvastBrowserAutoLaunch_CFAAD7198488C610079C0286AEB9E63F" => removed successfully "HKU\S-1-5-21-3323940460-2476448031-453550397-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\AvastBrowserAutoLaunch_CFAAD7198488C610079C0286AEB9E63F" => not found C:\Windows\Temp\ose00000.exe => No running process found "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9A423570-A182-4C4D-B0E0-2785A875CB1C}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A423570-A182-4C4D-B0E0-2785A875CB1C}" => removed successfully C:\Windows\System32\Tasks\{2B3E483C-6661-4E04-8FF4-C7FCE7D864AE} => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2B3E483C-6661-4E04-8FF4-C7FCE7D864AE}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{538D9A45-4551-42A7-8DB8-FA1CD3228A1A}" => not found "C:\Windows\System32\Tasks\Firefox Default Browser Agent 255DA52F89B9D88E" => not found "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Firefox Default Browser Agent 255DA52F89B9D88E" => not found KMSauto.net (HKLM-x32\...\{6A2B3E01-92B9-4E14-A6A4-59AD5F9479FF}) (Version: 1.0.0 - KMSauto.net) => Error: No automatic fix found for this entry. "C:\Users\nickj\Desktop\Activation - Shortcut.lnk <-- deze zal hij zelf wel gemaakt hebben." => not found C:\Users\nickj\AppData\Roaming\xzverbre => moved successfully C:\Users\nickj\AppData\Roaming\ytytyrbre => moved successfully "C:\Windows\system32\Tasks\Firefox Default Browser Agent 255DA52F89B9D88E" => not found C:\Users\nickj\Documents\Custom Office Templates => moved successfully C:\Users\nickj\AppData\Roaming\Meow => moved successfully C:\Users\nickj\AppData\Roaming\Colors => moved successfully C:\Users\Public\Docs => moved successfully C:\Users\nickj\AppData\Local\Yandex => moved successfully C:\Users\nickj\AppData\Roaming\ViperFolder => moved successfully C:\Users\nickj\AppData\Roaming\Cached files => moved successfully C:\Users\nickj\Desktop\Word.lnk => moved successfully C:\Users\nickj\AppData\Roaming\License => moved successfully C:\Program Files (x86)\KMSauto.net => moved successfully =========== EmptyTemp: ========== FlushDNS => completed BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16996709 B Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B Windows/system/drivers => 32745171 B Edge => 0 B Chrome => 392835632 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 7750 B NetworkService => 7750 B nickj => 22620593 B RecycleBin => 4291387940 B EmptyTemp: => 4.4 GB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 18:51:27 ====