This topic is locked
Farbar Recovery Scan Tool - Fix
- Highlight the contents of the below code box and press Ctrl + C on your keyboard:
Start::
SystemRestore: On
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-259350032-3561555504-2751918716-1001\...\MountPoints2: {5f571127-6f68-11ea-99fa-b05216366f28} - "E:\startme.exe"
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3331316&octid=EB_ORIGINAL_CTID&ISID=MCFFD7245-7BC9-49DC-B424-F05055F63456&SearchSource=55&CUI=&UM=6&UP=SPA78BD1B1-1931-4ADE-8DDA-972D132E8B49&SSPV="
CHR HKLM\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files (x86)\EagleGet\addon\[email protected] <not found>
CHR HKU\S-1-5-21-259350032-3561555504-2751918716-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hdkdmoacnkphoadmfidlhfdobieblphn] - C:\Program Files (x86)\EagleGet\addon\eagleget_newtab.crx <not found>
2020-03-27 12:08 - 2020-03-27 12:07 - 004146112 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgremoverx.exe
AS: AVG Antivirus (Disabled - Out of date) {A3C8941D-8036-3856-D9BB-709D4A2A7EAC}
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
FirewallRules: [{031844B1-5B4B-4DB0-B173-133C040D4159}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS4616\HPDiagnosticCoreUI.exe No File
FirewallRules: [{6089B0DA-EA15-4C2E-92BB-1E3E2335EBE7}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS4616\HPDiagnosticCoreUI.exe No File
FirewallRules: [{966BF1A5-A91B-43E6-BA94-5F8F5C62B5E4}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS2F17\HPDiagnosticCoreUI.exe No File
FirewallRules: [{D4A1DFA6-B891-49CB-8D3D-C1FF6537B91C}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS2F17\HPDiagnosticCoreUI.exe No File
FirewallRules: [{A1783E92-96B7-4DAF-A4C6-9F08D085D95A}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS2E32\HPDiagnosticCoreUI.exe No File
FirewallRules: [{FA30F225-E0F4-469C-8071-7A5D28B71F7A}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS2E32\HPDiagnosticCoreUI.exe No File
FirewallRules: [{B743FC8D-08F0-4D31-A0CE-CC683B9A6E26}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS18C7\HPDiagnosticCoreUI.exe No File
FirewallRules: [{7D27C104-060E-4AB2-BEB7-2680D2F4CAED}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS18C7\HPDiagnosticCoreUI.exe No File
FirewallRules: [{578E924B-99EB-4966-A056-517A471901A7}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS17F9\HPDiagnosticCoreUI.exe No File
FirewallRules: [{A62D9C6C-8958-4DFB-A52B-C1E360929F2D}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS17F9\HPDiagnosticCoreUI.exe No File
FirewallRules: [UDP Query User{CB432846-FB5D-4F26-BA9D-C6C34A931716}C:\users\beth\desktop\sdio_update\sdio_x64_r701.exe] => (Allow) C:\users\beth\desktop\sdio_update\sdio_x64_r701.exe No File
FirewallRules: [TCP Query User{B5A299A4-BC03-4087-93D5-17960A886D52}C:\users\beth\desktop\sdio_update\sdio_x64_r701.exe] => (Allow) C:\users\beth\desktop\sdio_update\sdio_x64_r701.exe No File
FirewallRules: [{711A1576-DBCB-44DE-AC34-7F75F765A71E}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS059C\HPDiagnosticCoreUI.exe No File
FirewallRules: [{3324C49B-AF81-49E4-A65A-34D01E4AB967}] => (Allow) C:\Users\BETH\AppData\Local\Temp\7zS059C\HPDiagnosticCoreUI.exe No File
FirewallRules: [UDP Query User{AF782DA4-F34E-4617-80A6-48DA4E9686E2}C:\users\beth\appdata\roaming\sky\sky go\sky go.exe] => (Allow) C:\users\beth\appdata\roaming\sky\sky go\sky go.exe No File
FirewallRules: [TCP Query User{AB58FED1-6473-4741-B888-21CEFF736010}C:\users\beth\appdata\roaming\sky\sky go\sky go.exe] => (Allow) C:\users\beth\appdata\roaming\sky\sky go\sky go.exe No File
FirewallRules: [TCP Query User{324EE441-62F0-4718-9736-6713B9A3D840}F:\documents\crypto\monero-gui-0.10.3.1-beta2\monerod.exe] => (Allow) F:\documents\crypto\monero-gui-0.10.3.1-beta2\monerod.exe No File
FirewallRules: [UDP Query User{50C4BFAC-5581-4A69-A3E8-CDF9E3CD4DF2}F:\documents\crypto\monero-gui-0.10.3.1-beta2\monerod.exe] => (Allow) F:\documents\crypto\monero-gui-0.10.3.1-beta2\monerod.exe No File
FirewallRules: [TCP Query User{B56344F2-400C-4447-9DE8-EFC3A6CE8CBA}F:\documents\crypto\monero-gui-0.10.3.1-beta2\monero-wallet-gui.exe] => (Allow) F:\documents\crypto\monero-gui-0.10.3.1-beta2\monero-wallet-gui.exe No File
FirewallRules: [UDP Query User{14EEFBB1-31AC-42D4-8C68-E300793B2CA0}F:\documents\crypto\monero-gui-0.10.3.1-beta2\monero-wallet-gui.exe] => (Allow) F:\documents\crypto\monero-gui-0.10.3.1-beta2\monero-wallet-gui.exe No File
FirewallRules: [TCP Query User{A8EE502F-DB07-4825-B766-003381E8B1C6}F:\documents\crypto\monero-gui-0.10.3.1-beta2\monerod.exe] => (Allow) F:\documents\crypto\monero-gui-0.10.3.1-beta2\monerod.exe No File
FirewallRules: [UDP Query User{DA5A6993-B4E5-48CF-BA52-BFE848308991}F:\documents\crypto\monero-gui-0.10.3.1-beta2\monerod.exe] => (Allow) F:\documents\crypto\monero-gui-0.10.3.1-beta2\monerod.exe No File
FirewallRules: [TCP Query User{9BF470A1-FBA7-4B56-95DF-672EB8EA48CC}F:\documents\crypto\monero-gui-0.10.3.1-beta2\monero-wallet-gui.exe] => (Allow) F:\documents\crypto\monero-gui-0.10.3.1-beta2\monero-wallet-gui.exe No File
FirewallRules: [UDP Query User{C4C60CA7-3AA2-48C2-9EC0-9E4C20798007}F:\documents\crypto\monero-gui-0.10.3.1-beta2\monero-wallet-gui.exe] => (Allow) F:\documents\crypto\monero-gui-0.10.3.1-beta2\monero-wallet-gui.exe No File
EmptyTemp:
End::
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
- Double-click FRST.exe/FRST64.exe to run it.
- Press the Fix button just once and wait.
Note: No need to paste the script into FRST. - Restart the computer if prompted.
- When the fix is complete FRST will generate a log in the same location it was run from (Fixlog.txt)
- Please copy and paste its contents into your reply.
---------------------------------------------------
In your next reply, please include:
- Fixlog.txt
- Let me know how the computer is doing.
Fixlog.txt below. Please let me know if you think this has cracked it. If this really is fixed, you have totally saved my sanity and I need to buy you a virtual beer, or a crate of it lol.
So far everything else seems cool as well. Thank you sooooo much! Is this fixed now? Anything else I should do? Apart from thank you a thousand times....
Answered
Sign In
Create Account
