Fix result of Farbar Recovery Scan Tool (x64) Version: 26-04-2020 Ran by Gianna Catalina (28-04-2020 08:10:25) Run:2 Running from C:\Users\Gianna Catalina\Desktop Loaded Profiles: Gianna Catalina (Available Profiles: Gianna Catalina) Boot Mode: Normal ============================================== fixlist content: ***************** Start CloseProcesses: CreateRestorePoint: HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.122\Installer\chrmstp.exe [2020-04-25] (Google LLC -> Google LLC) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] 2020-04-26 19:16 - 2020-04-26 19:16 - 000004382 _____ C:\Users\Gianna Catalina\Desktop\eset.txt 2020-04-26 16:04 - 2020-04-26 16:04 - 000000753 _____ C:\Users\Gianna Catalina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk 2020-04-26 16:04 - 2020-04-26 16:04 - 000000636 _____ C:\Users\Gianna Catalina\Desktop\ESET Online Scanner.lnk 2020-04-26 16:04 - 2020-04-26 16:04 - 000000000 ____D C:\Users\Gianna Catalina\AppData\Local\ESET 2020-04-26 16:03 - 2020-04-26 16:02 - 014566496 _____ (ESET spol. s r.o.) C:\Users\Gianna Catalina\Desktop\esetonlinescanner.exe 2020-04-26 15:58 - 2020-04-26 16:02 - 014566496 _____ (ESET spol. s r.o.) C:\Users\Gianna Catalina\Downloads\esetonlinescanner.exe ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File AlternateDataStreams: C:\ProgramData\TEMP:AEC0AC81 [137] FirewallRules: [TCP Query User{15817AF6-3E5D-4C4E-A25C-04FD1E66EEC4}C:\users\gianna catalina\appdata\local\temp\kmsnano\qemu-system-i386.exe] => (Allow) C:\users\gianna catalina\appdata\local\temp\kmsnano\qemu-system-i386.exe No File FirewallRules: [UDP Query User{4C71E44B-04ED-4409-8303-875FBFF5E5A4}C:\users\gianna catalina\appdata\local\temp\kmsnano\qemu-system-i386.exe] => (Allow) C:\users\gianna catalina\appdata\local\temp\kmsnano\qemu-system-i386.exe No File CMD: ipconfig /flushdns CMD: ipconfig /renew CMD: bitsadmin /reset /allusers CMD: netsh winsock reset CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset RemoveProxy: EmptyTemp: Hosts: END ***************** Processes closed successfully.