Publicité
Publicité
Format du document : text/plain
Prévisualisation
Fix result of Farbar Recovery Scan Tool (x64) Version: 04-11-2016
Ran by hp (09-11-2016 15:30:27) Run:1
Running from C:\Users\hp\Desktop
Loaded Profiles: hp (Available Profiles: hp)
Boot Mode: Normal
==============================================
fixlist content:
*****************
start
CloseProcesses:
GroupPolicy: Restriction - Chrome
CHR HKLM\SOFTWARE\Policies\Google: Restriction
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://zh.wikipedia.org/zh-cn/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://zh.wikipedia.org/zh-cn/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-1592242826-1200034856-1619733032-1000 -> {B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2} URL = hxxp://www.baidu.com/s?wd={searchTerms}&ie={inputEncoding}&oe={outputEncoding}&abar=2&tn=33059180_cb&ch=33
SearchScopes: HKU\S-1-5-21-1592242826-1200034856-1619733032-1000 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://zh.wikipedia.org/zh-cn/wiki/Special:Search?search={searchTerms}
BHO-x32: No Name -> {4BF2CB0E-658A-442B-AC83-A64EC2150BFC} -> No File
BHO-x32: No Name -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> No File
BHO-x32: Windows Live ID 登录帮助程序 -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
Toolbar: HKLM-x32 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1592242826-1200034856-1619733032-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1592242826-1200034856-1619733032-1000 -> No Name - {65F8A3D2-4C22-4A33-9633-73167EAEEC45} - No File
FF Plugin-x32: @qq.com/npOpenPlatform -> C:\Program Files (x86)\Common Files\Tencent\OpenPlatform\3.0.0.3201\npQPMWebGamePlugin.dll [No File]
FF Plugin-x32: @sogou.com/SGDownloadPlugin -> C:\Program Files (x86)\SogouDownLoad\npdownload.dll [No File]
FF Plugin-x32: @tencent.com/npQQMailWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\npQQMailWebKit.dll [No File]
FF Plugin-x32: @tencent.com/nptxftnWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\nptxftnWebKit.dll [No File]
FF Plugin-x32: @xunlei.com/npxluser -> C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll [No File]
FF Plugin-x32: @xunlei.com/npxunlei;version=1.0.0.2 -> C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll [No File]
FF Plugin HKU\.DEFAULT: @1.qq.com/npqqwebgame -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.9\npqqwebgame.dll [No File]
FF Plugin HKU\S-1-5-21-1592242826-1200034856-1619733032-1000: @flashget.com/npfgplugin -> C:\Program Files (x86)\FlashGet Network\FlashGet 3\npfgplugin.dll [No File]
FF Plugin HKU\S-1-5-21-1592242826-1200034856-1619733032-1000: @xunlei.com/npxluser -> C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll [No File]
FF Plugin HKU\S-1-5-21-1592242826-1200034856-1619733032-1000: @xunlei.com/npxunlei;version=1.0.0.2 -> C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll [No File]
CHR dev: Chrome dev build detected!
CHR Extension: (Google 云端硬盘) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-25]
CHR Extension: (QQ音乐支持控件) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\eobojkjbpolpnaolkijihjkpmhieijhb [2016-11-06]
CHR Extension: (Google 文档的离线功能) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-25]
StartMenuInternet: 360Chrome -
StartMenuInternet: 360chrome.hp -
S3 bddlsvc; "C:\Users\hp\AppData\Roaming\baidu\BaiduRJDownloader\1.6.0.77\bddlsvc.exe" -r [X]
S3 LeService; "C:\Program Files (x86)\Letv\LeService.exe" [X]
S3 QQLiveService; C:\Program Files (x86)\Tencent\QQLive\9.8.876.0\LiveService.dll [X]
S2 QQRepair1525; "C:\Program Files (x86)\Tencent\QQPCMGR\QQRepair1525" [X]
S3 catchme; \??\C:\Users\hp\AppData\Local\Temp\catchme.sys [X]
S1 QMUdisk; \??\C:\Program Files (x86)\QQPCMgr\12.0.18066.222\QMUdisk64.sys [X]
S1 softaal; \??\C:\Program Files (x86)\QQPCMgr\12.0.18066.222\softaal64.sys [X]
S2 tsnethlpx64; \??\C:\Program Files (x86)\QQPCMgr\12.0.18066.222\TsNetHlpX64.sys [X]
2016-11-07 17:59 - 2013-12-17 21:06 - 00000000 ____D C:\ProgramData\Baofeng
2016-11-07 17:59 - 2012-07-25 12:30 - 00000000 ____D C:\ProgramData\Tencent
2016-11-06 17:38 - 2012-07-26 09:37 - 00000000 ____D C:\Program Files (x86)\360
2016-11-06 16:19 - 2013-10-01 16:17 - 00000000 __SHD C:\Users\hp\AppData\Roaming\360Quarant
2016-11-06 16:19 - 2013-10-01 16:17 - 00000000 __SHD C:\$360Section
2016-11-06 16:15 - 2012-07-26 09:53 - 00000000 ____D C:\Users\hp\AppData\Roaming\360Desktop
2016-11-06 16:02 - 2014-03-29 10:40 - 00000000 ____D C:\Users\hp\AppData\Roaming\Expert
2016-11-06 12:41 - 2015-07-04 17:04 - 00000000 ____D C:\Users\hp\AppData\Roaming\ytmediacenter
2016-10-28 20:23 - 2015-01-11 20:57 - 00000000 _____ C:\Users\hp\Desktop\暴风看电影..bvd
2016-10-24 18:09 - 2014-11-01 10:24 - 00096248 ____N (电脑管家) C:\Windows\system32\Drivers\TFsFltX64.sys
Task: {23F85FCA-5823-40CF-A83A-0838BE52B496} - System32\Tasks\Google Pinyin Daemon => C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinDaemon.exe [2014-02-06] (Google Inc.)
Task: {2E6C5A76-5E63-4EA8-817B-FFFC80C41FEF} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2016-03-01] (McAfee, Inc.)
Task: {5EE4BD7D-BB4A-4286-9869-C0AAE01EDB7A} - \NX7tpoMYwnR0vhO -> No File
Task: {C1F745D6-5309-4466-9495-D5B653AC9D32} - System32\Tasks\360safe\360DesktopMainProg => C:\Program Files (x86)\360\360Desktop\Bin\360AppCore.exe
Task: {CB092C23-A410-4183-9DBF-76445913265C} - System32\Tasks\{41C4FE2F-F2DD-4358-A6B3-AB204D5F9C00} => c:\users\hp\appdata\roaming\360se6\application\360se.exe
FirewallRules: [{CBA965F3-835B-4ADE-9FE9-C76FE091C186}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\360se.exe
FirewallRules: [{A8D59899-53D6-4122-8BF8-D2A295AC68EE}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\360se.exe
FirewallRules: [{778B6443-13B1-4FA0-B70A-BC02E12ACB57}] => (Allow) D:\Program Files\SogouWallPaper\2.4.3.2314\SGUpdater.exe
FirewallRules: [{F8EA59D9-7A52-49CC-B554-BD6F4332679F}] => (Allow) D:\Program Files\SogouWallPaper\2.4.3.2314\SGUpdater.exe
FirewallRules: [{9496E5A4-B955-40B8-893F-4323EB4AB1A1}] => (Allow) C:\ProgramData\Microsoft\WinAppVault\wupdate.exe
FirewallRules: [{66020F95-90A3-4E66-9F7B-1B8A4788F5FF}] => (Allow) C:\ProgramData\Microsoft\WinAppVault\wupdate.exe
FirewallRules: [TCP Query User{D6EE004B-D46F-4104-B987-3162D629C067}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe] => (Allow) C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe
FirewallRules: [UDP Query User{710DB582-5733-4B2A-8B23-B7F5CE9D9E0E}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe] => (Allow) C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe
FirewallRules: [TCP Query User{ED73B019-3696-4493-ADA9-456FCF117EF5}C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe] => (Allow) C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe
FirewallRules: [UDP Query User{2B93997B-292B-40D1-8576-3C3D20E6C17A}C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe] => (Allow) C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe
FirewallRules: [{F8BD0671-084D-45A0-9848-C3FDA3B78C2E}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\360se.exe
FirewallRules: [{E4556F91-A448-42DF-89A9-A0A653B3A495}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\360se.exe
FirewallRules: [{E8307DE4-B613-4E9F-AC3D-CA84F8B08532}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\8.1.1.230\download\MiniThunderPlatform.exe
FirewallRules: [{B8DC8923-654C-4C47-A095-BDD23801B4FE}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\8.1.1.230\download\MiniThunderPlatform.exe
FirewallRules: [{10F84CA9-B004-4745-8CF5-E3432C2D68D7}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\8.1.1.230\installer\seup.exe
FirewallRules: [{1E68A505-785F-401B-86E0-7CEC0303158B}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\8.1.1.230\installer\seup.exe
FirewallRules: [TCP Query User{7C44A17D-1E33-4B1D-9240-C4CAF80A1FCD}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe] => (Block) C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe
FirewallRules: [UDP Query User{4B665317-023A-4BAB-8E0E-335C25BC2402}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe] => (Block) C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe
FirewallRules: [{E9A10A60-CBBB-4DD8-B1D1-996597573DFE}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{CE9D106D-3401-4347-AF04-227730AA8034}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{89C17DD3-8439-45BB-B378-7735B2E1E688}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [{F5F8FB59-A454-4F28-9894-7A9A421687F5}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [TCP Query User{024BCB3E-4619-4DDB-9152-9DE05E2A83B7}C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe] => (Block) C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe
FirewallRules: [UDP Query User{946068E0-CF54-418E-82EA-44D3AF78905B}C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe] => (Block) C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe
EmptyTemp:
end
*****************
Processes closed successfully.
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
"HKLM\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}" => key removed successfully
HKCR\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}" => key removed successfully
HKCR\Wow6432Node\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3} => key not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}" => key removed successfully
HKCR\CLSID\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2} => key not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}" => key removed successfully
HKCR\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4BF2CB0E-658A-442B-AC83-A64EC2150BFC}" => key removed successfully
HKCR\Wow6432Node\CLSID\{4BF2CB0E-658A-442B-AC83-A64EC2150BFC} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} => key could not remove. Access Denied.
HKCR\Wow6432Node\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully
HKCR\Wow6432Node\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found.
HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found.
HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{65F8A3D2-4C22-4A33-9633-73167EAEEC45} => value removed successfully
HKCR\CLSID\{65F8A3D2-4C22-4A33-9633-73167EAEEC45} => key not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@qq.com/npOpenPlatform" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@sogou.com/SGDownloadPlugin" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tencent.com/npQQMailWebKit,version=1.0.0.1" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tencent.com/nptxftnWebKit,version=1.0.0.1" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@xunlei.com/npxluser" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@xunlei.com/npxunlei;version=1.0.0.2" => key removed successfully
"HKU\.DEFAULT\Software\MozillaPlugins\@1.qq.com/npqqwebgame" => key removed successfully
C:\Windows\system32\config\systemprofile\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.9\npqqwebgame.dll => not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\MozillaPlugins\@flashget.com/npfgplugin" => key removed successfully
C:\Program Files (x86)\FlashGet Network\FlashGet 3\npfgplugin.dll => not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\MozillaPlugins\@xunlei.com/npxluser" => key removed successfully
C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll => not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\MozillaPlugins\@xunlei.com/npxunlei;version=1.0.0.2" => key removed successfully
C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll => not found.
CHR dev: Chrome dev build detected! => Error: No automatic fix found for this entry.
C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf => moved successfully
C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\eobojkjbpolpnaolkijihjkpmhieijhb => moved successfully
C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi => moved successfully
HKLM\SOFTWARE\Clients\StartMenuInternet\360Chrome\shell\open\command\\Default => value restored successfully
HKLM\SOFTWARE\Clients\StartMenuInternet\360chrome.hp\shell\open\command\\Default => value restored successfully
bddlsvc => service removed successfully
LeService => service removed successfully
QQLiveService => service removed successfully
QQRepair1525 => service removed successfully
catchme => service removed successfully
QMUdisk => service removed successfully
softaal => service removed successfully
tsnethlpx64 => service removed successfully
C:\ProgramData\Baofeng => moved successfully
C:\ProgramData\Tencent => moved successfully
C:\Program Files (x86)\360 => moved successfully
C:\Users\hp\AppData\Roaming\360Quarant => moved successfully
C:\$360Section => moved successfully
C:\Users\hp\AppData\Roaming\360Desktop => moved successfully
C:\Users\hp\AppData\Roaming\Expert => moved successfully
C:\Users\hp\AppData\Roaming\ytmediacenter => moved successfully
C:\Users\hp\Desktop\暴风看电影..bvd => moved successfully
C:\Windows\system32\Drivers\TFsFltX64.sys => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{23F85FCA-5823-40CF-A83A-0838BE52B496}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{23F85FCA-5823-40CF-A83A-0838BE52B496}" => key removed successfully
C:\Windows\System32\Tasks\Google Pinyin Daemon => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Google Pinyin Daemon" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2E6C5A76-5E63-4EA8-817B-FFFC80C41FEF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E6C5A76-5E63-4EA8-817B-FFFC80C41FEF}" => key removed successfully
C:\Windows\System32\Tasks\McAfee Remediation (Prepare) => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\McAfee Remediation (Prepare)" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5EE4BD7D-BB4A-4286-9869-C0AAE01EDB7A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5EE4BD7D-BB4A-4286-9869-C0AAE01EDB7A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NX7tpoMYwnR0vhO" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C1F745D6-5309-4466-9495-D5B653AC9D32}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C1F745D6-5309-4466-9495-D5B653AC9D32}" => key removed successfully
C:\Windows\System32\Tasks\360safe\360DesktopMainProg => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\360safe\360DesktopMainProg" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CB092C23-A410-4183-9DBF-76445913265C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB092C23-A410-4183-9DBF-76445913265C}" => key removed successfully
C:\Windows\System32\Tasks\{41C4FE2F-F2DD-4358-A6B3-AB204D5F9C00} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{41C4FE2F-F2DD-4358-A6B3-AB204D5F9C00}" => key removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CBA965F3-835B-4ADE-9FE9-C76FE091C186} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A8D59899-53D6-4122-8BF8-D2A295AC68EE} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{778B6443-13B1-4FA0-B70A-BC02E12ACB57} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F8EA59D9-7A52-49CC-B554-BD6F4332679F} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9496E5A4-B955-40B8-893F-4323EB4AB1A1} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{66020F95-90A3-4E66-9F7B-1B8A4788F5FF} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D6EE004B-D46F-4104-B987-3162D629C067}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{710DB582-5733-4B2A-8B23-B7F5CE9D9E0E}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{ED73B019-3696-4493-ADA9-456FCF117EF5}C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2B93997B-292B-40D1-8576-3C3D20E6C17A}C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F8BD0671-084D-45A0-9848-C3FDA3B78C2E} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E4556F91-A448-42DF-89A9-A0A653B3A495} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E8307DE4-B613-4E9F-AC3D-CA84F8B08532} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B8DC8923-654C-4C47-A095-BDD23801B4FE} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10F84CA9-B004-4745-8CF5-E3432C2D68D7} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1E68A505-785F-401B-86E0-7CEC0303158B} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7C44A17D-1E33-4B1D-9240-C4CAF80A1FCD}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4B665317-023A-4BAB-8E0E-335C25BC2402}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E9A10A60-CBBB-4DD8-B1D1-996597573DFE} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CE9D106D-3401-4347-AF04-227730AA8034} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{89C17DD3-8439-45BB-B378-7735B2E1E688} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F5F8FB59-A454-4F28-9894-7A9A421687F5} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{024BCB3E-4619-4DDB-9152-9DE05E2A83B7}C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{946068E0-CF54-418E-82EA-44D3AF78905B}C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe => value removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 30954111 B
Java, Flash, Steam htmlcache => 4439 B
Windows/system/drivers => 1264 B
Edge => 0 B
Chrome => 397799230 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 66228 B
Public => 0 B
ProgramData => 0 B
systemprofile => 78352598 B
systemprofile32 => 1583824 B
LocalService => 167454 B
NetworkService => 0 B
hp => 142360975 B
Guiying => 12689357 B
RecycleBin => 56860832 B
EmptyTemp: => 695.4 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 15:31:14 ====
Ran by hp (09-11-2016 15:30:27) Run:1
Running from C:\Users\hp\Desktop
Loaded Profiles: hp (Available Profiles: hp)
Boot Mode: Normal
==============================================
fixlist content:
*****************
start
CloseProcesses:
GroupPolicy: Restriction - Chrome
CHR HKLM\SOFTWARE\Policies\Google: Restriction
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://zh.wikipedia.org/zh-cn/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://zh.wikipedia.org/zh-cn/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-1592242826-1200034856-1619733032-1000 -> {B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2} URL = hxxp://www.baidu.com/s?wd={searchTerms}&ie={inputEncoding}&oe={outputEncoding}&abar=2&tn=33059180_cb&ch=33
SearchScopes: HKU\S-1-5-21-1592242826-1200034856-1619733032-1000 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://zh.wikipedia.org/zh-cn/wiki/Special:Search?search={searchTerms}
BHO-x32: No Name -> {4BF2CB0E-658A-442B-AC83-A64EC2150BFC} -> No File
BHO-x32: No Name -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> No File
BHO-x32: Windows Live ID 登录帮助程序 -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
Toolbar: HKLM-x32 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1592242826-1200034856-1619733032-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1592242826-1200034856-1619733032-1000 -> No Name - {65F8A3D2-4C22-4A33-9633-73167EAEEC45} - No File
FF Plugin-x32: @qq.com/npOpenPlatform -> C:\Program Files (x86)\Common Files\Tencent\OpenPlatform\3.0.0.3201\npQPMWebGamePlugin.dll [No File]
FF Plugin-x32: @sogou.com/SGDownloadPlugin -> C:\Program Files (x86)\SogouDownLoad\npdownload.dll [No File]
FF Plugin-x32: @tencent.com/npQQMailWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\npQQMailWebKit.dll [No File]
FF Plugin-x32: @tencent.com/nptxftnWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\nptxftnWebKit.dll [No File]
FF Plugin-x32: @xunlei.com/npxluser -> C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll [No File]
FF Plugin-x32: @xunlei.com/npxunlei;version=1.0.0.2 -> C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll [No File]
FF Plugin HKU\.DEFAULT: @1.qq.com/npqqwebgame -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.9\npqqwebgame.dll [No File]
FF Plugin HKU\S-1-5-21-1592242826-1200034856-1619733032-1000: @flashget.com/npfgplugin -> C:\Program Files (x86)\FlashGet Network\FlashGet 3\npfgplugin.dll [No File]
FF Plugin HKU\S-1-5-21-1592242826-1200034856-1619733032-1000: @xunlei.com/npxluser -> C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll [No File]
FF Plugin HKU\S-1-5-21-1592242826-1200034856-1619733032-1000: @xunlei.com/npxunlei;version=1.0.0.2 -> C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll [No File]
CHR dev: Chrome dev build detected!
CHR Extension: (Google 云端硬盘) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-25]
CHR Extension: (QQ音乐支持控件) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\eobojkjbpolpnaolkijihjkpmhieijhb [2016-11-06]
CHR Extension: (Google 文档的离线功能) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-25]
StartMenuInternet: 360Chrome -
StartMenuInternet: 360chrome.hp -
S3 bddlsvc; "C:\Users\hp\AppData\Roaming\baidu\BaiduRJDownloader\1.6.0.77\bddlsvc.exe" -r [X]
S3 LeService; "C:\Program Files (x86)\Letv\LeService.exe" [X]
S3 QQLiveService; C:\Program Files (x86)\Tencent\QQLive\9.8.876.0\LiveService.dll [X]
S2 QQRepair1525; "C:\Program Files (x86)\Tencent\QQPCMGR\QQRepair1525" [X]
S3 catchme; \??\C:\Users\hp\AppData\Local\Temp\catchme.sys [X]
S1 QMUdisk; \??\C:\Program Files (x86)\QQPCMgr\12.0.18066.222\QMUdisk64.sys [X]
S1 softaal; \??\C:\Program Files (x86)\QQPCMgr\12.0.18066.222\softaal64.sys [X]
S2 tsnethlpx64; \??\C:\Program Files (x86)\QQPCMgr\12.0.18066.222\TsNetHlpX64.sys [X]
2016-11-07 17:59 - 2013-12-17 21:06 - 00000000 ____D C:\ProgramData\Baofeng
2016-11-07 17:59 - 2012-07-25 12:30 - 00000000 ____D C:\ProgramData\Tencent
2016-11-06 17:38 - 2012-07-26 09:37 - 00000000 ____D C:\Program Files (x86)\360
2016-11-06 16:19 - 2013-10-01 16:17 - 00000000 __SHD C:\Users\hp\AppData\Roaming\360Quarant
2016-11-06 16:19 - 2013-10-01 16:17 - 00000000 __SHD C:\$360Section
2016-11-06 16:15 - 2012-07-26 09:53 - 00000000 ____D C:\Users\hp\AppData\Roaming\360Desktop
2016-11-06 16:02 - 2014-03-29 10:40 - 00000000 ____D C:\Users\hp\AppData\Roaming\Expert
2016-11-06 12:41 - 2015-07-04 17:04 - 00000000 ____D C:\Users\hp\AppData\Roaming\ytmediacenter
2016-10-28 20:23 - 2015-01-11 20:57 - 00000000 _____ C:\Users\hp\Desktop\暴风看电影..bvd
2016-10-24 18:09 - 2014-11-01 10:24 - 00096248 ____N (电脑管家) C:\Windows\system32\Drivers\TFsFltX64.sys
Task: {23F85FCA-5823-40CF-A83A-0838BE52B496} - System32\Tasks\Google Pinyin Daemon => C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinDaemon.exe [2014-02-06] (Google Inc.)
Task: {2E6C5A76-5E63-4EA8-817B-FFFC80C41FEF} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2016-03-01] (McAfee, Inc.)
Task: {5EE4BD7D-BB4A-4286-9869-C0AAE01EDB7A} - \NX7tpoMYwnR0vhO -> No File
Task: {C1F745D6-5309-4466-9495-D5B653AC9D32} - System32\Tasks\360safe\360DesktopMainProg => C:\Program Files (x86)\360\360Desktop\Bin\360AppCore.exe
Task: {CB092C23-A410-4183-9DBF-76445913265C} - System32\Tasks\{41C4FE2F-F2DD-4358-A6B3-AB204D5F9C00} => c:\users\hp\appdata\roaming\360se6\application\360se.exe
FirewallRules: [{CBA965F3-835B-4ADE-9FE9-C76FE091C186}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\360se.exe
FirewallRules: [{A8D59899-53D6-4122-8BF8-D2A295AC68EE}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\360se.exe
FirewallRules: [{778B6443-13B1-4FA0-B70A-BC02E12ACB57}] => (Allow) D:\Program Files\SogouWallPaper\2.4.3.2314\SGUpdater.exe
FirewallRules: [{F8EA59D9-7A52-49CC-B554-BD6F4332679F}] => (Allow) D:\Program Files\SogouWallPaper\2.4.3.2314\SGUpdater.exe
FirewallRules: [{9496E5A4-B955-40B8-893F-4323EB4AB1A1}] => (Allow) C:\ProgramData\Microsoft\WinAppVault\wupdate.exe
FirewallRules: [{66020F95-90A3-4E66-9F7B-1B8A4788F5FF}] => (Allow) C:\ProgramData\Microsoft\WinAppVault\wupdate.exe
FirewallRules: [TCP Query User{D6EE004B-D46F-4104-B987-3162D629C067}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe] => (Allow) C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe
FirewallRules: [UDP Query User{710DB582-5733-4B2A-8B23-B7F5CE9D9E0E}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe] => (Allow) C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe
FirewallRules: [TCP Query User{ED73B019-3696-4493-ADA9-456FCF117EF5}C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe] => (Allow) C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe
FirewallRules: [UDP Query User{2B93997B-292B-40D1-8576-3C3D20E6C17A}C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe] => (Allow) C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe
FirewallRules: [{F8BD0671-084D-45A0-9848-C3FDA3B78C2E}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\360se.exe
FirewallRules: [{E4556F91-A448-42DF-89A9-A0A653B3A495}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\360se.exe
FirewallRules: [{E8307DE4-B613-4E9F-AC3D-CA84F8B08532}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\8.1.1.230\download\MiniThunderPlatform.exe
FirewallRules: [{B8DC8923-654C-4C47-A095-BDD23801B4FE}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\8.1.1.230\download\MiniThunderPlatform.exe
FirewallRules: [{10F84CA9-B004-4745-8CF5-E3432C2D68D7}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\8.1.1.230\installer\seup.exe
FirewallRules: [{1E68A505-785F-401B-86E0-7CEC0303158B}] => (Allow) C:\Users\hp\AppData\Roaming\360se6\Application\8.1.1.230\installer\seup.exe
FirewallRules: [TCP Query User{7C44A17D-1E33-4B1D-9240-C4CAF80A1FCD}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe] => (Block) C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe
FirewallRules: [UDP Query User{4B665317-023A-4BAB-8E0E-335C25BC2402}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe] => (Block) C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe
FirewallRules: [{E9A10A60-CBBB-4DD8-B1D1-996597573DFE}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{CE9D106D-3401-4347-AF04-227730AA8034}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{89C17DD3-8439-45BB-B378-7735B2E1E688}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [{F5F8FB59-A454-4F28-9894-7A9A421687F5}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [TCP Query User{024BCB3E-4619-4DDB-9152-9DE05E2A83B7}C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe] => (Block) C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe
FirewallRules: [UDP Query User{946068E0-CF54-418E-82EA-44D3AF78905B}C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe] => (Block) C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe
EmptyTemp:
end
*****************
Processes closed successfully.
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
"HKLM\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}" => key removed successfully
HKCR\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}" => key removed successfully
HKCR\Wow6432Node\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3} => key not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}" => key removed successfully
HKCR\CLSID\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2} => key not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}" => key removed successfully
HKCR\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4BF2CB0E-658A-442B-AC83-A64EC2150BFC}" => key removed successfully
HKCR\Wow6432Node\CLSID\{4BF2CB0E-658A-442B-AC83-A64EC2150BFC} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} => key could not remove. Access Denied.
HKCR\Wow6432Node\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully
HKCR\Wow6432Node\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found.
HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found.
HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{65F8A3D2-4C22-4A33-9633-73167EAEEC45} => value removed successfully
HKCR\CLSID\{65F8A3D2-4C22-4A33-9633-73167EAEEC45} => key not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@qq.com/npOpenPlatform" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@sogou.com/SGDownloadPlugin" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tencent.com/npQQMailWebKit,version=1.0.0.1" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tencent.com/nptxftnWebKit,version=1.0.0.1" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@xunlei.com/npxluser" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@xunlei.com/npxunlei;version=1.0.0.2" => key removed successfully
"HKU\.DEFAULT\Software\MozillaPlugins\@1.qq.com/npqqwebgame" => key removed successfully
C:\Windows\system32\config\systemprofile\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.9\npqqwebgame.dll => not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\MozillaPlugins\@flashget.com/npfgplugin" => key removed successfully
C:\Program Files (x86)\FlashGet Network\FlashGet 3\npfgplugin.dll => not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\MozillaPlugins\@xunlei.com/npxluser" => key removed successfully
C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll => not found.
"HKU\S-1-5-21-1592242826-1200034856-1619733032-1000\Software\MozillaPlugins\@xunlei.com/npxunlei;version=1.0.0.2" => key removed successfully
C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll => not found.
CHR dev: Chrome dev build detected! => Error: No automatic fix found for this entry.
C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf => moved successfully
C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\eobojkjbpolpnaolkijihjkpmhieijhb => moved successfully
C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi => moved successfully
HKLM\SOFTWARE\Clients\StartMenuInternet\360Chrome\shell\open\command\\Default => value restored successfully
HKLM\SOFTWARE\Clients\StartMenuInternet\360chrome.hp\shell\open\command\\Default => value restored successfully
bddlsvc => service removed successfully
LeService => service removed successfully
QQLiveService => service removed successfully
QQRepair1525 => service removed successfully
catchme => service removed successfully
QMUdisk => service removed successfully
softaal => service removed successfully
tsnethlpx64 => service removed successfully
C:\ProgramData\Baofeng => moved successfully
C:\ProgramData\Tencent => moved successfully
C:\Program Files (x86)\360 => moved successfully
C:\Users\hp\AppData\Roaming\360Quarant => moved successfully
C:\$360Section => moved successfully
C:\Users\hp\AppData\Roaming\360Desktop => moved successfully
C:\Users\hp\AppData\Roaming\Expert => moved successfully
C:\Users\hp\AppData\Roaming\ytmediacenter => moved successfully
C:\Users\hp\Desktop\暴风看电影..bvd => moved successfully
C:\Windows\system32\Drivers\TFsFltX64.sys => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{23F85FCA-5823-40CF-A83A-0838BE52B496}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{23F85FCA-5823-40CF-A83A-0838BE52B496}" => key removed successfully
C:\Windows\System32\Tasks\Google Pinyin Daemon => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Google Pinyin Daemon" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2E6C5A76-5E63-4EA8-817B-FFFC80C41FEF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E6C5A76-5E63-4EA8-817B-FFFC80C41FEF}" => key removed successfully
C:\Windows\System32\Tasks\McAfee Remediation (Prepare) => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\McAfee Remediation (Prepare)" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5EE4BD7D-BB4A-4286-9869-C0AAE01EDB7A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5EE4BD7D-BB4A-4286-9869-C0AAE01EDB7A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NX7tpoMYwnR0vhO" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C1F745D6-5309-4466-9495-D5B653AC9D32}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C1F745D6-5309-4466-9495-D5B653AC9D32}" => key removed successfully
C:\Windows\System32\Tasks\360safe\360DesktopMainProg => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\360safe\360DesktopMainProg" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CB092C23-A410-4183-9DBF-76445913265C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB092C23-A410-4183-9DBF-76445913265C}" => key removed successfully
C:\Windows\System32\Tasks\{41C4FE2F-F2DD-4358-A6B3-AB204D5F9C00} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{41C4FE2F-F2DD-4358-A6B3-AB204D5F9C00}" => key removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CBA965F3-835B-4ADE-9FE9-C76FE091C186} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A8D59899-53D6-4122-8BF8-D2A295AC68EE} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{778B6443-13B1-4FA0-B70A-BC02E12ACB57} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F8EA59D9-7A52-49CC-B554-BD6F4332679F} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9496E5A4-B955-40B8-893F-4323EB4AB1A1} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{66020F95-90A3-4E66-9F7B-1B8A4788F5FF} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D6EE004B-D46F-4104-B987-3162D629C067}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{710DB582-5733-4B2A-8B23-B7F5CE9D9E0E}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{ED73B019-3696-4493-ADA9-456FCF117EF5}C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2B93997B-292B-40D1-8576-3C3D20E6C17A}C:\users\hp\appdata\roaming\360se6\application\7.1.1.574\download\minithunderplatform.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F8BD0671-084D-45A0-9848-C3FDA3B78C2E} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E4556F91-A448-42DF-89A9-A0A653B3A495} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E8307DE4-B613-4E9F-AC3D-CA84F8B08532} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B8DC8923-654C-4C47-A095-BDD23801B4FE} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10F84CA9-B004-4745-8CF5-E3432C2D68D7} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1E68A505-785F-401B-86E0-7CEC0303158B} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7C44A17D-1E33-4B1D-9240-C4CAF80A1FCD}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4B665317-023A-4BAB-8E0E-335C25BC2402}C:\users\hp\appdata\roaming\ytmediacenter\ikuacc.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E9A10A60-CBBB-4DD8-B1D1-996597573DFE} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CE9D106D-3401-4347-AF04-227730AA8034} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{89C17DD3-8439-45BB-B378-7735B2E1E688} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F5F8FB59-A454-4F28-9894-7A9A421687F5} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{024BCB3E-4619-4DDB-9152-9DE05E2A83B7}C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{946068E0-CF54-418E-82EA-44D3AF78905B}C:\users\hp\appdata\roaming\360bizhi\360wpsrv.exe => value removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 30954111 B
Java, Flash, Steam htmlcache => 4439 B
Windows/system/drivers => 1264 B
Edge => 0 B
Chrome => 397799230 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 66228 B
Public => 0 B
ProgramData => 0 B
systemprofile => 78352598 B
systemprofile32 => 1583824 B
LocalService => 167454 B
NetworkService => 0 B
hp => 142360975 B
Guiying => 12689357 B
RecycleBin => 56860832 B
EmptyTemp: => 695.4 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 15:31:14 ====