Fix result of Farbar Recovery Scan Tool (x64) Version: 05-06-2017 Ran by SYSTEM (05-06-2017 22:10:38) Run:1 Running from f:\ Boot Mode: Recovery ============================================== fixlist content: ***************** HKLM-x32\...\Run: [] => [X] S2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [186304 2017-04-29] (Malwarebytes) S3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [111544 2017-06-02] () S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-06-02] () S0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-06-02] () S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-06-02] () S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] 2017-06-02 05:58 - 2014-08-14 16:48 - 00251832 _____ C:\Windows\System32\Drivers\MBAMSwissArmy.sys 2017-06-02 05:58 - 2013-07-08 05:24 - 00043968 _____ C:\Windows\System32\Drivers\mbam.sys ***************** HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully HKLM\System\ControlSet001\Services\MBAMChameleon => key removed successfully MBAMChameleon => service removed successfully HKLM\System\ControlSet001\Services\MBAMFarflt => key removed successfully MBAMFarflt => service removed successfully HKLM\System\ControlSet001\Services\MBAMProtection => key removed successfully MBAMProtection => service removed successfully HKLM\System\ControlSet001\Services\MBAMSwissArmy => key removed successfully MBAMSwissArmy => service removed successfully HKLM\System\ControlSet001\Services\MBAMWebProtection => key removed successfully MBAMWebProtection => service removed successfully HKLM\System\ControlSet001\Services\EagleX64 => key removed successfully EagleX64 => service removed successfully HKLM\System\ControlSet001\Services\xhunter1 => key removed successfully xhunter1 => service removed successfully C:\Windows\System32\Drivers\MBAMSwissArmy.sys => moved successfully C:\Windows\System32\Drivers\mbam.sys => moved successfully ==== End of Fixlog 22:10:38 ====