Fix result of Farbar Recovery Scan Tool (x64) Version: 19-05.2019 Ran by admin (24-05-2019 05:39:25) Run:1 Running from C:\Users\admin\Desktop Loaded Profiles: admin (Available Profiles: admin) Boot Mode: Normal ============================================== fixlist content: ***************** (LENOVO -> Lenovo) [File not signed] C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe HKLM-x32\...\Run: [MagicPlusHelper] => C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe [2499208 2016-03-22] (LENOVO -> Lenovo) [File not signed] HKU\S-1-5-21-844090339-168977430-2555540811-1001\...\MountPoints2: {096eaa51-0d84-11e9-8286-5c93a27a9186} - "G:\Lenovo_Suite.exe" HKU\S-1-5-21-844090339-168977430-2555540811-1001\...\MountPoints2: {5221b181-7b5a-11e7-826d-5c93a27a9186} - "G:\AutoRun.exe" HKU\S-1-5-21-844090339-168977430-2555540811-1001\...\MountPoints2: {71144e2f-6179-11e9-829c-5c93a27a9186} - "G:\Lenovo_Suite.exe" HKU\S-1-5-21-844090339-168977430-2555540811-1001\...\MountPoints2: {71145190-6179-11e9-829c-5c93a27a9186} - "G:\LG_PC_Programs.exe" HKU\S-1-5-21-844090339-168977430-2555540811-1001\...\MountPoints2: {71145b2f-6179-11e9-829c-5c93a27a9186} - "G:\Lenovo_Suite.exe" HKU\S-1-5-21-844090339-168977430-2555540811-1001\...\MountPoints2: {d5bb046f-d9f0-11e8-827d-5c93a27a9186} - "G:\Windows\AutoRun.exe" HKU\S-1-5-21-844090339-168977430-2555540811-1001\...\MountPoints2: {f95a5e0f-bb05-11e7-8275-5c93a27a9186} - "G:\Lenovo_Suite.exe" Task: {E7872C45-D201-4AF3-9705-3115CB2C7B24} - System32\Tasks\lenovo mobile auto run => C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe [2499208 2016-03-22] (LENOVO -> Lenovo) [File not signed] C:\Program Files (x86)\MagicPlus CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" Reboot: ***************** [1176] C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe => process closed successfully. "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\MagicPlusHelper" => removed successfully HKU\S-1-5-21-844090339-168977430-2555540811-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{096eaa51-0d84-11e9-8286-5c93a27a9186} => removed successfully HKLM\Software\Classes\CLSID\{096eaa51-0d84-11e9-8286-5c93a27a9186} => not found HKU\S-1-5-21-844090339-168977430-2555540811-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5221b181-7b5a-11e7-826d-5c93a27a9186} => removed successfully HKLM\Software\Classes\CLSID\{5221b181-7b5a-11e7-826d-5c93a27a9186} => not found HKU\S-1-5-21-844090339-168977430-2555540811-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{71144e2f-6179-11e9-829c-5c93a27a9186} => removed successfully HKLM\Software\Classes\CLSID\{71144e2f-6179-11e9-829c-5c93a27a9186} => not found HKU\S-1-5-21-844090339-168977430-2555540811-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{71145190-6179-11e9-829c-5c93a27a9186} => removed successfully HKLM\Software\Classes\CLSID\{71145190-6179-11e9-829c-5c93a27a9186} => not found HKU\S-1-5-21-844090339-168977430-2555540811-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{71145b2f-6179-11e9-829c-5c93a27a9186} => removed successfully HKLM\Software\Classes\CLSID\{71145b2f-6179-11e9-829c-5c93a27a9186} => not found HKU\S-1-5-21-844090339-168977430-2555540811-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d5bb046f-d9f0-11e8-827d-5c93a27a9186} => removed successfully HKLM\Software\Classes\CLSID\{d5bb046f-d9f0-11e8-827d-5c93a27a9186} => not found HKU\S-1-5-21-844090339-168977430-2555540811-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f95a5e0f-bb05-11e7-8275-5c93a27a9186} => removed successfully HKLM\Software\Classes\CLSID\{f95a5e0f-bb05-11e7-8275-5c93a27a9186} => not found "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E7872C45-D201-4AF3-9705-3115CB2C7B24}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7872C45-D201-4AF3-9705-3115CB2C7B24}" => removed successfully C:\Windows\System32\Tasks\lenovo mobile auto run => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\lenovo mobile auto run" => removed successfully C:\Program Files (x86)\MagicPlus => moved successfully ========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" ========= Failed to clear log Microsoft-Windows-USBVideo/Analytic. The instance name passed was not recognized as valid by a WMI data provider. ========= End of CMD: ========= The system needed a reboot. ==== End of Fixlog 05:42:07 ====