Fix result of Farbar Recovery Scan Tool (x64) Version: 22-01-2020 01
Ran by Tiffany (23-01-2020 20:13:54) Run:1
Running from C:\Users\Tiffany\Desktop
Loaded Profiles: Tiffany (Available Profiles: Tiffany & TiffanyK & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
Task: {06E5D9C6-D292-4E6C-BEA8-B0B28542135E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {0A077B24-D56D-40F8-8C8B-5146D021D9A4} - System32\Tasks\{86E5F0AB-44C4-4C00-867C-EBF53E9006AF} => C:\Windows\system32\pcalua.exe -a D:\win/GetThePictureInstaller.exe -d D:\
Task: {0C499099-919E-49BC-94C8-6B200A4E4E79} - \PCDEventLauncherTask -> No File <==== ATTENTION
Task: {14D046B4-64C2-403F-8B90-5D8EBBE5B5B5} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {3285CDC2-60C7-4188-92FA-83136AF36F72} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {35fbe524-06e5-45e6-8927-db455bb9688e} - no filepath
Task: {4B0620D6-C7BA-4069-A9BE-F3B05CD7FD98} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {4C8C3467-1094-4553-AF0C-CB96A9991AD4} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {56C42933-0E1C-4792-B73B-D0D794094B18} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {5889BDA8-F4E9-4CF0-8661-5864BE5514B3} - \CCleanerSkipUAC -> No File <==== ATTENTION
Task: {61235504-6481-4085-BDD2-B0702D3C78A1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {61961F83-1A8B-442F-BE23-8CAEE1551D8E} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {6AED44DC-5223-468E-83B3-B0BE6C3A3429} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {78440926-E24D-4692-94E9-EF5E30783F29} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {78D06E72-D478-4CBF-995C-AC2E3ABE06EB} - System32\Tasks\{24E2DEF5-BB76-4294-B0CD-202B2AFD3F3F} => C:\Windows\system32\pcalua.exe -a "C:\Users\Tiffany\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9E0OBVS6\ps902.exe" -d C:\Users\Tiffany\Desktop
Task: {9BEDF6ED-986D-4A83-BF42-5DE0ABE3AC5B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {A06642A6-4C1F-4FD2-A577-308574BCAB59} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {CBB728B1-A148-43A7-B705-E4038F0C25CD} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {D901DD0C-EC27-49D9-8B6D-E34FE4716212} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {E114051E-1F41-4718-83AB-91E927BC813C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {ECAC882D-8459-48D6-BC4B-61B46D58A957} - System32\Tasks\{BB8EF683-E171-4F57-8FB4-5BE00B9C776C} => C:\Windows\system32\pcalua.exe -a "D:\Nik\Color Efex Pro 3.1\ColorEfexPro3Cpl-rev3.101EN.exe" -d "D:\Nik\Color Efex Pro 3.1"
SearchScopes: HKLM -> {fcd9f10e-0daa-405f-bca0-0dd3f37c59d9} URL = 
SearchScopes: HKU\S-1-5-21-16598370-1499477397-4195015670-1000 -> DefaultScope {740D10C0-1120-4DB2-8337-83413B8FBEB3} URL = hxxp://go.paradiskus.com/?B9371EE09A8FF0128D28715DBFE6196F=H1xAXFBDXlxZUVQNEQQwBw9cQ1hYQVxZWFdDVVVHX1ldU1QJDB0LUyknNy4nNikoW1FCXlFCLllaWTdfWEVfWF1VRV5WQCsrWSMxKFNCV1k&q={searchTerms}
SearchScopes: HKU\S-1-5-21-16598370-1499477397-4195015670-1000 -> {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = 
SearchScopes: HKU\S-1-5-21-16598370-1499477397-4195015670-1000 -> {740D10C0-1120-4DB2-8337-83413B8FBEB3} URL = hxxp://go.paradiskus.com/?B9371EE09A8FF0128D28715DBFE6196F=H1xAXFBDXlxZUVQNEQQwBw9cQ1hYQVxZWFdDVVVHX1ldU1QJDB0LUyknNy4nNikoW1FCXlFCLllaWTdfWEVfWF1VRV5WQCsrWSMxKFNCV1k&q={searchTerms}
SearchScopes: HKU\S-1-5-21-16598370-1499477397-4195015670-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = 
SearchScopes: HKU\S-1-5-21-16598370-1499477397-4195015670-1000 -> {fcd9f10e-0daa-405f-bca0-0dd3f37c59d9} URL = hxxps://mysearch.avg.com/search?cid={AE070354-6493-49D0-9256-55BBAFBD06BA}&mid=1e9e7d76c69b47d382f7c94a35379396-85116faf5f6267821ce8bd8b6ae342ca2bc2311a&lang=en&ds=AVG&coid=avgtbavg&cmpid=0615tb&pr=fr&d=2014-02-06 20:21:08&v=19.0.0.10&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
FF HomepageOverride: Mozilla\Firefox\Profiles\cm5j4z02.default -> Disabled: _65Members_@download.fromdoctopdf.com
FF NewTabOverride: Mozilla\Firefox\Profiles\cm5j4z02.default -> Disabled: _65Members_@download.fromdoctopdf.com
FF Extension: (FromDocToPDF) - C:\Users\Tiffany\AppData\Roaming\Mozilla\Firefox\Profiles\cm5j4z02.default\Extensions\_65Members_@download.fromdoctopdf.com.xpi [2019-11-19] [UpdateUrl:hxxps:\/\/updates.tb.ask.com\/updateXpi.json?id=207743773&version=8.924.16.54486&track=TTAB02&trackRevision=1&fromId=_65Members_%40download.fromdoctopdf.com&isBridgeExtension=false]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\19.0.0.10 => not found
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
2013-08-26 11:40 - 2014-06-02 15:32 - 000003745 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> No File
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [104]
Hosts:
FirewallRules: [{B5DC518A-3B40-41A7-9810-9358C91F8C6B}] => (Allow) C:\Program Files\dell stage\dell stage\accuweather\accuweather.exe No File
FirewallRules: [{38FB9E44-0D81-4F60-9948-4350BB9ABA52}] => (Allow) C:\Program Files\dell stage\musicstage\musicstageengine.exe No File
FirewallRules: [{E6305EF4-17AB-4CDA-8857-6F88B798A10C}] => (Allow) C:\Program Files\dell stage\dell stage\stage_primary.exe No File
FirewallRules: [{2AFCCD07-CC03-432E-A62B-DD4C08A8D20F}] => (Allow) C:\Program Files (x86)\Common Files\Comodo\GeekBuddyRSP.exe No File
FirewallRules: [{4B13E285-EE86-44D6-A175-6E147073C4A3}] => (Allow) C:\Program Files (x86)\Common Files\Comodo\GeekBuddyRSP.exe No File
FirewallRules: [{5EB49D7E-6670-4512-9102-5B165ACB7DF7}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe No File
FirewallRules: [{442EC602-A069-4E35-8B43-BE7764F04B1D}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe No File
EmptyTemp:

*****************

Restore point was successfully created.
Processes closed successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{503739d0-4c5e-4cfd-b3ba-d881334f0df2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{06E5D9C6-D292-4E6C-BEA8-B0B28542135E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{06E5D9C6-D292-4E6C-BEA8-B0B28542135E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0A077B24-D56D-40F8-8C8B-5146D021D9A4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0A077B24-D56D-40F8-8C8B-5146D021D9A4}" => removed successfully
C:\WINDOWS\System32\Tasks\{86E5F0AB-44C4-4C00-867C-EBF53E9006AF} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{86E5F0AB-44C4-4C00-867C-EBF53E9006AF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0C499099-919E-49BC-94C8-6B200A4E4E79}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C499099-919E-49BC-94C8-6B200A4E4E79}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PCDEventLauncherTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{14D046B4-64C2-403F-8B90-5D8EBBE5B5B5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{14D046B4-64C2-403F-8B90-5D8EBBE5B5B5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3285CDC2-60C7-4188-92FA-83136AF36F72}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3285CDC2-60C7-4188-92FA-83136AF36F72}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35fbe524-06e5-45e6-8927-db455bb9688e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4B0620D6-C7BA-4069-A9BE-F3B05CD7FD98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B0620D6-C7BA-4069-A9BE-F3B05CD7FD98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4C8C3467-1094-4553-AF0C-CB96A9991AD4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C8C3467-1094-4553-AF0C-CB96A9991AD4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{56C42933-0E1C-4792-B73B-D0D794094B18}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56C42933-0E1C-4792-B73B-D0D794094B18}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5889BDA8-F4E9-4CF0-8661-5864BE5514B3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5889BDA8-F4E9-4CF0-8661-5864BE5514B3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{61235504-6481-4085-BDD2-B0702D3C78A1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{61235504-6481-4085-BDD2-B0702D3C78A1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{61961F83-1A8B-442F-BE23-8CAEE1551D8E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{61961F83-1A8B-442F-BE23-8CAEE1551D8E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6AED44DC-5223-468E-83B3-B0BE6C3A3429}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6AED44DC-5223-468E-83B3-B0BE6C3A3429}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{78440926-E24D-4692-94E9-EF5E30783F29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{78440926-E24D-4692-94E9-EF5E30783F29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{78D06E72-D478-4CBF-995C-AC2E3ABE06EB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{78D06E72-D478-4CBF-995C-AC2E3ABE06EB}" => removed successfully
C:\WINDOWS\System32\Tasks\{24E2DEF5-BB76-4294-B0CD-202B2AFD3F3F} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{24E2DEF5-BB76-4294-B0CD-202B2AFD3F3F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9BEDF6ED-986D-4A83-BF42-5DE0ABE3AC5B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9BEDF6ED-986D-4A83-BF42-5DE0ABE3AC5B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A06642A6-4C1F-4FD2-A577-308574BCAB59}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A06642A6-4C1F-4FD2-A577-308574BCAB59}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CBB728B1-A148-43A7-B705-E4038F0C25CD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CBB728B1-A148-43A7-B705-E4038F0C25CD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D901DD0C-EC27-49D9-8B6D-E34FE4716212}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D901DD0C-EC27-49D9-8B6D-E34FE4716212}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E114051E-1F41-4718-83AB-91E927BC813C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E114051E-1F41-4718-83AB-91E927BC813C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ECAC882D-8459-48D6-BC4B-61B46D58A957}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ECAC882D-8459-48D6-BC4B-61B46D58A957}" => removed successfully
C:\WINDOWS\System32\Tasks\{BB8EF683-E171-4F57-8FB4-5BE00B9C776C} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BB8EF683-E171-4F57-8FB4-5BE00B9C776C}" => removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{fcd9f10e-0daa-405f-bca0-0dd3f37c59d9} => removed successfully
"HKU\S-1-5-21-16598370-1499477397-4195015670-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-16598370-1499477397-4195015670-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{49606DC7-976D-4030-A74E-9FB5C842FA68} => removed successfully
HKU\S-1-5-21-16598370-1499477397-4195015670-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{740D10C0-1120-4DB2-8337-83413B8FBEB3} => removed successfully
HKU\S-1-5-21-16598370-1499477397-4195015670-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => removed successfully
HKU\S-1-5-21-16598370-1499477397-4195015670-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{fcd9f10e-0daa-405f-bca0-0dd3f37c59d9} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} => removed successfully
"Firefox HomepageOverride (_65Members_@download.fromdoctopdf.com) " => removed successfully
"Firefox NewTabOverride (_65Members_@download.fromdoctopdf.com) " => removed successfully
C:\Users\Tiffany\AppData\Roaming\Mozilla\Firefox\Profiles\cm5j4z02.default\Extensions\_65Members_@download.fromdoctopdf.com.xpi => moved successfully
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\avg@toolbar" => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki => removed successfully
C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml => moved successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets => removed successfully
C:\ProgramData\Temp => ":5C321E34" ADS removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B5DC518A-3B40-41A7-9810-9358C91F8C6B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{38FB9E44-0D81-4F60-9948-4350BB9ABA52}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E6305EF4-17AB-4CDA-8857-6F88B798A10C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2AFCCD07-CC03-432E-A62B-DD4C08A8D20F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4B13E285-EE86-44D6-A175-6E147073C4A3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5EB49D7E-6670-4512-9102-5B165ACB7DF7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{442EC602-A069-4E35-8B43-BE7764F04B1D}" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 10772480 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 651926915 B
Java, Flash, Steam htmlcache => 1154 B
Windows/system/drivers => 325277 B
Edge => 44712463 B
Chrome => 0 B
Firefox => 1109328547 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 16674 B
Users => 16674 B
ProgramData => 16674 B
Public => 16674 B
systemprofile => 16674 B
systemprofile32 => 16674 B
LocalService => 65178 B
NetworkService => 4849896 B
Tiffany => 92072934 B
TiffanyK => 92111828 B
DefaultAppPool => 92144886 B

RecycleBin => 1331871 B
EmptyTemp: => 2 GB temporary data Removed.

================================


The system needed a reboot.

==== End 1 Fixlog 20:20:10 ====