Fix result of Farbar Recovery Scan Tool (x64) Version: 13-05-2020 01
Ran by [removed] (23-05-2020 20:09:03) Run:1
Running from C:\Users\[removed]\Desktop
[removed]
Boot Mode: Normal
==============================================

fixlist content:
*****************
Code: Select all
CreateRestorePoint:

HKU\S-1-5-21-3971547430-1501294538-298062416-1001\...\Run: [One Updater] => C:\Program Files (x86)\OneMellifluousUpdater\OneUpdater.exe [8461152 2020-05-08] (OneMellifluousUpdaterCode -> Mellifluous Company) [File not signed]
2020-05-08 23:13 - 2020-05-13 21:35 - 000000000 ____D C:\Program Files (x86)\PlazyPCAP
2020-05-08 23:13 - 2020-05-08 23:15 - 000000000 ____D C:\ProgramData\PlazyPCAP
2020-05-08 23:13 - 2020-05-08 23:13 - 000000000 ____D C:\Users\adamv\AppData\Local\PlazyPCAP
2020-05-08 23:13 - 2020-05-08 23:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlazyPCAP
2020-05-08 23:12 - 2020-05-08 23:15 - 000000000 ____D C:\Program Files (x86)\PCAP_Tool
2020-05-08 23:12 - 2020-05-08 23:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneUpdater
2020-05-08 23:12 - 2020-05-08 23:12 - 000000000 ____D C:\Program Files (x86)\OneMellifluousUpdater

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\PlazyPCAP]
Reg: reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION" /v "PlazyPCAP.exe" /f
Reg: reg.exe delete "HKEY_USERS\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION" /v "PlazyPCAP.exe" /f
Reg: reg.exe delete "HKEY_USERS\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store" /v "C:\Program Files (x86)\PlazyPCAP\uninstall.exe" /f

VirusTotal: C:\Program Files (x86)\NameGarobe\NameGarobe.exe;C:\Users\adamv\Downloads\Setup.msi

Hosts:
CMD: ipconfig /flushdns
EmptyTemp:
*****************

Code: Select all => Error: No automatic fix found for this entry.
Restore point was successfully created.
"HKU\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\Windows\CurrentVersion\Run\\One Updater" => not found
"C:\Program Files (x86)\PlazyPCAP" => not found
"C:\ProgramData\PlazyPCAP" => not found
"C:\Users\adamv\AppData\Local\PlazyPCAP" => not found
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlazyPCAP" => not found
C:\Program Files (x86)\PCAP_Tool => moved successfully
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneUpdater" => not found
"C:\Program Files (x86)\OneMellifluousUpdater" => not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} => removed successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} => removed successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} => removed successfully
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} => removed successfully
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} => removed successfully
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} => removed successfully
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\PlazyPCAP => removed successfully

========= reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION" /v "PlazyPCAP.exe" /f =========

The operation completed successfully.



========= End of Reg: =========


========= reg.exe delete "HKEY_USERS\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION" /v "PlazyPCAP.exe" /f =========

The operation completed successfully.



========= End of Reg: =========


========= reg.exe delete "HKEY_USERS\S-1-5-21-3971547430-1501294538-298062416-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store" /v "C:\Program Files (x86)\PlazyPCAP\uninstall.exe" /f =========

The operation completed successfully.



========= End of Reg: =========

VirusTotal: C:\Program Files (x86)\NameGarobe\NameGarobe.exe => https://www.virustotal.com/file/796caaebc87dda60771eeecaaf67209f65d196f256f4816a5dfe064e0234254b/analysis/1590289777/
VirusTotal: C:\Users\adamv\Downloads\Setup.msi => https://www.virustotal.com/file/57686509b86ad0304d0d26399fbc65b1d82445d07b37ce0eacf86e74f2ab3cb2/analysis/1590289780/
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 10772480 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 15879218 B
Java, Flash, Steam htmlcache => 18661957 B
Windows/system/drivers => 10720682 B
Edge => 2350482 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 7168 B
Users => 7168 B
ProgramData => 7168 B
Public => 7168 B
systemprofile => 79496 B
systemprofile32 => 79630 B
LocalService => 152658 B
NetworkService => 277858 B
adamv => 20159400 B

RecycleBin => 277696 B
EmptyTemp: => 75.8 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 20:10:19 ====