Fix result of Farbar Recovery Scan Tool (x64) Version: 14-10-2026
Ran by o0the (16-10-2026 02:09:00) Run:1
Running from C:\Users\o0the\Downloads
Loaded Profiles: o0the
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
Task: {4D607ED8-0991-4FB5-A206-E9A0FB5A09F7} - System32\Tasks\BackgroundTask => C:\Windows\System32\cmd.exe [339968 2026-10-14] (Microsoft Windows -> Microsoft Corporation) -> /c "C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\sync_eae1.cmd" <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)
ShellIconOverlayIdentifiers: [      .WorkspaceExt0] -> {C568C78A-652C-425B-8E6B-FFA73043302D} =>  -> No File
ShellIconOverlayIdentifiers: [      .WorkspaceExt1] -> {2A6FE247-5DA3-4732-9626-77820518FD77} =>  -> No File
ShellIconOverlayIdentifiers: [      .WorkspaceExt2] -> {FF895810-293B-464A-93F2-82D11E07EEC8} =>  -> No File
ShellIconOverlayIdentifiers-x32: [      .WorkspaceExt0] -> {C568C78A-652C-425B-8E6B-FFA73043302D} =>  -> No File
ShellIconOverlayIdentifiers-x32: [      .WorkspaceExt1] -> {2A6FE247-5DA3-4732-9626-77820518FD77} =>  -> No File
ShellIconOverlayIdentifiers-x32: [      .WorkspaceExt2] -> {FF895810-293B-464A-93F2-82D11E07EEC8} =>  -> No File
ContextMenuHandlers1_S-1-5-21-2339272927-596407228-3174859544-1001: [QuarkAI.ContextMenu] -> {99D4E39A-EA7F-453E-9488-58C56BBF7B98-} =>  -> No File
ContextMenuHandlers4_S-1-5-21-2339272927-596407228-3174859544-1001: [QuarkAI.ContextMenu] -> {99D4E39A-EA7F-453E-9488-58C56BBF7B98-} =>  -> No File
FirewallRules: [{474384BF-B802-4CF6-BEA9-BE29EA428146}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{9DCC4575-5333-44B8-8154-CF749B21B216}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F5EA8787-F5E8-47E4-A8BE-DB578D5F689B}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{22222E76-F003-4E93-8B73-5AB41BE47240}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
CMD: type "C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\sync_eae1.cmd"
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors

*****************

Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4D607ED8-0991-4FB5-A206-E9A0FB5A09F7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4D607ED8-0991-4FB5-A206-E9A0FB5A09F7}" => removed successfully
C:\Windows\System32\Tasks\BackgroundTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BackgroundTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\      .WorkspaceExt0 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\      .WorkspaceExt1 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\      .WorkspaceExt2 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\      .WorkspaceExt0 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\      .WorkspaceExt1 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\      .WorkspaceExt2 => removed successfully
HKU\S-1-5-21-2339272927-596407228-3174859544-1001\Software\Classes\*\ShellEx\ContextMenuHandlers\QuarkAI.ContextMenu => removed successfully
HKU\S-1-5-21-2339272927-596407228-3174859544-1001\Software\Classes\Directory\ShellEx\ContextMenuHandlers\QuarkAI.ContextMenu => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{474384BF-B802-4CF6-BEA9-BE29EA428146}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9DCC4575-5333-44B8-8154-CF749B21B216}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F5EA8787-F5E8-47E4-A8BE-DB578D5F689B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{22222E76-F003-4E93-8B73-5AB41BE47240}" => removed successfully

========= type "C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\sync_eae1.cmd" =========

@echo off
chcp 65001 >nul 2>&1
set "_c1=co" & set "_c2=nhost.exe"
set "_p1=MSBUILDENABLEALLPROPERTY" & set "_p2=FUNCTIONS"
set "_n1=MSBUILDDISABLENODE" & set "_n2=REUSE"
set "_r1=CurrentBuildN" & set "_r2=umber"
set "_l1=/laun" & set "_l2=ched"
set "_h1=--h" & set "_h2=eadless"
set "_m1=MS" & set "_m2=Build.exe"
setlocal DisableDelayedExpansion
set "_me=%~f0"
set "_hit=0"
set "_la=%_l1%%_l2%"
for %%a in (%*) do if /i "%%a"=="%_la%" set "_hit=1"
if "%_hit%"=="1" goto :start
set "_con=%SystemRoot%\System32\%_c1%%_c2%"
if exist "%SystemRoot%\Sysnative\%_c1%%_c2%" set "_con=%SystemRoot%\Sysnative\%_c1%%_c2%"
set "LOGDIR=%TEMP%\build"
if not exist "%LOGDIR%" mkdir "%LOGDIR%" 2>nul
where %_c1%%_c2% >nul 2>&1
set "_has=0"
if %errorlevel% equ 0 set "_has=1"
set "_rel=0"
for /f "tokens=3" %%b in ('reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v %_r1%%_r2% 2^>nul ^| find "%_r1%%_r2%"') do set "_rel=%%b"
set /a _rel=%_rel%+0 2>nul
if %_rel% lss 17763 set "_has=0"
if "%_has%"=="1" (
  endlocal & start "" /b "%_con%" %_h1%%_h2% cmd.exe /c "%_me%" %_la%
) else (
  endlocal & cmd.exe /c "%_me%" %_la%
)
exit /b 0
:start
endlocal
setlocal EnableExtensions
set %_p1%%_p2%=1
set %_n1%%_n2%=1
set "_rduf=%~dp0SystemWebCors.csproj"
set "_rt=Framework"
set "_bx=%WINDIR%\Microsoft.NET\%_rt%\v4.0.30319\%_m1%%_m2%"
if not exist "%_bx%" set "_rt=Framework64"
if not exist "%_bx%" set "_bx=%WINDIR%\Microsoft.NET\%_rt%\v4.0.30319\%_m1%%_m2%"
set "_args=/nologo /v:q /nodereuse:false /noconlog"
if not exist "%_bx%" (
  echo MSBuild 4.0 not found. Install the .NET Framework 4.x Developer Pack. & exit /b 1
)
"%_bx%" "%~dp0SystemWebCors.csproj" %_args% >nul 2>&1
endlocal


========= End of CMD: =========


"C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors" Folder move:

C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\.gitattributes => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\.gitignore => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\app.config => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\cache_56b48a.cfg => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\CHANGELOG.md => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\CONTRIBUTORS => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\Directory.Build.props => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\Directory.Build.targets => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\Directory.Packages.props => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\LICENSE => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\NuGet.config => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\packages.config => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\README.md => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\sync_eae1.cmd => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\SystemWebCors.csproj.user => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\SystemWebCors.Internal.targets => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\SystemWebCors.sln => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors\telemetry_8a.tmp => moved successfully
C:\Users\o0the\AppData\Local\Microsoft\Windows\INetCache\SystemWebCors => moved successfully



The system needed a reboot.

==== End of Fixlog 02:09:03 ====