Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 14-09-2017 01 Uruchomiony przez katar (15-09-2017 13:57:44) Run:2 Uruchomiony z C:\Users\katar\Desktop Załadowane profile: katar (Dostępne profile: katar) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: S3 iSafeKrnlBoot; C:\WINDOWS\System32\DRIVERS\iSafeKrnlBoot.sys [55056 2016-05-23] (Elex do Brasil Participações Ltda) <==== UWAGA R1 iSafeNetFilter; C:\WINDOWS\System32\DRIVERS\iSafeNetFilter.sys [52392 2016-05-19] (Elex do Brasil Participações Ltda) <==== UWAGA C:\WINDOWS\System32\DRIVERS\iSafeKrnlBoot.sys C:\WINDOWS\System32\DRIVERS\iSafeNetFilter.sys 2017-08-16 23:36 - 2016-09-02 18:49 - 000000000 ____D C:\Program Files (x86)\PC Purifier C:\Program Files (x86)\PCPurifier Task: C:\WINDOWS\Tasks\PC Purifier_DEFAULT.job => C:\Program Files (x86)\PC Purifier\PCPurifier.exe Task: C:\WINDOWS\Tasks\PC Purifier_UPDATES.job => C:\Program Files (x86)\PC Purifier\PCPurifier.exe ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> C:\Users\katar\AppData\Roaming\Elex-tech C:\Users\katar\AppData\Roaming\gplyra C:\Users\katar\AppData\Roaming\opera_helper C:\Users\katar\AppData\Roaming\PC Purifier DeleteKey: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8342b33a_0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\"SOFTWARE\Clients\StartMenuInternet\ChromeHTML"\InstallInfo|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\ActivatableClasses\Package\DefaultBrowser_NOPUBLISHERID\Server\DefaultBrowserServer|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\Extensions\ContractId\Windows.File\PackageId\DefaultBrowser_NOPUBLISHERID\ActivatableClassId\DefaultBrowser.DefaultBrowserActivatableClass|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\Extensions\ContractId\Windows.Launch\PackageId\DefaultBrowser_NOPUBLISHERID\ActivatableClassId\DefaultBrowser.DefaultBrowserActivatableClass|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\Extensions\ContractId\Windows.Protocol\PackageId\DefaultBrowser_NOPUBLISHERID\ActivatableClassId\DefaultBrowser.DefaultBrowserActivatableClass|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\Extensions\ContractId\Windows.Search\PackageId\DefaultBrowser_NOPUBLISHERID\ActivatableClassId\DefaultBrowser.DefaultBrowserActivatableClass|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\ftp\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\http\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\https\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\irc\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\irc\shell\open\command|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\mailto\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\mms\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\mms\shell\open\command|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\news\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\news\shell\open\command|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\nntp\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\nntp\shell\open\command|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\sms\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\sms\shell\open\command|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\smsto\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\smsto\shell\open\command|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\urn\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\urn\shell\open\command|C:\Program Files (x86)\Bossship\Application\chrome.exe DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\webcal\DefaultIcon|C:\Program Files (x86)\Bossship\Application\chrome.exe,0 DeleteValue: HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\webcal\shell\open\command|C:\Program Files (x86)\Bossship\Application\chrome.exe EmptyTemp: ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. HKLM\System\CurrentControlSet\Services\iSafeKrnlBoot => klucz pomyślnie usunięto iSafeKrnlBoot => serwis pomyślnie usunięto iSafeNetFilter => Nie można zatrzymać usługi. HKLM\System\CurrentControlSet\Services\iSafeNetFilter => klucz pomyślnie usunięto iSafeNetFilter => serwis pomyślnie usunięto C:\WINDOWS\System32\DRIVERS\iSafeKrnlBoot.sys => pomyślnie przeniesiono C:\WINDOWS\System32\DRIVERS\iSafeNetFilter.sys => pomyślnie przeniesiono C:\Program Files (x86)\PC Purifier => pomyślnie przeniesiono "C:\Program Files (x86)\PCPurifier" => nie znaleziono. C:\WINDOWS\Tasks\PC Purifier_DEFAULT.job => pomyślnie przeniesiono C:\WINDOWS\Tasks\PC Purifier_UPDATES.job => pomyślnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. C:\Users\katar\AppData\Roaming\Elex-tech => pomyślnie przeniesiono C:\Users\katar\AppData\Roaming\gplyra => pomyślnie przeniesiono C:\Users\katar\AppData\Roaming\opera_helper => pomyślnie przeniesiono "C:\Users\katar\AppData\Roaming\PC Purifier" => nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8342b33a_0 => klucz pomyślnie usunięto HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\"SOFTWARE\Clients\StartMenuInternet\ChromeHTML"\InstallInfo\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość pomyślnie usunięto HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\ActivatableClasses\Package\DefaultBrowser_NOPUBLISHERID\Server\DefaultBrowserServer\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\Extensions\ContractId\Windows.File\PackageId\DefaultBrowser_NOPUBLISHERID\ActivatableClassId\DefaultBrowser.DefaultBrowserActivatableClass\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\Extensions\ContractId\Windows.Launch\PackageId\DefaultBrowser_NOPUBLISHERID\ActivatableClassId\DefaultBrowser.DefaultBrowserActivatableClass\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\Extensions\ContractId\Windows.Protocol\PackageId\DefaultBrowser_NOPUBLISHERID\ActivatableClassId\DefaultBrowser.DefaultBrowserActivatableClass\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\Extensions\ContractId\Windows.Search\PackageId\DefaultBrowser_NOPUBLISHERID\ActivatableClassId\DefaultBrowser.DefaultBrowserActivatableClass\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\ftp\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\http\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\https\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\irc\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\irc\shell\open\command\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\mailto\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\mms\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\mms\shell\open\command\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\news\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\news\shell\open\command\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\nntp\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\nntp\shell\open\command\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\sms\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\sms\shell\open\command\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\smsto\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\smsto\shell\open\command\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\urn\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\urn\shell\open\command\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\webcal\DefaultIcon\\C:\Program Files (x86)\Bossship\Application\chrome.exe,0 => Wartość nie znaleziono. HKEY_USERS\S-1-5-21-1769923494-3148577438-2251075067-1001\Software\Classes\webcal\shell\open\command\\C:\Program Files (x86)\Bossship\Application\chrome.exe => Wartość nie znaleziono. =========== EmptyTemp: ========== BITS transfer queue => 7364608 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19221260 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 1211991 B Edge => 2968200 B Chrome => 784385246 B Firefox => 107906992 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 5090 B NetworkService => 2278 B katar => 110340273 B RecycleBin => 215197 B EmptyTemp: => 985.7 MB danych tymczasowych Usunięto. ================================ System wymagał restartu. ==== Koniec Fixlog 14:01:07 ====