Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 14.03.2018 Uruchomiony przez Kuba (20-03-2018 19:09:51) Run:1 Uruchomiony z E:\Pobrane Załadowane profile: Kuba (Dostępne profile: defaultuser0 & Kuba) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: Task: {7155B8BB-9930-4F9D-AD24-6C7147E4A5AA} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Task: {975FBD52-CF71-4AE4-B8AC-E21F2766F42B} - System32\Tasks\Tasker21 => C:\Users\Kuba\AppData\Roaming\Lib\tskschd.exe [2017-12-02] () Task: {CDC103DD-723C-45EF-A071-A49B14B934A7} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe HKU\S-1-5-18\...\Run: [KSS] => "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" autorun HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\...\StartupApproved\Run: => "uTorrent" HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\...\StartupApproved\Run: => "World of Tanks" HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\...\StartupApproved\Run: => "CyberGhost" HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\...\StartupApproved\Run: => "Kaspersky Software Updater" HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\...\StartupApproved\Run: => "BlueStacksFriends" HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA GroupPolicy: Ograniczenia <==== UWAGA CustomCLSID: HKU\S-1-5-21-1750907558-4260668389-1687080380-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Kuba\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Brak pliku CustomCLSID: HKU\S-1-5-21-1750907558-4260668389-1687080380-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Kuba\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Brak pliku CustomCLSID: HKU\S-1-5-21-1750907558-4260668389-1687080380-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Kuba\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Brak pliku ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => -> Brak pliku DeleteKey: HKCU\Software\Google\Chrome\Extensions DeleteKey: HKCU\Software\Mozilla DeleteKey: HKLM\SOFTWARE\Mozilla DeleteKey: HKLM\SOFTWARE\MozillaPlugins DeleteKey: HKLM\SOFTWARE\Wow6432Node\Mozilla DeleteKey: HKLM\SOFTWARE\Wow6432Node\mozilla.org DeleteKey: HKLM\SOFTWARE\Wow6432Node\MozillaPlugins Folder: C:\Users\Kuba\AppData\Roaming\java Folder: C:\Users\Kuba\AppData\Roaming\Lib C:\Users\Kuba\AppData\Roaming\java C:\Users\Kuba\AppData\Roaming\Lib C:\Users\Kuba\AppData\Roaming\Mozilla C:\Users\Kuba\AppData\Roaming\TunnelBear C:\Users\Kuba\AppData\Roaming\uTorrent C:\Users\Kuba\AppData\Local\Mozilla C:\Users\Kuba\AppData\LocalLow\Mozilla C:\ProgramData\Kaspersky Lab Setup Files C:\ProgramData\TEMP C:\ProgramData\MAGIX\Music Maker\25\MxSynth\Concert Grand LE.lnk C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk cmd: netsh advfirewall reset Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"} EmptyTemp: ***************** Procesy zostały pomyślnie zamknięte. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7155B8BB-9930-4F9D-AD24-6C7147E4A5AA}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7155B8BB-9930-4F9D-AD24-6C7147E4A5AA}" => pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => niepowodzenie przy usuwaniu. Odmowa dostępu. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{975FBD52-CF71-4AE4-B8AC-E21F2766F42B}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{975FBD52-CF71-4AE4-B8AC-E21F2766F42B}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\Tasker21 => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Tasker21" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{CDC103DD-723C-45EF-A071-A49B14B934A7}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CDC103DD-723C-45EF-A071-A49B14B934A7}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\AVAST Software\Avast settings backup => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVAST Software\Avast settings backup" => pomyślnie usunięto "HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\KSS" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\uTorrent" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\uTorrent" => nie znaleziono "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\World of Tanks" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\World of Tanks" => nie znaleziono "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\CyberGhost" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\CyberGhost" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Kaspersky Software Updater" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Kaspersky Software Updater" => nie znaleziono "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\BlueStacksFriends" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\BlueStacksFriends" => nie znaleziono HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA => pomyślnie przywrócono C:\WINDOWS\system32\GroupPolicy\Machine => pomyślnie przeniesiono C:\WINDOWS\system32\GroupPolicy\GPT.ini => pomyślnie przeniesiono C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => pomyślnie przeniesiono "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}" => pomyślnie usunięto "HKU\S-1-5-21-1750907558-4260668389-1687080380-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => nie znaleziono "HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => nie znaleziono "HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxDTCM" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{9B5F5829-A529-4B12-814A-E81BCB8D93FC} => nie znaleziono "HKCU\Software\Google\Chrome\Extensions" => pomyślnie usunięto "HKCU\Software\Mozilla" => pomyślnie usunięto "HKLM\SOFTWARE\Mozilla" => pomyślnie usunięto "HKLM\SOFTWARE\MozillaPlugins" => pomyślnie usunięto "HKLM\SOFTWARE\Wow6432Node\Mozilla" => pomyślnie usunięto HKLM\SOFTWARE\Wow6432Node\mozilla.org => nie znaleziono "HKLM\SOFTWARE\Wow6432Node\MozillaPlugins" => pomyślnie usunięto ========================= Folder: C:\Users\Kuba\AppData\Roaming\java ======================== 2018-02-25 13:04 - 2018-03-20 15:58 - 000000000 ____D [00000000000000000000000000000000] () C:\Users\Kuba\AppData\Roaming\java\webview 2018-02-25 13:04 - 2018-02-25 13:04 - 000000000 ____A [D41D8CD98F00B204E9800998ECF8427E] () C:\Users\Kuba\AppData\Roaming\java\webview\.lock 2018-02-25 13:04 - 2018-03-20 15:58 - 000000000 ____D [00000000000000000000000000000000] () C:\Users\Kuba\AppData\Roaming\java\webview\localstorage 2018-02-25 13:04 - 2018-02-25 13:04 - 000001024 ____A [46C250FDDC574724492A0FA3170789EE] () C:\Users\Kuba\AppData\Roaming\java\webview\localstorage\https_skmedix.pl_0.localstorage 2018-02-25 13:04 - 2018-03-20 15:58 - 000032768 ____A [0C034309C0DD67990A6F14D25677332C] () C:\Users\Kuba\AppData\Roaming\java\webview\localstorage\https_skmedix.pl_0.localstorage-shm 2018-02-25 13:04 - 2018-03-20 15:58 - 000102736 ____A [B1A98F137296526BAAD55670AA48D08A] () C:\Users\Kuba\AppData\Roaming\java\webview\localstorage\https_skmedix.pl_0.localstorage-wal ====== Koniec Folder: ====== ========================= Folder: C:\Users\Kuba\AppData\Roaming\Lib ======================== 2018-02-12 19:35 - 2014-09-06 10:36 - 000312992 ____A [CD5EA61DE3E346E86B3578BAFDED0551] (NVIDIA Corporation) C:\Users\Kuba\AppData\Roaming\Lib\cudart64_65.dll 2018-02-12 19:35 - 2017-02-23 14:16 - 000765624 ____A [D92321DBE722170168AAD8314ACC71AB] () C:\Users\Kuba\AppData\Roaming\Lib\Data.bin 2018-02-12 19:35 - 2017-09-01 08:16 - 000023482 ____A [23274FC41C0240749B4C17F552A950D1] () C:\Users\Kuba\AppData\Roaming\Lib\Data1a1.bin 2018-02-12 19:35 - 2017-09-01 09:15 - 000023902 ____A [A74A90283B5BD1EE1C92225FFED6A1D3] () C:\Users\Kuba\AppData\Roaming\Lib\Data1b1.bin 2018-02-12 19:35 - 2017-09-01 08:54 - 000023516 ____A [37A3096C15B1A91AB5ACFC3B2EB2FE4D] () C:\Users\Kuba\AppData\Roaming\Lib\Data1c1.bin 2018-02-12 19:35 - 2017-09-01 08:47 - 000023511 ____A [0B011929250ED61D3F89B39583B6ED7B] () C:\Users\Kuba\AppData\Roaming\Lib\Data1d1.bin 2018-02-12 19:35 - 2017-09-01 09:29 - 000023838 ____A [B03605AA363B799BDCA44FA4A0E003AC] () C:\Users\Kuba\AppData\Roaming\Lib\Data1e1.bin 2018-02-12 19:35 - 2017-09-01 09:30 - 000023838 ____A [CE25E180E888F99EEE327ECDA349D395] () C:\Users\Kuba\AppData\Roaming\Lib\Data1e2.bin 2018-02-12 19:35 - 2017-09-01 09:46 - 000023589 ____A [BA502CB2B0DAA51924700A330520D1E3] () C:\Users\Kuba\AppData\Roaming\Lib\Data1g1.bin 2018-02-12 19:35 - 2017-09-01 09:47 - 000023589 ____A [F64E67D92242E4EDBF1337ED6DEF6877] () C:\Users\Kuba\AppData\Roaming\Lib\Data1g2.bin 2018-02-12 19:35 - 2017-09-01 09:57 - 000023584 ____A [34CFD4BA1F823BA5D3B765B6598122A5] () C:\Users\Kuba\AppData\Roaming\Lib\Data1h1.bin 2018-02-12 19:35 - 2017-09-01 10:11 - 000055892 ____A [642363756900B4176AD522EFD4BA5C49] () C:\Users\Kuba\AppData\Roaming\Lib\Data1i1.bin 2018-02-12 19:35 - 2017-07-01 23:07 - 000000811 ____A [A9302F27A4AA6E442A080BC773F446BE] () C:\Users\Kuba\AppData\Roaming\Lib\dpools.txt 2018-02-12 19:35 - 2017-07-01 23:07 - 000000796 ____A [63B3B94506E518182D4B8C8AF144E983] () C:\Users\Kuba\AppData\Roaming\Lib\dpools_sia.txt 2018-02-12 19:35 - 2018-01-23 20:18 - 000000358 ____A [879A353DE85D528AF65917AEC41EACB7] () C:\Users\Kuba\AppData\Roaming\Lib\epools.txt 2018-02-12 19:35 - 2018-01-02 13:48 - 000000358 ____A [879A353DE85D528AF65917AEC41EACB7] () C:\Users\Kuba\AppData\Roaming\Lib\epools_etc.txt 2018-02-12 19:35 - 2017-07-01 23:07 - 000305664 ____A [98C2E649A39F58DBB7DC4B6B6232E8B4] (The cURL library, https://curl.haxx.se/) C:\Users\Kuba\AppData\Roaming\Lib\libcurl.dll 2018-02-12 19:35 - 2017-07-01 23:07 - 000849360 ____A [7C3B449F661D99A9B1033A14033D2987] (Microsoft Corporation) C:\Users\Kuba\AppData\Roaming\Lib\msvcr110.dll 2018-02-12 19:35 - 2017-10-26 10:55 - 003382784 ____A [F8CDD711B9900797941FF7347E14842B] () C:\Users\Kuba\AppData\Roaming\Lib\ntskrnl.exe 2018-02-12 19:35 - 2018-01-31 11:14 - 001014272 ____A [EED4E849A63D1E4161258E57DAB7E060] () C:\Users\Kuba\AppData\Roaming\Lib\ShellExperienseHost.exe 2018-02-12 19:35 - 2017-12-02 15:23 - 000989184 ____A [4953E2DA79F16EABFB98831ABFAB4FFE] () C:\Users\Kuba\AppData\Roaming\Lib\tskschd.exe ====== Koniec Folder: ====== C:\Users\Kuba\AppData\Roaming\java => pomyślnie przeniesiono C:\Users\Kuba\AppData\Roaming\Lib => pomyślnie przeniesiono C:\Users\Kuba\AppData\Roaming\Mozilla => pomyślnie przeniesiono C:\Users\Kuba\AppData\Roaming\TunnelBear => pomyślnie przeniesiono C:\Users\Kuba\AppData\Roaming\uTorrent => pomyślnie przeniesiono C:\Users\Kuba\AppData\Local\Mozilla => pomyślnie przeniesiono C:\Users\Kuba\AppData\LocalLow\Mozilla => pomyślnie przeniesiono C:\ProgramData\Kaspersky Lab Setup Files => pomyślnie przeniesiono C:\ProgramData\TEMP => pomyślnie przeniesiono C:\ProgramData\MAGIX\Music Maker\25\MxSynth\Concert Grand LE.lnk => pomyślnie przeniesiono C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk => pomyślnie przeniesiono ========= netsh advfirewall reset ========= Ok. ========= Koniec CMD: ========= ========= wevtutil el | Foreach-Object {wevtutil cl "$_"} ========= ========= Koniec Powershell: ========= =========== EmptyTemp: ========== BITS transfer queue => 9199616 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 82918416 B Java, Flash, Steam htmlcache => 255324956 B Windows/system/drivers => 437954 B Edge => 3283777 B Chrome => 804573608 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 9070 B NetworkService => 0 B defaultuser0 => 7168 B Kuba => 113795410 B RecycleBin => 922885350 B EmptyTemp: => 2 GB danych tymczasowych Usunięto. ================================ Rezultat przenoszenia plików przy restarcie (Tryb startu: Normal) (Data i godzina: 20-03-2018 19:12:30) Rezultat usuwania kluczy przy restarcie: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => niepowodzenie przy usuwaniu. Odmowa dostępu. ==== Koniec Fixlog 19:12:30 ====