Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 02.08.2018 Uruchomiony przez krzysztof (17-08-2018 16:36:25) Run:1 Uruchomiony z C:\Users\krzysztof\Desktop\diagnostyka Załadowane profile: krzysztof (Dostępne profile: defaultuser0 & krzysztof) Tryb startu: Safe Mode (with Networking) ============================================== fixlist - zawartość: ***************** CloseProcesses: GroupPolicy: Ograniczenia ? <==== UWAGA S3 cpuz143; C:\Users\krzysztof\AppData\Local\Temp\cpuz143\cpuz143_x64.sys [48960 2018-08-04] (CPUID) <==== UWAGA S4 NVHDA; \SystemRoot\system32\drivers\nvhda64v.sys [X] Task: {16E2883A-4A2C-4DBF-B002-650B9B367D2D} - System32\Tasks\HWiNFO => C:\Program Files\HWiNFO64\HWiNFO64.EXE Task: {4732B0DA-23A3-4B56-A927-C5B4CDA288AD} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe Task: {476EA66C-9625-4D1B-A9CC-64FB363F839D} - System32\Tasks\{C5417074-36DF-1E13-EFC8-2E8A8C665E6E} => C:\Users\krzysztof\AppData\Local\EUOuJo.exe [2018-04-12] (Microsoft Corporation) Task: {64A8D018-EADD-4096-BC25-3B473F98A2C4} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Task: {93E670AB-0958-4DF2-B264-9F8E33D555B5} - System32\Tasks\{E49375D7-9671-3F15-CB94-EA9AD4E5FB6E} => C:\Users\krzysztof\YEByePsA.exe [2018-04-12] (Microsoft Corporation) Task: {A4BF238C-8F56-40FD-863F-BD02AAB3B787} - System32\Tasks\cFos\Registration Tasks\Open Browser => c:\windows\system32\launchwinapp.exe "hxxp://www.cfos.de/pl/traffic-shaping/calibration.htm?reg-10.10.2238-asrock&tsa=" Task: {E15FD7D3-AEA7-4E8A-A9CE-9B273073D200} - System32\Tasks\{8DC18D73-E6FA-209D-D55D-C6BEB84EFB78} => "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://puklusi.ru/cl/?guid=obwvy0m4z2scscgq5wm314f5jfdzstt7&prid=1&pid=4_1324_0 ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku HKLM\...\StartupApproved\Run: => "XFast LAN" HKLM\...\StartupApproved\Run32: => "Sound Blaster Cinema 3" HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui" HKU\S-1-5-21-518638446-864889298-562796940-1001\...\StartupApproved\Run: => "OneDriveSetup" C:\Users\krzysztof\EjurYxUEojy.exe C:\Users\krzysztof\YEByePsA.exe C:\Users\krzysztof\AppData\Local\EUOuJo.exe C:\Users\krzysztof\AppData\Local\imw.ini C:\Users\krzysztof\AppData\Local\Tempbannercash.tmp C:\Users\krzysztof\AppData\Local\Tempnewscash.tmp C:\Users\krzysztof\AppData\Local\Wow64Cache C:\Users\krzysztof\AppData\Roaming\FiraxisLive C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk C:\Users\krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk C:\Users\krzysztof\Desktop\CivilizationVI_DX12 — skrót .lnk C:\Users\krzysztof\Links\OneDrive.lnk Folder: C:\WINDOWS\{C0DBEF00-2BEB-4F04-B2D3-8007390D5C0B} Folder: C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A} Folder: C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7} cmd: netsh advfirewall reset Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"} EmptyTemp: ***************** Procesy zostały pomyślnie zamknięte. C:\WINDOWS\system32\GroupPolicy\Machine => pomyślnie przeniesiono C:\WINDOWS\system32\GroupPolicy\GPT.ini => pomyślnie przeniesiono "HKLM\System\CurrentControlSet\Services\cpuz143" => pomyślnie usunięto cpuz143 => serwis pomyślnie usunięto "HKLM\System\CurrentControlSet\Services\NVHDA" => pomyślnie usunięto NVHDA => serwis pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{16E2883A-4A2C-4DBF-B002-650B9B367D2D}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16E2883A-4A2C-4DBF-B002-650B9B367D2D}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\HWiNFO => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HWiNFO" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4732B0DA-23A3-4B56-A927-C5B4CDA288AD}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4732B0DA-23A3-4B56-A927-C5B4CDA288AD}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\Microsoft\Windows\Setup\Notifier => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\Notifier" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{476EA66C-9625-4D1B-A9CC-64FB363F839D}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{476EA66C-9625-4D1B-A9CC-64FB363F839D}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{C5417074-36DF-1E13-EFC8-2E8A8C665E6E} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C5417074-36DF-1E13-EFC8-2E8A8C665E6E}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{64A8D018-EADD-4096-BC25-3B473F98A2C4}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64A8D018-EADD-4096-BC25-3B473F98A2C4}" => pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => nie znaleziono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{93E670AB-0958-4DF2-B264-9F8E33D555B5}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{93E670AB-0958-4DF2-B264-9F8E33D555B5}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{E49375D7-9671-3F15-CB94-EA9AD4E5FB6E} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E49375D7-9671-3F15-CB94-EA9AD4E5FB6E}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4BF238C-8F56-40FD-863F-BD02AAB3B787}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4BF238C-8F56-40FD-863F-BD02AAB3B787}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\cFos\Registration Tasks\Open Browser => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\cFos\Registration Tasks\Open Browser" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E15FD7D3-AEA7-4E8A-A9CE-9B273073D200}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E15FD7D3-AEA7-4E8A-A9CE-9B273073D200}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{8DC18D73-E6FA-209D-D55D-C6BEB84EFB78} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8DC18D73-E6FA-209D-D55D-C6BEB84EFB78}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => nie znaleziono "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7" => pomyślnie usunięto HKLM\Software\Wow6432Node\Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => nie znaleziono "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\XFast LAN" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\XFast LAN" => nie znaleziono "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\Sound Blaster Cinema 3" => pomyślnie usunięto "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Sound Blaster Cinema 3" => nie znaleziono "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\LogMeIn Hamachi Ui" => pomyślnie usunięto "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui" => nie znaleziono "HKU\S-1-5-21-518638446-864889298-562796940-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\OneDriveSetup" => pomyślnie usunięto "HKU\S-1-5-21-518638446-864889298-562796940-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\OneDriveSetup" => pomyślnie usunięto C:\Users\krzysztof\EjurYxUEojy.exe => pomyślnie przeniesiono C:\Users\krzysztof\YEByePsA.exe => pomyślnie przeniesiono C:\Users\krzysztof\AppData\Local\EUOuJo.exe => pomyślnie przeniesiono C:\Users\krzysztof\AppData\Local\imw.ini => pomyślnie przeniesiono C:\Users\krzysztof\AppData\Local\Tempbannercash.tmp => pomyślnie przeniesiono C:\Users\krzysztof\AppData\Local\Tempnewscash.tmp => pomyślnie przeniesiono C:\Users\krzysztof\AppData\Local\Wow64Cache => pomyślnie przeniesiono C:\Users\krzysztof\AppData\Roaming\FiraxisLive => pomyślnie przeniesiono C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk => pomyślnie przeniesiono C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk => pomyślnie przeniesiono C:\Users\krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk => pomyślnie przeniesiono C:\Users\krzysztof\Desktop\CivilizationVI_DX12 — skrót .lnk => pomyślnie przeniesiono C:\Users\krzysztof\Links\OneDrive.lnk => pomyślnie przeniesiono ========================= Folder: C:\WINDOWS\{C0DBEF00-2BEB-4F04-B2D3-8007390D5C0B} ======================== 2018-08-17 14:18 - 2018-08-17 14:19 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{C0DBEF00-2BEB-4F04-B2D3-8007390D5C0B}\12149 2018-08-17 14:25 - 2018-08-17 14:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{C0DBEF00-2BEB-4F04-B2D3-8007390D5C0B}\13393 2018-08-17 14:35 - 2018-08-17 14:36 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{C0DBEF00-2BEB-4F04-B2D3-8007390D5C0B}\15519 2018-08-17 15:05 - 2018-08-17 15:06 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{C0DBEF00-2BEB-4F04-B2D3-8007390D5C0B}\21397 2018-08-17 15:08 - 2018-08-17 15:09 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{C0DBEF00-2BEB-4F04-B2D3-8007390D5C0B}\21923 2018-08-17 13:30 - 2018-08-17 13:31 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{C0DBEF00-2BEB-4F04-B2D3-8007390D5C0B}\2741 ====== Koniec Folder: ====== ========================= Folder: C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A} ======================== 2018-08-07 10:52 - 2018-08-07 10:52 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\1041 2018-08-07 20:04 - 2018-08-07 20:04 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\10978 2018-08-08 18:25 - 2018-08-08 18:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\11520 2018-08-07 11:53 - 2018-08-07 11:53 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\12941 2018-08-07 11:56 - 2018-08-07 11:56 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\13643 2018-08-07 20:25 - 2018-08-07 20:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\15044 2018-08-07 16:29 - 2018-08-07 16:29 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\1594 2018-08-07 12:25 - 2018-08-07 12:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\19283 2018-08-08 16:25 - 2018-08-08 16:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\20753 2018-08-08 20:25 - 2018-08-08 20:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\2245 2018-08-07 18:25 - 2018-08-07 18:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\24293 2018-08-08 11:30 - 2018-08-08 11:30 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\28534 2018-08-08 00:25 - 2018-08-08 00:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\29238 2018-08-08 14:25 - 2018-08-08 14:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\30025 2018-08-07 22:25 - 2018-08-07 22:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\5749 2018-08-08 12:25 - 2018-08-08 12:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\6510 2018-08-07 16:25 - 2018-08-07 16:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\771 2018-08-07 14:25 - 2018-08-07 14:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{9313CB30-7832-4851-AF74-A21456C4EF2A}\9994 ====== Koniec Folder: ====== ========================= Folder: C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7} ======================== 2018-08-06 21:03 - 2018-08-06 21:03 - 002630236 ____A [BEC062AD9EA7E44B263F4E16DF6F1873] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\_wow64.ocx.zip 2018-08-07 00:56 - 2018-08-07 00:56 - 002630194 ____A [0996FD4BD23DA19B8F8F392C28AAF589] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\PkgMgr.iso.zip 2018-02-13 02:33 - 2018-02-13 02:33 - 000167936 ____A [75375C22C72F1BEB76BEA39C22A1ED68] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\unzip.exe 2018-08-06 16:25 - 2018-08-06 16:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\13534 2018-08-06 11:15 - 2018-08-06 11:15 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\18268 2018-08-06 22:24 - 2018-08-06 22:24 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\18390 2018-08-06 22:25 - 2018-08-06 22:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\18511 2018-08-06 00:25 - 2018-08-06 00:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\21998 2018-08-06 14:25 - 2018-08-06 14:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\22793 2018-08-06 14:50 - 2018-08-06 14:50 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\27714 2018-08-06 20:25 - 2018-08-06 20:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\27793 2018-08-06 09:20 - 2018-08-06 09:20 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\28575 2018-08-05 22:25 - 2018-08-05 22:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\31280 2018-08-06 12:25 - 2018-08-06 12:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\32039 2018-08-06 18:25 - 2018-08-06 18:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\4268 2018-08-06 10:25 - 2018-08-06 10:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\8481 2018-08-07 00:25 - 2018-08-07 00:25 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\9239 2018-08-06 10:31 - 2018-08-06 10:32 - 000000000 ____D [00000000000000000000000000000000] () C:\WINDOWS\{7CB0BBD3D374-4DEA-9751-2D08BC721AA7}\9820 ====== Koniec Folder: ====== ========= netsh advfirewall reset ========= Ok. ========= Koniec CMD: ========= ========= wevtutil el | Foreach-Object {wevtutil cl "$_"} ========= ========= Koniec Powershell: ========= =========== EmptyTemp: ========== BITS transfer queue => 6053888 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 33066477 B Java, Flash, Steam htmlcache => 12436801 B Windows/system/drivers => 1466620 B Edge => 2880937 B Chrome => 0 B Firefox => 783213718 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B LocalService => 0 B NetworkService => 107348 B NetworkService => 0 B defaultuser0 => 0 B krzysztof => 7378646 B RecycleBin => 834038119 B EmptyTemp: => 1.6 GB danych tymczasowych Usunięto. ================================ System wymagał restartu. ==== Koniec Fixlog 16:37:11 ====