Rezultat naprawy Farbar Recovery Scan Tool (x86) Wersja:01-12-2015
Uruchomiony przez slawek (2015-12-04 23:54:27) Run:2
Uruchomiony z C:\Documents and Settings\slawek\Pulpit
Załadowane profile: slawek (Dostępne profile: slawek)
Tryb startu: Normal

==============================================

fixlist - zawartość:
*****************
CloseProcesses:CreateRestorePoint:S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2015-12-03] ()S3 GMSIPCI; \??\I:\INSTALL\GMSIPCI.SYS [X]AlternateDataStreams: C:\Documents and Settings\slawek\Local Settings:initRemoveDirectory: C:\AdwCleanerRemoveDirectory: C:\Program Files\ParetoLogicRemoveDirectory: C:\Documents and Settings\All Users\Dane aplikacji\HitmanProRemoveDirectory: C:\Documents and Settings\All Users\Dane aplikacji\ParetoLogicRemoveDirectory: C:\Documents and Settings\slawek\Dane aplikacji\7f30610RemoveDirectory: C:\Documents and Settings\slawek\Dane aplikacji\7164054RemoveDirectory: C:\Documents and Settings\slawek\Dane aplikacji\www.shadowexplorer.comRemoveDirectory: C:\Documents and Settings\slawek\Ustawienia lokalne\Dane aplikacji\www.shadowexplorer.comRemoveDirectory: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtensionCMD: del /q "C:\Documents and Settings\slawek\Dane aplikacji\cc3e11"CMD: del /q "C:\Documents and Settings\slawek\Dane aplikacji\a7905487f"CMD: del /q "C:\Documents and Settings\slawek\Dane aplikacji\Microsoft\Office\Niedawny\*.LNK"CMD: del /q "C:\Documents and Settings\slawek\SendTo\Android (ALLPlayer Pilot).lnk"CMD: del /q C:\WINDOWS\system32\Drivers\EsgScanner.sysCMD: attrib -r -h -s C:\HELP_YOUR_FILES.* /sCMD: attrib -r -h -s D:\HELP_YOUR_FILES.* /sCMD: attrib -r -h -s E:\HELP_YOUR_FILES.* /sCMD: attrib -r -h -s F:\HELP_YOUR_FILES.* /sCMD: attrib -r -h -s G:\HELP_YOUR_FILES.* /sCMD: attrib -r -h -s H:\HELP_YOUR_FILES.* /sCMD: attrib -r -h -s I:\HELP_YOUR_FILES.* /sCMD: attrib -r -h -s J:\HELP_YOUR_FILES.* /sCMD: attrib -r -h -s K:\HELP_YOUR_FILES.* /sCMD: del /q /s C:\HELP_YOUR_FILES.*CMD: del /q /s D:\HELP_YOUR_FILES.*CMD: del /q /s E:\HELP_YOUR_FILES.*CMD: del /q /s F:\HELP_YOUR_FILES.*CMD: del /q /s G:\HELP_YOUR_FILES.*CMD: del /q /s H:\HELP_YOUR_FILES.*CMD: del /q /s I:\HELP_YOUR_FILES.*CMD: del /q /s J:\HELP_YOUR_FILES.*Reg: reg delete HKLM\SOFTWARE\Google /fReg: reg delete HKLM\SOFTWARE\Mozilla\Firefox\Extensions /fReg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /fReg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /fReg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /fEmptyTemp:


*****************

Procesy zostały pomyślnie zamknięte.


System wymagał restartu.

==== Koniec  Fixlog 23:54:27 ====