Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:14-12-2015 Uruchomiony przez Piotrek (2015-12-15 23:34:09) Run:1 Uruchomiony z D:\Download\frst Załadowane profile: Piotrek (Dostępne profile: Piotrek & Administrator) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: R2 IhPul; C:\Users\Piotrek\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-14] (tsvr.com) R2 WdMan; C:\ProgramData\JWdMJ\WdMan.exe [333312 2015-12-14] (TFuns LIMITED) [Brak podpisu cyfrowego] ShortcutWithArgument: C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\Users\Piotrek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\Users\Piotrek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\Users\Piotrek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\Users\Piotrek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> D:\Programy\mozilla\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> D:\Programy\mozilla\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 <==== UWAGA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653&q={searchTerms} HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653&q={searchTerms} HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 SearchScopes: HKLM -> DefaultScope - brak wartości SearchScopes: HKLM-x32 -> DefaultScope - brak wartości SearchScopes: HKU\S-1-5-21-4237668962-1813254712-1803451927-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653&q={searchTerms} SearchScopes: HKU\S-1-5-21-4237668962-1813254712-1803451927-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653&q={searchTerms} SearchScopes: HKU\S-1-5-21-4237668962-1813254712-1803451927-1000 -> {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} BHO-x32: Brak nazwy -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> Brak pliku DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://start.qone8.com/?type=sc&ts=1382388326&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\1ognvtv4.default\extensions\faststartff@gmail.com FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\1ognvtv4.default\extensions\shortcutff@gmail.com FF HKLM-x32\...\Firefox\Extensions: [detgdp@gmail.com] - C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\1ognvtv4.default\extensions\detgdp@gmail.com FF HKLM-x32\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\1ognvtv4.default\extensions\quick_searchff@gmail.com FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\1ognvtv4.default\extensions\default_newtabff@gmail.com FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\1ognvtv4.default\extensions\defsearchp@gmail.com FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\1ognvtv4.default\extensions\deskCutv2@gmail.com FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\1ognvtv4.default\extensions\yahooprotected@gmail.com StartMenuInternet: FIREFOX.EXE - D:\Programy\mozilla\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.yoursites123.com/?type=sc&ts=1450109518&z=6dbe7adc9a19de03ca1bf37g0z5w4e2g5ect8w7gem&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2U5J9DD420653 Task: {3AA83FDB-0F15-4FC7-A0F2-853FE4EB40CB} - System32\Tasks\{0D70EE84-6874-4319-8E63-BDEFCD5905B6} => F:\setup.exe [2007-10-17] () Task: {5310A72B-6DC6-4BA4-ACA8-FFEECCE21800} - System32\Tasks\{5F32A1CA-989A-4F4C-8AF4-E7D2AD7191BF} => pcalua.exe -a C:\Users\Piotrek\Downloads\converter.exe -d C:\Users\Piotrek\Downloads Task: {B575AA88-14D4-444D-918F-5843BAC78B5A} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {B82B445E-1EB6-4D94-9C1E-518320FFF168} - System32\Tasks\{BEDB08B8-0195-49A2-85D5-C609C4EA6BA8} => pcalua.exe -a C:\Users\Piotrek\Desktop\htc\RUU_Leo_S_TMO_PL_3.14.118.1_Radio_15.42.50.11U_2.15.50.14_LEO_S_Ship.exe -d C:\Users\Piotrek\Desktop\htc Task: {BAFC77E9-A984-484A-B5C1-F20193993AE3} - System32\Tasks\{E80E4FFC-C212-4AD0-BEC8-15E1BFE37ED4} => pcalua.exe -a F:\setup.exe -d F:\ Task: {CA955A90-5704-4D11-8BDD-690E6D6D3D52} - System32\Tasks\{2EA9D6FD-E4BC-48A4-B4D8-0113D4B626EA} => pcalua.exe -a F:\directx\dxsetup.exe -d F:\directx HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\...\Policies\Explorer: [] S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X] S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X] S3 btath_avdt; system32\drivers\btath_avdt.sys [X] S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X] S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X] S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X] S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X] S3 BtFilter; system32\DRIVERS\btfilter.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S1 {55685567-4840-4a91-962b-49a412e9485a}Gw64; system32\drivers\{55685567-4840-4a91-962b-49a412e9485a}Gw64.sys [X] S1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64; system32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys [X] DeleteKey: HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I DeleteKey: HKCU\Software\dobreprogramy DeleteKey: HKCU\Software\Google\Chrome\Extensions DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 DeleteKey: HKLM\SOFTWARE\Google\Chrome\Extensions DeleteKey: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 29.0.1 (x86 pl) DeleteKey: HKLM\SOFTWARE\Wow6432Node\yoursites123Software RemoveDirectory: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins RemoveDirectory: C:\Program Files (x86)\Opera RemoveDirectory: C:\ProgramData\6WMiniPro6 RemoveDirectory: C:\ProgramData\JWdMJ RemoveDirectory: C:\ProgramData\yWdMy RemoveDirectory: C:\Users\Piotrek\AppData\Local\Opera Software RemoveDirectory: C:\Users\Piotrek\AppData\Roaming\.ACEStream RemoveDirectory: C:\Users\Piotrek\AppData\Roaming\ACEStream RemoveDirectory: C:\Users\Piotrek\AppData\Roaming\istartsurf RemoveDirectory: C:\Users\Piotrek\AppData\Roaming\Opera Software RemoveDirectory: C:\Users\Piotrek\AppData\Roaming\Shortcut RemoveDirectory: C:\Users\Piotrek\AppData\Roaming\TSv C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CWK.lnk C:\Users\Piotrek\Desktop\CWK.lnk C:\Windows\SysWOW64\pl.html CMD: netsh advfirewall reset EmptyTemp: ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. IhPul => serwis pomyślnie usunięto WdMan => serwis pomyślnie usunięto C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk => Skrót - argument pomyślnie usunięto. C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk => Skrót - argument pomyślnie przywrócono C:\Users\Piotrek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Piotrek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Piotrek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Piotrek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Public\Desktop\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Public\Desktop\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie przywrócono HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie usunięto "HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => klucz pomyślnie usunięto HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => klucz nie znaleziono. "HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A}" => klucz pomyślnie usunięto HKCR\CLSID\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A} => klucz nie znaleziono. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F91A9A1-01BA-4c81-863D-3BA0751E1419}" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{1F91A9A1-01BA-4c81-863D-3BA0751E1419} => klucz nie znaleziono. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}" => klucz pomyślnie usunięto "HKCR\Wow6432Node\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}" => klucz pomyślnie usunięto HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\faststartff@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\shortcutff@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\detgdp@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\quick_searchff@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\default_newtabff@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\defsearchp@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\deskCutv2@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\yahooprotected@gmail.com => Wartość pomyślnie usunięto HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\Default => Wartość pomyślnie przywrócono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3AA83FDB-0F15-4FC7-A0F2-853FE4EB40CB}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3AA83FDB-0F15-4FC7-A0F2-853FE4EB40CB}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\{0D70EE84-6874-4319-8E63-BDEFCD5905B6} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{0D70EE84-6874-4319-8E63-BDEFCD5905B6}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5310A72B-6DC6-4BA4-ACA8-FFEECCE21800}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5310A72B-6DC6-4BA4-ACA8-FFEECCE21800}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\{5F32A1CA-989A-4F4C-8AF4-E7D2AD7191BF} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5F32A1CA-989A-4F4C-8AF4-E7D2AD7191BF}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B575AA88-14D4-444D-918F-5843BAC78B5A}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B575AA88-14D4-444D-918F-5843BAC78B5A}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\Launch HTC Sync Loader => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Launch HTC Sync Loader" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B82B445E-1EB6-4D94-9C1E-518320FFF168}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B82B445E-1EB6-4D94-9C1E-518320FFF168}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\{BEDB08B8-0195-49A2-85D5-C609C4EA6BA8} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BEDB08B8-0195-49A2-85D5-C609C4EA6BA8}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BAFC77E9-A984-484A-B5C1-F20193993AE3}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BAFC77E9-A984-484A-B5C1-F20193993AE3}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\{E80E4FFC-C212-4AD0-BEC8-15E1BFE37ED4} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E80E4FFC-C212-4AD0-BEC8-15E1BFE37ED4}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CA955A90-5704-4D11-8BDD-690E6D6D3D52}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CA955A90-5704-4D11-8BDD-690E6D6D3D52}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\{2EA9D6FD-E4BC-48A4-B4D8-0113D4B626EA} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2EA9D6FD-E4BC-48A4-B4D8-0113D4B626EA}" => klucz pomyślnie usunięto HKU\S-1-5-21-4237668962-1813254712-1803451927-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => Wartość pomyślnie usunięto AthBTPort => serwis pomyślnie usunięto BTATH_A2DP => serwis pomyślnie usunięto btath_avdt => serwis pomyślnie usunięto BTATH_BUS => serwis pomyślnie usunięto BTATH_HCRP => serwis pomyślnie usunięto BTATH_LWFLT => serwis pomyślnie usunięto BTATH_RCP => serwis pomyślnie usunięto BtFilter => serwis pomyślnie usunięto VGPU => serwis pomyślnie usunięto {55685567-4840-4a91-962b-49a412e9485a}Gw64 => serwis pomyślnie usunięto {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64 => serwis pomyślnie usunięto HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I => klucz pomyślnie usunięto HKCU\Software\dobreprogramy => klucz pomyślnie usunięto HKCU\Software\Google\Chrome\Extensions => niepowodzenie przy usuwaniu w pierwszym podejściu (ErrorCode: C0000121), zobacz kolejną linię. HKCU\Software\Google\Chrome\Extensions => klucz pomyślnie usunięto HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 => niepowodzenie przy usuwaniu w pierwszym podejściu (ErrorCode: C0000121), zobacz kolejną linię. HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 => klucz pomyślnie usunięto HKLM\SOFTWARE\Google\Chrome\Extensions => niepowodzenie przy usuwaniu w pierwszym podejściu (ErrorCode: C0000121), zobacz kolejną linię. HKLM\SOFTWARE\Google\Chrome\Extensions => klucz pomyślnie usunięto HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions => niepowodzenie przy usuwaniu w pierwszym podejściu (ErrorCode: C0000121), zobacz kolejną linię. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions => klucz pomyślnie usunięto HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 29.0.1 (x86 pl) => klucz pomyślnie usunięto HKLM\SOFTWARE\Wow6432Node\yoursites123Software => niepowodzenie przy usuwaniu w pierwszym podejściu (ErrorCode: C0000121), zobacz kolejną linię. HKLM\SOFTWARE\Wow6432Node\yoursites123Software => klucz pomyślnie usunięto "C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins" => pomyślnie usunięto. "C:\Program Files (x86)\Opera" => pomyślnie usunięto. "C:\ProgramData\6WMiniPro6" => pomyślnie usunięto. "C:\ProgramData\JWdMJ" => pomyślnie usunięto. "C:\ProgramData\yWdMy" => pomyślnie usunięto. "C:\Users\Piotrek\AppData\Local\Opera Software" => pomyślnie usunięto. "C:\Users\Piotrek\AppData\Roaming\.ACEStream" => pomyślnie usunięto. "C:\Users\Piotrek\AppData\Roaming\ACEStream" => pomyślnie usunięto. "C:\Users\Piotrek\AppData\Roaming\istartsurf" => pomyślnie usunięto. "C:\Users\Piotrek\AppData\Roaming\Opera Software" => pomyślnie usunięto. "C:\Users\Piotrek\AppData\Roaming\Shortcut" => pomyślnie usunięto. "C:\Users\Piotrek\AppData\Roaming\TSv" => pomyślnie usunięto. C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat => pomyślnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CWK.lnk => pomyślnie przeniesiono C:\Users\Piotrek\Desktop\CWK.lnk => pomyślnie przeniesiono C:\Windows\SysWOW64\pl.html => pomyślnie przeniesiono ========= netsh advfirewall reset ========= Ok. ========= Koniec CMD: ========= EmptyTemp: => 1.3 GB danych tymczasowych Usunięto. System wymagał restartu. ==== Koniec Fixlog 23:35:05 ====