Rezultat naprawy Farbar Recovery Scan Tool (x86) Wersja:31-12-2015 Uruchomiony przez raster (2016-01-05 23:23:06) Run:1 Uruchomiony z C:\Documents and Settings\raster\Pulpit\fixitpc\logi_2\krok_2 Załadowane profile: raster (Dostępne profile: wladek & raster & Administrator) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** 2015-11-18 19:56 - 2015-11-18 18:40 - 00450560 _____ () C:\Documents and Settings\All Users\Dane aplikacji\Lightzap\Lightzap.exe 2016-01-05 13:55 - 2016-01-05 13:55 - 00011264 _____ () C:\Documents and Settings\raster\Ustawienia lokalne\Temp\nsd3.tmp\System.dll 2016-01-05 13:55 - 2016-01-05 13:55 - 00029696 _____ () C:\Documents and Settings\raster\Ustawienia lokalne\Temp\nsd3.tmp\registry.dll C:\Documents and Settings\All Users\Dane aplikacji\Lightzap AppInit_DLLs: C:\DOCUME~1\ALLUSE~1\DANEAP~1\Lightzap\Goldenlax.dll => C:\Documents and Settings\All Users\Dane aplikacji\Lightzap\Goldenlax.dll [257536 2015-12-24] () ShellExecuteHooks: - {4F07DA45-8170-4859-9B5F-037EF2970034} - Brak pliku [ ] HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp4759jAFKokSGTBkMP_V4GlSpQBj6ASrnZe3K-wPNOd89amG1Br5XwIfljc6hVgL9Q22vXLs-zMscNQ,, HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp4759jAFKokSGTBkMP_V4GlSpQBj6ASrnZe3K-wPNOd89amG1Br5XwIfljc6hVgL9Q22vXLs-zMscNQ,, HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp4759jAFKokSGTBkMP_V4GlSpQBj6ASrnZe3K-wPNOd89amG1Br5XwIfljc6hVgL9Q22vXLs-zMscNQ,, HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} SearchScopes: HKLM -> DefaultScope {ielnksrch} URL = SearchScopes: HKLM -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} SearchScopes: HKU\S-1-5-19 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} SearchScopes: HKU\S-1-5-19 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} SearchScopes: HKU\S-1-5-20 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} SearchScopes: HKU\S-1-5-20 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} SearchScopes: HKU\S-1-5-21-1960020898-1095186509-1354452871-1008 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} SearchScopes: HKU\S-1-5-21-1960020898-1095186509-1354452871-1008 -> {1C423F1B-2632-41E1-8051-4D5DA14D6033} URL = hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms} SearchScopes: HKU\S-1-5-21-1960020898-1095186509-1354452871-1008 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDUb-V7nq-BDqLH87FrPW2zIhSUOYrz6idWaMC_9YGveKH1PfRmj4aahhkCONRp47I077GI3Qy0Nc4bq248Ri1b1EPiEdXZTO_cUukJjv7wMlCuPtHYlGzi0s2935P5KkE77SgAXNX7ng,,&q={searchTerms} BHO: Brak nazwy -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> Brak pliku BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22] (Sun Microsystems, Inc.) BHO: Brak nazwy -> {A3BC75A2-1F87-4686-AA43-5347D756017C} -> Brak pliku Toolbar: HKLM - Brak nazwy - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - Brak pliku Toolbar: HKU\S-1-5-21-1960020898-1095186509-1354452871-1008 -> &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Brak pliku Toolbar: HKU\S-1-5-21-1960020898-1095186509-1354452871-1008 -> Brak nazwy - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - Brak pliku DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab R2 Lightzap; C:\Documents and Settings\All Users\Dane aplikacji\\Lightzap\\Lightzap.exe [450560 2015-11-18] () [Brak podpisu cyfrowego] S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [X] DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{053D4FA2-ABD0-4E9D-9764-CC578C10294C} S3 bdfdll; \??\C:\Program Files\Softwin\BitDefender9\bdfdll.sys [X] C:\Documents and Settings\All Users\hash.dat C:\Documents and Settings\All Users\Menu Start\Programy\PL-2303 USB-Serial Driver\Uninstaller.lnk C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\256_Ulotka.LNK C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\243_magazyn.LNK C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\2179_centertel.LNK C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\Agreessia.LNK C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\Agressja.LNK C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\Badania_skany.LNK C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\Der Polacke.doc.LNK C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\Drogisms.doc.LNK C:\Documents and Settings\raster\Dane aplikacji\Microsoft\Office\Niedawny\GOTOWE_z_CO.LNK EmptyTemp: ***************** C:\Documents and Settings\All Users\Dane aplikacji\Lightzap\Lightzap.exe => pomyślnie przeniesiono "C:\Documents and Settings\raster\Ustawienia lokalne\Temp\nsd3.tmp\System.dll" => nie znaleziono. "C:\Documents and Settings\raster\Ustawienia lokalne\Temp\nsd3.tmp\registry.dll" => nie znaleziono. "C:\Documents and Settings\All Users\Dane aplikacji\Lightzap" folder - przenoszenie: Nie można przenieść "C:\Documents and Settings\All Users\Dane aplikacji\Lightzap" => Zaplanowany do przeniesienia przy restarcie. "C:\DOCUME~1\ALLUSE~1\DANEAP~1\Lightzap\Goldenlax.dll" => Dane wartości pomyślnie usunięto. HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{4F07DA45-8170-4859-9B5F-037EF2970034} => Wartość pomyślnie usunięto HKCR\CLSID\{4F07DA45-8170-4859-9B5F-037EF2970034} => klucz nie znaleziono. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie usunięto HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Search Bar => Wartość pomyślnie usunięto HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie usunięto HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\SearchAssistant => Wartość pomyślnie usunięto HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie usunięto HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Search Bar => Wartość pomyślnie usunięto HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie usunięto HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\SearchAssistant => Wartość pomyślnie usunięto HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main\\Search Bar => Wartość pomyślnie usunięto HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main\\SearchMigratedDefaultURL => Wartość pomyślnie usunięto HKU\S-1-5-21-1960020898-1095186509-1354452871-1008\Software\Microsoft\Internet Explorer\Main\\SearchAssistant => Wartość pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch => klucz nie znaleziono.