Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:25-01-2016 Uruchomiony przez lukasz.niszcz (2016-02-06 16:45:45) Run:2 Uruchomiony z C:\Users\lukasz.niszcz\Downloads ZaÅ‚adowane profile: lukasz.niszcz & Administrator (DostÄ™pne profile: lukasz.niszcz & Administrator & DefaultAppPool) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: ShortcutWithArgument: C:\Users\lukasz.niszcz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursearching.com/?type=sc&ts=1453129004&z=ebaf80af459dbc8bae475f8gfz9wec6g7o7teefe1z&from=exp1&uid=liteonitxlcm-256m3sx2x5xx7mmx256gb_tw0wkjr2550852c51502 U3 idsvc; Brak ImagePath U3 wpcsvc; Brak ImagePath HKU\S-1-5-21-2387826781-902882918-947777316-500\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun Task: {02FC9FF5-8759-49FC-9CEB-686FC7FB5A4E} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe Task: {0CD6FF09-58A3-4B2C-927B-7528CED8B7A9} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA Task: {0EC5C0BE-5CCC-4B19-ADE9-F00C2EA7A267} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe Task: {1259D7A2-134A-4A0B-908C-F038C08D8E12} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {1464FBD3-68B0-4567-B6EF-5EE5929FC180} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe Task: {1799C230-7D13-4C25-8026-F135FBC20A9E} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe Task: {334E3401-1738-40F6-8640-E30C76D98C3D} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe Task: {37491E6E-81B9-43CF-A4F9-0B054203ADC4} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {3832A5E1-E6BF-45A2-BE4B-D535C92939D1} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {3A61D3FB-1D1C-4F15-8D58-93B9E7778CC2} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe Task: {3AE0C5C2-9C2E-4BC7-B6CC-DF3D0425FE7D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {424A2DC0-88C0-4442-9079-43527CC810FE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {51B3CCB5-CE4E-4B7D-A028-EE914860072C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {5649A0FA-B3B2-4067-B809-00EA4D7A255E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA Task: {60D80493-221D-4FEE-8596-B67C84E6BD80} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe Task: {68F5A15E-57C5-4CA4-808A-B2F97A507886} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA Task: {71C3449B-4B84-4E11-8C49-84D6D84AA0F6} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe Task: {77591D06-86C6-4E4C-B6F2-46B5399D1082} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA Task: {88C0CB85-782F-4CA6-85E6-1136C50245DA} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe Task: {893EEC8C-003A-4C87-A0A9-F7869ACE79F7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: {976FE15B-5248-4F51-8D5D-D8FF90FAFE65} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe Task: {97FA0725-3EEE-4BC3-8487-5BB07B2C9DB5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA Task: {A305727A-EB4F-4751-8A99-43C9F27524C0} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {B108752F-F16E-4BD5-BF31-66DC182F7830} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Brak pliku <==== UWAGA Task: {B6410507-ECA5-4F14-B9D8-C34CADC25BD1} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {BDD6B031-47CB-4D01-973F-A4FF0FB3EE3B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {C102FEE8-0B5E-43DF-A756-0F125A3B9555} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe Task: {C390023C-5579-4319-9CB5-B0ECF3022579} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe Task: {D738B853-C2B8-4FFC-B73E-84ACE112FD17} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {DE29C916-A03A-4B72-856C-4D3FB22D1685} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe Task: {E7BC4C15-A7BD-4D5B-A6BB-EFE10E2A37EE} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe Task: {EC9853A0-423E-4202-9F71-938F67F86BE4} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Brak pliku <==== UWAGA Task: {EEB31A48-A641-4B29-BBD5-26CFF758BFF0} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe Task: {F26EDAED-07CA-4403-89EE-8A6914E0F48A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe DeleteKey: HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I DeleteKey: HKCU\Software\dobreprogramy DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center RemoveDirectory: C:\Windows\ehome RemoveDirectory: C:\Windows\System32\Tasks\Microsoft\Windows\Media Center RestoreQuarantine: C:\FRST\Quarantine\C\Windows\Installer\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}\Icon09DB8A851.exe.xBAD RestoreQuarantine: C:\FRST\Quarantine\C\Windows\system32\MlPatch.exe.xBAD RestoreQuarantine: C:\FRST\Quarantine\C\Windows\system32\DRIVERS\MbmDeviceFilter.sys.xBAD Reg: reg load HKLM\TEMP C:\FRST\Hives\SOFTWARE Reg: reg export HKLM\TEMP\Microsoft\Windows\CurrentVersion\Run C:\Users\lukasz.niszcz\Desktop\export1.reg Reg: reg unload HKLM\TEMP Reg: reg load HKLM\TEMP C:\FRST\Hives\SYSTEM Reg: reg export HKLM\TEMP\ControlSet001\Services\MlPatch C:\Users\lukasz.niszcz\Desktop\export2.reg Reg: reg export HKLM\TEMP\ControlSet001\Services\MkBusFilter C:\Users\lukasz.niszcz\Desktop\export3.reg Reg: reg unload HKLM\TEMP CMD: type C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202} CMD: type C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA} EmptyTemp: ***************** Procesy zostaÅ‚y pomyÅ›lnie zamkniÄ™te. C:\Users\lukasz.niszcz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Skrót - argument pomyÅ›lnie usuniÄ™to. idsvc => serwis pomyÅ›lnie usuniÄ™to wpcsvc => serwis pomyÅ›lnie usuniÄ™to HKU\S-1-5-21-2387826781-902882918-947777316-500\Software\Microsoft\Windows\CurrentVersion\Run\\Sidebar => Wartość nie znaleziono. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{02FC9FF5-8759-49FC-9CEB-686FC7FB5A4E}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{02FC9FF5-8759-49FC-9CEB-686FC7FB5A4E}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RecordingRestart" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0CD6FF09-58A3-4B2C-927B-7528CED8B7A9}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0CD6FF09-58A3-4B2C-927B-7528CED8B7A9}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0EC5C0BE-5CCC-4B19-ADE9-F00C2EA7A267}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0EC5C0BE-5CCC-4B19-ADE9-F00C2EA7A267}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\DispatchRecoveryTasks" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1259D7A2-134A-4A0B-908C-F038C08D8E12}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1259D7A2-134A-4A0B-908C-F038C08D8E12}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURDiscovery" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1464FBD3-68B0-4567-B6EF-5EE5929FC180}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1464FBD3-68B0-4567-B6EF-5EE5929FC180}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscoveryW2" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1799C230-7D13-4C25-8026-F135FBC20A9E}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1799C230-7D13-4C25-8026-F135FBC20A9E}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RegisterSearch" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{334E3401-1738-40F6-8640-E30C76D98C3D}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{334E3401-1738-40F6-8640-E30C76D98C3D}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ActivateWindowsSearch" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37491E6E-81B9-43CF-A4F9-0B054203ADC4}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37491E6E-81B9-43CF-A4F9-0B054203ADC4}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\MediaCenterRecoveryTask" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3832A5E1-E6BF-45A2-BE4B-D535C92939D1}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3832A5E1-E6BF-45A2-BE4B-D535C92939D1}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\SqlLiteRecoveryTask" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3A61D3FB-1D1C-4F15-8D58-93B9E7778CC2}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3A61D3FB-1D1C-4F15-8D58-93B9E7778CC2}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\mcupdate => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\mcupdate" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3AE0C5C2-9C2E-4BC7-B6CC-DF3D0425FE7D}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3AE0C5C2-9C2E-4BC7-B6CC-DF3D0425FE7D}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscovery" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{424A2DC0-88C0-4442-9079-43527CC810FE}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{424A2DC0-88C0-4442-9079-43527CC810FE}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{51B3CCB5-CE4E-4B7D-A028-EE914860072C}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51B3CCB5-CE4E-4B7D-A028-EE914860072C}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5649A0FA-B3B2-4067-B809-00EA4D7A255E}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5649A0FA-B3B2-4067-B809-00EA4D7A255E}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{60D80493-221D-4FEE-8596-B67C84E6BD80}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{60D80493-221D-4FEE-8596-B67C84E6BD80}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscoveryW1" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{68F5A15E-57C5-4CA4-808A-B2F97A507886}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{68F5A15E-57C5-4CA4-808A-B2F97A507886}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{71C3449B-4B84-4E11-8C49-84D6D84AA0F6}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{71C3449B-4B84-4E11-8C49-84D6D84AA0F6}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\UpdateRecordPath" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{77591D06-86C6-4E4C-B6F2-46B5399D1082}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77591D06-86C6-4E4C-B6F2-46B5399D1082}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{88C0CB85-782F-4CA6-85E6-1136C50245DA}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{88C0CB85-782F-4CA6-85E6-1136C50245DA}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\InstallPlayReady" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{893EEC8C-003A-4C87-A0A9-F7869ACE79F7}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{893EEC8C-003A-4C87-A0A9-F7869ACE79F7}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{976FE15B-5248-4F51-8D5D-D8FF90FAFE65}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{976FE15B-5248-4F51-8D5D-D8FF90FAFE65}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PeriodicScanRetry" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{97FA0725-3EEE-4BC3-8487-5BB07B2C9DB5}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97FA0725-3EEE-4BC3-8487-5BB07B2C9DB5}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A305727A-EB4F-4751-8A99-43C9F27524C0}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A305727A-EB4F-4751-8A99-43C9F27524C0}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PvrRecoveryTask" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B108752F-F16E-4BD5-BF31-66DC182F7830}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B108752F-F16E-4BD5-BF31-66DC182F7830}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B6410507-ECA5-4F14-B9D8-C34CADC25BD1}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B6410507-ECA5-4F14-B9D8-C34CADC25BD1}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BDD6B031-47CB-4D01-973F-A4FF0FB3EE3B}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BDD6B031-47CB-4D01-973F-A4FF0FB3EE3B}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C102FEE8-0B5E-43DF-A756-0F125A3B9555}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C102FEE8-0B5E-43DF-A756-0F125A3B9555}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PvrScheduleTask" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C390023C-5579-4319-9CB5-B0ECF3022579}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C390023C-5579-4319-9CB5-B0ECF3022579}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ehDRMInit" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D738B853-C2B8-4FFC-B73E-84ACE112FD17}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D738B853-C2B8-4FFC-B73E-84ACE112FD17}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE29C916-A03A-4B72-856C-4D3FB22D1685}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE29C916-A03A-4B72-856C-4D3FB22D1685}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURActivate" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7BC4C15-A7BD-4D5B-A6BB-EFE10E2A37EE}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7BC4C15-A7BD-4D5B-A6BB-EFE10E2A37EE}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ReindexSearchRoot" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EC9853A0-423E-4202-9F71-938F67F86BE4}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC9853A0-423E-4202-9F71-938F67F86BE4}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EEB31A48-A641-4B29-BBD5-26CFF758BFF0}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEB31A48-A641-4B29-BBD5-26CFF758BFF0}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ConfigureInternetTimeService" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F26EDAED-07CA-4403-89EE-8A6914E0F48A}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F26EDAED-07CA-4403-89EE-8A6914E0F48A}" => klucz pomyÅ›lnie usuniÄ™to C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\mcupdate_scheduled" => klucz pomyÅ›lnie usuniÄ™to HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I => klucz nie znaleziono. HKCU\Software\dobreprogramy => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg => niepowodzenie przy usuwaniu w pierwszym podejÅ›ciu (ErrorCode: C0000121), zobacz kolejnÄ… liniÄ™. HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center => klucz pomyÅ›lnie usuniÄ™to "C:\Windows\ehome" => pomyÅ›lnie usuniÄ™to. "C:\Windows\System32\Tasks\Microsoft\Windows\Media Center" => pomyÅ›lnie usuniÄ™to. RestoreQuarantine: C:\FRST\Quarantine\C\Windows\Installer\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}\Icon09DB8A851.exe.xBAD=> UkoÅ„czono przywracanie z kwarantanny. "C:\FRST\Quarantine\C\Windows\system32\MlPatch.exe.xBAD"=> Å›cieżki nie znaleziono. "C:\FRST\Quarantine\C\Windows\system32\DRIVERS\MbmDeviceFilter.sys.xBAD"=> Å›cieżki nie znaleziono. ========= reg load HKLM\TEMP C:\FRST\Hives\SOFTWARE ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg export HKLM\TEMP\Microsoft\Windows\CurrentVersion\Run C:\Users\lukasz.niszcz\Desktop\export1.reg ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg unload HKLM\TEMP ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg load HKLM\TEMP C:\FRST\Hives\SYSTEM ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg export HKLM\TEMP\ControlSet001\Services\MlPatch C:\Users\lukasz.niszcz\Desktop\export2.reg ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg export HKLM\TEMP\ControlSet001\Services\MkBusFilter C:\Users\lukasz.niszcz\Desktop\export3.reg ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg unload HKLM\TEMP ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= type C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202} ========= Odmowa dost©pu. ========= Koniec CMD: ========= ========= type C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA} ========= Odmowa dost©pu. ========= Koniec CMD: ========= EmptyTemp: => 940 MB danych tymczasowych UsuniÄ™to. System wymagaÅ‚ restartu. ==== Koniec Fixlog 16:46:05 ====