Rezultat naprawy Farbar Recovery Scan Tool (x86) Wersja: 30-09-2016 Uruchomiony przez vengador (02-10-2016 16:17:48) Run:5 Uruchomiony z C:\Users\vengador\Desktop\FRST + GMER Załadowane profile: vengador (Dostępne profile: vengador) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [6489456 2016-09-28] (Reimage®) Task: {4ED21A64-B1C2-45BE-B2DD-4B8DFFEDE318} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2016-09-28] (Reimage®) <==== UWAGA Task: {F26BFC64-F480-426B-95D4-EC1E586E66C4} - System32\Tasks\{7C6C9317-B782-48C9-BDAD-2C8930909309} => RemoveDirectory: C:\AdwCleaner RemoveDirectory: C:\FRST\Quarantine RemoveDirectory: C:\KRECYCLE RemoveDirectory: C:\Program Files\Reimage RemoveDirectory: C:\Program Files\SUPERAntiSpyware RemoveDirectory: C:\Program Files\Common Files\AV\avast! Antivirus RemoveDirectory: C:\ProgramData\Kingsoft RemoveDirectory: C:\ProgramData\TEMP RemoveDirectory: C:\Qoobox RemoveDirectory: C:\Users\vengador\AppData\Local\Kingsoft RemoveDirectory: C:\Users\vengador\AppData\Roaming\Kingsoft RemoveDirectory: C:\Users\vengador\AppData\Roaming\Solvusoft RemoveDirectory: C:\Users\vengador\AppData\Roaming\TomTom RemoveDirectory: C:\Windows\system32\log CMD: del /q C:\Windows\grep.exe CMD: del /q C:\Windows\MBR.exe CMD: del /q C:\Windows\NIRCMD.exe CMD: del /q C:\Windows\PEV.exe CMD: del /q C:\Windows\Reimage.ini CMD: del /q C:\Windows\sed.exe CMD: del /q C:\Windows\SWREG.exe CMD: del /q C:\Windows\SWSC.exe CMD: del /q C:\Windows\zip.exe CMD: del /q C:\Windows\system32\roboot.exe CMD: del /q C:\Windows\system32\Drivers\kisnetmxp.sys CMD: del /q C:\Windows\system32\Drivers\kisnetm.sys CMD: del /q C:\Windows\system32\Drivers\kisnetm64.sys CMD: del /q C:\Windows\system32\Drivers\ksapi64.sys ***************** Procesy zostały pomyślnie zamknięte. ReimageRealTimeProtector => serwis pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4ED21A64-B1C2-45BE-B2DD-4B8DFFEDE318}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4ED21A64-B1C2-45BE-B2DD-4B8DFFEDE318}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\ReimageUpdater => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ReimageUpdater" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F26BFC64-F480-426B-95D4-EC1E586E66C4}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F26BFC64-F480-426B-95D4-EC1E586E66C4}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\{7C6C9317-B782-48C9-BDAD-2C8930909309} => => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7C6C9317-B782-48C9-BDAD-2C8930909309} => => klucz nie znaleziono. "C:\AdwCleaner" => pomyślnie usunięto. "C:\FRST\Quarantine" => pomyślnie usunięto. "C:\KRECYCLE" => pomyślnie usunięto. "C:\Program Files\Reimage" => pomyślnie usunięto. "C:\Program Files\SUPERAntiSpyware" => pomyślnie usunięto. "C:\Program Files\Common Files\AV\avast! Antivirus" => pomyślnie usunięto. "C:\ProgramData\Kingsoft" => pomyślnie usunięto. "C:\ProgramData\TEMP" => pomyślnie usunięto. "C:\Qoobox" => pomyślnie usunięto. "C:\Users\vengador\AppData\Local\Kingsoft" => pomyślnie usunięto. "C:\Users\vengador\AppData\Roaming\Kingsoft" => pomyślnie usunięto. "C:\Users\vengador\AppData\Roaming\Solvusoft" => pomyślnie usunięto. "C:\Users\vengador\AppData\Roaming\TomTom" => pomyślnie usunięto. "C:\Windows\system32\log" => pomyślnie usunięto. ========= del /q C:\Windows\grep.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\MBR.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\NIRCMD.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\PEV.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\Reimage.ini ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\sed.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\SWREG.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\SWSC.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\zip.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\system32\roboot.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\system32\Drivers\kisnetmxp.sys ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\system32\Drivers\kisnetm.sys ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\system32\Drivers\kisnetm64.sys ========= ========= Koniec CMD: ========= ========= del /q C:\Windows\system32\Drivers\ksapi64.sys ========= ========= Koniec CMD: ========= System wymagał restartu. ==== Koniec Fixlog 16:18:25 ====