Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 15-03-2017 Uruchomiony przez Damian (31-03-2017 09:59:11) Run:1 Uruchomiony z C:\Users\Damian\Desktop Załadowane profile: Damian (Dostępne profile: Damian & DefaultAppPool) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: Winlogon\Notify\igfxcui: igfxdev.dll [X] R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X] U3 idsvc; Brak ImagePath U3 awworpoc; \??\C:\Users\Damian\AppData\Local\Temp\awworpoc.sys [X] <==== UWAGA ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=qTxKBKjsgx1sXi94NiAPClNMb3q690ebUqnCbJHssxZjKEeyRMhspHf1XVWTpbZCHis%3D ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxps://launchpage.org/?uid=qTxKBKjsgx1sXi94NiAPClNMb3q690ebUqnCbJHssxZjKEeyRMhspHf1XVWTpbZCHis%3D ShortcutWithArgument: C:\Users\Damian\Desktop\lewa\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxps://launchpage.org/?uid=qTxKBKjsgx1sXi94NiAPClNMb3q690ebUqnCbJHssxZjKEeyRMhspHf1XVWTpbZCHis%3D ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PXG Client.lnk -> C:\Users\Damian\AppData\Roaming\pxgclient\pxgclient\client\launcher.exe () -> hxxps://launchpage.org/?uid=qTxKBKjsgx1sXi94NiAPClNMb3q690ebUqnCbJHssxZjKEeyRMhspHf1XVWTpbZCHis%3D ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Default Apps.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsDefaults ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Devices.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemDevices ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk -> C:\Users\Damian\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook) -> fbgames://windows_startup/ ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxps://launchpage.org/?uid=qTxKBKjsgx1sXi94NiAPClNMb3q690ebUqnCbJHssxZjKEeyRMhspHf1XVWTpbZCHis%3D ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=qTxKBKjsgx1sXi94NiAPClNMb3q690ebUqnCbJHssxZjKEeyRMhspHf1XVWTpbZCHis%3D ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxps://launchpage.org/?uid=qTxKBKjsgx1sXi94NiAPClNMb3q690ebUqnCbJHssxZjKEeyRMhspHf1XVWTpbZCHis%3D ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=qTxKBKjsgx1sXi94NiAPClNMb3q690ebUqnCbJHssxZjKEeyRMhspHf1XVWTpbZCHis%3D Task: {18B17FBC-4764-4B08-91BF-FFB4ECD4D661} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: {5042F508-BF7C-4EE9-AA5D-165F11BF5988} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA Task: {52637AE5-512F-44D3-9B93-CE7FB1100B23} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {533898CF-6DBE-4B0E-B284-7000064A1FF8} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Brak pliku <==== UWAGA Task: {5441E236-4279-4CC9-B500-DA0AC9522CC2} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Brak pliku <==== UWAGA Task: {54AC6516-B1BC-4CAA-A032-851C0203D5B6} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA Task: {575583EF-0C25-4B05-9806-FAEF165B5D6E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {93D73D79-B6BB-41A5-A88B-B88CB4EB1388} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {AF032677-B833-47FF-A34D-DE3FCD2D93DA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA Task: {C8A53A0F-1D4A-4E14-8EBA-F35A264E82E4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA Task: {D07F5D7E-18FB-4E06-914E-A4978CFE6156} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {D14C1939-7496-44C3-BCC0-5D9152ED3CD6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA Task: {F3D1F045-3DCD-4CBB-A293-EFD2FBB3C512} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Brak pliku <==== UWAGA C:\Users\Damian\Desktop\lewa\Launcher — skrót .lnk C:\Users\Damian\AppData\Roaming\Microsoft\Windows\SendTo\Android (ALLPlayer Pilot).lnk C:\Users\Damian\AppData\Roaming\Microsoft\Office\Niedawny\Dokument.LNK C:\Users\Damian\AppData\Roaming\Microsoft\Office\Niedawny\s.LNK C:\Users\Damian\AppData\Roaming\Microsoft\Office\Niedawny\Słownik Symboli - WŁADYSŁAW KOPALIŃSKI.LNK DeleteKey: HKCU\Software\Mozilla DeleteKey: HKCU\Software\MozillaPlugins DeleteKey: HKLM\SOFTWARE\Mozilla DeleteKey: HKLM\SOFTWARE\MozillaPlugins DeleteKey: HKLM\SOFTWARE\Wow6432Node\Mozilla DeleteKey: HKLM\SOFTWARE\Wow6432Node\mozilla.org DeleteKey: HKLM\SOFTWARE\Wow6432Node\MozillaPlugins C:\Users\Damian\AppData\Local\Mozilla C:\Users\Damian\AppData\Roaming\Mozilla C:\Users\Damian\AppData\Roaming\Profiles EmptyTemp: ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui => klucz pomyślnie usunięto HKLM\System\CurrentControlSet\Services\ibtsiva => klucz pomyślnie usunięto ibtsiva => serwis pomyślnie usunięto HKLM\System\CurrentControlSet\Services\idsvc => klucz pomyślnie usunięto idsvc => serwis pomyślnie usunięto HKLM\System\CurrentControlSet\Services\awworpoc => klucz pomyślnie usunięto awworpoc => serwis pomyślnie usunięto C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Damian\Desktop\lewa\Opera.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PXG Client.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Default Apps.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Devices.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Damian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Damian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Public\Desktop\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{18B17FBC-4764-4B08-91BF-FFB4ECD4D661} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18B17FBC-4764-4B08-91BF-FFB4ECD4D661} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5042F508-BF7C-4EE9-AA5D-165F11BF5988} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5042F508-BF7C-4EE9-AA5D-165F11BF5988} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52637AE5-512F-44D3-9B93-CE7FB1100B23} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52637AE5-512F-44D3-9B93-CE7FB1100B23} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{533898CF-6DBE-4B0E-B284-7000064A1FF8} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{533898CF-6DBE-4B0E-B284-7000064A1FF8} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5441E236-4279-4CC9-B500-DA0AC9522CC2} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5441E236-4279-4CC9-B500-DA0AC9522CC2} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{54AC6516-B1BC-4CAA-A032-851C0203D5B6} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{54AC6516-B1BC-4CAA-A032-851C0203D5B6} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{575583EF-0C25-4B05-9806-FAEF165B5D6E} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{575583EF-0C25-4B05-9806-FAEF165B5D6E} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{93D73D79-B6BB-41A5-A88B-B88CB4EB1388} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{93D73D79-B6BB-41A5-A88B-B88CB4EB1388} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AF032677-B833-47FF-A34D-DE3FCD2D93DA} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF032677-B833-47FF-A34D-DE3FCD2D93DA} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C8A53A0F-1D4A-4E14-8EBA-F35A264E82E4} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C8A53A0F-1D4A-4E14-8EBA-F35A264E82E4} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D07F5D7E-18FB-4E06-914E-A4978CFE6156} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D07F5D7E-18FB-4E06-914E-A4978CFE6156} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D14C1939-7496-44C3-BCC0-5D9152ED3CD6} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D14C1939-7496-44C3-BCC0-5D9152ED3CD6} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3D1F045-3DCD-4CBB-A293-EFD2FBB3C512} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3D1F045-3DCD-4CBB-A293-EFD2FBB3C512} => klucz pomyślnie usunięto HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => klucz pomyślnie usunięto C:\Users\Damian\Desktop\lewa\Launcher — skrót .lnk => pomyślnie przeniesiono C:\Users\Damian\AppData\Roaming\Microsoft\Windows\SendTo\Android (ALLPlayer Pilot).lnk => pomyślnie przeniesiono C:\Users\Damian\AppData\Roaming\Microsoft\Office\Niedawny\Dokument.LNK => pomyślnie przeniesiono C:\Users\Damian\AppData\Roaming\Microsoft\Office\Niedawny\s.LNK => pomyślnie przeniesiono C:\Users\Damian\AppData\Roaming\Microsoft\Office\Niedawny\Słownik Symboli - WŁADYSŁAW KOPALIŃSKI.LNK => pomyślnie przeniesiono HKCU\Software\Mozilla => klucz nie znaleziono. HKCU\Software\MozillaPlugins => klucz pomyślnie usunięto HKLM\SOFTWARE\Mozilla => klucz pomyślnie usunięto HKLM\SOFTWARE\MozillaPlugins => klucz pomyślnie usunięto HKLM\SOFTWARE\Wow6432Node\Mozilla => klucz pomyślnie usunięto HKLM\SOFTWARE\Wow6432Node\mozilla.org => klucz pomyślnie usunięto HKLM\SOFTWARE\Wow6432Node\MozillaPlugins => klucz pomyślnie usunięto C:\Users\Damian\AppData\Local\Mozilla => pomyślnie przeniesiono C:\Users\Damian\AppData\Roaming\Mozilla => pomyślnie przeniesiono "C:\Users\Damian\AppData\Roaming\Profiles" => nie znaleziono. =========== EmptyTemp: ========== BITS transfer queue => 569605 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 58276528 B Java, Flash, Steam htmlcache => 728 B Windows/system/drivers => 79564 B Edge => 18631 B Chrome => 1772544 B Firefox => 0 B Opera => 533487397 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 128 B systemprofile32 => 0 B LocalService => 1642 B NetworkService => 4268 B Damian => 161291649 B DefaultAppPool => 0 B RecycleBin => 138 B EmptyTemp: => 720.5 MB danych tymczasowych Usunięto. ================================ System wymagał restartu. ==== Koniec Fixlog 09:59:58 ====