Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 08-08-2017 Uruchomiony przez admin (12-08-2017 18:17:34) Run:1 Uruchomiony z C:\Users\admin\Desktop Załadowane profile: admin (Dostępne profile: admin) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeadesktop.com/ ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yeadesktop.com/ ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yeadesktop.com/ HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "2MCZnON8Tl6x.exe" HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "37KOQqAQae.exe" HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "j1LkzafQH4R.exe" HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "J8GpEik.exe" HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "JgMe7NUxOu.exe" HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "KjDd9jT.exe" HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "nQbN74y1.exe" HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "RzjZbsik36Eujx.exe" HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\...\StartupApproved\Run: => "tNdFcO3pJU3t.exe" Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== UWAGA HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== UWAGA HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== UWAGA HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== UWAGA HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== UWAGA HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== UWAGA HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== UWAGA HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== UWAGA HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== UWAGA HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== UWAGA HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== UWAGA HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== UWAGA HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== UWAGA HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== UWAGA HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== UWAGA HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== UWAGA HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== UWAGA HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== UWAGA HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== UWAGA HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== UWAGA HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== UWAGA HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== UWAGA HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== UWAGA HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== UWAGA HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== UWAGA HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== UWAGA HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== UWAGA HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== UWAGA HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== UWAGA HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== UWAGA HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== UWAGA HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== UWAGA HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== UWAGA HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== UWAGA HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== UWAGA HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== UWAGA HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== UWAGA HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== UWAGA HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== UWAGA HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== UWAGA HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== UWAGA GroupPolicy: Ograniczenia - Chrome <==== UWAGA Tcpip\..\Interfaces\{7d787c6e-aec5-4e13-a5a6-38648d1c18ef}: [NameServer] 82.163.142.8,95.211.158.136 CHR HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pnfdifjinnoooocgmbdioahcpaplhbhb] - C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk CMD: dir /a "C:\Program Files" CMD: dir /a "C:\Program Files (x86)" CMD: dir /a "C:\Program Files\Common Files\System" CMD: dir /a "C:\Program Files (x86)\Common Files\System" CMD: dir /a C:\ProgramData CMD: dir /a C:\Users\admin\AppData\Local CMD: dir /a C:\Users\admin\AppData\LocalLow CMD: dir /a C:\Users\admin\AppData\Roaming CMD: ipconfig /flushdns Hosts: EmptyTemp: ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => Skrót - argument pomyślnie usunięto. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Public\Desktop\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\2MCZnON8Tl6x.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\2MCZnON8Tl6x.exe => Wartość nie znaleziono. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\37KOQqAQae.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\37KOQqAQae.exe => Wartość nie znaleziono. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\j1LkzafQH4R.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\j1LkzafQH4R.exe => Wartość nie znaleziono. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\J8GpEik.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\J8GpEik.exe => Wartość nie znaleziono. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\JgMe7NUxOu.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\JgMe7NUxOu.exe => Wartość nie znaleziono. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\KjDd9jT.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\KjDd9jT.exe => Wartość nie znaleziono. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\nQbN74y1.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\nQbN74y1.exe => Wartość nie znaleziono. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\RzjZbsik36Eujx.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\RzjZbsik36Eujx.exe => Wartość nie znaleziono. HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\tNdFcO3pJU3t.exe => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\tNdFcO3pJU3t.exe => Wartość nie znaleziono. HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon => klucz nie znaleziono. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\EnableShellExecuteHooks => Wartość pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\03D22C9C66915D58C88912B64C1F984B8344EF09 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\0F684EC1163281085C6AF20528878103ACEFCAAB => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\1667908C9E22EFBD0590E088715CC74BE4C60884 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\18DEA4EFA93B06AE997D234411F3FD72A677EECE => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\249BDA38A611CD746A132FA2AF995A2D3C941264 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\31AC96A6C17C425222C46D55C3CCA6BA12E54DAF => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\331E2046A1CCA7BFEF766724394BE6112B4CA3F7 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3353EA609334A9F23A701B9159E30CB6C22D4C59 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\373C33726722D3A5D1EDD1F1585D5D25B39BEA1A => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3D496FA682E65FC122351EC29B55AB94F3BB03FC => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4420C99742DF11DD0795BC15B7B0ABF090DC84DF => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5240AB5B05D11B37900AC7712A3C6AE42F377C8C => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5DD3D41810F28B2A13E9A004E6412061E28FA48D => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7457A3793086DBB58B3858D6476889E3311E550E => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\76A9295EF4343E12DFC5FE05DC57227C1AB00D29 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\775B373B33B9D15B58BC02B184704332B97C3CAF => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\872CD334B7E7B3C3D1C6114CD6B221026D505EAB => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\88AD5DFE24126872B33175D1778687B642323ACF => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9132E8B079D080E01D52631690BE18EBC2347C1E => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\982D98951CF3C0CA2A02814D474A976CBFF6BDB1 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9C43F665E690AB4D486D4717B456C5554D4BCEB5 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A5341949ABE1407DD7BF7DFE75460D9608FBC309 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A59CC32724DD07A6FC33F7806945481A2D13CA2F => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AD4C5429E10F4FF6C01840C20ABA344D7401209F => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AD96BB64BA36379D2E354660780C2067B81DA2E0 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\CDC37C22FE9272D8F2610206AD397A45040326B8 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\DB303C9B61282DE525DC754A535CA2D6A9BD3D87 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\DB77E5CFEC34459146748B667C97B185619251BA => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\E22240E837B52E691C71DF248F12D27F96441C00 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\ED841A61C0F76025598421BC1B00E24189E68D54 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\F83099622B4A9F72CB5081F742164AD1B8D048C9 => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FBB42F089AF2D570F2BF6F493D107A3255A9BB1A => klucz pomyślnie usunięto HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 => klucz pomyślnie usunięto C:\Windows\system32\GroupPolicy\Machine => pomyślnie przeniesiono C:\Windows\system32\GroupPolicy\GPT.ini => pomyślnie przeniesiono HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7d787c6e-aec5-4e13-a5a6-38648d1c18ef}\\NameServer => Wartość pomyślnie usunięto HKU\S-1-5-21-2955219956-3132580845-1462893379-1001\SOFTWARE\Google\Chrome\Extensions\pnfdifjinnoooocgmbdioahcpaplhbhb => klucz pomyślnie usunięto C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk => pomyślnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk => pomyślnie przeniesiono ========= dir /a "C:\Program Files" ========= Volume in drive C has no label. Volume Serial Number is 8CF3-4517 Directory of C:\Program Files 09.08.2017 17:51 . 09.08.2017 17:51 .. 06.08.2017 17:49 CCleaner 18.03.2017 23:03 Common Files 04.08.2017 18:29 Communications RND Reflector 16.07.2017 18:03 DAEMON Tools Lite 04.08.2017 18:29 Daily Thunder Racing 18.03.2017 23:01 174 desktop.ini 11.07.2017 10:47 Intel 11.07.2017 10:41 Internet Explorer 16.07.2017 18:19 Microsoft Office 12.07.2017 20:06 Microsoft Silverlight 02.08.2017 11:43 MSBuild 10.07.2017 15:22 NVIDIA Corporation 11.07.2017 10:40 Realtek 02.08.2017 11:43 Reference Assemblies 10.07.2017 20:32 Uninstall Information 12.07.2017 20:05 Windows Defender 20.03.2017 05:59 Windows Mail 20.03.2017 06:00 Windows Media Player 18.03.2017 23:03 Windows Multimedia Platform 10.07.2017 20:35 Windows NT 08.08.2017 23:01 Windows Photo Viewer 18.03.2017 23:03 Windows Portable Devices 18.03.2017 23:03 Windows Security 18.03.2017 23:03 Windows Sidebar 11.08.2017 12:43 WindowsApps 18.03.2017 23:03 WindowsPowerShell 1 File(s) 174 bytes 27 Dir(s) 380˙982˙009˙856 bytes free ========= Koniec CMD: ========= ========= dir /a "C:\Program Files (x86)" ========= Volume in drive C has no label. Volume Serial Number is 8CF3-4517 Directory of C:\Program Files (x86) 06.08.2017 18:41 . 06.08.2017 18:41 .. 11.07.2017 10:23 Adobe 02.08.2017 17:13 Common Files 18.03.2017 23:01 174 desktop.ini 11.07.2017 10:28 Google 02.08.2017 17:13 InstallShield Installation Information 11.07.2017 10:37 Intel 11.07.2017 10:41 Internet Explorer 06.08.2017 18:56 jv16 PowerTools 2017 03.08.2017 19:43 K-Lite Codec Pack 08.08.2017 13:59 Microsoft Office 12.07.2017 20:06 Microsoft Silverlight 16.07.2017 18:20 Microsoft Visual Studio 16.07.2017 18:22 Microsoft Works 06.08.2017 19:17 Microsoft.NET 11.07.2017 10:27 Mozilla Firefox 11.07.2017 10:26 Mozilla Maintenance Service 02.08.2017 11:43 MSBuild 10.07.2017 15:22 NVIDIA Corporation 06.08.2017 18:11 Odkurzacz 01.08.2017 21:20 pccleanplus 11.07.2017 10:46 Realtek 02.08.2017 11:43 Reference Assemblies 13.07.2017 20:25 Skillbrains 12.08.2017 17:30 Spybot - Search & Destroy 2 12.08.2017 17:34 Steam 30.07.2017 15:29 SteamServerBrowser 11.07.2017 10:41 Temp 10.07.2017 15:22 VulkanRT 03.08.2017 19:43 Windows Defender 20.03.2017 05:59 Windows Mail 20.03.2017 06:00 Windows Media Player 18.03.2017 23:03 Windows Multimedia Platform 18.03.2017 23:03 Windows NT 08.08.2017 23:01 Windows Photo Viewer 18.03.2017 23:03 Windows Portable Devices 18.03.2017 23:03 Windows Sidebar 18.03.2017 23:03 WindowsPowerShell 06.08.2017 18:30 WinRAR 1 File(s) 174 bytes 39 Dir(s) 380˙982˙009˙856 bytes free ========= Koniec CMD: ========= ========= dir /a "C:\Program Files\Common Files\System" ========= Volume in drive C has no label. Volume Serial Number is 8CF3-4517 Directory of C:\Program Files\Common Files\System 20.03.2017 05:59 . 20.03.2017 05:59 .. 11.07.2017 10:41 ado 18.03.2017 22:59 32˙768 DirectDB.dll 20.03.2017 05:59 en-US 20.03.2017 05:59 msadc 20.03.2017 05:59 Ole DB 20.03.2017 05:59 pl-PL 18.03.2017 22:57 854˙528 wab32.dll 18.03.2017 22:57 964˙096 wab32res.dll 3 File(s) 1˙851˙392 bytes 7 Dir(s) 380˙982˙009˙856 bytes free ========= Koniec CMD: ========= ========= dir /a "C:\Program Files (x86)\Common Files\System" ========= Volume in drive C has no label. Volume Serial Number is 8CF3-4517 Directory of C:\Program Files (x86)\Common Files\System 20.03.2017 05:59 . 20.03.2017 05:59 .. 11.07.2017 10:41 ado 18.03.2017 22:59 27˙648 DirectDB.dll 20.03.2017 05:59 en-US 20.03.2017 05:59 msadc 16.07.2017 18:22 Ole DB 20.03.2017 05:59 pl-PL 18.03.2017 22:58 741˙888 wab32.dll 18.03.2017 22:58 964˙096 wab32res.dll 3 File(s) 1˙733˙632 bytes 7 Dir(s) 380˙982˙009˙856 bytes free ========= Koniec CMD: ========= ========= dir /a C:\ProgramData ========= Volume in drive C has no label. Volume Serial Number is 8CF3-4517 Directory of C:\ProgramData 09.08.2017 11:36 . 09.08.2017 11:36 .. 18.07.2017 19:30 Adobe 16.07.2017 18:01 DAEMON Tools Lite 10.07.2017 20:35 Dane aplikacji [C:\ProgramData] 10.07.2017 20:35 Dokumenty [C:\Users\Public\Documents] 11.07.2017 10:40 0 DP45977C.lfl 01.08.2017 21:24 Google 04.08.2017 19:30 HitmanPro 11.07.2017 10:37 Intel 10.07.2017 20:35 Menu Start [C:\ProgramData\Microsoft\Windows\Start Menu] 12.08.2017 17:30 Microsoft 27.07.2017 22:09 Microsoft Help 10.07.2017 20:50 Microsoft OneDrive 01.08.2017 22:31 266 ntuser.pol 12.08.2017 18:17 NVIDIA 10.07.2017 15:22 NVIDIA Corporation 13.07.2017 13:27 Package Cache 10.07.2017 20:35 Pulpit [C:\Users\Public\Desktop] 10.07.2017 20:36 regid.1991-06.com.microsoft 18.03.2017 23:03 SoftwareDistribution 12.08.2017 17:30 Spybot - Search & Destroy 09.08.2017 11:36 Start Menu 10.07.2017 20:35 Szablony [C:\ProgramData\Microsoft\Windows\Templates] 10.07.2017 20:45 USOPrivate 10.07.2017 20:45 USOShared 20.03.2017 06:01 WindowsHolographicDevices 2 File(s) 266 bytes 25 Dir(s) 380˙981˙940˙224 bytes free ========= Koniec CMD: ========= ========= dir /a C:\Users\admin\AppData\Local ========= Volume in drive C has no label. Volume Serial Number is 8CF3-4517 Directory of C:\Users\admin\AppData\Local 12.08.2017 17:28 . 12.08.2017 17:28 .. 17.07.2017 21:20 2345explorer 17.07.2017 21:20 360chrome 18.07.2017 14:28 Adobe 01.08.2017 21:11 AdvinstAnalytics 13.07.2017 22:13 AvPGold 13.07.2017 11:12 CEF 10.07.2017 21:05 Comms 10.07.2017 20:48 ConnectedDevicesPlatform 09.08.2017 11:36 CrashRpt 10.07.2017 20:48 Dane aplikacji [C:\Users\admin\AppData\Local] 20.07.2017 15:12 DBG 16.07.2017 18:09 Disc_Soft_Ltd 12.08.2017 17:28 ElevatedDiagnostics 12.07.2017 20:43 Google 10.07.2017 20:48 Historia [C:\Users\admin\AppData\Local\Microsoft\Windows\History] 12.08.2017 17:33 186˙025 IconCache.db 13.07.2017 13:31 id Software 01.08.2017 21:11 11˙568 InstallationConfiguration.xml 01.08.2017 21:11 140˙800 installer.dat 01.08.2017 21:20 Microsoft 16.07.2017 18:19 Microsoft Help 16.07.2017 21:43 MicrosoftEdge 12.07.2017 19:19 Mozilla 09.08.2017 10:28 Packages 01.08.2017 22:33 1˙847˙296 po.db 11.07.2017 10:25 Programs 10.07.2017 20:48 Publishers 13.07.2017 22:13 Rebellion 10.07.2017 17:23 Recovery 13.07.2017 11:12 Steam 12.08.2017 18:15 Temp 10.07.2017 20:48 Temporary Internet Files [C:\Users\admin\AppData\Local\Microsoft\Windows\INetCache] 17.07.2017 21:20 Tencent 10.07.2017 20:48 TileDataLayer 17.07.2017 21:20 UCBrowser 13.07.2017 20:25 3 updater.log 13.07.2017 20:25 425 UserProducts.xml 10.07.2017 20:48 VirtualStore 6 File(s) 2˙186˙117 bytes 34 Dir(s) 380˙981˙673˙984 bytes free ========= Koniec CMD: ========= ========= dir /a C:\Users\admin\AppData\LocalLow ========= Volume in drive C has no label. Volume Serial Number is 8CF3-4517 Directory of C:\Users\admin\AppData\LocalLow 04.08.2017 19:45 . 04.08.2017 19:45 .. 18.07.2017 14:28 Adobe 01.08.2017 21:16 Microsoft 12.08.2017 17:34 Mozilla 0 File(s) 0 bytes 5 Dir(s) 380˙981˙678˙080 bytes free ========= Koniec CMD: ========= ========= dir /a C:\Users\admin\AppData\Roaming ========= Volume in drive C has no label. Volume Serial Number is 8CF3-4517 Directory of C:\Users\admin\AppData\Roaming 09.08.2017 17:51 . 09.08.2017 17:51 .. 06.08.2017 18:42 20 1816CA7466166.ind 17.07.2017 21:20 360se6 18.07.2017 14:28 Adobe 17.07.2017 21:20 baidu 06.08.2017 17:52 DAEMON Tools Lite 01.08.2017 21:23 EpicNet Inc 04.08.2017 19:21 Event Monitor 04.08.2017 19:20 Google 11.07.2017 10:47 Intel Corporation 01.08.2017 21:15 Macromedia 04.08.2017 18:16 Microsoft 11.07.2017 10:27 Mozilla 06.08.2017 17:52 MPC-HC 01.08.2017 21:42 NVIDIA 06.08.2017 18:42 20 Programs8187ConfigDB.dat 10.07.2017 17:25 Skype 01.08.2017 21:20 UCChannel 2 File(s) 40 bytes 17 Dir(s) 380˙981˙673˙984 bytes free ========= Koniec CMD: ========= ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= Koniec CMD: ========= C:\Windows\System32\Drivers\etc\hosts => pomyślnie przeniesiono Hosts pomyślnie przywrócono. =========== EmptyTemp: ========== BITS transfer queue => 12607488 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 42187745 B Java, Flash, Steam htmlcache => 358765439 B Windows/system/drivers => 99668 B Edge => 0 B Chrome => 61702600 B Firefox => 302961939 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 25091 B systemprofile32 => 4058 B LocalService => 5938 B NetworkService => 16526 B admin => 12363947 B RecycleBin => 2432 B EmptyTemp: => 754.1 MB danych tymczasowych Usunięto. ================================ System wymagał restartu. ==== Koniec Fixlog 18:18:18 ====