Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 02.08.2018 Uruchomiony przez User (03-08-2018 23:09:14) Run:1 Uruchomiony z C:\Users\User\Downloads Załadowane profile: User (Dostępne profile: User & Janas_) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Subway Surfers\Subway Surfers.lnk C:\Users\Janas_\Documents\Euro Truck Simulator 2\readme.rtf.lnk C:\Users\Janas_\Documents\Corel\CorelDRAW X5 Samples\target.lnk C:\Users\User\Links\GG dysk.lnk C:\Users\User\Favorites\GG dysk.lnk C:\Users\User\Documents\MAGIX\Music Maker 2016 Premium\_Demos.LNK C:\Users\User\Documents\Euro Truck Simulator 2\readme.rtf.lnk C:\Users\User\Documents\American Truck Simulator\readme.rtf.lnk C:\Users\User\Desktop\ts3\Zombie Army Trilogy.lnk C:\Users\User\Desktop\Nowy folder\Mozilla Firefox.lnk C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\IP Search.lnk C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed\LFS Manual.lnk C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Inkscape.lnk C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Camtasia Studio 8.lnk C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Need for Speed™ Payback.lnk ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Brak pliku ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku Task: {0C2FD3F5-3721-4B52-BE3F-65D269B6871C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: {3C04666D-A99A-4A2C-9CD4-1F18098F497F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Brak pliku <==== UWAGA Task: {44E764A0-B1FF-49AE-9413-244CA8FDECCC} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {78835B2B-5402-4A98-802F-1B4415445613} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {8D0E5780-6C00-4FFF-A7FD-FE56E81EB92A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {B86C2D32-78F1-42E8-81F5-B113C4B1DB11} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Brak pliku <==== UWAGA Task: {BA2487FC-FDC3-48DB-A1B8-1D395267B401} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {22D836F7-6E36-411F-B0EB-24D7A8AC2C65} - \b2929b72a96a471893ecaa9c51368bae -> Brak pliku <==== UWAGA Task: {2570D44F-AE62-45BD-A42A-2533F593B4E4} - System32\Tasks\{AD77D1E3-BA40-ADAF-55F4-C3EB5D7616AA} => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://cssnews.ru/cl/?guid=majpvha9gwud1b8hkey726r7ip3edefq&prid=1&pid=4_1324_0 Task: {565D36FC-8D14-45D1-AD42-5A665523300E} - System32\Tasks\{D19D6318-E7AF-9294-A596-9DD132550A1E} => C:\Users\User\AppData\Roaming\VAAoAUrvqc.exe [2018-04-12] (Microsoft Corporation) <==== UWAGA Task: {B4FBF0E8-6333-44F4-804A-6EE0DAA2F35B} - System32\Tasks\{9F79ED10-1D38-9719-13A9-149F65A1AAEA} => C:\WINDOWS\SysWOW64\OurOUbpue.exe [2018-04-12] (Microsoft Corporation) C:\Users\User\AppData\Roaming\VAAoAUrvqc.exe C:\WINDOWS\SysWOW64\OurOUbpue.exe Task: {F8078C6B-60A8-48A4-AC1A-4BA4CA6E69F6} - System32\Tasks\Ghreringuwek Center => C:\Program Files (x86)\Isakphovey\stagle.exe C:\Program Files (x86)\Isakphovey Task: {1FFB7B82-58F5-4C2C-A880-F552374CD360} - System32\Tasks\{80B5C1C8-53D6-4584-9CE2-A32CF7CC5516} => C:\Windows\system32\pcalua.exe -a H:\Setup.EXE -d H:\ Task: {56806A6F-C252-4381-9B56-5B3CD99C516C} - System32\Tasks\{7932C7BC-13D0-4885-B95F-85A5DD106600} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\Creative Cloud Uninstaller.exe" Task: {6BA559FA-C556-4041-9A96-BF44E1FC2701} - System32\Tasks\{70E078F2-E1AC-4E3C-8A78-D838764D1339} => C:\Windows\system32\pcalua.exe -a H:\SETUP.EXE -d H:\ Task: {7D384A1F-782C-4237-B260-2C0A20557970} - System32\Tasks\{B8FB0B99-33AE-4530-873D-E4B50455B7CB} => C:\Windows\system32\pcalua.exe -a "E:\Program Files (x86)\Hi-Rez Studios\HiRezGamesDiagAndSupport.exe" -c uninstall=all Task: {9DFBFB26-D2F0-46B2-8A4F-13A1DB9E58CC} - System32\Tasks\{AA423090-5942-4573-A187-ACE9724185D1} => C:\Windows\system32\pcalua.exe -a "E:\Official Heroes-Awaken Tutorial-Client\Uninstaller.exe" -d "E:\Official Heroes-Awaken Tutorial-Client" Task: {B7FE48BC-D91F-4526-BF94-5491561B48C9} - System32\Tasks\{9D29C43C-A370-43A8-890D-E40A8DEA1E7C} => C:\Windows\system32\pcalua.exe -a H:\EasySetupAssistant\EasySetupAssistant.exe -d H:\EasySetupAssistant Task: {CB03E46A-5C64-49BE-9173-B2CF080B288C} - System32\Tasks\{99477868-9BE1-4FBF-A185-059FD7510EED} => C:\Windows\system32\pcalua.exe -a "C:\Users\User\Downloads\Nero Free 9.4.12.3d [1].exe" Task: {DCEA9343-AFC8-4E8D-AC2F-CBC53C182092} - System32\Tasks\{E68D69B7-2E4F-440A-A059-79FA28173E22} => C:\Windows\system32\pcalua.exe -a M:\Setup.EXE -d M:\ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Program uruchamiający aplikacje Chrome.lnk C:\Users\User\AppData\Local\Google\Chrome\User Data\Program uruchamiający aplikacje Chrome.lnk C:\Users\User\AppData\Local\vufshwpelyreemicult C:\Users\User\AppData\Local\prevuchnirolyghucult HKU\S-1-5-21-1149130239-293295334-1913617585-1000\Software\Classes\regfile: regedit.exe "%1" <==== UWAGA HKU\S-1-5-21-1149130239-293295334-1913617585-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1 GroupPolicy: Ograniczenia - Chrome <==== UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = S3 mracsvc; C:\Windows\System32\mracsvc.exe [5444824 2017-10-22] (LLC Mail.Ru) S3 mracdrv; C:\WINDOWS\System32\drivers\mracdrv.sys [4933888 2017-10-22] (LLC Mail.Ru) C:\Windows\System32\mracsvc.exe C:\WINDOWS\System32\drivers\mracdrv.sys U3 idsvc; Brak ImagePath CMD: netsh advfirewall reset CMD: dir /a "C:\Program Files" CMD: dir /a "C:\Program Files (x86)" CMD: dir /a "C:\Program Files\Common Files" CMD: dir /a "C:\Program Files (x86)\Common Files" CMD: dir /a "C:\Program Files\Common Files\System" CMD: dir /a "C:\Program Files (x86)\Common Files\System" CMD: dir /a C:\ProgramData CMD: dir /a C:\Users\User\AppData\Local CMD: dir /a C:\Users\User\AppData\LocalLow CMD: dir /a C:\Users\User\AppData\Roaming DeleteKey: HKU\S-1-5-21\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"} EmptyTemp: ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Subway Surfers\Subway Surfers.lnk => pomyślnie przeniesiono C:\Users\Janas_\Documents\Euro Truck Simulator 2\readme.rtf.lnk => pomyślnie przeniesiono C:\Users\Janas_\Documents\Corel\CorelDRAW X5 Samples\target.lnk => pomyślnie przeniesiono C:\Users\User\Links\GG dysk.lnk => pomyślnie przeniesiono C:\Users\User\Favorites\GG dysk.lnk => pomyślnie przeniesiono C:\Users\User\Documents\MAGIX\Music Maker 2016 Premium\_Demos.LNK => pomyślnie przeniesiono C:\Users\User\Documents\Euro Truck Simulator 2\readme.rtf.lnk => pomyślnie przeniesiono C:\Users\User\Documents\American Truck Simulator\readme.rtf.lnk => pomyślnie przeniesiono C:\Users\User\Desktop\ts3\Zombie Army Trilogy.lnk => pomyślnie przeniesiono C:\Users\User\Desktop\Nowy folder\Mozilla Firefox.lnk => pomyślnie przeniesiono C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\IP Search.lnk => pomyślnie przeniesiono C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed\LFS Manual.lnk => pomyślnie przeniesiono C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Inkscape.lnk => pomyślnie przeniesiono C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Camtasia Studio 8.lnk => pomyślnie przeniesiono C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Need for Speed™ Payback.lnk => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => nie znaleziono "HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC} => nie znaleziono "HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => nie znaleziono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0C2FD3F5-3721-4B52-BE3F-65D269B6871C}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C2FD3F5-3721-4B52-BE3F-65D269B6871C}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3C04666D-A99A-4A2C-9CD4-1F18098F497F}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3C04666D-A99A-4A2C-9CD4-1F18098F497F}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44E764A0-B1FF-49AE-9413-244CA8FDECCC}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44E764A0-B1FF-49AE-9413-244CA8FDECCC}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{78835B2B-5402-4A98-802F-1B4415445613}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{78835B2B-5402-4A98-802F-1B4415445613}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8D0E5780-6C00-4FFF-A7FD-FE56E81EB92A}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D0E5780-6C00-4FFF-A7FD-FE56E81EB92A}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B86C2D32-78F1-42E8-81F5-B113C4B1DB11}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B86C2D32-78F1-42E8-81F5-B113C4B1DB11}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BA2487FC-FDC3-48DB-A1B8-1D395267B401}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BA2487FC-FDC3-48DB-A1B8-1D395267B401}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{22D836F7-6E36-411F-B0EB-24D7A8AC2C65}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22D836F7-6E36-411F-B0EB-24D7A8AC2C65}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b2929b72a96a471893ecaa9c51368bae" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2570D44F-AE62-45BD-A42A-2533F593B4E4}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2570D44F-AE62-45BD-A42A-2533F593B4E4}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{AD77D1E3-BA40-ADAF-55F4-C3EB5D7616AA} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AD77D1E3-BA40-ADAF-55F4-C3EB5D7616AA}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{565D36FC-8D14-45D1-AD42-5A665523300E}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{565D36FC-8D14-45D1-AD42-5A665523300E}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{D19D6318-E7AF-9294-A596-9DD132550A1E} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D19D6318-E7AF-9294-A596-9DD132550A1E}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B4FBF0E8-6333-44F4-804A-6EE0DAA2F35B}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4FBF0E8-6333-44F4-804A-6EE0DAA2F35B}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{9F79ED10-1D38-9719-13A9-149F65A1AAEA} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9F79ED10-1D38-9719-13A9-149F65A1AAEA}" => pomyślnie usunięto C:\Users\User\AppData\Roaming\VAAoAUrvqc.exe => pomyślnie przeniesiono C:\WINDOWS\SysWOW64\OurOUbpue.exe => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F8078C6B-60A8-48A4-AC1A-4BA4CA6E69F6}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F8078C6B-60A8-48A4-AC1A-4BA4CA6E69F6}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\Ghreringuwek Center => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Ghreringuwek Center" => pomyślnie usunięto "C:\Program Files (x86)\Isakphovey" => nie znaleziono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1FFB7B82-58F5-4C2C-A880-F552374CD360}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1FFB7B82-58F5-4C2C-A880-F552374CD360}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{80B5C1C8-53D6-4584-9CE2-A32CF7CC5516} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{80B5C1C8-53D6-4584-9CE2-A32CF7CC5516}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{56806A6F-C252-4381-9B56-5B3CD99C516C}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56806A6F-C252-4381-9B56-5B3CD99C516C}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{7932C7BC-13D0-4885-B95F-85A5DD106600} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7932C7BC-13D0-4885-B95F-85A5DD106600}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6BA559FA-C556-4041-9A96-BF44E1FC2701}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6BA559FA-C556-4041-9A96-BF44E1FC2701}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{70E078F2-E1AC-4E3C-8A78-D838764D1339} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{70E078F2-E1AC-4E3C-8A78-D838764D1339}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7D384A1F-782C-4237-B260-2C0A20557970}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7D384A1F-782C-4237-B260-2C0A20557970}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{B8FB0B99-33AE-4530-873D-E4B50455B7CB} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B8FB0B99-33AE-4530-873D-E4B50455B7CB}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9DFBFB26-D2F0-46B2-8A4F-13A1DB9E58CC}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9DFBFB26-D2F0-46B2-8A4F-13A1DB9E58CC}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{AA423090-5942-4573-A187-ACE9724185D1} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AA423090-5942-4573-A187-ACE9724185D1}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B7FE48BC-D91F-4526-BF94-5491561B48C9}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7FE48BC-D91F-4526-BF94-5491561B48C9}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{9D29C43C-A370-43A8-890D-E40A8DEA1E7C} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9D29C43C-A370-43A8-890D-E40A8DEA1E7C}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CB03E46A-5C64-49BE-9173-B2CF080B288C}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB03E46A-5C64-49BE-9173-B2CF080B288C}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{99477868-9BE1-4FBF-A185-059FD7510EED} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{99477868-9BE1-4FBF-A185-059FD7510EED}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DCEA9343-AFC8-4E8D-AC2F-CBC53C182092}" => pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DCEA9343-AFC8-4E8D-AC2F-CBC53C182092}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{E68D69B7-2E4F-440A-A059-79FA28173E22} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E68D69B7-2E4F-440A-A059-79FA28173E22}" => pomyślnie usunięto C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Program uruchamiający aplikacje Chrome.lnk => pomyślnie przeniesiono C:\Users\User\AppData\Local\Google\Chrome\User Data\Program uruchamiający aplikacje Chrome.lnk => pomyślnie przeniesiono C:\Users\User\AppData\Local\vufshwpelyreemicult => pomyślnie przeniesiono C:\Users\User\AppData\Local\prevuchnirolyghucult => pomyślnie przeniesiono "HKU\S-1-5-21-1149130239-293295334-1913617585-1000\Software\Classes\regfile" => pomyślnie usunięto "HKU\S-1-5-21-1149130239-293295334-1913617585-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NolowDiskSpaceChecks" => pomyślnie usunięto C:\WINDOWS\system32\GroupPolicy\Machine => pomyślnie przeniesiono C:\WINDOWS\system32\GroupPolicy\GPT.ini => pomyślnie przeniesiono "HKLM\SOFTWARE\Policies\Google" => pomyślnie usunięto HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono "HKLM\System\CurrentControlSet\Services\mracsvc" => pomyślnie usunięto mracsvc => serwis pomyślnie usunięto "HKLM\System\CurrentControlSet\Services\mracdrv" => pomyślnie usunięto mracdrv => serwis pomyślnie usunięto C:\Windows\System32\mracsvc.exe => pomyślnie przeniesiono C:\WINDOWS\System32\drivers\mracdrv.sys => pomyślnie przeniesiono "HKLM\System\CurrentControlSet\Services\idsvc" => pomyślnie usunięto idsvc => serwis pomyślnie usunięto ========= netsh advfirewall reset ========= Ok. ========= Koniec CMD: ========= ========= dir /a "C:\Program Files" ========= Volume in drive C has no label. Volume Serial Number is 3293-7ED5 Directory of C:\Program Files 2018-08-02 19:05