Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 17.03.2019 Uruchomiony przez user (29-03-2019 18:43:35) Run:4 Uruchomiony z F:\3 Załadowane profile: user (Dostępne profile: user & karo & Gość) Tryb startu: Safe Mode (with Networking) ============================================== fixlist - zawartość: ***************** C:\Users\user\AppData\Local\qEIoMoYjyUoY.exe Task: {1518B256-9EC3-4084-86AE-4060D3D6D505} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {8E2227F1-D21D-42D3-9394-B287DBFCD21A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {BC88FF00-9863-482D-A3D0-1F5EF99E0AEC} - \Opera scheduled Autoupdate 711520318 -> Brak pliku <==== UWAGA Task: {E51FC9A7-C1AA-4D9B-980D-4314AAA7F582} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe C:\Users\user\Documents\Skróty\TriangulateImage5.bat — skrót.lnk FirewallRules: [{392ED811-2A82-4DE8-B4C2-847AB6767B2F}] => (Allow) C:\Windows\SysWOW64\svchost.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{AB926640-3184-4F1F-8B48-680FE4EB45F6}] => (Allow) C:\Windows\SysWOW64\svchost.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{90CB655A-F856-4FD4-A00A-1D89F3CCCB85}] => (Allow) C:\Windows\SysWOW64\InstallShield\setup.exe (Microsoft Windows -> InstallShield Software Corporation) FirewallRules: [{3B4F5E8D-06FC-4D8A-9335-95B9F50DE269}] => (Allow) C:\Windows\SysWOW64\svchost.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{1A723405-58AB-4FEE-8E01-232D8350207B}] => (Allow) C:\Windows\SysWOW64\svchost.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{6E03666A-0C57-45A5-A48B-A29FEA324261}] => (Allow) C:\Windows\SysWOW64\InstallShield\setup.exe (Microsoft Windows -> InstallShield Software Corporation) BootExecute: autocheck autochk * sdnclean64.exe SearchScopes: HKLM-x32 -> DefaultScope - brak wartości FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [Brak pliku] S2 localNETService; C:\ProgramData\localNETService\localNETService.exe -s 27 [X] 2019-03-18 10:29 - 2019-03-29 14:33 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2019-03-18 10:29 - 2019-03-29 14:29 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy 2019-03-18 10:29 - 2019-03-18 10:29 - 000000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2019-03-18 10:24 - 2019-03-18 10:26 - 069910960 _____ (Safer-Networking Ltd. ) C:\Users\user\Downloads\spybotsd-2.7.64.0.exe 2019-03-18 10:20 - 2019-03-18 10:20 - 000000000 ____D C:\Users\user\AppData\Local\Safer-Networking Ltd 2019-03-18 10:17 - 2019-03-18 10:17 - 000000000 ____D C:\Users\user\Downloads\SpybotAntiBeaconPortable-safer-networking.org 2019-03-18 10:16 - 2019-03-18 10:16 - 007982568 _____ (PortableApps.com) C:\Users\user\Downloads\SpybotAntiBeaconPortable-safer-networking.org_3.1.0.paf.exe C:\Users\user\AppData\Local\uninstall_temp.ico C:\Users\karo\Desktop\Adult Dating.lnk C:\Users\user\Documents\Corel\CorelDRAW X7 Samples\target.lnk C:\Users\user\AppData\Roaming\Microsoft\Windows\SendTo\The Bat!.LNK C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\SoulseekQt.lnk C:\Users\Gość\Desktop\Google Chrome.lnk HOSTS: EmptyTemp: ***************** "C:\Users\user\AppData\Local\qEIoMoYjyUoY.exe" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1518B256-9EC3-4084-86AE-4060D3D6D505}" => nie znaleziono "C:\Windows\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Refresh immunization" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E2227F1-D21D-42D3-9394-B287DBFCD21A}" => nie znaleziono "C:\Windows\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Scan the system" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BC88FF00-9863-482D-A3D0-1F5EF99E0AEC}" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 711520318" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E51FC9A7-C1AA-4D9B-980D-4314AAA7F582}" => nie znaleziono "C:\Windows\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Check for updates" => nie znaleziono "C:\Users\user\Documents\Skróty\TriangulateImage5.bat — skrót.lnk" => nie znaleziono "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{392ED811-2A82-4DE8-B4C2-847AB6767B2F}" => nie znaleziono "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AB926640-3184-4F1F-8B48-680FE4EB45F6}" => nie znaleziono "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{90CB655A-F856-4FD4-A00A-1D89F3CCCB85}" => nie znaleziono "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3B4F5E8D-06FC-4D8A-9335-95B9F50DE269}" => nie znaleziono "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1A723405-58AB-4FEE-8E01-232D8350207B}" => nie znaleziono "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6E03666A-0C57-45A5-A48B-A29FEA324261}" => nie znaleziono HKLM\System\CurrentControlSet\Control\Session Manager\\BootExecute => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\MozillaPlugins\wacom.com/WacomTabletPlugin => nie znaleziono localNETService => serwis nie znaleziono. "C:\Program Files (x86)\Spybot - Search & Destroy 2" => nie znaleziono "C:\ProgramData\Spybot - Search & Destroy" => nie znaleziono "C:\Windows\System32\Tasks\Safer-Networking" => nie znaleziono "C:\Users\user\Downloads\spybotsd-2.7.64.0.exe" => nie znaleziono "C:\Users\user\AppData\Local\Safer-Networking Ltd" => nie znaleziono "C:\Users\user\Downloads\SpybotAntiBeaconPortable-safer-networking.org" => nie znaleziono "C:\Users\user\Downloads\SpybotAntiBeaconPortable-safer-networking.org_3.1.0.paf.exe" => nie znaleziono "C:\Users\user\AppData\Local\uninstall_temp.ico" => nie znaleziono "C:\Users\karo\Desktop\Adult Dating.lnk" => nie znaleziono "C:\Users\user\Documents\Corel\CorelDRAW X7 Samples\target.lnk" => nie znaleziono "C:\Users\user\AppData\Roaming\Microsoft\Windows\SendTo\The Bat!.LNK" => nie znaleziono "C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\SoulseekQt.lnk" => nie znaleziono "C:\Users\Gość\Desktop\Google Chrome.lnk" => nie znaleziono C:\Windows\System32\Drivers\etc\hosts => pomyślnie przeniesiono Hosts pomyślnie przywrócono. =========== EmptyTemp: ========== BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10489088 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 3417 B Edge => 0 B Chrome => 0 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Users => 0 B Default => 0 B Public => 0 B ProgramData => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 0 B user => 33789 B karo => 0 B Gość => 0 B RecycleBin => 0 B EmptyTemp: => 10 MB danych tymczasowych Usunięto. ================================ System wymagał restartu. ==== Koniec Fixlog 18:43:47 ====