Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-02-2015 Ran by Łukasz at 2015-02-02 20:21:19 Run:1 Running from C:\Users\Łukasz\Downloads Loaded Profiles: Łukasz (Available profiles: Łukasz & UpdatusUser & Gość) Boot Mode: Safe Mode (with Networking) ============================================== Content of fixlist: ***************** CloseProcesses: HKLM\...\Run: [run32d] => C:\Windows\system\run32dll.exe [2560 2010-06-18] () HKLM\...\Run: [] => [X] HKLM\...\RunOnce: [Malwarebytes Anti-Rootkit (cleanup)] => C:\ProgramData\Malwarebytes' Anti-Malware (portable)\mbamdor.exe [54072 2015-01-09] (Malwarebytes Corporation) HKU\S-1-5-21-704376898-2786838306-483735257-1000\...\Run: [fsm] => [X] HKU\S-1-5-21-704376898-2786838306-483735257-1000\...\Run: [AdobeBridge] => [X] HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://securityresponse.symantec.com/avcenter/fix_homepage/ SearchScopes: HKLM -> DefaultScope value is missing. SearchScopes: HKLM -> {A0B271A9-D8AA-8E74-7392-2164D6A1C03C} URL = http://www.iesearch.com/s/?q={searchTerms} SearchScopes: HKU\S-1-5-21-704376898-2786838306-483735257-1000 -> DefaultScope {A0B271A9-D8AA-8E74-7392-2164D6A1C03C} URL = http://www.iesearch.com/s/?q={searchTerms} SearchScopes: HKU\S-1-5-21-704376898-2786838306-483735257-1000 -> {A0B271A9-D8AA-8E74-7392-2164D6A1C03C} URL = http://www.iesearch.com/s/?q={searchTerms} BHO: No Name -> {1E8A6170-7264-4D0F-BEAE-D42A53123C75} -> No File Toolbar: HKU\.DEFAULT -> No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No File Toolbar: HKU\S-1-5-21-704376898-2786838306-483735257-1000 -> No Name - {37B85A29-692B-4205-9CAD-2626E4993404} - No File Toolbar: HKU\S-1-5-21-704376898-2786838306-483735257-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mbamchameleon => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mbamchameleon => ""="Driver" S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [X] S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X] S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [X] S3 TKCtrl; \??\C:\Windows\system32\TKCtrl2k.sys [X] S3 TKFsAvM; \??\C:\Windows\system32\TKFsAv.sys [X] S3 TkFsFtM; system32\TKFsFt.sys [X] S1 TKFWFV; system32\TKFWFV.sys [X] S3 TKFWVT; \??\C:\Windows\system32\TKFWVT.sys [X] S3 TkIdsVt; \??\C:\Windows\system32\TkIdsVt.sys [X] S3 TKPcFt; \??\C:\Windows\system32\TKPcFtCb.sys [X] S3 WinRing0_1_2_0; \??\D:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys [X] Task: {0E124394-404C-45CC-9E9E-D299C3132190} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files\TuneUp Utilities 2010\OneClick.exe Task: {12EE620F-2080-4729-8A24-4F288C7B5F52} - System32\Tasks\{B4C768D3-F036-4B93-8ECF-0A47AD8B6344} => pcalua.exe -a C:\Users\Łukasz\Desktop\hlof\shared.EXE -d C:\Users\Łukasz\Desktop\hlof Task: {1491E300-AD96-4575-B82D-4D15BB39F96B} - System32\Tasks\{D50AF43B-A3FF-4A7B-A00D-9BEE61E8CCB5} => pcalua.exe -a "C:\speedtouch_for_windows\ZXDSL 852V2.1.0a_D14_PL\setup.exe" -d "C:\speedtouch_for_windows\ZXDSL 852V2.1.0a_D14_PL" Task: {18640F16-0EAE-4657-A34F-23AD11A6186F} - System32\Tasks\{62BBD44E-6449-412A-AF1B-F96C8D51248D} => pcalua.exe -a E:\directx\dxsetup.exe -d E:\directx Task: {1CC9542E-0AE1-4202-BAA2-9C8CFBE337AA} - System32\Tasks\{230EDA7A-06F8-484F-89B9-F1B50ED3D8F4} => pcalua.exe -a E:\setup.exe Task: {20C6924C-1383-4812-99D1-B7C76D2F4C61} - System32\Tasks\Razer_Game_Booster_AutoUpdate => D:\Program Files\Razer\Razer Game Booster\AutoUpdate.exe Task: {26E36B8C-1CE0-4C0B-9CCE-BDAA3C524F94} - System32\Tasks\{33388587-3C7B-4D90-B947-9C21E5A8F9A5} => pcalua.exe -a F:\Autorun.exe -d F:\ Task: {2CAA0853-2A47-412F-9E65-5732CC67D124} - System32\Tasks\{5EA6750A-0A3C-43C0-942C-46CA079D8503} => pcalua.exe -a "C:\Users\Łukasz\Desktop\ZXDSL 852V2.1.0a_D14_PL\setup.exe" -d "C:\Users\Łukasz\Desktop\ZXDSL 852V2.1.0a_D14_PL" Task: {3441C6B7-987C-4C01-A941-E05ED450C7DD} - System32\Tasks\{0943E9CC-2D9A-4E54-AFB7-61884D190540} => pcalua.exe -a C:\Users\Łukasz\Desktop\Metin2_20080219.exe -d C:\Windows\system32 Task: {3C0631EF-B5CF-4845-9285-DF47772F6EC0} - System32\Tasks\{2919CD96-03E1-42C6-A57B-94D17F3624E9} => pcalua.exe -a "C:\Users\Łukasz\Desktop\Predator2\Aliens vs. Predator 2\Aliens vs. Predator 2\Aliens vs. Predator 2\Uninstall.exe" -d "C:\Users\Łukasz\Desktop\Predator2\Aliens vs. Predator 2\Aliens vs. Predator 2\Aliens vs. Predator 2" Task: {400F09E1-FC52-43E8-BC84-6E84CD5C030F} - System32\Tasks\{CAAD7982-C19B-44DC-8839-A5F2406242A6} => pcalua.exe -a C:\Users\Łukasz\Desktop\Dokumenty\hlof\opinstall.EXE -d C:\Users\Łukasz\Desktop\Dokumenty\hlof Task: {46EF0E59-4F46-4680-A333-E8189372A578} - System32\Tasks\{8B092452-7BCB-495D-B714-5F6A5FB8B030} => pcalua.exe -a "C:\Program Files\Loonies\ISIIM\ISIIMan.exe" -d "C:\Program Files\Loonies\ISIIM" Task: {4B828BEC-FB88-4471-881B-6DD139F5329E} - System32\Tasks\{03840F14-8D97-424E-A110-559B8CB78482} => pcalua.exe -a "D:\Program Files\THQ\MotoGP URT 3\unins001.exe" -d "D:\Program Files\THQ\MotoGP URT 3" Task: {4C45FD5C-BBCC-487B-9B72-473CDC0C0524} - System32\Tasks\{2F193CE0-1943-4700-895C-AE079ADC3B06} => pcalua.exe -a E:\Patch\DXP2-111-120.EXE -d E:\Patch Task: {4C6E1DC6-43C1-4D03-8D5A-EE6A0D28F5D7} - System32\Tasks\{77BD6FCD-C7C3-41D9-B917-33934DF96AC7} => pcalua.exe -a "C:\Users\Łukasz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OWRUAFN6\HC2Setup[1].exe" -d C:\Windows\system32 Task: {52E4A1C1-D19C-4903-8FEA-7B6A505ED270} - System32\Tasks\{2469D803-D3D7-4D8D-9255-FC5B241CD2DF} => pcalua.exe -a C:\Users\Łukasz\Documents\Downloads\vegaspro90c_32bit.exe -d C:\Users\Łukasz\Documents\Downloads Task: {5ABC08E0-5FDE-481F-A8CE-3F6AFE9A051F} - System32\Tasks\{068F5BB0-94D5-4734-818F-DD4ED2759FE6} => pcalua.exe -a E:\WAG200G.exe -d E:\ Task: {668368F9-F123-4380-8AE5-77EF59B2C73D} - System32\Tasks\{850AAEE9-DC53-4149-B7B1-52D954A372BB} => pcalua.exe -a C:\Users\Łukasz\Desktop\Dokumenty\Metin2_PL_20090526.exe -d C:\Users\Łukasz\Desktop\Dokumenty Task: {6D1926BD-5D55-45F6-A8E1-59ACA105ED7A} - System32\Tasks\Game_Booster_AutoUpdate => D:\Program Files\IObit\Game Booster 3\AutoUpdate.exe Task: {6DAE9572-F5C5-47D0-8E02-680C8280D13D} - System32\Tasks\{79E064DD-9AD2-4309-B46F-AD753FAC82FB} => pcalua.exe -a C:\Users\Łukasz\Desktop\Juiced\Juiced\SetupReg.exe -d C:\Users\Łukasz\Desktop\Juiced\Juiced Task: {70727FAA-8A8C-4404-9B33-010C95DC06DA} - System32\Tasks\{832FC3CA-B4B3-4B83-B137-F624BFF761D3} => pcalua.exe -a F:\DirectX\dxsetup.exe -d F:\DirectX Task: {7B087615-415A-48B8-B8D4-BBF8533276DE} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe Task: {805A110D-0E57-424B-B5E4-A7C28981397C} - System32\Tasks\{4D4EEDA7-B774-45FB-957B-51895B18F3D3} => pcalua.exe -a C:\Users\Łukasz\Desktop\gmod_904c.exe -d C:\Users\Łukasz\Desktop Task: {A7B262E0-B7A2-494E-85A6-445F07A7C2BD} - System32\Tasks\{8A2922A6-ADA8-4956-834B-E474D2E4B84D} => pcalua.exe -a F:\CD1\SETUP.EXE -d F:\CD1 Task: {B05D5E3F-F9A4-4018-B813-059B5D7E5B3C} - System32\Tasks\{A02E8612-8BCD-4EF7-85D4-E953A59DD6ED} => pcalua.exe -a C:\Users\Łukasz\Desktop\Metin2_PL_20090526.exe -d C:\Users\Łukasz\Desktop Task: {D37975BE-7B2F-44F3-A7DC-1DBFB04DAE74} - System32\Tasks\{C7894965-B283-4C4E-B4AE-7046498EC278} => pcalua.exe -a C:\Users\Łukasz\Desktop\hlof\opinstall.EXE -d C:\Users\Łukasz\Desktop\hlof Task: {D7E37258-F378-4F39-B287-CD0C565C0F80} - System32\Tasks\{6DD04473-B3A7-46DD-8A6E-123C005FBDF4} => pcalua.exe -a "C:\Users\Łukasz\Desktop\Soldier Of Fortune\demo32.exe" -d "C:\Users\Łukasz\Desktop\Soldier Of Fortune" Task: {E666D7D7-BC0E-46B2-9B0B-7643FE97F3BB} - System32\Tasks\{A87680A9-3F2E-40B0-AF47-35AE87F79D2F} => pcalua.exe -a C:\Users\Łukasz\Desktop\Wog\WoG_Install\Install.exe -d C:\Users\Łukasz\Desktop\Wog\WoG_Install Task: {E89BB720-2B13-446F-95ED-84A795863CAB} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exe <==== ATTENTION CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{0000002F-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{0002E005-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{0BE35203-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{0BE35204-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE33-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE34-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE35-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE36-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE37-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE39-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3A-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3B-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3C-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3D-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3E-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3F-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE40-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE41-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE42-8596-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{d0a0ed0a-55ac-4469-a197-1d08ce99cfb9}\localserver32 -> C:\Users\UKASZ~1\AppData\Local\Temp\{4f5e3a76-f453-4882-ab42-7224f3310de7}\IDriver.NonElevated.exe (Macrovision Corporation) CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\InprocServer32 -> No File Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks\Oblivion C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cry of Fear C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deadhunt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.73 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FTP Commander Pro C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HyperCam 2 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft\Minecraft.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\osu!\osu! updater.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VUGames\SWAT 4 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZD Soft C:\ProgramData\TEMP C:\Users\Gość\Desktop\*.lnk C:\Users\Łukasz\AppData\Local\Temp*.html C:\Users\Łukasz\AppData\Roaming\Mozilla C:\Users\Łukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome (2).lnk C:\Users\Łukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Paint (2).lnk C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\SendTo\Znajomy Xfire.lnk C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Magic Hub C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Halflife Logo Creator C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HyperCam 2 C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Virtua Cop 2 C:\Users\Łukasz\Desktop\Dokumenty\avast! Free Antivirus.lnk C:\Users\Łukasz\Desktop\Dokumenty\Dark Souls Prepare to Die Edition.lnk C:\Users\Łukasz\Desktop\Dokumenty\Gry\LFS.lnk C:\Users\Łukasz\Desktop\Dokumenty\Gry\Minecraft.lnk C:\Users\Łukasz\Desktop\Dokumenty\Gry\Skyrim.lnk C:\Users\Łukasz\Desktop\Dokumenty\Gry\TERA.lnk C:\Users\Łukasz\Desktop\Dokumenty\Gry\Tunngle beta.lnk C:\Users\Łukasz\Desktop\Dokumenty\Programy\avast! Free Antivirus.lnk C:\Users\Łukasz\Desktop\Dokumenty\Programy\Nokia PC Suite.lnk C:\Users\Łukasz\Documents\Euro Truck Simulator 2 C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension C:\Windows\system\run32dll.exe Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKCU\Software\Mozilla /f Reg: reg delete HKCU\Software\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Mozilla /f Reg: reg delete HKLM\SOFTWARE\mozilla.org /f Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main" /f CMD: sc config WinDefend start= demand CMD: type "C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\plik.bat" EmptyTemp: ***************** Processes closed successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\run32d => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Malwarebytes Anti-Rootkit (cleanup) => value deleted successfully. HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Windows\CurrentVersion\Run\\fsm => value deleted successfully. HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully. HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Internet Explorer\Main\\Start Page Restore => value deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}" => Key deleted successfully. HKCR\CLSID\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C} => Key not found. HKU\S-1-5-21-704376898-2786838306-483735257-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}" => Key deleted successfully. HKCR\CLSID\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C} => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}" => Key deleted successfully. HKCR\CLSID\{1E8A6170-7264-4D0F-BEAE-D42A53123C75} => Key not found. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{30F9B915-B755-4826-820B-08FBA6BD249D} => value deleted successfully. HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} => Key not found. HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{37B85A29-692B-4205-9CAD-2626E4993404} => value deleted successfully. HKCR\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404} => Key not found. HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => value deleted successfully. HKCR\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => Key not found. "HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\mbamchameleon" => Key deleted successfully. "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mbamchameleon" => Key deleted successfully. EagleNT => Service deleted successfully. EagleXNt => Service deleted successfully. lvupdtio => Service deleted successfully. TKCtrl => Service deleted successfully. TKFsAvM => Service deleted successfully. TkFsFtM => Service deleted successfully. TKFWFV => Service deleted successfully. TKFWVT => Service deleted successfully. TkIdsVt => Service deleted successfully. TKPcFt => Service deleted successfully. WinRing0_1_2_0 => Service deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0E124394-404C-45CC-9E9E-D299C3132190}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0E124394-404C-45CC-9E9E-D299C3132190}" => Key deleted successfully. C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TuneUpUtilities_Task_BkGndMaintenance" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{12EE620F-2080-4729-8A24-4F288C7B5F52}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12EE620F-2080-4729-8A24-4F288C7B5F52}" => Key deleted successfully. C:\Windows\System32\Tasks\{B4C768D3-F036-4B93-8ECF-0A47AD8B6344} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B4C768D3-F036-4B93-8ECF-0A47AD8B6344}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1491E300-AD96-4575-B82D-4D15BB39F96B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1491E300-AD96-4575-B82D-4D15BB39F96B}" => Key deleted successfully. C:\Windows\System32\Tasks\{D50AF43B-A3FF-4A7B-A00D-9BEE61E8CCB5} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D50AF43B-A3FF-4A7B-A00D-9BEE61E8CCB5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{18640F16-0EAE-4657-A34F-23AD11A6186F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18640F16-0EAE-4657-A34F-23AD11A6186F}" => Key deleted successfully. C:\Windows\System32\Tasks\{62BBD44E-6449-412A-AF1B-F96C8D51248D} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{62BBD44E-6449-412A-AF1B-F96C8D51248D}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1CC9542E-0AE1-4202-BAA2-9C8CFBE337AA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1CC9542E-0AE1-4202-BAA2-9C8CFBE337AA}" => Key deleted successfully. C:\Windows\System32\Tasks\{230EDA7A-06F8-484F-89B9-F1B50ED3D8F4} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{230EDA7A-06F8-484F-89B9-F1B50ED3D8F4}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{20C6924C-1383-4812-99D1-B7C76D2F4C61}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20C6924C-1383-4812-99D1-B7C76D2F4C61}" => Key deleted successfully. C:\Windows\System32\Tasks\Razer_Game_Booster_AutoUpdate => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Razer_Game_Booster_AutoUpdate" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{26E36B8C-1CE0-4C0B-9CCE-BDAA3C524F94}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{26E36B8C-1CE0-4C0B-9CCE-BDAA3C524F94}" => Key deleted successfully. C:\Windows\System32\Tasks\{33388587-3C7B-4D90-B947-9C21E5A8F9A5} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{33388587-3C7B-4D90-B947-9C21E5A8F9A5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2CAA0853-2A47-412F-9E65-5732CC67D124}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CAA0853-2A47-412F-9E65-5732CC67D124}" => Key deleted successfully. C:\Windows\System32\Tasks\{5EA6750A-0A3C-43C0-942C-46CA079D8503} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5EA6750A-0A3C-43C0-942C-46CA079D8503}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3441C6B7-987C-4C01-A941-E05ED450C7DD}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3441C6B7-987C-4C01-A941-E05ED450C7DD}" => Key deleted successfully. C:\Windows\System32\Tasks\{0943E9CC-2D9A-4E54-AFB7-61884D190540} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{0943E9CC-2D9A-4E54-AFB7-61884D190540}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3C0631EF-B5CF-4845-9285-DF47772F6EC0}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3C0631EF-B5CF-4845-9285-DF47772F6EC0}" => Key deleted successfully. C:\Windows\System32\Tasks\{2919CD96-03E1-42C6-A57B-94D17F3624E9} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2919CD96-03E1-42C6-A57B-94D17F3624E9}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{400F09E1-FC52-43E8-BC84-6E84CD5C030F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{400F09E1-FC52-43E8-BC84-6E84CD5C030F}" => Key deleted successfully. C:\Windows\System32\Tasks\{CAAD7982-C19B-44DC-8839-A5F2406242A6} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CAAD7982-C19B-44DC-8839-A5F2406242A6}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{46EF0E59-4F46-4680-A333-E8189372A578}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{46EF0E59-4F46-4680-A333-E8189372A578}" => Key deleted successfully. C:\Windows\System32\Tasks\{8B092452-7BCB-495D-B714-5F6A5FB8B030} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8B092452-7BCB-495D-B714-5F6A5FB8B030}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4B828BEC-FB88-4471-881B-6DD139F5329E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B828BEC-FB88-4471-881B-6DD139F5329E}" => Key deleted successfully. C:\Windows\System32\Tasks\{03840F14-8D97-424E-A110-559B8CB78482} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{03840F14-8D97-424E-A110-559B8CB78482}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4C45FD5C-BBCC-487B-9B72-473CDC0C0524}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C45FD5C-BBCC-487B-9B72-473CDC0C0524}" => Key deleted successfully. C:\Windows\System32\Tasks\{2F193CE0-1943-4700-895C-AE079ADC3B06} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2F193CE0-1943-4700-895C-AE079ADC3B06}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4C6E1DC6-43C1-4D03-8D5A-EE6A0D28F5D7}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C6E1DC6-43C1-4D03-8D5A-EE6A0D28F5D7}" => Key deleted successfully. C:\Windows\System32\Tasks\{77BD6FCD-C7C3-41D9-B917-33934DF96AC7} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{77BD6FCD-C7C3-41D9-B917-33934DF96AC7}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52E4A1C1-D19C-4903-8FEA-7B6A505ED270}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52E4A1C1-D19C-4903-8FEA-7B6A505ED270}" => Key deleted successfully. C:\Windows\System32\Tasks\{2469D803-D3D7-4D8D-9255-FC5B241CD2DF} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2469D803-D3D7-4D8D-9255-FC5B241CD2DF}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5ABC08E0-5FDE-481F-A8CE-3F6AFE9A051F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5ABC08E0-5FDE-481F-A8CE-3F6AFE9A051F}" => Key deleted successfully. C:\Windows\System32\Tasks\{068F5BB0-94D5-4734-818F-DD4ED2759FE6} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{068F5BB0-94D5-4734-818F-DD4ED2759FE6}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{668368F9-F123-4380-8AE5-77EF59B2C73D}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{668368F9-F123-4380-8AE5-77EF59B2C73D}" => Key deleted successfully. C:\Windows\System32\Tasks\{850AAEE9-DC53-4149-B7B1-52D954A372BB} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{850AAEE9-DC53-4149-B7B1-52D954A372BB}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6D1926BD-5D55-45F6-A8E1-59ACA105ED7A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6D1926BD-5D55-45F6-A8E1-59ACA105ED7A}" => Key deleted successfully. C:\Windows\System32\Tasks\Game_Booster_AutoUpdate => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Game_Booster_AutoUpdate" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6DAE9572-F5C5-47D0-8E02-680C8280D13D}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DAE9572-F5C5-47D0-8E02-680C8280D13D}" => Key deleted successfully. C:\Windows\System32\Tasks\{79E064DD-9AD2-4309-B46F-AD753FAC82FB} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{79E064DD-9AD2-4309-B46F-AD753FAC82FB}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{70727FAA-8A8C-4404-9B33-010C95DC06DA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70727FAA-8A8C-4404-9B33-010C95DC06DA}" => Key deleted successfully. C:\Windows\System32\Tasks\{832FC3CA-B4B3-4B83-B137-F624BFF761D3} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{832FC3CA-B4B3-4B83-B137-F624BFF761D3}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7B087615-415A-48B8-B8D4-BBF8533276DE}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7B087615-415A-48B8-B8D4-BBF8533276DE}" => Key deleted successfully. C:\Windows\System32\Tasks\avast! Emergency Update => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avast! Emergency Update" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{805A110D-0E57-424B-B5E4-A7C28981397C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{805A110D-0E57-424B-B5E4-A7C28981397C}" => Key deleted successfully. C:\Windows\System32\Tasks\{4D4EEDA7-B774-45FB-957B-51895B18F3D3} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4D4EEDA7-B774-45FB-957B-51895B18F3D3}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7B262E0-B7A2-494E-85A6-445F07A7C2BD}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7B262E0-B7A2-494E-85A6-445F07A7C2BD}" => Key deleted successfully. C:\Windows\System32\Tasks\{8A2922A6-ADA8-4956-834B-E474D2E4B84D} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8A2922A6-ADA8-4956-834B-E474D2E4B84D}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B05D5E3F-F9A4-4018-B813-059B5D7E5B3C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B05D5E3F-F9A4-4018-B813-059B5D7E5B3C}" => Key deleted successfully. C:\Windows\System32\Tasks\{A02E8612-8BCD-4EF7-85D4-E953A59DD6ED} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A02E8612-8BCD-4EF7-85D4-E953A59DD6ED}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D37975BE-7B2F-44F3-A7DC-1DBFB04DAE74}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D37975BE-7B2F-44F3-A7DC-1DBFB04DAE74}" => Key deleted successfully. C:\Windows\System32\Tasks\{C7894965-B283-4C4E-B4AE-7046498EC278} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C7894965-B283-4C4E-B4AE-7046498EC278}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D7E37258-F378-4F39-B287-CD0C565C0F80}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D7E37258-F378-4F39-B287-CD0C565C0F80}" => Key deleted successfully. C:\Windows\System32\Tasks\{6DD04473-B3A7-46DD-8A6E-123C005FBDF4} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6DD04473-B3A7-46DD-8A6E-123C005FBDF4}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E666D7D7-BC0E-46B2-9B0B-7643FE97F3BB}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E666D7D7-BC0E-46B2-9B0B-7643FE97F3BB}" => Key deleted successfully. C:\Windows\System32\Tasks\{A87680A9-3F2E-40B0-AF47-35AE87F79D2F} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A87680A9-3F2E-40B0-AF47-35AE87F79D2F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E89BB720-2B13-446F-95ED-84A795863CAB}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E89BB720-2B13-446F-95ED-84A795863CAB}" => Key deleted successfully. C:\Windows\System32\Tasks\Desk 365 RunAsStdUser => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{0000002F-0000-0000-C000-000000000046}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{0002E005-0000-0000-C000-000000000046}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{0BE35203-8F91-11CE-9DE3-00AA004BB851}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{0BE35204-8F91-11CE-9DE3-00AA004BB851}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE33-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE34-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE35-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE36-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE37-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE39-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3A-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3B-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3C-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3D-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3E-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE3F-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE40-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE41-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C27CCE42-8596-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{d0a0ed0a-55ac-4469-a197-1d08ce99cfb9}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}" => Key deleted successfully. "HKU\S-1-5-21-704376898-2786838306-483735257-1000_Classes\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}" => Key deleted successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks\Oblivion => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cry of Fear => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deadhunt => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.73 => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FTP Commander Pro => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HyperCam 2 => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft\Minecraft.lnk => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\osu!\osu! updater.lnk => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VUGames\SWAT 4 => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZD Soft => Moved successfully. C:\ProgramData\TEMP => Moved successfully. C:\Users\Gość\Desktop\*.lnk => Moved successfully. C:\Users\Łukasz\AppData\Local\Temp*.html => Moved successfully. C:\Users\Łukasz\AppData\Roaming\Mozilla => Moved successfully. C:\Users\Łukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome (2).lnk => Moved successfully. C:\Users\Łukasz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Paint (2).lnk => Moved successfully. C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\SendTo\Znajomy Xfire.lnk => Moved successfully. C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Magic Hub => Moved successfully. C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Halflife Logo Creator => Moved successfully. C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HyperCam 2 => Moved successfully. C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Virtua Cop 2 => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\avast! Free Antivirus.lnk => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\Dark Souls Prepare to Die Edition.lnk => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\Gry\LFS.lnk => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\Gry\Minecraft.lnk => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\Gry\Skyrim.lnk => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\Gry\TERA.lnk => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\Gry\Tunngle beta.lnk => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\Programy\avast! Free Antivirus.lnk => Moved successfully. C:\Users\Łukasz\Desktop\Dokumenty\Programy\Nokia PC Suite.lnk => Moved successfully. C:\Users\Łukasz\Documents\Euro Truck Simulator 2 => Moved successfully. C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP => Moved successfully. C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension => Moved successfully. C:\Windows\system\run32dll.exe => Moved successfully. ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\mozilla.org /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= sc config WinDefend start= demand ========= [SC] ChangeServiceConfig SUKCES ========= End of CMD: ========= ========= type "C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\plik.bat" ========= start explorer.exe ========= End of CMD: ========= EmptyTemp: => Removed 12.3 GB temporary data. The system needed a reboot. ==== End of Fixlog 20:41:27 ====