Fix result of Farbar Recovery Scan Tool (x64) Version: 25-05-2015 Ran by Zbyszek at 2015-05-27 19:06:13 Run:2 Running from C:\Users\Zbyszek\Desktop Loaded Profiles: Zbyszek (Available Profiles: Jarosław & Zbyszek) Boot Mode: Normal ============================================== fixlist content: ***************** S1 tbfd_1_10_0_16; system32\drivers\tbfd_1_10_0_16.sys [X] BootExecute: autocheck autochk * sdnclean64.exe HKU\S-1-5-21-2702069576-3377963828-517850969-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2702069576-3377963828-517850969-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1419329847&from=wpm12233&uid=SAMSUNGXHD103SJ_S246J9KB517050&q={searchTerms} HKU\S-1-5-21-2702069576-3377963828-517850969-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yhs4.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_15_21¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dpl%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyDtD0EyDyEzytA0Czy0F0FtAzz0ByBtAtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0AyC0A0C0D0C0FtGyCtCyCtCtGzztB0FtDtGyByEzy0BtGtAyE0ByC0B0B0EyDzyyBtA0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0BtD0AtCtD0E0AtGtDtD0EtAtGyE0D0E0BtGzz0FyE0FtG0CtCtDzz0FzyyEtBtAzztC0C2QtN0A0LzutB%26cr%3D758467066%26a%3Dwny_ir_15_21%26os%3DWindows 8.1 Pro HKU\S-1-5-21-2702069576-3377963828-517850969-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1408800404&from=ild&uid=SAMSUNGXHD103SJ_S246J9KB517050 HKU\S-1-5-21-2702069576-3377963828-517850969-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1419329847&from=wpm12233&uid=SAMSUNGXHD103SJ_S246J9KB517050&q={searchTerms} SearchScopes: HKU\S-1-5-21-2702069576-3377963828-517850969-1001 -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyDtD0EyDyEzytA0Czy0F0FtAzz0ByBtAtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFzytFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyDtCyB0ByEyD0A0CtGyBzyyB0AtG0F0AyCtAtGzz0BtC0BtGtBtDtB0C0DyB0A0A0A0A0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyEtD0A0EtAyC0FtGyCzyyDzztGyEtDtB0CtG0A0DtD0BtGyBzytAtAtA0D0AyDtDyCyCyC2QtN0A0LzutBtN1B2Z1V1T1S1NzuyByCtD%26cr%3D1604865532%26a%3Dwncy_ir_15_21%26os%3DWindows 8.1 Pro&p={searchTerms} SearchScopes: HKU\S-1-5-21-2702069576-3377963828-517850969-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = http://www.v9.com/web?type=ds&ts=1431343765&from=zzgbkk123&uid=samsungxhd103sj_s246j9kb517050&z=0d4816498545a7bea6c093fgbz8cbg6cdz9cdmdmdm&q={searchTerms} SearchScopes: HKU\S-1-5-21-2702069576-3377963828-517850969-1001 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyDtD0EyDyEzytA0Czy0F0FtAzz0ByBtAtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFzytFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyDtCyB0ByEyD0A0CtGyBzyyB0AtG0F0AyCtAtGzz0BtC0BtGtBtDtB0C0DyB0A0A0A0A0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyEtD0A0EtAyC0FtGyCzyyDzztGyEtDtB0CtG0A0DtD0BtGyBzytAtAtA0D0AyDtDyCyCyC2QtN0A0LzutBtN1B2Z1V1T1S1NzuyByCtD%26cr%3D1604865532%26a%3Dwncy_ir_15_21%26os%3DWindows 8.1 Pro&p={searchTerms} SearchScopes: HKU\S-1-5-21-2702069576-3377963828-517850969-1001 -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_15_21¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyDtD0EyDyEzytA0Czy0F0FtAzz0ByBtAtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StD0AyC0A0C0D0C0FtGyCtCyCtCtGzztB0FtDtGyByEzy0BtGtAyE0ByC0B0B0EyDzyyBtA0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0BtD0AtCtD0E0AtGtDtD0EtAtGyE0D0E0BtGzz0FyE0FtG0CtCtDzz0FzyyEtBtAzztC0C2QtN0A0LzutB%26cr%3D758467066%26a%3Dwny_ir_15_21%26os%3DWindows 8.1 Pro&p={searchTerms} SearchScopes: HKU\S-1-5-21-2702069576-3377963828-517850969-1001 -> {F8A0E0EF-4654-4F6D-BEB8-2DA3CFF26712} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms} CMD: del /q C:\Users\Jarosław\AppData\Roaming\regsvr32.exe_log.txt RemoveDirectory: C:\Program Files (x86)\Spybot - Search & Destroy 2 RemoveDirectory: C:\ProgramData\Spybot - Search & Destroy RemoveDirectory: C:\Users\Piotrek RemoveDirectory: C:\WINDOWS\System32\Tasks\Safer-Networking Folder: C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking Reg: reg delete HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I /f Reg: reg delete HKCU\Software\dobreprogramy /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v "PC Suite Tray" /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v "TornTv Downloader" /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder /v TornTvDownloader.lnk /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{9b6ed4d7} /f ***************** tbfd_1_10_0_16 => Service Removed successfully hklm\System\CurrentControlSet\Control\Session Manager\\BootExecute => value restored successfully HKU\S-1-5-21-2702069576-3377963828-517850969-1001\SOFTWARE\Policies\Microsoft\Internet Explorer => key not found. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\Software\Microsoft\Internet Explorer\Main\\Search Page => Error setting value. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Error setting value. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Error setting value. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Error setting value. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146} => key not found. HKCR\CLSID\{2f23ab71-4ac6-41f2-a955-ea576e553146} => key not found. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF} => key not found. HKCR\CLSID\{425ED333-6083-428a-92C9-0CFC28B9D1BF} => key not found. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8CDE19E6-71C2-4B46-89B7-35F6A18C571A} => key not found. HKCR\CLSID\{8CDE19E6-71C2-4B46-89B7-35F6A18C571A} => key not found. HKU\S-1-5-21-2702069576-3377963828-517850969-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F8A0E0EF-4654-4F6D-BEB8-2DA3CFF26712} => key not found. HKCR\CLSID\{F8A0E0EF-4654-4F6D-BEB8-2DA3CFF26712} => key not found. ========= del /q C:\Users\Jarosław\AppData\Roaming\regsvr32.exe_log.txt ========= ========= End of CMD: ========= "C:\Program Files (x86)\Spybot - Search & Destroy 2" => Removed successfully. "C:\ProgramData\Spybot - Search & Destroy" => Removed successfully. "C:\Users\Piotrek" => Removed successfully. "C:\WINDOWS\System32\Tasks\Safer-Networking" => Removed successfully. ========================= Folder: C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC ======================== 2014-09-28 09:58 - 2014-09-28 09:58 - 0001131 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\jtwc.ini 2014-09-28 09:58 - 2014-09-28 09:58 - 0000000 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\notes.txt 2014-09-28 09:51 - 2014-09-28 09:52 - 0000454 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\toadwater.err.log 2014-09-28 09:58 - 2014-09-28 09:58 - 0000530 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\toadwater.map 2014-09-28 09:51 - 2014-09-28 09:58 - 0000034 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\toadwater.std.log 2015-04-21 14:36 - 2015-05-18 21:54 - 0000000 ____D () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches 2015-04-21 14:36 - 2015-04-21 14:36 - 0023468 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\aes_helper.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0023052 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\alexkarnew.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0022970 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\alexkarold.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0020152 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\animecoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0008448 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\blake.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0016052 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\bmw.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0022968 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\ckolivas.cl 2015-04-21 14:36 - 2015-04-27 08:10 - 0003212 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\config.xml 2015-04-21 14:36 - 2015-04-21 14:36 - 0007879 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\cubehash.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0023129 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\darkcoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0005087 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\echo.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0033649 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\fugue.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0006849 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\fuguecoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0066145 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\groestl.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0007580 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\groestlcoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0014640 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\hamsi.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 2222839 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\hamsi_helper.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0007490 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\inkcoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0011051 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\jh.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0020037 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\keccak.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0640000 _____ (The cURL library, http://curl.haxx.se/) C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\libcurl.dll 2015-04-21 14:36 - 2015-04-21 14:36 - 1707520 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\libeay32.dll 2015-04-21 14:36 - 2015-04-21 14:36 - 0118784 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\libgcc_s_dw2-1.dll 2015-04-21 14:36 - 2015-04-21 14:36 - 0279955 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\libidn-11.dll 2015-04-21 14:36 - 2015-04-21 14:36 - 0013722 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\luffa.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0027233 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\marucoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 1433189 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\mdm 2015-04-21 14:36 - 2015-04-21 14:36 - 0015533 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\myriadcoin-groestl.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0004290 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\panama.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0021092 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\psw.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0094300 _____ (Open Source Software community LGPL) C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\pthreadGC2.dll 2015-04-21 14:36 - 2015-04-21 14:36 - 0020080 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\quarkcoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0015649 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\qubitcoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0020642 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\shavite.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0010768 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\sifcoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0055379 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\simd.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0008501 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\skein.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0368640 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\ssleay32.dll 2015-04-21 14:36 - 2015-04-21 14:36 - 0012349 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\twecoin.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0027978 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\x11mod.cl 2015-04-23 08:27 - 2015-04-23 08:27 - 2851456 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\x11modBartsglg2tc4032w256l4.bin 2015-04-21 14:36 - 2015-04-21 14:36 - 0037121 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\x13mod.cl 2015-04-21 14:36 - 2015-04-21 14:36 - 0113166 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\zlib1.dll 2015-04-21 14:36 - 2015-04-21 14:36 - 0022487 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Caches\zuikkis.cl 2014-09-28 09:51 - 2014-09-28 09:51 - 0000000 ____D () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images 2014-09-28 09:51 - 2014-09-28 09:51 - 0000000 ____D () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\SplashScreens 2014-09-28 09:51 - 2014-09-28 09:54 - 0000000 ____D () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1 2014-09-28 09:54 - 2014-09-28 09:54 - 0005925 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\260782.gif 2014-09-28 09:51 - 2014-09-28 09:51 - 0000916 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bbarrel.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000909 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bbirdhouse.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000925 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bcanvas.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000900 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bclogs.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000893 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bfencing.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000907 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bgate.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000924 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bgloves.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000947 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bhawk.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000919 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bidol.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000145 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bknife.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000893 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bmallet.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000901 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\boar.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000896 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bouthouse.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000897 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bplank.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000905 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bpost.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000925 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\brepairs.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000913 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bseedbag.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000905 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bshovel.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000922 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bstop.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000897 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\bsword.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000901 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\btap.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000918 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\btotem.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0004236 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\Cloud03.gif 2014-09-28 09:51 - 2014-09-28 09:51 - 0008295 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\dirtwall.gif 2014-09-28 09:54 - 2014-09-28 09:54 - 0003873 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\frogLeft.gif 2014-09-28 09:51 - 2014-09-28 09:51 - 0000620 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\hoard_r.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000633 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\hoard_st.png 2014-09-28 09:54 - 2014-09-28 09:54 - 0009101 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\PlayerNew.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000581 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\pulse1C.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0001850 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\pulse1L.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0001876 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\pulse1R.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000145 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\queueOffC.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000325 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\queueOffL.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000334 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\queueOffR.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000147 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\queueOnC.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000335 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\queueOnL.png 2014-09-28 09:51 - 2014-09-28 09:51 - 0000355 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\queueOnR.png 2014-09-28 09:54 - 2014-09-28 09:54 - 0005955 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\Sand01.gif 2014-09-28 09:54 - 2014-09-28 09:54 - 0001899 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Images\TW1\Wthr01.gif 2014-09-28 09:51 - 2014-09-28 09:57 - 0000000 ____D () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Sounds 2014-09-28 09:56 - 2014-09-28 09:56 - 0009030 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Sounds\axe1.wav 2014-09-28 09:56 - 2014-09-28 09:56 - 0010046 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Sounds\axe2.wav 2014-09-28 09:56 - 2014-09-28 09:56 - 0010046 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Sounds\axe3.wav 2014-09-28 09:55 - 2014-09-28 09:55 - 0010046 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Sounds\axe4.wav 2014-09-28 09:57 - 2014-09-28 09:57 - 0011614 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Sounds\hoard2.wav 2014-09-28 09:57 - 2014-09-28 09:57 - 0004964 _____ () C:\Users\Jarosław\AppData\Roaming\Toadwater JTWC\Sounds\seeds1.wav ====== End of Folder: ====== HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking => key not found. ========= reg delete HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKCU\Software\dobreprogramy /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v "PC Suite Tray" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v "TornTv Downloader" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder /v TornTvDownloader.lnk /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{9b6ed4d7} /f ========= Operacja ukoäczona pomy˜lnie. ========= End of Reg: ========= ==== End of Fixlog 19:06:15 ====