Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:07-11-2015 Uruchomiony przez user (2015-11-11 20:58:08) Run:2 Uruchomiony z C:\Users\user\Downloads\frst Załadowane profile: user (Dostępne profile: user) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe HKU\S-1-5-21-173458695-754960654-3623925198-1000\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Brak pliku] S2 Crashhd; C:\Users\user\AppData\Local\Crsoft\crsvc.exe -st [X] RemoveDirectory: C:\FRST\Quarantine RemoveDirectory: C:\Program Files (x86)\Kaspersky Lab RemoveDirectory: C:\Program Files (x86)\Windows Live RemoveDirectory: C:\ProgramData\Kaspersky Lab RemoveDirectory: C:\Users\user\AppData\Local\{0D4D30AF-3AB6-4669-828D-F5B8D991DFAD} RemoveDirectory: C:\Users\user\Desktop\Stare dane programu Firefox CMD: del /q C:\Users\user\Downloads\067prvpu.exe CMD: del /q C:\Users\user\Downloads\kavremvr 2015-11-09 18-49-55 (pid 1208).log CMD: del /q C:\Users\user\Downloads\fixlist.txt CMD: del /q C:\Users\user\Documents\fixlist.txt CMD: type C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job CMD: del /q C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v msnmsgr /f Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v mwlDaemon /f Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 /v EgisTecPMMUpdate /f ***************** HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\mwlDaemon => Wartość pomyślnie usunięto HKU\S-1-5-21-173458695-754960654-3623925198-1000\Software\Microsoft\Windows\CurrentVersion\Run\\msnmsgr => Wartość pomyślnie usunięto "HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922" => klucz pomyślnie usunięto Crashhd => serwis pomyślnie usunięto "C:\FRST\Quarantine" => pomyślnie usunięto. "C:\Program Files (x86)\Kaspersky Lab" => pomyślnie usunięto. "C:\Program Files (x86)\Windows Live" => pomyślnie usunięto. "C:\ProgramData\Kaspersky Lab" => pomyślnie usunięto. "C:\Users\user\AppData\Local\{0D4D30AF-3AB6-4669-828D-F5B8D991DFAD}" => pomyślnie usunięto. "C:\Users\user\Desktop\Stare dane programu Firefox" => pomyślnie usunięto. ========= del /q C:\Users\user\Downloads\067prvpu.exe ========= ========= Koniec CMD: ========= ========= del /q C:\Users\user\Downloads\kavremvr 2015-11-09 18-49-55 (pid 1208).log ========= Could Not Find C:\Users\user\Downloads\kavremvr Could Not Find C:\Users\user\Downloads\frst\2015-11-09 ========= Koniec CMD: ========= ========= del /q C:\Users\user\Downloads\fixlist.txt ========= ========= Koniec CMD: ========= ========= del /q C:\Users\user\Documents\fixlist.txt ========= ========= Koniec CMD: ========= ========= type C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job ========= *ҳLz N!7F< s C:\WINDOWS\explorer.exe /NOUACCHECKExplorerShellUnelevated ========= Koniec CMD: ========= ========= del /q C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job ========= ========= Koniec CMD: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v msnmsgr /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v mwlDaemon /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 /v EgisTecPMMUpdate /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ==== Koniec Fixlog 20:58:32 ====