Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:07-11-2015 Uruchomiony przez Natalka (2015-11-12 19:49:09) Run:1 Uruchomiony z C:\Users\Natalka\Pobrane Załadowane profile: Natalka (Dostępne profile: Natalka) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: R2 IhPul; C:\Users\Natalka\AppData\Roaming\TSv\TSvr.exe [396944 2015-10-26] (tsvr.com) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.) R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [169632 2015-10-10] (TODO: ) S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [X] S3 SmbDrvI; \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys [X] S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X] HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKU\S-1-5-21-3391024131-566000767-83427015-1001\...\Run: [BackgroundContainerV2] => "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Natalka\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun Task: {5256E84E-7F90-4F46-812B-39E19F631EA4} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient Task: {622989EB-B345-41BD-B8AE-966268B4E933} - System32\Tasks\{2CECCF90-0393-472F-A502-57E10EF7531E} => pcalua.exe -a "C:\Program Files\Autodesk\Inventor 2013\Setup\pl-PL\Setup\Setup.exe" -d "C:\Program Files\Autodesk\Inventor 2013\Setup\pl-PL\Setup" Task: {75CB9EB2-9A90-475F-B290-CC99D4D9A14F} - System32\Tasks\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5_user => C:\Program Files (x86)\TheHDvid-Codec V10\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5.exe [2014-09-04] (home) <==== UWAGA Task: {9C704121-CC9F-4249-860D-954A23112B9C} - System32\Tasks\{CA6F4F94-C4BD-48AF-A9D1-CEF0CDACF128} => Firefox.exe hxxp://ui.skype.com/ui/0/6.20.0.104/pl/abandoninstall?page=tsProgressBar Task: {B84704C8-6EE2-45B5-A9BE-9001C7B01DE1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {BC71856D-AD0F-41FD-8E3A-CBF3BEA71D01} - System32\Tasks\Hoolapp Init => C:\Users\Natalka\AppData\Roaming\HOOLAP~1\Hoolapp.exe <==== UWAGA Task: {C636054B-81C3-4FA7-906E-207BDDEE9C61} - System32\Tasks\Hoolapp For Android => C:\Users\Natalka\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.EXE <==== UWAGA Task: {FCAE40D8-1E64-4F77-860C-EEC57F7DD62A} - System32\Tasks\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5 => C:\Program Files (x86)\TheHDvid-Codec V10\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5.exe [2014-09-04] (home) <==== UWAGA Task: C:\WINDOWS\Tasks\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5.job => C:\Program Files (x86)\TheHDvid-Codec V10\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5.exe?/runupdater /agentregpath='TheHDvid-Codec V10' /appid=63315 /srcid='001824' /subid='0' /zdata='0' /bic=66202D008EFA497EBE34C6F3F89ACBE3IE /verifier=58a3029d02d024f72cbbff4c8c5dd581 /installerversion=1_34_08_12 /installationtime=1409852852 /statsdomain=hxxp:/stats.loadgenclientservice.com /errorsdomain=hxxp:/errors.loadgenclientservice.com /geoserviceurl=hxxp:/ipgeoapi.com/ /updatejsondomain=hxxp:/update.loadgenclientservice.com /sid=S-1-5-21-3391024131-566000767-83427015-1001 /updaterversion=6 /monetizationdomain=hxxp:/logs.loadgenclientservice.com /autoupdateulr='hxxp:/update.loadgenclientservice.com/updater_agent_updates/{CAMP_ID}/update.jso <==== UWAGA Task: C:\WINDOWS\Tasks\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5_user.job => C:\Program Files (x86)\TheHDvid-Codec V10\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5.exe?/runupdater /agentregpath='TheHDvid-Codec V10' /appid=63315 /srcid='001824' /subid='0' /zdata='0' /bic=66202D008EFA497EBE34C6F3F89ACBE3IE /verifier=58a3029d02d024f72cbbff4c8c5dd581 /installerversion=1_34_08_12 /installationtime=1409852852 /statsdomain=hxxp:/stats.loadgenclientservice.com /errorsdomain=hxxp:/errors.loadgenclientservice.com /geoserviceurl=hxxp:/ipgeoapi.com/ /updatejsondomain=hxxp:/update.loadgenclientservice.com /sid=S-1-5-21-3391024131-566000767-83427015-1001 /updaterversion=6 /monetizationdomain=hxxp:/logs.loadgenclientservice.com /autoupdateulr='hxxp:/update.loadgenclientservice.com/updater_agent_updates/{CAMP_ID}/update.jso <==== UWAGA ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1446228267&z=5d76b4c59bc16e7826dbf1dg8zfzcq6o3o8b4e2z2c&from=ient07031&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX ShortcutWithArgument: C:\Users\Natalka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1446228267&z=5d76b4c59bc16e7826dbf1dg8zfzcq6o3o8b4e2z2c&from=ient07031&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1446228267&z=5d76b4c59bc16e7826dbf1dg8zfzcq6o3o8b4e2z2c&from=ient07031&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.delta-homes.com/?type=sc&ts=1446228267&z=5d76b4c59bc16e7826dbf1dg8zfzcq6o3o8b4e2z2c&from=ient07031&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1446228267&z=5d76b4c59bc16e7826dbf1dg8zfzcq6o3o8b4e2z2c&from=ient07031&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX FF HKLM-x32\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Natalka\AppData\Roaming\Mozilla\Firefox\Profiles\wsb4lyav.default-1429948271931\extensions\quick_searchff@gmail.com => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Natalka\AppData\Roaming\Mozilla\Firefox\Profiles\wsb4lyav.default-1429948271931\extensions\sweetsearch@gmail.com => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Natalka\AppData\Roaming\Mozilla\Firefox\Profiles\wsb4lyav.default-1429948271931\extensions\default_newtabff@gmail.com => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Natalka\AppData\Roaming\Mozilla\Firefox\Profiles\wsb4lyav.default-1429948271931\extensions\defsearchp@gmail.com => nie znaleziono FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\Sony\MSS\3.8.130\npMcAfeeMss.dll [Brak pliku] HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1409852958&from=ild&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1409852958&from=ild&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1409852958&from=ild&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1409852958&from=ild&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006 HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006 URLSearchHook: HKU\S-1-5-21-3391024131-566000767-83427015-1001 - (Brak nazwy) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - Brak pliku SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1434037603&z=ec67a450f7cc0ff4fb07aacgaz5cbz7e1c0m9w9t8z&from=ient06110&uid=HitachiXHTS543232A7A384_E20342BL0PMS5M0PMS5MX&q={searchTerms} SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> {66B640F2-A14B-4A7D-829F-0E634975CFD3} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} BHO-x32: Brak nazwy -> {7473b6bd-4691-4744-a82b-7854eb3d70b6} -> Brak pliku BHO-x32: Brak nazwy -> {8CF5CC94-DA79-208C-65F6-9F342A7EE5C3} -> Brak pliku BHO-x32: Brak nazwy -> {8D254E8F-21B5-D7F8-903C-73C85E7A1433} -> Brak pliku Toolbar: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> Brak nazwy - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - Brak pliku Toolbar: HKU\S-1-5-21-3391024131-566000767-83427015-1001 -> Brak nazwy - {25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} - Brak pliku CustomCLSID: HKU\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Natalka\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll => Brak pliku C:\Program Files (x86)\Google C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins C:\Program Files (x86)\MiuiTab C:\Program Files (x86)\SFK C:\Program Files (x86)\Sony\MSS C:\Program Files (x86)\TheHDvid-Codec V10 C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat C:\ProgramData\MailUpdate C:\ProgramData\Temp C:\Users\Natalka\AppData\Local\Conduit C:\Users\Natalka\AppData\Local\CRE C:\Users\Natalka\AppData\Local\GG C:\Users\Natalka\AppData\Local\Google C:\Users\Natalka\AppData\Roaming\MailUpdate C:\Users\Natalka\AppData\Roaming\TSv C:\Users\Natalka\AppData\Roaming\Autodesk\Autodesk Robot Structural Analysis Engine 2012Q4\CfgUsr\defcfg.lnk C:\Users\Natalka\Links\GG dysk.lnk C:\Users\Natalka\Documents\PITy 2012.lnk C:\Users\Natalka\Documents\Inventor\Default.lnk C:\WINDOWS\SysWOW64\pl.html Reg: reg delete HKCU\Software\Google /f Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f Reg: reg delete HKLM\SOFTWARE\Google /f Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38} /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Google /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA} /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E5B7E1B4-21FC-6765-A3D7-BA0416DC6AF7} /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla\Thunderbird /f Reg: reg query HKU\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939} /s Reg: reg query HKU\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66} /s CMD: netsh advfirewall reset EmptyTemp: ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. IhPul => serwis pomyślnie usunięto McComponentHostServiceSony => serwis pomyślnie usunięto SSFK => Nie można zatrzymać usługi. SSFK => serwis pomyślnie usunięto AvastVBoxSvc => serwis niepowodzenie przy usuwaniu SmbDrvI => serwis pomyślnie usunięto VBoxAswDrv => serwis niepowodzenie przy usuwaniu HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => Wartość pomyślnie usunięto HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Windows\CurrentVersion\Run\\BackgroundContainerV2 => Wartość pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5256E84E-7F90-4F46-812B-39E19F631EA4}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5256E84E-7F90-4F46-812B-39E19F631EA4}" => klucz pomyślnie usunięto C:\WINDOWS\System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{622989EB-B345-41BD-B8AE-966268B4E933}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{622989EB-B345-41BD-B8AE-966268B4E933}" => klucz pomyślnie usunięto C:\WINDOWS\System32\Tasks\{2CECCF90-0393-472F-A502-57E10EF7531E} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2CECCF90-0393-472F-A502-57E10EF7531E}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{75CB9EB2-9A90-475F-B290-CC99D4D9A14F}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{75CB9EB2-9A90-475F-B290-CC99D4D9A14F}" => klucz pomyślnie usunięto C:\WINDOWS\System32\Tasks\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5_user => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5_user" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9C704121-CC9F-4249-860D-954A23112B9C}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C704121-CC9F-4249-860D-954A23112B9C}" => klucz pomyślnie usunięto C:\WINDOWS\System32\Tasks\{CA6F4F94-C4BD-48AF-A9D1-CEF0CDACF128} => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CA6F4F94-C4BD-48AF-A9D1-CEF0CDACF128}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B84704C8-6EE2-45B5-A9BE-9001C7B01DE1}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B84704C8-6EE2-45B5-A9BE-9001C7B01DE1}" => klucz pomyślnie usunięto C:\WINDOWS\System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\Office 15 Subscription Heartbeat" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BC71856D-AD0F-41FD-8E3A-CBF3BEA71D01}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BC71856D-AD0F-41FD-8E3A-CBF3BEA71D01}" => klucz pomyślnie usunięto C:\WINDOWS\System32\Tasks\Hoolapp Init => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hoolapp Init" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C636054B-81C3-4FA7-906E-207BDDEE9C61}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C636054B-81C3-4FA7-906E-207BDDEE9C61}" => klucz pomyślnie usunięto C:\WINDOWS\System32\Tasks\Hoolapp For Android => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hoolapp For Android" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FCAE40D8-1E64-4F77-860C-EEC57F7DD62A}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FCAE40D8-1E64-4F77-860C-EEC57F7DD62A}" => klucz pomyślnie usunięto C:\WINDOWS\System32\Tasks\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5 => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5" => klucz pomyślnie usunięto C:\WINDOWS\Tasks\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5.job => pomyślnie przeniesiono C:\WINDOWS\Tasks\d2b97613-b3c0-43b9-944e-c7f2a7670ca3-5_user.job => pomyślnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Natalka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto. C:\Users\Public\Desktop\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\quick_searchff@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\sweetsearch@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\default_newtabff@gmail.com => Wartość pomyślnie usunięto HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\defsearchp@gmail.com => Wartość pomyślnie usunięto "HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/McAfeeMssPlugin" => klucz pomyślnie usunięto HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\Main\\Search Bar => Wartość pomyślnie usunięto HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => Wartość pomyślnie usunięto HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie przywrócono "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => klucz nie znaleziono. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => klucz nie znaleziono. HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie usunięto "HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => klucz pomyślnie usunięto HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => klucz nie znaleziono. "HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => klucz pomyślnie usunięto HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => klucz nie znaleziono. "HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}" => klucz pomyślnie usunięto HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => klucz nie znaleziono. "HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => klucz pomyślnie usunięto HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => klucz nie znaleziono. "HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{66B640F2-A14B-4A7D-829F-0E634975CFD3}" => klucz pomyślnie usunięto HKCR\CLSID\{66B640F2-A14B-4A7D-829F-0E634975CFD3} => klucz nie znaleziono. "HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}" => klucz pomyślnie usunięto HKCR\CLSID\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} => klucz nie znaleziono. "HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}" => klucz pomyślnie usunięto HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => klucz nie znaleziono. "HKU\S-1-5-21-3391024131-566000767-83427015-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}" => klucz pomyślnie usunięto HKCR\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => klucz nie znaleziono. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => klucz nie znaleziono. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8CF5CC94-DA79-208C-65F6-9F342A7EE5C3}" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{8CF5CC94-DA79-208C-65F6-9F342A7EE5C3} => klucz nie znaleziono. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D254E8F-21B5-D7F8-903C-73C85E7A1433}" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{8D254E8F-21B5-D7F8-903C-73C85E7A1433} => klucz nie znaleziono. HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7473B6BD-4691-4744-A82B-7854EB3D70B6} => Wartość pomyślnie usunięto HKCR\CLSID\{7473B6BD-4691-4744-A82B-7854EB3D70B6} => klucz nie znaleziono. HKU\S-1-5-21-3391024131-566000767-83427015-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} => Wartość pomyślnie usunięto HKCR\CLSID\{25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} => klucz nie znaleziono. "HKU\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}" => klucz pomyślnie usunięto C:\Program Files (x86)\Google => pomyślnie przeniesiono C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins => pomyślnie przeniesiono C:\Program Files (x86)\MiuiTab => pomyślnie przeniesiono C:\Program Files (x86)\SFK => pomyślnie przeniesiono C:\Program Files (x86)\Sony\MSS => pomyślnie przeniesiono C:\Program Files (x86)\TheHDvid-Codec V10 => pomyślnie przeniesiono C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat => pomyślnie przeniesiono C:\ProgramData\MailUpdate => pomyślnie przeniesiono C:\ProgramData\Temp => pomyślnie przeniesiono C:\Users\Natalka\AppData\Local\Conduit => pomyślnie przeniesiono C:\Users\Natalka\AppData\Local\CRE => pomyślnie przeniesiono C:\Users\Natalka\AppData\Local\GG => pomyślnie przeniesiono C:\Users\Natalka\AppData\Local\Google => pomyślnie przeniesiono C:\Users\Natalka\AppData\Roaming\MailUpdate => pomyślnie przeniesiono C:\Users\Natalka\AppData\Roaming\TSv => pomyślnie przeniesiono C:\Users\Natalka\AppData\Roaming\Autodesk\Autodesk Robot Structural Analysis Engine 2012Q4\CfgUsr\defcfg.lnk => pomyślnie przeniesiono C:\Users\Natalka\Links\GG dysk.lnk => pomyślnie przeniesiono C:\Users\Natalka\Documents\PITy 2012.lnk => pomyślnie przeniesiono C:\Users\Natalka\Documents\Inventor\Default.lnk => pomyślnie przeniesiono "C:\WINDOWS\SysWOW64\pl.html" => nie znaleziono. ========= reg delete HKCU\Software\Google /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Google /f ========= ERROR: The system was unable to find the specified registry key or value. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38} /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Google /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA} /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E5B7E1B4-21FC-6765-A3D7-BA0416DC6AF7} /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla\Thunderbird /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg query HKU\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939} /s ========= HKEY_USERS\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939} (Default) REG_SZ AcadDynamicBlockReferenceProperty HKEY_USERS\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InProcServer32 (Default) REG_SZ axdb.dll ========= Koniec Reg: ========= ========= reg query HKU\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66} /s ========= HKEY_USERS\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66} (Default) REG_SZ TransmittalFile2 HKEY_USERS\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InProcServer32 (Default) REG_SZ AcETransmit.dll HKEY_USERS\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\ProgID (Default) REG_SZ Transmittal.TransmittalFile.16 HKEY_USERS\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\Programmable HKEY_USERS\S-1-5-21-3391024131-566000767-83427015-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\TypeLib (Default) REG_SZ {33632562-F074-4478-AF52-B0D3FC9632E4} ========= Koniec Reg: ========= ========= netsh advfirewall reset ========= Ok. ========= Koniec CMD: ========= EmptyTemp: => 2 GB danych tymczasowych Usunięto. System wymagał restartu. ==== Koniec Fixlog 19:55:33 ====