Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:01-12-2015 Uruchomiony przez Ela&Mariusz (2015-12-04 16:46:56) Uruchomiony z C:\Users\Ela&Mariusz\Downloads\McAffe Windows 7 Home Premium Service Pack 1 (X64) (2013-06-08 20:01:02) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-1915761083-1818409099-4065131491-500 - Administrator - Disabled) Ela&Mariusz (S-1-5-21-1915761083-1818409099-4065131491-1000 - Administrator - Enabled) => C:\Users\Ela&Mariusz Gość (S-1-5-21-1915761083-1818409099-4065131491-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1915761083-1818409099-4065131491-1002 - Limited - Enabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: McAfee — ochrona antywirusowa i przed oprogramowaniem szpiegującym (Disabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: McAfee — ochrona antywirusowa i przed oprogramowaniem szpiegującym (Disabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB} FW: McAfee Firewall (Disabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKU\S-1-5-21-1915761083-1818409099-4065131491-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.) ABBYY FineReader 11 Corporate Edition (HKLM-x32\...\{F11000CE-0010-0000-0000-074957833700}) (Version: 11.11.141 - ABBYY) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated) Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.) A-PDF Restrictions Remover (HKLM-x32\...\A-PDF Restrictions Remover_is1) (Version: - A-PDF Solution) Atari800Win PLus 4.1 (HKLM-x32\...\Atari800Win PLus) (Version: 4.1 - Marcin Lewandowski) Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.34 - Avanquest Software) Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v8.00.12(T) - TOSHIBA CORPORATION) Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.60.48.35 - Broadcom Corporation) Broadcom Wireless Utility (HKLM\...\Broadcom Wireless Utility) (Version: 5.100.196.8 - Broadcom Corporation) CHM Viewer (HKLM-x32\...\{8DD85CC4-D7A0-4332-A9A8-7FBAC360B180}_is1) (Version: - chmviewer.com) Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden Cool Edit Pro 2.1 (HKLM-x32\...\Cool Edit Pro 2.1) (Version: - ) CPUID HWMonitor 1.24 (HKLM\...\CPUID HWMonitor_is1) (Version: - ) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd) Debugging Tools for Windows (x64) (HKLM\...\{7F2E5C3B-DBDF-469D-AD8D-F686D3B71176}) (Version: 6.11.1.404 - Microsoft Corporation) DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden Document Express DjVu Plug-in (HKLM\...\{63D38589-F9D9-4851-A37F-E142A8D14A32}) (Version: 6.1.35472 - Cuminas Corporation) DTC Library (HKLM-x32\...\DTC Library) (Version: - ) eLearn CDROM 1.0 (HKLM-x32\...\eLearn 1.2.1_is1) (Version: - FIAT Auto S.p.A.) ENE CIR Receiver Driver (HKLM\...\2C293EC1A06665BB961CBA4EC7AFF4BF2BEAD042) (Version: 2.7.4.1 - ENE) Expressivo (HKLM-x32\...\Expressivo) (Version: 1.5.1 - IVO Software Sp. z o.o.) FiatECUScan (HKLM-x32\...\{DDA1E8D4-ECD6-4920-AB34-5CD91473EB10}) (Version: 3.5 - Yanislav Karagyozov) FordEtis IDS 1.4826 (HKLM-x32\...\1492-6894-0638-6774) (Version: 1.4826 - Ford Motor Company) FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time) FORScan wersja 2.1.18.beta (HKLM-x32\...\{63310483-6490-44CD-B351-8F66C2923070}_is1) (Version: 2.1.18.beta - Verysoft LLC) Foxit PDF Editor (HKLM-x32\...\Foxit PDF Editor) (Version: - ) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation) Java(TM) SE Runtime Environment 6 (HKLM-x32\...\{3248F0A8-6813-11D6-A77B-00B0D0160000}) (Version: 1.6.0.0 - Sun Microsystems, Inc.) JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.44.1 - JMicron Technology Corp.) Librus Świadectwa Gimnazjum (HKLM-x32\...\Świadectwa gim N) (Version: - ) Maske.RMP 2.75 (HKLM-x32\...\Maske.RMP) (Version: 2.75 - Maske Fleet GmbH) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.266.3 - McAfee, Inc.) McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.203 - McAfee, Inc.) McAfee® Total Protection (HKLM-x32\...\MSC) (Version: 14.0.5120 - McAfee, Inc.) Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Minecraft 1.6.1 (HKLM-x32\...\Minecraft 1.6.1) (Version: - ) Minecraft1.4.7 (HKLM-x32\...\Minecraft1.4.7) (Version: - ) Mozilla Firefox 42.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 pl)) (Version: 42.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NapiProjekt (2.1.1.2314) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) novaPDF Lite Desktop 7.5 printer (HKLM\...\novaPDF Lite Desktop 7 printer_is1) (Version: - Softland) NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5897 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{8A809006-C25A-4A3A-9DAB-94659BCDB107}) (Version: 9.10.0224 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA Sterownik graficzny 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation) OBD II logger (HKLM-x32\...\ST6UNST #1) (Version: - ) Pakiet sterowników systemu Windows - TOSHIBA (mod7700) Media (04/21/2008 2.3.3.21) (HKLM\...\4857B494EA67C7A54295AF127556E838C833E2C1) (Version: 04/21/2008 2.3.3.21 - TOSHIBA) Panda Cloud Cleaner (HKLM-x32\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.0.94 - Panda Security) Panel sterowania NVIDIA 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden Pazera Free Audio Extractor 2.0 (HKLM-x32\...\{6899C238-3E4A-4A04-B251-A0C9EDC7EDBC}_is1) (Version: 2.0 - Pazera Jacek) PCMSCAN (HKLM-x32\...\{979B748C-6095-4A5A-BC7B-C15E720529D6}) (Version: 2.4.12 - Palmer Performance Engineering) PDFill PDF Editor with FREE Writer and FREE Tools (HKLM\...\{D1399216-81B2-457C-A0F7-73B9A2EF6902}) (Version: 10.0 - PlotSoft LLC) PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Przycisk Ustrzel To! dla www.snip.pl, wersja 2.0 (HKLM-x32\...\SnipItButton) (Version: - ) RAR Password Recovery v1.1 RC17 (remove only) (HKLM-x32\...\Intelore - RAR Password Recovery) (Version: - ) RealSpeak Solo 4.0 SAPI5 Polish Agata (HKLM-x32\...\{30233C19-872D-4412-9050-7DC263824A96}) (Version: 1.00.0000 - Freedom Scientific) ScanXL-ELM (HKLM-x32\...\{995414B4-F332-469F-BD9F-011DDB0003BD}) (Version: 2.0.7 - Palmer Performance Engineering) Screen Antics 2.1 (HKLM-x32\...\Screen Antics) (Version: 2.1 - Jaap van Wingerden) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version: - Silicon Laboratories) Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7 (HKLM-x32\...\{4741EB34-C781-4CDD-AEAF-F71DC3E26963}) (Version: 6.5 - Silicon Laboratories, Inc.) Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7_2 (c:\SiLabs\MCU\CP210x\Windows_XP_S2K3_Vista_7_2) (HKLM-x32\...\{1CEF499C-8EC1-44AF-8A11-A134EB811778}) (Version: 6.5 - Silicon Laboratories, Inc.) SkrybotDoMowy (HKLM-x32\...\{4D79E5E6-3D98-4284-B4DC-7376A2087DA2}) (Version: 1.5.3 - www.przepisywanie.pl) Sp5 (x32 Version: 5.1.4324.0 - Microsoft) Hidden Sp5Intl (x32 Version: 5.1.4324.0 - Microsoft) Hidden Sp5TTInt (x32 Version: 5.1.4324.0 - Microsoft) Hidden SpCommon (x32 Version: 5.1.4324.0 - Microsoft) Hidden SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts) SpPhones (x32 Version: 6.0.3122.0 - Microsoft) Hidden Stereoscopic Player (HKLM-x32\...\{0B67DFA8-E3F5-4E1A-893E-526F9F4EFBAE}) (Version: 2.1.4 - 3dtv.at) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated) TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.2.0.4 - TOSHIBA Corporation) TOSHIBA TV Tuner (HKLM\...\{1DBAF60C-3180-46E1-A8C6-6B9FF4E138AF}) (Version: 2.33.21 - TOSHIBA) TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.16 - TOSHIBA Corporation) Unity Web Player (HKU\S-1-5-21-1915761083-1818409099-4065131491-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS) VobSub v2.23 (Remove Only) (HKLM-x32\...\VobSub) (Version: - ) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows 7 Codec Pack 4.1.3 (HKLM-x32\...\Windows 7 - Codec Pack) (Version: 4.1.3 - Windows 7 Codec Pack) WinRAR 5.21 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-1915761083-1818409099-4065131491-1000_Classes\CLSID\{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}\InprocServer32 -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll (TOSHIBA) ==================== Punkty Przywracania systemu ========================= ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:34 - 2015-12-02 22:41 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts 0.0.0.1 mssplus.mcafee.com ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {20AF8E62-16BC-4A48-B544-E0F50DCF5D32} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo) Task: {223F8C97-77AA-41B2-8627-11A1B327075C} - System32\Tasks\{A4FB6F80-6355-44D0-8B08-1028236E512A} => pcalua.exe -a F:\SETUP\SETUP.EXE -d F:\SETUP Task: {3FBFB8CD-A655-424B-88D5-63CC78A97057} - System32\Tasks\{6465999E-FA3A-4F7B-951A-D26399A44C67} => pcalua.exe -a F:\Sims3EP11Setup.exe -d F:\ Task: {3FE11BA4-24AA-4B05-B44B-559D16E9FF0E} - System32\Tasks\{3ED436E7-215E-4D61-BF72-BC3ED07AC8D8} => pcalua.exe -a C:\Users\Ela&Mariusz\Downloads\programy\PDFKey.Pro.v3.6.1.WinALL.Cracked.exe -d C:\Users\Ela&Mariusz\Downloads\programy Task: {43888A3E-9BB7-4844-9BF0-2105512E898E} - System32\Tasks\{C9107E60-BE21-40D6-A37B-0CD5536066C4} => pcalua.exe -a C:\Users\Ela&Mariusz\Downloads\util_hdd_protection_27631B.exe -d C:\Users\Ela&Mariusz\Downloads Task: {5AEC8410-235F-413C-8E20-A4A9030A56EC} - System32\Tasks\{92103B57-3C99-4958-BA99-2D0C7881A48D} => pcalua.exe -a "C:\Users\Ela&Mariusz\AppData\Local\Temp\Temp1_Flash Media JMicron_JMB38X_WinDrv_R1.00.63_WHQL.zip\JMicron_JMB38X_WinDrv_R1.00.63_WHQL\Setup.exe" Task: {5C86993B-0B80-4CB9-8142-A89AEAEDB292} - System32\Tasks\{59A2CF35-DE95-4E56-906F-34D37E47F783} => pcalua.exe -a "C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\As0.exe" -d "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack" -c /MODE=0 /q Task: {5D115073-CA26-414A-B6AB-332109B350DA} - System32\Tasks\{2ABF7973-6E25-4D03-AD33-3BF67C3B58D2} => pcalua.exe -a G:\Setup.exe -d G:\ Task: {76BE14DA-7B3F-4C00-BED3-D0F7B2DB010D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {83EFA55F-1872-4E54-AD06-BB287D13DC33} - System32\Tasks\{F1182705-4923-45F7-8D36-F4E5FE4ECFC1} => pcalua.exe -a C:\Users\Ela&Mariusz\AppData\Local\Temp\Temp1_synaptics_touchpad_15.2.4.4.zip\synaptics_touchpad_15.2.4.4\WinWDF\x64\setup.exe Task: {89B6B623-7451-4BD3-B35D-72A5CA5260EA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1915761083-1818409099-4065131491-1000UA => C:\Users\Ela&Mariusz\AppData\Local\Google\Update\GoogleUpdate.exe [2015-11-02] (Google Inc.) Task: {916764BE-B874-4575-B4D9-6D63114788F1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {BA7373C4-A7AE-4AC8-B205-27FE29D34531} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1915761083-1818409099-4065131491-1000Core => C:\Users\Ela&Mariusz\AppData\Local\Google\Update\GoogleUpdate.exe [2015-11-02] (Google Inc.) Task: {CF7344DA-12FA-42D8-835D-1DF4D7CB64B8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {D40B0FC4-F814-4D4F-B099-0B59C502CBB9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-27] (Adobe Systems Incorporated) Task: {D8FFAAC6-7A84-4D11-96A4-6980F10EEB81} - System32\Tasks\{FBE39048-831B-4D9D-B67C-A9F63771BBB1} => pcalua.exe -a "C:\Users\Ela&Mariusz\AppData\Local\Temp\Temp1_tv-tuner-20080925152514.zip\TV Tuner\YSETUP.EXE" Task: {EDD2E390-3F55-4084-8144-926D7BC3BCEF} - \Microsoft\Windows Defender\MP Scheduled Scan -> Brak pliku <==== UWAGA (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1915761083-1818409099-4065131491-1000Core.job => C:\Users\Ela&Mariusz\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1915761083-1818409099-4065131491-1000UA.job => C:\Users\Ela&Mariusz\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2014-07-10 18:48 - 2013-08-29 23:43 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2014-12-21 03:07 - 2014-12-21 03:07 - 00208415 _____ () C:\Windows\SysWOW64\Codecs\TrayMenu.exe 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf 2015-12-04 14:08 - 2015-12-04 14:08 - 00380416 _____ () C:\Users\Ela&Mariusz\Downloads\McAffe\wy9h0bs6.exe 2013-02-15 02:36 - 2013-02-15 02:36 - 01554496 _____ () C:\Program Files\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2015-11-12 17:18 - 2015-11-12 17:18 - 17604296 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll 2015-11-15 12:31 - 2015-11-16 19:32 - 00919040 _____ () C:\Windows\mod_frst.exe ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service" ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) IE trusted site: HKU\S-1-5-21-1915761083-1818409099-4065131491-1000\...\raster-isp.pl -> hxxp://www.raster-isp.pl ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-1915761083-1818409099-4065131491-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ela&Mariusz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.8.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)