Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:09-12-2015 Uruchomiony przez Tomek (2015-12-09 21:25:42) Run:3 Uruchomiony z C:\Users\Tomek\Desktop\frst Załadowane profile: Tomek (Dostępne profile: Tomek) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [Brak podpisu cyfrowego] S3 clwvd; system32\DRIVERS\clwvd.sys [X] Task: {7CB2E5B9-9B18-409E-87A3-E7C2C47E105C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Magic Desktop for HP notification] => C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1444880 2015-11-26] (Easybits) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-1590238946-3112356359-1456329767-1000\...\Run: [Adobe Reader Synchronizer] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe" BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => Brak pliku BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => Brak pliku FirewallRules: [{9B8C8A2C-7C2C-4270-A270-4CAC906EE570}] => (Allow) C:\Windows\system32\ezSharedSvcHost.exe FirewallRules: [{4FD5DA3C-5AE4-4912-83BA-291517287AF0}] => (Allow) C:\Program Files (x86)\EasyBits For Kids\ezDesktop.exe RemoveDirectory: C:\FRST\Quarantine RemoveDirectory: C:\MATS RemoveDirectory: C:\Program Files (x86)\Common Files\Adobe RemoveDirectory: C:\ProgramData\Adobe RemoveDirectory: C:\ProgramData\CyberLink RemoveDirectory: C:\ProgramData\Easybits Magic Desktop for HP RemoveDirectory: C:\Users\Tomek\AppData\Local\Mozilla RemoveDirectory: C:\Users\Tomek\AppData\Roaming\Mozilla CMD: del /q C:\Windows\SysWOW64\ezSharedSvcHost.exe Reg: reg delete HKCU\Software\Mozilla /f Reg: reg delete HKCU\Software\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Mozilla /f Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f Reg: reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\CLKMSVC10_38F51D56" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BDRegion" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Easybits Recovery" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RemoteControl10" /f ***************** [2204] C:\Windows\SysWOW64\ezSharedSvcHost.exe => proces pomyślnie zamknięty. ezSharedSvc => serwis pomyślnie usunięto clwvd => serwis pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7CB2E5B9-9B18-409E-87A3-E7C2C47E105C}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7CB2E5B9-9B18-409E-87A3-E7C2C47E105C}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\Adobe Acrobat Update Task => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task" => klucz pomyślnie usunięto HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Magic Desktop for HP notification => Wartość pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\EnableShellExecuteHooks => Wartość pomyślnie usunięto HKU\S-1-5-21-1590238946-3112356359-1456329767-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Synchronizer => Wartość nie znaleziono. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => klucz pomyślnie usunięto HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => klucz nie znaleziono. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => klucz nie znaleziono. HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9B8C8A2C-7C2C-4270-A270-4CAC906EE570} => Wartość pomyślnie usunięto HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4FD5DA3C-5AE4-4912-83BA-291517287AF0} => Wartość nie znaleziono. "C:\FRST\Quarantine" => pomyślnie usunięto. "C:\MATS" => nie znaleziono. "C:\Program Files (x86)\Common Files\Adobe" => pomyślnie usunięto. "C:\ProgramData\Adobe" => pomyślnie usunięto. "C:\ProgramData\CyberLink" => pomyślnie usunięto. "C:\ProgramData\Easybits Magic Desktop for HP" => pomyślnie usunięto. "C:\Users\Tomek\AppData\Local\Mozilla" => pomyślnie usunięto. "C:\Users\Tomek\AppData\Roaming\Mozilla" => pomyślnie usunięto. ========= del /q C:\Windows\SysWOW64\ezSharedSvcHost.exe ========= ========= Koniec CMD: ========= ========= reg delete HKCU\Software\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKCU\Software\MozillaPlugins /f ========= Bť¤D: System nie znalazˆ w rejestrze okre˜lonego klucza albo warto˜ci. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\mozilla.org /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\CLKMSVC10_38F51D56" /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BDRegion" /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Easybits Recovery" /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RemoteControl10" /f ========= Operacja ukoäczona pomy˜lnie. ========= Koniec Reg: ========= ==== Koniec Fixlog 21:25:50 ====