Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:09-12-2015
Uruchomiony przez JKB (2015-12-09 19:03:33) Run:1
Uruchomiony z C:\Users\JKB\Downloads
Załadowane profile: JKB (Dostępne profile: JKB)
Tryb startu: Normal
==============================================

fixlist - zawartość:
*****************
CloseProcesses:
CreateRestorePoint:
R2 WdMan; C:\ProgramData\DWdMD\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]
ShortcutWithArgument: C:\Users\JKB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX <==== UWAGA
ShortcutWithArgument: C:\Users\JKB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX <==== UWAGA
ShortcutWithArgument: C:\Users\JKB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX <==== UWAGA
ShortcutWithArgument: C:\Users\JKB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX <==== UWAGA
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX <==== UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
HKU\S-1-5-21-3582058436-4257138138-2262642435-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX
HKU\S-1-5-21-3582058436-4257138138-2262642435-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3582058436-4257138138-2262642435-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX&q={searchTerms}
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449649453&z=c05ab63d608d926837a4d54g7zez0t0q0z8t1z1z4b&from=ient07021&uid=HitachiXHTS545025B9A300_100303PBN206ASC285XLX
C:\Program Files (x86)\AVG
C:\ProgramData\Auslogics
C:\ProgramData\AVG
C:\ProgramData\DWdMD
C:\ProgramData\SWdMS
C:\ProgramData\Norton
C:\ProgramData\NortonInstaller
C:\Users\JKB\AppData\Local\Avg
C:\Users\JKB\AppData\Roaming\AVG
C:\Windows\SysWOW64\pl.html
EmptyTemp:
*****************

Procesy zostały pomyślnie zamknięte.
Punkt przywracania został pomyślnie utworzony.
WdMan => serwis pomyślnie usunięto
C:\Users\JKB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk => Skrót - argument pomyślnie usunięto.
C:\Users\JKB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk => Skrót - argument pomyślnie przywrócono
C:\Users\JKB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => Skrót - argument pomyślnie usunięto.
C:\Users\JKB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto.
C:\Users\Public\Desktop\Mozilla Firefox.lnk => Skrót - argument pomyślnie usunięto.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono
HKU\S-1-5-21-3582058436-4257138138-2262642435-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Wartość pomyślnie przywrócono
HKU\S-1-5-21-3582058436-4257138138-2262642435-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie przywrócono
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => klucz pomyślnie usunięto
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => klucz nie znaleziono. 
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie przywrócono
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => klucz pomyślnie usunięto
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => klucz nie znaleziono. 
"HKU\S-1-5-21-3582058436-4257138138-2262642435-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => klucz pomyślnie usunięto
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => klucz nie znaleziono. 
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Wartość pomyślnie przywrócono
C:\Program Files (x86)\AVG => pomyślnie przeniesiono
C:\ProgramData\Auslogics => pomyślnie przeniesiono
C:\ProgramData\AVG => pomyślnie przeniesiono
C:\ProgramData\DWdMD => pomyślnie przeniesiono
C:\ProgramData\SWdMS => pomyślnie przeniesiono
C:\ProgramData\Norton => pomyślnie przeniesiono
C:\ProgramData\NortonInstaller => pomyślnie przeniesiono
C:\Users\JKB\AppData\Local\Avg => pomyślnie przeniesiono
C:\Users\JKB\AppData\Roaming\AVG => pomyślnie przeniesiono
C:\Windows\SysWOW64\pl.html => pomyślnie przeniesiono
EmptyTemp: => 1.1 GB danych tymczasowych Usunięto.


System wymagał restartu.

==== Koniec  Fixlog 19:04:55 ====