Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:16-12-2015 02 Uruchomiony przez User (2015-12-17 19:39:14) Run:2 Uruchomiony z C:\Users\User\Desktop\wirusy ZaÅ‚adowane profile: User (DostÄ™pne profile: User) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: GroupPolicy: Ograniczenia - Chrome <======= UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Search DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC} DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\a2zLyrics-1 DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Cinema Plus v6V23.07 DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV28.06 DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Quiknowledge DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage Task: {3CEF2F7D-C66A-4BEF-8574-AF36D25B245C} - System32\Tasks\{EA7E4F0B-B522-4DB7-80FD-4ECA9947398A} => pcalua.exe -a "C:\Program Files (x86)\a2zLyrics-1\Uninstall.exe" -c /fromcontrolpanel=1 RemoveDirectory: C:\FRST\Quarantine RemoveDirectory: C:\Program Files (x86)\MyFree Codec RemoveDirectory: C:\Users\User\AppData\Local\SmartWeb RemoveDirectory: C:\Users\User\AppData\Local\Xmas Mix RestoreQuarantine: C:\FRST\Quarantine\C\Users\User\AppData\Local\GG CMD: del /q C:\Users\User\AppData\Local\GG\Application\gg.lnk EmptyTemp: ***************** Procesy zostaÅ‚y pomyÅ›lnie zamkniÄ™te. C:\Windows\system32\GroupPolicy\Machine => pomyÅ›lnie przeniesiono C:\Windows\system32\GroupPolicy\GPT.ini => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Policies\Google" => klucz pomyÅ›lnie usuniÄ™to HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Search => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC} => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\a2zLyrics-1 => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Cinema Plus v6V23.07 => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV28.06 => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Quiknowledge => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3CEF2F7D-C66A-4BEF-8574-AF36D25B245C}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3CEF2F7D-C66A-4BEF-8574-AF36D25B245C}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{EA7E4F0B-B522-4DB7-80FD-4ECA9947398A} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{EA7E4F0B-B522-4DB7-80FD-4ECA9947398A}" => klucz pomyÅ›lnie usuniÄ™to "C:\FRST\Quarantine" => pomyÅ›lnie usuniÄ™to. "C:\Program Files (x86)\MyFree Codec" => pomyÅ›lnie usuniÄ™to. "C:\Users\User\AppData\Local\SmartWeb" => pomyÅ›lnie usuniÄ™to. "C:\Users\User\AppData\Local\Xmas Mix" => pomyÅ›lnie usuniÄ™to. "C:\FRST\Quarantine\C\Users\User\AppData\Local\GG"=> Å›cieżki nie znaleziono. ========= del /q C:\Users\User\AppData\Local\GG\Application\gg.lnk ========= System nie mo¾e odnale«† okre˜lonej ˜cie¾ki. ========= Koniec CMD: ========= EmptyTemp: => 540 MB danych tymczasowych UsuniÄ™to. System wymagaÅ‚ restartu. ==== Koniec Fixlog 19:39:25 ====