Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:18-04-2016 Uruchomiony przez Pawcio (2016-04-23 17:52:19) Run:1 Uruchomiony z C:\Users\Pawcio\Desktop\123\frst ZaÅ‚adowane profile: Pawcio (DostÄ™pne profile: Pawcio) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: Tcpip\..\Interfaces\{F38D35B3-1007-4AF3-8C5B-80528E104E78}: [DhcpNameServer] 192.168.2.254 195.241.77.55 195.241.77.58 ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Brak pliku Toolbar: HKU\S-1-5-21-813231136-3034751300-3063813572-1001 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku Task: {28CCD7EE-E50D-426D-906D-1F3B263E432C} - System32\Tasks\{A131E369-C11D-4D0A-A8B3-015754C55CB9} => C:\Program Files (x86)\Paradox Interactive\Magicka Collection\Magicka.exe Task: {3D4EBCD5-2326-497F-B732-8CCCE8979E16} - System32\Tasks\{7049C365-1DEC-4D03-9ADF-B5BD1078A707} => C:\Program Files (x86)\Paradox Interactive\Magicka Collection\Magicka.exe Task: {5B8571F1-5D3F-4C14-ACB8-4C127BB740D7} - System32\Tasks\{B004C783-65C7-4804-B6CD-CE4DFF0639C6} => C:\Program Files (x86)\AMPLITUDE Studios\Dungeon of the Endless\DungeonoftheEndless.exe Task: {5DA32748-1081-4FC6-92D0-3EDB0DABD24C} - System32\Tasks\{511A298B-A7E8-4D15-9F6E-8D4946FFAAA2} => C:\Program Files (x86)\AMPLITUDE Studios\Dungeon of the Endless\DungeonoftheEndless.exe Task: {60CD62AF-33C4-4686-8B40-94D3EAA78DB3} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe Task: {824BF464-C04B-4897-B184-DA326B3C9DF1} - System32\Tasks\{8521DC72-C63A-4E87-9D34-03C10E758538} => C:\Program Files (x86)\AMPLITUDE Studios\Dungeon of the Endless\DungeonoftheEndless.exe Task: {A34DADE0-6839-4717-8FB9-3E7FD286D57A} - System32\Tasks\{B8F19CEE-4233-444E-B0D7-D50A27BB66F3} => pcalua.exe -a "C:\old pc game\Painkiller Black Edition (E)\Painkiller Black Edition (E)\setup.exe" -d "C:\old pc game\Painkiller Black Edition (E)\Painkiller Black Edition (E)" Task: {F5BF39EB-CF82-419D-9AAD-1A99358347DF} - System32\Tasks\{E6FEF514-5CA7-48F0-8494-1B7DC84AA245} => pcalua.exe -a "E:\MicroSoft Office 2007 With Key by [TORRENTMAFIA.IN]\setup.exe" -d "E:\MicroSoft Office 2007 With Key by [TORRENTMAFIA.IN]" Task: {FEFD471E-C773-4072-A8DC-975347D72F51} - System32\Tasks\{AD38D9DF-0AD2-4F2C-92BD-E0499808A474} => pcalua.exe -a "C:\Program Files (x86)\Paradox Interactive\Magicka Collection\Dependencies\dotnetfx35.exe" -d "C:\Program Files (x86)\Paradox Interactive\Magicka Collection\Dependencies" Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe S4 NVHDA; system32\drivers\nvhda64v.sys [X] S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] S3 xspirit; \??\C:\Windows\xspirit.sys [X] DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Akamai NetSession Interface C:\Users\Pawcio\AppData\Local\Avg C:\Users\Pawcio\AppData\Local\AvgSetupLog C:\Program Files\Emsisoft Anti-Malware C:\Program Files (x86)\AVG C:\Program Files (x86)\Malwarebytes Anti-Malware C:\ProgramData\AVAST Software C:\ProgramData\Avg C:\ProgramData\Emsisoft C:\ProgramData\Malwarebytes C:\ProgramData\MFAData C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spore C:\Users\Pawcio\Doctor Web C:\Users\Pawcio\AppData\Local\MFAData C:\Users\Pawcio\AppData\Roaming\installe.exe C:\Users\Pawcio\AppData\Roaming\TuneUp Software C:\Users\Pawcio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Painkiller.lnk C:\Users\Pawcio\Desktop\G\Bionic Dues.lnk C:\Users\Pawcio\Desktop\G\Command and Conquer - Generals Zero Hour.lnk C:\Users\Pawcio\Desktop\G\Command and Conquer - Generals.lnk C:\Users\Pawcio\Desktop\G\Door Kickers.lnk C:\Users\Pawcio\Desktop\G\Dungeon of the Endless.lnk C:\Users\Pawcio\Desktop\G\Fallout New Vegas.lnk C:\Users\Pawcio\Desktop\G\Shovel Knight.lnk C:\Users\Pawcio\Desktop\G\Spore.lnk C:\Users\Pawcio\Desktop\G\Twierdza Deluxe.lnk C:\Users\Pawcio\Desktop\G\Twierdza Krzyżowiec.lnk C:\Users\Pawcio\Downloads\1SpyHunter 4.21.10.4585 eng-full- x32 bit.rar C:\Users\Pawcio\Downloads\Malwarebytes Patch.zip C:\Users\Pawcio\Downloads\Malwarebytes Patch CMD: ipconfig /flushdns CMD: netsh advfirewall reset RemoveProxy: EmptyTemp: ***************** Procesy zostaÅ‚y pomyÅ›lnie zamkniÄ™te. Punkt przywracania zostaÅ‚ pomyÅ›lnie utworzony. HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{F38D35B3-1007-4AF3-8C5B-80528E104E78}\\DhcpNameServer => Wartość pomyÅ›lnie usuniÄ™to "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => klucz pomyÅ›lnie usuniÄ™to HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => klucz nie znaleziono. HKU\S-1-5-21-813231136-3034751300-3063813572-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Wartość pomyÅ›lnie usuniÄ™to HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => klucz nie znaleziono. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{28CCD7EE-E50D-426D-906D-1F3B263E432C}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28CCD7EE-E50D-426D-906D-1F3B263E432C}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{A131E369-C11D-4D0A-A8B3-015754C55CB9} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A131E369-C11D-4D0A-A8B3-015754C55CB9}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3D4EBCD5-2326-497F-B732-8CCCE8979E16}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D4EBCD5-2326-497F-B732-8CCCE8979E16}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{7049C365-1DEC-4D03-9ADF-B5BD1078A707} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7049C365-1DEC-4D03-9ADF-B5BD1078A707}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5B8571F1-5D3F-4C14-ACB8-4C127BB740D7}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B8571F1-5D3F-4C14-ACB8-4C127BB740D7}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{B004C783-65C7-4804-B6CD-CE4DFF0639C6} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B004C783-65C7-4804-B6CD-CE4DFF0639C6}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5DA32748-1081-4FC6-92D0-3EDB0DABD24C}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5DA32748-1081-4FC6-92D0-3EDB0DABD24C}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{511A298B-A7E8-4D15-9F6E-8D4946FFAAA2} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{511A298B-A7E8-4D15-9F6E-8D4946FFAAA2}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{60CD62AF-33C4-4686-8B40-94D3EAA78DB3}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{60CD62AF-33C4-4686-8B40-94D3EAA78DB3}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\DriverToolkit Autorun => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DriverToolkit Autorun" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{824BF464-C04B-4897-B184-DA326B3C9DF1}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{824BF464-C04B-4897-B184-DA326B3C9DF1}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{8521DC72-C63A-4E87-9D34-03C10E758538} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8521DC72-C63A-4E87-9D34-03C10E758538}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A34DADE0-6839-4717-8FB9-3E7FD286D57A}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A34DADE0-6839-4717-8FB9-3E7FD286D57A}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{B8F19CEE-4233-444E-B0D7-D50A27BB66F3} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B8F19CEE-4233-444E-B0D7-D50A27BB66F3}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F5BF39EB-CF82-419D-9AAD-1A99358347DF}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5BF39EB-CF82-419D-9AAD-1A99358347DF}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{E6FEF514-5CA7-48F0-8494-1B7DC84AA245} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E6FEF514-5CA7-48F0-8494-1B7DC84AA245}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FEFD471E-C773-4072-A8DC-975347D72F51}" => klucz pomyÅ›lnie usuniÄ™to "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FEFD471E-C773-4072-A8DC-975347D72F51}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\System32\Tasks\{AD38D9DF-0AD2-4F2C-92BD-E0499808A474} => pomyÅ›lnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AD38D9DF-0AD2-4F2C-92BD-E0499808A474}" => klucz pomyÅ›lnie usuniÄ™to C:\Windows\Tasks\DriverToolkit Autorun.job => pomyÅ›lnie przeniesiono NVHDA => serwis pomyÅ›lnie usuniÄ™to NvStreamKms => serwis pomyÅ›lnie usuniÄ™to xhunter1 => serwis pomyÅ›lnie usuniÄ™to xspirit => serwis pomyÅ›lnie usuniÄ™to HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 => niepowodzenie przy usuwaniu w pierwszym podejÅ›ciu (ErrorCode: C0000121), zobacz kolejnÄ… liniÄ™. HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 => klucz pomyÅ›lnie usuniÄ™to HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Akamai NetSession Interface => klucz pomyÅ›lnie usuniÄ™to C:\Users\Pawcio\AppData\Local\Avg => pomyÅ›lnie przeniesiono C:\Users\Pawcio\AppData\Local\AvgSetupLog => pomyÅ›lnie przeniesiono C:\Program Files\Emsisoft Anti-Malware => pomyÅ›lnie przeniesiono C:\Program Files (x86)\AVG => pomyÅ›lnie przeniesiono C:\Program Files (x86)\Malwarebytes Anti-Malware => pomyÅ›lnie przeniesiono C:\ProgramData\AVAST Software => pomyÅ›lnie przeniesiono C:\ProgramData\Avg => pomyÅ›lnie przeniesiono C:\ProgramData\Emsisoft => pomyÅ›lnie przeniesiono C:\ProgramData\Malwarebytes => pomyÅ›lnie przeniesiono C:\ProgramData\MFAData => pomyÅ›lnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk => pomyÅ›lnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com => pomyÅ›lnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware => pomyÅ›lnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spore => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Doctor Web => pomyÅ›lnie przeniesiono C:\Users\Pawcio\AppData\Local\MFAData => pomyÅ›lnie przeniesiono C:\Users\Pawcio\AppData\Roaming\installe.exe => pomyÅ›lnie przeniesiono C:\Users\Pawcio\AppData\Roaming\TuneUp Software => pomyÅ›lnie przeniesiono C:\Users\Pawcio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Painkiller.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Bionic Dues.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Command and Conquer - Generals Zero Hour.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Command and Conquer - Generals.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Door Kickers.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Dungeon of the Endless.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Fallout New Vegas.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Shovel Knight.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Spore.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Twierdza Deluxe.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Desktop\G\Twierdza Krzyżowiec.lnk => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Downloads\1SpyHunter 4.21.10.4585 eng-full- x32 bit.rar => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Downloads\Malwarebytes Patch.zip => pomyÅ›lnie przeniesiono C:\Users\Pawcio\Downloads\Malwarebytes Patch => pomyÅ›lnie przeniesiono ========= ipconfig /flushdns ========= Konfiguracja IP systemu Windows Pomy˜lnie opr¢¾niono pami©† podr©czn¥ programu rozpoznawania nazw DNS. ========= Koniec CMD: ========= ========= netsh advfirewall reset ========= Ok. ========= Koniec CMD: ========= ========= RemoveProxy: ========= HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wartość pomyÅ›lnie usuniÄ™to HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wartość pomyÅ›lnie usuniÄ™to HKU\S-1-5-21-813231136-3034751300-3063813572-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Wartość pomyÅ›lnie usuniÄ™to HKU\S-1-5-21-813231136-3034751300-3063813572-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wartość pomyÅ›lnie usuniÄ™to HKU\S-1-5-21-813231136-3034751300-3063813572-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wartość pomyÅ›lnie usuniÄ™to ========= Koniec RemoveProxy: ========= EmptyTemp: => 5.5 GB danych tymczasowych UsuniÄ™to. System wymagaÅ‚ restartu. ==== Koniec Fixlog 17:55:03 ====