Farbar Recovery Scan Tool (x64) Wersja:01-06-2016 Uruchomiony przez Marcin (2016-06-03 13:02:23) Uruchomiony z C:\Users\Marcin\Downloads Tryb startu: Normal ================== Szukaj w rejestrze: "IHeeaWA" =========== [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA] [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA] ""="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities] "ApplicationDescription"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities] "ApplicationIcon"="C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities] "ApplicationName"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities\StartMenu] "StartMenuInternet"="IHeeaWA" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities\URLAssociations] "https"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities\URLAssociations] "ftp"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities\URLAssociations] "http"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\DefaultIcon] ""="C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\InstallInfo] "HideIconsCommand"=""C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe" "-HideIconsCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\InstallInfo] "ReinstallCommand"=""C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe" "-ReinstallCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IHeeaWA\InstallInfo] "ShowIconsCommand"=""C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe" "-ShowIconsCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications] "IHeeaWA"="SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities" [HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications] "IHeeaWA"="SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IHeeaWA] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IHeeaWA] "path"="C:\Program Files (x86)\IHeeaWA\" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IHeeaWA] "publicdirectroy"="C:\Users\Public\Documents\IHeeaWA\" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IHeeaWA] "publicdirectroy_log"="C:\Users\Public\Documents\IHeeaWA\log\" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IHeeaWA] "publicdirectroy_dump"="C:\Users\Public\Documents\IHeeaWA\log\dump\" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA] ""="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\Capabilities] "ApplicationDescription"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\Capabilities] "ApplicationIcon"="C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\Capabilities] "ApplicationName"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\Capabilities\StartMenu] "StartMenuInternet"="IHeeaWA" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\Capabilities\URLAssociations] "https"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\Capabilities\URLAssociations] "ftp"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\Capabilities\URLAssociations] "http"="IHeeaWAHTM" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\DefaultIcon] ""="C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\InstallInfo] "HideIconsCommand"=""C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe" "-HideIconsCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\InstallInfo] "ReinstallCommand"=""C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe" "-ReinstallCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IHeeaWA\InstallInfo] "ShowIconsCommand"=""C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe" "-ShowIconsCommand"" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\RegisteredApplications] "IHeeaWA"="SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\RegisteredApplications] "IHeeaWA"="SOFTWARE\Clients\StartMenuInternet\IHeeaWA\Capabilities" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000\Software\IHeeaWA] [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\eb928bf4_0] ""="{0.0.0.00000000}.{d0c13009-e8ee-4fa1-a063-cb7524f78abf}|\Device\HarddiskVolume1\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe%b{00000000-0000-0000-0000-000000000000}" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000\Software\Classes\IHeeaWAHTM] [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000\Software\Classes\IHeeaWAHTM] ""="IHeeaWA HTML Document" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000\Software\Classes\IHeeaWAHTM\DefaultIcon] ""="C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe,0" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000\Software\Classes\IHeeaWAHTM\shell\open\command] ""=""C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe" "%1"" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe"="IHeeaWA" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe"="IHeeaWA" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000_Classes\IHeeaWAHTM] [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000_Classes\IHeeaWAHTM] ""="IHeeaWA HTML Document" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000_Classes\IHeeaWAHTM\DefaultIcon] ""="C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe,0" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000_Classes\IHeeaWAHTM\shell\open\command] ""=""C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe" "%1"" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe"="IHeeaWA" [HKEY_USERS\S-1-5-21-738100350-4002353511-3136375141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe"="IHeeaWA" ====== Koniec Szukaj ======