Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 18-07-2016 Uruchomiony przez Ania (2016-07-19 17:05:41) Run:1 Uruchomiony z C:\Users\Ania\Downloads ZaÅ‚adowane profile: Ania & (DostÄ™pne profile: Ania) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: SearchScopes: HKU\S-1-5-21-627277254-4177279609-1029222512-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-627277254-4177279609-1029222512-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = HKLM\...\Run: [Setwallpaper] => c:\programdata\SetWallpaper.cmd U0 Partizan; system32\drivers\Partizan.sys [X] FirewallRules: [{CA9B98DF-7479-4321-ABD3-B2B05F568388}] => (Allow) C:\Program Files (x86)\UnHackMe\Unhackme.exe FirewallRules: [{5D507F7E-525D-447A-A971-E9D10B7BB460}] => (Allow) C:\Program Files (x86)\UnHackMe\Unhackme.exe C:\ProgramData\HitmanPro C:\ProgramData\RegRun C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome C:\Program Files (x86)\UnHackMe C:\Users\Ania\Documents\RegRun2 C:\Users\Ania\Downloads\ReimageRepair.exe C:\Windows\SysWOW64\Partizan.RRI CMD: ipconfig /flushdns Hosts: EmptyTemp: ***************** Procesy zostaÅ‚y pomyÅ›lnie zamkniÄ™te. Punkt przywracania zostaÅ‚ pomyÅ›lnie utworzony. HKU\S-1-5-21-627277254-4177279609-1029222512-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyÅ›lnie usuniÄ™to "HKU\S-1-5-21-627277254-4177279609-1029222512-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => klucz pomyÅ›lnie usuniÄ™to HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => klucz nie znaleziono. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Setwallpaper => Wartość pomyÅ›lnie usuniÄ™to Partizan => serwis pomyÅ›lnie usuniÄ™to HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CA9B98DF-7479-4321-ABD3-B2B05F568388} => Wartość pomyÅ›lnie usuniÄ™to HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5D507F7E-525D-447A-A971-E9D10B7BB460} => Wartość pomyÅ›lnie usuniÄ™to C:\ProgramData\HitmanPro => pomyÅ›lnie przeniesiono C:\ProgramData\RegRun => pomyÅ›lnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome => pomyÅ›lnie przeniesiono C:\Program Files (x86)\UnHackMe => pomyÅ›lnie przeniesiono C:\Users\Ania\Documents\RegRun2 => pomyÅ›lnie przeniesiono C:\Users\Ania\Downloads\ReimageRepair.exe => pomyÅ›lnie przeniesiono C:\Windows\SysWOW64\Partizan.RRI => pomyÅ›lnie przeniesiono ========= ipconfig /flushdns ========= Konfiguracja IP systemu Windows Pomy˜lnie opr¢¾niono pami©† podr©czn¥ programu rozpoznawania nazw DNS. ========= Koniec CMD: ========= C:\Windows\System32\Drivers\etc\hosts => pomyÅ›lnie przeniesiono Hosts pomyÅ›lnie przywrócono. =========== EmptyTemp: ========== BITS transfer queue => 8388608 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 45289681 B Java, Flash, Steam htmlcache => 2908 B Windows/system/drivers => 2996337234 B Edge => 0 B Chrome => 419871392 B Firefox => 378146293 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Public => 0 B ProgramData => 0 B systemprofile => 60221424 B systemprofile32 => 8657060 B LocalService => 0 B NetworkService => 0 B Ania => 247607847 B RecycleBin => 17272264 B EmptyTemp: => 3.9 GB danych tymczasowych UsuniÄ™to. ================================ System wymagaÅ‚ restartu. ==== Koniec Fixlog 17:12:55 ====