Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 07-12-2016 Uruchomiony przez USER (15-12-2016 19:15:00) Run:2 Uruchomiony z C:\Users\USER\Desktop\FRST Załadowane profile: USER (Dostępne profile: USER & Mugenos & postgres & test) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: Task: {2069B703-6AAA-4A52-AB6F-4B25DC3FB233} - \fdFFHBXCheckTask -> Brak pliku <==== UWAGA Task: {4DB077B0-835E-4DE0-A557-651B24238F2E} - \FishloseUpdateTaskMachineCore -> Brak pliku <==== UWAGA Task: {5782A8CA-1DB7-4485-B286-4BB3199AA865} - \FishloseUpdateTaskMachineUA -> Brak pliku <==== UWAGA Task: {682319A2-070A-4CF4-87CF-23570A980CC0} - \Digital Sites -> Brak pliku <==== UWAGA Task: {8FF06027-654E-45D9-9584-AAC674C9DCD9} - \NobeanUpdateTaskMachineCore -> Brak pliku <==== UWAGA Task: {9C3CFE8F-28E7-485D-9634-3173196AC674} - System32\Tasks\DealPly => C:\Users\USER\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== UWAGA Task: {A4C9DD3D-C35C-4C00-9E7C-353F42934666} - \DigitalSite -> Brak pliku <==== UWAGA Task: {B915706B-DDB3-4E30-A723-4B69F7DE8934} - \NobeanUpdateTaskMachineUA -> Brak pliku <==== UWAGA Task: {BF5F702F-55BB-4944-BE2F-75045ED619F4} - \fdFFHBXBrowserUpdateCore -> Brak pliku <==== UWAGA Task: {CF72C427-57FF-4CF0-87C3-B0A67CB29603} - \Update Bonanza -> Brak pliku <==== UWAGA Task: {D0D42071-7E7B-45BC-8FA7-D8BE9F0EA318} - System32\Tasks\Hoolapp For Android => C:\Users\USER\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.EXE <==== UWAGA Task: {D3F25FA5-E1FD-4C5C-A1FC-AAF570DED80D} - System32\Tasks\Hoolapp Init => C:\Users\USER\AppData\Roaming\HOOLAP~1\Hoolapp.exe <==== UWAGA C:\Users\USER\AppData\Roaming\DealPly C:\Users\USER\AppData\Roaming\HOOLAP~1 Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\USER\AppData\Roaming\DIGITA~2\UPDATE~1\UPDATE~1.EXE <==== UWAGA Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\USER\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== UWAGA Task: C:\Windows\Tasks\Update Bonanza.job => C:\Users\USER\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== UWAGA C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk C:\Users\Public\Desktop\Google Chrome.lnk C:\Program Files (x86)\Coldjob ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => Brak pliku ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => Brak pliku HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1388680489&from=wpm0102&uid=WDCXWD5000BPKT-75PK4T0_WD-WX51A71Y2161Y2161&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1476786623&z=358522b4141e4cb57770e3eg9z3m0qam5b8q9q9o3z&from=amule1017&uid=WDCXWD5000BPKT-75PK4T0_WD-WX51A71Y2161Y2161 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1388680489&from=wpm0102&uid=WDCXWD5000BPKT-75PK4T0_WD-WX51A71Y2161Y2161&q={searchTerms} HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com?type=hp&ts=1450258856&from=mych123&uid=wdcxwd5000bpkt-75pk4t0_wd-wx51a71y2161y2161&z=5fbfd3366d41532261f238dgfz2wee8o2w4babawfb HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com?type=hp&ts=1450258856&from=mych123&uid=wdcxwd5000bpkt-75pk4t0_wd-wx51a71y2161y2161&z=5fbfd3366d41532261f238dgfz2wee8o2w4babawfb HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5000BPKT-75PK4T0_WD-WX51A71Y2161Y2161&ts=1393422490&type=default&q={searchTerms} HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1476786623&z=358522b4141e4cb57770e3eg9z3m0qam5b8q9q9o3z&from=amule1017&uid=WDCXWD5000BPKT-75PK4T0_WD-WX51A71Y2161Y2161 HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5000BPKT-75PK4T0_WD-WX51A71Y2161Y2161&ts=1393422490&type=default&q={searchTerms} SearchScopes: HKLM -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://startsear.ch/?aff=1&src=sp&cf=ee282f47-8e41-11e1-88f6-ac7289578bf3&q={searchTerms} SearchScopes: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C46A00FFC9715CC3&affID=121564&tsp=4957 SearchScopes: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476786623&z=358522b4141e4cb57770e3eg9z3m0qam5b8q9q9o3z&from=amule1017&uid=WDCXWD5000BPKT-75PK4T0_WD-WX51A71Y2161Y2161&q={searchTerms} SearchScopes: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1 SearchScopes: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> {D0B48296-04EF-45D2-A31C-4353E6244893} URL = SearchScopes: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> {EBA63E7C-8D74-472A-94A9-6CAE67390BC4} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=6A424BB3-73DC-48F5-A620-8E8CB9DC56AD&apn_sauid=AA02F8EF-69C9-4368-9446-3AF7A57928D2 BHO: Brak nazwy -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Brak pliku Toolbar: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> Brak nazwy - {D4027C7F-154A-4066-A1AD-4243D8127440} - Brak pliku Toolbar: HKU\S-1-5-21-2555031829-1915374467-2933209100-1000 -> Brak nazwy - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - Brak pliku StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.mylucky123.com/?type=sc&ts=1476786623&z=358522b4141e4cb57770e3eg9z3m0qam5b8q9q9o3z&from=amule1017&uid=WDCXWD5000BPKT-75PK4T0_WD-WX51A71Y2161Y2161 S2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-14] (Microsoft Corporation) [DependOnService: iThemes5]<==== UWAGA Reg: reg query HKLM\SYSTEM\CurrentControlSet\Services\Themes /s Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main" /f Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f Reg: reg delete "HKU\S-1-5-21\Software\Microsoft\Internet Explorer\SearchScopes" /f CMD: dir /a "C:\Program Files" CMD: dir /a "C:\Program Files (x86)" CMD: dir /a "C:\Program Files\Common Files\System" CMD: dir /a "C:\Program Files (x86)\Common Files\System" CMD: dir /a C:\ProgramData CMD: dir /a C:\Users\USER\AppData\Local CMD: dir /a C:\Users\USER\AppData\LocalLow CMD: dir /a C:\Users\USER\AppData\Roaming EmtyTemp: ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2069B703-6AAA-4A52-AB6F-4B25DC3FB233}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2069B703-6AAA-4A52-AB6F-4B25DC3FB233}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fdFFHBXCheckTask" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4DB077B0-835E-4DE0-A557-651B24238F2E}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4DB077B0-835E-4DE0-A557-651B24238F2E}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FishloseUpdateTaskMachineCore" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5782A8CA-1DB7-4485-B286-4BB3199AA865}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5782A8CA-1DB7-4485-B286-4BB3199AA865}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FishloseUpdateTaskMachineUA" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{682319A2-070A-4CF4-87CF-23570A980CC0}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{682319A2-070A-4CF4-87CF-23570A980CC0}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Digital Sites" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8FF06027-654E-45D9-9584-AAC674C9DCD9}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FF06027-654E-45D9-9584-AAC674C9DCD9}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NobeanUpdateTaskMachineCore" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9C3CFE8F-28E7-485D-9634-3173196AC674}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C3CFE8F-28E7-485D-9634-3173196AC674}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\DealPly => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPly" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4C9DD3D-C35C-4C00-9E7C-353F42934666}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4C9DD3D-C35C-4C00-9E7C-353F42934666}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DigitalSite" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B915706B-DDB3-4E30-A723-4B69F7DE8934}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B915706B-DDB3-4E30-A723-4B69F7DE8934}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NobeanUpdateTaskMachineUA" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF5F702F-55BB-4944-BE2F-75045ED619F4}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF5F702F-55BB-4944-BE2F-75045ED619F4}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fdFFHBXBrowserUpdateCore" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CF72C427-57FF-4CF0-87C3-B0A67CB29603}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF72C427-57FF-4CF0-87C3-B0A67CB29603}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update Bonanza" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D0D42071-7E7B-45BC-8FA7-D8BE9F0EA318}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0D42071-7E7B-45BC-8FA7-D8BE9F0EA318}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\Hoolapp For Android => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hoolapp For Android" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{D3F25FA5-E1FD-4C5C-A1FC-AAF570DED80D}" => klucz pomyślnie usunięto "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3F25FA5-E1FD-4C5C-A1FC-AAF570DED80D}" => klucz pomyślnie usunięto C:\Windows\System32\Tasks\Hoolapp Init => pomyślnie przeniesiono "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hoolapp Init" => klucz pomyślnie usunięto C:\Users\USER\AppData\Roaming\DealPly => pomyślnie przeniesiono C:\Users\USER\AppData\Roaming\HOOLAP~1 => pomyślnie przeniesiono C:\Windows\Tasks\Digital Sites.job => pomyślnie przeniesiono C:\Windows\Tasks\DigitalSite.job => pomyślnie przeniesiono C:\Windows\Tasks\Update Bonanza.job => pomyślnie przeniesiono C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk => pomyślnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => pomyślnie przeniesiono C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk => pomyślnie przeniesiono C:\Users\Public\Desktop\Google Chrome.lnk => pomyślnie przeniesiono C:\Program Files (x86)\Coldjob => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\KAVOverlayIcon" => klucz pomyślnie usunięto HKCR\CLSID\{014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => klucz nie znaleziono. "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\KAVOverlayIcon" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => klucz nie znaleziono. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie usunięto HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie usunięto HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Wartość pomyślnie przywrócono HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wartość pomyślnie przywrócono HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wartość pomyślnie przywrócono "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => klucz pomyślnie usunięto HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => klucz nie znaleziono. "HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => klucz pomyślnie usunięto HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => klucz nie znaleziono. "HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => klucz pomyślnie usunięto HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => klucz nie znaleziono. "HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => klucz pomyślnie usunięto HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => klucz nie znaleziono. "HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}" => klucz pomyślnie usunięto HKCR\CLSID\{425ED333-6083-428a-92C9-0CFC28B9D1BF} => klucz nie znaleziono. "HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}" => klucz pomyślnie usunięto HKCR\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19} => klucz nie znaleziono. "HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D0B48296-04EF-45D2-A31C-4353E6244893}" => klucz pomyślnie usunięto HKCR\CLSID\{D0B48296-04EF-45D2-A31C-4353E6244893} => klucz nie znaleziono. "HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EBA63E7C-8D74-472A-94A9-6CAE67390BC4}" => klucz pomyślnie usunięto HKCR\CLSID\{EBA63E7C-8D74-472A-94A9-6CAE67390BC4} => klucz nie znaleziono. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => klucz pomyślnie usunięto HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => klucz nie znaleziono. HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Wartość pomyślnie usunięto HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => klucz nie znaleziono. HKU\S-1-5-21-2555031829-1915374467-2933209100-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => Wartość pomyślnie usunięto HKCR\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} => klucz nie znaleziono. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Wartość pomyślnie przywrócono hklm\System\CurrentControlSet\Services\Themes\\DependOnService => Wartość pomyślnie usunięto ========= reg query HKLM\SYSTEM\CurrentControlSet\Services\Themes /s ========= HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes Start REG_DWORD 0x2 DisplayName REG_SZ @%SystemRoot%\System32\themeservice.dll,-8192 ErrorControl REG_DWORD 0x1 Group REG_SZ ProfSvc_Group ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs Type REG_DWORD 0x20 Description REG_SZ @%SystemRoot%\System32\themeservice.dll,-8193 ObjectName REG_SZ LocalSystem RequiredPrivileges REG_MULTI_SZ SeAssignPrimaryTokenPrivilege\0SeDebugPrivilege\0SeImpersonatePrivilege FailureActions REG_BINARY 80510100000000000000000003000000140000000100000060EA00000100000060EA00000000000000000000 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes\Parameters ServiceDllUnloadOnStop REG_DWORD 0x1 ServiceMain REG_SZ ThemeServiceMain ServiceDll REG_EXPAND_SZ %SystemRoot%\system32\themeservice.dll ========= Koniec Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukoäczona pomylnie. ========= Koniec Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukoäczona pomylnie. ========= Koniec Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main" /f ========= Operacja ukoäczona pomylnie. ========= Koniec Reg: ========= ========= reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalaz w rejestrze okrelonego klucza albo wartoci. ========= Koniec Reg: ========= ========= reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalaz w rejestrze okrelonego klucza albo wartoci. ========= Koniec Reg: ========= ========= reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalaz w rejestrze okrelonego klucza albo wartoci. ========= Koniec Reg: ========= ========= reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalaz w rejestrze okrelonego klucza albo wartoci. ========= Koniec Reg: ========= ========= reg delete "HKU\S-1-5-21\Software\Microsoft\Internet Explorer\SearchScopes" /f ========= Bť¤D: System nie znalaz w rejestrze okrelonego klucza albo wartoci. ========= Koniec Reg: ========= ========= dir /a "C:\Program Files" ========= Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: C46A-F378 Katalog: C:\Program Files 2016-12-14 18:53