Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 18-02-2017 Uruchomiony przez Mati (18-02-2017 14:58:13) Run:2 Uruchomiony z C:\Users\Mati\Desktop\FRST Załadowane profile: Mati (Dostępne profile: Mati & Gość) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** Task: {0DE14BA3-68A8-447F-ACCE-18FA6ABA3791} - \task Update -> Brak pliku <==== UWAGA Task: {10DDAC02-9FD4-4309-8409-D47F660A8AEB} - System32\Tasks\{71A8BB0C-6DC1-4A7A-901C-131B122A48EF} => C:\Program Files\THQ\Disney-Pixar\Auta - Przygody w Chlodnicy Gorskiej\Cars.exe [2006-06-25] () Task: {19DC9330-F6E3-47BB-B38B-7869745776B7} - System32\Tasks\{A110553C-00E4-403B-8ACF-56E67194D893} => C:\Program Files\THQ\Disney-Pixar\Auta - Przygody w Chlodnicy Gorskiej\Cars.exe [2006-06-25] () Task: {28A44721-F41D-4DD9-B101-9AB371609113} - System32\Tasks\{6B890234-6292-486B-AFFC-C993B045F972} => C:\Program Files\MULTIFlight\Simulator\MULTIFlight.exe Task: {4EBCF326-302B-4EFA-B0F2-B89004574F9D} - System32\Tasks\{392BC0CE-706D-4DA4-84F8-D90D0416A5FA} => F:\ADCDA2\ADBCD.exe Task: {5954BBD5-4C57-48DD-BCDA-80B05F525EB2} - \SwiftSearch Auto Updater 1.10.0.25 Pending Update -> Brak pliku <==== UWAGA Task: {84C7F6AB-B52F-44C2-8330-4FB3FF67E472} - System32\Tasks\{42E87CB4-095E-469E-BC61-E64043193301} => C:\Program Files\THQ\Disney-Pixar\Auta - Przygody w Chlodnicy Gorskiej\Cars.exe [2006-06-25] () Task: {B6A5B6A0-AC81-41A5-8CE7-5AFF96C7315D} - System32\Tasks\{01A6A4B5-2D97-4C1A-AEDB-736AD17AE433} => pcalua.exe -a C:\Windows\System32\igfxcfg.exe -d C:\Windows\system32 Task: {DDDE78B1-8BC0-44D4-940D-AC8C3FC4A712} - \SwiftSearch Auto Updater 1.10.0.25 Core -> Brak pliku <==== UWAGA Task: {F20A89F4-5982-451F-8345-D12B216BD805} - System32\Tasks\{21628F5D-32FC-47D2-9D41-3ADD9147307F} => C:\Program Files\THQ\Disney-Pixar\Auta - Przygody w Chlodnicy Gorskiej\Cars.exe [2006-06-25] () Task: {F31ECE1B-A902-48DE-8308-885123493AE9} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe (DotCash Limited) C:\Program Files\MPC Cleaner\MPCProtectService.exe HKLM\...\Run: [] => [X] HKU\S-1-5-21-2760339332-1048325341-4031805087-1000\...\MountPoints2: {e30e0c34-9c8f-11e4-b44b-0016364f0670} - F:\Install.cmd HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-11-20] (Microsoft Corporation) GroupPolicyUsers\S-1-5-21-2760339332-1048325341-4031805087-1003\User: Ograniczenia <======= UWAGA R2 MPCProtectService; C:\Program Files\MPC Cleaner\MPCProtectService.exe [349152 2016-01-13] (DotCash Limited) S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [16432 2016-01-13] (Enigma Software Group USA, LLC.) S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2016-01-13] () R0 MPCBase; C:\Windows\System32\drivers\MPCBase.sys [28648 2016-01-13] (DotCash) R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [48872 2016-01-13] (DotCash) U3 a9xv3wok; C:\Windows\system32\Drivers\a9xv3wok.sys [0 ] (Microsoft Corporation) <==== UWAGA (zerobajtowy plik/folder) S3 cpuz134; \??\C:\Users\Laptop\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] S3 sony_ssm.sys; \??\C:\Users\Dzieci\AppData\Local\Temp\sony_ssm.sys [X] 2016-01-14 22:20 - 2016-01-14 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC 2016-01-14 21:46 - 2016-01-14 21:46 - 00004576 _____ C:\EsgInstallerResumeAction 2016-01-13 22:31 - 2016-01-13 22:31 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Enigma Software Group 2016-01-13 22:30 - 2016-01-13 22:30 - 00001244 _____ C:\Users\Laptop\Desktop\SpyHunter.lnk 2016-01-13 22:30 - 2016-01-13 22:30 - 00000000 ____D C:\sh4ldr 2016-01-13 22:29 - 2016-01-13 22:29 - 00019984 _____ C:\Windows\system32\Drivers\EsgScanner.sys 2016-01-13 22:29 - 2016-01-13 22:29 - 00000000 ____D C:\Program Files\Enigma Software Group 2016-01-13 22:28 - 2016-01-13 22:28 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Laptop\Downloads\SpyHunter-Installer.exe 2016-01-13 21:03 - 2016-01-14 22:20 - 00001687 _____ C:\Users\Public\Desktop\MPC Cleaner.lnk 2016-01-13 20:48 - 2016-01-13 20:48 - 00000008 _____ C:\END 2016-01-13 20:37 - 2016-01-14 22:20 - 00000000 ____D C:\Program Files\MPC Cleaner 2016-01-13 20:37 - 2016-01-13 20:37 - 00048872 _____ (DotCash) C:\Windows\system32\Drivers\MPCKpt.sys 2016-01-13 20:37 - 2016-01-13 20:37 - 00028648 _____ (DotCash) C:\Windows\system32\Drivers\MPCBase.sys 2016-01-13 20:31 - 2016-01-13 20:40 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\systweak 2016-01-13 20:31 - 2016-01-13 20:40 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Opera Software 2016-01-13 20:31 - 2016-01-13 20:40 - 00000000 ____D C:\Users\Laptop\AppData\Local\Opera Software 2016-01-13 20:29 - 2016-01-13 20:40 - 00000000 ____D C:\Program Files\Opera 2016-01-13 20:18 - 2016-01-13 20:16 - 00000967 _____ C:\Windows\system32\Drivers\etc\hp.bak EmptyTemp: ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0DE14BA3-68A8-447F-ACCE-18FA6ABA3791} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\task Update => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10DDAC02-9FD4-4309-8409-D47F660A8AEB} => klucz nie znaleziono. C:\Windows\System32\Tasks\{71A8BB0C-6DC1-4A7A-901C-131B122A48EF} => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{71A8BB0C-6DC1-4A7A-901C-131B122A48EF} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{19DC9330-F6E3-47BB-B38B-7869745776B7} => klucz nie znaleziono. C:\Windows\System32\Tasks\{A110553C-00E4-403B-8ACF-56E67194D893} => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A110553C-00E4-403B-8ACF-56E67194D893} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28A44721-F41D-4DD9-B101-9AB371609113} => klucz nie znaleziono. C:\Windows\System32\Tasks\{6B890234-6292-486B-AFFC-C993B045F972} => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6B890234-6292-486B-AFFC-C993B045F972} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4EBCF326-302B-4EFA-B0F2-B89004574F9D} => klucz nie znaleziono. C:\Windows\System32\Tasks\{392BC0CE-706D-4DA4-84F8-D90D0416A5FA} => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{392BC0CE-706D-4DA4-84F8-D90D0416A5FA} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5954BBD5-4C57-48DD-BCDA-80B05F525EB2} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SwiftSearch Auto Updater 1.10.0.25 Pending Update => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{84C7F6AB-B52F-44C2-8330-4FB3FF67E472} => klucz nie znaleziono. C:\Windows\System32\Tasks\{42E87CB4-095E-469E-BC61-E64043193301} => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{42E87CB4-095E-469E-BC61-E64043193301} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B6A5B6A0-AC81-41A5-8CE7-5AFF96C7315D} => klucz nie znaleziono. C:\Windows\System32\Tasks\{01A6A4B5-2D97-4C1A-AEDB-736AD17AE433} => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{01A6A4B5-2D97-4C1A-AEDB-736AD17AE433} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DDDE78B1-8BC0-44D4-940D-AC8C3FC4A712} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SwiftSearch Auto Updater 1.10.0.25 Core => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F20A89F4-5982-451F-8345-D12B216BD805} => klucz nie znaleziono. C:\Windows\System32\Tasks\{21628F5D-32FC-47D2-9D41-3ADD9147307F} => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{21628F5D-32FC-47D2-9D41-3ADD9147307F} => klucz nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F31ECE1B-A902-48DE-8308-885123493AE9} => klucz nie znaleziono. C:\Windows\System32\Tasks\SpyHunter4Startup => nie znaleziono. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup => klucz nie znaleziono. C:\Program Files\MPC Cleaner\MPCProtectService.exe => Nie odnaleziono uruchomionego procesu HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Wartość nie znaleziono. HKU\S-1-5-21-2760339332-1048325341-4031805087-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e30e0c34-9c8f-11e4-b44b-0016364f0670} => klucz nie znaleziono. HKCR\CLSID\{e30e0c34-9c8f-11e4-b44b-0016364f0670} => klucz nie znaleziono.