Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
CloseProcesses:
CustomCLSID: HKU\S-1-5-21-507921405-1417001333-725345543-1004_Classes\CLSID\{6D1282FC-6606-49F2-8852-E44273D5A97D}\InprocServer32 -> C:\Documents and Settings\All Users\Dane aplikacji\{AFF96071-7793-47E1-97D0-B5C05E402702}\shsetup.dl (the data entry has 9 more characters).
HKLM\...\Run: [AutoEJCD_0ACE20FF] => C:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE [40960 2013-01-09] ()
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKU\S-1-5-21-507921405-1417001333-725345543-1004\...\Run: [Facebook Update] => C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2013-01-25] (Facebook Inc.)
HKU\S-1-5-21-507921405-1417001333-725345543-1004\...\Run: [BingSvc] => C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-507921405-1417001333-725345543-1004\...\RunOnce: [Chromium] => [X]
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => No File
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => No File
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => No File
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => No File
BootExecute: autocheck autochk * SmartDefragBootTime.exe
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION
SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Extension: Apps Hat - C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\81alaf81.default\Extensions\39ed7c16-185d-4f88-b976-666d4928ba01@fe4550c1-7a4f-4a62-ad1c-45e0afdf81a4(2).com [2015-07-16]
FF Extension: Quick Start - C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\81alaf81.default\Extensions\quick_start@gmail(2).com [2014-05-28]
FF Extension: SaveSense - C:\Documents and Settings\dom\Dane aplikacji\Mozilla\Firefox\Profiles\81alaf81.default\Extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36} [2013-12-31]
FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2013-04-12] <==== ATTENTION
CHR Extension: (No Name) - C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-07-30]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 FairplayKD; \??\C:\Documents and Settings\All Users\Dane aplikacji\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S4 IntelIde; no ImagePath
R1 tcfd_vt_1_10_0_21; system32\drivers\tcfd_vt_1_10_0_21.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [X]
2015-07-30 21:05 - 2015-08-09 15:33 - 00000000 ____ D C:\AdwCleaner
2015-07-29 20:42 - 2015-07-30 18:01 - 00000664 _____ C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\d3d9caps.dat
2015-07-29 20:34 - 2015-07-30 20:39 - 00000000 ___HD C:\Documents and Settings\All Users\Dane aplikacji\{AFF96071-7793-47E1-97D0-B5C05E402702}
C:\Windows\Tasks\At1.job
Task: C:\WINDOWS\Tasks\DoxillionDowngrade.job => C:\Program Files\NCH Software\Doxillion\doxillion.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-507921405-1417001333-725345543-1004Core.job => C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-507921405-1417001333-725345543-1004UA.job => C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\SmartDefragUpdate.job => C:\Program Files\IObit\Smart Defrag 2\AutoUpdate.exe
Task: C:\WINDOWS\Tasks\SmartDefrag_Startup.job => C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.
