Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 14.03.2018 Uruchomiony przez Vostro (17-03-2018 20:04:53) Run:1 Uruchomiony z C:\Users\Vostro\Desktop Załadowane profile: Vostro (Dostępne profile: Vostro) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: EmptyTemp: HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\...\MountPoints2: {1ec2e3eb-0745-11e8-91a8-a4badbc66e50} - "G:\HiSuiteDownLoader.exe" HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\...\MountPoints2: {4b1852e6-e8ab-11e7-9190-a4badbc66e50} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\...\MountPoints2: {4be4be12-fd61-11e7-91a0-a4badbc66e50} - "G:\HiSuiteDownLoader.exe" BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-9.0.4\bin\ssv.dll => Brak pliku CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.2.222\WsAppService.exe [474768 2017-03-01] (Wondershare) 2018-03-10 12:09 - 2018-03-10 12:09 - 007238880 _____ (LLC Mail.Ru) C:\Windows\system32\Drivers\mracdrv.sys ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files (x86)\AVG\Antivirus\ashShA64.dll -> Brak pliku ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files (x86)\AVG\Antivirus\ashShA64.dll -> Brak pliku HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\...\StartupApproved\Run: => "Discord" Folder: C:\Users\Vostro\AppData\Local\Steam\htmlcache\Cache\f_00041c VirusTotal: D:\Steam\bin\cef\cef.win7\steamwebhelper.exe C:\Users\Vostro\Documents\Euro Truck Simulator 2\readme.rtf.lnk C:\Users\Vostro\AppData\Local\Avg C:\ProgramData\Avg CMD: netsh advfirewall reset RemoveProxy: CMD: ipconfig /release CMD: ipconfig /renew CMD: ipconfig /flushdns ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. "HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1ec2e3eb-0745-11e8-91a8-a4badbc66e50}" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{1ec2e3eb-0745-11e8-91a8-a4badbc66e50} => nie znaleziono "HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4b1852e6-e8ab-11e7-9190-a4badbc66e50}" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{4b1852e6-e8ab-11e7-9190-a4badbc66e50} => nie znaleziono "HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4be4be12-fd61-11e7-91a0-a4badbc66e50}" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{4be4be12-fd61-11e7-91a0-a4badbc66e50} => nie znaleziono "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" => pomyślnie usunięto "HKLM\Software\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" => pomyślnie usunięto "HKLM\SOFTWARE\Google\Chrome\Extensions\ngpampappnmepgilojfohadhhmbhlaek" => pomyślnie usunięto "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn" => pomyślnie usunięto "HKLM\System\CurrentControlSet\Services\WsAppService" => pomyślnie usunięto WsAppService => serwis pomyślnie usunięto C:\Windows\system32\Drivers\mracdrv.sys => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => nie znaleziono "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => nie znaleziono "HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\AVG" => pomyślnie usunięto "HKLM\Software\Classes\CLSID\{472083B1-C522-11CF-8763-00608CC02F24}" => pomyślnie usunięto "HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\AVG" => pomyślnie usunięto HKLM\Software\Classes\CLSID\{472083B1-C522-11CF-8763-00608CC02F24} => nie znaleziono "HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Discord" => pomyślnie usunięto "HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Discord" => pomyślnie usunięto ========================= Folder: C:\Users\Vostro\AppData\Local\Steam\htmlcache\Cache\f_00041c ======================== nie znaleziono. ====== Koniec Folder: ====== VirusTotal: D:\Steam\bin\cef\cef.win7\steamwebhelper.exe => (3) Błąd C:\Users\Vostro\Documents\Euro Truck Simulator 2\readme.rtf.lnk => pomyślnie przeniesiono C:\Users\Vostro\AppData\Local\Avg => pomyślnie przeniesiono C:\ProgramData\Avg => pomyślnie przeniesiono ========= netsh advfirewall reset ========= Ok. ========= Koniec CMD: ========= ========= RemoveProxy: ========= "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => pomyślnie usunięto "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => pomyślnie usunięto "HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => pomyślnie usunięto "HKU\S-1-5-21-3140708035-4252809693-1886061019-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => pomyślnie usunięto ========= Koniec RemoveProxy: ========= ========= ipconfig /release ========= Windows IP Configuration No operation can be performed on Ethernet while it has its media disconnected. No operation can be performed on Wi-Fi while it has its media disconnected. An error occurred while releasing interface Wi-Fi 2 : Adres nie zostaˆ jeszcze skojarzony z punktem koäcowym sieci. ========= Koniec CMD: ========= ========= ipconfig /renew ========= Windows IP Configuration No operation can be performed on Ethernet while it has its media disconnected. No operation can be performed on Wi-Fi while it has its media disconnected. An error occurred while renewing interface Wi-Fi 2 : Zostaˆa podj©ta pr˘ba uzyskania dost©pu do gniazda w spos˘b zabroniony przez przypisane do niego uprawnienia dost©pu. ========= Koniec CMD: ========= ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= Koniec CMD: ========= =========== EmptyTemp: ========== BITS transfer queue => 9461760 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 46329407 B Java, Flash, Steam htmlcache => 151063056 B Windows/system/drivers => 15488104 B Edge => 377856 B Chrome => 230382833 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 9988 B NetworkService => 47899294 B Vostro => 141218972 B RecycleBin => 2407265 B EmptyTemp: => 614.8 MB danych tymczasowych Usunięto. ================================ System wymagał restartu. ==== Koniec Fixlog 20:09:36 ====