Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 07.01.2019 Uruchomiony przez Kuba-DOM (08-01-2019 22:32:55) Run:1 Uruchomiony z D:\Nowy folder Załadowane profile: Kuba-DOM (Dostępne profile: Kuba-DOM) Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: EmptyTemp: HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [3932672 2018-08-29] (Microsoft Corporation) <==== UWAGA HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [3932672 2018-08-29] (Microsoft Corporation) <==== UWAGA HKU\S-1-5-21-3833335609-3434273869-3320823764-1002\...\Winlogon: [Shell] C:\Windows\explorer.exe [3932672 2018-08-29] (Microsoft Corporation) <==== UWAGA HKU\S-1-5-18\...\Winlogon: [Shell] C:\Windows\explorer.exe [3932672 2018-08-29] (Microsoft Corporation) <==== UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA Hosts: 127.0.0.1 gdpwmgrlocalhost Tcpip\..\Interfaces\{18cb2d2b-33ed-4799-9b99-7bcb5f22ab41}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{b1edb1ff-352a-4286-9253-7374fb13b153}: [DhcpNameServer] 172.20.10.1 SearchScopes: HKU\S-1-5-21-3833335609-3434273869-3320823764-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 SearchScopes: HKU\S-1-5-21-3833335609-3434273869-3320823764-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15 FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\local-settings.js [2016-04-04] <==== UWAGA (Linkuje do pliku *.cfg) FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\mozilla.cfg [2017-02-27] <==== UWAGA 2018-12-19 13:51 - 2018-12-19 13:51 - 000242176 __SHC () C:\Users\Kuba-DOM\AppData\Roaming\BElNIxJ.exe 2018-12-19 13:51 - 2018-12-19 13:51 - 000238592 __SHC () C:\Users\Kuba-DOM\AppData\Roaming\fhsxYdMoI.exe 2018-07-21 08:29 - 2018-07-21 08:29 - 000000000 ____C () C:\Users\Kuba-DOM\AppData\Roaming\gdfw.log 2018-07-21 08:29 - 2018-07-21 08:29 - 000000779 ____C () C:\Users\Kuba-DOM\AppData\Roaming\gdscan.log 2018-12-19 13:51 - 2018-12-19 13:51 - 000238080 __SHC () C:\Users\Kuba-DOM\AppData\Roaming\LzDcb.exe 2019-01-04 12:38 - 2019-01-04 12:39 - 045710368 ____C (PandoraTV) C:\Users\Kuba-DOM\AppData\Local\Temp\Update.exe FirewallRules: [{0B938061-E9C7-4AA7-A84C-64FD86A9A111}] => (Allow) D:\Games\Steam\steamapps\common\Black Squad\binaries\win32\BlackSquadGame.exe Brak pliku FirewallRules: [{70EF5D72-624B-4EB1-920B-C9F75ED47F57}] => (Allow) D:\Games\Steam\steamapps\common\Black Squad\binaries\win32\BlackSquadGame.exe Brak pliku FirewallRules: [{AC1A2366-1F9F-4E91-B1D5-54A26256D52C}] => (Allow) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe Brak pliku FirewallRules: [{ED5D8B06-C53C-4FC6-AC79-8A2EEF4E6EFD}] => (Allow) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe Brak pliku FirewallRules: [{6ED46018-A3DF-4604-8203-1012BF0771D7}] => (Allow) LPort=26789 FirewallRules: [{DEAF46C3-99C9-4B32-8100-3BBE53D93412}] => (Allow) LPort=26820 FirewallRules: [{9A429B49-CA85-4C0C-82FD-AACA20CB2CAE}] => (Allow) LPort=26822 ***************** Procesy zostały pomyślnie zamknięte. Błąd: (0) Nie udało się utworzyć punktu przywracania. "HKU\S-1-5-19\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell" => pomyślnie usunięto "HKU\S-1-5-20\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell" => pomyślnie usunięto "HKU\S-1-5-21-3833335609-3434273869-3320823764-1002\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell" => pomyślnie usunięto "HKU\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell" => pomyślnie usunięto HKLM\SOFTWARE\Policies\Google => pomyślnie usunięto C:\Windows\System32\Drivers\etc\hosts => pomyślnie przeniesiono Hosts pomyślnie przywrócono. "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{18cb2d2b-33ed-4799-9b99-7bcb5f22ab41}\\DhcpNameServer" => pomyślnie usunięto "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{b1edb1ff-352a-4286-9253-7374fb13b153}\\DhcpNameServer" => pomyślnie usunięto "HKU\S-1-5-21-3833335609-3434273869-3320823764-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => pomyślnie usunięto HKU\S-1-5-21-3833335609-3434273869-3320823764-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => pomyślnie usunięto HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => nie znaleziono C:\Program Files (x86)\mozilla firefox\defaults\pref\local-settings.js => pomyślnie przeniesiono C:\Program Files (x86)\mozilla firefox\mozilla.cfg => pomyślnie przeniesiono "C:\Users\Kuba-DOM\AppData\Roaming\BElNIxJ.exe" => nie znaleziono "C:\Users\Kuba-DOM\AppData\Roaming\fhsxYdMoI.exe" => nie znaleziono C:\Users\Kuba-DOM\AppData\Roaming\gdfw.log => pomyślnie przeniesiono C:\Users\Kuba-DOM\AppData\Roaming\gdscan.log => pomyślnie przeniesiono "C:\Users\Kuba-DOM\AppData\Roaming\LzDcb.exe" => nie znaleziono C:\Users\Kuba-DOM\AppData\Local\Temp\Update.exe => pomyślnie przeniesiono "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0B938061-E9C7-4AA7-A84C-64FD86A9A111}" => pomyślnie usunięto "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{70EF5D72-624B-4EB1-920B-C9F75ED47F57}" => pomyślnie usunięto "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AC1A2366-1F9F-4E91-B1D5-54A26256D52C}" => pomyślnie usunięto "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ED5D8B06-C53C-4FC6-AC79-8A2EEF4E6EFD}" => pomyślnie usunięto "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6ED46018-A3DF-4604-8203-1012BF0771D7}" => pomyślnie usunięto "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DEAF46C3-99C9-4B32-8100-3BBE53D93412}" => pomyślnie usunięto "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9A429B49-CA85-4C0C-82FD-AACA20CB2CAE}" => pomyślnie usunięto =========== EmptyTemp: ========== BITS transfer queue => 7888896 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 151196018 B Java, Flash, Steam htmlcache => 37419873 B Windows/system/drivers => 2471824 B Edge => 333371962 B Chrome => 408751240 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 31918 B LocalService => 0 B NetworkService => 982 B NetworkService => 0 B Kuba-DOM => 535835403 B RecycleBin => 36132071 B EmptyTemp: => 1.4 GB danych tymczasowych Usunięto. ================================ System wymagał restartu. ==== Koniec Fixlog 22:33:31 ====