Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 23-08-2020 Uruchomiony przez NoNoNoNo (23-08-2020 19:26:55) Run:1 Uruchomiony z C:\Users\NoNoNoNo\Downloads Załadowane profile: NoNoNoNo Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CloseProcesses: CreateRestorePoint: EmptyTemp: HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\Policies\Explorer: [HideSCAHealth] 1 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\Policies\Explorer: [NoInternetOpenWith] 1 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\Policies\Explorer: [NoResolveSearch] 1 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\Policies\Explorer: [NoCDBurning] 1 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\Policies\Explorer: [HideSCAVolume] 0 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\MountPoints2: {5dfb03d4-cbd6-11e8-8392-806e6f6e6963} - "E:\vcd_play.exe" HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\MountPoints2: {5e858cef-3386-11ea-83d3-d05099356802} - "W:\setup.exe" HKU\S-1-5-21-367478599-2953826314-2425126797-1001\...\MountPoints2: {70557365-6ac7-11ea-83db-d05099356802} - "W:\setup.exe" GroupPolicy: Ograniczenia ? <==== UWAGA FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA Task: {1B40E500-3B72-417C-A9B5-9D91E3FEB145} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA Task: {23F5EB68-01BE-47B1-B885-3CF12F346913} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {2611107E-0E09-46BF-8C40-21C4F2962E9E} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Brak pliku <==== UWAGA Task: {282C89A1-2FDA-4486-AD49-496794CCF1B3} - System32\Tasks\Opera scheduled Autoupdate 1518970523 => c:\program files\opera\launcher.exe [1517592 2020-06-10] (Opera Software AS -> Opera Software) Task: {42D321FF-309B-4AFD-ACF0-1AD097CFFE1C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA Task: {537F157D-7D39-4789-8F1F-6703CE0D97E1} - System32\Tasks\{CC89F31C-5F03-4E40-BE2A-AC98EF92015F} => C:\Windows\system32\pcalua.exe -a W:\Setup.exe -d W:\ Task: {53D07A7D-6209-41C7-94CA-E28971F4C857} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Brak pliku <==== UWAGA Task: {56BB90A5-C5F5-4679-AA1F-3FE71328469F} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Task: {585BF4DF-011F-429B-8F3B-43B603EEEA2C} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Brak pliku <==== UWAGA Task: {5A463AF7-867E-4AC3-B6D2-B2E61D3EEBAE} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {74054BC1-F4D2-4A8B-88D8-A8E7B4AACF33} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {7E95AD43-7E61-4C02-8BD6-DCB0E57AB94A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA Task: {844C6999-59FD-4944-B1CE-BCB9EC4B0647} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe Task: {848AD62B-33A7-42BF-8607-D878ECD6BF2D} - \Microsoft\Windows\Setup\EOONotify -> Brak pliku <==== UWAGA Task: {8B33A4F0-D3AA-4692-BB5E-198450850876} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1660520 2020-02-28] (Avast Software s.r.o. -> Avast Software) Task: {98A290E3-BF53-4872-A630-A925BA2386AE} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA Task: {A74F145D-2C21-4A1C-8A35-58D5E91F902F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Brak pliku <==== UWAGA Task: {B3338C40-97C7-4E30-8002-B8FC4D225696} - System32\Tasks\{6AEDB9AC-0078-4AB1-AAED-BC13F74D1BFA} => C:\Windows\system32\pcalua.exe -a C:\Users\NoNoNoNo\Downloads\instalator.exe -d C:\Users\NoNoNoNo\Downloads Task: {D8C60F7E-A3C2-4192-B9F7-DB77096F6F1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: {E152C295-2E52-4E59-92F7-B83882B4D5BA} - System32\Tasks\{795EF729-0685-4673-9B6F-D1B5F3B3B2D2} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\JoWooD\Gothic II\System\Gothic2.exe" -d "C:\Program Files (x86)\JoWooD\Gothic II\System" Task: {E5EDF0CF-A20A-44D9-8962-D547B0876227} - System32\Tasks\{A6AA2ABF-FA43-4DA8-9B65-9AD411099A41} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\EA GAMES\Battlefield 1942\BF1942.exe" -d "C:\Program Files (x86)\EA GAMES\Battlefield 1942" Task: {F190FE98-FD3A-4FB1-86E4-3CC3F39808DE} - \Microsoft\Windows\Setup\gwx\rundetector -> Brak pliku <==== UWAGA Task: {F99C3C60-9EAD-476A-AAE6-618F12D4733E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {FD561879-703E-4FA2-9A4E-2D5F0EE06142} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Tcpip\..\Interfaces\{0ef69299-5876-401b-9e11-8a7537f4a2b7}: [DhcpNameServer] 37.8.214.2 31.11.202.254 Tcpip\..\Interfaces\{1d690b99-9cb4-4e55-804b-d94daa535af2}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{ce67997f-52aa-47b6-bfc2-36d7d82ee218}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{d22ba5cf-3f1a-4684-9500-e705049fec61}: [DhcpNameServer] 192.168.8.1 HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <==== UWAGA HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <==== UWAGA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006 HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\.DEFAULT -> {637D6E3C-DF93-48A5-8362-159A8AC56B11} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&meta= SearchScopes: HKU\S-1-5-21-367478599-2953826314-2425126797-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-367478599-2953826314-2425126797-1001 -> {52B32DF5-BA14-40DB-AE27-945428672E8A} URL = hxxp://www.web-pl.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-367478599-2953826314-2425126797-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} Edge HomeButtonPage: HKU\S-1-5-21-367478599-2953826314-2425126797-1001 -> hxxp://www.web-pl.com/ Edge HomePage: Default -> hxxp://www.web-pl.com/ Edge StartupUrls: Default -> "hxxp://www.web-pl.com/" Edge DefaultSearchURL: Default -> hxxp://www.web-pl.com/search?q={searchTerms} Edge DefaultSearchKeyword: Default -> web-pl.com CHR HomePage: Default -> hxxp://www.web-pl.com/ CHR DefaultSearchKeyword: Default -> google.pl_ S3 VBAudioVACMME; \SystemRoot\System32\drivers\vbaudio_cable64_win7.sys [X] 2020-07-24 19:51 - 2019-09-22 04:02 - 000003326 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1518970523 ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Brak pliku AlternateDataStreams: C:\ProgramData\TEMP:56E2E879 [118] FirewallRules: [2d989baa-87db-479b-9f93-edcd967f0c45] => (Allow) @p2psvc.dll,8006 => Brak pliku FirewallRules: [9c258530-c2e3-4027-ab4e-0d187d9509ad] => (Allow) @p2psvc.dll,8006 => Brak pliku RemoveProxy: ***************** Procesy zostały pomyślnie zamknięte. Punkt przywracania został pomyślnie utworzony. HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA => pomyślnie przywrócono "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoLowDiskSpaceChecks" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HideSCAHealth" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoInternetOpenWith" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\LinkResolveIgnoreLinkInfo" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoResolveSearch" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoCDBurning" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoLowDiskSpaceChecks" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HideSCAVolume" => pomyślnie usunięto HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5dfb03d4-cbd6-11e8-8392-806e6f6e6963} => pomyślnie usunięto HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5e858cef-3386-11ea-83d3-d05099356802} => pomyślnie usunięto HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{70557365-6ac7-11ea-83db-d05099356802} => pomyślnie usunięto C:\WINDOWS\system32\GroupPolicy\Machine => pomyślnie przeniesiono C:\WINDOWS\system32\GroupPolicy\GPT.ini => pomyślnie przeniesiono C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => pomyślnie przeniesiono HKLM\SOFTWARE\Policies\Mozilla => pomyślnie usunięto HKLM\SOFTWARE\Policies\Google => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1B40E500-3B72-417C-A9B5-9D91E3FEB145}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B40E500-3B72-417C-A9B5-9D91E3FEB145}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{23F5EB68-01BE-47B1-B885-3CF12F346913}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{23F5EB68-01BE-47B1-B885-3CF12F346913}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2611107E-0E09-46BF-8C40-21C4F2962E9E}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2611107E-0E09-46BF-8C40-21C4F2962E9E}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-Weekend" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{282C89A1-2FDA-4486-AD49-496794CCF1B3}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{282C89A1-2FDA-4486-AD49-496794CCF1B3}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1518970523 => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1518970523" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{42D321FF-309B-4AFD-ACF0-1AD097CFFE1C}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42D321FF-309B-4AFD-ACF0-1AD097CFFE1C}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{537F157D-7D39-4789-8F1F-6703CE0D97E1}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{537F157D-7D39-4789-8F1F-6703CE0D97E1}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{CC89F31C-5F03-4E40-BE2A-AC98EF92015F} => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CC89F31C-5F03-4E40-BE2A-AC98EF92015F}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{53D07A7D-6209-41C7-94CA-E28971F4C857}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{53D07A7D-6209-41C7-94CA-E28971F4C857}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{56BB90A5-C5F5-4679-AA1F-3FE71328469F}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56BB90A5-C5F5-4679-AA1F-3FE71328469F}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => nie znaleziono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{585BF4DF-011F-429B-8F3B-43B603EEEA2C}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{585BF4DF-011F-429B-8F3B-43B603EEEA2C}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5A463AF7-867E-4AC3-B6D2-B2E61D3EEBAE}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A463AF7-867E-4AC3-B6D2-B2E61D3EEBAE}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74054BC1-F4D2-4A8B-88D8-A8E7B4AACF33}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74054BC1-F4D2-4A8B-88D8-A8E7B4AACF33}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7E95AD43-7E61-4C02-8BD6-DCB0E57AB94A}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7E95AD43-7E61-4C02-8BD6-DCB0E57AB94A}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{844C6999-59FD-4944-B1CE-BCB9EC4B0647}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{844C6999-59FD-4944-B1CE-BCB9EC4B0647}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\AutoPico Daily Restart => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{848AD62B-33A7-42BF-8607-D878ECD6BF2D}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{848AD62B-33A7-42BF-8607-D878ECD6BF2D}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOONotify" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{8B33A4F0-D3AA-4692-BB5E-198450850876}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8B33A4F0-D3AA-4692-BB5E-198450850876}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\Avast Software\Overseer => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software\Overseer" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{98A290E3-BF53-4872-A630-A925BA2386AE}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{98A290E3-BF53-4872-A630-A925BA2386AE}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A74F145D-2C21-4A1C-8A35-58D5E91F902F}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A74F145D-2C21-4A1C-8A35-58D5E91F902F}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B3338C40-97C7-4E30-8002-B8FC4D225696}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B3338C40-97C7-4E30-8002-B8FC4D225696}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{6AEDB9AC-0078-4AB1-AAED-BC13F74D1BFA} => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6AEDB9AC-0078-4AB1-AAED-BC13F74D1BFA}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D8C60F7E-A3C2-4192-B9F7-DB77096F6F1B}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8C60F7E-A3C2-4192-B9F7-DB77096F6F1B}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E152C295-2E52-4E59-92F7-B83882B4D5BA}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E152C295-2E52-4E59-92F7-B83882B4D5BA}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{795EF729-0685-4673-9B6F-D1B5F3B3B2D2} => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{795EF729-0685-4673-9B6F-D1B5F3B3B2D2}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E5EDF0CF-A20A-44D9-8962-D547B0876227}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5EDF0CF-A20A-44D9-8962-D547B0876227}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\{A6AA2ABF-FA43-4DA8-9B65-9AD411099A41} => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A6AA2ABF-FA43-4DA8-9B65-9AD411099A41}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F190FE98-FD3A-4FB1-86E4-3CC3F39808DE}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F190FE98-FD3A-4FB1-86E4-3CC3F39808DE}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F99C3C60-9EAD-476A-AAE6-618F12D4733E}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F99C3C60-9EAD-476A-AAE6-618F12D4733E}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FD561879-703E-4FA2-9A4E-2D5F0EE06142}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD561879-703E-4FA2-9A4E-2D5F0EE06142}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => pomyślnie usunięto C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => pomyślnie przeniesiono "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{0ef69299-5876-401b-9e11-8a7537f4a2b7}\\DhcpNameServer" => pomyślnie usunięto "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1d690b99-9cb4-4e55-804b-d94daa535af2}\\DhcpNameServer" => pomyślnie usunięto "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{ce67997f-52aa-47b6-bfc2-36d7d82ee218}\\DhcpNameServer" => pomyślnie usunięto "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{d22ba5cf-3f1a-4684-9500-e705049fec61}\\DhcpNameServer" => pomyślnie usunięto HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => pomyślnie usunięto HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Policies\Microsoft\Internet Explorer => pomyślnie usunięto HKLM\Software\\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => Wartość pomyślnie przywrócono HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => Wartość pomyślnie przywrócono HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Microsoft\Internet Explorer\Main\\"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Wartość pomyślnie przywrócono HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => pomyślnie usunięto "HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => pomyślnie usunięto HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => pomyślnie usunięto HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{637D6E3C-DF93-48A5-8362-159A8AC56B11} => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => pomyślnie usunięto HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52B32DF5-BA14-40DB-AE27-945428672E8A} => pomyślnie usunięto HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\\HomeButtonPage" => pomyślnie usunięto "Edge HomePage" => pomyślnie usunięto "Edge StartupUrls" => pomyślnie usunięto "Edge DefaultSearchURL" => pomyślnie usunięto "Edge DefaultSearchKeyword" => pomyślnie usunięto "Chrome HomePage" => pomyślnie usunięto "Chrome DefaultSearchKeyword" => pomyślnie usunięto HKLM\System\CurrentControlSet\Services\VBAudioVACMME => pomyślnie usunięto VBAudioVACMME => serwis pomyślnie usunięto "C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1518970523" => nie znaleziono HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => pomyślnie usunięto HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => pomyślnie usunięto C:\ProgramData\TEMP => ":56E2E879" ADS pomyślnie usunięto "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\2d989baa-87db-479b-9f93-edcd967f0c45" => pomyślnie usunięto "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\9c258530-c2e3-4027-ab4e-0d187d9509ad" => pomyślnie usunięto ========= RemoveProxy: ========= "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => pomyślnie usunięto "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => pomyślnie usunięto "HKU\S-1-5-21-367478599-2953826314-2425126797-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => pomyślnie usunięto ========= Koniec RemoveProxy: ========= =========== EmptyTemp: ========== BITS transfer queue => 10772480 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13723359 B Java, Flash, Steam htmlcache => 291316658 B Windows/system/drivers => 6010615 B Edge => 150180 B Chrome => 229887101 B Firefox => 33907906 B Opera => 167822 B Temp, IE cache, history, cookies, recent: Default => 6656 B Users => 6656 B ProgramData => 6656 B Public => 6656 B systemprofile => 6656 B systemprofile32 => 6656 B LocalService => 6656 B NetworkService => 6656 B NoNoNoNo => 18705220 B RecycleBin => 32451397 B EmptyTemp: => 607.6 MB danych tymczasowych Usunięto. ================================ System wymagał restartu. ==== Koniec Fixlog 19:27:48 ====