Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 10.04.2024 Uruchomiony przez 30pingu (15-04-2024 21:06:27) Run:2 Uruchomiony z C:\Users\miete\Desktop Załadowane profile: 30pingu Tryb startu: Normal ============================================== fixlist - zawartość: ***************** CreateRestorePoint: CloseProcesses: Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Brak pliku) Task: {E540E321-177B-4BC6-994D-C6BD2DDD4AEC} - System32\Tasks\Opera scheduled Autoupdate 1712937973 => C:\Users\miete\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --bypasslauncher $(Arg0) (Brak pliku) FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon.xpi => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon.xpi => nie znaleziono S3 tapnordvpn; \SystemRoot\System32\drivers\tapnordvpn.sys [X] CustomCLSID: HKU\S-1-5-21-3294184972-935576208-774461254-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> "C:\Users\miete\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe" -ToastActivated => Brak pliku CustomCLSID: HKU\S-1-5-21-3294184972-935576208-774461254-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000}\localserver32 -> "C:\Program Files\NordVPN\NordVPN.exe" -ToastActivated => Brak pliku ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku AlternateDataStreams: C:\Users\miete\Desktop\adwcleaner.exe:MBAM.Zone.Identifier [140] AlternateDataStreams: C:\Users\miete\Desktop\fabric-installer-1.0.0.exe:MBAM.Zone.Identifier [160] AlternateDataStreams: C:\Users\miete\Desktop\mb-support-1.9.10.1005.exe:MBAM.Zone.Identifier [205] AlternateDataStreams: C:\Users\miete\Desktop\sysinspector_nt64.exe:MBAM.Zone.Identifier [292] AlternateDataStreams: C:\Users\miete\Desktop\VirtualBox-7.0.14-161095-Win.exe:MBAM.Zone.Identifier [159] AlternateDataStreams: C:\Users\miete\Desktop\winrar-x64-700pl.exe:MBAM.Zone.Identifier [119] AlternateDataStreams: C:\Users\miete\Downloads\MedalSetup.MjI3MTAyNzA4LDEsbm9yZWY=.exe:MBAM.Zone.Identifier [227] AlternateDataStreams: C:\Users\miete\Downloads\MediaCreationTool_22H2.exe:MBAM.Zone.Identifier [185] cmd: netsh winsock reset catalog cmd: Bitsadmin /Reset /Allusers cmd: ipconfig /flushdns RemoveProxy: ***************** Punkt przywracania został pomyślnie utworzony. Procesy zostały pomyślnie zamknięte. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E540E321-177B-4BC6-994D-C6BD2DDD4AEC}" => pomyślnie usunięto "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E540E321-177B-4BC6-994D-C6BD2DDD4AEC}" => pomyślnie usunięto C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1712937973 => pomyślnie przeniesiono "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1712937973" => pomyślnie usunięto "HKLM\Software\Mozilla\Firefox\Extensions\\light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com" => pomyślnie usunięto "HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com" => pomyślnie usunięto HKLM\System\CurrentControlSet\Services\tapnordvpn => pomyślnie usunięto tapnordvpn => serwis pomyślnie usunięto HKU\S-1-5-21-3294184972-935576208-774461254-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000} => pomyślnie usunięto HKU\S-1-5-21-3294184972-935576208-774461254-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000} => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => pomyślnie usunięto HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => pomyślnie usunięto HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => pomyślnie usunięto C:\Users\miete\Desktop\adwcleaner.exe => ":MBAM.Zone.Identifier" ADS pomyślnie usunięto C:\Users\miete\Desktop\fabric-installer-1.0.0.exe => ":MBAM.Zone.Identifier" ADS pomyślnie usunięto C:\Users\miete\Desktop\mb-support-1.9.10.1005.exe => ":MBAM.Zone.Identifier" ADS pomyślnie usunięto C:\Users\miete\Desktop\sysinspector_nt64.exe => ":MBAM.Zone.Identifier" ADS pomyślnie usunięto C:\Users\miete\Desktop\VirtualBox-7.0.14-161095-Win.exe => ":MBAM.Zone.Identifier" ADS pomyślnie usunięto C:\Users\miete\Desktop\winrar-x64-700pl.exe => ":MBAM.Zone.Identifier" ADS pomyślnie usunięto C:\Users\miete\Downloads\MedalSetup.MjI3MTAyNzA4LDEsbm9yZWY=.exe => ":MBAM.Zone.Identifier" ADS pomyślnie usunięto C:\Users\miete\Downloads\MediaCreationTool_22H2.exe => ":MBAM.Zone.Identifier" ADS pomyślnie usunięto ========= netsh winsock reset catalog ========= Sucessfully reset the Winsock Catalog. You must restart the computer in order to complete the reset. ========= Koniec CMD: ========= ========= Bitsadmin /Reset /Allusers ========= BITSADMIN version 3.0 BITS administration utility. (C) Copyright Microsoft Corp. {DD2F11FE-7BBB-4946-91AE-A99C23DB9303} canceled. {C0E8D7DB-2783-41E0-BD1B-793E46921FA4} canceled. {2356A483-7A46-4B64-9C46-2805A63C1D25} canceled. {E2C3A710-1B1D-4C4A-9496-B1BCEB440FCB} canceled. 4 out of 4 jobs canceled. ========= Koniec CMD: ========= ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= Koniec CMD: ========= ========= RemoveProxy: ========= "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => pomyślnie usunięto "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => pomyślnie usunięto "HKU\S-1-5-21-3294184972-935576208-774461254-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => pomyślnie usunięto "HKU\S-1-5-21-3294184972-935576208-774461254-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => pomyślnie usunięto ========= Koniec RemoveProxy: ========= System wymagał restartu. ==== Koniec Fixlog 21:06:42 ====