Czy po zrobieniu Fixa wykonać czymś ponownie skan czy nie? ------------------------------------------------------- Fix wykonany, wstawiam fixloga w załączniku
Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja:07-01-2015
Uruchomiony przez Cebar (2016-01-08 21:56:12) Run:1
Uruchomiony z C:\Users\Cebar\Downloads
Załadowane profile: Cebar (Dostępne profile: Cebar)
Tryb startu: Normal
==============================================
fixlist - zawartość:
*****************
Task: {03A1BDDF-3D3C-4853-9CFA-8EB51E4356DE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent - & gt; Brak pliku & lt; ==== UWAGA
Task: {12F81E41-64EA-427D-8901-96A386CF4CE8} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent - & gt; Brak pliku & lt; ==== UWAGA
Task: {3A39747F-32FD-4890-B106-6215C14FED96} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig - & gt; Brak pliku & lt; ==== UWAGA
Task: {55360182-B433-447C-8917-5820764D1A81} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {56119769-9C22-4E1B-A813-7C08738C0887} - \Microsoft\Windows\Setup\gwx\launchtrayprocess - & gt; Brak pliku & lt; ==== UWAGA
Task: {71EAF5E9-F549-4FB9-84D9-4DE77EA5CE9F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {9C324F7F-A913-45EE-8E29-3D61EEBFF989} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {BB99544F-7A05-46FB-B693-5D83D88AA227} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B - & gt; Brak pliku & lt; ==== UWAGA
Task: {DB0F52D1-9F58-49EB-AE30-B8955136276E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {E27FF127-DA91-4803-8455-7365C633970D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {F9C04B7C-9401-4C2A-9A1B-74E141B037B2} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd - & gt; Brak pliku & lt; ==== UWAGA
(TU-Funs LIMITED) C:\ProgramData\FWdMF\WdMan.exe
(tsvr.com) C:\Users\Cebar\AppData\Roaming\TSv\TSvr.exe
(TODO: & lt; ??? & gt; ) C:\Program Files (x86)\SFK\SSFK.exe
HKU\S-1-5-21-756051386-3146181948-205781377-1001\...\MountPoints2: {c5fc0ac0-9b72-11e5-9176-68f728706531} - " F:\AutoRun.exe "
HKU\S-1-5-21-756051386-3146181948-205781377-1001\...\MountPoints2: {c5fc0c2e-9b72-11e5-9176-68f728706531} - " F:\AutoRun.exe "
HKU\S-1-5-21-756051386-3146181948-205781377-1001\...\MountPoints2: {ca56628e-9c67-11e5-8262-68f728706531} - " F:\SETUP.EXE "
SearchScopes: HKU\S-1-5-21-756051386-3146181948-205781377-1001 - & gt; DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
CHR StartupUrls: Default - & gt; " hxxp://www.yoursites123.com/?type=hp & ts=1452248306 & z=eba6ccf83f7e8b21db79dd4gez6waofo6z5b6c0e6q & from=wpm01073 & uid=WDCXWD5000LPCX-24C6HT0_WD-WX51A94DRCRNDRCRN "
S3 mfeaack01; \Device\mfeaack01.sys [X]
2016-01-08 11:18 - 2016-01-08 20:50 - 00000000 ____D C:\ProgramData\FWdMF
2016-01-08 11:18 - 2016-01-08 20:50 - 00000000 ____D C:\Program Files (x86)\SFK
2016-01-08 11:18 - 2016-01-08 11:18 - 00000000 ____D C:\Users\Cebar\AppData\Roaming\TSv
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
EmptyTemp:
*****************
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{03A1BDDF-3D3C-4853-9CFA-8EB51E4356DE} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{03A1BDDF-3D3C-4853-9CFA-8EB51E4356DE} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{12F81E41-64EA-427D-8901-96A386CF4CE8} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12F81E41-64EA-427D-8901-96A386CF4CE8} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3A39747F-32FD-4890-B106-6215C14FED96} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3A39747F-32FD-4890-B106-6215C14FED96} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{55360182-B433-447C-8917-5820764D1A81} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55360182-B433-447C-8917-5820764D1A81} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{56119769-9C22-4E1B-A813-7C08738C0887} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56119769-9C22-4E1B-A813-7C08738C0887} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{71EAF5E9-F549-4FB9-84D9-4DE77EA5CE9F} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{71EAF5E9-F549-4FB9-84D9-4DE77EA5CE9F} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9C324F7F-A913-45EE-8E29-3D61EEBFF989} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C324F7F-A913-45EE-8E29-3D61EEBFF989} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BB99544F-7A05-46FB-B693-5D83D88AA227} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BB99544F-7A05-46FB-B693-5D83D88AA227} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DB0F52D1-9F58-49EB-AE30-B8955136276E} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DB0F52D1-9F58-49EB-AE30-B8955136276E} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E27FF127-DA91-4803-8455-7365C633970D} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E27FF127-DA91-4803-8455-7365C633970D} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F9C04B7C-9401-4C2A-9A1B-74E141B037B2} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9C04B7C-9401-4C2A-9A1B-74E141B037B2} " = & gt; klucz pomyślnie usunięto
" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd " = & gt; klucz pomyślnie usunięto
[2304] C:\ProgramData\FWdMF\WdMan.exe = & gt; proces pomyślnie zamknięty.
[8012] C:\Users\Cebar\AppData\Roaming\TSv\TSvr.exe = & gt; proces pomyślnie zamknięty.
[5976] C:\Program Files (x86)\SFK\SSFK.exe = & gt; proces pomyślnie zamknięty.
" HKU\S-1-5-21-756051386-3146181948-205781377-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c5fc0ac0-9b72-11e5-9176-68f728706531} " = & gt; klucz pomyślnie usunięto
HKCR\CLSID\{c5fc0ac0-9b72-11e5-9176-68f728706531} = & gt; klucz nie znaleziono.
" HKU\S-1-5-21-756051386-3146181948-205781377-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c5fc0c2e-9b72-11e5-9176-68f728706531} " = & gt; klucz pomyślnie usunięto
HKCR\CLSID\{c5fc0c2e-9b72-11e5-9176-68f728706531} = & gt; klucz nie znaleziono.
" HKU\S-1-5-21-756051386-3146181948-205781377-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ca56628e-9c67-11e5-8262-68f728706531} " = & gt; klucz pomyślnie usunięto
HKCR\CLSID\{ca56628e-9c67-11e5-8262-68f728706531} = & gt; klucz nie znaleziono.
HKU\S-1-5-21-756051386-3146181948-205781377-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope = & gt; Wartość pomyślnie usunięto
Chrome StartupUrls = & gt; pomyślnie usunięto
mfeaack01 = & gt; serwis pomyślnie usunięto
C:\ProgramData\FWdMF = & gt; pomyślnie przeniesiono
C:\Program Files (x86)\SFK = & gt; pomyślnie przeniesiono
C:\Users\Cebar\AppData\Roaming\TSv = & gt; pomyślnie przeniesiono
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat = & gt; pomyślnie przeniesiono
EmptyTemp: = & gt; 768.6 MB danych tymczasowych Usunięto.
System wymagał restartu.
==== Koniec Fixlog 21:57:35 ====