witam, jakieś dziadostwo opanowało laptopa, przekierowuje otwieraną przeglądarkę (Chrome) na chińskie strony, walczę z tym już dobre trzy tygodnie, używałem różnych programów, wertowałem internet, stosowałem zalecenia, efekt taki że "usypiałem" robola na 1-2 dni, a w trzecim dniu był na nowo. Ostatnia próba to Farbar Recovery Scan Tool, ale tu proszę o pomoc, w tych działaniach jestem zielony, kiedyś tam używałem HIJACKTHISa ale to było dawno, dawno temu. W załączeniu raporty FRST i Addition, przed wygenerowaniem raportów użyłem Adwcleaner z góry dziękuję za zainteresowanie i pomoc, pozdrawiam
Rezultaty skanu uzupeÅniajÄ
cego Farbar Recovery Scan Tool (x64) Wersja: 19-04-2017
Uruchomiony przez Jan (20-04-2017 15:19:26)
Uruchomiony z C:\Users\Jan\Desktop\NARZÄDZIA
Windows 10 Home Wersja 1607 (X64) (2016-10-11 12:57:22)
Tryb startu: Normal
==========================================================
==================== Konta użytkowników: =============================
==================== Centrum zabezpieczeÅ ========================
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje jego usuniÄcie.)
==================== Zainstalowane programy ======================
(W fixlist dozwolone tylko zaÅÄ
czanie programów adware z flagÄ
" Hidden " w celu ich uwidocznienia. Programy adware powinny zostaÄ w poprawny sposób odinstalowane.)
1kboCfEipURW Updater version 1.2.0.4 (HKLM-x32\...\1kboCfEipURW Updater_is1) (Version: 1.2.0.4 - )
Asystent uaktualnienia do systemu Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17364 - Microsoft Corporation)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0040 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.0.103 - ICEpower a/s)
CCleaner (HKLM\...\CCleaner) (Version: 5.20 - Piriform)
COMODO Internet Security Premium (HKLM\...\{C7C71F0C-4CC1-4B17-943C-96E5196DDA74}) (Version: 10.0.1.6209 - COMODO Security Solutions Inc.)
Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.3 - ASUSTek Computer Inc.)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
Evernote v. 5.9.1 (HKLM-x32\...\{5EA1DED0-5285-11E5-8AA1-0050569584E9}) (Version: 5.9.1.8742 - Evernote Corp.)
Foxit PhantomPDF (HKLM-x32\...\{39263796-F296-43AF-909C-FCF99592BAC4}) (Version: 7.2.52.1209 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
initialpage123 - Uninstall (HKLM-x32\...\{05010437-555C-4FFB-BE93-9D6215AB90E1}) (Version: - ) & lt; ==== UWAGA
initialpage123 - Uninstall (HKLM-x32\...\{2CF02168-0E9A-4894-8DF4-966C7A9246E0}) (Version: - ) & lt; ==== UWAGA
Intel(R) Chipset Device Software (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10603.192 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4300 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1067 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
LibreOffice 5.2.2.2 (HKLM-x32\...\{69751441-D5E0-4668-893F-CB797B082D09}) (Version: 5.2.2.2 - The Document Foundation)
Malwarebytes (wersja 3.0.5.1299) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
Malwarebytes Activation (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 3.0.5.1299 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-290543488-3704001229-2161073828-1001\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 16.001.06.01.503 - Huawei Technologies Co.,Ltd)
Online Application Installer (x32 Version: 2.0.0 - Microleaves) Hidden & lt; ==== UWAGA
PPTV V4.0.3.0056 (HKLM-x32\...\PPLive) (Version: 4.0.3 - PPLive Corporation)
QQæµè§å¨ (HKLM-x32\...\QQBrowser) (Version: 9.2.5583.400 - è
¾è®¯ç§æï¼æ·±å³ï¼æéå
¬å¸) & lt; ==== UWAGA
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 10.0.1.2 - Qualcomm Atheros)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek)
Skype⢠7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.104 - Skype Technologies S.A.)
UnHackMe 8.20 (HKLM-x32\...\UnHackMe_is1) (Version: - Greatis Software, LLC.)
Uninstall Tool (HKLM\...\Uninstall Tool_is1) (Version: 3.5.1 - CrystalIDEA Software, Inc.)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
USB device MF63 Hostless Modem (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.1.1.8 - WildTangent)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.0.1 - ASUS)
WinRAR 5.40 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
æ´é£å½±é³5 (HKLM-x32\...\StormPlayer) (Version: 5.68.0228.1111 - å京æ´é£ç§æè¡ä»½æéå
¬å¸)
çµè管家11.5 (HKLM-x32\...\QQPCMgr) (Version: 11.5.17499.219 - è
¾è®¯ç§æ(æ·±å³)æéå
¬å¸) & lt; ==== UWAGA
==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje jego usuniÄcie z rejestru. PowiÄ
zany plik nie zostanie przeniesiony, o ile nie zostanie zaÅÄ
czony z osobna.)
==================== Zaplanowane zadania (filtrowane) =============
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje jego usuniÄcie z rejestru. PowiÄ
zany plik nie zostanie przeniesiony, o ile nie zostanie zaÅÄ
czony z osobna.)
Task: {F85A086C-EF92-460E-9373-F2CC8F6E5870} - Brak Åcieżki do pliku
Task: {0F2AE710-016C-4A9B-B50B-B65F00CCA230} - System32\Tasks\{28C3616C-D06B-4D18-BC82-2754E005602A} = & gt; pcalua.exe -a " C:\Windows\system32\SupportAppPBHostless Modem\Setup.exe " -c /uninstall
Task: {15C3BE8C-0506-401C-8AEA-CE06CBA7EA85} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-06] (COMODO)
Task: {2F4F691C-430C-4274-AF70-9C45E6791A10} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-06] (COMODO)
Task: {33E51AC5-43A4-42F8-AA0A-0B0335403D5C} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-06] (COMODO)
Task: {3590557A-C15F-4096-A3B9-C6FE3A06EF4B} - System32\Tasks\CCleanerSkipUAC = & gt; C:\Program Files\CCleaner\CCleaner.exe [2017-03-20] (Piriform Ltd)
Task: {3A09E275-7AFD-4A5A-82D5-8962171A6B5F} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-06] (COMODO)
Task: {5F3EEEE5-5AEF-4C15-AF8B-E8180448FDB0} - System32\Tasks\RunUninstallTool_SkipUac = & gt; C:\Program Files\Uninstall Tool\UninstallTool.exe [2016-09-16] (CrystalIDEA Software)
Task: {7173530E-735B-4429-8208-31C76BD424F7} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-06] (COMODO)
Task: {71E4BF57-EB1D-4949-BD97-169677466ECF} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2017-04-06] (COMODO)
Task: {758D18B5-4B92-47DD-931A-C26D9208EBF3} - System32\Tasks\DropboxUpdateTaskMachineUA = & gt; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-09] (Dropbox, Inc.)
Task: {806E8565-07C5-4C29-8117-5683FCE988BC} - System32\Tasks\Trojan Remover = & gt; C:\Program Files\Loaris Trojan Remover\ltr.exe
Task: {9409D5A5-4396-4672-A08D-584CC38BF4C0} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2017-04-06] (COMODO)
Task: {B353B1A3-D11A-450C-8372-3B7994A82255} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-04-06] (COMODO)
Task: {BA193F1C-0122-48F1-860C-54DEF154D970} - System32\Tasks\ATK Package A22126881260 = & gt; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.)
Task: {D450C219-79A2-4571-8007-A13B5E2DF9E7} - System32\Tasks\ASUS\ASUS Product Register Service = & gt; C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-01-19] (ASUSTek Computer Inc.)
Task: {F0936EEC-49C7-412A-87ED-C37C8539F9B1} - System32\Tasks\GoogleUpdateTaskMachineUA = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-07] (Google Inc.)
Task: {F6D32DA6-BC20-4E8F-86B2-11B75716779A} - System32\Tasks\ATK Package 36D18D69AFC3 = & gt; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.)
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje przesuniÄcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job = & gt; C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job = & gt; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\UCBrowserUpdater.job = & gt; C:\Program Files (x86)\UCBrowser\Application\update_task.exe & lt; ==== UWAGA
Task: C:\WINDOWS\Tasks\QQBrowser Updater Task.job = & gt; C:\Program Files (x86)\Tencent\QQBrowser\qqbrowser.exe & lt; ==== UWAGA
==================== Skróty =============================
(Wybrane wejÅcia mogÄ
zostaÄ zaÅÄ
czone w celu ich zresetowania lub usuniÄcia.)
ShortcutWithArgument: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\poczta (1).lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=hcjadopoenpcjhdnknblbddcmlnlefid
ShortcutWithArgument: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\poczta.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=hcjadopoenpcjhdnknblbddcmlnlefid
ShortcutWithArgument: C:\Users\Jan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default
==================== ZaÅadowane moduÅy (filtrowane) ==============
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-10-11 15:04 - 2016-10-11 15:04 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-04-06 16:55 - 2017-04-05 07:58 - 00156352 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdwrhlp.dll
2016-09-15 00:02 - 2017-04-05 07:57 - 00107200 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll
2016-09-15 00:03 - 2017-04-05 07:57 - 00244928 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll
2016-03-16 11:25 - 2016-03-16 11:25 - 00073912 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2015-05-19 10:11 - 2015-05-19 10:11 - 00007680 _____ () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
2016-10-11 15:04 - 2016-10-11 15:04 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2016-10-11 15:04 - 2016-10-11 15:04 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-11 15:04 - 2016-10-11 15:04 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-11 15:04 - 2016-10-11 15:04 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-11 15:04 - 2016-10-11 15:04 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-11 15:04 - 2016-10-11 15:04 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-11 15:04 - 2016-10-11 15:04 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-11 15:04 - 2016-10-11 15:04 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-10-11 15:33 - 2016-10-11 15:34 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-10-11 15:33 - 2016-10-11 15:34 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-11 15:33 - 2016-10-11 15:34 - 35250688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-03-30 13:37 - 2017-03-29 10:47 - 02885464 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libglesv2.dll
2017-03-30 13:37 - 2017-03-29 10:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libegl.dll
2017-04-18 11:29 - 2017-04-18 09:10 - 00313344 _____ () C:\Program Files (x86)\1kboCfEipURW Updater\1kboCfEipURW Updater.exe
2017-04-18 10:43 - 2017-04-18 10:43 - 00088416 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17499.219\zlib.dll
2017-04-18 10:42 - 2017-04-18 10:42 - 00115904 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17499.219\QMAntiInject.dll
2017-04-18 10:43 - 2017-04-18 10:43 - 00488640 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17499.219\sqlite.dll
2017-04-18 10:43 - 2017-04-18 10:43 - 00100704 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17499.219\tinyxml.dll
2017-04-18 10:43 - 2017-04-18 10:43 - 00046784 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17499.219\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll
2017-04-18 10:43 - 2017-04-18 10:43 - 00070848 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17499.219\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll
2017-04-18 10:43 - 2017-04-18 10:43 - 00128192 _____ () c:\program files (x86)\tencent\qqpcmgr\11.5.17499.219\qmrtpcontroller.dll
2017-04-18 10:42 - 2016-02-28 00:55 - 00036128 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17499.219\oDayProtect.dll
==================== Alternate Data Streams (filtrowane) =========
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje usuniÄcie strumienia ADS.)
AlternateDataStreams: C:\autoexec.bat:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\drivers:ucdrv-x64.sys [0]
AlternateDataStreams: C:\WINDOWS\system32\drivers:x64 [0]
AlternateDataStreams: C:\WINDOWS\system32\drivers:x86 [0]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\mbae64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ptun0901.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\Jan\Downloads\15-KB-14137-[www.gdansk.pl] (1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Jan\Downloads\15-KB-14137-[www.gdansk.pl].pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Jan\Downloads\Audio_Realtek_Win7_64_Z6016685.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Jan\Downloads\dietawuchylkowoscijelitagrubego (1).doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Jan\Downloads\dietawuchylkowoscijelitagrubego (2).doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Jan\Downloads\dietawuchylkowoscijelitagrubego.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Jan\Downloads\goralu_czy_ci_nie_zal (1).wma:$CmdZnID [26]
AlternateDataStreams: C:\Users\Jan\Downloads\goralu_czy_ci_nie_zal.wma:$CmdZnID [26]
AlternateDataStreams: C:\Users\Jan\Downloads\SkypeSetupFull.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Jan\Downloads\SkypeSetupFull.exe:$CmdZnID [26]
==================== Tryb awaryjny (filtrowane) ===================
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje jego usuniÄcie z rejestru. WartoÅÄ " AlternateShell " zostanie przywrócona.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP = & gt; " " = " service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP = & gt; " " = " service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy = & gt; " " = " Driver "
==================== PowiÄ
zania plików (filtrowane) ===============
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje usuniÄcie obiektu z rejestru lub przywrócenie jego domyÅlnej postaci.)
==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje jego usuniÄcie z rejestru.)
==================== Hosts - zawartoÅÄ: ===============================
(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
2015-10-30 09:24 - 2017-03-31 13:43 - 00000734 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Inne obszary ============================
(Obecnie brak automatycznej naprawy dla tej sekcji.)
HKU\S-1-5-21-290543488-3704001229-2161073828-1001\Control Panel\Desktop\\Wallpaper - & gt; C:\Users\Jan\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{6075108c-811e-438c-b4a5-6d5544a99010}.JPG
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System = & gt; (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
mpsdrv = & gt; UsÅuga " Zapora systemu Windows " nie jest uruchomiona.
MpsSvc = & gt; UsÅuga " Zapora systemu Windows " nie jest uruchomiona.
bfe = & gt; UsÅuga " Zapora systemu Windows " nie jest uruchomiona.
==================== MSCONFIG/TASK MANAGER - WyÅÄ
czone elementy ==
==================== ReguÅy Zapory systemu Windows (filtrowane) ===============
(ZaÅÄ
czenie wejÅcia w fixlist spowoduje jego usuniÄcie z rejestru. PowiÄ
zany plik nie zostanie przeniesiony, o ile nie zostanie zaÅÄ
czony z osobna.)
FirewallRules: [vm-monitoring-nb-session] = & gt; (Allow) LPort=139
FirewallRules: [{94DA6994-30D7-4B63-A43F-1E8E3E51C1A4}] = & gt; (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{FF563B78-6023-476E-81B8-A1FDFCF707BE}] = & gt; (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{83864E78-47DB-4FD8-AF90-1CA659D77B1A}] = & gt; (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{78456A5A-8CED-43B6-996F-60D46577D8A2}] = & gt; (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{95AF5D36-51C8-41B0-819F-6018E545C79F}] = & gt; (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{B378E872-77C0-4C3D-A158-C0A74B03B2AA}] = & gt; (Allow) C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
FirewallRules: [{B79892EB-B6A1-4AE3-A76D-120AA82B4028}] = & gt; (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{9DFDAA79-384F-4C30-8534-5635FEEFCC4B}] = & gt; (Allow) C:\Users\Jan\AppData\Local\Temp\FlowSpritSetup_slnt_5016.exe
==================== Punkty Przywracania systemu =========================
Niepowodzenie przy listowaniu punktów przywracania
Sprawdź usÅugÄ " winmgmt " lub napraw WMI.
==================== Wadliwe urzÄ
dzenia w Menedżerze urzÄ
dzeÅ =============
Niepowodzenie przy listowaniu urzÄ
dzeÅ. Sprawdź usÅugÄ " winmgmt " lub napraw WMI.
==================== BÅÄdy w Dzienniku zdarzeÅ: =========================
Niepowodzenie przy uruchamianiu usÅugi " eventlog " , nie można odczytaÄ zdarzeÅ.
Wyst¥pi b¥d systemu 123.
Nazwa pliku, nazwa katalogu lub skadnia etykiety woluminu jest niepoprawna.
==================== Statystyki pamiêci ===========================
Procesor: Intel(R) Pentium(R) CPU N3700 @ 1.60GHz
Procent pamiêci w u¿yciu: 44%
Ca³kowita pamiêæ fizyczna: 3999.94 MB
Dostêpna pamiêæ fizyczna: 2221.59 MB
Ca³kowita pamiêæ wirtualna: 4703.94 MB
Dostêpna pamiêæ wirtualna: 2750.91 MB
==================== Dyski ================================
Drive c: (OS) (Fixed) (Total:371.85 GB) (Free:331.31 GB) NTFS == & gt; [system z komponentami startowymi (pozyskano odczytuj¹c dysk)]
Drive d: (DATA) (Fixed) (Total:558.91 GB) (Free:540.38 GB) NTFS
==================== MBR & Tablica partycji ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 2A97F868)
Partition: GPT.
==================== Koniec Addition.txt ============================