Elektroda.pl
Elektroda.pl
X
Please add exception to AdBlock for elektroda.pl.
If you watch the ads, you support portal and users.

GT - Nie mogę pozbyć się skrótu.

dariusz2021 07 May 2020 12:40 681 30
Automation24
  • #1
    dariusz2021
    Level 9  
    Witam. Nie mogę pozbyć się skrótu u Torrent Web ze startu? Pisze, że usuń z historii urządzenia i powraca z powrotem, a nie ma go w panelu. Przeszukałem partycje C i nic. On otwierał się poprzez przeglądarkę chrome, ale to było 2 lata temu?
  • Automation24
  • Automation24
  • Helpful post
    #3
    Kolobos
    IT specialist
    Najlepiej razem z shortcuts.txt.
  • #6
    Kolobos
    IT specialist
    Masz zamiescic trzy pliki w zalaczniku.
  • #8
    Kolobos
    IT specialist
    Z jakiego powodu? Mozesz gdzies wrzucic i podac link.
  • #9
    dariusz2021
    Level 9  
    Gdzie mam zamieścić? :)

    Chyba FRST - Dodano po 1 [minuty]:

    Spoiler:
    Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 03-05-2020
    Uruchomiony przez MIREK (07-05-2020 20:45:09)
    Uruchomiony z C:\Users\MIREK\Desktop
    Windows 10 Pro Wersja 1909 18363.778 (X64) (2020-02-24 20:33:30)
    Tryb startu: Normal
    ==========================================================


    ==================== Konta użytkowników: =============================

    Administrator (S-1-5-21-1336633738-752808029-2423238736-500 - Administrator - Disabled)
    Gość (S-1-5-21-1336633738-752808029-2423238736-501 - Limited - Disabled)
    Konto domyślne (S-1-5-21-1336633738-752808029-2423238736-503 - Limited - Disabled)
    MIREK (S-1-5-21-1336633738-752808029-2423238736-1001 - Administrator - Enabled) => C:\Users\MIREK
    WDAGUtilityAccount (S-1-5-21-1336633738-752808029-2423238736-504 - Limited - Disabled)

    ==================== Centrum zabezpieczeń ========================

    (Załączenie wejścia w fixlist spowoduje jego usunięcie.)

    AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Zainstalowane programy ======================

    (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

    µTorrent (HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\uTorrent) (Version: 3.5.5.45628 - BitTorrent Inc.)
    4K YouTube to MP3 3.10 (HKLM\...\{C6C89131-2764-42F3-9821-A40B39831DB5}) (Version: 3.10.1.3255 - Open Media LLC)
    64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
    Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 20.006.20042 - Adobe Systems Incorporated)
    Aktualizacje NVIDIA 38.0.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.4.0 - NVIDIA Corporation)
    ASRock Restart to UEFI v1.0.5 (HKLM-x32\...\ASRock Restart to UEFI_is1) (Version: 1.0.5 - )
    Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 24.0.1.162 - Bitdefender)
    Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 24.0.4.702 - Bitdefender)
    BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
    CCleaner (HKLM\...\CCleaner) (Version: 5.53 - Piriform)
    Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
    CPUID CPU-Z 1.88 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.88 - CPUID, Inc.)
    CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
    CrystalDiskInfo 8.1.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.1.0 - Crystal Dew World)
    Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
    DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
    DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 419.17 - NVIDIA Corporation) Hidden
    DJ_AIO_03_F2200_Software_Min (HKLM-x32\...\{2711B584-259B-4723-A6F2-F3CFA291AFA2}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
    DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden
    F2200 (HKLM-x32\...\{C81DA04A-1D44-4D4A-8108-5129331BBA00}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
    Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.3.10.124 - Digital Wave Ltd)
    FxSound Enhancer (HKLM-x32\...\FxSound Enhancer) (Version: 13.027 - FxSound)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 81.0.4044.138 - Google LLC)
    Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
    GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
    HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
    HP Deskjet F2200 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{60D6AAC5-FDC1-49BA-867B-3135F4726156}) (Version: 14.0 - HP)
    HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
    HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
    HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
    HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
    Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
    Java 8 Update 221 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180221F0}) (Version: 8.0.2210.11 - Oracle Corporation)
    K-Lite Codec Pack 10.9.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - )
    MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
    McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.92 - McAfee, LLC.)
    Microsoft .NET Core SDK 2.2.402 (x64) (HKLM-x32\...\{16c97bbc-c1e6-4fd6-92c5-c1f20dec9c1f}) (Version: 2.2.402 - Microsoft Corporation)
    Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
    Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
    Need for Speed - Most Wanted (HKLM-x32\...\Need for Speed - Most Wanted_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
    Nero 7 Essentials (HKLM-x32\...\{66EBD70F-A42C-475F-AEDF-277378151045}) (Version: 7.02.9491 - Nero AG)
    NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
    NVIDIA GeForce Experience 3.17.0.126 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.17.0.126 - NVIDIA Corporation)
    NVIDIA Oprogramowanie systemu PhysX 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
    NVIDIA Sterownik graficzny 442.59 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 442.59 - NVIDIA Corporation)
    NVIDIA Sterownik kontrolera 3D Vision 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
    OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
    Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{c6cff78a-cccb-49d5-be68-ae0ec5f0d48a}) (Version: 10.1.1.8 - Intel(R) Corporation) Hidden
    Panel sterowania NVIDIA 419.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 419.17 - NVIDIA Corporation) Hidden
    Phone Nokia USB Driver (HKLM-x32\...\{7F1C627F-7F07-4B51-B50F-FF8C64881D6E}) (Version: 1.1.0 - Mobile)
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7614 - Realtek Semiconductor Corp.)
    Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
    Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
    Skype (wersja 8.56) (HKLM-x32\...\Skype_is1) (Version: 8.56 - Skype Technologies S.A.)
    SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden
    Spotify (HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\Spotify) (Version: 1.1.28.721.g5b5ee660 - Spotify AB)
    Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden
    TeamViewer 14 (HKLM-x32\...\TeamViewer) (Version: 14.2.8352 - TeamViewer)
    Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden
    TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
    WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden
    Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
    WinEject (HKLM-x32\...\WinEject) (Version: 2.00 - Ingo Heeskens)
    WinRAR 5.61 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)

    Packages:
    =========
    Dodatek Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2019-12-05] (Microsoft Corporation)
    Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_480.5.121.0_x64__8xx8rvfyw5nnt [2020-04-30] (Facebook Inc)
    Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-03-02] (Microsoft Corporation) [MS Ad]
    Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-03-02] (Microsoft Corporation) [MS Ad]
    Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-03] (Microsoft Studios) [MS Ad]
    MSN Pogoda -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
    NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2019-09-30] (NVIDIA Corp.)
    UnRar Metro -> C:\Program Files\WindowsApps\1253QUANTUMVM.UNRARMETRO_14.3.0.0_x64__ckbnxvahp5f44 [2020-03-25] (QuantumVM)

    ==================== Niestandardowe rejestracje CLSID (filtrowane): ==============

    (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

    ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku
    ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku
    ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku
    ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku
    ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku
    ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku
    ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku
    ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku
    ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku
    ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku
    ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku
    ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku
    ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku
    ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku
    ContextMenuHandlers1-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll [2007-06-22] (Nero AG -> Nero AG)
    ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-10-27] (win.rar GmbH -> Alexander Roshal)
    ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-10-27] (win.rar GmbH -> Alexander Roshal)
    ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvrf.inf_amd64_4afd869c5c40abd6\nvshext.dll [2020-03-29] (NVIDIA Corporation -> NVIDIA Corporation)
    ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-10-27] (win.rar GmbH -> Alexander Roshal)
    ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-10-27] (win.rar GmbH -> Alexander Roshal)

    ==================== Codecs (filtrowane) ====================

    (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

    HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [71680 2012-08-30] (Beepa P/L) [Brak podpisu cyfrowego]
    HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2012-08-30] (Beepa P/L) [Brak podpisu cyfrowego]

    ==================== Skróty & WMI ========================

    (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)

    ShortcutWithArgument: C:\Users\MIREK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default

    ==================== Załadowane moduły (filtrowane) =============

    2015-06-23 17:00 - 2015-06-23 17:00 - 000285696 _____ ( (Intel Corporation) [Brak podpisu cyfrowego]) [Plik w użyciu ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 003502080 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax
    2020-02-23 22:18 - 2014-12-12 20:00 - 004015616 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffmpeg.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 000236544 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\libbluray.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 000494080 _____ (1f0.de - Hendrik Leppkes) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\LAVSplitter.ax
    2020-02-23 22:18 - 2014-12-12 20:00 - 000942080 _____ (1f0.de - Hendrik Leppkes) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\LAVVideo.ax
    2020-02-23 22:18 - 2014-12-12 20:00 - 008408064 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avcodec-lav-56.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 000179712 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avfilter-lav-5.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 001480704 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avformat-lav-56.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 000152064 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avresample-lav-2.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 000390656 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avutil-lav-54.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 000468480 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\swscale-lav-3.dll
    2015-06-23 17:00 - 2015-06-23 17:00 - 000562688 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
    2020-02-23 22:18 - 2014-12-12 20:00 - 000163840 _____ (MPC-HC Team) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC\Lang\mpcresources.pl.dll

    ==================== Alternate Data Streams (filtrowane) ========

    ==================== Tryb awaryjny (filtrowane) ==================

    ==================== Powiązania plików (filtrowane) =================

    ==================== Internet Explorer - Witryny zaufane i z ograniczeniami ==========

    (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)

    IE trusted site: HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\localhost -> localhost
    IE trusted site: HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\webcompanion.com -> hxxp://webcompanion.com

    ==================== Hosts - zawartość: =========================

    (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

    2018-09-15 09:31 - 2020-05-07 18:59 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

    2020-04-15 09:42 - 2020-04-15 09:52 - 000000375 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

    ==================== Inne obszary ===========================

    (Obecnie brak automatycznej naprawy dla tej sekcji.)

    HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\dotnet\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
    HKU\S-1-5-21-1336633738-752808029-2423238736-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\MIREK\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\Bez tytułu.png
    DNS Servers: 192.168.1.1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
    Zapora systemu Windows [funkcja włączona]

    ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

    (Załączenie wejścia w fixlist spowoduje jego usunięcie.)

    HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
    HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\StartupApproved\Run: => "vidnotifier.exe"

    ==================== Reguły Zapory systemu Windows (filtrowane) ================

    (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

    FirewallRules: [{6989C87F-FC76-48A0-A9C1-41C1CE7F3218}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
    FirewallRules: [{61647CF9-7FED-4B91-9463-A86F8D892CA4}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
    FirewallRules: [UDP Query User{AF92D79D-E12F-4E7B-9911-BC7C6A114632}C:\users\mirek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\mirek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
    FirewallRules: [TCP Query User{863FCC4B-10E4-42E6-AD16-4B1356BC431C}C:\users\mirek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\mirek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
    FirewallRules: [{55F2344B-143B-4FCA-8E91-575C6F3FE1E7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
    FirewallRules: [{83495812-9E8E-4967-82A1-80EE369C59C7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
    FirewallRules: [{92E13B1C-1D54-4FA5-8A6E-59C7E24702DA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
    FirewallRules: [{B8695D7B-61C3-4F99-BBC9-4E9896A38298}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
    FirewallRules: [UDP Query User{0144F864-3063-44E6-AA0E-2C4E4DE17FFB}C:\users\mirek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\mirek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
    FirewallRules: [TCP Query User{48655BCE-41C3-4708-8EE6-F6632D7FE163}C:\users\mirek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\mirek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
    FirewallRules: [{66819AE8-B58C-4149-BAC4-E6427313FD83}] => (Allow) LPort=1688
    FirewallRules: [{E64EB122-D89D-4E0A-9320-AE1A1466AC60}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
    FirewallRules: [{89CA5F9E-E5BE-4E24-910D-09EEFD82B935}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
    FirewallRules: [{A8050677-1D7C-4110-8827-6DDD17C5B164}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
    FirewallRules: [{6C54AD47-59A6-4724-B6D6-6B6998B7155E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
    FirewallRules: [{7593BC3D-A431-41FF-A960-55CB428C525D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
    FirewallRules: [{C3147125-A18F-4315-A389-00C7A3691749}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
    FirewallRules: [{0ACD34AC-025E-4B03-855D-D6EDA9AE469D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
    FirewallRules: [{B9E2C362-E9EA-4238-A3CD-B2F606C70D02}] => (Allow) C:\Users\MIREK\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
    FirewallRules: [{7635ECB5-E52B-4F40-AC7B-DED6DBB3126A}] => (Allow) C:\Users\MIREK\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

    ==================== Punkty Przywracania systemu =========================

    16-04-2020 15:41:53 Windows Update
    25-04-2020 06:02:26 Zaplanowany punkt kontrolny
    27-04-2020 15:07:47 Installed Phone Nokia USB Driver
    06-05-2020 18:36:20 Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020

    ==================== Wadliwe urządzenia w Menedżerze urządzeń ============

    Name: AnchorFree TAP-Windows Adapter V9
    Description: AnchorFree TAP-Windows Adapter V9
    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
    Manufacturer: AnchorFree TAP-Windows Provider V9
    Service: aftap0901
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


    ==================== Błędy w Dzienniku zdarzeń: ========================

    Dziennik Aplikacja:
    ==================
    Error: (05/07/2020 08:45:43 PM) (Source: ESENT) (EventID: 455) (User: )
    Description: svchost (11064,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

    Error: (05/07/2020 08:36:46 PM) (Source: ESENT) (EventID: 455) (User: )
    Description: svchost (3992,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

    Error: (05/07/2020 08:05:13 PM) (Source: ESENT) (EventID: 455) (User: )
    Description: svchost (9496,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

    Error: (05/07/2020 07:54:06 PM) (Source: ESENT) (EventID: 455) (User: )
    Description: svchost (2076,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

    Error: (05/07/2020 07:32:36 PM) (Source: ESENT) (EventID: 455) (User: )
    Description: svchost (8652,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

    Error: (05/07/2020 07:25:32 PM) (Source: ESENT) (EventID: 455) (User: )
    Description: svchost (7480,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

    Error: (05/07/2020 07:17:11 PM) (Source: ESENT) (EventID: 455) (User: )
    Description: svchost (7872,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

    Error: (05/07/2020 07:11:37 PM) (Source: ESENT) (EventID: 455) (User: )
    Description: svchost (11836,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.


    Dziennik System:
    =============
    Error: (05/05/2020 05:14:29 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: ZARZĄDZANIE NT)
    Description: Uruchomienie usługi BITS nie powiodło się. Błąd 2147500053.

    Error: (05/04/2020 09:52:17 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
    Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_1541ff0.

    Error: (05/04/2020 08:37:58 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
    Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_1541ff0.

    Error: (05/03/2020 08:39:03 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
    Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_6ca62.

    Error: (05/03/2020 02:09:39 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
    Description: Usługa Synchronizuj hosta_145de3f zakończyła działanie; wystąpił następujący błąd:
    Usługa uwierzytelniania jest nieznana.

    Error: (05/02/2020 09:12:35 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
    Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_473c5b5.

    Error: (05/01/2020 12:57:46 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
    Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_a3dccc.

    Error: (04/30/2020 07:54:01 PM) (Source: EventLog) (EventID: 6008) (User: )
    Description: Poprzednie zamknięcie systemu przy 19:42:39 na ‎30.‎04.‎2020 było nieoczekiwane.


    Windows Defender:
    ===================================
    Date: 2020-04-05 13:07:24.422
    Description:
    Skanowanie produktu Program antywirusowy Windows Defender zostało zatrzymane przed ukończeniem.
    Identyfikator skanowania: {F13BBB01-4430-4864-9313-F96A3DDEF8F9}
    Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem
    Parametry skanowania: Szybkie skanowanie
    Użytkownik: ZARZĄDZANIE NT\SYSTEM

    Date: 2020-04-04 09:57:42.161
    Description:
    Skanowanie produktu Program antywirusowy Windows Defender zostało zatrzymane przed ukończeniem.
    Identyfikator skanowania: {1F9EC89B-67FD-41AE-8A81-58FD5538AD89}
    Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem
    Parametry skanowania: Szybkie skanowanie
    Użytkownik: ZARZĄDZANIE NT\SYSTEM

    Date: 2020-04-04 09:47:00.416
    Description:
    Skanowanie produktu Program antywirusowy Windows Defender zostało zatrzymane przed ukończeniem.
    Identyfikator skanowania: {D55EEA9E-1128-4CEC-8733-EF88151FBBE3}
    Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem
    Parametry skanowania: Szybkie skanowanie
    Użytkownik: ZARZĄDZANIE NT\SYSTEM

    Date: 2020-03-31 09:58:57.168
    Description:
    Skanowanie produktu Program antywirusowy Windows Defender zostało zatrzymane przed ukończeniem.
    Identyfikator skanowania: {27F36316-1AC9-408D-99E4-D500467F0BAA}
    Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem
    Parametry skanowania: Szybkie skanowanie
    Użytkownik: ZARZĄDZANIE NT\SYSTEM

    Date: 2020-03-28 20:10:04.889
    Description:
    Produkt Program antywirusowy Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
    Aby uzyskać więcej informacji, zobacz:
    https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Generic!rfn&threatid=2147744279&enterprise=0
    Nazwa: Trojan:Win32/Generic!rfn
    Identyfikator: 2147744279
    Ważność: Poważny
    Kategoria: Koń trojański
    Ścieżka: file:_C:\Users\MIREK\AppData\Local\Temp\in503B81E5\5DC6D185_stp.exe
    Pochodzenie wykrycia: Komputer lokalny
    Typ wykrycia: Konkretne
    Źródło wykrycia: Ochrona w czasie rzeczywistym
    Użytkownik: DESKTOP-4I4TT55\MIREK
    Nazwa procesu: C:\Users\MIREK\Desktop\mailpv_setup_2807931358.exe
    Wersja analizy zabezpieczeń: AV: 1.313.260.0, AS: 1.313.260.0, NIS: 1.313.260.0
    Wersja aparatu: AM: 1.1.16900.4, NIS: 1.1.16900.4

    CodeIntegrity:
    ===================================

    Date: 2020-03-23 19:50:28.753
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2020-03-07 20:45:05.661
    Description:
    Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

    Date: 2020-03-07 20:45:05.487
    Description:
    Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

    Date: 2020-03-06 11:28:04.297
    Description:
    Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

    Date: 2020-03-06 11:28:04.078
    Description:
    Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

    Date: 2020-03-06 11:28:03.301
    Description:
    Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

    Date: 2020-03-06 11:28:02.992
    Description:
    Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

    Date: 2020-03-06 11:28:02.538
    Description:
    Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

    ==================== Statystyki pamięci ===========================

    BIOS: American Megatrends Inc. P1.10 02/25/2016
    Płyta główna: ASRock H81M-VG4 R3.0
    Procesor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
    Procent pamięci w użyciu: 49%
    Całkowita pamięć fizyczna: 8131.74 MB
    Dostępna pamięć fizyczna: 4116.02 MB
    Całkowita pamięć wirtualna: 15299.74 MB
    Dostępna pamięć wirtualna: 8554.13 MB

    ==================== Dyski ================================

    Drive c: () (Fixed) (Total:282.58 GB) (Free:220.59 GB) NTFS
    Drive d: () (Fixed) (Total:648.31 GB) (Free:511.6 GB) NTFS

    \\?\Volume{855dce5d-0000-0000-0000-100000000000}\ () (Fixed) (Total:0.09 GB) (Free:0.08 GB) FAT32
    \\?\Volume{855dce5d-0000-0000-0000-c0ab46000000}\ () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS

    ==================== MBR & Tablica partycji ====================

    ==========================================================
    Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 855DCE5D)
    Partition 1: (Active) - (Size=100 MB) - (Type=0C)
    Partition 2: (Not Active) - (Size=282.6 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=531 MB) - (Type=27)
    Partition 4: (Not Active) - (Size=648.3 GB) - (Type=07 NTFS)

    ==================== Koniec Addition.txt =======================
  • #10
    sosarek

    Level 43  
    Klikasz przycisk Odpowiedz, otworzy Ci się nowe okno gdzie jest Dodaj załącznik...
  • #14
    Kolobos
    IT specialist
    Brawo, teraz jeszcze pozostale dwa.

    Jak widac, masz uTorrent:
    Shortcut: C:\Users\MIREK\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -> C:\Users\MIREK\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)

    Jezeli juz go nie chcesz to usun:
    C:\Users\MIREK\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
    C:\Users\MIREK\AppData\Roaming\uTorrent\
  • #16
    Kolobos
    IT specialist
    Zamiescisz w koncu wszystkie logi czy bedziesz dalej pisal?
  • Helpful post
    #18
    Kolobos
    IT specialist
    Odinstaluj:
    McAfee WebAdvisor
    Mozesz tez odinstalowac uTorrent i uzywac wersji portable: https://portableapps.com/apps/internet/utorrent_portable nic sie samo nie zainstaluje. Nie bedzie uTorrent Web itp.

    Obok frst.exe utworz plik Fixlist.txt z zawartoscia:
    CloseProcesses:
    IE trusted site: HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\webcompanion.com -> hxxp://webcompanion.com
    (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
    (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
    HKLM-x32\...\Run: [] => [X]
    HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19646312 2019-02-12] (Piriform Software Ltd -> Piriform Software Ltd)
    HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\MountPoints2: {98a1644c-87db-11ea-a2a9-7085c2229a8b} - "F:\Setup.exe"
    Task: {09418957-02B7-42B1-82D2-9CB0D75EBEDC} - System32\Tasks\Opera scheduled Autoupdate 1571733513 => C:\Users\MIREK\AppData\Local\Programs\Opera\launcher.exe
    Task: {094BC05C-4E0A-4EDF-9E86-D25FE94FB257} - System32\Tasks\Opera scheduled assistant Autoupdate 1587495099 => C:\Users\MIREK\AppData\Local\Programs\Opera\launcher.exe
    Task: {300D855E-83DD-4D5B-9265-1BAFC7F94537} - System32\Tasks\Opera scheduled Autoupdate 1587495093 => C:\Users\MIREK\AppData\Local\Programs\Opera\launcher.exe
    Task: {53517401-C92F-41D4-8CD7-5B10A871C802} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-12] (Piriform Software Ltd -> Piriform Software Ltd)
    Task: {605DEBFB-0F01-492B-B23B-B2E5CBEE5914} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [14680792 2019-02-12] (Piriform Software Ltd -> Piriform Software Ltd)
    Task: {D4880124-A3AF-40A4-B468-B799134681FE} - System32\Tasks\Opera scheduled assistant Autoupdate 1571733515 => C:\Users\MIREK\AppData\Local\Programs\Opera\launcher.exe
    BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-05-07] (McAfee, LLC -> McAfee, LLC)
    BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-05-07] (McAfee, LLC -> McAfee, LLC)
    C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
    FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
    FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-05-07] [UpdateUrl:hxxps://www.siteadvisor.com/waffinstall/update.json]
    FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.1.7\coFFPlgn => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
    CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
    CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
    CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
    CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
    R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [916712 2020-05-07] (McAfee, LLC -> McAfee, LLC)
    2020-05-07 11:06 - 2020-05-07 11:06 - 000000000 ____D C:\Program Files\McAfee
    2020-05-07 11:05 - 2020-05-07 11:05 - 000000000 ____D C:\ProgramData\McAfee
    2020-04-21 20:51 - 2020-04-21 20:51 - 000004464 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1587495099
    2020-04-21 20:51 - 2020-04-21 20:51 - 000004252 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1587495093

    Zapisz i w FRST wybierz Napraw. Mam nadzieje, ze zrobisz to sprawnie niz to nieszczesne zamieszczenie logow w zalaczniku.
  • #20
    Kolobos
    IT specialist
    Fixlist podalem Ci tylko przy okazji, a co do uTorrent to juz Ci podalem co zrobic.
  • #24
    Kolobos
    IT specialist
    Tego nie ma w menu start tylko zostalo zindeksowane, po usunieciu: C:\Users\MIREK\AppData\Roaming\uTorrent\ powinno zniknac.
  • #28
    Kolobos
    IT specialist
  • Helpful post
    #30
    Kolobos
    IT specialist
    Wszystko masz podane w linku, lacznie ze skrotem: ctrl + kolko myszy do zmiany.