Alpha shoppers - jak usunąć?

**Posty:** 6 · przez **kropecznik** 27 Sty 2018, 16:15

Siema. Ostatnio pojawiło mi się na komputerze guwno o nazwie Alpha Shoppers. Nijak nie mogę tego usunąć - próbowałem Malwarebytes i Adwcleaner. Resetowanie Chroma do ustawień fabrycznych również nic nie dało. Proszę o pomoc bo mnie szlag trafia.

Pozdrawiam.

**Posty:** 4765 · przez **ordynat** 27 Sty 2018, 16:21

Zrób logi z FRST > http://forum.programosy.pl/frst-otl-zoek-vt139692.html
Przed skanem zaznacz "Addition.txt" oraz "Shortcut.txt"

**Posty:** 6 · przez **kropecznik** 27 Sty 2018, 16:25

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27.01.2018 Ran by User (27-01-2018 15:23:51) Running from C:\Users\User\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2015-09-19 16:11:34) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= User (S-1-5-21-1839982186-1979475219-1475761991-1000 - Administrator - Enabled) => C:\Users\User Администратор (S-1-5-21-1839982186-1979475219-1475761991-500 - Administrator - Disabled) Гость (S-1-5-21-1839982186-1979475219-1475761991-501 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A} AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\...\uTorrent) (Version: 3.5.1.44332 - BitTorrent Inc.) 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0015-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0016-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0018-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0019-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-001A-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-001B-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-001F-0419-0000-0000000FF1CE}_ENTERPRISE_{57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-001F-0422-0000-0000000FF1CE}_ENTERPRISE_{6F177D09-F21D-4F50-9436-353972D1D232}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-002A-0419-1000-0000000FF1CE}_ENTERPRISE_{37317C49-30C4-412C-B0B9-D95090F330D8}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version: - Microsoft) 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0044-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-006E-0419-0000-0000000FF1CE}_ENTERPRISE_{37317C49-30C4-412C-B0B9-D95090F330D8}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-00A1-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden 2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-00BA-0419-0000-0000000FF1CE}_ENTERPRISE_{DCB382C1-7F1B-42B2-9D47-EDC4262E832F}) (Version: - Microsoft) Hidden Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated) Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.137 - Adobe Systems Incorporated) Adobe Flash Player 28 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 28.0.0.137 - Adobe Systems Incorporated) Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.122 - Atheros) Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 15.0.7.3 - Broadcom Corporation) CCleaner (HKLM\...\CCleaner) (Version: 3.26 - Piriform) ChomikBox (HKLM-x32\...\{45B8131C-E239-4BE0-A92B-0E7FE1BBF83E}) (Version: 2.0.8.2 - Chomikuj.pl) ETDWare PS/2-X64 10.6.9.9_WHQL (HKLM\...\Elantech) (Version: 10.6.9.9 - ELAN Microelectronic Corp.) Exact Audio Copy 1.3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.3 - Andre Wiethoff) Free Countdown Timer (HKLM-x32\...\{404245D0-E836-4737-9C12-D4D0034540F5}_is1) (Version: 4.0.1.0 - Comfort Software Group) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.132 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation) K-Lite Codec Pack 9.7.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.7.0 - ) Last.fm Scrobbler 2.1.37 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm) Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.) Letasoft Sound Booster 1.10.0.497 (HKLM-x32\...\{6C6CF38B-11DD-45C6-A15E-A3A0C4CE60F8}_is1) (Version: 1.10.0.497 - Letasoft LLC) Love & Desire (HKLM-x32\...\ACBCFD62-26A3-45CE-A91B-9ABD77758524) (Version: 1.0 - RTB) Malwarebytes (wersja 3.3.1.2183) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation) Microsoft Office Excel 2007 Help Обновление (KB963678) (HKLM-x32\...\{90120000-0016-0419-0000-0000000FF1CE}_ENTERPRISE_{420938DB-BF97-4664-BE29-0C68B4802C00}) (Version: - Microsoft) Microsoft Office Outlook 2007 Help Обновление (KB963677) (HKLM-x32\...\{90120000-001A-0419-0000-0000000FF1CE}_ENTERPRISE_{E9D6C0F9-9879-4FC4-8E13-BF0D3953E0E6}) (Version: - Microsoft) Microsoft Office Powerpoint 2007 Help Обновление (KB963669) (HKLM-x32\...\{90120000-0018-0419-0000-0000000FF1CE}_ENTERPRISE_{BD1C2AC7-63F3-4C75-8B44-DE3D700B3BC8}) (Version: - Microsoft) Microsoft Office Word 2007 Help Обновление (KB963665) (HKLM-x32\...\{90120000-001B-0419-0000-0000000FF1CE}_ENTERPRISE_{D3A002FB-0F62-4840-80AD-2D2C63F83449}) (Version: - Microsoft) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) PDF-XChange Viewer 2.5.214.2 (HKLM-x32\...\PDF-XChange Viewer_is1) (Version: 2.5.214.2 - l-rePack®) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6543 - Realtek Semiconductor Corp.) Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.104 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Outlook 2007 Junk Email Filter (kb983486) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{913DFE19-32EC-4099-89AC-27FC493A7A2E}) (Version: - Microsoft) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.8 - VideoLAN) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Архиватор WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) Оновлення Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0422-0000-0000000FF1CE}_ENTERPRISE_{95BDADC0-2873-45FC-99AF-E504D7D5276A}) (Version: - Microsoft) Оновлення Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0422-0000-0000000FF1CE}_ENTERPRISE_{0F61423B-88E7-4DD6-B1FF-838DEBC18C90}) (Version: - Microsoft) Оновлення Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0422-0000-0000000FF1CE}_ENTERPRISE_{D83749B2-7CF9-4F93-A885-AA28A2A26C2C}) (Version: - Microsoft) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ContextMenuHandlers1-x32: [AIMPClassic] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\PROGRA~2\AIMP2\System\AIMP_S~1.DLL -> No File ContextMenuHandlers1-x32: [Atheros] -> {B8952421-0E55-400B-94A6-FA858FC0A39F} => C:\Program Files (x86)\Bluetooth Suite\BtvAppExt.dll [2012-02-20] (Atheros Commnucations) ContextMenuHandlers1-x32: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2015-04-29] (Корпорация Майкрософт) ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2009-12-12] () ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2009-12-18] () ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2015-04-29] (Корпорация Майкрософт) ContextMenuHandlers3: [FTShellContext] -> {AFF81F7B-6942-40c4-AADA-7214EF7B6DD1} => C:\Program Files (x86)\Bluetooth Suite\ShellContextExt.dll [2012-02-20] (Atheros Commnucations) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers4-x32: [AIMPClassic] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\PROGRA~2\AIMP2\System\AIMP_S~1.DLL -> No File ContextMenuHandlers4-x32: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2015-04-29] (Корпорация Майкрософт) ContextMenuHandlers4-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2009-12-12] () ContextMenuHandlers4-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2009-12-18] () ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2012-03-27] (Intel Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2009-12-12] () ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2009-12-18] () ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {18E91488-B109-49A6-8510-35D9E91D35AE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-08] (Google Inc.) Task: {39AED039-BB70-4BBC-8A52-2BB24964139A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-08] (Google Inc.) Task: {96E2F657-E69F-4AC2-ACBE-0365D69892EE} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_28_0_0_137_pepper.exe [2018-01-10] (Adobe Systems Incorporated) Task: {BBADC68E-EACA-4E74-A866-C7E440F57A19} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation) Task: {C093BC99-8D3F-4C94-A632-E03AA4E00DBC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-10] (Adobe Systems Incorporated) Task: {CDCFFE7D-EFF1-4522-BEFD-7F92F41BAB1B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) Shortcut: C:\Users\User\Desktop\запись дисков.lnk -> C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 9\burningstudio9.exe (No File) <==== Cyrillic Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Руководство по консольной версии RAR.lnk -> C:\Program Files (x86)\WinRAR\Rar.txt () <==== Cyrillic Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Справка WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.chm () <==== Cyrillic ==================== Loaded Modules (Whitelisted) ============== 2015-09-19 21:01 - 2012-03-27 01:33 - 000094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2018-01-27 14:40 - 2017-11-29 09:11 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2018-01-27 14:40 - 2017-11-29 09:11 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2018-01-09 02:15 - 2018-01-03 10:20 - 004063064 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.132\libglesv2.dll 2018-01-09 02:15 - 2018-01-03 10:20 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.132\libegl.dll 2018-01-10 04:47 - 2018-01-10 04:47 - 031240192 _____ () C:\Windows\system32\Macromed\Flash\pepflashplayer64_28_0_0_137.dll 2017-09-26 20:22 - 2017-09-26 20:22 - 001984000 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll 2015-10-02 17:05 - 2015-10-02 17:05 - 000172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\2134117ca053ce1825bac39b909a2946\IsdiInterop.ni.dll 2015-09-19 21:07 - 2012-02-01 14:25 - 000059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2015-09-19 21:08 - 2012-06-25 18:41 - 001198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2018-01-27 14:35 - 000000848 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{E1B6625A-3F75-462F-8B72-90606FCBB8B9}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe FirewallRules: [{3C7AA7B9-27D6-4040-9BD4-8B5821682B7D}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe FirewallRules: [{3197CE28-1514-477F-A6B6-EDE6A39ADD16}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe FirewallRules: [{B15C8DDE-EC6A-4EE7-AE55-F02CA1F13325}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe FirewallRules: [{C584BAD9-F5C4-4B84-B67E-50A3D48D1164}] => (Allow) C:\Program Files\Opera x64\opera.exe FirewallRules: [{E0991441-7433-4FEE-9B5E-A36E63E5944B}] => (Allow) C:\Program Files\Opera x64\opera.exe FirewallRules: [{084D3F6A-138C-4DF4-B587-3FB1BE94141B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{AA40B2C1-E2DE-4B16-B150-EB4E0C97FF4A}C:\users\user\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\user\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{EF7ACC76-7BFD-433D-93CF-4CCE17906F9A}C:\users\user\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\user\appdata\roaming\utorrent\utorrent.exe FirewallRules: [{B06A0EE7-8C54-46E7-BFF8-AFECC09FD7FC}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{7A20786E-C33C-4246-9906-C4AA3CD74852}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{68C6F2D4-8855-4527-AE5D-7201ACD75DC8}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{84A28CED-99FC-4E98-BB19-A9C91E794C28}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{441CCA76-C0C5-49E4-9280-B06CF7CF5012}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{E9767216-DFA0-47AA-8C2D-0C0FEA74DAB7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{312BE8FA-0F97-4D4F-8BED-B007B649EDA0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{4873FFD2-F5A4-496D-B38E-04A37810FE7B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{606B786F-3C92-46D2-9D0E-A61C0130E7EA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 12-01-2018 21:09:13 Центр обновления Windows 16-01-2018 07:38:50 Центр обновления Windows 19-01-2018 09:03:49 Центр обновления Windows 22-01-2018 19:36:21 Центр обновления Windows 26-01-2018 09:30:59 Центр обновления Windows 27-01-2018 14:27:08 UnHackMe Malware Removal 27-01-2018 14:33:43 UnHackMe Malware Removal ==================== Faulty Device Manager Devices ============= Name: MpKsl86a8726e Description: MpKsl86a8726e Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: MpKsl86a8726e Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (01/27/2018 03:03:24 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/27/2018 02:58:27 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Имя сбойного приложения: adwcleaner_7.0.7.0.exe, версия: 7.0.7.0, отметка времени: 0x5a613aa4 Имя сбойного модуля: unknown, версия: 0.0.0.0, отметка времени 0x00000000 Код исключения: 0xc0000005 Смещение ошибки: 0x057cffff Идентификатор сбойного процесса: 0x1848 Время запуска сбойного приложения: 0x01d397769e69d429 Путь сбойного приложения: C:\Users\User\Desktop\adwcleaner_7.0.7.0.exe Путь сбойного модуля: unknown Код отчета: 259941ff-036a-11e8-8000-201a06e3e6f1 Error: (01/27/2018 02:35:57 PM) (Source: MsiInstaller) (EventID: 1013) (User: User-ПК) Description: Produkt: ESET NOD32 Antivirus -- Ten pakiet instalacyjny jest przeznaczony dla 32-bitowych systemów operacyjnych. Należy użyć pakietu instalacyjnego dla 64-bitowych systemów operacyjnych. Error: (01/27/2018 01:52:41 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Ошибка создания контекста архивации для "C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 9\burningstudio9.exe". Ошибка в файле манифеста или политики "" в строке . Версия компонента, требуемая для приложения, конфликтует с другой, уже активной версией. Конфликтующие компоненты: Компонент 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Компонент 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/27/2018 01:52:41 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Ошибка создания контекста архивации для "C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 9\burningstudio9.exe". Ошибка в файле манифеста или политики "" в строке . Версия компонента, требуемая для приложения, конфликтует с другой, уже активной версией. Конфликтующие компоненты: Компонент 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Компонент 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/27/2018 09:45:58 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: Ошибка создания контекста архивации для "C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 9\burningstudio9.exe". Ошибка в файле манифеста или политики "" в строке . Версия компонента, требуемая для приложения, конфликтует с другой, уже активной версией. Конфликтующие компоненты: Компонент 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Компонент 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/26/2018 09:45:37 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: Ошибка создания контекста архивации для "C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 9\burningstudio9.exe". Ошибка в файле манифеста или политики "" в строке . Версия компонента, требуемая для приложения, конфликтует с другой, уже активной версией. Конфликтующие компоненты: Компонент 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Компонент 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/25/2018 10:56:35 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Программа Not_Another_Teen_Movie_Subtitle.srt.tmp версии 51.52.0.0 прекратила взаимодействие с Windows и была закрыта. Чтобы узнать, имеются ли дополнительные сведения о проблеме, проверьте историю проблемы в Центре поддержки в панели управления. ИД процесса: 1ad4 Время запуска: 01d3962739a9ed98 Время завершения: 0 Путь приложения: C:\Users\User\AppData\Local\Temp\is-OVIC5.tmp\Not_Another_Teen_Movie_Subtitle.srt.tmp ИД отчета: Error: (01/25/2018 11:20:30 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: Ошибка создания контекста архивации для "c:\program files (x86)\Ashampoo\ashampoo burning studio 9\burningstudio9.exe". Ошибка в файле манифеста или политики "" в строке . Версия компонента, требуемая для приложения, конфликтует с другой, уже активной версией. Конфликтующие компоненты: Компонент 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Компонент 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/25/2018 11:20:29 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: Ошибка создания контекста архивации для "c:\program files (x86)\Ashampoo\ashampoo burning studio 9\backupextractor9.exe". Ошибка в файле манифеста или политики "" в строке . Версия компонента, требуемая для приложения, конфликтует с другой, уже активной версией. Конфликтующие компоненты: Компонент 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Компонент 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. System errors: ============= Error: (01/27/2018 03:00:27 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY) Description: Получено следующее предупреждение о неустранимой ошибке: 70. Error: (01/27/2018 03:00:26 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY) Description: Получено следующее предупреждение о неустранимой ошибке: 70. Error: (01/27/2018 03:00:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Служба "Intel(R) Management and Security Application User Notification Service" неожиданно прервана. Это произошло (раз): 1. Error: (01/27/2018 03:00:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Служба Intel(R) Capability Licensing Service Interface была неожиданно завершена. Это произошло 1 раз(а). Следующее корректирующее действие будет предпринято через 0 мсек: Перезапуск службы. Error: (01/27/2018 03:00:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Служба Dritek WMI Service была неожиданно завершена. Это произошло 1 раз(а). Следующее корректирующее действие будет предпринято через 3000 мсек: Перезапуск службы. Error: (01/27/2018 03:00:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Служба "Intel(R) Dynamic Application Loader Host Interface Service" неожиданно прервана. Это произошло (раз): 1. Error: (01/27/2018 02:59:58 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY) Description: Получено следующее предупреждение о неустранимой ошибке: 70. Error: (01/27/2018 02:59:58 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY) Description: Получено следующее предупреждение о неустранимой ошибке: 70. Error: (01/27/2018 02:58:25 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY) Description: Получено следующее предупреждение о неустранимой ошибке: 70. Error: (01/27/2018 02:58:25 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY) Description: Получено следующее предупреждение о неустранимой ошибке: 70. ==================== Memory info =========================== Processor: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz Percentage of memory in use: 69% Total physical RAM: 3988.36 MB Available physical RAM: 1222.58 MB Total Virtual: 7974.91 MB Available Virtual: 5028.73 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:110.48 GB) (Free:65.28 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:588.16 GB) (Free:577.94 GB) NTFS Drive f: (SAMSUNG 320GB) (Fixed) (Total:298.08 GB) (Free:78.25 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 1508F4DC) Partition 1: (Active) - (Size=110.5 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=588.2 GB) - (Type=OF Extended) Attempted reading MBR returned 0 bytes. Could not read MBR for disk 1. ==================== End of Addition.txt ============================

Kod: Zaznacz wszystko: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27.01.2018 Ran by User (administrator) on USER-ПК (27-01-2018 15:22:59) Running from C:\Users\User\Desktop Loaded Profiles: User (Available Profiles: User) Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Русский (Россия) Internet Explorer Version 8 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (BitTorrent Inc.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (Comfort Software Group) C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (BitTorrent Inc.) C:\Users\User\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (BitTorrent Inc.) C:\Users\User\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-29] (Microsoft Corporation) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2821936 2012-03-07] (ELAN Microelectronics Corp.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-10] (Skype Technologies S.A.) HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\...\Run: [uTorrent] => C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe [1981624 2017-12-26] (BitTorrent Inc.) HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\...\Run: [FreeCT] => C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe [4126624 2016-01-22] (Comfort Software Group) HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3111712 2017-12-15] (Valve Corporation) HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\...\MountPoints2: {a7774e47-5edf-11e5-a1ee-806e6f6e6963} - E:\AutoRun\AutoRunX\AutoRunX.exe HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\...\MountPoints2: {be198295-e036-11e7-8f21-201a06e3e6f1} - G:\Lenovo_Suite.exe Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter GroupPolicy: Restriction - Chrome <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{54E61680-23CC-4EFB-919F-943FD7AE4129}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{CA7BC724-35D2-496F-A258-B81F279F0440}: [NameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-1839982186-1979475219-1475761991-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-02-20] (Atheros Commnucations) Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2015-08-14] (Microsoft Corporation) Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-08-14] (Microsoft Corporation) Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2015-08-14] (Microsoft Corporation) Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-08-14] (Microsoft Corporation) FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_137.dll [2018-01-10] () FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_137.dll [2018-01-10] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN) Chrome: ======= CHR HomePage: Default -> hxxp://www.istartpageing.com/?type=hp&ts=1451689115&z=7a170741804963a9fd0a096g8z6w8g9q5b9tdg4gfw&from=cor&uid=wdcxwd3200aajb-00tya0_wd-wcapz273001030010 CHR StartupUrls: Default -> "hxxps://mail.google.com/mail/u/0/#inbox","hxxp://www.lastfm.pl/user/kropecznik","hxxp://www.meczyki.pl/","hxxp://livetv.sx/pl/allupcomingsports/1/","hxxps://www.google.com/" CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2018-01-27] CHR Extension: (Prezentacje) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13] CHR Extension: (h264ify) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleakchihdccplidncghkekgioiakgal [2017-12-12] CHR Extension: (Dokumenty) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13] CHR Extension: (Dysk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-24] CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-08] CHR Extension: (Chrome Cleaner Pro) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccjleegmemocfpghkhpjmiccjcacackp [2018-01-27] CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-01-27] CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29] CHR Extension: (Arkusze) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13] CHR Extension: (Dokumenty Google offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-18] CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-12] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-23] CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-08] CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-16] CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx Opera: ======= StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Корпорация Майкрософт) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-29] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-29] (Microsoft Corporation) S3 SoundBoosterService; C:\Program Files (x86)\Letasoft Sound Booster\SoundBoosterService.exe [153272 2017-12-12] (Letasoft) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Корпорация Майкрософт) S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Корпорация Майкрософт) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77432 2017-11-29] () S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [71424 2011-12-13] (Fresco Logic) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193968 2018-01-27] (Malwarebytes) R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2018-01-27] (Malwarebytes) R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [46008 2018-01-27] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2018-01-27] (Malwarebytes) R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2018-01-27] (Malwarebytes) R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94592 2010-11-21] (Корпорация Майкрософт) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation) S3 nusb3hub; C:\Windows\system32\drivers\nusb3hub.sys [97280 2012-03-15] (Renesas Electronics Corporation) [File not signed] S3 nusb3xhc; C:\Windows\system32\drivers\nusb3xhc.sys [217088 2012-03-15] (Renesas Electronics Corporation) [File not signed] R0 oem-drv64; C:\Windows\System32\DRIVERS\oem-drv64.sys [42496 2018-01-27] (secr9tos) [File not signed] S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [101376 2011-11-21] (Renesas Electronics Corporation) S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [217088 2011-11-21] (Renesas Electronics Corporation) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31984 2013-07-30] (Synaptics Incorporated) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2015-09-22] () [File not signed] R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-21] (Корпорация Майкрософт) S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [204800 2011-11-14] (VIA Technologies, Inc.) S3 xhcdrv; C:\Windows\system32\drivers\xhcdrv.sys [256000 2011-11-14] (VIA Technologies, Inc.) U3 aqtnqzfk; C:\Windows\System32\Drivers\aqtnqzfk.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder) S1 MpKsl86a8726e; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7E73A5D2-E04E-4955-971A-2C7097CC0FB2}\MpKsl86a8726e.sys [X] U0 Partizan; system32\drivers\Partizan.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-01-27 15:22 - 2018-01-27 15:23 - 000015535 _____ C:\Users\User\Desktop\FRST.txt 2018-01-27 15:22 - 2018-01-27 15:22 - 002393088 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe 2018-01-27 15:22 - 2018-01-27 15:22 - 000000000 ____D C:\FRST 2018-01-27 14:56 - 2018-01-27 15:00 - 000000000 ____D C:\AdwCleaner 2018-01-27 14:56 - 2018-01-27 14:56 - 008206624 _____ (Malwarebytes) C:\Users\User\Desktop\adwcleaner_7.0.7.0.exe 2018-01-27 14:40 - 2018-01-27 15:03 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2018-01-27 14:40 - 2018-01-27 15:03 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2018-01-27 14:40 - 2018-01-27 15:03 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2018-01-27 14:40 - 2018-01-27 15:03 - 000046008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2018-01-27 14:40 - 2018-01-27 14:40 - 000193968 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2018-01-27 14:40 - 2018-01-27 14:40 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2018-01-27 14:40 - 2018-01-27 14:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2018-01-27 14:40 - 2017-11-29 09:11 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys 2018-01-27 14:39 - 2018-01-27 14:39 - 000000000 ____D C:\Users\Все пользователи\Malwarebytes 2018-01-27 14:39 - 2018-01-27 14:39 - 000000000 ____D C:\ProgramData\Malwarebytes 2018-01-27 14:33 - 2018-01-27 14:33 - 000000019 _____ C:\Windows\SysWOW64\Partizan.RRI 2018-01-27 14:24 - 2018-01-27 14:29 - 000000000 ____D C:\Users\User\Documents\RegRun2 2018-01-27 14:24 - 2018-01-27 14:24 - 000000002 RSHOT C:\Windows\winstart.bat 2018-01-27 14:24 - 2018-01-27 14:24 - 000000002 RSHOT C:\Windows\SysWOW64\CONFIG.NT 2018-01-27 14:24 - 2018-01-27 14:24 - 000000002 RSHOT C:\Windows\SysWOW64\AUTOEXEC.NT 2018-01-27 14:24 - 2018-01-27 14:24 - 000000000 ____D C:\Users\Все пользователи\RegRun 2018-01-27 14:24 - 2018-01-27 14:24 - 000000000 ____D C:\ProgramData\RegRun 2018-01-27 14:24 - 2017-12-16 00:47 - 000000848 _____ C:\Windows\system32\Drivers\etc\hosts.old 2018-01-27 14:23 - 2018-01-27 14:35 - 000000000 ____D C:\Program Files (x86)\UnHackMe 2018-01-27 13:56 - 2018-01-27 13:56 - 000000000 ____D C:\Program Files\Malwarebytes 2018-01-27 13:52 - 2018-01-27 13:56 - 082377272 _____ (Malwarebytes ) C:\Users\User\Desktop\mb3-setup-consumer-3.3.1.2183-1.0.262-1.0.3791.exe 2018-01-25 23:57 - 2018-01-26 00:31 - 000000000 ____D C:\Users\User\AppData\Roaming\vlc 2018-01-25 23:55 - 2018-01-25 23:55 - 000001070 _____ C:\Users\Public\Desktop\VLC media player.lnk 2018-01-25 23:55 - 2018-01-25 23:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2018-01-25 23:55 - 2018-01-25 23:55 - 000000000 ____D C:\Program Files (x86)\VideoLAN 2018-01-25 22:55 - 2018-01-25 22:55 - 000000258 __RSH C:\Users\Все пользователи\ntuser.pol 2018-01-25 22:55 - 2018-01-25 22:55 - 000000258 __RSH C:\ProgramData\ntuser.pol 2018-01-25 22:03 - 2018-01-25 22:03 - 000012209 _____ C:\Users\User\Desktop\grafik meine.odt 2018-01-25 21:54 - 2018-01-25 21:54 - 000011138 _____ C:\Users\User\Desktop\Grafik.odt 2018-01-25 19:48 - 2018-01-25 19:48 - 000000000 ____D C:\Users\User\Desktop\filmy 2018-01-25 19:30 - 2018-01-25 19:31 - 000000000 ____D C:\Users\User\Desktop\zdj 2018-01-03 02:17 - 2018-01-03 02:17 - 003148854 _____ C:\Users\User\Desktop\22.08.2016.bmp 2018-01-03 01:35 - 2018-01-03 01:36 - 000002676 _____ C:\Users\User\Desktop\wyznanie miłości sprzed wieków.txt 2017-12-30 12:31 - 2017-12-30 12:32 - 000000000 ____D C:\Users\User\AppData\Local\Steam 2017-12-30 12:17 - 2018-01-27 15:08 - 000000000 ____D C:\Program Files (x86)\Steam 2017-12-30 12:17 - 2017-12-30 12:17 - 000000967 _____ C:\Users\Public\Desktop\Steam.lnk 2017-12-30 12:17 - 2017-12-30 12:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2017-12-29 16:50 - 2017-12-29 16:50 - 000000037 ___SH C:\Users\User\AppData\Local\20986331705021ca58edc424.96250074 2017-12-29 16:50 - 2017-12-29 16:50 - 000000000 __SHD C:\Users\User\AppData\Local\icsxml 2017-12-29 16:49 - 2017-12-29 16:49 - 000001129 _____ C:\Users\Public\Desktop\Letasoft Sound Booster.lnk 2017-12-29 16:49 - 2017-12-29 16:49 - 000000000 ____D C:\Users\Все пользователи\Letasoft 2017-12-29 16:49 - 2017-12-29 16:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Letasoft Sound Booster 2017-12-29 16:49 - 2017-12-29 16:49 - 000000000 ____D C:\ProgramData\Letasoft 2017-12-29 16:49 - 2017-12-29 16:49 - 000000000 ____D C:\Program Files (x86)\Letasoft Sound Booster 2017-12-29 16:47 - 2017-12-29 16:48 - 006757376 _____ (Letasoft LLC ) C:\Users\User\Desktop\SoundBoosterSetup.exe ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-01-27 15:23 - 2015-10-08 12:45 - 000000000 ____D C:\Users\User\AppData\Roaming\uTorrent 2018-01-27 15:10 - 2009-07-14 05:45 - 000028528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2018-01-27 15:10 - 2009-07-14 05:45 - 000028528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2018-01-27 15:06 - 2015-09-19 20:01 - 000000000 ____D C:\Users\User\AppData\Roaming\Skype 2018-01-27 15:03 - 2017-12-26 23:59 - 000000000 ____D C:\Users\User\AppData\LocalLow\uTorrent 2018-01-27 15:02 - 2016-08-27 22:02 - 000000000 ____D C:\Users\Все пользователи\McAfee 2018-01-27 15:02 - 2016-08-27 22:02 - 000000000 ____D C:\ProgramData\McAfee 2018-01-27 15:02 - 2015-09-19 21:08 - 000000000 ____D C:\Program Files\Intel 2018-01-27 15:02 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2018-01-27 15:01 - 2016-08-27 22:27 - 000000000 ____D C:\Program Files\Common Files\McAfee 2018-01-27 15:01 - 2015-09-19 17:03 - 000042496 _____ (secr9tos) C:\Windows\system32\Drivers\oem-drv64.sys 2018-01-27 14:58 - 2017-10-25 18:24 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps 2018-01-27 14:40 - 2017-12-14 12:25 - 000000000 ____D C:\Users\User\AppData\Local\Last.fm 2018-01-27 14:30 - 2015-09-19 21:06 - 000000000 ____D C:\Program Files\Common Files\Intel 2018-01-25 22:55 - 2009-07-14 04:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2018-01-25 22:55 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy 2018-01-25 22:44 - 2017-12-02 17:29 - 000074752 _____ C:\Users\User\Desktop\płyty, kapsle i monety.xls 2018-01-23 19:58 - 2010-11-21 04:27 - 000548000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2018-01-17 12:44 - 2011-04-12 14:26 - 000724174 _____ C:\Windows\system32\perfh019.dat 2018-01-17 12:44 - 2011-04-12 14:26 - 000150458 _____ C:\Windows\system32\perfc019.dat 2018-01-17 12:44 - 2009-07-14 06:13 - 001647438 _____ C:\Windows\system32\PerfStringBackup.INI 2018-01-17 12:44 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf 2018-01-10 04:47 - 2016-08-27 22:02 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2018-01-10 04:47 - 2016-08-27 22:02 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2018-01-10 04:47 - 2016-08-27 22:02 - 000004512 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2018-01-10 04:47 - 2016-08-27 22:02 - 000004378 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2018-01-10 04:47 - 2016-08-27 22:01 - 000000000 ____D C:\Windows\system32\Macromed 2018-01-10 04:47 - 2015-09-19 19:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2018-01-09 02:15 - 2015-10-08 12:25 - 000002191 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-01-09 02:15 - 2015-10-08 12:25 - 000002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk ==================== Files in the root of some directories ======= 2017-12-29 16:50 - 2017-12-29 16:50 - 000000037 ___SH () C:\Users\User\AppData\Local\20986331705021ca58edc424.96250074 Some files in TEMP: ==================== 2017-03-29 18:16 - 2017-03-29 18:16 - 014456872 _____ (Microsoft Corporation) C:\Users\User\AppData\Local\Temp\vc_redist.x86.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed nointegritychecks: ==> "IntegrityChecks" is disabled. <==== ATTENTION LastRegBack: 2018-01-19 10:39 ==================== End of FRST.txt ============================

Kod: Zaznacz wszystko: Users shortcut scan result (x64) Version: 27.01.2018 Ran by User (27-01-2018 15:24:22) Running from C:\Users\User\Desktop Boot Mode: Normal ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AkelPad.lnk -> C:\Program Files (x86)\Total Commander\Plugins\exe\AkelPad.exe (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk -> C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Руководство по консольной версии RAR.lnk -> C:\Program Files (x86)\WinRAR\Rar.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Справка WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp\Co nowego.lnk -> C:\Program Files (x86)\Winamp\whatsnew.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp\Odinstaluj Winampa.lnk -> C:\Program Files (x86)\Winamp\UninstWA.exe (Nullsoft, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp\Winamp.lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk -> C:\Program Files (x86)\VideoLAN\VLC\Documentation.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk -> C:\Program Files (x86)\VideoLAN\VLC\NEWS.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk -> C:\Program Files (x86)\VideoLAN\VLC\VideoLAN Website.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\SamLab.ws - New Soft.lnk -> C:\Program Files (x86)\Total Commander\Sam Lab.url (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander Rus.lnk -> C:\Program Files (x86)\Total Commander\Totalcmd.exe (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Информация о версии.lnk -> C:\Program Files (x86)\Total Commander\Language\Readme.txt (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Настройка командера.lnk -> C:\Program Files (x86)\Total Commander\Plugins\exe\TweakTC.exe (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Справка к программе.lnk -> C:\Program Files (x86)\Total Commander\Language\Wcmd_rus.hlp (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Удаление командера.lnk -> C:\Program Files (x86)\Total Commander\Uninstall.exe (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Полезные утилиты\Записывание CD&DVD.lnk -> C:\Program Files (x86)\Total Commander\Soft\Sateira\DataBurner.exe (Sateira Software) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Полезные утилиты\Обслуживание системы.lnk -> C:\Program Files (x86)\Total Commander\Soft\Ace Utilities\au.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Полезные утилиты\Оптимизация системы.lnk -> C:\Program Files (x86)\Total Commander\Soft\fitW\fitW.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Полезные утилиты\Проигрыватель аудио.lnk -> C:\Program Files (x86)\Total Commander\Plugins\wlx\AmpView\AmpView.exe (No File) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange Viewer\PDF-XChange Viewer.lnk -> C:\Program Files (x86)\PDF-XChange Viewer\PDFXCview.exe (Tracker Software Products (Canada) Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange Viewer\Удаление.lnk -> C:\Program Files (x86)\PDF-XChange Viewer\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Access 2007.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Excel 2007.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Outlook 2007.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Word 2007.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Microsoft Office 2007 Языковые параметры.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Диспетчер рисунков Microsoft Office.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Организатор клипов (Microsoft).lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Центр диагностики Microsoft Office.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Цифровой сертификат для проектов VBA.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Letasoft Sound Booster\Letasoft Sound Booster.lnk -> C:\Program Files (x86)\Letasoft Sound Booster\SoundBooster.exe (Letasoft) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Media Player Classic.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe (MPC-HC Team) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Uninstall\Uninstall K-Lite Codec Pack.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Help\Frequently Asked Questions.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Info\faq.htm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel Control Center.lnk -> C:\Program Files (x86)\Intel\Intel Control Center\IntelControlCenter.exe (Intel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel(R) Rapid Storage Technology.lnk -> C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe (Intel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Chess.lnk -> C:\Program Files\Microsoft Games\Chess\Chess.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\FreeCell.lnk -> C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk -> C:\Windows\System32\gameux.dll (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Hearts.lnk -> C:\Program Files\Microsoft Games\Hearts\Hearts.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Internet Backgammon.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Backgammon\bckgzm.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Internet Checkers.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Checkers\chkrzm.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Internet Spades.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Spades\shvlzm.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Mahjong.lnk -> C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Minesweeper.lnk -> C:\Program Files\Microsoft Games\Minesweeper\Minesweeper.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\More Games from Microsoft.lnk -> C:\Program Files\Microsoft Games\More Games\MoreGames.dll (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Purble Place.lnk -> C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Solitaire.lnk -> C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Spider Solitaire.lnk -> C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy\Exact Audio Copy.lnk -> C:\Program Files (x86)\Exact Audio Copy\EAC.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\Uninstall.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\uninst.exe (DT Soft Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chomikuj.pl\ChomikBox.lnk -> C:\Program Files (x86)\ChomikBox\ChomikBox.exe ( ) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk -> C:\Program Files\CCleaner\uninst.exe (Piriform Ltd) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon LBP6020\Электронное руководство LBP6020.lnk -> C:\Program Files (x86)\Canon\LBP6020\Manuals\index.html () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program\Устройства Bluetooth.lnk -> C:\Windows\System32\bthprops.cpl (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Корпорация Майкрософт (Microsoft Corp.)) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Bluetooth File Transfer Wizard.lnk -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Intel\ExtremeGraphics\CUI\Resource\HD-графика Intel®.lnk -> C:\Windows\System32\GfxUI.exe (Intel Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Public\Desktop\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) Shortcut: C:\Users\Public\Desktop\ChomikBox.lnk -> C:\Program Files (x86)\ChomikBox\ChomikBox.exe ( ) Shortcut: C:\Users\Public\Desktop\DAEMON Tools Lite.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) Shortcut: C:\Users\Public\Desktop\Exact Audio Copy.lnk -> C:\Program Files (x86)\Exact Audio Copy\EAC.exe () Shortcut: C:\Users\Public\Desktop\Free Countdown Timer.lnk -> C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group) Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Public\Desktop\Last.fm Scrobbler.lnk -> C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe (Last.fm) Shortcut: C:\Users\Public\Desktop\Letasoft Sound Booster.lnk -> C:\Program Files (x86)\Letasoft Sound Booster\SoundBooster.exe (Letasoft) Shortcut: C:\Users\Public\Desktop\Love & Desire.lnk -> C:\Program Files (x86)\Love & Desire\Love & Desire.exe () Shortcut: C:\Users\Public\Desktop\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes) Shortcut: C:\Users\Public\Desktop\Skype.lnk -> C:\Windows\Installer\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}\SkypeIcon.exe () Shortcut: C:\Users\Public\Desktop\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) Shortcut: C:\Users\Public\Desktop\VLC media player.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) Shortcut: C:\Users\Public\Desktop\Winamp.lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) Shortcut: C:\Users\User\Links\Desktop.lnk -> C:\Users\User\Desktop () Shortcut: C:\Users\User\Links\Downloads.lnk -> C:\Users\User\Downloads () Shortcut: C:\Users\User\Links\RecentPlaces.lnk -> [::{22877A6D-37A1-461A-91B0-DBDA5AAEBC99}] Shortcut: C:\Users\User\Desktop\Downloads.lnk -> C:\Users\User\Downloads () Shortcut: C:\Users\User\Desktop\µTorrent.lnk -> C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.) Shortcut: C:\Users\User\Desktop\запись дисков.lnk -> C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 9\burningstudio9.exe (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -> C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.exe () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Руководство по консольной версии RAR.lnk -> C:\Program Files (x86)\WinRAR\Rar.txt () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Справка WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.chm () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Love & Desire\Love & Desire.lnk -> C:\Program Files (x86)\Love & Desire\Love & Desire.exe () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Love & Desire\Uninstall Love & Desire.lnk -> C:\Program Files (x86)\Love & Desire\uninstall.exe () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\CV-Kateryna-Kylymniuk.LNK -> C:\Users\User\Desktop\CV-Kateryna-Kylymniuk.doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\DO DRUKNIĘCIA.LNK -> F:\DO DRUKNIĘCIA (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Druknąć, oddać, mieć cenzura!.LNK -> F:\DO DRUKNIĘCIA\Druknąć, oddać, mieć cenzura!.doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\grafik meine.LNK -> C:\Users\User\Desktop\grafik meine.odt () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Grafik.LNK -> C:\Users\User\Desktop\Grafik.odt () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\kapsle.LNK -> C:\Users\User\Desktop\kapsle.xls (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\monety.LNK -> C:\Users\User\Desktop\monety.xls (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\plan-zahodv-2017.LNK -> C:\Users\User\Downloads\plan-zahodv-2017.doc () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\płyty, kapsle i monety.LNK -> C:\Users\User\Desktop\płyty, kapsle i monety.xls () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\płyty.LNK -> C:\Users\User\Desktop\płyty.xls (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\tranzit 1159.LNK -> C:\Users\User\Downloads\tranzit 1159.doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Ведомості подьезних путей новие (2).LNK -> F:\Ведомості подьезних путей новие.doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Ведомості подьезних путей новие.LNK -> F:\Ведомості подьезних путей новие.doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Загрузки.LNK -> C:\Users\User\Downloads () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Заходи 2 лист.LNK -> F:\папка дс\Заходи 2 лист.doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Комісія по ЕЦ.LNK -> F:\папка дс\Комісія по ЕЦ.doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Локальный диск (D).LNK -> D:\ () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\мова (2).LNK -> C:\Users\User\Desktop\мова (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Мои документы (2).LNK -> C:\Users\User\Documents () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Мои документы.LNK -> C:\Users\User\Documents () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\памятка.LNK -> C:\Users\User\Downloads\памятка.docx () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\папка дс.LNK -> F:\папка дс (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\приметы.LNK -> D:\приметы.docx () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Рабочий стол (2).LNK -> C:\Users\User\Desktop () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Рабочий стол.LNK -> C:\Users\User\Desktop () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\розпорядження на викон. тел.вказ. цд-8-434 від 04.05.16р..LNK -> F:\папка дс\розпорядження на викон. тел.вказ. цд-8-434 від 04.05.16р..doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\сопроводілоловка №37 від 13.05.2016р..LNK -> F:\папка дс\сопроводілоловка №37 від 13.05.2016р..doc (No File) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Съемный диск (F) (2).LNK -> F:\ () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Съемный диск (F).LNK -> F:\ () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Office\Последние файлы\Шаблоны.LNK -> C:\Users\User\AppData\Roaming\Microsoft\Шаблоны () Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ChomikBox.lnk -> C:\Program Files (x86)\ChomikBox\ChomikBox.exe ( ) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -> C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Winamp.lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\AkelPad.lnk -> C:\Program Files (x86)\Total Commander\Plugins\exe\AkelPad.exe (No File) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk -> C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\WinRAR\Руководство по консольной версии RAR.lnk -> C:\Program Files (x86)\WinRAR\Rar.txt () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\WinRAR\Справка WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.chm () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Winamp\Co nowego.lnk -> C:\Program Files (x86)\Winamp\whatsnew.txt () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Winamp\Odinstaluj Winampa.lnk -> C:\Program Files (x86)\Winamp\UninstWA.exe (Nullsoft, Inc.) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Winamp\Winamp.lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk -> C:\Program Files (x86)\VideoLAN\VLC\Documentation.url () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk -> C:\Program Files (x86)\VideoLAN\VLC\NEWS.txt () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk -> C:\Program Files (x86)\VideoLAN\VLC\VideoLAN Website.url () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\SamLab.ws - New Soft.lnk -> C:\Program Files (x86)\Total Commander\Sam Lab.url (No File) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander Rus.lnk -> C:\Program Files (x86)\Total Commander\Totalcmd.exe (No File) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Информация о версии.lnk -> C:\Program Files (x86)\Total Commander\Language\Readme.txt (No File) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Настройка командера.lnk -> C:\Program Files (x86)\Total Commander\Plugins\exe\TweakTC.exe (No File) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Справка к программе.lnk -> C:\Program Files (x86)\Total Commander\Language\Wcmd_rus.hlp (No File) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Удаление командера.lnk -> C:\Program Files (x86)\Total Commander\Uninstall.exe (No File) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Полезные утилиты\Записывание CD&DVD.lnk -> C:\Program Files (x86)\Total Commander\Soft\Sateira\DataBurner.exe (Sateira Software) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Полезные утилиты\Обслуживание системы.lnk -> C:\Program Files (x86)\Total Commander\Soft\Ace Utilities\au.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Полезные утилиты\Оптимизация системы.lnk -> C:\Program Files (x86)\Total Commander\Soft\fitW\fitW.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Total Commander\Полезные утилиты\Проигрыватель аудио.lnk -> C:\Program Files (x86)\Total Commander\Plugins\wlx\AmpView\AmpView.exe (No File) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\PDF-XChange Viewer\PDF-XChange Viewer.lnk -> C:\Program Files (x86)\PDF-XChange Viewer\PDFXCview.exe (Tracker Software Products (Canada) Ltd.) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\PDF-XChange Viewer\Удаление.lnk -> C:\Program Files (x86)\PDF-XChange Viewer\unins000.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Access 2007.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Excel 2007.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Outlook 2007.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Word 2007.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Microsoft Office 2007 Языковые параметры.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Диспетчер рисунков Microsoft Office.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Организатор клипов (Microsoft).lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Центр диагностики Microsoft Office.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Средства Microsoft Office\Цифровой сертификат для проектов VBA.lnk -> C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Malwarebytes\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Letasoft Sound Booster\Letasoft Sound Booster.lnk -> C:\Program Files (x86)\Letasoft Sound Booster\SoundBooster.exe (Letasoft) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Media Player Classic.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe (MPC-HC Team) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Uninstall\Uninstall K-Lite Codec Pack.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Help\Frequently Asked Questions.lnk -> C:\Program Files (x86)\K-Lite Codec Pack\Info\faq.htm () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Intel\Intel Control Center.lnk -> C:\Program Files (x86)\Intel\Intel Control Center\IntelControlCenter.exe (Intel Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Intel\Intel(R) Rapid Storage Technology.lnk -> C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe (Intel Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Chess.lnk -> C:\Program Files\Microsoft Games\Chess\Chess.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\FreeCell.lnk -> C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk -> C:\Windows\System32\gameux.dll (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Hearts.lnk -> C:\Program Files\Microsoft Games\Hearts\Hearts.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Internet Backgammon.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Backgammon\bckgzm.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Internet Checkers.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Checkers\chkrzm.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Internet Spades.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Spades\shvlzm.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Mahjong.lnk -> C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Minesweeper.lnk -> C:\Program Files\Microsoft Games\Minesweeper\Minesweeper.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\More Games from Microsoft.lnk -> C:\Program Files\Microsoft Games\More Games\MoreGames.dll (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Purble Place.lnk -> C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Solitaire.lnk -> C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Games\Spider Solitaire.lnk -> C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy\Exact Audio Copy.lnk -> C:\Program Files (x86)\Exact Audio Copy\EAC.exe () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\Uninstall.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\uninst.exe (DT Soft Ltd.) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Chomikuj.pl\ChomikBox.lnk -> C:\Program Files (x86)\ChomikBox\ChomikBox.exe ( ) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk -> C:\Program Files\CCleaner\uninst.exe (Piriform Ltd) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Canon LBP6020\Электронное руководство LBP6020.lnk -> C:\Program Files (x86)\Canon\LBP6020\Manuals\index.html () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\BT Program\Устройства Bluetooth.lnk -> C:\Windows\System32\bthprops.cpl (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Корпорация Майкрософт (Microsoft Corp.)) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc () Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Bluetooth File Transfer Wizard.lnk -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation) Shortcut: C:\Users\Все пользователи\Intel\ExtremeGraphics\CUI\Resource\HD-графика Intel®.lnk -> C:\Windows\System32\GfxUI.exe (Intel Corporation) ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp\Winamp (Tryb awaryjny).lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) -> /SAFE=1 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) -> --reset-config --reset-plugins-cache vlc://quit ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) -> -Iskins ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes\Uninstall Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\unins000.exe () -> /LOG ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Letasoft Sound Booster\Diagnostics Report Creator.lnk -> C:\Program Files (x86)\Letasoft Sound Booster\SoundBoosterTaskHost.exe (Letasoft) -> -CreateReport ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\DirectVobSub.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\vsfilter.dll",DirectVobSub ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow audio decoder.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax",configureAudio ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow video decoder.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax",configure ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\Haali Media Splitter.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\Haali\splitter.ax",Configure ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Audio.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavaudio.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Splitter.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavsplitter.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Video.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavvideo.ax",OpenConfiguration ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chomikuj.pl\Odinstaluj ChomikBox.lnk -> C:\Windows\System32\msiexec.exe (Microsoft Corporation) -> /x {45B8131C-E239-4BE0-A92B-0E7FE1BBF83E} ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program\Деинсталлировать комплект Bluetooth.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {230D1595-57DA-4933-8C4E-375797EBB7E1} ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -extoff ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto: ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1 ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Winamp\Winamp (Tryb awaryjny).lnk -> C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) -> /SAFE=1 ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) -> --reset-config --reset-plugins-cache vlc://quit ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) -> -Iskins ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Malwarebytes\Uninstall Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\unins000.exe () -> /LOG ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Letasoft Sound Booster\Diagnostics Report Creator.lnk -> C:\Program Files (x86)\Letasoft Sound Booster\SoundBoosterTaskHost.exe (Letasoft) -> -CreateReport ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\DirectVobSub.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\vsfilter.dll",DirectVobSub ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow audio decoder.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax",configureAudio ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow video decoder.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax",configure ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\Haali Media Splitter.lnk -> C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\Haali\splitter.ax",Configure ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Audio.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavaudio.ax",OpenConfiguration ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Splitter.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavsplitter.ax",OpenConfiguration ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Video.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\lavvideo.ax",OpenConfiguration ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Chomikuj.pl\Odinstaluj ChomikBox.lnk -> C:\Windows\System32\msiexec.exe (Microsoft Corporation) -> /x {45B8131C-E239-4BE0-A92B-0E7FE1BBF83E} ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\BT Program\Деинсталлировать комплект Bluetooth.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {230D1595-57DA-4933-8C4E-375797EBB7E1} ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/ InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner Homepage.url -> URL: hxxp://www.piriform.com/ccleaner InternetURL: C:\Users\User\Favorites\Веб-сайты Майкрософт\Microsoft Store.url -> URL: hxxp://go.microsoft.com/fwlink/?linkid=140813 InternetURL: C:\Users\User\Favorites\Веб-сайты Майкрософт\Домашняя страница IE.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=72186 InternetURL: C:\Users\User\Favorites\Веб-сайты Майкрософт\Узел надстроек для Internet Explorer.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=50893 InternetURL: C:\Users\User\Favorites\Веб-сайты MSN\MSN Знаменитости.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=68924 InternetURL: C:\Users\User\Favorites\Веб-сайты MSN\MSN Спорт.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=68921 InternetURL: C:\Users\User\Favorites\Веб-сайты MSN\MSN.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=54729 InternetURL: C:\Users\User\Favorites\Веб-сайты MSN\Новости MSNBC.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=68922 InternetURL: C:\Users\User\Favorites\Windows Live\Windows Live Gallery.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkID=70742 InternetURL: C:\Users\User\Favorites\Windows Live\Windows Live Mail.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=72681 InternetURL: C:\Users\User\Favorites\Windows Live\Windows Live Spaces.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=72682 InternetURL: C:\Users\User\Favorites\Windows Live\Подключение к Windows Live.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=72700 InternetURL: C:\Users\User\Favorites\Links for Россия\MSN, новости в России.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=129702 InternetURL: C:\Users\User\Favorites\Links for Россия\MSN, развлечения в России.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=129703 InternetURL: C:\Users\User\Favorites\Links for Россия\MSN, спорт в России.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=129704 InternetURL: C:\Users\User\Favorites\Links for Россия\Федеральный прогноз погоды.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=129699 InternetURL: C:\Users\User\Favorites\Links\Коллекция веб-фрагментов.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=121315 InternetURL: C:\Users\User\Favorites\Links\Рекомендуемые узлы.url -> URL: hxxps://ieonline.microsoft.com/#ieslice InternetURL: C:\Users\User\Desktop\z pendriva\Aktywator loader\Loader\Windows Loader\Windows Loader\WAŻNE!!!!!\mynavi-expert.url -> URL: hxxp://www.mynavi-expert.pl/reflink/1012/ InternetURL: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/ InternetURL: C:\Users\Все пользователи\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner Homepage.url -> URL: hxxp://www.piriform.com/ccleaner ==================== End of Shortcut.txt =============================

Dodano Dzisiaj, 16:54:
Poradziłem sobie samemu. Temat proszę zamknąć.

Alpha shoppers - jak usunąć?

Alpha shoppers - jak usunąć?

Alpha shoppers - jak usunąć?

Alpha shoppers - jak usunąć?

Kto jest na forum