
Dzięki za pomoc z góry.
Task: {0F441C19-D59F-461F-A845-49A853DED9E5} - \WarThunder sat -> Brak pliku <==== UWAGA
Task: {22D763EA-38EB-4DB1-9F4D-AA97693CB3DE} - \SmartWeb Upgrade Trigger Task -> Brak pliku <==== UWAGA
Task: {2F863501-0D52-4FFF-9A7F-835403AB536C} - System32\Tasks\Seees => C:\PROGRA~1\GROOVE~1\Enahleba.bat <==== UWAGA
Task: {323F781D-8890-4C36-ACBC-CF57F2AAF93B} - \AION nextFirstSaturday -> Brak pliku <==== UWAGA
Task: {3E53D919-FD90-4510-8680-F8FC16B83D54} - \crxbroCheckTask -> Brak pliku <==== UWAGA
Task: {3FCF5A0D-1265-49FA-B84F-D27A11F5BB3E} - System32\Tasks\{2B121C7E-098F-4997-99D5-4F38B9908C1E} => pcalua.exe -a "C:\Program Files (x86)\PLAY Web partner\uninst.exe"
Task: {459FFD9D-204C-4405-90E8-364B853740E2} - System32\Tasks\{7117945E-CA22-49E5-B6AA-CEB4787717DC} => pcalua.exe -a "C:\Users\USER\Downloads\Wiedźmin - Polska paczka językowa.exe" -d C:\Users\USER\Downloads
Task: {583CAC60-2CDB-40AF-99EE-854470C8BE3D} - System32\Tasks\YTAHelper => C:\Program Files (x86)\YTAHelper\YTAHelper.exe <==== UWAGA
Task: {72CBC0FB-D0D8-4A6D-881C-3F9E54F1BEA8} - System32\Tasks\{982635CB-C36E-45A0-B380-6682090C2FFF} => pcalua.exe -a C:\Users\USER\AppData\Roaming\yoursearching\UninstallManager.exe -c -ptid=face
Task: {85EA8BBE-5114-409F-82D3-2304934BB2F1} - System32\Tasks\{03548B66-E4EB-4249-99D1-E0A319FFAF69} => pcalua.exe -a "D:\sms\The Sims 2 Ultimate Collection\The Sims 2\CSBin\PackageInstaller.exe" -d "D:\sms\The Sims 2 Ultimate Collection\The Sims 2\CSBin"
Task: {8B643AA8-4D1F-4EBF-B0B1-A0822613BF6F} - \StormFall W1 -> Brak pliku <==== UWAGA
Task: {96EB4738-E28B-49DD-A0D7-2BB29457D44F} - System32\Tasks\{3D6BF587-2CEC-4A55-9F24-65C02C01FD5A} => pcalua.exe -a C:\Users\USER\Downloads\Opera_26.0.1656.60_Setup.exe -d C:\Users\USER\Downloads
Task: {99CB3BD5-11A2-4061-9561-611DBDB132BA} - \crxbroBrowserUpdateUA -> Brak pliku <==== UWAGA
Task: {A05C1F80-B0AD-40D2-ADE1-A19706909BEE} - System32\Tasks\{49C5D156-EF98-4BF9-A91F-08D215FA7680} => pcalua.exe -a "C:\Program Files (x86)\MKJogo\MK IM\Bin\uInst.exe"
Task: {AB53B202-1B96-424D-8360-51245224B7D3} - System32\Tasks\{05090285-49E5-4F33-A1D9-EFA9E9A06A36} => pcalua.exe -a "D:\sms\The Sims 2 Ultimate Collection\The Sims 2\TSBin\TS2UPD0.exe" -d "D:\sms\The Sims 2 Ultimate Collection\The Sims 2\TSBin"
Task: {B38D5619-3BDF-4AAB-B857-CBAE9D614FF7} - System32\Tasks\{22AD91D5-0DB7-4F90-B789-BB76677263DC} => pcalua.exe -a "C:\Users\USER\Downloads\Opera_26.0.1656.60_Setup (1).exe" -d C:\Users\USER\Downloads
Task: {C7C314CC-316F-4586-87F8-CCB53DC69576} - System32\Tasks\{F098D14C-BE39-4F69-8B57-3FD7664BA365} => pcalua.exe -a "C:\Program Files (x86)\Counter Strike 1.6 Go Edition\Uninstall.exe"
Task: {FD9CE549-419C-44D5-9608-DF70AECD150C} - \crxbroBrowserUpdateCore -> Brak pliku <==== UWAGA
Task: {FE471B29-1FC9-495A-B20F-252325B008FC} - System32\Tasks\{A478D709-059F-4C68-ACC2-1F51DDBFCD58} => pcalua.exe -a "C:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe"
C:\Program Files (x86)\YouTube Accelerator
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\F05A16F4.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Dhcyalded => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\F05A16F4.sys => ""="Driver"
HKU\S-1-5-21-1752028006-4290276881-260418550-1000\...\Run: [BingSvc] => C:\Users\USER\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Brak pliku
GroupPolicyScripts: Ograniczenia <======= UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-1752028006-4290276881-260418550-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
URLSearchHook: HKLM-x32 -> Domyślne = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL =
SearchScopes: HKLM-x32 -> _tmp URL =
Toolbar: HKU\S-1-5-21-1752028006-4290276881-260418550-1000 -> Brak nazwy - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - Brak pliku
FF Plugin HKU\S-1-5-21-1752028006-4290276881-260418550-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Brak pliku]
S2 MobogenieService; C:\Program Files (x86)\Mobogenie3\MobogenieService.exe [127680 2015-05-28] () [Brak podpisu cyfrowego]
C:\Program Files (x86)\Mobogenie3
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]
DeleteKey: HKLM\SOFTWARE\Wow6432Node\yoursites123Software
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQPCMgr
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A0768431-F066-4702-80FC-0AA3588B4FEA}
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Yahoo! Search
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\IHProtect Service
C:\Users\USER\AppData\Roaming\Winziper
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CableNut\Adjuster.lnk
C:\Users\Public\Desktop\EloBuddy.lnk
C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk
C:\Program Files (x86)\fdFFHBX\fdFFHBX
C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sparta.lnk
C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk
C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk
C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\LOL Recorder.lnk
C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\969fa00ceac8236d\Vivaldi.lnk
C:\Users\USER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk
HOSTS:
EmptyTemp:
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 2 gości