Facebook

FRST safest cryptocurrency exchange

From mossaju, 3 Years ago, written in Plain Text.
URL https://pastebin.pl/view/910a5142
Embed
Download Paste or View Raw
Hits: 159
  1. Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 13-05-2020 01
  2. Uruchomiony przez mmosz (19-05-2020 22:19:35) Run:1
  3. Uruchomiony z C:\Users\mmosz\Downloads
  4. Załadowane profile: mmosz
  5. Tryb startu: Normal
  6. ==============================================
  7.  
  8. fixlist - zawartość:
  9. *****************
  10. CustomCLSID: HKU\S-1-5-21-2106163889-2526983103-2080332365-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\mmosz\AppData\Local\Microsoft\OneDrive\20.052.0311.0011\amd64\FileSyncShell64.dll => Brak pliku
  11. CustomCLSID: HKU\S-1-5-21-2106163889-2526983103-2080332365-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\mmosz\AppData\Local\Microsoft\OneDrive\20.052.0311.0011\amd64\FileSyncShell64.dll => Brak pliku
  12. CustomCLSID: HKU\S-1-5-21-2106163889-2526983103-2080332365-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\mmosz\AppData\Local\Microsoft\OneDrive\20.052.0311.0011\amd64\FileSyncShell64.dll => Brak pliku
  13. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
  14. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
  15. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
  16. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
  17. HKU\S-1-5-21-2106163889-2526983103-2080332365-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
  18. HKU\S-1-5-21-2106163889-2526983103-2080332365-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
  19. SearchScopes: HKLM -> {C8DF2958-097A-4B72-AA3A-628DF6B7CD58} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
  20. SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  21. SearchScopes: HKLM-x32 -> {C8DF2958-097A-4B72-AA3A-628DF6B7CD58} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
  22. SearchScopes: HKU\S-1-5-21-2106163889-2526983103-2080332365-1001 -> {C8DF2958-097A-4B72-AA3A-628DF6B7CD58} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
  23. CHR StartupUrls: Default -> "hxxp://google.pl/","hxxp://www.yoursites123.com/?type=hp&ts=1449661478&z=0d51a2f8f9aa8899f0b02dagbz1z2teq8q6gezcm0m&from=ient07021&uid=ST9750420AS_6WS0QXRSXXXX6WS0QXRS","hxxp://www.yoursites123.com/?type=hp&ts=1451325492&z=ccb40cc84af033185163c20g9z0wegec7o3w0z3t5o&from=wpm12253&uid=ST9750420AS_6WS0QXRSXXXX6WS0QXRS","hxxp://www.yoursites123.com/?type=hp&ts=1451325859&z=0dcc63c09fb7f6e4f9499e0gaz0wdg1cfo1w2b7w8b&from=wpm12253&uid=ST9750420AS_6WS0QXRSXXXX6WS0QXRS","hxxp://www.yoursites123.com/?type=hp&ts=1451333161&z=901c872996dc4c906278d89g8z9w2g2c1c0c5g6q9e&from=wpm12253&uid=ST9750420AS_6WS0QXRSXXXX6WS0QXRS","hxxp://www.yoursites123.com/?type=hp&ts=1452247967&z=796029c2dffe5a02cf6ebedg6zbw6odo3z7m0temde&from=wpm01073&uid=ST9750420AS_6WS0QXRSXXXX6WS0QXRS"
  24. C:\Users\Default\Favorites\Links\Amazon.co.uk – Online Shopping.url
  25. C:\Users\Default\Favorites\HP\Amazon.co.uk – Online Shopping.url
  26. C:\Users\Default User\Favorites\Links\Amazon.co.uk – Online Shopping.url
  27. C:\Users\Default User\Favorites\HP\Amazon.co.uk – Online Shopping.url
  28. C:\Users\mmosz\Favorites\Links\Amazon.co.uk – Online Shopping.url
  29. C:\Users\mmosz\Favorites\HP\Amazon.co.uk – Online Shopping.url
  30. EmptyTemp:
  31. *****************
  32.  
  33. HKU\S-1-5-21-2106163889-2526983103-2080332365-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => pomyślnie usunięto
  34. HKU\S-1-5-21-2106163889-2526983103-2080332365-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => pomyślnie usunięto
  35. HKU\S-1-5-21-2106163889-2526983103-2080332365-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => pomyślnie usunięto
  36. HKLM\Software\\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono
  37. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono
  38. HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono
  39. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono
  40. HKU\S-1-5-21-2106163889-2526983103-2080332365-1001\Software\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono
  41. HKU\S-1-5-21-2106163889-2526983103-2080332365-1001\Software\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => Wartość pomyślnie przywrócono
  42. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C8DF2958-097A-4B72-AA3A-628DF6B7CD58} => pomyślnie usunięto
  43. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Wartość pomyślnie przywrócono
  44. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{C8DF2958-097A-4B72-AA3A-628DF6B7CD58} => pomyślnie usunięto
  45. HKU\S-1-5-21-2106163889-2526983103-2080332365-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C8DF2958-097A-4B72-AA3A-628DF6B7CD58} => pomyślnie usunięto
  46. "Chrome StartupUrls" => pomyślnie usunięto
  47. C:\Users\Default\Favorites\Links\Amazon.co.uk – Online Shopping.url => pomyślnie przeniesiono
  48. C:\Users\Default\Favorites\HP\Amazon.co.uk – Online Shopping.url => pomyślnie przeniesiono
  49. "C:\Users\Default User\Favorites\Links\Amazon.co.uk – Online Shopping.url" => nie znaleziono
  50. "C:\Users\Default User\Favorites\HP\Amazon.co.uk – Online Shopping.url" => nie znaleziono
  51. C:\Users\mmosz\Favorites\Links\Amazon.co.uk – Online Shopping.url => pomyślnie przeniesiono
  52. C:\Users\mmosz\Favorites\HP\Amazon.co.uk – Online Shopping.url => pomyślnie przeniesiono
  53.  
  54. =========== EmptyTemp: ==========
  55.  
  56. BITS transfer queue => 7888896 B
  57. DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 17937826 B
  58. Java, Flash, Steam htmlcache => 345718002 B
  59. Windows/system/drivers => 34810523 B
  60. Edge => 3335712 B
  61. Chrome => 458399405 B
  62. Firefox => 0 B
  63. Opera => 0 B
  64.  
  65. Temp, IE cache, history, cookies, recent:
  66. Default => 0 B
  67. Users => 0 B
  68. ProgramData => 0 B
  69. Public => 0 B
  70. systemprofile => 0 B
  71. systemprofile32 => 0 B
  72. LocalService => 38400 B
  73. NetworkService => 53754 B
  74. mmosz => 301401831 B
  75.  
  76. RecycleBin => 0 B
  77. EmptyTemp: => 1.1 GB danych tymczasowych Usunięto.
  78.  
  79. ================================
  80.  
  81.  
  82. System wymagał restartu.
  83.  
  84. ==== Koniec  Fixlog 22:19:57 ====
  85.  
  86.  

Reply to "FRST"