Advertisement
Guest User

FixLog

a guest
Sep 4th, 2021
58
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.90 KB | None | 0 0
  1. Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 01-09-2021
  2. Uruchomiony przez Sebastian 2 (04-09-2021 12:05:31) Run:2
  3. Uruchomiony z H:\Users\Sebastian\Downloads
  4. Załadowane profile: Sebastian 2 & postgres & Administrator
  5. Tryb startu: Normal
  6. ==============================================
  7.  
  8. fixlist - zawartość:
  9. *****************
  10. 2021-09-04 04:48 - 2021-09-04 04:48 - 003062560 _____ (Realtek Semiconductor Corp.) C:\Users\Sebastian 2\AppData\Roaming\1696297.exe
  11.  
  12.  
  13. 2021-09-04 04:48 - 2021-09-04 04:48 - 000282112 _____ (hdgrfdgregre) C:\Users\Sebastian 2\AppData\Roaming\4792837.exe
  14. 2021-09-04 04:48 - 2021-09-04 04:48 - 000166912 _____ (sdvsdsdvds) C:\Users\Sebastian 2\AppData\Roaming\6052910.exe
  15. 2021-09-04 04:48 - 2021-09-04 04:48 - 000282112 _____ (hdgrfdgregre) C:\Users\Sebastian 2\AppData\Roaming\6784667.exe
  16. RemoveDirectory: C:\ProgramData\KSVJ4L5U1DBU3TY4J9QZ3HTLA
  17. S3 GVCIDrv; \??\C:\Program Files (x86)\GIGABYTE\RGBFusion\GVCIDrv64.sys [X]
  18. S2 iocbios2; \??\C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [X]
  19. S4 RAMDiskVE; System32\Drivers\RAMDiskVE.sys [X]
  20. S3 VGPU; System32\drivers\rdvgkmd.sys [X]
  21. S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\GIGABYTE\RGBFusion\MODAPI.sys [X]
  22. S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
  23. Task: {181ED6B7-6DBE-4EF9-AD61-5FD4DEFD7BDD} - System32\Tasks\{D1DA9553-5AA9-4A5A-9267-88B6A14F2CE5} => C:\Windows\system32\pcalua.exe -a "H:\Users\Sebastian\Downloads\dotNetFx35setup (1).exe" -d H:\Users\Sebastian\Downloads
  24. Task: {D66374E9-1347-4474-BD9D-A13C995B9886} - System32\Tasks\{2676CEC3-7C92-4DFE-9A0C-E2A05C50C351} => C:\Windows\system32\pcalua.exe -a "C:\Users\Sebastian 2\Downloads\DDU v18.0.2.1\Display Driver Uninstaller.exe" -d "C:\Users\Sebastian 2\Downloads\DDU v18.0.2.1"
  25. GroupPolicy: Ograniczenia ? <==== UWAGA
  26. Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
  27. FirewallRules: [{368B294D-A676-42C2-A683-AF180D1526B7}] => (Allow) C:\Steam\steamapps\common\Mordhau\Mordhau.exe => Brak pliku
  28. FirewallRules: [{F75D3DC0-D4FA-42DF-B808-D52D05A47A69}] => (Allow) C:\Steam\steamapps\common\Mordhau\Mordhau.exe => Brak pliku
  29. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
  30. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
  31. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP_TDI => ""="Driver Group"
  32. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Schedule => ""="Service"
  33. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
  34. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
  35. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Schedule => ""="Service"
  36. HOSTS:
  37. Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
  38. EmptyTemp:
  39. *****************
  40.  
  41. "C:\Users\Sebastian 2\AppData\Roaming\1696297.exe" => nie znaleziono
  42. "C:\Users\Sebastian 2\AppData\Roaming\4792837.exe" => nie znaleziono
  43. "C:\Users\Sebastian 2\AppData\Roaming\6052910.exe" => nie znaleziono
  44. "C:\Users\Sebastian 2\AppData\Roaming\6784667.exe" => nie znaleziono
  45. "C:\ProgramData\KSVJ4L5U1DBU3TY4J9QZ3HTLA" => pomyślnie usunięto
  46. HKLM\System\CurrentControlSet\Services\GVCIDrv => pomyślnie usunięto
  47. GVCIDrv => serwis pomyślnie usunięto
  48. HKLM\System\CurrentControlSet\Services\iocbios2 => pomyślnie usunięto
  49. iocbios2 => serwis pomyślnie usunięto
  50. HKLM\System\CurrentControlSet\Services\RAMDiskVE => pomyślnie usunięto
  51. RAMDiskVE => serwis pomyślnie usunięto
  52. HKLM\System\CurrentControlSet\Services\VGPU => pomyślnie usunięto
  53. VGPU => serwis pomyślnie usunięto
  54. HKLM\System\CurrentControlSet\Services\WinRing0_1_2_0 => pomyślnie usunięto
  55. WinRing0_1_2_0 => serwis pomyślnie usunięto
  56. HKLM\System\CurrentControlSet\Services\xhunter1 => pomyślnie usunięto
  57. xhunter1 => serwis pomyślnie usunięto
  58. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{181ED6B7-6DBE-4EF9-AD61-5FD4DEFD7BDD}" => pomyślnie usunięto
  59. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{181ED6B7-6DBE-4EF9-AD61-5FD4DEFD7BDD}" => pomyślnie usunięto
  60. C:\Windows\System32\Tasks\{D1DA9553-5AA9-4A5A-9267-88B6A14F2CE5} => pomyślnie przeniesiono
  61. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D1DA9553-5AA9-4A5A-9267-88B6A14F2CE5}" => pomyślnie usunięto
  62. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D66374E9-1347-4474-BD9D-A13C995B9886}" => pomyślnie usunięto
  63. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D66374E9-1347-4474-BD9D-A13C995B9886}" => pomyślnie usunięto
  64. C:\Windows\System32\Tasks\{2676CEC3-7C92-4DFE-9A0C-E2A05C50C351} => pomyślnie przeniesiono
  65. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2676CEC3-7C92-4DFE-9A0C-E2A05C50C351}" => pomyślnie usunięto
  66. C:\Windows\system32\GroupPolicy\Machine => pomyślnie przeniesiono
  67. C:\Windows\system32\GroupPolicy\GPT.ini => pomyślnie przeniesiono
  68. C:\ProgramData\NTUSER.pol => pomyślnie przeniesiono
  69. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{368B294D-A676-42C2-A683-AF180D1526B7}" => nie znaleziono
  70. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F75D3DC0-D4FA-42DF-B808-D52D05A47A69}" => nie znaleziono
  71. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => pomyślnie usunięto
  72. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => pomyślnie usunięto
  73. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PNP_TDI => pomyślnie usunięto
  74. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\Schedule => pomyślnie usunięto
  75. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\MBAMService => pomyślnie usunięto
  76. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PAexec => pomyślnie usunięto
  77. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Schedule => pomyślnie usunięto
  78. C:\Windows\System32\Drivers\etc\hosts => pomyślnie przeniesiono
  79. Hosts pomyślnie przywrócono.
  80.  
  81. ========= wevtutil el | Foreach-Object {wevtutil cl "$_"} =========
  82.  
  83.  
  84. ========= Koniec Powershell: =========
  85.  
  86.  
  87. =========== EmptyTemp: ==========
  88.  
  89. BITS transfer queue => 8388608 B
  90. DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10478138 B
  91. Java, Flash, Steam htmlcache => 1014072156 B
  92. Windows/system/drivers => 4189324 B
  93. Edge => 0 B
  94. Chrome => 662834503 B
  95. Firefox => 298988 B
  96. Opera => 0 B
  97.  
  98. Temp, IE cache, history, cookies, recent:
  99. Default => 0 B
  100. Public => 0 B
  101. ProgramData => 0 B
  102. systemprofile => 101090 B
  103. systemprofile32 => 167318 B
  104. LocalService => 299562 B
  105. NetworkService => 407910 B
  106. Sebastian 2 => 1793108454 B
  107. postgres => 1793108454 B
  108. Administrator => 1794407237 B
  109. DefaultAppPool => 1794407237 B
  110.  
  111. RecycleBin => 14010465535 B
  112. EmptyTemp: => 21.3 GB danych tymczasowych Usunięto.
  113.  
  114. ================================
  115.  
  116.  
  117. System wymagał restartu.
  118.  
  119. ==== Koniec Fixlog 12:10:22 ====
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement