marian.l23 28.12.15, 14:55 wklej.org/id/1888962/ wklej.org/id/1888966/ Odpowiedz Link Zgłoś Obserwuj wątek Podgląd Opublikuj
kolobos Re: Proszę o sprawdzenie loga 28.12.15, 15:28 Nie zamieszczaj logow bez powodu. Obok frst.exe utworz plik fixlist.txt z zawartoscia: Task: {13C334A0-6BFF-421C-8668-28D70B4B9C4B} - System32\Tasks\{EA0306C5-EBF2-47E0-B577-CF939D372CC2} => pcalua.exe -a C:\Users\Marian\Desktop\drivers_1353395610_ivt2.6.8\ivt2.6\Setup_.exe -d C:\Users\Marian\Desktop\drivers_1353395610_ivt2.6.8\ivt2.6 Task: {1A359FB2-D788-428B-BC97-4FD5B2F9D553} - System32\Tasks\{4C1B2828-E015-4B35-A1DF-F27BFDB81076} => pcalua.exe -a "C:\Users\Marian\Desktop\drivers_1311060807_driver_for_3476_5743_5744\driver for 3476 5743 5744\Setup_.exe" -d "C:\Users\Marian\Desktop\drivers_1311060807_driver_for_3476_5743_5744\driver for 3476 5743 5744" Task: {2DD17AB7-681C-4547-9EDE-002C60100566} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> Brak pliku <==== UWAGA Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> Brak pliku <==== UWAGA Task: {35AE5892-1BE5-4CED-AAD8-B6DFFE4AC79C} - System32\Tasks\{BBE43083-E5CD-4A17-9628-CEB3A77A059A} => pcalua.exe -a E:\Autorun.exe -d E:\ Task: {3E9C7AEE-F6EC-4D68-BEC4-80539B09162A} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> Brak pliku <==== UWAGA Task: {3ECC2A62-EC6F-400D-93AC-B044E8EFAFB5} - System32\Tasks\{BAD02C2E-B9A1-45EE-BECC-7888E70E912C} => C:\staregry\alone\Alone in the Dark\ALONE.EXE Task: {40D9BD20-5D17-46A5-9924-02FAE957EB10} - System32\Tasks\{E644407D-8F28-49B0-A0D1-6C53169BA731} => pcalua.exe -a "C:\Program Files (x86)\Wise\Wise Program Uninstaller\WiseProgramUninstaller.exe" -d "C:\Program Files (x86)\Wise\Wise Program Uninstaller" Task: {5CFA3B2D-918C-4037-93D0-5892D920BA27} - System32\Tasks\{9A6ABA42-BF3F-4BA4-A1E1-BAA7DE501689} => C:\staregry\alone\Alone in the Dark\ALONE.EXE Task: {613F921B-E083-4613-982E-6C970A54FDCA} - System32\Tasks\{34B4B6B4-56FC-41E6-BB46-A031E9D1499F} => pcalua.exe -a C:\Users\Marian\Desktop\winzip70.exe -d C:\Users\Marian\Desktop Task: {683319C0-C7B1-49E3-9002-B133508CCF98} - System32\Tasks\{9C453FF4-CEF0-4C60-B2EA-DBE9C92E05D9} => pcalua.exe -a C:\Users\Marian\Desktop\adwcleaner_www.INSTALKI.pl.exe -d C:\Users\Marian\Desktop Task: {708E3E62-E88C-4967-88ED-71E33157E055} - System32\Tasks\{5CA16E73-5A1A-432B-81D4-5A0807D184C4} => pcalua.exe -a E:\SETUP.EXE -d E:\ Task: {70F524B0-531F-4E00-B45D-85D87E24A7FA} - System32\Tasks\{23178CF7-DD9B-40B3-B997-B7A8E22BEDF2} => pcalua.exe -a C:\Users\Marian\Downloads\AIDA342_[www.programosy.pl]\aida32.exe -d C:\Users\Marian\Downloads\AIDA342_[www.programosy.pl] Task: {8E5B7CC4-343C-4DFB-8458-1D26933CB343} - System32\Tasks\{DB0A56D8-6114-4240-BC13-E3E8F7AA0AE9} => pcalua.exe -a C:\Users\Marian\Desktop\setup.exe -d C:\Users\Marian\Desktop Task: {8F9E2338-B5A6-4772-A6AB-DD2B7FD9EFC1} - System32\Tasks\{95471D6C-C6E3-4B4A-9078-6C73D068A9E2} => pcalua.exe -a C:\windows\system32\pcwrun.exe -c "C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil.exe" Task: {92CD0903-4B2B-42DA-8DD1-B11B97A87105} - System32\Tasks\{28CFF59F-940F-4F1B-9F46-E9D59D68373C} => pcalua.exe -a C:\Users\Marian\Desktop\setup.exe -d C:\Users\Marian\Desktop Task: {9E5C7987-5715-44F3-A2B2-69B548759C28} - System32\Tasks\ROC_JAN2013_TB_rmv => C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe Task: {A355A9B9-5B4B-490E-A01A-C3114946E092} - System32\Tasks\{ACB7F517-6502-4840-A0CF-A6BF81E9426A} => Chrome.exe hxxp://ui.skype.com/ui/0/6.22.81.105/pl/abandoninstall?source=lightinstaller&page=tsMain Task: {A4351A39-020E-455E-92BE-F33C46C7F6D4} - System32\Tasks\{E5153315-E105-4AE9-BF05-EDC3AD4C7EB7} => C:\Program Files (x86)\DOSBox-0.74\DOSBox.exe Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> Brak pliku <==== UWAGA Task: {BC11029B-65E0-49F0-B659-7EB12DC0F6F2} - System32\Tasks\{BC4A71D9-9BE6-4D5C-8E57-9728E464C457} => C:\staregry\alone\Alone in the Dark\ALONE.EXE Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> Brak pliku <==== UWAGA Task: {DA99FF3D-972F-4738-80FE-E415F26C8EDE} - System32\Tasks\{9E1F69E3-834B-495D-9CB2-49D041C04958} => Chrome.exe hxxp://ui.skype.com/ui/0/6.22.81.104/pl/abandoninstall?source=lightinstaller&page=tsMain Task: {DDCFB38F-2C93-4F6B-8AB8-F88597B09AED} - System32\Tasks\{24FD5CA3-9B7E-44BC-8B02-473248991F55} => pcalua.exe -a "C:\Program Files\HP\HP LaserJet P1100 Series\Uninstall.exe" Task: {EB89A297-8157-44C4-9AEB-E6198F1E47E9} - System32\Tasks\{2C278811-437D-434C-A2F5-C1EB431EF0AD} => C:\staregry\alone\Alone in the Dark\ALONE.EXE Task: {EEBE85B7-4E8F-4463-ABD2-ABC4A2FDB325} - System32\Tasks\{C5625D71-4913-49BF-A37C-8B1102540D87} => C:\staregry\alone\Alone in the Dark\ALONE.EXE Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> Brak pliku <==== UWAGA HKLM-x32\...\Run: [] => [X] CHR HKU\S-1-5-21-870333776-2993426617-3364020922-1002\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\S-1-5-21-870333776-2993426617-3364020922-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA Toolbar: HKU\S-1-5-21-870333776-2993426617-3364020922-1002 -> Brak nazwy - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Brak pliku CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [X] S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [X] S3 BT; system32\DRIVERS\btnetdrv.sys [X] S3 Btcsrusb; System32\Drivers\btcusb.sys [X] S0 BTHidEnum; System32\Drivers\vbtenum.sys [X] S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X] S3 SNPSTD3; system32\DRIVERS\snpstd3.sys [X] S3 VComm; system32\DRIVERS\VComm.sys [X] S3 VcommMgr; System32\Drivers\VcommMgr.sys [X] 2015-12-28 12:33 - 2015-12-28 13:57 - 00000000 ____D C:\AdwCleaner 2015-12-24 09:01 - 2015-12-24 15:44 - 00000032 _____ C:\windows\0 2015-12-24 09:01 - 2015-12-24 09:01 - 00000000 _____ C:\windows\SysWOW64\0 2015-12-28 09:41 - 2014-07-31 08:59 - 00000000 ____D C:\Qoobox EmptyTemp: W FRST wybierz napraw. Usun katalog C:\FRST po wykonaniu i nie uzywaj wiecej combofix. Odpowiedz Link Zgłoś