09.05.2015, 18:11
Do notatnika wklej i zapisz jako fixlist.txt
Zapisany skrypt umieść obok ściągniętego programu FRST
Następnie w programie kliknij Fix,po wykonaniu pokaż raport z tego działania.
Description: Usługa Diagnostics Tracking Service niespodziewanie zakończyła pracę.
Też pozbądź się tej opcjonalnej aktualizacji:
(KB3022345)
Kod:
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Policies\system: [ConsentPromptBehaviorAdmin] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Policies\system: [EnableLUA] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Policies\system: [PromptOnSecureDesktop] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NS&pvid=22.1.0.9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NS&pvid=22.1.0.9
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NS&pvid=22.1.0.9
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NS&pvid=22.1.0.9
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NS&pvid=22.1.0.9
HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\S-1-5-21-4268632261-1538008564-1901804441-1000 -> {482E9BF0-F60C-491D-B9A0-4F16148D6D97} URL = https://www.google.com/search?q={searchTerms}
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-01-07]
FF HKU\S-1-5-21-4268632261-1538008564-1901804441-1000\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
U0 sr; No ImagePath
C:\ProgramData\Baidu
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm.sys => ""="Driver"
CMD: netsh advfirewall reset
CMD: ipconfig /flushdns
EmptyTemp:
Zapisany skrypt umieść obok ściągniętego programu FRST
Następnie w programie kliknij Fix,po wykonaniu pokaż raport z tego działania.
Description: Usługa Diagnostics Tracking Service niespodziewanie zakończyła pracę.
Też pozbądź się tej opcjonalnej aktualizacji:
(KB3022345)
[Aby zobaczyć linki, zarejestruj się tutaj]