SafeGroup › Bezpieczeństwo › Pomoc po zainfekowaniu v
problem z plikiem systemu dll

Tryby wyświetlania wątku
problem z plikiem systemu dll
jareq Offline
Nowicjusz
Liczba postów: 1
Liczba wątków: 1
Dołączył: 22.07.2015
Reputacja: 0
#1
22.07.2015, 12:22
Witam
Po przeskanowaniu systemu AVG i restarcie:
Wyskakujące trzy okna
Rundl
Wystąpił błąd podczas ładowania DTonguerogra~1/CAMMON~1/system/SysMenu.dll
Nie można odnaleźć określonego modułu
Komputer bardzo wolny
Proszę o pomoc.
Linki
Addition: 

[Aby zobaczyć linki, zarejestruj się tutaj]

FRST:

[Aby zobaczyć linki, zarejestruj się tutaj]



Załączone pliki
.txt   FRST.txt (Rozmiar: 43,43 KB / Pobrań: 58)
Szukaj
Odpowiedz
Ark223 Offline
Amator
Liczba postów: 52
Liczba wątków: 0
Dołączył: 11.06.2015
Reputacja: 3
#2
24.07.2015, 18:57
Potrzeba jeszcze pliku Shortcut.txt
Szukaj
Odpowiedz
tachion Offline
Ekipa forum
Liczba postów: 4 766
Liczba wątków: 33
Dołączył: 16.02.2011
Reputacja: 507
#3
25.07.2015, 11:50
Dwa razy podałeś ten sam log. Podaj jeszcze tak jak zostało tu napisane jeszcze shortcut.txt
Szukaj
Odpowiedz
tachion Offline
Ekipa forum
Liczba postów: 4 766
Liczba wątków: 33
Dołączył: 16.02.2011
Reputacja: 507
#4
25.07.2015, 13:58
Do notatnika wklej i zapisz jako fixlist.txt

Kod:
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKLM\...\Run: [vProt] => D:\Program Files\AVG Web TuneUp\vprot.exe [3174800 2015-07-07] ()
Startup: D:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\crossbrowse.lnk [2015-07-19]
ShortcutTarget: crossbrowse.lnk -> D:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (No File)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=dspp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=dspp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-790525478-261478967-839522115-500\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX
HKU\S-1-5-21-790525478-261478967-839522115-500\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=dspp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&q={searchTerms}
HKU\S-1-5-21-790525478-261478967-839522115-500\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX
HKU\S-1-5-21-790525478-261478967-839522115-500\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=dspp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&q={searchTerms}
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1436864495&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&q={searchTerms}
SearchScopes: HKLM -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.hotsearches.info/?l=1&q={searchTerms}&pid=24465&r=2015/07/19&hid=3501667871199998015&lg=EN&cc=PL&unqvl=90
SearchScopes: HKU\S-1-5-21-790525478-261478967-839522115-500 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&ts=1436864524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-261478967-839522115-500 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&ts=1436864524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-261478967-839522115-500 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&ts=1436864524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-261478967-839522115-500 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&ts=1436864524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-261478967-839522115-500 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&ts=1436864524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-261478967-839522115-500 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&ts=1436864524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-790525478-261478967-839522115-500 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HTS541080G9AT00_MP28XBXBH0S7KSH0S7KSX&ts=1436864524&type=default&q={searchTerms}
R2 vToolbarUpdater18.7.0; D:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\ToolbarUpdater.exe [1874320 2015-07-07] (AVG Secure Search)
R2 WtuSystemSupport; D:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [1195920 2015-07-07] ()
S2 4d21d0d; "D:\WINDOWS\system32\rundll32.exe" "d:\Program Files\Optimizer Pro\OptProCrash.dll",ENT
S2 globalUpdate; D:\Program Files\globalUpdate\Update\globalupdate.exe /svc [X] <==== ATTENTION
S3 globalUpdatem; D:\Program Files\globalUpdate\Update\globalupdate.exe /medsvc [X] <==== ATTENTION
S2 gupdate; "D:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "D:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]
S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [X]
S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [X]
S3 BT; system32\DRIVERS\btnetdrv.sys [X]
S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
S3 cpuz134; \??\D:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\cpuz134\cpuz134_x32.sys [X]
S3 SPBIUpdd; \??\D:\Program Files\Common Files\ShopperPro\spbiw.sys [X]
S3 UIUSys; system32\DRIVERS\UIUSYS.SYS [X]
S1 wafd_vt_1_10_0_20; system32\drivers\wafd_vt_1_10_0_20.sys [X]
S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath
D:\WINDOWS\PIF
D:\WINDOWS\Reimage.ini
D:\Documents and Settings\Administrator\TempWmicBatchFile.bat
D:\Program Files\3aaa25b9-d0a6-46f2-a216-f774c190a06a
D:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\globalUpdate
D:\Documents and Settings\Administrator\Ustawienia lokalne\Temp.dat
D:\Documents and Settings\Administrator\Dane aplikacji\LightningDownloader
D:\Documents and Settings\Administrator\Dane aplikacji\7211
D:\Program Files\5f04a84f-fa34-4895-8b15-be2502a4017b
D:\Program Files\6d24d07d-2891-4f4e-a4b6-e1e8caf65031
D:\Documents and Settings\All Users\Dane aplikacji\ioobfdifdhnjaehmblmjogfnihahlblj
D:\Documents and Settings\All Users\Dane aplikacji\{1a471049-d469-e54f-1a47-71049d464127}
D:\Documents and Settings\Administrator\Dane aplikacji\AnyProtectEx
D:\WINDOWS\system32\029B560A371F4E00AB32838EBC01B9E7
D:\Documents and Settings\Administrator\Dane aplikacji\systweak
D:\WINDOWS\system32\roboot.exe
D:\Documents and Settings\Administrator\Dane aplikacji\Opera Software
D:\Documents and Settings\All Users\Dane aplikacji\IHProtectUpDate
D:\Documents and Settings\All Users\Dane aplikacji\16954474652736077166
D:\Documents and Settings\All Users\Dane aplikacji\fijhefanjjdjbeamocdhffeeojcnblmk
D:\Documents and Settings\All Users\Dane aplikacji\{fc60f84a-2a22-466b-fc60-0f84a2a2e128}
D:\Documents and Settings\Administrator\Dane aplikacji\qqIihIcrucyKTnjww
D:\Documents and Settings\Administrator\Dane aplikacji\QyIsK8X
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Acrobat Speed Launcher.lnk
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Acrobat Synchronizer.lnk
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Acrobat Assistant 8.0
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KernelFaultCheck
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-1-6.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-1-6.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-1-7.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-1-7.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-10_user.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-10.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-11.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-11.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-3.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-3.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-4.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-4.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-5.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-5.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-6.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-6.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\63948ac8-95b7-4dca-bf2e-9482efb91c4d-7.job => D:\Program Files\SavePass 1.1\63948ac8-95b7-4dca-bf2e-9482efb91c4d-7.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\6cc3e595-40a7-4334-a86f-4ce25c64694d-10_user.job => D:\Program Files\Plus.HD_3.5V17.07\6cc3e595-40a7-4334-a86f-4ce25c64694d-10.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\AlcoProof.job => d:\documents and settings\all users\dane aplikacji\{1a471049-d469-e54f-1a47-71049d464127}\businesscards mx 4.00 keygen.exe
Task: D:\WINDOWS\Tasks\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-1-6.job => D:\Program Files\Object Browser\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-1-6.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-1-7.job => D:\Program Files\Object Browser\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-1-7.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-11.job => D:\Program Files\Object Browser\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-11.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-4.job => D:\Program Files\Object Browser\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-4.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-5.job => D:\Program Files\Object Browser\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-5.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-6.job => D:\Program Files\Object Browser\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-6.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-7.job => D:\Program Files\Object Browser\b1f0b064-6205-4e49-8f0c-ba0d5ac977c0-7.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-1-6.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-1-6.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-1-7.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-1-7.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-10_user.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-10.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-11.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-11.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-3.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-3.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-4.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-4.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-5.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-5.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-6.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-6.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-7.job => D:\Program Files\CinemaP-1.9cV19.07\c1bd5e08-0084-46dc-8e00-8adbe4cc5f35-7.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\CaLowRieTracker.job => d:\documents and settings\all users\dane aplikacji\{fc60f84a-2a22-466b-fc60-0f84a2a2e128}\installer_microsoft_office_publisher_1_4_2_english.exe
Task: D:\WINDOWS\Tasks\f885e91a-239b-453e-b901-c71087ae2a9d-1-6.job => D:\Program Files\iWebar\f885e91a-239b-453e-b901-c71087ae2a9d-1-6.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\f885e91a-239b-453e-b901-c71087ae2a9d-1-7.job => D:\Program Files\iWebar\f885e91a-239b-453e-b901-c71087ae2a9d-1-7.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\f885e91a-239b-453e-b901-c71087ae2a9d-11.job => D:\Program Files\iWebar\f885e91a-239b-453e-b901-c71087ae2a9d-11.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\f885e91a-239b-453e-b901-c71087ae2a9d-4.job => D:\Program Files\iWebar\f885e91a-239b-453e-b901-c71087ae2a9d-4.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\f885e91a-239b-453e-b901-c71087ae2a9d-5.job => D:\Program Files\iWebar\f885e91a-239b-453e-b901-c71087ae2a9d-5.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\f885e91a-239b-453e-b901-c71087ae2a9d-6.job => D:\Program Files\iWebar\f885e91a-239b-453e-b901-c71087ae2a9d-6.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\f885e91a-239b-453e-b901-c71087ae2a9d-7.job => D:\Program Files\iWebar\f885e91a-239b-453e-b901-c71087ae2a9d-7.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => D:\Program Files\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => D:\Program Files\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: D:\WINDOWS\Tasks\Opera N Saturday.job => D:\Program Files\Opera\launcher.exe
Task: D:\WINDOWS\Tasks\Opera N Sunday.job => D:\Program Files\Opera\launcher.exe
Task: D:\WINDOWS\Tasks\qqIihIcrucyKTnjww.job => D:\Documents and Settings\Administrator\Dane aplikacji\qqIihIcrucyKTnjww.exe
Task: D:\WINDOWS\Tasks\QyIsK8X.job => D:\Documents and Settings\Administrator\Dane aplikacji\QyIsK8X.exe
Task: D:\WINDOWS\Tasks\ShopperPro.job => D:\Program Files\ShopperPro\ShopperPro.exeÂ/S /nochrome /driver /pixguid=7a22fcf2-c8c1-4abe-a646-c34c39d26217 /country=PL /sparam=F7JzamodcI010924 /SETUP /ChromeExtFile=ShopperPro.crx <==== ATTENTION
Task: D:\WINDOWS\Tasks\SMupdate1.job => D:\WINDOWS\system32\rundll32.exe D:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== ATTENTION
Task: D:\WINDOWS\Tasks\SMupdate2.job => D:\WINDOWS\system32\rundll32.exe D:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== ATTENTION
Task: D:\WINDOWS\Tasks\SMupdate3.job => D:\WINDOWS\system32\rundll32.exe D:\PROGRA~1\COMMON~1\System\SysMenu.dll <==== ATTENTION
Task: D:\WINDOWS\Tasks\SPBIW_UpdateTask_Time_333430363135383035382d3437415a556c2a3223346c41.job => Wscript.exe w/B D:\Documents and Settings\All Users\Dane aplikacji\ShopperPro\spbihe.js spbiu.exe <==== ATTENTION
AlternateDataStreams: D:\Documents and Settings\All Users\Dane aplikacji\TEMP:0B4227B4
CMD: netsh advfirewall reset        
EmptyTemp:

Zapisany skrypt umieść obok ściągniętego programu FRST 
Następnie w programie kliknij Fix,po wykonaniu pokaż raport z tego działania.

Odinstaluj:
Adobe Acrobat 8 Professional
Adobe AIR
Adobe Flash Player 18 NPAPI 
AVG PC Tuneup 2011
AVG Web TuneUp
Google Chrome który został przemianowany na dev.   (CHR dev: Chrome dev build detected! <======= ATTENTION)
Java Runtime Environment Packages

W przeglądarce Firefox

Otwórz menu w górnym rogu po prawej stronie > otwórz menu pomoc oznaczone czerwoną ramką.

[Aby zobaczyć linki, zarejestruj się tutaj]


Informacje dla pomocy technicznej > Odśwież program Firefox. Reset nie naruszy zakładek i haseł.


Ściągnij program

[Aby zobaczyć linki, zarejestruj się tutaj]

kliknij Szukaj i następnie Usuń

Pokaż raport z niego.

Zrób nowe logi i przedstaw z FRST.txt > Addition.txt > Shortcut.txt
Szukaj
Odpowiedz


Skocz do:


Użytkownicy przeglądający ten wątek: 1 gości