witam.
Od 2 dni uruchamia mi się strona na przeglądarce zaraz po włączeniu komputera, oraz nie mogę uruchomić ccleanera, chociaż wcześniej normalnie działał. A i jeszcze przy starcie systemu wyskakuje mi komunikat że nie może uruchomić mbam.dll ( antywirusa odinstalowałem )
LOGI:
Coś nie mogłem uruchomić tego programu, dopiero jak nazwę zmieniłem to poszło. A oto logi
http://www.wklej.org/id/1750740/
FRST uruchom jako administrator.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
HKLM-x32\...\Run: [CMD] => cmd.exe /c start http://zivlingamer.org && exit
HKLM-x32\...\RunOnce: [VCRedist_del] => cmd.exe /c DEL "C:\Users\Michał\AppData\Local\Microsoft\Redist\VCRedist.exe" "C:\Users\Michał\AppData\Local\Microsoft\Redist\VCRedist.cfg"
HKU\S-1-5-21-3380016287-2808884592-4134537925-1004\...\Run: [Akamai NetSession Interface] => C:\Users\Dom\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3380016287-2808884592-4134537925-1004\...\Policies\Explorer: []
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-07-12] (Microsoft Corporation)
IFEO\adwcleaner_4.204.exe: [Debugger] svchost.exe
IFEO\AnVir.exe: [Debugger] svchost.exe
IFEO\AutoLogger.exe: [Debugger] svchost.exe
IFEO\avz.exe: [Debugger] svchost.exe
IFEO\CCleaner.exe: [Debugger] svchost.exe
IFEO\CCleaner64.exe: [Debugger] svchost.exe
IFEO\FRST.exe: [Debugger] svchost.exe
IFEO\FRST64.exe: [Debugger] svchost.exe
IFEO\HiJackThis.exe: [Debugger] svchost.exe
IFEO\regedit.exe: [Debugger] svchost.exe
IFEO\RegWorks.exe: [Debugger] svchost.exe
IFEO\RSIT.exe: [Debugger] svchost.exe
IFEO\RSITx64.exe: [Debugger] svchost.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\mbam.exe [2015-04-18] (Malwarebytes Corporation)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => No File
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => No File
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => No File
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => No File
BootExecute: autocheck autochk *
GroupPolicyUsers\S-1-5-21-3380016287-2808884592-4134537925-1004\User: Group Policy Restriction detected <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
2015-07-02 09:15 - 2015-07-01 11:36 - 12162281 _____ ( ) C:\Users\Dom\Downloads\CCleaner- Professional,Business,Technician Edition 5.07.5261 pl -FULL.exe
2015-07-02 09:14 - 2015-07-02 09:14 - 12080398 ____ R C:\Users\Dom\Downloads\CCleaner- Professional,Business,Technician Edition 5.07.5261 pl -FULL.rar
2015-06-22 16:44 - 2015-06-22 16:44 - 00000000 ____ D C:\Temp
2014-07-10 08:16 - 2014-07-10 08:16 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2015-04-13 06:50 - 2015-04-13 06:50 - 0000024 _____ () C:\Users\Dom\AppData\Roaming\pecodec.dll
C:\ProgramData\LaunchURL.bat
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.
Nie wiem co było w tym skrypcie ale pomogło, wielkie dzięki. A tu masz jeszcze raporcik nowy: http://www.wklej.org/id/1750805/
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
HKLM\...\RunOnce: [*EmptyTemp] => cmd /c rd /q/s C:\FRST\Temp
HKU\S-1-5-21-3380016287-2808884592-4134537925-1000\...\RunOnce: [Report] => \AdwCleaner\AdwCleaner[S0].txt
HKU\S-1-5-21-3380016287-2808884592-4134537925-1000\...\Policies\Explorer: []
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 HPSLPSVC; C:\Users\MICHA~1\AppData\Local\Temp\7zS2D48\hpslpsvc64.dll [X]
2015-07-03 08:55 - 2015-04-06 14:39 - 00000000 ____ D C:\ProgramData\TEMP
DeleteQuarantine:
Uruchom FRST i kliknij Fix. Skasuj folder C:\FRST
Odinstaluj:
Adobe Flash Player 17 ActiveX
Adobe Flash Player 17 NPAPI
Zainstaluj: