Na laptopie zainstalowałem pakiet Qihu 360 TS i po zakończeniu pełnego skanowania znaleziono 42 zagrożenia w ustawieniach systemu i 2 zagrożenia autostartu. Czy słusznie? Informuję, że mój Windows jest brandowany przez Acera.
http://forum.dobreprogramy.pl/regulamin-dzia%C5%82u-bezpiecze%C5%84stwo-t503173/
Przeczytaj wrzuć odpowiednie logi. Cyferki nic nie znaczą, może to fp a może infekcja nikt wróżką nie jest.
FRST już 2 godziny robi logi, chyba zostawię go na noc.
Dołączam pliki. Przy okazji daję zrzut ekranu z programem Qihu 360.
Otwórz notatnik systemowy i wklej:
Task: {16035A59-D136-4650-978D-B824968CC55D} - \HPCustParticipation HP Deskjet 2540 series No Task File ==== ATTENTION
Task: {714C5587-2C6E-400D-BB64-54F69059B8B8} - \EgisUpdate No Task File ==== ATTENTION
Task: {89085E0E-4C91-43F6-A7FB-0B5E9BDB6D13} - \Adobe Flash Player Updater No Task File ==== ATTENTION
Task: {E3DD1AE7-8902-4323-85AB-1B668FB61752} - \PMMUpdate No Task File ==== ATTENTION
Task: {E577195D-95F6-419B-B4E5-941475C6A941} - \CreateChoiceProcessTask No Task File ==== ATTENTION
Task: {F99E007A-796A-464D-B618-107532B15C06} - \SidebarExecute No Task File ==== ATTENTION
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [InstallerLauncher] = "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-41 (the data entry has 36 more characters).
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-16] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] = C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] = [X]
HKU\S-1-5-21-3018464620-989131422-1699157679-1001\...\Run: [AvgUpdater0814av] = C:\ProgramData\Avg_Update_0814av\0814av_AVG-Secure-Search-Update.exe [2775576 2014-08-12] ()
URLSearchHook: HKLM-x32 - Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Users\Sebastianek\AppData\LocalLow\Free_Lunch_Design\prxtbFre2.dll (ClientConnect Ltd.)
URLSearchHook: HKLM-x32 - Icy Tower Toolbar - {ff65fdbc-5683-4dfd-9113-1fcb5b0a3447} - C:\Users\Sebastianek\AppData\LocalLow\Icy_Tower\prxtbIcy2.dll (ClientConnect Ltd.)
URLSearchHook: HKU\S-1-5-21-3018464620-989131422-1699157679-1001 - Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Users\Sebastianek\AppData\LocalLow\Free_Lunch_Design\prxtbFre2.dll (ClientConnect Ltd.)
URLSearchHook: HKU\S-1-5-21-3018464620-989131422-1699157679-1001 - Icy Tower Toolbar - {ff65fdbc-5683-4dfd-9113-1fcb5b0a3447} - C:\Users\Sebastianek\AppData\LocalLow\Icy_Tower\prxtbIcy2.dll (ClientConnect Ltd.)
SearchScopes: HKU\S-1-5-21-3018464620-989131422-1699157679-1001 - DefaultScope {43CBDC6E-A8F5-4AD6-AFA3-D050AFBC70ED} URL =
SearchScopes: HKU\S-1-5-21-3018464620-989131422-1699157679-1001 - {43CBDC6E-A8F5-4AD6-AFA3-D050AFBC70ED} URL =
SearchScopes: HKU\S-1-5-21-3018464620-989131422-1699157679-1001 - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL =
BHO-x32: Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Users\Sebastianek\AppData\LocalLow\Free_Lunch_Design\prxtbFre2.dll [2014-03-26] (ClientConnect Ltd.)
Toolbar: HKLM-x32 - Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Users\Sebastianek\AppData\LocalLow\Free_Lunch_Design\prxtbFre2.dll [2014-03-26] (ClientConnect Ltd.)
Toolbar: HKLM-x32 - Icy Tower Toolbar - {ff65fdbc-5683-4dfd-9113-1fcb5b0a3447} - C:\Users\Sebastianek\AppData\LocalLow\Icy_Tower\prxtbIcy2.dll [2014-03-26] (ClientConnect Ltd.)
Toolbar: HKU\S-1-5-21-3018464620-989131422-1699157679-1001 - No Name - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - No File
Toolbar: HKU\S-1-5-21-3018464620-989131422-1699157679-1001 - No Name - {FF65FDBC-5683-4DFD-9113-1FCB5B0A3447} - No File
CHR HKU\S-1-5-21-3018464620-989131422-1699157679-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\SEBAST~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [Not Found]
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
FRST się zawiesił. CO ROBIĆ?
Czynność powtórzyć
Teraz sam się odwiesił.
Jeśli prosi o restart to nacisnąć OK?
I co mam zrobić z Qihu? Resolve czy Skip?
Naciśnij ok.