Witajcie.
Mam problem z grą Grand Theft Auto: San Andreas. Gdy gram w nią przez pierwsze 2-3 minuty, nagle minimalizuje się do pasku zadań i wyrzuca mnie do pulpitu. Szybko wykryłem winowajcę - przez ułamek sekundy na pasku zadań zauważyłem, jak jakaś aplikacja się załączyła, a zaraz potem się schowała. Było to coś takiego, jak w załączniku.
Użyłem programu OTL w celu znalezienia problemu. Logi: http://wklej.to/5XTmu
Proszę bardzo, oto logi:
FRST: http://www.wklej.org/id/1504134/
Addition: http://www.wklej.org/id/1504136/
To jak, ktoś pomoże?
W panelu sterowania odinstaluj Winamp Toolbar i WindowsProtectManger20.0.0.401.
Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
HKLM\...\Run: [TkBellExe] => "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\Run: [Microsoft Essentials] => C:\Users\bart\AppData\Local\Temp\MsMpEng.exe <===== ATTENTION
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\bart\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\Run: [uTorrent] => "C:\Users\bart\Downloads\uTorrent.exe"
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\Run: [screenSHU] => "C:\Program Files\screenSHU\screenSHU.exe" --hidden
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\Run: [BearShare] => "C:\Program Files\BearShare Applications\BearShare\BearShare.exe" --lightmode
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\Run: [puush] => D:\puush\puush.exe
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\Run: [Tiny download manager] => "C:\Users\Ewelina SoBtysiak\AppData\Local\DM\TinyDM.exe" /M
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess?
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...\InprocServer32: [Default-pngfilt] <==== ATTENTION!
HKU\S-1-5-21-2423537383-1036335865-1609287249-1000\...A8F59079A8D5}\localserver32: <==== ATTENTION!
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
URLSearchHook: HKCU - (No Name) - {a5ae8924-4036-420f-b7f6-a47e4b8f692e} - No File
SearchScopes: HKCU - {4FEE7DF6-D69E-4F91-90EA-691B53AA3CFD} URL = http://searchou.com/?q={searchTerms}&id=3a5ebba700000000000000189ba3d1c0&r=532
SearchScopes: HKCU - {942BC73F-4AF0-493E-ACD4-2F563148D399} URL = http://search.softonic.com/INF00040/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=682
BHO: Video Player -> {06e367b1-6c93-4cc4-9924-8d4859220d2a} -> C:\Program Files\VideoPlayerV3\VideoPlayerV3beta660\ie\VideoPlayerV3beta660.dll No File
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll No File
BHO: Webexp Enhanced -> {164c129f-1ab4-4ed4-993f-46c24c264704} -> C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha650\ie\WebexpEnhancedV1alpha650.dll No File
FF Extension: YTubEAAddsRieMover - C:\Users\bart\AppData\Roaming\Mozilla\Firefox\Profiles\3y57a1py.default\Extensions\lta7hdf@lfxykvo.net [2014-01-31]
FF HKLM\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha650.net] - C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha650\ff
FF HKLM\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files\VideoPlayerV3\VideoPlayerV3beta660\ff
CHR HKLM\...\Chrome\Extension: [bppfcidgcbbkjghaappbgoljighcoacm] - C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha650\ch\WebexpEnhancedV1alpha650.crx []
CHR HKLM\...\Chrome\Extension: [ggpcleoagckefcmekcbgdhhmcfcdofhj] - C:\Users\Ewelina Sołtysiak\AppData\Local\adStartPage\unifinder.crx [2014-03-19]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-09-09]
CHR HKLM\...\Chrome\Extension: [oejjbmgafckaophpmaojejnckjeoghfk] - C:\Program Files\VideoPlayerV3\VideoPlayerV3beta660\ch\VideoPlayerV3beta660.crx [2012-09-09]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 SNP325; system32\DRIVERS\snp325.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 TEAM; system32\DRIVERS\RtTeam60.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 UNDPX1K; \??\C:\Windows\system32\drivers\UNDPX1K.SYS [X]
S3 UNDPX2A; \??\C:\Windows\system32\drivers\UNDPX2A.SYS [X]
S3 UNDPX2K; \??\C:\Windows\system32\drivers\UNDPX2K.SYS [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
U3 wampapache64; No ImagePath
C:\AdwCleaner
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.135\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.99\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.25.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.79\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\bart\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.145\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.123\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{8932AEFE-9DB6-4f43-AFB2-5682F55E773A}\InprocServer32 -> C:\Program Files\Microsoft Virtual PC\VPCShExH.DLL No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\bart\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.24.15\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.149\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{9793fbbf-e9db-3b01-b322-3430cbcf3cd5}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Google Talk Plugin\gtpo3d_host.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2423537383-1036335865-1609287249-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\bart\AppData\Local\Google\Update\1.3.21.111\psuser.dll No File
Task: {068D3C64-3A6B-4F01-8770-86519E41C3BA} - System32\Tasks\HDXUHT => Rundll32.exe "C:\Windows\system32\E_FD4BGCE2.dll",Pnbsjaowq
C:\Windows\system32\E_FD4BGCE2.dll
Task: {1EDE9CCB-53CA-4C14-A870-91F27754C97E} - System32\Tasks\{6B856785-429C-4301-9C4D-78F4286EDE73} => Chrome.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=4.2.0.169.405&LastError=404
Task: {358BE507-348F-4704-AE7C-51837136230C} - System32\Tasks\{4849C984-2482-45DC-9DE1-2BAB5BF9D9F6} => Chrome.exe
Task: {3AAEC8EB-5087-492F-AC82-B3A9D636849F} - System32\Tasks\{D0D256FC-DADF-4683-90DE-D7D21D353A05} => Chrome.exe http://ui.skype.com/ui/0/5.8.0.158/pl/abandoninstall?source=lightinstaller&page=tsInstall
Task: {48BE6432-C5A5-4F26-AED6-021D991B9ACA} - System32\Tasks\{8E69CE43-3135-4150-AADD-806FCA45A5B1} => Chrome.exe http://ui.skype.com/ui/0/6.20.0.104/pl/go/help.faq.installer?LastError=1603
Task: {52E29D9F-D50B-41CA-8290-96031D985D49} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2423537383-1036335865-1609287249-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {52F211CA-5796-4C41-964B-CF0B678663FD} - System32\Tasks\{4BF26743-94CA-433E-A251-B3B6278B54B0} => Chrome.exe http://ui.skype.com/ui/0/6.21.60.104/pl/go/help.faq.installer?LastError=1603
Task: {56B097E2-E7E0-4953-99D1-6DA9F65C4437} - System32\Tasks\{329DF678-C07D-4CFC-9670-AB9DF3C8246F} => Chrome.exe http://ui.skype.com/ui/0/6.5.0.158/pl/go/help.faq.installer?LastError=1601
Task: {57368AA2-48CC-4D93-A85E-82B323DB0788} - System32\Tasks\{CC525A14-7406-4B91-B602-4ED8D51EE64F} => Chrome.exe
Task: {639279E6-B737-4F9D-84D5-E271B8EEA8CF} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2423537383-1036335865-1609287249-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {8B986C27-559B-4D22-BB30-8805D3ADFA15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {9ECE4373-0815-431A-8DF5-635AD00A70C7} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2423537383-1036335865-1609287249-1002UA => C:\Users\Ewelina Sołtysiak\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {B8C1CB0C-35AD-4247-918E-D37DA405D935} - System32\Tasks\RtlNICDiagVistaStart => C:\Program Files\Realtek\Realtek Ethernet Diagnostic Utility\8169Diag.exe
Task: {BF5CA71C-BC6B-4EC7-9DA6-DA87B67FB845} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{544FCEE1-F716-4CD2-AEBF-F1EF4B4AE180}.exe
Task: {C846068F-FEA6-4AD8-B2DB-901E4A6FB588} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{FCCBF8C5-E73B-4367-9654-CB2E8508E3BB}.exe
Task: {DD6C6B59-CC37-479C-8CC8-16F1B9BC4122} - System32\Tasks\AdobeAAMUpdater-1.0-joputer-Ewelina Sołtysiak => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{544FCEE1-F716-4CD2-AEBF-F1EF4B4AE180}.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{FCCBF8C5-E73B-4367-9654-CB2E8508E3BB}.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2423537383-1036335865-1609287249-1002Core.job => C:\Users\Ewelina SoBtysiak\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2423537383-1036335865-1609287249-1002UA.job => C:\Users\Ewelina SoBtysiak\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\HDXUHT.job => C:\Windows\system32\E_FD4BGCE2.dll
Task: C:\Windows\Tasks\RtlNICDiagVistaStart.job => C:\Program Files\Realtek\Realtek Ethernet Diagnostic Utility\8169Diag.exe
C:\Users\Ewelina Sołtysiak\AppData\Local\DM
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.
Skasuj folder C:\FRST
Dysk przeskanuj Malwarebytes Anti-Malware
Podczas instalacji usuń zaznaczenie przy Uruchom okres testowy Malwarebytes Anti-Malware Premium.
http://wstaw.org/m/2014/03/25/2014-03-25_123039.png
Język PL > Settings > General Settings > Language > Polish
Odinstaluj:
Adobe Flash Player 15 ActiveX
Adobe Flash Player 15 Plugin
Adobe Shockwave Player 12.1
Java 6 Update 30
Java 7 Update 5
JavaFX 2.1.1
Java SE Development Kit 8
Java 8
Zainstaluj:
Flash Player 15.0.0.189 ActiveX
Flash Player 15.0.0.189 Plugin
Jeżeli nadal występuje problem z minimalizacją gry to pobierz Autoruns
W Autoruns na karcie Services odznacz:
PLAY ONLINE. RunOuc C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe
Później zrestartuj komputer.
Dopiero uporanie się z problemem przez program Autoruns dało jakiś efekt. Dzięki Atis za pomoc.