Witam ponownie, znów potrzebuję eksperckiej pomocy.
W laptopie nie działa żadna przeglądarka, pinguje poprawnie, skype się loguje a stronki browsery nie działają nikagda. System przeskanowany i oczyszczony Adwcleaner’em bez problemu. Logi poniżej:
Za okazaną pomoc z góry serdecznie dziękuje
Odinstaluj McAfee WebAdvisor.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist:
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA
SearchScopes: HKLM -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_ir_15_07&cd=2XzuyEtN2Y1L1Qzu0EtD0C0AzyyEtD0DyByEtD0F0CyC0EyCtN0D0Tzu0StCtCtAyBtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2StBtDtByC0DyC0B0BtGyBtB0A0DtGyC0E0A0BtGyC0DtDzztGtB0C0FyEyEyEtCtCtDtD0DyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAzy0ByDtDyByC0DtGzz0DyBtBtGyEyE0B0BtG0A0FtD0CtGyCyB0DyB0BzytDyEtAyBtBtB2Q&cr=997061985&ir=
SearchScopes: HKLM -> {39118170-7B07-4BC5-8B47-C62B1DC1DC99} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_ir_15_07&cd=2XzuyEtN2Y1L1Qzu0EtD0C0AzyyEtD0DyByEtD0F0CyC0EyCtN0D0Tzu0StCtCtAyBtN1L2XzutAtFyBtFyBtFyCtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0B0B0EtBzyzzyEtG0Dzzzz0DtG0A0BtCyBtGyDtDtAzztGtA0AyBtBzy0AtDtByEyByB0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAzy0ByDtDyByC0DtGzz0DyBtBtGyEyE0B0BtG0A0FtD0CtGyCyB0DyB0BzytDyEtAyBtBtB2Q&cr=1418571667&ir=
SearchScopes: HKU\S-1-5-21-3368343144-14705692-3748848627-1000 -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_ir_15_07&cd=2XzuyEtN2Y1L1Qzu0EtD0C0AzyyEtD0DyByEtD0F0CyC0EyCtN0D0Tzu0StCtCtAyBtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2StBtDtByC0DyC0B0BtGyBtB0A0DtGyC0E0A0BtGyC0DtDzztGtB0C0FyEyEyEtCtCtDtD0DyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAzy0ByDtDyByC0DtGzz0DyBtBtGyEyE0B0BtG0A0FtD0CtGyCyB0DyB0BzytDyEtAyBtBtB2Q&cr=997061985&ir=
SearchScopes: HKU\S-1-5-21-3368343144-14705692-3748848627-1000 -> {39118170-7B07-4BC5-8B47-C62B1DC1DC99} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_ir_15_07&cd=2XzuyEtN2Y1L1Qzu0EtD0C0AzyyEtD0DyByEtD0F0CyC0EyCtN0D0Tzu0StCtCtAyBtN1L2XzutAtFyBtFyBtFyCtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0B0B0EtBzyzzyEtG0Dzzzz0DtG0A0BtCyBtGyDtDtAzztGtA0AyBtBzy0AtDtByEyByB0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAzy0ByDtDyByC0DtGzz0DyBtBtGyEyE0B0BtG0A0FtD0CtGyCyB0DyB0BzytDyEtAyBtBtB2Q&cr=1418571667&ir=
CHR HKLM\...\Chrome\Extension: [elggllhppljlljkgfeokjpehmdamkejk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [elggllhppljlljkgfeokjpehmdamkejk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3368343144-14705692-3748848627-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [elggllhppljlljkgfeokjpehmdamkejk] - hxxps://clients2.google.com/service/update2/crx
R2 SSSvc; C:\Program Files (x86)\ScreenShot\SSSvc.exe [139712 2017-04-24] (Filseclab Corporation Limited)
U3 idsvc; Brak ImagePath
2017-09-23 18:56 - 2015-08-31 15:52 - 000000000 ____D C:\AdwCleaner
2015-01-26 15:10 - 2015-02-02 21:31 - 000001150 _____ () C:\ProgramData\FavIcon.ico
C:\Program Files (x86)\ScreenShot
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Brak pliku
Task: {041CD7E7-CB5D-4853-9881-14A8B0A158FB} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0695FDDC-754B-45D9-BF57-7C045F12CA04} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA
Task: {090842C8-B142-4109-B0DD-8D8F295C7CD1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {10B1CFA3-182E-49B0-8889-73ABD8D0A0E9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {1FC1CEA2-4A0D-492C-AE88-CC0B83A50190} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2E9B5AE7-49B6-48BB-B9DC-646F9D8EC724} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA
Task: {2F91F54C-6111-48AD-A89B-5B58A0F6213B} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3AB7A15E-8483-4578-A7BA-AC34BB524071} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {486D1CBF-C167-4AC1-BD14-8E702431EBC8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {4D374F71-4102-489D-B9BA-DE2211A01F13} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {549E8C9E-94C4-4F15-9EA9-61399EA6AFE8} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA
Task: {646E090F-F2D2-4EF6-9AD2-6E1366E4ADB1} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {721405A7-8E7C-4147-A995-FB49F7138347} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA
Task: {73C4FF1C-5CDB-4A74-8992-B28D9246B908} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7CA7619D-E4ED-4AF8-AA4B-89D2FA13B032} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7F3A1E51-28F8-447C-A2A5-28EB1681BFD4} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {86FA6C03-1F31-4DEB-9515-FDC939AEE615} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8E339E7A-A11E-4856-8C5D-F71DB64D8838} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {99FC3601-E3FD-432E-9745-B3CD9883D446} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA
Task: {9C580793-DB6D-4C75-9E04-50102A8A8ADF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA
Task: {A48D4B12-6F56-4E9F-BDAF-AAF119F17018} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA
Task: {A666EA82-8107-40FE-824C-DCEE7ABD4844} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A74516EB-BC65-496A-BD49-5B534AE4E7CB} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B3587AAA-AEDE-402B-A6F1-A2E9F707DF3B} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B7F9E6F3-4701-40D0-8F49-245AC9033415} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C05680E5-6FEA-4D1D-9699-D025AC0A4410} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C474A88C-6EB3-490A-9B01-FECDE3D352E0} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C5DFD448-153A-4E64-AF89-4C76184CDE05} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Brak pliku <==== UWAGA
Task: {CAC195B3-34EA-4798-A346-99025D098FF0} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA
Task: {CF00170B-1B24-4770-8554-DD25E808E349} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA
Task: {E5773539-9702-465F-97B8-82A5BCC7AC5E} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {E5F0448A-3BF4-4A27-BA60-E22FB038F8A2} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {ECDBFD35-B15B-4E42-B172-868139A8DDB7} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA
Task: {F36F8316-1A3C-48DE-B8FC-156F1FB9CDDB} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
RemoveProxy:
EmptyTemp:Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.
Kliknij Skanuj (Scan) i pokaż nowy raport z FRST bez Addition i Shortcut.
…