Witam, problem jest następujący:
Postanowiłam “posprzątać” komputer brata, bo włączają się jakieś dziwne programy. Zaczęłam od odinstalowania zbędnych programów. niestety gdy dotarłam do MyPCBackup panel sterowania się zaciął. Tzn zatrzymał na tym programie nie mogę tego zmienić. Za każdym razem gdy wchodzę w panel sterowania / dodaj usuń program, jest to samo i cofa mnie do głównego panelu sterowania. Czy da się z tym jeszcze coś zrobić?
Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.
Pobierz Farbar Recovery Scan Tool zgodny z wersją systemu 32-bit lub 64-bit.
Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.
Raporty umieść na http://wklej.org/ i podaj link.
Odinstaluj SiteFinder.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
HKLM\...\Run: [] => [X]
HKLM\...\Run: [tuto4pc_pl_17] => [X]
HKU\.DEFAULT\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\.DEFAULT\...\RunOnce: [Del1588875] - cmd.exe /Q /D /c del "C:\WINDOWS.0\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del5424625] - cmd.exe /Q /D /c del "C:\WINDOWS.0\TEMP\0.del"
HKU\.DEFAULT\...\RunOnce: [Del44528906] - cmd.exe /Q /D /c del "C:\WINDOWS.0\TEMP\0.del"
HKU\S-1-5-19\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-20\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del2532562] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del1401062] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Alcohol 4.44.2.4713 Setup] - C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\is1988980107\Alcohol52_FE_2.0.2.4713.exe [9556832 2012-11-27] (Alcohol Soft Development Team)
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del19572000] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS.0\system32\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe [814472 2013-06-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del8048140] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del15914625] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del166222015] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del10022406] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del547375] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del4727484] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del4824812] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del18898093] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\86104.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Del2537406] - cmd.exe /Q /D /c del "C:\DOCUME~1\SysOp\USTAWI~1\Temp\0.del"
HKU\S-1-5-21-117609710-1220945662-1417001333-1001\...\RunOnce: [Report] - C:\AdwCleaner\AdwCleaner[S0].txt [61849 2014-07-12] ()
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=60CB005345000000&affID=121136&tsp=5022
URLSearchHook: HKLM - SiteFinder - {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D} - C:\Program Files\SiteFinder\SiteFinder.dll (Site Finder)
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {1A167FA0-428E-8559-AE41-642F945E30CD} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={BB9E9B14-3B10-4DA0-8FF0-C46E84783D0D}
SearchScopes: HKLM - {7920F8AB-0E83-EA4B-6805-3725F17287A0} URL = http://search.sweetim.com/search.asp?src=6&crg=3.09010003&st=12&q={searchTerms}&barid={BB9E9B14-3B10-4DA0-8FF0-C46E84783D0D}
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd=&ctid=CT3319766&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPF5FADF56-4ADF-4BD6-BC4F-1E075D1AA741&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&cd=2XzuyEtN2Y1L1Qzu0ByCtD0DtN0D0Tzu0CyCtDtDtN1L2XzutN1L1Czu1L1C1F1GtB&cr=916169706&ir=
SearchScopes: HKCU - {1F1DD852-89B9-7F11-D737-3C55E9E56A3C} URL = http://wyzo.wyzostart.com/s/?q={searchTerms}&iesrc={referrer:source?}&cfg=2-47-0-0
SearchScopes: HKCU - {7920F8AB-0E83-EA4B-6805-3725F17287A0} URL = http://search.sweetim.com/search.asp?src=6&crg=3.09010003&st=12&q={searchTerms}&barid={BB9E9B14-3B10-4DA0-8FF0-C46E84783D0D}
Toolbar: HKLM - SiteFinder - {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D} - C:\Program Files\SiteFinder\SiteFinder.dll (Site Finder)
FF Homepage: hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=60CB005345000000&affID=121136&tsp=5022
FF Extension: BonanzaDeals - C:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\5dna9xht.default\Extensions\{f9d03c26-0575-497e-821d-f7956d23e0ca}.xpi [2014-01-01]
CHR NewTab: "chrome-extension://ehjkfdmkpocpileolmldepapdjbfegei/components/supertab/html/supertab.html"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R1 avgtp; C:\WINDOWS.0\system32\drivers\avgtpx86.sys [42784 2014-06-24] (AVG Technologies)
S4 IntelIde; No ImagePath
S3 EraserUtilDrv10822; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv10822.sys [X]
C:\AdwCleaner
C:\WINDOWS.0\system32\drivers\avgtpx86.sys
C:\Documents and Settings\Ala i Zuza\Ustawienia lokalne\Temp\*.exe
C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\*.exe
C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\*.dll
Task: C:\WINDOWS.0\Tasks\At1.job => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe
Task: C:\WINDOWS.0\Tasks\At10.job => C:\DOCUME~1\NETWOR~1\DANEAP~1\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS.0\Tasks\At11.job => C:\DOCUME~1\SysOp\DANEAP~1\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS.0\Tasks\At2.job => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe
Task: C:\WINDOWS.0\Tasks\At3.job => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe
Task: C:\WINDOWS.0\Tasks\At4.job => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe
Task: C:\WINDOWS.0\Tasks\At6.job => C:\DOCUME~1\SysOp\DANEAP~1\METACR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS.0\Tasks\At7.job => C:\DOCUME~1\SysOp\DANEAP~1\Bonanza\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS.0\Tasks\At8.job => C:\DOCUME~1\NETWOR~1\DANEAP~1\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS.0\Tasks\At9.job => C:\DOCUME~1\SysOp\DANEAP~1\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS.0\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\WINDOWS.0\TEMP\{5D900952-11AC-462D-8EA0-2C36505B124D}.exe
Task: C:\WINDOWS.0\Tasks\CPU Grid Computing.job => C:\WINDOWS.0\system32\dfrg\runner.exe
Task: C:\WINDOWS.0\Tasks\ExpressBurnDowngrade.job => C:\Program Files\NCH Software\ExpressBurn\expressburn.exe
Task: C:\WINDOWS.0\Tasks\HP Photo Creations Communicator.job => C:\Documents and Settings\All Users.WINDOWS.0\Dane aplikacji\HP Photo Creations\Communicator.exe
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.
Nie wiem co tam robisz, ale ten fixlog nie został wykonany.