RunDLL
Wystąpił problem podczas uruchamiania pliku EquilibriaFlaxseed.dll
Nie można odnaleźć określonego modułu.
OK
Raport z FRST:
http://wklej.org/id/3204599/
http://wklej.org/id/3204601/
Proszę o pomoc
Po co zaśmieciłeś system instalując PC Tools Spyware Doctor?
Teraz nie można tego odinstalować, a sterowniki nadal działają.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3370069194-1118324482-3808655675-1001\...\Policies\Explorer: []
HKU\S-1-5-21-3370069194-1118324482-3808655675-1001\...\Policies\Explorer: [HideSCAPower] 0
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> Brak pliku
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> Brak pliku
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-3370069194-1118324482-3808655675-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
S2 sdAuxService; Brak ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2017-06-19 14:27 - 2017-06-19 15:00 - 00000000 ____D C:\AdwCleaner
2017-06-14 14:14 - 2017-06-14 14:14 - 00000000 ___SD C:\ComboFix
2017-06-14 14:14 - 2017-06-14 14:14 - 00000000 ___SD C:\32788R22FWJFW
2017-06-14 13:27 - 2017-06-14 13:27 - 05659512 ____R (Swearware) C:\Users\Bolo\Desktop\ComboFix.exe
2017-06-14 13:27 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2017-06-14 13:27 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2017-06-14 13:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-06-14 13:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-06-14 13:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-06-14 13:27 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2017-06-14 13:27 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2017-06-14 13:27 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-14 02:11 - 2013-11-14 02:11 - 0000037 ___SH () C:\Users\Bolo\AppData\Local\70149b02515b3bb20dd492.47983420
2017-01-12 05:59 - 2017-01-12 05:59 - 0000000 _____ () C:\Users\Bolo\AppData\Local\{F04E3DFA-0E7B-45AA-925C-C265411F8D32}
2016-02-28 20:05 - 2016-03-01 23:05 - 0000021 _____ () C:\ProgramData\event.txt
2017-06-16 15:03 - 2017-06-16 15:03 - 0000016 _____ () C:\ProgramData\mntemp
Task: {04745D73-FD4E-4174-9CAB-9E5093BB4BCB} - System32\Tasks\{F5717916-25AB-4809-AC37-BF72208B4761} => pcalua.exe -a F:\setupLM.exe -d F:\
Task: {06CDD674-CCD4-4C16-AF06-21A4177A2E0B} - System32\Tasks\{B866329C-B0C8-415A-AF99-A77682AE5568} => pcalua.exe -a C:\Users\Bolo\Desktop\java_ee_sdk-6u4-jdk7-windows.exe -d C:\Users\Bolo\Desktop
Task: {0817AA54-E7F4-4A09-BB7A-1C8BC183A6D6} - System32\Tasks\{690AD34C-04D5-4EE5-80B6-21CF6B7B8456} => pcalua.exe -a "C:\kurs InVentor\uninstall\odinstaluj.exe"
Task: {1A083B78-EEBF-42CB-9CC9-0413387DB2B7} - System32\Tasks\{E56543DF-4D01-4F7A-B7FC-6438240C1C5F} => pcalua.exe -a "C:\Program Files (x86)\PC Drivers HeadQuarters\Driver Detective\ISUninstall.exe" -d "C:\Program Files (x86)\PC Drivers HeadQuarters\Driver Detective"
Task: {1F674495-864D-4E84-A1DF-16137E56BA57} - System32\Tasks\{BD174633-FA89-49D9-916D-920576E34059} => pcalua.exe -a "C:\Users\Bolo\Desktop\RM-Win_4.21\RM-Win_4.21\RM-Win_WinXP\RM-Win Windows XP\hinstall.exe" -d "C:\Users\Bolo\Desktop\RM-Win_4.21\RM-Win_4.21\RM-Win_WinXP\RM-Win Windows XP"
Task: {2C845096-0A58-46CE-ABC0-8F905A49A1BD} - System32\Tasks\{820EC436-BAC9-48AC-B2CD-4B37563F6B43} => pcalua.exe -a C:\Users\Bolo\AppData\Local\Temp\jre-8u65-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== UWAGA
Task: {2CEC166A-3B6E-4649-BE0E-0ED993B5B128} - System32\Tasks\BoloOverdiligentUnzealousV2 => Rundll32.exe EquilibriaFlaxseed.dll,main 7 1 <==== UWAGA
Task: {33E979E7-9B69-4FD6-B4C1-5D1603B095C3} - System32\Tasks\{4F071352-EDD6-4002-B6E8-E14AEE97A3C1} => pcalua.exe -a "C:\Program Files\ANSYS Inc\v121\Uninstall.exe" -d "C:\Program Files\ANSYS Inc\v121"
Task: {34CCA46A-B2D1-4747-9A58-B61E62287FC9} - System32\Tasks\{0A3FE0ED-0090-41EC-B78E-999537334498} => pcalua.exe -a C:\Users\Bolo\Desktop\bolo\I9000_USB_driver\I9000_USB_driver\shrewsbury-V5_02_0_2-WHQLed-with-RNDIS-ADB-customer-free\Setup.exe -d C:\Users\Bolo\Desktop\bolo\I9000_USB_driver\I9000_USB_driver\shrewsbury-V5_02_0_2-WHQLed-with-RNDIS-ADB-customer-free
Task: {46CD5B79-A61C-4AEF-ADCD-359905D1F05D} - System32\Tasks\{2C0C251C-13FB-4E96-AB66-70B0BD1126D5} => pcalua.exe -a C:\Users\Bolo\AppData\Local\Temp\Uninstall.exe -d C:\Users\Bolo\AppData\Local\Temp <==== UWAGA
Task: {538FDDF0-600F-46EF-AEDA-0CD589B972C1} - \Program aktualizacji online firmy Adobe. -> Brak pliku <==== UWAGA
Task: {5E6A9D0B-D215-4FB0-AC30-EDFBEE197C06} - System32\Tasks\{7DE7EDE6-5F87-4A8A-8B55-A6B1BEF7259B} => pcalua.exe -a "C:\Users\Bolo\Desktop\Office 2007 PL\Office 2007 PL\setup.exe" -d "C:\Users\Bolo\Desktop\Office 2007 PL\Office 2007 PL"
Task: {725FE235-5A71-4B78-9565-1044F95F7F7A} - System32\Tasks\{7CAD3592-DC9E-48AF-A0EF-2FD585D9C040} => pcalua.exe -a C:\Users\Bolo\AppData\Local\Temp\7zSFDAF.tmp\MicroInstallerNative.exe -d C:\Users\Bolo\AppData\Local\Temp\7zSFDAF.tmp <==== UWAGA
Task: {7E091649-275B-4151-8F54-9FFA3C5B900F} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG PC TuneUp 2014\OneClick.exe
Task: {82E86EE7-CB09-452D-B6FC-DF3B1C884DDC} - System32\Tasks\{C3850B23-8F79-451F-B3B0-3D3DA39A1A5D} => pcalua.exe -a L:\ansys\Ansys\WIN64\setup.exe -d L:\ansys\Ansys\WIN64
Task: {84F36762-FC59-452E-8EE9-FA688AF253B1} - System32\Tasks\{D1B52707-7058-48C9-A8E2-226533ED7598} => pcalua.exe -a C:\Users\Bolo\Desktop\bolo\I9000_USB_driver\I9000_USB_driver\shrewsbury-V5_02_0_2-with-ADB-customer-free\Setup.exe -d C:\Users\Bolo\Desktop\bolo\I9000_USB_driver\I9000_USB_driver\shrewsbury-V5_02_0_2-with-ADB-customer-free
Task: {A466ED79-C9D5-44EE-A3A2-3535DC22D4E3} - System32\Tasks\{DFCAC083-E1D7-461D-87AA-AF4ECBE021D6} => pcalua.exe -a "L:\Ansys 12.1 (64bit) (zi.gawron)\ans12win64\winx64\setup.exe" -d "L:\Ansys 12.1 (64bit) (zi.gawron)\ans12win64\winx64"
Task: {AE605F3A-1F8D-4C30-94DF-F86E8111B042} - System32\Tasks\{16E7CD93-B426-42A0-854B-A558985BBF34} => pcalua.exe -a "C:\Program Files (x86)\MATLAB71\uninstall\uninstall.exe" -c C:\Program Files (x86)\MATLAB71\
Task: {BA63306F-85BF-4365-9E9B-E9E0BE7686DC} - System32\Tasks\{201F64DB-AEFC-1346-9FAD-65622969672A} => C:\Users\Bolo\AppData\Roaming\{201F6~1\synctask.exe <==== UWAGA
Task: {C6980EE0-820D-48F5-8A49-BFD9207364F8} - System32\Tasks\{96E1FA6D-122E-4D10-96DE-AF7AA3351C73} => pcalua.exe -a C:\Users\Bolo\Desktop\gcc-4.9.2-64.exe -d C:\Users\Bolo\Desktop
Task: {CD11C4C3-7ADD-45D2-A7CE-3F427909B809} - System32\Tasks\{FE06B4D2-3D1D-4AF3-93EC-B850540F0041} => pcalua.exe -a "C:\Program Files\ANSYS Inc\v121\fluent\license\win64\Client_License_install-win64-2.0.exe" -d "C:\Program Files\ANSYS Inc\v121\fluent\license\win64"
Task: {D3431876-F084-457E-8E05-130F8C69FB5D} - System32\Tasks\{36DE9488-1FF2-4ADB-BFA3-24032BA928AE} => pcalua.exe -a "C:\Users\Bolo\Desktop\Working.Model.2D.2005.v8.0.1.0 [crack].exe" -d C:\Users\Bolo\Desktop
Task: {D82DB17E-2DB2-4B81-9B1F-3139BD4412C9} - System32\Tasks\{9EEA5003-5ADB-46D2-84F2-F47BFA3DBB17} => pcalua.exe -a C:\Users\Bolo\Desktop\HijackThis.exe -d C:\Users\Bolo\Desktop
Task: {DBAD1200-21C9-465C-96C1-79A881DD9931} - System32\Tasks\{15CA6C9F-77BC-41A7-9F3F-28268304E350} => pcalua.exe -a C:\ANSYS-12\32\Ansys12\setupLM.exe -d C:\ANSYS-12\32\Ansys12
Task: {ECB0EC98-3D00-4603-81B3-24C0604ED962} - System32\Tasks\{BAF9C117-8D0D-47E5-85CC-1B324885AEC8} => pcalua.exe -a "C:\Users\Bolo\Desktop\RAR Password recovery with-crack\rar-password-recovery.exe" -d "C:\Users\Bolo\Desktop\RAR Password recovery with-crack"
Task: {EF53D53B-1873-42DD-B116-75F366C83669} - System32\Tasks\{1B58F49A-503D-42DF-A88A-8D11F835BA55} => pcalua.exe -a "C:\Program Files (x86)\BlueStacks\HD-RuntimeUninstaller.exe"
Task: {F93D101E-DEC8-4BD7-B48B-DA3447F530E5} - System32\Tasks\{A3A478C7-6212-4EED-9D0D-8A7E92D91680} => pcalua.exe -a C:\Users\Bolo\AppData\Local\Temp\7zS2AB8.tmp\MicroInstallerNative.exe -d C:\Users\Bolo\AppData\Local\Temp\7zS2AB8.tmp <==== UWAGA
Task: {FC866BA0-C9A1-47D6-BB59-00609CF8D629} - System32\Tasks\{5C2A39E7-C78C-4E38-956D-B0AD4662CFAA} => pcalua.exe -a "C:\Program Files\ANSYS Inc\v120\fluent\license\win64\Client_License_install-win64-2.0.exe" -d "C:\Program Files\ANSYS Inc\v120\fluent\license\win64"
Task: {FCCA3375-B4E4-4A69-95A2-702E08BE6780} - System32\Tasks\{29C7558C-2F2D-4260-B25B-2A1A828DEB5F} => pcalua.exe -a "D:\ansys\Ansys 12 64bit\ans12win64\winx64\setupLM.exe" -d "D:\ansys\Ansys 12 64bit\ans12win64\winx64"
Task: {FEACB170-D3AF-4DB4-B5A7-D97BE538016B} - System32\Tasks\{3CEF42E4-2CCC-4D20-9278-8D15FF099A54} => pcalua.exe -a "C:\Users\Bolo\Desktop\EZLeecher v3.2\vbrun60sp6.exe" -d "C:\Users\Bolo\Desktop\EZLeecher v3.2"
Task: C:\Windows\Tasks\{201F64DB-AEFC-1346-9FAD-65622969672A}.job => C:\Users\Bolo\AppData\Roaming\{201F6~1\synctask.exe <==== UWAGA
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
HKU\S-1-5-21-3370069194-1118324482-3808655675-1001\Software\Classes\exefile: <===== UWAGA
EmptyTemp:
Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.
Kliknij Skanuj (Scan) i pokaż nowy raport z FRST bez Addition i Shortcut.
Nawet nie pamiętam kiedy go instalowałem. Po wczytaniu pliku fixlist do programu FRS i ponownym restarcie systemu błąd ustał. Poniżej zamieszczam raport Fixlog oraz FRST:
http://wklej.org/id/3204632/
http://wklej.org/id/3204633/
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist:
CreateRestorePoint:
S3 PCTBD; C:\Windows\System32\Drivers\PCTBD64.sys [77144 2012-10-23] (PC Tools)
R0 pctDS; C:\Windows\System32\drivers\pctDS64.sys [453896 2012-02-28] (PC Tools)
R0 pctEFA; C:\Windows\System32\drivers\pctEFA64.sys [1096176 2012-02-28] (PC Tools)
S3 pctplsm; C:\Windows\System32\drivers\pctplsm64.sys [87968 2012-11-01] (PC Tools)
S1 PCTSD; C:\Windows\System32\Drivers\PCTSD64.sys [253256 2012-11-01] (PC Tools)
C:\Windows\System32\Drivers\PCTBD64.sys
C:\Windows\System32\drivers\pctDS64.sys
C:\Windows\System32\drivers\pctEFA64.sys
C:\Windows\System32\drivers\pctplsm64.sys
C:\Windows\System32\Drivers\PCTSD64.sys
C:\Users\Bolo\AppData\LocalLow\Temp
C:\Qoobox
EmptyTemp:
DeleteQuarantine:
Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.
Kliknij Skanuj (Scan) i pokaż nowy raport z FRST bez Addition i Shortcut.
Skasuj folder C:\FRST
Zrobione. Dzięki wielkie za pomoc. Wszystkiego dobrego 