voxel
22 Luty 2015 10:09
#1
Witam. System windows 7 x64 SP1. Zaczał ostatnio powoli pracować przeskanowałem Malwarebytes. Oczyściłem foldery Temp. Odinstalowałem zbędne programy. Proszę o sprawdzenie logów gdyż nie mogę uruchomić centrum zabezpieczeń.
FRST i Additional
Pod tym linkiem znalazłem podobny temat, jednak w moim przypadku fix it (ten z wersji dla w7) nie dziala “Ten skrypt Microsoft Fix it nie dotyczy tego systemu operacyjnego lub tej wersji alikacji”.
Muszę również dodać że w usługach odpowiedniego procesu nie znalazłem, tak samo jak progamu windows defender.
Dziękuję za pomoc.
Acorus
22 Luty 2015 11:04
#2
Odinstaluj DealPly,Update Manager for SweetPacks 1.1.Otwórz notatnik systemowy i wklej:
Task: {1518D22F-540F-443F-83AE-891C4A5EFF1A} - System32\Tasks\{CED0345D-07ED-49EB-9B31-AB2E96F01716} = Chrome.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMain
Task: {2B20753A-552E-4A01-A155-11CE7B85CFFC} - System32\Tasks\{7F0E1CBC-508F-4463-ABE9-B8A001E1DCA1} = Chrome.exe http://ui.skype.com/ui/0/5.9.0.123/en/abandoninstall?page=tsMain
Task: {2F6C9133-9547-4644-A9BA-57971DE6C539} - System32\Tasks\{779CE98A-73DD-4ED0-B89E-C73F77D2627D} = Chrome.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMain
Task: {31D63F42-3EF1-4D51-9E51-2167010A9F71} - System32\Tasks\{A2A74130-3456-4CCE-AA17-06F6397169EF} = Firefox.exe http://ui.skype.com/ui/0/5.8.0.158.161/en/abandoninstall?page=tsMain
Task: {3212B41E-A0AA-4A95-8526-C17E21DFEC3D} - System32\Tasks\{14A4DD56-107B-4B44-A7C0-C1AEC0692287} = Chrome.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMain
Task: {454F27CF-01E1-40A4-8608-3243E4563D9B} - System32\Tasks\{4BFBCDB1-383C-4FB2-8C03-A48793B6C506} = Chrome.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMain
Task: {49DD9E3D-E711-4779-9DDF-17BFCD7D9A22} - System32\Tasks\DefaultCheck = c:\Users\All Users\dtdata\R002.exe ==== ATTENTION
Task: {4EB8330D-7498-4EFA-8C9E-6752FD013D7F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4008042891-760779463-374611626-1000UA = C:\Users\HP\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-28] (Facebook Inc.)
Task: {5B78423A-EAFD-4DFC-8D27-E51C4A9144EF} - System32\Tasks\{70BA721C-3A96-460D-8F6A-42569B357BEA} = Chrome.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMain
Task: {5D1FAB35-F73A-4222-9345-A6D0087BD821} - System32\Tasks\{A6768003-D36C-4174-8B16-61D5CE6E9F51} = Chrome.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsProgressBar
Task: {61167A7C-3D9F-451B-B0E0-B8C1BD4EAE71} - System32\Tasks\{34F70366-2B01-4ECD-81DC-4A7C458FED57} = pcalua.exe -a E:\eauninstall.exe -d E:\
Task: {672D5EA8-8BCE-454D-B491-1264BEC84E56} - System32\Tasks\{21230832-F7E8-4B42-A9CA-A4BB9C5D3AA7} = Chrome.exe http://ui.skype.com/ui/0/5.8.0.158.161/en/abandoninstall?page=tsMain
Task: {695CA9DE-0068-407E-B817-B4BE30D06459} - System32\Tasks\{FB673A68-EDAF-4501-9528-24D5B4D443F1} = Firefox.exe http://ui.skype.com/ui/0/6.1.0.129.272/pl/abandoninstall?page=tsProgressBar
Task: {9983C871-C104-4DB2-B456-D68099E3DBEA} - System32\Tasks\{B14BA67C-8D2B-4BAF-B399-DE65CCA05621} = Iexplore.exe http://ui.skype.com/ui/0/6.21.0.104/pl/abandoninstall?page=tsProgressBar
Task: {9AE26D3B-CF79-463D-93FC-8325159C6BCF} - System32\Tasks\{477DA24B-DB73-446B-BE01-7D9AE6F854A8} = Chrome.exe http://ui.skype.com/ui/0/5.8.0.158.161/en/abandoninstall?page=tsProgressBar
Task: {B586115A-5486-44CE-8442-65754F75EF9A} - System32\Tasks\{841E6087-E9AE-44DB-B3E4-189A9FA788AD} = Chrome.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMain
Task: {B5C0D338-61CC-4D93-9140-21D9648C5CFE} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4008042891-760779463-374611626-1000Core = C:\Users\HP\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-28] (Facebook Inc.)
Task: {B745A9DF-AFAA-4A7E-BF59-980E9833F678} - System32\Tasks\DefaultReg = c:\Users\All Users\dtdata\R001.exe ==== ATTENTION
Task: {BDB1E4AD-F698-49F4-A665-41E42EE3692B} - System32\Tasks\{1D41F662-A214-4DE4-87CE-C0AAFA13F306} = Chrome.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMain
Task: {C4E160EF-02FB-4281-B8B4-CB2F842D8E06} - System32\Tasks\{611D989B-8E40-4EDD-9358-4479F71D98A1} = Chrome.exe http://ui.skype.com/ui/0/5.10.0.115/en/abandoninstall?page=tsMain
Task: {DE114C77-0B1C-4348-97A7-4C5E56615D50} - System32\Tasks\{5FAFDE7F-512A-4C98-8F68-01A48619EDD1} = Chrome.exe http://ui.skype.com/ui/0/5.8.0.158.161/en/abandoninstall?page=tsMain
Task: {DF9B5CEA-032D-4732-A05B-8C4B49593930} - System32\Tasks\{4A513A77-6E73-457B-9B62-55FC5871EC37} = Chrome.exe http://ui.skype.com/ui/0/5.9.0.115.161/en/abandoninstall?page=tsMain
Task: {FF86270C-DC30-46CE-8F04-F41990136AFC} - System32\Tasks\{1E991733-6F37-4A97-A444-5D4F1A679CA4} = Chrome.exe http://ui.skype.com/ui/0/6.0.0.126/pl/abandoninstall?page=tsProgressBar
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4008042891-760779463-374611626-1000Core.job = C:\Users\HP\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4008042891-760779463-374611626-1000UA.job = C:\Users\HP\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-4008042891-760779463-374611626-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) ==== ATTENTION
AppInit_DLLs: C:\PROGRA~2\WIA6EB~1\Datamngr\x64\datamngr.dll = C:\PROGRA~2\WIA6EB~1\Datamngr\x64\datamngr.dll File Not Found
AppInit_DLLs: C:\PROGRA~2\WIA6EB~1\Datamngr\x64\IEBHO.dll = C:\PROGRA~2\WIA6EB~1\Datamngr\x64\IEBHO.dll File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\WIA6EB~1\Datamngr\datamngr.dll = "C:\PROGRA~2\WIA6EB~1\Datamngr\datamngr.dll" File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\WIA6EB~1\Datamngr\IEBHO.dll = "C:\PROGRA~2\WIA6EB~1\Datamngr\IEBHO.dll" File Not Found
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = http://www.searchqu.com//web?src=iebappid=0systemid=412sr=0q={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=HPNTDF
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = http://www.searchqu.com//web?src=iebappid=0systemid=412sr=0q={searchTerms}
SearchScopes: HKLM - {E7D75FDD-8EEC-497E-AE75-08ED05C4E50C} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=HPNTDF
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = http://www.searchqu.com//web?src=iebappid=0systemid=412sr=0q={searchTerms}
SearchScopes: HKLM-x32 - {E7D75FDD-8EEC-497E-AE75-08ED05C4E50C} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-4008042891-760779463-374611626-1000 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
SearchScopes: HKU\S-1-5-21-4008042891-760779463-374611626-1000 - {09AEA38F-D907-4CBB-86B3-0CBE74635FEB} URL = http://www.mysearchresults.com/search?c=3524t=01q={searchTerms}
SearchScopes: HKU\S-1-5-21-4008042891-760779463-374611626-1000 - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKU\S-1-5-21-4008042891-760779463-374611626-1000 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=HPNTDF
SearchScopes: HKU\S-1-5-21-4008042891-760779463-374611626-1000 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = http://www.searchqu.com//web?src=iebappid=0systemid=412sr=0q={searchTerms}
SearchScopes: HKU\S-1-5-21-4008042891-760779463-374611626-1000 - {E7D75FDD-8EEC-497E-AE75-08ED05C4E50C} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
BHO-x32: No Name - {2EECD738-5844-4a99-B4B6-146BF802613B} - No File
BHO-x32: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKLM-x32 - No Name - {98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKU\S-1-5-21-4008042891-760779463-374611626-1000 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-4008042891-760779463-374611626-1000 - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
FF SelectedSearchEngine: SweetIM Search
FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k1zjbuyv.default\searchplugins\MyStart.xml
FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k1zjbuyv.default\searchplugins\mywebsearch.xml
FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k1zjbuyv.default\searchplugins\SweetIM Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml
CHR DefaultSearchKeyword: Default - search.sweetim.com
CHR DefaultSearchURL: Default - http://search.sweetim.com/search.asp?src=6q={searchTerms}barid=st=23ptr=100did=10963UPN2=92826591192807221
2015-02-21 16:37 - 2015-02-21 16:37 - 00003126 _____ () C:\Windows\System32\Tasks\{71AC0A36-161D-4172-8B37-1B6B83067F87}
2015-02-21 18:33 - 2012-03-15 10:37 - 00000000 ____ D () C:\Program Files (x86)\MyWebSearch
2015-02-21 18:32 - 2015-01-18 17:35 - 00000000 ____ D () C:\Users\Nowe\AppData\Roaming\Systweak
2015-02-21 18:32 - 2014-12-25 10:34 - 00000000 ____ D () C:\Users\Default\AppData\Roaming\Systweak
2015-02-21 18:32 - 2014-12-25 10:34 - 00000000 ____ D () C:\Users\Default User\AppData\Roaming\Systweak
2015-02-21 18:32 - 2014-05-29 14:00 - 00000000 ____ D () C:\Users\Admin\AppData\Roaming\Systweak
2015-02-21 16:25 - 2013-12-04 21:26 - 00000000 ____ D () C:\Users\HP\AppData\Roaming\Systweak
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.