Wolny komputer + blue screen się czasami włącza i koniec

Dla specjalistów Bezpieczeństwo
#1

Oto logi z OTL

 

OTL.exe

 

http://wklej.to/KrHq8

 

Extras

 

http://wklej.to/0OtiB

 

  • jaki dobry antywirus darmowy ściągnąć? :stuck_out_tongue:

 

#2

Odinstaluj Spybot - Search & Destroy,Search Protect,Search Protection,Skype Packages.

Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit lub 64-bit.

Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.

#3

Tutaj log z adw chyba niekonieczny

 

http://wklej.to/Gac5g

 

FRST

 

http://wklej.to/Hf6YQ

 

Addition

 

http://wklej.to/Ix0j8

#4

Otwórz Notatnik i wklej:

Task: {347F764C-94A8-4DB2-9432-1292AE850631} - \MySearchDial No Task File ==== ATTENTION
Task: {40F06551-3FA1-46D3-B109-B141FA265DEC} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1168207756-3834436414-1567519205-1000Core = C:\Users\JUSTYNA\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {8A1DFA61-A39C-4712-A80B-03A2BFE99F00} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1168207756-3834436414-1567519205-1000UA = C:\Users\JUSTYNA\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1168207756-3834436414-1567519205-1000Core.job = C:\Users\JUSTYNA\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1168207756-3834436414-1567519205-1000UA.job = C:\Users\JUSTYNA\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: E - E:\autorun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {4170894d-cf66-11e2-a5e8-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {7812e63a-e428-11e3-bb9b-0026188164ae} - E:\autorun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {c6e9bd21-1972-11e3-bbce-806e6f6e6963} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {c6e9bd9c-1972-11e3-bbce-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {c6e9bdce-1972-11e3-bbce-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {dfa7a296-1975-11e3-bbbf-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {dfa7a2bf-1975-11e3-bbbf-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {dfa7a2c4-1975-11e3-bbbf-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {fd7805f8-197b-11e3-a417-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {fd7805fe-197b-11e3-a417-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {fd780632-197b-11e3-a417-0026188164ae} - E:\AutoRun.exe
HKU\S-1-5-21-1168207756-3834436414-1567519205-1000\...\MountPoints2: {fd78063d-197b-11e3-a417-0026188164ae} - E:\AutoRun.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {27C9044D-8642-4E23-9FAA-BB4D3E35032D} URL = http://search.yahoo.com/search?p={searchTerms}fr=tightropetbtype=10811
SearchScopes: HKCU - {2B271C22-AD0F-424E-9847-3C5A537A0B22} URL = http://search.findwide.com/serp?guid={5821A528-3C0B-459A-91FE-84B8F0C6FA2E}action=default_searchserpv=22k={searchTerms}
SearchScopes: HKCU - {5A402CB6-1ACB-4D36-86A1-E8258A8B971C} URL = http://uk.search.yahoo.com/search?fr=chr-greentree_ieei=utf-8ilc=12type=599486p={searchTerms}
CHR StartupUrls: "hxxp://uk.search.yahoo.com/?type=599486fr=spigot-yhp-ch", "hxxp://google.pl/"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
2014-07-13 04:20 - 2014-07-13 04:26 - 00000000 ____ D () C:\AdwCleaner
C:\Users\JUSTYNA\jagex_cl_oldschool_LIVE.dat
C:\Users\JUSTYNA\jagex_cl_runescape_LIVE.dat
C:\Users\JUSTYNA\random.dat
C:\Users\JUSTYNA\AppData\Local\Temp\*.exe
C:\Users\JUSTYNA\AppData\Local\Temp\*.dll

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

Okej dziękuje za pomoc, i w czym to pomogło? I jaki darmowy antywirus najlepszy, avast?

#6

Skasuj folder C:\FRST

Użyj http://www.bleepingcomputer.com/download/tfc/ (uruchom TFC i kliknij Start).

Może być Avast.