Witam
Prosilbym o sprawdzenie loga kolegi, ktory mowil o wykrytych wirusach, reklamach w przegladarce i spowalnianiu internetu
FRST.txt
Addition.txt
Dziekuje
Otwórz notatnik systemowy i wklej:
Task: {4CFBDB0B-C0C1-4C59-BA02-578F756DE353} - System32\Tasks\Optimizer Pro Schedule = C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe ==== ATTENTION
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
BootExecute:
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FR
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FR
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FRq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FRq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FR
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FR
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FRq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FRq={searchTerms}
HKU\S-1-5-21-2718553819-534935752-1037404582-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FR
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FRq={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FRq={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FRq={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FRq={searchTerms}
SearchScopes: HKU\S-1-5-21-2718553819-534935752-1037404582-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=scts=1416519325from=ilduid=ST9250320AS_5SW1C1FRXXXX5SW1C1FR
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml [2014-11-20]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Ja\AppData\Roaming\Mozilla\Firefox\Profiles\gn5glvzh.default\extensions\faststartff@gmail.com
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]
2015-03-19 21:03 - 2015-03-19 21:03 - 00002950 _____ () C:\Windows\System32\Tasks\{67F7BF13-7231-4D1F-A5AE-12A54F069B1C}
2014-11-21 07:35 - 2014-11-21 07:35 - 2007000 _____ (Qwerty) C:\Users\Ja\AppData\Roaming\FTGQ.exe
2014-11-20 22:32 - 2014-11-20 22:38 - 2044376 _____ (Qwerty) C:\Users\Ja\AppData\Roaming\HQWGC.exe
2014-11-20 22:32 - 2014-11-20 22:38 - 1557464 _____ (Qwerty) C:\Users\Ja\AppData\Roaming\LQO.exe
2014-11-21 07:36 - 2014-11-21 07:36 - 1522136 _____ (Qwerty) C:\Users\Ja\AppData\Roaming\WCRV.exe
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Dziek
Wystepuje jeszcze jeden problem z instalacja gry gdyz po odpaleniu intalki wyskakuje taki komunikat UNABLE TO INSTAL INSTALLSHIELD SCRIPTING RUNTIME .
Taki sam przypadek jak u kolegi http://forum.dobreprogramy.pl/brak-installshield-t397662/
FRST.txt