Drobna nieuwaga i ... śmieci na PC (między innymi Conduit)

[AdrianLim]

Witam. Podczas instalowania programu do obrobki filmow dostaly sie na PC-ta smieci. Usuniete natychmiast to co bylo mozliwe  (poprzez RevoPRO). Prosze o sprawdzenie logow. PC -et jest starego i bedzie dziamgolil jak sie polapie.

 

Pozdrawiam

FRST.txt

Addition.txt

OTL.Txt

Extras.Txt

GmerTXT.txt

[picasso]

Do usunięcia są tylko mikro odpadki adware (wyszukiwarka Conduit + pliki Registry Helper) oraz puste wpisy różnych programów (głównie taski Harmonogramu zadań). Akcja:

 

1. Otwórz Notatnik i wklej w nim:

 

C:\ProgramData\Registry Helper
C:\Windows\SysWOW64\RegistryHelperLM.ocx
C:\Users\Marek\AppData\Local\Temp*.html
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP30047E86-1BF0-49F1-A05F-8F44DCCB89C6&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP30047E86-1BF0-49F1-A05F-8F44DCCB89C6&q={searchTerms}&SSPV=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 ADIHdAudAddService; system32\drivers\ADIHdAud.sys [X]
S3 motmodem; system32\DRIVERS\motmodem.sys [X]
U2 V2iMount;
Task: {00444B8D-72EB-442D-84CB-49F922F88E3B} - System32\Tasks\{0A179661-3F26-4588-8930-5B4C0C3E96FD} => C:\Program Files (x86)\Microsoft Office\Office12\POWERPNT.EXE
Task: {07CC5C54-8C10-44E9-8737-3CC7DD61B8D1} - System32\Tasks\{F4CD885D-CFD2-4AEA-B8BF-1416D5098957} => D:\Gry\CoD4\iw3mp.exe
Task: {08C5E97C-A30C-4403-A243-F1763F04F779} - System32\Tasks\{D3B6EF20-76D1-48A7-83B6-4ADFA5F78358} => C:\Users\Marek\Desktop\MotoHelper_2.1.32_Driver_5.4.0.exe
Task: {132B68BB-C804-4BB8-A805-FE0E6BC304B4} - System32\Tasks\{BF0949BB-79CB-4283-BC9F-85A539BE81BA} => D:\Gry\CoD4\iw3mp.exe
Task: {140D02DC-CDE2-4FB8-A613-C7CD123F1933} - System32\Tasks\{35C86257-2BA3-44BA-93E9-A577437A5EC3} => C:\Program Files (x86)\Microsoft Office\Office12\POWERPNT.EXE
Task: {149CF40B-8DC2-45B1-A44C-1C3200D4E8E1} - System32\Tasks\{496ADF36-0ED7-4365-A37F-E43A9A57C4CD} => C:\Program Files (x86)\Microsoft Office\Office12\POWERPNT.EXE
Task: {2B19D6CF-20AA-43F9-9145-CF56BB68F095} - System32\Tasks\{3DC2A005-8E90-48EB-8661-2AFEBAD01B07} => C:\Program Files (x86)\Creative\Creative WebCam\WebCam Center\WebCamCenter.exe
Task: {3C189F91-DE81-4557-A8D8-9745DBD5F397} - System32\Tasks\{A80ABBB4-0F97-4ABD-A77E-6384ABDD4CE1} => C:\Program Files (x86)\Creative\Creative WebCam\WebCam Center\WebCamCenter.exe
Task: {477234ED-3615-403D-AA40-DFBF6158D3E8} - System32\Tasks\{89B59127-034D-4204-9E81-C77D133ED385} => C:\Program Files (x86)\Creative\Creative WebCam\WebCam Center\WebCamCenter.exe
Task: {4CEB3267-7C70-44FF-9A75-E1AFA8CE9C84} - System32\Tasks\{87F7C826-0DB8-4CB9-AE7F-CD64CC962A32} => C:\Users\Marek\Desktop\mp3gain-win-1_3_4.exe
Task: {5761D214-34D0-44D8-9B0C-4118B601D4AC} - System32\Tasks\{2009B725-057D-4A91-94FF-72BA5E120089} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
Task: {57DDB815-3C75-49B2-B482-D5C4B74C2751} - System32\Tasks\{87B8023F-7F18-4C6F-A1A7-EC361B030C8B} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
Task: {7778F5B4-2883-40AC-9703-9C6C1A618C99} - System32\Tasks\{9A54B424-AC7D-4A98-8C25-4524500952CE} => D:\Gry\CoD4\iw3mp.exe
Task: {795FC9FA-1836-4ED9-BB64-FD454407B00C} - System32\Tasks\{6273696F-1AB0-4043-9CCF-D1D134E13FBC} => D:\Gry\CoD4\iw3mp.exe
Task: {8824EC3D-F5C0-4E27-8A4A-2938E55B1FF7} - System32\Tasks\{E5F4B971-6631-44DB-B33C-98BED58CB2B8} => D:\Blender2.49\blender.exe
Task: {8B45F817-27D8-4F5B-A7D0-31CBBFFD673D} - System32\Tasks\{995E8900-D56C-40E6-9393-944BF04FEE14} => D:\Gry\CoD4\iw3mp.exe
Task: {8F2A8921-9A1E-4160-AB3E-78BE06C99BD4} - System32\Tasks\{579CC1C4-B467-4E0D-BE73-4707E451C2C6} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
Task: {A03A9DC9-31A9-4E06-A00D-55349FD08760} - System32\Tasks\{07BD6D2E-9143-421F-BA9E-5B926DB70FCE} => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
Task: {AC92A573-91C0-4D00-83FD-03DD4F0DEFD2} - System32\Tasks\{3AE039E0-1F4A-498E-AE00-E3F0487F40B7} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
Task: {ADA12D70-F7AC-48BD-94CD-B2539A60A0F9} - System32\Tasks\{FF5A9642-25D0-43CB-9813-B1834A263F76} => D:\Gry\CoD4\iw3mp.exe
Task: {E38AED6A-B012-413B-A9FC-603E6E2F7FAB} - System32\Tasks\{B75892A0-A5BE-4B36-B4AD-16B72EE0EA07} => D:\Gry\CoD4\iw3mp.exe
Task: {E68F2176-E033-4FD8-878F-D04B3B9F1257} - System32\Tasks\{0B732B52-C306-48B4-8E3C-2CC6880A6C6E} => D:\Gry\CoD4\iw3mp.exe
Task: {E745EEFB-248A-406B-BB75-59D797270C15} - System32\Tasks\{91AA57DD-6949-4A0B-A15E-A1D1771DFE4C} => D:\Gry\CoDMW2\steam.exe
Reg: reg delete HKCU\Software\MozillaPlugins /f
Reg: reg delete HKLM\SOFTWARE\MozillaPlugins /f
Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Mozilla /f
Reg: reg delete HKLM\SOFTWARE\Wow6432Node\MozillaPlugins /f
Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {6A1806CD-94D4-4689-BA73-E35EA1EA9990} /f
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f

 

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

 

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix. Przedstaw wynikowy plik fixlog.txt.

 

2. Uruchom TFC - Temp Cleaner.

 

 

 

.

[AdrianLim]

Sorry, dwa tygodnie urlopu. Zadanie wykonane. Dziekuje za pomoc. Jak log wynikowy bedzie ok to pozdrawiam i zdrowia zycze.

 

Fixlog.txt

 

 

 

 

[picasso]

Skrypt pomyślnie wykonany.

 

1. Przez SHIFT+DEL skasuj FRST i folder C:\FRST. W OTL uruchom Sprzątanie.

 

2. Wyczyść foldery Przywracania systemu: KLIK.

 

3. Zaktualizuj Internet Explorer i pakiet Office (instalacja SP2):

 

Internet Explorer Version 9
 

==================== Installed Programs ======================
 

Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden

Microsoft Office Home and Student 2010 (Version: 14.0.6029.1000 - Microsoft Corporation)

 

To tyle.

 

 

 

.

[AdrianLim]

Jeszcze raz dziekuje.