Nie działające wifi i dźwięk po usunięciu syfu przez AdwCleaner

[kulka5010]

Cześć, dzisiaj chciałem oczyścić sobie laptopa z różnych shitów, przez adw cleanera. Kiedy nacisnąłem clean i zrestartowałem lapka przestał działać dźwięk, nie mam żadnych zainstalowanych urządzeń audio, wat? Wifi mam włączone, ale i tak nie działa. Pomocy!

Logi FRST, OTL i ADW macie w załącznikach.

FRST.txt

Shortcut.txt

Addition.txt

AdwCleanerR0.txt

AdwCleanerS0.txt

OTL.Txt

Extras.Txt

[picasso]

zrestartowałem lapka przestał działać dźwięk, nie mam żadnych zainstalowanych urządzeń audio, wat? Wifi mam włączone, ale i tak nie działa.

Wątpię, by to była sprawka AdwCleaner. Problem w tym, że zostały wyłączone via msconfig liczne usługi Windows (producentów trzecich zresztą też):

 

==================== Disabled items from MSCONFIG ==============
 

MSCONFIG\Services: 976137e5 => 2

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AeLookupSvc => 3

MSCONFIG\Services: ALG => 3

MSCONFIG\Services: AppIDSvc => 3

MSCONFIG\Services: Apple Mobile Device => 2

MSCONFIG\Services: aspnet_state => 3

MSCONFIG\Services: AudioEndpointBuilder => 2

MSCONFIG\Services: AudioSrv => 2

MSCONFIG\Services: AxInstSV => 3

MSCONFIG\Services: BackupStack => 2

MSCONFIG\Services: BDESVC => 3

MSCONFIG\Services: BFE => 2

MSCONFIG\Services: BITS => 3

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: Browser => 3

MSCONFIG\Services: BrowserProtect => 2

MSCONFIG\Services: BstHdAndroidSvc => 2

MSCONFIG\Services: BstHdLogRotatorSvc => 2

MSCONFIG\Services: bthserv => 3

MSCONFIG\Services: btwdins => 2

MSCONFIG\Services: c2cautoupdatesvc => 2

MSCONFIG\Services: c2cpnrsvc => 2

MSCONFIG\Services: CertPropSvc => 3

MSCONFIG\Services: clr_optimization_v4.0.30319_32 => 2

MSCONFIG\Services: clr_optimization_v4.0.30319_64 => 2

MSCONFIG\Services: CltMngSvc => 2

MSCONFIG\Services: COMSysApp => 3

MSCONFIG\Services: Crypkey License => 3

MSCONFIG\Services: CryptSvc => 3

MSCONFIG\Services: cvhsvc => 2

MSCONFIG\Services: defragsvc => 3

MSCONFIG\Services: Dhcp => 2

MSCONFIG\Services: Dnscache => 2

MSCONFIG\Services: dot3svc => 3

MSCONFIG\Services: DPS => 2

MSCONFIG\Services: EapHost => 3

MSCONFIG\Services: EFS => 3

MSCONFIG\Services: ehRecvr => 3

MSCONFIG\Services: ehSched => 3

MSCONFIG\Services: eventlog => 2

MSCONFIG\Services: EventSystem => 3

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: fdPHost => 3

MSCONFIG\Services: FDResPub => 2

MSCONFIG\Services: FontCache => 2

MSCONFIG\Services: FontCache3.0.0.0 => 3

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: gusvc => 3

MSCONFIG\Services: Hamachi2Svc => 2

MSCONFIG\Services: hidserv => 3

MSCONFIG\Services: hkmsvc => 3

MSCONFIG\Services: HomeGroupListener => 3

MSCONFIG\Services: HomeGroupProvider => 3

MSCONFIG\Services: IAStorDataMgrSvc => 2

MSCONFIG\Services: idsvc => 3

MSCONFIG\Services: IGRS => 3

MSCONFIG\Services: IKEEXT => 2

MSCONFIG\Services: IPBusEnum => 3

MSCONFIG\Services: iphlpsvc => 3

MSCONFIG\Services: iPod Service => 3

MSCONFIG\Services: KeyIso => 3

MSCONFIG\Services: KtmRm => 3

MSCONFIG\Services: LanmanServer => 2

MSCONFIG\Services: LanmanWorkstation => 2

MSCONFIG\Services: Lenovo ReadyComm AppSvc => 3

MSCONFIG\Services: Lenovo ReadyComm ConnSvc => 3

MSCONFIG\Services: lltdsvc => 3

MSCONFIG\Services: lmhosts => 2

MSCONFIG\Services: LMIGuardianSvc => 2

MSCONFIG\Services: LMS => 2

MSCONFIG\Services: MBAMScheduler => 2

MSCONFIG\Services: MBAMService => 2

MSCONFIG\Services: McComponentHostService => 3

MSCONFIG\Services: mcmscsvc => 2

MSCONFIG\Services: McNASvc => 2

MSCONFIG\Services: McODS => 3

MSCONFIG\Services: McProxy => 2

MSCONFIG\Services: McSysmon => 3

MSCONFIG\Services: Microsoft SharePoint Workspace Audit Service => 3

MSCONFIG\Services: MMCSS => 2

MSCONFIG\Services: MpfService => 2

MSCONFIG\Services: MpsSvc => 2

MSCONFIG\Services: MSDTC => 3

MSCONFIG\Services: MSiSCSI => 3

MSCONFIG\Services: msiserver => 3

MSCONFIG\Services: napagent => 3

MSCONFIG\Services: Netlogon => 3

MSCONFIG\Services: Netman => 3

MSCONFIG\Services: netprofm => 3

MSCONFIG\Services: NlaSvc => 2

MSCONFIG\Services: nsi => 2

MSCONFIG\Services: NvStreamSvc => 2

MSCONFIG\Services: nvsvc => 2

MSCONFIG\Services: nvUpdatusService => 2

MSCONFIG\Services: ose => 3

MSCONFIG\Services: osppsvc => 3

MSCONFIG\Services: OverwolfUpdaterService => 3

MSCONFIG\Services: p2pimsvc => 3

MSCONFIG\Services: p2psvc => 3

MSCONFIG\Services: PcaSvc => 3

MSCONFIG\Services: PerfHost => 3

MSCONFIG\Services: pla => 3

MSCONFIG\Services: PNRPAutoReg => 3

MSCONFIG\Services: PNRPsvc => 3

MSCONFIG\Services: PolicyAgent => 3

MSCONFIG\Services: Power => 2

MSCONFIG\Services: ProtectedStorage => 3

MSCONFIG\Services: QWAVE => 3

MSCONFIG\Services: RasAuto => 3

MSCONFIG\Services: RasMan => 3

MSCONFIG\Services: RemoteRegistry => 3

MSCONFIG\Services: RpcLocator => 3

MSCONFIG\Services: RzKLService => 2

MSCONFIG\Services: SamSs => 2

MSCONFIG\Services: SbieSvc => 2

MSCONFIG\Services: SCardSvr => 3

MSCONFIG\Services: SCPolicySvc => 3

MSCONFIG\Services: SDRSVC => 3

MSCONFIG\Services: seclogon => 3

MSCONFIG\Services: SENS => 2

MSCONFIG\Services: SensrSvc => 3

MSCONFIG\Services: SessionEnv => 3

MSCONFIG\Services: sftlist => 2

MSCONFIG\Services: sftvsa => 3

MSCONFIG\Services: SharedAccess => 3

MSCONFIG\Services: ShellHWDetection => 2

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: SNMPTRAP => 3

MSCONFIG\Services: Spooler => 2

MSCONFIG\Services: sppuinotify => 3

MSCONFIG\Services: SSDPSRV => 2

MSCONFIG\Services: SstpSvc => 3

MSCONFIG\Services: Steam Client Service => 3

MSCONFIG\Services: Stereo Service => 2

MSCONFIG\Services: stisvc => 2

MSCONFIG\Services: swprv => 3

MSCONFIG\Services: SysMain => 2

MSCONFIG\Services: TabletInputService => 3

MSCONFIG\Services: TapiSrv => 3

MSCONFIG\Services: TBS => 3

MSCONFIG\Services: TermService => 3

MSCONFIG\Services: Themes => 2

MSCONFIG\Services: THREADORDER => 3

MSCONFIG\Services: TrkWks => 2

MSCONFIG\Services: TrustedInstaller => 3

MSCONFIG\Services: TunnelBearMaintenance => 3

MSCONFIG\Services: UI0Detect => 3

MSCONFIG\Services: UNS => 2

MSCONFIG\Services: upnphost => 2

MSCONFIG\Services: UxSms => 2

MSCONFIG\Services: VaultSvc => 3

MSCONFIG\Services: vds => 3

MSCONFIG\Services: VSS => 3

MSCONFIG\Services: W32Time => 3

MSCONFIG\Services: WatAdminSvc => 3

MSCONFIG\Services: wbengine => 3

MSCONFIG\Services: WbioSrvc => 3

MSCONFIG\Services: wcncsvc => 3

MSCONFIG\Services: WcsPlugInService => 3

MSCONFIG\Services: WdiServiceHost => 3

MSCONFIG\Services: WdiSystemHost => 3

MSCONFIG\Services: WebClient => 3

MSCONFIG\Services: Wecsvc => 3

MSCONFIG\Services: wercplsupport => 3

MSCONFIG\Services: WerSvc => 3

MSCONFIG\Services: WinDefend => 2

MSCONFIG\Services: WinHttpAutoProxySvc => 3

MSCONFIG\Services: Winmgmt => 2

MSCONFIG\Services: WinRM => 3

MSCONFIG\Services: Wlansvc => 2

MSCONFIG\Services: wmiApSrv => 3

MSCONFIG\Services: WMPNetworkSvc => 2

MSCONFIG\Services: WPCSvc => 3

MSCONFIG\Services: WPDBusEnum => 3

MSCONFIG\Services: WSearch => 2

MSCONFIG\Services: wuauserv => 2

MSCONFIG\Services: wudfsvc => 3

MSCONFIG\Services: WwanSvc => 2

 

W pierwszej kolejności zajmij się ożywieniem usług. Start > w polu szukania wpisz msconfig > z prawokliku Uruchom jako Administrator. Wejdź do karty Usługi i zaptaszkuj wszystkie odznaczone pola. Zresetuj system. Zrób nowy log FRST Addition, który ma udowodnić zmiany.

 

Gdy to pomyślnie rozwiążesz, zajmę się doczyszczaniem systemu z adware, gdyż czyszczenie było prowadzone niedokładnie.

 

 

 

 

.

[kulka5010]

Dźwięk i wifi znowu działają

Nowe logi w załączniku.

Addition.txt

[picasso]

Przechodzimy do czyszczenia systemu ze śmieci:

 

1. Otwórz Notatnik i wklej w nim:

 

HKLM\...\Winlogon: [userinit] C:\Windows\system32\userinit.exe,userinit.exe,C:\windows\system32\MSDCSC\msdcsc.exe
HKU\S-1-5-21-3914683434-684966938-2725549555-1000\...\Run: [LG LinkAir] => [X]
HKU\S-1-5-21-3914683434-684966938-2725549555-1000\...\Policies\system: [EnableLUA] 0
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
AppInit_DLLs: C:\PROGRA~3\WebPlat\WEBPLA~1.DLL => C:\ProgramData\WebPlat\WebPlat_x64.dll [4275200 2013-12-28] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => "C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll" File Not Found
Startup: C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
SSODL-x32: 0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} - No File
Task: {1FC85F66-012C-4F58-B762-E6B18C2AB758} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe 
Task: {259AC2CF-EC24-460B-BBC8-57355F69A24D} - System32\Tasks\{E19CAE8B-731A-4E18-8438-BC2F2A1A87F4} => C:\Program Files (x86)\Ares\Ares.exe
Task: {41CFBD2B-8539-4A5A-8BED-13968F8B4FD4} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe 
Task: {68738944-BE9C-42C0-BB2F-E90978AA4410} - \DealPlyUpdate No Task File 
Task: {6A29DB99-DD47-4FC8-A97E-7DB756D21F42} - System32\Tasks\{5813D8AE-E1FF-47F3-A707-765886861780} => C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe 
Task: {6D1C469E-2BB9-4905-97D9-6CF0A29B32F4} - \Dealply No Task File 
Task: {78A8EC62-4BB8-49E2-B08D-6B9F460077EA} - System32\Tasks\{B5471B4D-EF56-41E9-AC9C-8C66FD76D2C5} => C:\Program Files (x86)\Rockstar Games\Grand Theft Auto Vice City HQ\gta-vc.exe
Task: {BD1C4908-49E6-4D3D-9F29-FCD5208D315C} - System32\Tasks\{C6B23001-7DC6-479F-B0C8-2B1A91AFB5B8} => C:\Program Files (x86)\Ares\Ares.exe
Task: {EC1C60E5-BB77-4AD7-BE5A-C79235054718} - System32\Tasks\pc-dis-upd => C:\Program Files (x86)\PC Cleaners\PCCleaners.exe 
Task: C:\windows\Tasks\Dealply.job => C:\Users\Lenovo\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE 
Task: C:\windows\Tasks\pc-dis-upd.job => C:\Program Files (x86)\PC Cleaners\PCCleaners.exe
Task: C:\windows\Tasks\{5813D8AE-E1FF-47F3-A707-765886861780}.job => C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe
S4 976137e5; "C:\windows\system32\rundll32.exe" "c:\progra~3\webplat\WebPlatSvc.dll",service
U3 BcmSqlStartupSvc;
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
U2 IviRegMgr;
U2 RichVideo;
U3 SQLWriter;
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
ProxyServer: 8.8.8.8:80
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1388677655&from=wpm0102&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1388677655&from=wpm0102&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=1388677655&from=wpm0102&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1388677655&from=wpm0102&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {72CB84B9-2592-4ED9-BA51-DFBA0B98CDAA} URL = http://www.mysearchresults.com/search?c=2402&t=15&q={searchTerms}
SearchScopes: HKCU - {F8D1CDFB-2BBE-4A5F-9B5F-7E1ED3EF2BB6} URL = http://websearch.ask.com/redirect?client=ie&tb=CIE&o=2240&src=kw&q={searchTerms}&locale=&apn_ptnrs=^A2T&apn_dtid=^YYYYYY^YY^PL&apn_uid=48ED29AD-0359-4560-A61F-1F00B8E6E180&apn_sauid=54F67EE8-CE5C-4DCF-9FA4-49B05BF76F87
BHO: ssafeWeeb - {1FBA780A-5830-77F9-BC55-90A8E6A4A7E2} - C:\Program Files (x86)\ssafeWeeb\x8a8X.x64.dll ()
BHO: EnujoyCoUpoonu - {4AED814F-11C3-535A-4462-B8D8D277DA6A} - C:\ProgramData\EnujoyCoUpoonu\0.x64.dll No File
BHO: CoupExtension - {7C662EA3-0373-0B0D-4EF9-D0497505BA25} - C:\ProgramData\CoupExtension\swKl0X5Yd6.x64.dll No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\delta-homes.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\portaldosites.xml
CHR HKCU\...\Chrome\Extension: [cflheckfmhopnialghigdlggahiomebp] - C:\Users\Lenovo\AppData\Local\CRE\cflheckfmhopnialghigdlggahiomebp.crx [2014-03-10]
CHR HKCU\...\Chrome\Extension: [dknkjnkhedbanphkkpbpcgoblmkbfhlf] - C:\Users\Lenovo\AppData\Local\CRE\dknkjnkhedbanphkkpbpcgoblmkbfhlf.crx [2014-03-10]
CHR HKLM-x32\...\Chrome\Extension: [cflheckfmhopnialghigdlggahiomebp] - C:\Users\Lenovo\AppData\Local\CRE\cflheckfmhopnialghigdlggahiomebp.crx [2014-03-10]
CHR HKLM-x32\...\Chrome\Extension: [dknkjnkhedbanphkkpbpcgoblmkbfhlf] - C:\Users\Lenovo\AppData\Local\CRE\dknkjnkhedbanphkkpbpcgoblmkbfhlf.crx [2014-03-10]
CHR HKLM-x32\...\Chrome\Extension: [hggpkhijoeadmdfmlbdepfbngmhaldci] - C:\Program Files (x86)\DealPly\DealPly.crx [2014-04-08]
CHR HKLM-x32\...\Chrome\Extension: [nbmafkdmkkckhggblphicnnhlgljnoje] - C:\Program Files (x86)\TornTV.com\torn2_10.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [ohlfohjgijhjlpidbbnmcdooegafnnnm] - C:\Program Files (x86)\SockshareDownloader\SockshareDownloader10.crx [2012-11-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction 
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction 
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://google.pl"
ShortcutWithArgument: C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192&ts=1369508672
ShortcutWithArgument: C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Program uruchamiający aplikacje Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.delta-homes.com/?type=sc&ts=1388677655&from=wpm0102&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192
ShortcutWithArgument: C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192&ts=1369508672
ShortcutWithArgument: C:\Users\Lenovo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&from=newgdp&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192&ts=1373111218
ShortcutWithArgument: C:\Users\Lenovo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD5000BEVT-24A0RT0_WD-WX41A907719277192&ts=1369508672
ShortcutWithArgument: C:\Users\Lenovo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://google.pl"
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\ProgramData\Temp:07F6D9E4
AlternateDataStreams: C:\ProgramData\Temp:56E2E879
AlternateDataStreams: C:\Users\Lenovo\Dane aplikacji:NT
AlternateDataStreams: C:\Users\Lenovo\Dane aplikacji:NT2
AlternateDataStreams: C:\Users\Lenovo\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Lenovo\AppData\Roaming:NT2
C:\Program Files (x86)\Desk 365
C:\ProgramData\pclunst.exe
C:\ProgramData\PC1Data
C:\ProgramData\EnujoyCoUpoonu
C:\ProgramData\eSafe
C:\ProgramData\InstallMate
C:\ProgramData\ssafeWeeb
C:\ProgramData\simplitec
C:\ProgramData\WebPlat
C:\ProgramData\wxDownload
C:\Users\Lenovo\Qtrax
C:\Users\Lenovo\AppData\Local\B1E
C:\Users\Lenovo\AppData\Local\Conduit
C:\Users\Lenovo\AppData\Local\cre
C:\Users\Lenovo\AppData\Local\SearchProtect
C:\Users\Lenovo\AppData\Local\PutLockerDownloader
C:\Users\Lenovo\AppData\Local\SwvUpdater
C:\Users\Lenovo\AppData\Roaming\337
C:\Users\Lenovo\AppData\Roaming\B1Toolbar
C:\Users\Lenovo\AppData\Roaming\Babylon
C:\Users\Lenovo\AppData\Roaming\eIntaller
C:\Users\Lenovo\AppData\Roaming\ExpressFiles
C:\Users\Lenovo\AppData\Roaming\simplitec
C:\Users\Lenovo\Start Menu\Programs\Browser Manager
C:\Users\Lenovo\Documents\smart pc cleaner
C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ALLUpdate" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ares" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\C:" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\FixMyRegistry" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GG" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mobilegeni daemon" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PC Cleaners" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\sllaunch" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\slwc" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup" /f
Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{976137e5} /f
Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC Cleaners" /f
Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PCData App" /f
Reboot:

 

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

 

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix. System zostanie zresetowany. W tym samym katalogu skąd uruchamiano FRST powstanie plik fixlog.txt.

 

2. Wyczyść Firefox:

• menu Historia > Wyczyść historię przeglądania
• menu Pomoc > Informacje dla pomocy technicznej > Zresetuj program Firefox. Zakładki i hasła nie zostaną naruszone, ale używane rozzerzenia trzeba będzie przeinstalować.

3. Wyczyść Google Chrome:

• Ustawienia > karta Rozszerzenia > odinstaluj adware seafeWeb i nadwyżkę Ad-blocków
• Ustawienia > karta Ustawienia > Pokaż ustawienia zaawansowane > zjedź na sam spód i uruchom opcję Zresetuj ustawienia przeglądarki. Zakładki i hasła nie zostaną naruszone, ale używane rozszerzenia zostaną wyłączone (w opcjach ręcznie zmienisz im status).
• Ustawienia > karta Ustawienia > sekcja Wyszukiwanie > klik w Zarządzanie wyszukiwarkami > skasuj z listy niedomyślne śmieci (o ile będą).
• Ustawienia > karta Historia > wyczyść
• Zresetuj cache wtyczek. W pasku adresów wpisz chrome://plugins i ENTER. Na liście wtyczek wybierz dowolną i kliknij Wyłącz. Następnie wtyczkę ponownie Włącz.

4. Uruchom TFC - Temp Cleaner.

 

5. Zrób nowy log FRST z opcji Scan (bez Addition i Shortcut). Dołącz też plik fixlog.txt.

 

 

 

.

[kulka5010]

No, sporo mnie tu nie było

 

Fixlog.txt

FRST.txt