Skocz do zawartości

Tencent chiński szit!


Rekomendowane odpowiedzi

Witam bardzo proszę o pomoc usunięcia tego gówna Tencent będę wam podsyłał wszystkie logi jakie będziecie chcieli tylko musicie mi powiedzieć jakie konkretnie bo nie znam się na tym za bardzo, a za cholerę tego gówna usunąć nie mogę. Jak próbuje usnąć to wyskakuje mi '' Potrzebujesz uprawnień do wykonania tej akcji. Uzyskaj uprawnienia od Administratorzy w celu wprowadzenia zmian w tym folderze. Tencent Data utworzenia: 2016-01-11 16:50'' mój system to Windows 7. Przeskanowałem ten folder antywirusem(avast) i pokazało 1 wirusa fish coś tam no to usunęło to, ale wszystko w folderze dalej zostało i jak nie mogłem tak nie mogę usunąć. Użyłem czegoś takiego jak ''geek'' ale nie pomogło CCleaner też nic... Proszę o pomoc bo nie wytrzymam... Z góry BARDZO BARDZO dziękuję. ( Nie znam się na tym jestem w tych tematach jasno zielony moja wiedza ogranicza się do użycia np CCleanera...)

Edit: podsyłam potrzebne logi, a gmer dodam jak skończy się skanować

Edit2: Dorzucam od siebie malwarebytes bo myślę za warto zajrzeć co tam sie k... dzieje...

Shortcut.txt

FRST.txt

Addition.txt

Gmer.txt

malwarebytes.txt

Odnośnik do komentarza
Pomoc jest darmowa, ale proszę rozważ przekazanie dotacji na utrzymanie serwisu: klik.

1) Odinstaluj

FoxTab PDF Converter (HKU\S-1-5-21-775939470-1417723944-2288147098-1000\...\FoxTab PDF Converter) (Version:  - ) <==== UWAGA

电脑管家11.1 (HKLM-x32\...\QQPCMgr) (Version: 11.1.16908.217 - 腾讯科技(深圳)有限公司) <==== UWAGA

 

2)

zaraz to przejrzę ...

Problem jest w tym że tego - 电脑管家11.1 - za cholere nie idzie usunąć i to jest właśnie cały problem. Za to FoxTab poszedł bez problemowo.

Odnośnik do komentarza

Otwórz Notatnik i wklej w nim:

 

DeleteKey: HKLM\SOFTWARE\Wow6432Node\yoursites123Software
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Pc\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-775939470-1417723944-2288147098-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Pc\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Brak pliku
Task: {033ADC5E-CC98-4584-8587-D800ED0A110A} - System32\Tasks\{E0514FC0-D061-4941-8358-BF24A478D089} => pcalua.exe -a C:\Counter-Strike\uninst.exe -d C:\Counter-Strike
Task: {04EF6D08-A503-4035-90B3-5E60E7207AC8} - System32\Tasks\{A48B4E35-CA85-4710-9A32-A190ECACFB82} => pcalua.exe -a C:\Users\Pc\Desktop\ShenlongMT2(3).exe -d C:\Users\Pc\Desktop
Task: {0933067C-FC89-4893-8981-9EB468DF2018} - System32\Tasks\{89A33F44-67F8-4AA9-9A71-7E62D4F4BD56} => pcalua.exe -a C:\Users\Pc\Downloads\launcher.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {13A87384-52C7-4117-B9D6-C822D7120CC6} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-3 -> Brak pliku <==== UWAGA
Task: {14553B7D-1B02-4CA9-9759-67C62C1B8479} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-5_user -> Brak pliku <==== UWAGA
Task: {1F34AD4D-9F96-4F49-B4CD-E5DAA92D2F12} - System32\Tasks\{F5AD6B3A-224D-4C1D-90C7-62D6522263F6} => pcalua.exe -a C:\Users\Pc\Desktop\fsdbdfhfdnbdsf\pbsetup.exe -d C:\Users\Pc\Desktop\fsdbdfhfdnbdsf
Task: {2376A36E-C037-4E4D-A0ED-B6060E156DC9} - System32\Tasks\{F143FE41-1CD0-4AA4-A119-A02E05E72289} => pcalua.exe -a C:\Users\Pc\Desktop\cs_backround_maker_30_install.exe -d C:\Users\Pc\Desktop
Task: {2381144A-69CA-437F-BABF-E2D64488F651} - System32\Tasks\{C99E5B5B-BC38-4AC6-9435-28908FE8C9A0} => pcalua.exe -a "C:\Pulpit (x86)\Cs 1.6 Background Maker v3.0\Uninstal.exe"
Task: {239F4F95-F019-436C-8BAF-483F963313A5} - System32\Tasks\{B1A8FD97-2003-4D16-A474-9C89E3F0AD2E} => pcalua.exe -a "C:\Users\Pc\Desktop\Logo do cs SPRAY\HLC_1_setup (1).exe" -d "C:\Users\Pc\Desktop\Logo do cs SPRAY"
Task: {23B8DB38-0086-4F24-9FD0-E203636F8410} - System32\Tasks\{15C79E5E-0FD9-4988-9D59-FA7ECE4AA646} => pcalua.exe -a "C:\Program Files (x86)\Counter-Strike\uninst.exe" -d "C:\Program Files (x86)\Counter-Strike"
Task: {240C7B6F-759C-48B3-9B0C-273DD71C4B06} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-4 -> Brak pliku <==== UWAGA
Task: {2C15E90E-19C8-4B0B-8E0D-2A84566F1223} - System32\Tasks\{F170EEB7-AC87-42F0-895D-3B92C5C81FA8} => pcalua.exe -a E:\LastChaos\LastChaos_PL_Setup.exe -d E:\LastChaos
Task: {2FE5B264-6CC1-4532-9F00-47CEA010B892} - System32\Tasks\{FC0028FC-7CF2-46E5-A3CA-4E65D5ED0573} => pcalua.exe -a D:\Counter-Strike\uninst.exe -d D:\Counter-Strike
Task: {340198AA-3D54-47DE-BA64-D6CF92DBF893} - System32\Tasks\{DA242095-AD47-4A29-838E-FBC68C04D1E6} => pcalua.exe -a "E:\Counter-Strike 1.6\uninst.exe" -d "E:\Counter-Strike 1.6"
Task: {34A9EA79-0E6D-4806-81D3-4F470C66EC78} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-1 -> Brak pliku <==== UWAGA
Task: {35C65D4F-124B-4183-BE3F-BAC7BB377082} - System32\Tasks\{C2771FAE-79E0-47C5-8B00-204361CC5E6E} => pcalua.exe -a "E:\BATLE 2\Support\Battlefield Bad Company 2_uninst.exe" -d "E:\BATLE 2\Support"
Task: {3753650B-20ED-435E-8502-086D8275A647} - System32\Tasks\{F0333970-8352-4D8E-97CF-C81BA1891A42} => pcalua.exe -a "C:\PROGRA~2\Trackball Controller\UNWISE.EXE" -c C:\PROGRA~2\Trackball Controller\INSTALL.LOG
Task: {3864B136-146E-4A44-AFC8-58B6A0079DBD} - System32\Tasks\{A4D74799-53E0-41C5-B914-70BBA0DB430E} => pcalua.exe -a C:\Users\Pc\Desktop\pbsetup.exe -d C:\Users\Pc\Desktop
Task: {38ED716F-DBF7-4EDD-B6B2-176BB3141CDD} - System32\Tasks\{ADE34C2B-8D84-4678-A10D-3EBB670531DC} => pcalua.exe -a "E:\metek 2008\Metin2_20080908.exe" -d "E:\metek 2008"
Task: {3A07D4F9-716B-4DE8-8018-5288D716FF87} - System32\Tasks\{8FEACC4F-E3DE-4FD9-B96D-3149084ACC38} => pcalua.exe -a C:\Users\Pc\Downloads\Metin2_20080908.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {40BA25D4-DCA1-42F7-B82C-56A1F699D4A5} - System32\Tasks\{085C2BC8-74C7-4BDA-BD97-AC012DE340C5} => pcalua.exe -a "C:\Users\Pc\Desktop\Moje gry Dominik\CS_CHEAT\CS_CHEAT\Fighter FX 7.2\Status Checker.exe" -d "C:\Users\Pc\Desktop\Moje gry Dominik\CS_CHEAT\CS_CHEAT\Fighter FX 7.2"
Task: {412B58C2-8587-4B8C-BE8A-A0B4EAF013CE} - System32\Tasks\{F557BAE0-95E8-4421-94A4-80DF10C0631E} => pcalua.exe -a "E:\Dragon Age Poczatek Deluxe\Setup.exe" -d "E:\Dragon Age Poczatek Deluxe"
Task: {4277EEE2-25BB-4F16-A424-6EA3767765E7} - System32\Tasks\{2348C559-55DE-48DB-881F-2EC5526D25EF} => pcalua.exe -a "E:\BATLE 2\Support\Battlefield Bad Company 2_code.exe" -d "E:\BATLE 2\Support"
Task: {515C7F2D-F7DD-47D1-B7FB-AE6A6160C41C} - System32\Tasks\{BA483FF9-AACB-4AEA-8CAA-A63FC640BD1B} => pcalua.exe -a E:\LastChaos_PL_Setup.exe -d E:\
Task: {52C9026D-7153-4DCD-9723-B0F36AC256FE} - System32\Tasks\{574C1B21-49FD-4F22-A9AC-8AEF272ECC1D} => pcalua.exe -a C:\Users\Pc\Desktop\TryWoW.exe -d C:\Users\Pc\Desktop
Task: {5322F24C-CA4B-4256-9F3A-1F1FDE8579FF} - System32\Tasks\{DA9B6BA2-5991-46EE-8DB4-12FC352BAE5F} => pcalua.exe -a "E:\Hidden & Dangerous 2\Setup.exe" -d "E:\Hidden & Dangerous 2"
Task: {5B110376-A226-4135-9845-B63AF96C3FE9} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-2 -> Brak pliku <==== UWAGA
Task: {5D9EC8B1-4382-49C7-A868-489EFC8066A8} - System32\Tasks\{B7DFD9C7-D339-483B-8B86-1F45F793FC59} => pcalua.exe -a "C:\Program Files (x86)\MKJogo\MKLOL\MKuInst.exe"
Task: {6184A828-2AA3-4895-AD9E-022DC1429F65} - System32\Tasks\{53CB3B49-18EA-4690-9B71-A28228ADC3FC} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}\setup.exe" -c -runfromtemp -l0x0019 -removeonly
Task: {6AFF12C0-8ADF-4FBB-8C9A-AF7ECFDAA232} - System32\Tasks\Oaupae => C:\PROGRA~1\groover031220151431\Ouduki.bat
Task: {7245D23A-8FB5-4EAA-9F2F-C7DA68D90355} - System32\Tasks\{298997AA-D330-4908-8EAA-FC2D3EC260DD} => pcalua.exe -a "E:\GRY I TLANSLATOR\Assassin's Creed [PL] [DVD] [mdf]\Patch 1.0.2\cenega_poland_ac102.exe" -d "E:\GRY I TLANSLATOR\Assassin's Creed [PL] [DVD] [mdf]\Patch 1.0.2"
Task: {73978EC4-6413-4DE8-AF5F-5256289686AD} - System32\Tasks\{55911AE5-474B-46BE-BE5E-24DD13DCBAFB} => pcalua.exe -a I:\DXSETUP\DXSETUP.EXE -d I:\DXSETUP
Task: {75344E91-E895-424B-B97D-96210B61B2D4} - System32\Tasks\{FCC914BE-767F-49DF-8F4F-F9F1F88A594B} => pcalua.exe -a E:\Counter-Strike\uninst.exe -d E:\Counter-Strike
Task: {7A9BE2FC-F93E-4B70-B25A-54C1A8A007E5} - System32\Tasks\{5F82F492-592B-4D2A-ACAC-5A94374D467B} => pcalua.exe -a "C:\Program Files (x86)\FlashGet Network\FlashGet 3\uninst.exe"
Task: {7B6F3641-2EEB-412D-9A09-44A52F4EB9A1} - System32\Tasks\{3C6CC7CC-97BC-462D-81A0-11055D05D40B} => pcalua.exe -a "C:\Users\Pc\Desktop\CS1.6_v32 - by -=Lukasz=-.exe" -d C:\Users\Pc\Desktop
Task: {7CAD81F7-591D-4EBE-88FD-62F34E2BB4F9} - System32\Tasks\{A598F787-DEF2-44C7-B6CB-3C246839039C} => pcalua.exe -a "D:\Games\Battlefield 3™\Core\EAProxyInstaller.exe" -d "D:\Games\Battlefield 3™\Core"
Task: {87219B1C-C504-4E45-8B42-BF7CF8E84CFC} - System32\Tasks\{6F0605C4-DE7E-4987-8435-359BD1FB35D7} => pcalua.exe -a "C:\Program Files (x86)\Microsoft Games for Windows - LIVE\Client\dotnetfx3setup.exe" -d "C:\Program Files (x86)\Microsoft Games for Windows - LIVE\Client"
Task: {891259EF-E8D7-465A-BC3B-9BBA33F4747F} - System32\Tasks\{C463C1A2-86B6-4C0E-8C6F-649848DE5EE7} => pcalua.exe -a "C:\Users\Pc\Downloads\spolszczenie_ts3 (1).exe" -d C:\Users\Pc\Downloads
Task: {920E1C1C-2207-4D49-8138-36DE7DB8A678} - System32\Tasks\{9D34C37C-CE29-42BE-B66A-940F0E326DC4} => pcalua.exe -a C:\Users\Pc\Desktop\Minecraft-Setup.exe -d C:\Users\Pc\Desktop
Task: {93656092-5AD4-4030-80B8-93F702EC1537} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-11 -> Brak pliku <==== UWAGA
Task: {A950FAB9-9AEF-49B5-822F-CAB5671A6854} - System32\Tasks\{6AE5DD48-9505-45BE-B601-B8D5A923ACB6} => pcalua.exe -a E:\rzr-skrm\rzr-skrm\install.exe -d E:\rzr-skrm\rzr-skrm
Task: {AA1CF33B-1019-4A31-A178-6DB2550D9E5D} - System32\Tasks\{A3F4FCAB-11AC-48A7-A6B1-1186B07E09A8} => pcalua.exe -a I:\OriginInstaller.exe -d I:\
Task: {ABCA3FAA-607D-4BB5-95C6-27C256CAA473} - System32\Tasks\{0495B0D6-33ED-4756-A3EB-893E686E862E} => pcalua.exe -a "C:\Users\Pc\Desktop\do gta\spolszczenie GTA 4 0.97b.exe" -d "C:\Users\Pc\Desktop\do gta"
Task: {ABFAD641-B328-47F9-90D2-05415F5B1283} - System32\Tasks\Norton Security Scan for Pc => C:\Program Files (x86)\Norton Security Scan\Engine\2.7.3.34\Nss.exe
Task: {B15BA64D-25D2-4A82-B7E7-C6EBDEF45072} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-6 -> Brak pliku <==== UWAGA
Task: {B9E4FC18-8A3B-4242-89B8-954FF984F18C} - System32\Tasks\{3C222E97-3B11-4B57-91D4-49C7A0B75D6D} => pcalua.exe -a C:\Users\Pc\Downloads\SilkroadOnline_GlobalOfficial_v1_281.exe -d C:\Users\Pc\Downloads
Task: {BA68B762-9680-437B-915C-5BE7464839CC} - System32\Tasks\{2FAC7F82-5427-4B9A-80F9-90123D820B3B} => pcalua.exe -a C:\Users\Pc\Desktop\OOo_3.2.1_Win_x86_install-wJRE_pl.exe -d C:\Users\Pc\Desktop
Task: {BE63EC1A-C786-4562-9F5F-5D6CF9F2B9F7} - System32\Tasks\{E5B7AE24-B443-4E0A-B06E-70EA7F1BF85B} => pcalua.exe -a C:\Users\Pc\Desktop\65558\pbsetup.exe -d C:\Users\Pc\Desktop\65558
Task: {BE9C18A7-0388-46B9-8D6B-E5D2C02E0695} - System32\Tasks\{D3FCDB48-2F32-47F5-83F1-143EC940EFD6} => pcalua.exe -a "C:\Users\Pc\Desktop\CS1.6_v32_by_Lukasz\CS1.6_v32_by_Lukasz\CS1.6_v32 - by -=Lukasz=-.exe" -d C:\Users\Pc\Desktop\CS1.6_v32_by_Lukasz\CS1.6_v32_by_Lukasz
Task: {C28674D4-E053-4832-ABB1-0F1B09A462FD} - System32\Tasks\{DC5E12FA-BBC1-42AE-91FF-5EF4201EAA32} => pcalua.exe -a "C:\Users\Pc\Desktop\Half Life Logo Creator.exe" -d C:\Users\Pc\Desktop
Task: {C2FC7260-CAB1-434D-9F4D-E9B934E31B21} - System32\Tasks\{544CF7DB-B4FE-463E-AE16-A310ABEF8939} => pcalua.exe -a E:\MKJogo\MKLOL\MKuInst.exe
Task: {C3C35162-2DA1-479E-B826-FBBEC6223775} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-7 -> Brak pliku <==== UWAGA
Task: {C56FC5BB-E676-4C62-B297-FFC38A0F3AC0} - System32\Tasks\{30EF048A-DDCB-48C0-B579-57CB838D8EB5} => pcalua.exe -a "C:\Program Files (x86)\SubEdit-Player\unins000.exe" -d "C:\Program Files (x86)\SubEdit-Player"
Task: {C57C496E-BF21-4FD3-B3A4-EE0E56039285} - System32\Tasks\{47F3C1ED-971F-4635-AEF8-297CD1A48202} => E:\Hidden & Dangerous 2\HD2SS.exe [2006-03-26] ()
Task: {C721BC02-F9BE-4B63-B324-5AFF853F1CC3} - System32\Tasks\{34E9F93D-C2BA-4191-8DD6-CCB48462A952} => pcalua.exe -a "D:\Rage\Rage  by R.G Repacker's\file\Redist\vcredist_x64.exe" -d "D:\Rage\Rage  by R.G Repacker's\file\Redist"
Task: {CE883984-FCE6-407D-99B8-384D992F6BCC} - System32\Tasks\{56627838-FC8B-4203-A3AD-866F969BA420} => pcalua.exe -a H:\OriginInstaller.exe
Task: {D9555536-E985-490D-AB53-5F3116DB5D74} - System32\Tasks\{A982A76B-D2FD-4AAF-A770-9C6B36D5E339} => pcalua.exe -a "C:\PROGRA~2\AV Vcs 7.0 DIAMOND\UNWISE.EXE" -c C:\PROGRA~2\AV Vcs 7.0 DIAMOND\INSTALL.LOG
Task: {DB2123AD-461A-4691-A4DF-4648149EC91F} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-5 -> Brak pliku <==== UWAGA
Task: {E5B0F34C-820C-44C1-BB7F-F5D6C6BA248E} - System32\Tasks\{31AA7179-7A61-496F-B01D-4ECC86B3D0C9} => pcalua.exe -a D:\Counter-Strike\uninst.exe
Task: {E83692FA-98FB-487E-9FDC-48C4475DDD81} - System32\Tasks\{C056611E-144A-48AE-8129-AB61185E855A} => pcalua.exe -a "C:\Users\Pc\Desktop\photo shop\Adobe Photoshop CS4 Extended PL - Portable_Melkor-torrenty.org\PhotoshopPortable.exe" -d "C:\Users\Pc\Desktop\photo shop\Adobe Photoshop CS4 Extended PL - Portable_Melkor-torrenty.org"
Task: {ECB1717A-8EC1-41A6-B52C-1634B04CFFB5} - \c2813c01-4d50-4656-a2ad-d9c9a47df061-10 -> Brak pliku <==== UWAGA
Task: {EE021CCD-0060-4C8D-9884-3D2430187DEF} - System32\Tasks\{9B3284C1-C169-4DD2-8027-E9E36D9F1FDB} => pcalua.exe -a "C:\Program Files (x86)\SightSpeed\uninst.exe"
Task: {F34A6351-3288-4A6D-B4C7-FC3F6AC314CA} - System32\Tasks\{A0FB5F99-8E5A-4DA4-8783-304D90FD1A07} => pcalua.exe -a C:\Users\Pc\Desktop\swords-sandals-3-solo-ultratus.exe -d C:\Users\Pc\Desktop
 C:\Program Files (x86)\Tencent
AlternateDataStreams: C:\Windows:7DFA315769DF3F4F
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service"
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Akamai NetSession Interface
C:\Users\Pc\AppData\Local\Akamai\netsession_win.exe
FirewallRules: [TCP Query User{64DF367E-DEEA-442A-ABEF-AD0334D6C5D0}C:\users\pc\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\pc\appdata\local\akamai\netsession_win.exe
FirewallRules: [uDP Query User{7D43618F-6369-4ED1-9348-3FC128AFDF1B}C:\users\pc\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\pc\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{221C607E-90E9-43BD-9D91-355D9DE36079}C:\users\pc\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\pc\appdata\local\akamai\netsession_win.exe
FirewallRules: [uDP Query User{17CB262A-874F-4EDC-90C5-51C779015055}C:\users\pc\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\pc\appdata\local\akamai\netsession_win.exe
FirewallRules: [{DB014ACE-CB3A-4FBE-8380-D2B245E8287F}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCmgrInstallGuide.exe
FirewallRules: [{02269ACB-0F84-4572-AFFE-041AC5B1EEB4}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCTray.exe
FirewallRules: [{D424964C-5F1A-4965-9244-80DF09E482F0}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCMgr.exe
FirewallRules: [{EAD5021F-CF3B-413C-87D0-1AB6CF935A81}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCRTP.exe
FirewallRules: [{EAAE4E16-DEBE-4693-AC0B-09F79F0E044A}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QMDL.exe
FirewallRules: [{649A1E62-FE61-4E02-82B1-93EBC2634342}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\bugreport.exe
FirewallRules: [{33799286-7D0D-4D79-9755-092363633F6C}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCFileOpen.exe
FirewallRules: [{0271D30B-EC94-4C23-B54E-8250DAE5877E}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCLeakScan.exe
FirewallRules: [{FC1E81F4-E6A6-40D2-8ECB-57679BB20E88}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPConfig.exe
FirewallRules: [{1B75AAE1-69B0-4952-A2F3-639D05F5C3BE}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCSoftMgr.exe
FirewallRules: [{2A537AB6-534A-42A1-B32A-4C4EEC09765F}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\plugins\QMNetMon\QQPCNetFlow.exe
FirewallRules: [{FB5AB33E-C43A-4E96-84A5-D4F5C26802DD}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCBTU.exe
FirewallRules: [{B28A2400-C936-41DA-AAEB-AF86A0C5D60A}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCClinic.exe
FirewallRules: [{B135D330-2FA9-427D-A79C-FBD95184926B}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCLaunch.exe
FirewallRules: [{92879F28-64C1-4CAC-92F7-BE27496FF979}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QMUpdate\QQPCMgrUpdate.exe
FirewallRules: [{6515DDC7-37C1-4980-BD32-35CD9E8CB2E3}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCSoftGame.exe
FirewallRules: [{D020E76C-3EF6-4BC2-A489-01AF8E82D2FE}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCSysOptimize.exe
FirewallRules: [{53438FA1-1AD1-4991-B404-7772BA9F8D44}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCUpdateAVLib.exe
FirewallRules: [{71DB1ADA-85EC-4138-9E51-BD4282B25765}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQRepair.exe
FirewallRules: [{31350652-5784-44D7-A35B-5AA8A99C38AE}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCPatch.exe
FirewallRules: [{C98B0461-4ECB-4EB1-9264-173470F35F3C}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\TpkUpdate.exe
FirewallRules: [{076E97D1-E813-4DE3-BC9A-42CDEE28FB07}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QMRouterMgr.exe
FirewallRules: [{30A23F2F-9DCA-49B3-AC05-2F3509309ED4}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QMAccountProtection.exe
FirewallRules: [{65978863-A3FB-4993-AF9A-439C26B659CE}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QMAdBlock.exe
FirewallRules: [{0FC1687C-32A3-45EE-A65A-05C079F6F74D}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [{66CA9862-1DF9-492B-A792-FF72A17E808F}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
C:\program files (x86)\common files\tencent
AV: 电脑管家系统防护 (Enabled - Out of date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5}
AS: 电脑管家系统防护 (Enabled - Out of date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48}
C:\Program Files (x86)\TDataDld
HKLM-x32\...\Run: [ QQPCTray] => C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQPCTray.exe [355296 2016-01-11] (Tencent)
HKLM-x32\...\Winlogon: [shell] explorer.exe, [ ] () <=== UWAGA
HKU\S-1-5-21-775939470-1417723944-2288147098-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Pc\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-775939470-1417723944-2288147098-1000\...\Run: [] => [X]
HKU\S-1-5-21-775939470-1417723944-2288147098-1000\...\Run: [C] => C:\Windows\system32\GroupPolicy\Machine\Registry.pol [750 2016-01-11] ()
HKU\S-1-5-21-775939470-1417723944-2288147098-1000\...\CurrentVersion\Windows: [Load] C:\Users\Pc\Local Settings\Temp\msqktaa.com <===== UWAGA
AppInit_DLLs: C:\ProgramData\Zonzap\Geostrong.dll => Brak pliku
AppInit_DLLs-x32: C:\ProgramData\Zonzap\SingQuois.dll => Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Pc\AppData\Local\MEGAsync\ShellExtX64.dll Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Pc\AppData\Local\MEGAsync\ShellExtX64.dll Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Pc\AppData\Local\MEGAsync\ShellExtX64.dll Brak pliku
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} =>  Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Pc\AppData\Local\MEGAsync\ShellExtX32.dll Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Pc\AppData\Local\MEGAsync\ShellExtX32.dll Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Pc\AppData\Local\MEGAsync\ShellExtX32.dll Brak pliku
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
CHR HKU\S-1-5-21-775939470-1417723944-2288147098-1000\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mark008.com/2345.html
HKU\S-1-5-21-775939470-1417723944-2288147098-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://firstsputnik.ru/?ri=1&uid=c44416c2f522f311cb6e9c985d87e8d9&q={searchTerms}
HKU\S-1-5-21-775939470-1417723944-2288147098-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mark008.com/2345.html
HKU\S-1-5-21-775939470-1417723944-2288147098-1000\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csSX2EYAeAI90c9dVvVkh128xR-cLz16s1ECuAdOmVxcHZ4Sxz13KuJpLv4Cs6Cv3UFAgL58pxWzxfH7WbFz_YAZbEh2o5DMRcAoImUs3VFIFmiVT71N7y0rChx0t76yN_Qav5vUeeCM5w,,&q={searchTerms}
HKU\S-1-5-21-775939470-1417723944-2288147098-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://firstsputnik.ru/?ri=1&uid=c44416c2f522f311cb6e9c985d87e8d9&q={searchTerms}
URLSearchHook: [s-1-5-21-775939470-1417723944-2288147098-1000] UWAGA => Brak domyślnego URLSearchHook
URLSearchHook: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 - (Brak nazwy) - {0633EE93-D776-472f-A0FF-E1416B8B2E3D} - Brak pliku
SearchScopes: HKLM-x32 -> zbani URL = hxxp://zbani.com/en/get/{searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3C} URL = hxxp://firstsputnik.ru/?ri=1&uid=c44416c2f522f311cb6e9c985d87e8d9&q={searchTerms}
SearchScopes: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 -> ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 -> zbani URL = hxxp://zbani.com/en/get/{searchTerms}
SearchScopes: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3C} URL = hxxp://firstsputnik.ru/?ri=1&uid=c44416c2f522f311cb6e9c985d87e8d9&q={searchTerms}
SearchScopes: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3D} URL = hxxp://firstsputnik.ru/?ri=1&uid=c44416c2f522f311cb6e9c985d87e8d9&q=
SearchScopes: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 -> {582B7ACD-4DDE-4351-A6B7-3FE330F8D13F} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=STDVM
BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\TSWebMon64.dat [2016-01-11] (Tencent)
BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll => Brak pliku
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Brak pliku
Toolbar: HKLM - Brak nazwy - !{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -  Brak pliku
Toolbar: HKLM - Brak nazwy - !{95B7759C-8C7F-4BF1-B163-73684A933233} -  Brak pliku
Toolbar: HKLM-x32 - Brak nazwy - !{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -  Brak pliku
Toolbar: HKLM-x32 - Brak nazwy - !{95B7759C-8C7F-4BF1-B163-73684A933233} -  Brak pliku
Toolbar: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 -> Brak nazwy - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} -  Brak pliku
Toolbar: HKU\S-1-5-21-775939470-1417723944-2288147098-1000 -> Brak nazwy - {447CCF23-3319-4481-B1F6-0B13E40B0639} -  Brak pliku
FF Homepage: hxxp://www.yoursearching.com/?type=hp&ts=1452527244&z=57a58a2bdb3e13a11e62539gcz3w8oeweo7m6o8z4z&from=itr&uid=395049983_1052483_e03e0990
FF NewTab: hxxp://www.yoursearching.com/newtab/?type=nt&ts=1452527244&z=57a58a2bdb3e13a11e62539gcz3w8oeweo7m6o8z4z&from=itr&uid=395049983_1052483_e03e0990
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer -> D:\TVUPlayer\npTVUAx.dll [brak pliku]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [brak pliku]
FF SearchPlugin: C:\Users\Pc\AppData\Roaming\Mozilla\Firefox\Profiles\pq9cneo8.default\searchplugins\yoursearching.xml [2016-01-11]
FF Extension: FirefixTab - C:\Users\Pc\AppData\Roaming\Mozilla\Firefox\Profiles\pq9cneo8.default\extensions\deskCutv2@gmail.com [2016-01-11] [brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Pc\AppData\Roaming\Mozilla\Firefox\Profiles\pq9cneo8.default\extensions\deskCutv2@gmail.com
OPR StartupUrls:  "hxxp://www.sweet-page.com/?type=hp&ts=1441972681&z=00eba1e0ad45e029400de1ag8z5z2gbt3mao9qamdz&from=cornl&uid=395049983_1052483_E03E0990"
R2 TDataSvr; C:\Program Files (x86)\TDataDld\TData.exe [133360 2016-01-07] (TData.com)
S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S2 ginoquci; C:\Users\Pc\AppData\Local\Temp\nsw4AC8.tmp [X]
S2 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]
S2 qksvc; "C:\Program Files (x86)\Quiknowledge\Service\qksvc.exe" [X]
R1 QMUdisk; C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QMUdisk64.sys [161080 2016-01-06] (Tencent)
R2 QQSysMonX64; C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\QQSysMonX64.sys [138040 2016-01-11] (电脑管家)
R1 softaal; C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\softaal64.sys [35128 2016-01-11] (Tencent)
R3 TAOAccelerator; C:\Windows\system32\Drivers\TAOAccelerator64.sys [88632 2016-01-11] (Tencent)
R1 TAOKernelDriver; C:\Windows\System32\Drivers\TAOKernel64.sys [274232 2016-01-11] (Tencent Technology(Shenzhen) Company Limited)
R3 TFsFlt; C:\Windows\System32\Drivers\TFsFltX64.sys [87864 2016-01-11] (电脑管家)
C:\Windows\System32\Drivers\TAOKernel64.sys
C:\Windows\System32\Drivers\TFsFltX64.sys
C:\Windows\system32\Drivers\TAOAccelerator64.sys
R3 TS888x64; C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\TS888x64.sys [28984 2016-01-11] (Tencent)
R1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\TSDefenseBT64.sys [28984 2016-01-11] (Tencent)
R3 TSSKX64; C:\Windows\System32\drivers\tsskx64.sys [38200 2016-01-11] (电脑管家)
R1 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\11.1.16908.217\TSSysKit64.sys [87352 2016-01-11] (电脑管家)
C:\Windows\System32\drivers\tsskx64.sys
S3 ATP; system32\DRIVERS\cmdatp.sys [X]
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 dump_wmimmc; \??\E:\AeriaGames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 OSFMount; \??\C:\Program Files (x86)\Counter-Strike Global Offensive\image\x64\OSFMount.sys [X]
S3 wolf; \??\C:\AeriaGames\WolfTeam-PL\avital\wolf64.sys [X]
S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]
S3 X6va017; \??\C:\Windows\SysWOW64\Drivers\X6va017 [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
C:\Users\Pc\AppData\Roaming\Tencent
C:\ProgramData\pubjtini.xmz
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares\Ares.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares\Homepage.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares\Host Chatroom.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares\Uninstall.lnk
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQPCMgr
EmptyTemp:

>>Menu Notatnika >> Plik >>
>>Zapisz jako >>
Nazwa pliku: fixlist
Zapisz jako typ: Dokumenty tekstowe
Kodowanie: UTF -8
>>Zapisz
Plik umieść w folderze C:\Users\Pc\Desktop
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

Zrób nowe logi FRST.

 

jessi

Odnośnik do komentarza

Otwórz Notatnik i wklej w nim:

 

>>Menu Notatnika >> Plik >>

>>Zapisz jako >>

Nazwa pliku: fixlist

Zapisz jako typ: Dokumenty tekstowe

Kodowanie: UTF -8

>>Zapisz

Plik umieść w folderze C:\Users\Pc\Desktop

Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

Zrób nowe logi FRST.

 

jessi

A co do tego FRST żeby umieścić obok czyli po prostu stworzyć nowy folder i obydwa pliki wkleić?

Odnośnik do komentarza

nie rozumiem pytania -

może jeszcze raz dokładnie zrób, co napisałam?

 EDIT:

a chyba rozumiem - zacząłes wykonywać, zanim ja zdążyłam poprawić swoje zalecenie, więc to Ci pomieszało szyki.

zrób tak, jak jest tam teraz napisane

 

jessi

Wszystko jest okej stworzyłem nowy folder i wrzuciłem tam FRST i fixlist i odpaliłem FRST i wziąłem napraw no i wszystko jednym słowem Zaje....scie :D W menadżerze zadań w procesach chyba z 50% mniej mam. W ogóle to ja jestem w szoku jak można ogarnąć coś takiego tyle syfu w tych logach i wiesz co i jak co trzeba usunąć itp! DZIĘKUJĘ Ci Bardzo!! Uratowałaś mi mojego złomka :D Oby więcej takich ludzi! Jeszcze raz  WIELKIE Dzięki! Pozdrawiam i miłej nocy! :)

Odnośnik do komentarza

Jeśli chcesz dodać odpowiedź, zaloguj się lub zarejestruj nowe konto

Jedynie zarejestrowani użytkownicy mogą komentować zawartość tej strony.

Zarejestruj nowe konto

Załóż nowe konto. To bardzo proste!

Zarejestruj się

Zaloguj się

Posiadasz już konto? Zaloguj się poniżej.

Zaloguj się
  • Ostatnio przeglądający   0 użytkowników

    • Brak zarejestrowanych użytkowników przeglądających tę stronę.
×
×
  • Dodaj nową pozycję...