Problem z MPCcleaner

[Rotiv1906]

Przez moja nieuwagę zainstalowałem do systemu jakiś program o nazwie MPC Cleaner i jakieś poboczne > Chińskie znaczki nie chce nic klikać nawet bo nie wiem co to znaczy nawet.

 

Skanowałem laptopa Adwcleaner-em. Niby usuwa program z dysku i rejestru ale po restarcie wszystko wraca.

W sieci jest porada aby go odinstalować poprzez dodaj/usuń programy ale tam go nie ma.

W folderze nie ma pliku Uninstall więc też lipa :/ 

FRST.txt

Addition.txt

[jessica]

1) Odinstaluj niepotrzebny Akamai NetSession Interface

 

2) Te też niezbyt potrzebne:

Search App by Ask (HKLM-x32\...\{4254522D-5350-006A-76A7-A75C790C2802}) (Version: 12.40.2.3894 - APN, LLC) <==== UWAGA

Shopping App by Ask (HKLM-x32\...\{4F524A2D-5354-2D53-5045-A758B70C2300}) (Version: 12.35.0.285 - APN, LLC)

 

3) Tencent też do odinstalowania, o ile da się go odinstalować:

电脑管家11.7 (HKLM-x32\...\QQPCMgr) (Version: 11.7.17791.230 - 腾讯科技(深圳)有限公司) <==== UWAGA

 

4) Otwórz Notatnik i wklej w nim:

 

Reg: reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v PendingFileRenameOperations /t REG_MULTI_SZ /d "" /f
CMD: for %i in ("D:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\*.dll") do regsvr32 /s /u %i
CMD: for %i in ("D:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\*.dll") do C:\Windows\SysWOW64\regsvr32.exe /s /u %i
AV: 电脑管家系统防护 (Enabled - Up to date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5}
AS: 电脑管家系统防护 (Enabled - Up to date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48}
Task: {1FE7127A-093D-49E9-A8A6-5E71B5462789} - System32\Tasks\{8B56286D-B752-4FBC-84AA-50EA3D12219D} => pcalua.exe -a C:\Users\Tomek\Downloads\camtasia.exe -d C:\Users\Tomek\Downloads
Task: {265A0C4C-E1CE-4243-B2AB-2BB7B06AD88F} - System32\Tasks\{00623B17-A976-420E-A07A-4FCEB7B234F6} => pcalua.exe -a C:\Users\Tomek\Desktop\LeagueofLegends_EUNE_Installer_9_15_2014.exe -d C:\Windows\SysWOW64 -c /groupsextract:100;102; /out:"C:\Users\Tomek\AppData\Roaming\Riot Games\League of Legends\prerequisites" /callbackid:1588
Task: {3154763E-0E96-4A55-9883-32EB1127E586} - System32\Tasks\{F52179B1-C19E-45FE-8A78-4ECAA824D069} => pcalua.exe -a "C:\Users\Tomek\Desktop\Nowy folder\setup.exe" -d "C:\Users\Tomek\Desktop\Nowy folder"
Task: {47ECF519-29F8-47AC-9DAB-FBFFA1D39A93} - System32\Tasks\{B18623AF-D2E2-4CF2-A9DC-AE11D4FF4296} => pcalua.exe -a F:\ptk\LeagueofLegends_EUNE_Installer_9_15_2014.exe -d C:\Windows\SysWOW64 -c /groupsextract:100;101;102; /out:"C:\Users\Tomek\AppData\Roaming\Riot Games\League of Legends\prerequisites" /callbackid:216
ShortcutWithArgument: C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks\WorldofTanks.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://mmotraffic.com/catalog/goplay/1327/MTE3NjYvLy8xMzI3/
ShortcutWithArgument: C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GoodGameEmpire\GoodGameEmpire.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://a2g-secure.com/?E=bwsPamg0MAiwFF%2bnM1a0Fg%3d%3d&s1= --app-window-size=1366,768
ShortcutWithArgument: C:\Users\Tomek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\GoodGameEmpire.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://a2g-secure.com/?E=bwsPamg0MAiwFF%2bnM1a0Fg%3d%3d&s1=
ShortcutWithArgument: C:\Users\Tomek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WorldofTanks.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://mmotraffic.com/catalog/goplay/1327/MTE3NjYvLy8xMzI3/
RemoveDirectory: C:\Program Files (x86)\Tencent
RemoveDirectory: C:\Program Files (x86)\MPC Cleaner
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\MPCProtectService
FirewallRules: [TCP Query User{6126B11A-DCC1-48BF-8681-8851479BB82B}C:\users\tomek\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\tomek\appdata\local\akamai\netsession_win.exe
FirewallRules: [uDP Query User{3D13B886-DEC6-4AB4-9A78-194105B4EFE0}C:\users\tomek\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\tomek\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{8AD5CFB2-6F17-4416-BA3F-C1362E467080}C:\users\tomek\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\tomek\appdata\local\akamai\netsession_win.exe
FirewallRules: [uDP Query User{8791BF88-4FE4-4A39-82C7-0803FD5F95A3}C:\users\tomek\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\tomek\appdata\local\akamai\netsession_win.exe
C:\users\tomek\appdata\local\akamai\netsession_win.exe
FirewallRules: [{EC08C8CD-A158-4E04-92A5-74C1A5453AB8}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCTray.exe
FirewallRules: [{3A88E0CB-EBA0-48C3-A504-B1E78D4C7383}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCMgr.exe
FirewallRules: [{0F23FC85-685A-47D8-8BC2-E2A71694362E}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCRTP.exe
FirewallRules: [{CD365955-8368-4025-9D86-2BB538983341}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QMDL.exe
FirewallRules: [{243FFE5C-353B-4181-A638-8D78D33930C0}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\bugreport.exe
FirewallRules: [{1CFA6EBA-B8FA-4EF9-8566-D02EB9CAD550}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCFileOpen.exe
FirewallRules: [{D3DC244E-DA2F-4245-991D-8F7F284D3EF6}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCLeakScan.exe
FirewallRules: [{A2F1F2BC-BA64-43BB-87ED-60A459606E89}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPConfig.exe
FirewallRules: [{FE0275B7-31CE-4685-84A5-D8B6BA37A453}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCSoftMgr.exe
FirewallRules: [{02D3DC4E-FF16-4A2E-B701-C53E93132D74}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\plugins\QMNetMon\QQPCNetFlow.exe
FirewallRules: [{59FB9BB3-AAB5-4D5F-A528-D0E5117D4275}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCBTU.exe
FirewallRules: [{D9A41817-BABE-446D-BA4A-42E4EA572974}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCClinic.exe
FirewallRules: [{96E5C14E-B874-4581-92E3-A4BBD40CE932}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCLaunch.exe
FirewallRules: [{73D2C21C-3B93-4120-9364-20240149E387}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QMUpdate\QQPCMgrUpdate.exe
FirewallRules: [{37711E16-9B44-4620-A1DA-D4AAE2E3AA06}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCSoftGame.exe
FirewallRules: [{3FF6A42C-D322-4B14-86EC-1D6671652292}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCSysOptimize.exe
FirewallRules: [{0F20F1A1-A5FF-4B55-AA97-2C1BDA6DE748}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCUpdateAVLib.exe
FirewallRules: [{1A22D5F3-4C8F-42DB-8AFB-E879828CE05F}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQRepair.exe
FirewallRules: [{68936530-8778-449C-AFB3-56F44CF26430}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\Uninst.exe
FirewallRules: [{69F95E06-1FE6-43A5-BE54-4BB47995D334}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCPatch.exe
FirewallRules: [{9483D0E8-153C-4BB2-ACF2-7CE06DEC489A}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TpkUpdate.exe
FirewallRules: [{8C6F62CC-3838-4508-A94B-C38FE1026639}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QMAccountProtection.exe
FirewallRules: [{8B50B4D0-B49E-454B-A1C0-115891619A16}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QMAdBlock.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ QQPCTray] => C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCTRAY.EXE [364776 2016-07-22] (Tencent)
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QMGCShellExt64.dll [2016-07-22] (Tencent)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1
HKU\S-1-5-21-1743146011-2491664986-3937461519-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1
BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TSWebMon64.dat [2016-07-22] (Tencent)
FF Plugin: @esn/npbattlelog,version=2.7.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.0\npbattlelogx64.dll [brak pliku]
FF Plugin-x32: @esn/npbattlelog,version=2.7.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.0\npbattlelog.dll [brak pliku]
CHR HomePage: Default -> search.ask.com/?gct=hp
CHR StartupUrls: Default -> "search.mpc.am"
CHR DefaultSearchURL: Default -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search.ask.com
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [355808 2016-08-22] (DotC United Inc)
R2 QQPCRtp; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCRTP.exe [315920 2016-07-22] (Tencent)
U2 QQRepair1a9e; C:\Program Files (x86)\Tencent\QQPCMGR\QQRepair1a9e [151272 2016-08-25] ()
S2 QQRepairFixSVC; C:\Program Files (x86)\Tencent\QQPCMGR\QQRepairFixSVC [151272 2016-08-25] ()
R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [60136 2016-08-22] (DotC United Inc)
R1 QMUdisk; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QMUdisk64.sys [188920 2016-07-25] (Tencent)
R2 qqsysmonx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQSysMonX64.sys [152568 2016-07-22] (电脑管家)
R1 softaal; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\softaal64.sys [42488 2016-07-22] (Tencent)
R1 SRepairDrv; \??\C:\Program Files (x86)\Tencent\QQPCMGR\SRepairDrv [181752 2016-08-25] ()
R3 TAOAccelerator; C:\Windows\system32\Drivers\TAOAccelerator64.sys [97880 2016-07-22] (Tencent)
R1 TAOKernelDriver; C:\Windows\system32\Drivers\TAOKernel64.sys [145400 2016-07-22] (Tencent Technology(Shenzhen) Company Limited)
R3 TcHardWare; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCHW-x64.sys [16552 2016-07-22] (Tencent)
R1 TFsFlt; C:\Windows\System32\Drivers\TFsFltX64.sys [95224 2016-07-22] (电脑管家)
R3 TS888x64; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TS888x64.sys [38520 2016-08-25] (Tencent)
R1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TSDefenseBT64.sys [28984 2016-07-22] (Tencent)
R2 tsnethlpx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TsNetHlpX64.sys [55800 2016-07-22] ()
R1 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TSSysKit64.sys [94712 2016-07-22] (电脑管家)
C:\Windows\System32\Drivers\TFsFltX64.sys
C:\Windows\system32\Drivers\TAOKernel64.sys
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
C:\Users\Tomek\AppData\Roaming\MCorp
C:\Users\Tomek\AppData\Roaming\Tencent
C:\Windows\system32\Drivers\TAOAccelerator64.sys
C:\ProgramData\TXQMPC
C:\Users\Tomek\AppData\Roaming\InstallationConfiguration.xml
C:\Users\Tomek\AppData\Roaming\Installer.dat
C:\ProgramData\Ament.ini
C:\ProgramData\mntemp
HOSTS:
EmptyTemp:

>>Menu Notatnika >> Plik >>
>>Zapisz jako >>
Nazwa pliku: fixlist
Zapisz jako typ: Dokumenty tekstowe
Kodowanie: Unicode
>>Zapisz
Plik umieść w folderze C:\Users\Tomek\Desktop
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

Zrób nowe logi FRST.

Przed skanem zaznacz "Addition.txt" oraz "Shortcut.txt"

 

jessi

[Rotiv1906]

2. nie moge odinstalować  >>  'Określone konto już istnieje' i się cofa.
3. po chińsku jest deinstalacja i nie rozumiem i nie chce nie wiadomo czego klikac ;/

Addition.txt

Fixlog.txt

FRST.txt

Shortcut.txt

[jessica]

po chińsku jest deinstalacja i nie rozumiem i nie chce nie wiadomo czego klikac

Ja też nie znam chińskiego.

 

1) Uruchom Registry DeleteEx  http://www.novirusthanks.org/products/registry-deleteex/ .

Zaznacz opcję "Recursively delete all subkeys". W pasku adresów po kolei wklej te ścieżki i je usuń:

 

HKLM\SYSTEM\CurrentControlSet\Services\MPCKpt

HKLM\SYSTEM\CurrentControlSet\Services\MPCProtectService

 

Zresetuj system.

 

2) Otwórz Notatnik i wklej w nim:

 

 

AV: 电脑管家系统防护 (Enabled - Up to date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5}

AS: 电脑管家系统防护 (Enabled - Up to date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48}

Reg: reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v PendingFileRenameOperations /t REG_MULTI_SZ /d "" /f

CMD: for %i in ("D:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\*.dll") do regsvr32 /s /u %i

CMD: for %i in ("D:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\*.dll") do C:\Windows\SysWOW64\regsvr32.exe /s /u %i

DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4254522D-5350-006A-76A7-A75C790C2802}

DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4254522D-5350-006A-76A7-A75C790C2802}

DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5354-2D53-5045-A758B70C2300}

DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5354-2D53-5045-A758B70C2300}

DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQPCMgr

DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\QQPCMgr

FirewallRules: [{8F05C519-D4B2-4E86-A2E1-17C0F47A22F6}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\131\tencentdl.exe

FirewallRules: [{7550DE52-644A-4BEB-A6E7-D2153AD64F30}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\131\bugreport_xf.exe

RemoveDirectory: C:\Program Files (x86)\Tencent

RemoveDirectory: C:\program files (x86)\common files\tencent

RemoveDirectory: C:\Program Files (x86)\MPC Cleaner

RemoveDirectory: C:\Users\Tomek\AppData\Roaming\MCorp

HKLM-x32\...\Run: [ QQPCTray] => C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCTray.exe [364776 2016-07-22] (Tencent)

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1

HKU\S-1-5-21-1743146011-2491664986-3937461519-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1

BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TSWebMon64.dat [2016-07-22] (Tencent)

CHR HomePage: Default -> search.mpc.am

CHR StartupUrls: Default -> "search.mpc.am"

R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [355808 2016-08-22] (DotC United Inc)

R2 QQPCRtp; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQPCRTP.exe [315920 2016-07-22] (Tencent)

S2 QQRepair1b9e; "C:\Program Files (x86)\Tencent\QQPCMGR\QQRepair1b9e" [X]

U2 QQRepair414; "C:\Program Files (x86)\Tencent\QQPCMGR\QQRepair414" [X]

S2 QQRepairFixSVC; C:\Program Files (x86)\Tencent\QQPCMGR\QQRepairFixSVC [X]

R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [60136 2016-08-22] (DotC United Inc)

C:\Windows\System32\DRIVERS\MPCKpt.sys

R1 QMUdisk; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QMUdisk64.sys [189432 2016-08-23] (Tencent)

R2 qqsysmonx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\QQSysMonX64.sys [152568 2016-07-22] (电脑管家)

R1 softaal; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\softaal64.sys [42488 2016-07-22] (Tencent)

R3 TAOAccelerator; C:\Windows\system32\Drivers\TAOAccelerator64.sys [97880 2016-07-22] (Tencent)

R1 TAOKernelDriver; C:\Windows\system32\Drivers\TAOKernel64.sys [145400 2016-07-22] (Tencent Technology(Shenzhen) Company Limited)

R1 TFsFlt; C:\Windows\System32\Drivers\TFsFltX64.sys [95224 2016-07-22] (电脑管家)

R3 TS888x64; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TS888x64.sys [38520 2016-08-26] (Tencent)

R1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TSDefenseBT64.sys [28984 2016-07-22] (Tencent)

R2 tsnethlpx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TsNetHlpX64.sys [55800 2016-07-22] ()

R1 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\TSSysKit64.sys [94712 2016-07-22] (电脑管家)

C:\Windows\System32\Drivers\TFsFltX64.sys

C:\Windows\system32\Drivers\TAOKernel64.sys

C:\Windows\system32\Drivers\TAOAccelerator64.sys

R1 SRepairDrv; \??\C:\Program Files (x86)\Tencent\QQPCMGR\SRepairDrv [X]

C:\Users\Tomek\AppData\Roaming\Tencent

C:\ProgramData\TXQMPC

HOSTS:

EmptyTemp:

>>Menu Notatnika >> Plik >>

>>Zapisz jako >>

Nazwa pliku: fixlist

Zapisz jako typ: Dokumenty tekstowe

Kodowanie: Unicode

>>Zapisz

Plik umieść w folderze C:\Users\Tomek\Desktop

Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

3) Zrób nowe logi FRST (3)

 

jessi

[Rotiv1906]

"Failed to delete registry key."  ??

[jessica]

Mimo to rób następne kroki.

 

jessi

[Rotiv1906]

Zrobiłem dalsze kroki bez DeleteEx

Addition.txt

Shortcut.txt

Fixlog.txt

[jessica]

Brak logu FRST.txt.

 

Otwórz Notatnik i wklej w nim:

 

AV: 电脑管家系统防护 (Disabled - Up to date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5}
AS: 电脑管家系统防护 (Disabled - Up to date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48}
RemoveDirectory: C:\Program Files (x86)\MPC Cleaner
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live\AION Free-to-Play.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live\Deinstalacja programu Gameforge Live.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live\Uninstall Gameforge Live.lnk
C:\Users\Tomek\Desktop\byly pulpit\AION Free-to-Play.lnk
C:\Users\Tomek\Desktop\byly pulpit\Exaioros.lnk
C:\Users\Tomek\Desktop\byly pulpit\Gameforge Live.lnk
C:\Users\Tomek\Desktop\byly pulpit\HP Support Assistant.lnk
C:\Users\Tomek\Desktop\byly pulpit\Launch.lnk
C:\Users\Tomek\Desktop\byly pulpit\LOWENFELD - stadium rozwoju — skrót.lnk
C:\Users\Tomek\Desktop\byly pulpit\plastyka scenariusz zajęć.lnk
C:\Users\Tomek\Desktop\byly pulpit\WypasOTS 9.4 Cast.lnk
C:\Users\Tomek\Desktop\byly pulpit\WypasOTS 9.4.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\Audacity.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\AVG 2015.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\GG.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\League of Legends.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\McAfee Security Scan Plus.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\MK LOL.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\TeamSpeak 3 Client.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\VJoy — skrót.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\Tomasz\AVG Konserwacja 1 kliknięciem.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\Tomasz\AVG PC TuneUp 2015.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\Tomasz\Euro Truck Simulator 2.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\Tomasz\GameTracker Lite.lnk
C:\Users\Tomek\Desktop\byly pulpit\Śmieci\Tomasz\HyperCam 3.lnk
C:\Users\Tomek\Desktop\byly pulpit\PULPIT 2\ArmA3Sync.lnk
C:\Users\Tomek\Desktop\byly pulpit\PULPIT 2\McAfee Security Scan Plus.lnk
C:\Users\Tomek\Desktop\byly pulpit\PULPIT 2\Play Euro Truck Simulator 2 Multiplayer.lnk
C:\Users\Tomek\Desktop\byly pulpit\Dokumenty\ElfBot NG.lnk
C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software\Open Broadcaster Software (64bit).lnk
C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo\MK IM\MK LOL.lnk
C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo\MK IM\Uninstall.lnk
C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameTracker Lite\GameTracker Lite.lnk
C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameTracker Lite\View Release Notes.lnk
C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive\Arma 2 Operation Arrowhead\BattlEye\Uninstall BattlEye.lnk
C:\Users\Tomek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\MK LOL.lnk
ShortcutWithArgument: C:\Users\Tomek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\强力卸载电脑上的软件 .lnk
C:\Users\Tomek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\强力卸载电脑上的软件 .lnk
RemoveDirectory: C:\Program Files (x86)\Tencent
EmptyTemp:

>>Menu Notatnika >> Plik >>
>>Zapisz jako >>
Nazwa pliku: fixlist
Zapisz jako typ: Dokumenty tekstowe
Kodowanie: Unicode
>>Zapisz
Plik umieść w folderze C:\Users\Tomek\Desktop
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

Zrób nowe logi FRST.

Przed skanem zaznacz "Addition.txt" oraz "Shortcut.txt".

 

Powoli zaznajamiaj się z tematem https://www.fixitpc.pl/topic/4414-diagnostyka-infekcji-na-niestartuj%C4%85cych-windows/

 bo chyba trzeba będzie z niego skorzystać...

 

jessi