logo elektroda
logo elektroda
X
logo elektroda
REKLAMA
REKLAMA
Adblock/uBlockOrigin/AdGuard mogą powodować znikanie niektórych postów z powodu nowej reguły.

Windows 7 - nie można uruchomić menedżera zadań

lajkon1988 13 Lis 2013 22:27 2136 6
REKLAMA
  • #1 12949425
    lajkon1988
    Poziom 2  
    Posty: 3
    Witam mam problem, generalnie nic wielkiego z kompem sie nie dzieje ale zmartwilem sie faktem jak nie moglem odpalic managera zadan, komp zostal przeskanowany avastem oraz avg ale nic specjalnego nie wykryly te dwa "cudowne" programy. Sciagnalem otl zrobilem logi i ewidentnie widac ze cos w nich jest nie halo aczkolwiek zbyt wiele czasu zajmie mi ogarniecie o co dokladnie chodzi i jak pozbyc sie tego scierwa, ktore sie rozpanoszylo dlatego zwracam sie do was o pomoc, pod spodem pliki z tym co wygenerowal otl, z gory dzieki i pozdrawiam:)
    Załączniki:
    • log2.txt (47.77 KB) Musisz być zalogowany, aby pobrać ten załącznik.
    • log1.txt (158.34 KB) Musisz być zalogowany, aby pobrać ten załącznik.
  • REKLAMA
  • REKLAMA
  • #3 12949501
    Kolobos
    Spec od komputerów
    Posty: 85178
    Pomógł: 17171
    Ocena: 10454
    Odinstaluj:
    Ask Toolbar
    Delta toolbar
    Delta Chrome Toolbar
    McAfee Security Scan Plus
    Optimizer Pro v3.0
    OptimizerPro
    ContinueToSave 1.74
    Search Assistant WebSearch 1.74
    WinZipper

    Użyj AdwCleaner, opcja Scan i Clean/Szukaj i Usuń:
    http://www.bleepingcomputer.com/download/adwcleaner/

    Wykonaj skrypt w OTL:

    :OTL
    PRC - [2013-10-15 02:14:25 | 000,166,352 | ---- | M] (APN LLC.) -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
    PRC - [2013-10-15 02:14:17 | 001,673,680 | ---- | M] (APN) -- C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
    PRC - [2013-08-23 11:07:32 | 000,424,104 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) -- C:\Program Files\WinZipper\winzipersvc.exe
    PRC - [2013-08-22 05:03:49 | 000,303,680 | ---- | M] (Wsys Co., Ltd.) -- C:\ProgramData\eSafe\eGdpSvc.exe
    SRV - [2013-10-15 02:14:25 | 000,166,352 | ---- | M] (APN LLC.) [Auto | Running] -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
    SRV - [2013-08-23 11:07:32 | 000,424,104 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) [Auto | Running] -- C:\Program Files\WinZipper\winzipersvc.exe -- (winzipersvc)
    SRV - [2013-08-22 05:03:49 | 000,303,680 | ---- | M] (Wsys Co., Ltd.) [Auto | Running] -- C:\ProgramData\eSafe\eGdpSvc.exe -- (WsysSvc)
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_...EKT-60F3T1_WD-WX80A99U0152U0152&ts=1377252468
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_...EKT-60F3T1_WD-WX80A99U0152U0152&ts=1377252468
    IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
    IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.delta-homes.com/web/?utm_source...EKT-60F3T1_WD-WX80A99U0152U0152&ts=1377252468
    IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
    IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.pu-results.info/?l=1&q={searchTerms}&pid=722&r=2013/05/20&hid=682516058&lg=EN&cc=PL

    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_...EKT-60F3T1_WD-WX80A99U0152U0152&ts=1377252468
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_...EKT-60F3T1_WD-WX80A99U0152U0152&ts=1377252468
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=2&src=sp&cf=623fa22a-f21b-11e1-84fe-00269e740721&q={searchTerms}
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\SearchScopes\{07908A55-615A-4D8D-9AA1-77C8DF256633}: "URL" = http://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=121845&babsrc=SP_ss&mntrId=4E110CEEE695FDDA
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.delta-homes.com/web/?utm_source...EKT-60F3T1_WD-WX80A99U0152U0152&ts=1377252468
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\SearchScopes\{483EEF0F-B33C-4032-A78E-2E826D2B5B35}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
    IE - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.pu-results.info/?l=1&q={searchTerms}&pid=722&r=2013/05/20&hid=682516058&lg=EN&cc=PL
    FF - prefs.js..browser.search.defaultthis.engineName: "uTorrentControl2 Customized Web Search"
    FF - prefs.js..browser.search.defaulturl: "http://websearch.pu-results.info/?pid=722&r=2013/05/20&hid=682516058&lg=EN&cc=PL&l=1&q="
    FF - prefs.js..browser.search.order.1: "Ask Search"
    FF - prefs.js..browser.search.selectedEngine: "Ask Search"
    FF - prefs.js..browser.search.useDBForOrder: true
    FF - prefs.js..browser.startup.homepage: "http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&from=newgdp&uid=WDCXWD3200BEKT-60F3T1_WD-WX80A99U0152U0152&ts=1377252468"
    FF - prefs.js..extensions.enabledAddons: ffxtlbr%40delta.com:1.5.0
    FF - prefs.js..extensions.enabledAddons: WebSiteRecommendation%40weliketheweb.com:1.0.6
    FF - prefs.js..extensions.enabledAddons: toolbar_ORJ-V7%40apn.ask.com:25.60699
    [2013-06-15 14:38:42 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\extensions\ffxtlbr@delta.com
    [2013-08-08 23:33:43 | 000,000,000 | ---D | M] ("WebSite Recommendation") -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\extensions\WebSiteRecommendation@weliketheweb.com
    [2013-10-18 13:48:02 | 000,477,497 | ---- | M] () (No name found) -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\extensions\toolbar_ORJ-V7@apn.ask.com.xpi
    [2013-10-18 13:47:59 | 000,002,544 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\ask-search.xml
    [2013-07-10 13:59:10 | 000,002,584 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\askcom.xml
    [2013-05-04 17:50:57 | 000,002,306 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\askcomsearch.xml
    [2013-06-15 18:08:16 | 000,006,470 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\babylon.xml
    [2013-06-15 18:08:16 | 000,006,470 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\BrowserDefender.xml
    [2012-06-07 20:16:04 | 000,000,935 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\conduit.xml
    [2013-06-15 18:08:41 | 000,001,294 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\delta.xml
    [2012-08-29 21:52:15 | 000,000,792 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\startsear.xml
    [2013-05-20 23:01:28 | 000,007,829 | ---- | M] () -- C:\Users\Mario\AppData\Roaming\Mozilla\Firefox\Profiles\qxx8gs7t.default\searchplugins\WebSearch.xml
    [2013-08-23 11:07:49 | 000,000,793 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\delta-homes.xml
    O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
    O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
    O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll ()
    O3 - HKU\S-1-5-21-667839467-2559183484-630244762-1000\..\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
    O4 - HKLM..\Run: [ApnTBMon] C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
    O4 - HKU\S-1-5-21-667839467-2559183484-630244762-1000..\Run: [AdobeBridge] File not found
    O4 - HKU\S-1-5-21-667839467-2559183484-630244762-1000..\Run: [Optimizer Pro] C:\Program Files\Optimizer Pro\OptProLauncher.exe (PC Utilities Pro)
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.45.2)
    O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.45.2)
    O20 - AppInit_DLLs: (c:\progra~1\contin~1\sprote~1.dll) - File not found
    O20 - AppInit_DLLs: (c:\progra~1\websea~1\sprote~1.dll) - File not found
    [2013-10-18 13:47:53 | 000,000,000 | ---D | C] -- C:\ProgramData\AskPartnerNetwork
    [2013-10-18 13:47:53 | 000,000,000 | ---D | C] -- C:\Program Files\AskPartnerNetwork
    [2013-10-18 13:47:42 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
    [2013-06-15 14:38:46 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\BabSolution
    [2013-06-15 18:08:22 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Babylon
    [2013-06-15 14:38:38 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Delta
    [2013-06-15 14:39:06 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Desk 365
    [2013-09-28 09:37:45 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\eUpdate
    [2013-01-27 15:46:54 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\PerformerSoft
    [2013-06-15 14:39:14 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\SimilarSites
    [2013-09-16 18:11:31 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\WinZipper

    :Files
    C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\
    C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\
    C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\olakgnkoldmagdblaalodobkmeokmgjj\
    C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\


    Zrób pełny skan przy pomocy Mbam:
    http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/
    oraz: http://ftp.drweb.com/pub/drweb/cureit/launch.exe

    Po wykonaniu daj nowy log z OTL, ze skanowania.
  • #4 12950487
    lajkon1988
    Poziom 2  
    Posty: 3
    prosze oto log a task manager jak sie nie odpalal tak sie nie odpala..:/
    Załączniki:
    • log14.txt (118.75 KB) Musisz być zalogowany, aby pobrać ten załącznik.
  • REKLAMA
  • #5 12951175
    Kolobos
    Spec od komputerów
    Posty: 85178
    Pomógł: 17171
    Ocena: 10454
    Co sie wyswietla kiedy probujesz go uruchomic?

    Uzyj: http://jpshortstuff.247fixes.com/SystemLook.html wykonaj skrypt:

    :filefind
    taskmgr.exe

    Daj log z wykonania.


    Wykonaj skrypt w OTL:

    :OTL
    O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No CLSID value found.
    O4 - HKCU..\Run: [AdobeBridge] File not found
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.45.2)
    O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.45.2)
    [2013-11-14 00:59:35 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  • REKLAMA
  • #6 12951457
    lajkon1988
    Poziom 2  
    Posty: 3
    ========== OTL ==========
    Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C55BBCD6-41AD-48AD-9953-3609C48EACC7} not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}\ not found.
    Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge not found.
    Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Starting removal of ActiveX control {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}\ not found.
    Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    Folder C:\AdwCleaner\ not found.

    OTL by OldTimer - Version 3.2.69.0 log created on 11142013_170353
  • #7 12951646
    Kolobos
    Spec od komputerów
    Posty: 85178
    Pomógł: 17171
    Ocena: 10454
    Po co to wklejasz? Prosilem TYLKO o log z systemlook, ktorego oczywiscie nie dales.

Podsumowanie tematu

✨ Użytkownik zgłasza problem z uruchomieniem Menedżera zadań w systemie Windows 7. Po skanowaniu przy użyciu programów Avast i AVG nie wykryto zagrożeń, jednak użytkownik zauważył nieprawidłowości w logach OTL. Użytkownicy forum zalecają wykonanie pełnego skanowania za pomocą Malwarebytes Anti-Malware (MBAM) oraz AdwCleaner, a także usunięcie podejrzanych programów, takich jak Ask Toolbar, Delta Toolbar, McAfee Security Scan Plus i inne. Dodatkowo, sugerowane jest wykonanie skryptów w OTL oraz SystemLook w celu dalszej diagnostyki i usunięcia problemów.
Podsumowanie AI na podstawie dyskusji. Może zawierać błędy.
REKLAMA