> Po podlaczeniu do innego lacza np. udostepniajac internet z telefonu dalej nie moze sie polaczyc?
Odinstaluj:
Ace Stream Media 3.1.28
Driver Booster 7
McAfee WebAdvisor
OkayFreedom
Sam zainstalowales te dodatki?
CHR Extension: (CryptoTab) - C:\Users\Ronaldo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcaacbfglejpnljiiokpcplbmmlbmnbk [2018-06-29]
CHR Extension: (CryptoSearch) - C:\Users\Ronaldo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oliajjhpgpfciobcodfdhmgcbgmgkffe [2018-06-29]
Jezeli nie uzywasz to usun.
Obok frst.exe utworz plik Fixlist.txt z zawartoscia:
CloseProcesses:
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\...\MountPoints2: K - K:\Setup.exe
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\...\MountPoints2: {1063a2f8-ed41-11e6-9c4c-001a923a1807} - N:\Setup.exe
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\...\MountPoints2: {67111544-7a1e-11ea-8095-001a923a1807} - P:\setup.exe
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\...\MountPoints2: {e8840b8d-eb95-11e6-a355-001a923a1807} - K:\CD-Start.exe
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\...\MountPoints2: {e8ad71f5-fb6f-11e6-af20-001a923a1807} - M:\startme.exe
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\...\MountPoints2: {eb25fc27-328d-11e7-89b9-001a923a1807} - M:\AUTORUN.EXE
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\...\MountPoints2: {eb25fc29-328d-11e7-89b9-001a923a1807} - L:\Setup.exe
IFEO\infohelper.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\maintenanceservice.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\Notifier.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\nvSCPAPISvr.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\NvStereoUtilityOGL.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\nvStInst.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\nvstlink.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\nvstreg.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\nvsttest.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\nvstview.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\NVStWiz.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\OkayFreedomClient.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\OkayFreedomService.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\OkayFreedomServiceStarter.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\RenameTAP.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\ResetPendingMoves.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\ServiceControl.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\setuptool.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\ShutdownApp.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
BootExecute:
Task: {4F4D9437-42FA-4A19-A041-96BE3848C080} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\Scheduler.exe [149776 2020-02-27] (IObit Information Technology -> IObit)
Task: {556201A4-D49C-4E4B-845D-FCCE3AF5602C} - System32\Tasks\{3F2D8D46-EAB2-4018-BE58-61866033E8AD} => C:\Windows\system32\pcalua.exe -a "E:\Ściągnięte\NBA LIVE 2004\NBA LIVE 2004\SetupReg.exe" -d "E:\Ściągnięte\NBA LIVE 2004\NBA LIVE 2004"
Task: {72C3D7C2-6EFE-4EED-8778-A66D91C812E4} - System32\Tasks\Opera scheduled assistant Autoupdate 1582795835 => C:\Program Files (x86)\Opera\launcher.exe [1333784 2020-04-29] (Opera Software AS -> Opera Software)
Task: {7C16C54B-11EB-4FA4-9BA1-90402652503C} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\AutoUpdate.exe [2369808 2020-03-06] (IObit Information Technology -> IObit)
Task: {8B28B085-0C9B-4D7A-AA8B-3223E5BD9756} - System32\Tasks\{DA000A0E-374A-49DF-B692-D6D904D9D5FE} => D:\Construction Simulator - Gold Edition\ConSim2015.exe [12701696 2015-11-14] () [Brak podpisu cyfrowego]
Task: {A44129ED-219D-43EE-A9ED-D8786D2D0516} - System32\Tasks\{58A2BB9F-8823-43D0-B58D-83AFEC2F2912} => C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe [4866135 2006-12-13] (Ahead Software AG) [Brak podpisu cyfrowego]
Task: {B64EFD69-75A5-47E1-B0EA-8D9C2B0DAA27} - System32\Tasks\Driver Booster SkipUAC (Ronaldo) => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\DriverBooster.exe [7892240 2020-03-12] (IObit Information Technology -> IObit)
Task: {C7558947-AB06-4F77-8267-F9C2A32D7D64} - System32\Tasks\Opera scheduled Autoupdate 1475396611 => C:\Program Files (x86)\Opera\launcher.exe [1333784 2020-04-29] (Opera Software AS -> Opera Software)
Task: {CE8EE683-C63C-4866-B3B2-DDCF736A798E} - System32\Tasks\{F58AFF90-41AA-4E06-9193-552B53162177} => C:\Windows\system32\pcalua.exe -a C:\Users\Ronaldo\Downloads\FM801\FM801\win2kxp\SETUP.EXE -d C:\Users\Ronaldo\Downloads\FM801\FM801\win2kxp
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.onet.pl/?utm_source=apgry&utm_medium=gra1&utm_campaign=onetsg_start_gry
HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-04-21] (McAfee, LLC -> McAfee, LLC)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-04-21] (McAfee, LLC -> McAfee, LLC)
FF user.js: detected! => C:\Users\Ronaldo\AppData\Roaming\Mozilla\Firefox\Profiles\12nsocpe.default\user.js [2020-01-10]
C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-04-21] [UpdateUrl:hxxps://www.siteadvisor.com/waffinstall/update.json]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Ronaldo\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi
FF Extension: (Ace Script) - C:\Users\Ronaldo\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2018-11-26]
CHR Notifications: Default -> hxxps://bittubeapp.com; hxxps://get.cryptobrowser.site; hxxps://www.ankiety-polityczne.pl
CHR DefaultSearchURL: Default -> hxxps://search.cryptosearch.site/?q={searchTerms}&category=web&f=ob
CHR DefaultSearchKeyword: Default -> CryptoSearch - Default Search
CHR DefaultSuggestURL: Default -> hxxps://cryptosearch.site/suggestions.php?q={searchTerms}
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]
CHR HKU\S-1-5-21-3193257133-4033208166-2561835286-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2020-01-19]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg]
C:\Users\Ronaldo\AppData\Roaming\Opera Software\Opera Stable\Extensions\keoanijiealjeplfaflkcgijnnflaine
OPR Extension: (MetaMask) - C:\Users\Ronaldo\AppData\Roaming\Opera Software\Opera Stable\Extensions\keoanijiealjeplfaflkcgijnnflaine [2019-09-06]
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [916712 2020-04-21] (McAfee, LLC -> McAfee, LLC)
U3 ant39360; C:\Windows\System32\Drivers\ant39360.sys [0 0000-00-00] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder)
U3 arw4l9kp; C:\Windows\System32\Drivers\arw4l9kp.sys [0 0000-00-00] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder)
2020-04-21 21:42 - 2020-04-21 21:42 - 000000000 ____D C:\ProgramData\McAfee
2020-04-21 21:42 - 2020-04-21 21:42 - 000000000 ____D C:\Program Files\McAfee
2020-05-05 11:50 - 2020-03-23 14:38 - 000003104 _____ C:\Windows\system32\Tasks\Driver Booster Scheduler
2020-05-05 11:50 - 2020-03-23 14:38 - 000003096 _____ C:\Windows\system32\Tasks\Driver Booster Update
2020-05-05 11:49 - 2020-03-23 14:38 - 000002852 _____ C:\Windows\system32\Tasks\Driver Booster SkipUAC (Ronaldo)
2017-06-22 19:18 - 2017-06-22 19:18 - 000016384 _____ () C:\Program Files (x86)\uik.dat
W FRST wybierz Napraw.
