logo elektroda
logo elektroda
X
logo elektroda
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • ADVERTISEMENT
  • #2 18606849
    RADU23
    Moderator of Computers service
    Open notepad and paste the contents from the box:
    Quote:
    CloseProcesses:
    CreateRestorePoint:
    [HKLM] PoliciesExplorer: [NoLowDiskSpaceChecks] 1
    HKLM-policyExplorer: [NoResolveSearch] 1
    HKLM...PoliciesExplorer: [LinkResolveIgnoreLinkInfo] 1
    HKUS-1-5-21-3183177974-1760001010-1606559909-1000...`Run: [] => [X].
    HKU\S-1-5-21-3183177974-1760001010-1606559909-1000...\Run: [DriverMax_RESTART] => [X]
    GroupPolicy: Restrictions ? <==== NOTE
    Task: {AB55C631-4B79-4314-BD5A-5E1703F7542A} - System32TasksOpera scheduled Autoupdate 1586088302 => C:■■UsersAppData LocalProgramsOperalauncher.exe [1538584 2020-03-27] (Opera Software AS -> Opera Software).
    Tcpip\..\Interfaces\{3D205F20-D427-48DD-8F98-99443EC7A504}: [NameServer] 1.1.1.1,1.0.0.1
    Tcpip\..\Interfaces\{3D205F20-D427-48DD-8F98-99443EC7A504}: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{6BDEE535-07A6-4C26-B9AB-736E6A946B72}: [NameServer] 4.2.2.6,4.2.2.5
    Tcpip\..\Interfaces\{83FC9400-D651-4546-BF33-C0090A86CFF2}: [NameServer] 4.2.2.6,4.2.2.5
    Tcpip\..\Interfaces\{DB4E1A02-649D-4FA1-9C0D-FF5232B1C5B0}: [NameServer] 4.2.2.6,4.2.2.5
    Tcpip\..\Interfaces\{F7D875E7-8504-44BD-A838-89A272EE3E2F}: [NameServer] 10.100.0.1 10.150.0.1
    HKLM\SoftwareWow6432NodeMicrosoftInternet ExplorerMain,Search Page =.
    HKLM\SoftwareWow6432NodeMicrosoftInternet ExplorerMain,Default_Page_URL =.
    HKLM\SoftwareWow6432Node\Microsoft\Internet ExplorerMain,Default_Search_URL =.
    HKLM\Software\Node\NMicrosoft\NInternet ExplorerMain,Local Page =.
    HKLM\Software\Wow6432Node\Microsoft\Internet ExplorerMain,Local Page =
    HKU.DEFAULTSoftwareMicrosoftInternet ExplorerMain,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU.DEFAULT\SoftwareMicrosoftInternet ExplorerMain,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-3183177974-1760001010-1606559909-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\S-1-5-21-3183177974-1760001010-1606559909-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
    Handler: WSKVAllmytubechrome - CLSID value missing
    FF Plugin: @Microsoft.com/GENUINE -> disabled [File missing].
    FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:³³ Program Files (x86)³³Foxit Software³Foxit PhantomPDF Plugin.dll [File missing].
    FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:³³ Program Files (x86)³³Foxit Software³Foxit PhantomPDF plugins³FoxitPhantomPDFPlugin.dll [File missing].
    FF Plugin-x32: @Microsoft.com/GENUINE -> disabled [File missing].
    S3 fiddrv64; No ImagePath
    S0 qozysh; No ImagePath
    S3 catchme; > disabled [X].
    2020-04-05 13:05 - 2020-04-05 13:05 - 000004112 _____ C:Windows32Tasks scheduled Autoupdate 1586088302
    KMSpico (HKLM...{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
    ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No file available
    ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => No file available
    FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%system32sppsvc.exe No file available
    FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%system32sppsvc.exe No file.
    EmptyTemp:
    .
    Save the file under the name fixlist.txt and place in the folder where you have FRST.exe.
    Run FRST and click on Fix/Repair.
  • ADVERTISEMENT
  • #3 18606900
    apotoniec14
    Level 4  
    Many thanks...
    and I have a question about this program ... if e.g. in a month's time (just in case) the same problem occurs again, can I paste these files into the tex file you sent me, or does someone have to read the FRST scan again. and determine new other files
  • ADVERTISEMENT
  • #4 18606909
    RADU23
    Moderator of Computers service
    New logs should be posted.
    And for now, if it's ok, delete the C:\FRST folder and that's it.
  • #5 18606915
    apotoniec14
    Level 4  
    thank you very much
ADVERTISEMENT