robertbham

odinstalowane i wgrane na nowo. Wielkie dzieki za pomoc, a latwo nie bylo! Pozdrawiam

zobilem skan w Malwarebytes Anti-Malware i nie znaleziono zadnych bledów.

nareszcie po wielu probach i niestety moim bledzie bo wciaz przez pomylke fix.txt zapisywal mi sie tez w c windows ale sie udalo przesylam logi OTL.txt FSS.txt

cos musi byc nie tak wciaz to samo niestety! a jest mozliwy jakis inny wczesniejszy blad albo cos bo juz naprawde nie wiem

wszystko zrobilem wydaje mi sie jak nalezy, skopiowalem wszystko i dalej w cmd mam ta sama komende

jak chce zapisac ten plik fix.txt na C to pisze ze nie mam dostepu a i zapisuje w moich dokumentach i potem w cmd pisze ze setacl skonczone z bledami i backup/restore nie moze otworzyc. nie dam rady nie wiem czemu mam taki problem z tym setacl musze odpuscic i wrocic za jakis czas chyba.

no nie idzie cos, probuje go wstawic w c:\Windows ale nie chce sie wypakowac, jutro sprobuje.

cos nie udaje mi sie ta rekonstrukcja usług Zapory systemu Windows a dokladnie z tym SetACL.exe, probuje sie rozpakowac ale nie moge nigdzie tego nawet zapisac. Po wpisaniu komendy SetACL -on "HKLM\SYSTEM\CurrentControlSet\Services\BFE" -ot reg -actn restore -bckp C:\fix.txt wyskakuje: Set ACL is not recognized as an internal or external command, czyli jakby go w ogole nie bylo dolaczam logi ale nie wiem czy one w tym wypadku maja sens OTL.Txt FSS.txt

mam nadzieje tylko ze bedzie wszystko dzialac i nie zostalo juz duzo do zrobienia! SystemLook 30.07.11 by jpshortstuff Log created at 22:02 on 18/09/2012 by Robert Administrator - Elevation successful ========== reg ========== [HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}] (No values found) [HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32] "ThreadingModel"="Both" @="%SystemRoot%\system32\shell32.dll" ========== filefind ========== Searching for "services.exe" C:\Windows\System32\services.exe --a---- 328704 bytes [23:19 13/07/2009] [01:39 14/07/2009] 24ACB7E5BE595468E3B9AA488B9B4FCB C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe --a---- 328704 bytes [23:19 13/07/2009] [01:39 14/07/2009] 24ACB7E5BE595468E3B9AA488B9B4FCB -= EOF =- OTL.Txt AdwCleanerS1.txt

Log created at 18:22 on 18/09/2012 by Robert Administrator - Elevation successful ========== reg ========== [HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}] (No values found) [HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32] "ThreadingModel"="Both" @="%SystemRoot%\system32\shell32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}] @="Microsoft WBEM New Event Subsystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32] @="%systemroot%\system32\wbem\wbemess.dll" "ThreadingModel"="Both" ========== filefind ========== Searching for "services.exe" C:\Windows\System32\services.exe --a---- 328704 bytes [23:19 13/07/2009] [01:39 14/07/2009] 014A9CB92514E27C0107614DF764BC06 C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe --a---- 328704 bytes [23:19 13/07/2009] [01:39 14/07/2009] 24ACB7E5BE595468E3B9AA488B9B4FCB ========== dir ========== C:\Windows\assembly\GAC_32 - Parameters: "(none)" ---Files--- None found. ---Folders--- BDATunePIA d------ [07:46 14/07/2009] CustomMarshalers d------ [03:20 14/07/2009] ehexthost32 d------ [07:46 14/07/2009] ISymWrapper d------ [03:20 14/07/2009] mcstoredb d------ [07:46 14/07/2009] Microsoft.Ink d------ [05:32 14/07/2009] Microsoft.Interop.Security.AzRoles d------ [03:20 14/07/2009] Microsoft.Office.Access.BusinessDataCatalog d------ [21:53 09/07/2012] Microsoft.Office.BusinessData d------ [07:02 11/07/2012] Microsoft.Office.InfoPath.Client.Internal.Host.Interop d------ [21:53 09/07/2012] Microsoft.SharePoint.BusinessData.Administration.Client d------ [07:02 11/07/2012] Microsoft.Transactions.Bridge.Dtc d------ [05:32 14/07/2009] Microsoft.VisualStudio.Tools.Applications.InteropAdapter d------ [21:53 09/07/2012] Microsoft.Windows.Diagnosis.SDEngine d------ [05:32 14/07/2009] MSBuild d------ [05:32 14/07/2009] mscorlib d------ [03:20 14/07/2009] napcrypt d------ [03:20 14/07/2009] naphlpr d------ [03:20 14/07/2009] Policy.1.0.Microsoft.Ink d------ [05:32 14/07/2009] Policy.1.0.Microsoft.Interop.Security.AzRoles d------ [03:20 14/07/2009] Policy.1.2.Microsoft.Interop.Security.AzRoles d------ [03:20 14/07/2009] Policy.1.7.Microsoft.Ink d------ [05:32 14/07/2009] Policy.6.0.Microsoft.Ink d------ [05:32 14/07/2009] PresentationCore d------ [05:32 14/07/2009] System.Data d------ [03:20 14/07/2009] System.Data.OracleClient d------ [03:20 14/07/2009] System.EnterpriseServices d------ [03:20 14/07/2009] System.Printing d------ [05:32 14/07/2009] System.Transactions d------ [03:20 14/07/2009] System.Web d------ [03:20 14/07/2009] C:\Windows\assembly\GAC_64 - Parameters: "(none)" ---Files--- None found. ---Folders--- BDATunePIA d------ [07:46 14/07/2009] CustomMarshalers d------ [03:20 14/07/2009] ISymWrapper d------ [03:20 14/07/2009] mcstoredb d------ [07:46 14/07/2009] mcupdate d------ [07:46 14/07/2009] Mcx2Dvcs d------ [07:46 14/07/2009] Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop d------ [05:32 14/07/2009] Microsoft.Ink d------ [05:32 14/07/2009] Microsoft.Interop.Security.AzRoles d------ [03:20 14/07/2009] Microsoft.MediaCenter.Interop d------ [07:46 14/07/2009] Microsoft.MediaCenter.iTV.Media d------ [07:46 14/07/2009] Microsoft.MediaCenter.Mheg d------ [07:46 14/07/2009] Microsoft.MediaCenter.Playback d------ [07:46 14/07/2009] Microsoft.MediaCenter.TV.Tuners.Interop d------ [07:46 14/07/2009] Microsoft.Transactions.Bridge.Dtc d------ [05:32 14/07/2009] Microsoft.Windows.Diagnosis.SDEngine d------ [05:32 14/07/2009] MSBuild d------ [05:32 14/07/2009] mscorlib d------ [03:20 14/07/2009] napcrypt d------ [03:20 14/07/2009] naphlpr d------ [03:20 14/07/2009] Policy.1.0.Microsoft.Interop.Security.AzRoles d------ [03:20 14/07/2009] Policy.1.2.Microsoft.Interop.Security.AzRoles d------ [03:20 14/07/2009] Policy.6.0.Microsoft.Ink d------ [05:32 14/07/2009] PresentationCore d------ [05:32 14/07/2009] System.Data d------ [03:20 14/07/2009] System.Data.OracleClient d------ [03:20 14/07/2009] System.EnterpriseServices d------ [03:20 14/07/2009] System.Printing d------ [05:32 14/07/2009] System.Transactions d------ [03:20 14/07/2009] System.Web d------ [03:20 14/07/2009] C:\Windows\winsxs\Temp\PendingDeletes - Parameters: "(none)" ---Files--- $$DeleteMe.sortkey.nlp.01cc2f5d6b0b50f7.00f0 --a---- 262148 bytes [20:37 13/07/2009] [20:40 10/06/2009] $$DeleteMe.sortkey.nlp.01cc36028be2898f.0003 --a---- 262148 bytes [20:37 13/07/2009] [20:40 10/06/2009] $$DeleteMe.sorttbls.nlp.01cc2f5d6b042cd6.00ef --a---- 20320 bytes [20:37 13/07/2009] [20:40 10/06/2009] $$DeleteMe.sorttbls.nlp.01cc36028bd6a2ad.0002 --a---- 20320 bytes [20:37 13/07/2009] [20:40 10/06/2009] ---Folders--- None found. -= EOF =-

Farbar Service Scanner Version: 06-08-2012 Ran by Robert (administrator) on 18-09-2012 at 09:33:08 Running from "C:\Users\Robert\AppData\Local\Temp\Temporary Internet Files\Content.IE5\29LUNI71" Microsoft Windows 7 Home Premium Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo IP is accessible. Yahoo.com is accessible. IE proxy is enabled. Windows Firewall: ============= mpsdrv Service is not running. Checking service configuration: The start type of mpsdrv service is OK. The ImagePath of mpsdrv service is OK. MpsSvc Service is not running. Checking service configuration: Checking Start type: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist. Checking ImagePath: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist. Checking ServiceDll: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist. Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== Other Services: ============== Checking Start type of SharedAccess: ATTENTION!=====> Unable to retrieve start type of SharedAccess. The value does not exist. Checking ImagePath of SharedAccess: ATTENTION!=====> Unable to retrieve ImagePath of SharedAccess. The value does not exist. Checking ServiceDll of SharedAccess: ATTENTION!=====> Unable to retrieve ServiceDll of SharedAccess. The value does not exist. File Check: ======== C:\Windows\System32\nsisvc.dll => MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit C:\Windows\System32\dhcpcore.dll => MD5 is legit C:\Windows\System32\drivers\afd.sys => MD5 is legit C:\Windows\System32\drivers\tdx.sys => MD5 is legit C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit C:\Windows\System32\dnsrslvr.dll => MD5 is legit C:\Windows\System32\mpssvc.dll => MD5 is legit C:\Windows\System32\bfe.dll => MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit C:\Windows\System32\SDRSVC.dll => MD5 is legit C:\Windows\System32\vssvc.exe => MD5 is legit C:\Windows\System32\wscsvc.dll => MD5 is legit C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\System32\wuaueng.dll => MD5 is legit C:\Windows\System32\qmgr.dll => MD5 is legit C:\Windows\System32\es.dll => MD5 is legit C:\Windows\System32\cryptsvc.dll => MD5 is legit C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit C:\Windows\System32\ipnathlp.dll => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit **** End of log ****

prosze o pomoc w usunieciu tego pasozyta ukash juz nie daje rady. Results of screen317's Security Check version 0.99.51 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 9 ``````````````Antivirus/Firewall Check:`````````````` Windows Security Center service is not running! This report may not be accurate! WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Toolbar Cleaner 1.0 JavaFX 2.1.0 Java 6 Update 14 Java 7 Update 4 Java version out of Date! Adobe Reader 9 Adobe Reader out of Date! Google Chrome 21.0.1180.83 Google Chrome 21.0.1180.89 ````````Process Check: objlist.exe by Laurent```````` `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` OTL.Txt Extras.Txt